@storyshelf/app 0.6.1 → 0.7.0

package/dist/routers/signed-storybook.mjs

@@ -0,0 +1,53 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore } from "../store.mjs";
+import { publishedAccess } from "./published-access.mjs";
+import { SIGNED_URL_HEADERS, publishedRelativePath, servePublishedFile } from "./published-files.mjs";
+import { STORYBOOK_TOKEN_PREFIX, storybookTokenPath, verifyStorybookToken } from "@storyshelf/core/utils";
+import { BuildModel, ProjectModel } from "@storyshelf/core/models";
+//#region src/routers/signed-storybook.ts
+/**
+* Signed Storybook URLs (ADR 0007, decision 5): `GET /_s/<token>/<file>` serves one build's static
+* Storybook files to a remote browser, with no session. The HMAC token is the only credential; it
+* names one project and one build and expires. The file itself is served by the same handler and
+* access policy as the other published routes (`published-files.ts`, `published-access.ts`).
+* Nothing else lives under `/_s/`: no wrapper page, no API, no other build, no listing.
+*/
+/** Register the signed-URL file route. */
+function registerSignedStorybook(app) {
+	app.get(`${STORYBOOK_TOKEN_PREFIX}:token/*`, async (c) => await serveSigned(c));
+}
+async function serveSigned(c) {
+	const token = c.req.param("token") ?? "";
+	const rel = publishedRelativePath(c.req.path, storybookTokenPath(token));
+	if (!rel) return refuse(c, "bad path");
+	return await serveGranted(c, token, rel) ?? refuse(c, "no such file");
+}
+/** The file the token grants as a response, or null (for the debug log only: why not). */
+async function serveGranted(c, token, rel) {
+	const { config, db } = getStore();
+	const verified = verifyStorybookToken(token, credentialKeys(config));
+	if (!verified.ok) return refuse(c, verified.reason);
+	const { projectId, buildId } = verified.claims;
+	const [project, build] = await Promise.all([new ProjectModel(db).get(projectId), new BuildModel(db).get(buildId)]);
+	const access = project && build ? await publishedAccess(build, project, verified.claims) : null;
+	if (access !== "token") return refuse(c, "unknown build");
+	return await servePublishedFile(c, {
+		projectId,
+		buildId,
+		rel,
+		access,
+		cacheControl: ""
+	});
+}
+/** The one answer for every refusal, so a caller cannot tell a bad signature from an expired token. */
+function refuse(c, reason) {
+	getStore().logger.debug({ reason }, "signed storybook request refused");
+	return c.text("Not found", 404, SIGNED_URL_HEADERS);
+}
+//#endregion
+export { registerSignedStorybook };
+
+//# sourceMappingURL=signed-storybook.mjs.map

package/dist/routers/signed-storybook.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-storybook.mjs","names":[],"sources":["../../src/routers/signed-storybook.ts"],"sourcesContent":["/**\n * Signed Storybook URLs (ADR 0007, decision 5): `GET /_s/<token>/<file>` serves one build's static\n * Storybook files to a remote browser, with no session. The HMAC token is the only credential; it\n * names one project and one build and expires. The file itself is served by the same handler and\n * access policy as the other published routes (`published-files.ts`, `published-access.ts`).\n * Nothing else lives under `/_s/`: no wrapper page, no API, no other build, no listing.\n */\nimport { BuildModel, ProjectModel } from \"@storyshelf/core/models\";\nimport {\n  STORYBOOK_TOKEN_PREFIX,\n  storybookTokenPath,\n  verifyStorybookToken,\n} from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport {\n  publishedRelativePath,\n  servePublishedFile,\n  SIGNED_URL_HEADERS,\n} from \"./published-files.ts\";\n\n/** Register the signed-URL file route. */\nexport function registerSignedStorybook(app: ShelfRouter): void {\n  app.get(`${STORYBOOK_TOKEN_PREFIX}:token/*`, async (c) => await serveSigned(c));\n}\n\nasync function serveSigned(c: Context): Promise<Response> {\n  const token = c.req.param(\"token\") ?? \"\";\n  const rel = publishedRelativePath(c.req.path, storybookTokenPath(token));\n  if (!rel) {\n    return refuse(c, \"bad path\");\n  }\n  return (await serveGranted(c, token, rel)) ?? refuse(c, \"no such file\");\n}\n\n/** The file the token grants as a response, or null (for the debug log only: why not). */\nasync function serveGranted(c: Context, token: string, rel: string): Promise<Response | null> {\n  const { config, db } = getStore();\n  const verified = verifyStorybookToken(token, credentialKeys(config));\n  if (!verified.ok) {\n    return refuse(c, verified.reason);\n  }\n  const { projectId, buildId } = verified.claims;\n  const [project, build] = await Promise.all([\n    new ProjectModel(db).get(projectId),\n    new BuildModel(db).get(buildId),\n  ]);\n  const access = project && build ? await publishedAccess(build, project, verified.claims) : null;\n  if (access !== \"token\") {\n    return refuse(c, \"unknown build\");\n  }\n  return await servePublishedFile(c, { projectId, buildId, rel, access, cacheControl: \"\" });\n}\n\n/** The one answer for every refusal, so a caller cannot tell a bad signature from an expired token. */\nfunction refuse(c: Context, reason: string): Response {\n  getStore().logger.debug({ reason }, \"signed storybook request refused\");\n  return c.text(\"Not found\", 404, SIGNED_URL_HEADERS);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyBA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,GAAG,uBAAuB,WAAW,OAAO,MAAM,MAAM,YAAY,CAAC,CAAC;AAChF;AAEA,eAAe,YAAY,GAA+B;CACxD,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;CACtC,MAAM,MAAM,sBAAsB,EAAE,IAAI,MAAM,mBAAmB,KAAK,CAAC;CACvE,IAAI,CAAC,KACH,OAAO,OAAO,GAAG,UAAU;CAE7B,OAAQ,MAAM,aAAa,GAAG,OAAO,GAAG,KAAM,OAAO,GAAG,cAAc;AACxE;;AAGA,eAAe,aAAa,GAAY,OAAe,KAAuC;CAC5F,MAAM,EAAE,QAAQ,OAAO,SAAS;CAChC,MAAM,WAAW,qBAAqB,OAAO,eAAe,MAAM,CAAC;CACnE,IAAI,CAAC,SAAS,IACZ,OAAO,OAAO,GAAG,SAAS,MAAM;CAElC,MAAM,EAAE,WAAW,YAAY,SAAS;CACxC,MAAM,CAAC,SAAS,SAAS,MAAM,QAAQ,IAAI,CACzC,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,GAClC,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO,CAChC,CAAC;CACD,MAAM,SAAS,WAAW,QAAQ,MAAM,gBAAgB,OAAO,SAAS,SAAS,MAAM,IAAI;CAC3F,IAAI,WAAW,SACb,OAAO,OAAO,GAAG,eAAe;CAElC,OAAO,MAAM,mBAAmB,GAAG;EAAE;EAAW;EAAS;EAAK;EAAQ,cAAc;CAAG,CAAC;AAC1F;;AAGA,SAAS,OAAO,GAAY,QAA0B;CACpD,SAAS,CAAC,CAAC,OAAO,MAAM,EAAE,OAAO,GAAG,kCAAkC;CACtE,OAAO,EAAE,KAAK,aAAa,KAAK,kBAAkB;AACpD"}

package/dist/routers/snapshot-groups.mjs

@@ -0,0 +1,63 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { notFound } from "./helpers.mjs";
+import { baselineChanged, findDriftedSnapshots, isOpenSnapshot } from "./baseline-guard.mjs";
+import { approveSnapshot, refreshBuild } from "./builds.handlers.mjs";
+import { SnapshotModel } from "@storyshelf/core/models";
+//#region src/routers/snapshot-groups.ts
+/** Shared (story, mode) review: one decision covers every browser's snapshot. */
+/** Identity of a review group: the same story and mode across engines. */
+function groupKey(snapshot) {
+	return `${snapshot.storyId}\u0000${snapshot.viewportName}`;
+}
+/** Open snapshots of one story/mode; 404 when the group has nothing left to decide. */
+async function openMembers(build, storyId, modeKey) {
+	const members = (await new SnapshotModel(getStore().db).listByBuild(build.id)).filter((snapshot) => snapshot.storyId === storyId && snapshot.viewportName === modeKey && isOpenSnapshot(snapshot));
+	if (members.length === 0) notFound("No open snapshots for this story and mode");
+	return members;
+}
+/**
+* Approve every open snapshot of a story/mode, promoting each engine's
+* baseline. All-or-nothing on drift: when any member's baseline moved and
+* `force` is off, nothing is written and the 409 names that snapshot.
+*
+* @returns The approved snapshot ids, primary engine first.
+*/
+async function approveGroup(project, build, target, userId, options = {}) {
+	const members = await openMembers(build, target.storyId, target.modeKey);
+	if (!options.force) {
+		const first = [...(await findDriftedSnapshots(project, build, members)).entries()][0];
+		if (first) throw baselineChanged(first[0], first[1]);
+	}
+	for (const member of members) await approveSnapshot(member.id, userId, {
+		force: options.force ?? false,
+		deferRefresh: true
+	});
+	await refreshBuild(build.id);
+	return members.map((member) => member.id);
+}
+/** Reject every open snapshot of a story/mode and refresh the build once. */
+async function rejectGroup(build, target, userId) {
+	const members = await openMembers(build, target.storyId, target.modeKey);
+	const snapshots = new SnapshotModel(getStore().db);
+	await Promise.all(members.map(async (member) => await snapshots.review(member.id, "rejected", userId)));
+	await refreshBuild(build.id);
+	return members.map((member) => member.id);
+}
+/**
+* Split open snapshots into approvable groups and groups skipped because some
+* member drifted (the whole group is skipped, never half-approved).
+*/
+function splitByDrift(open, drifted) {
+	const blocked = new Set(open.filter((s) => drifted.has(s.id)).map((s) => groupKey(s)));
+	return {
+		approvable: open.filter((s) => !blocked.has(groupKey(s))),
+		skipped: open.filter((s) => blocked.has(groupKey(s)))
+	};
+}
+//#endregion
+export { approveGroup, groupKey, rejectGroup, splitByDrift };
+
+//# sourceMappingURL=snapshot-groups.mjs.map

package/dist/routers/snapshot-groups.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-groups.mjs","names":[],"sources":["../../src/routers/snapshot-groups.ts"],"sourcesContent":["/** Shared (story, mode) review: one decision covers every browser's snapshot. */\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Build, Project, Snapshot } from \"@storyshelf/core/schema\";\nimport { getStore } from \"../store.ts\";\nimport { baselineChanged, findDriftedSnapshots, isOpenSnapshot } from \"./baseline-guard.ts\";\nimport { approveSnapshot, refreshBuild } from \"./builds.handlers.ts\";\nimport { notFound } from \"./helpers.ts\";\n\n/** Identity of a review group: the same story and mode across engines. */\nexport function groupKey(snapshot: Pick<Snapshot, \"storyId\" | \"viewportName\">): string {\n  return `${snapshot.storyId}\\u0000${snapshot.viewportName}`;\n}\n\n/** Open snapshots of one story/mode; 404 when the group has nothing left to decide. */\nasync function openMembers(build: Build, storyId: string, modeKey: string): Promise<Snapshot[]> {\n  const all = await new SnapshotModel(getStore().db).listByBuild(build.id);\n  const members = all.filter(\n    (snapshot) =>\n      snapshot.storyId === storyId && snapshot.viewportName === modeKey && isOpenSnapshot(snapshot),\n  );\n  if (members.length === 0) {\n    notFound(\"No open snapshots for this story and mode\");\n  }\n  return members;\n}\n\n/**\n * Approve every open snapshot of a story/mode, promoting each engine's\n * baseline. All-or-nothing on drift: when any member's baseline moved and\n * `force` is off, nothing is written and the 409 names that snapshot.\n *\n * @returns The approved snapshot ids, primary engine first.\n */\nexport async function approveGroup(\n  project: Project,\n  build: Build,\n  target: { storyId: string; modeKey: string },\n  userId: string | null,\n  options: { force?: boolean } = {},\n): Promise<string[]> {\n  const members = await openMembers(build, target.storyId, target.modeKey);\n  if (!options.force) {\n    const drifted = await findDriftedSnapshots(project, build, members);\n    const first = [...drifted.entries()][0];\n    if (first) {\n      throw baselineChanged(first[0], first[1]);\n    }\n  }\n  for (const member of members) {\n    // oxlint-disable-next-line no-await-in-loop -- baselines are promoted engine by engine\n    await approveSnapshot(member.id, userId, {\n      force: options.force ?? false,\n      deferRefresh: true,\n    });\n  }\n  await refreshBuild(build.id);\n  return members.map((member) => member.id);\n}\n\n/** Reject every open snapshot of a story/mode and refresh the build once. */\nexport async function rejectGroup(\n  build: Build,\n  target: { storyId: string; modeKey: string },\n  userId: string | null,\n): Promise<string[]> {\n  const members = await openMembers(build, target.storyId, target.modeKey);\n  const snapshots = new SnapshotModel(getStore().db);\n  await Promise.all(\n    members.map(async (member) => await snapshots.review(member.id, \"rejected\", userId)),\n  );\n  await refreshBuild(build.id);\n  return members.map((member) => member.id);\n}\n\n/**\n * Split open snapshots into approvable groups and groups skipped because some\n * member drifted (the whole group is skipped, never half-approved).\n */\nexport function splitByDrift(\n  open: Snapshot[],\n  drifted: ReadonlyMap<string, unknown>,\n): { approvable: Snapshot[]; skipped: Snapshot[] } {\n  const blocked = new Set(open.filter((s) => drifted.has(s.id)).map((s) => groupKey(s)));\n  return {\n    approvable: open.filter((s) => !blocked.has(groupKey(s))),\n    skipped: open.filter((s) => blocked.has(groupKey(s))),\n  };\n}\n"],"mappings":";;;;;;;;;;;AASA,SAAgB,SAAS,UAA8D;CACrF,OAAO,GAAG,SAAS,QAAQ,QAAQ,SAAS;AAC9C;;AAGA,eAAe,YAAY,OAAc,SAAiB,SAAsC;CAE9F,MAAM,WAAU,MADE,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,EAAA,CACnD,QACjB,aACC,SAAS,YAAY,WAAW,SAAS,iBAAiB,WAAW,eAAe,QAAQ,CAChG;CACA,IAAI,QAAQ,WAAW,GACrB,SAAS,2CAA2C;CAEtD,OAAO;AACT;;;;;;;;AASA,eAAsB,aACpB,SACA,OACA,QACA,QACA,UAA+B,CAAC,GACb;CACnB,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,SAAS,OAAO,OAAO;CACvE,IAAI,CAAC,QAAQ,OAAO;EAElB,MAAM,QAAQ,CAAC,IAAG,MADI,qBAAqB,SAAS,OAAO,OAAO,EAAA,CACxC,QAAQ,CAAC,CAAC,CAAC;EACrC,IAAI,OACF,MAAM,gBAAgB,MAAM,IAAI,MAAM,EAAE;CAE5C;CACA,KAAK,MAAM,UAAU,SAEnB,MAAM,gBAAgB,OAAO,IAAI,QAAQ;EACvC,OAAO,QAAQ,SAAS;EACxB,cAAc;CAChB,CAAC;CAEH,MAAM,aAAa,MAAM,EAAE;CAC3B,OAAO,QAAQ,KAAK,WAAW,OAAO,EAAE;AAC1C;;AAGA,eAAsB,YACpB,OACA,QACA,QACmB;CACnB,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,SAAS,OAAO,OAAO;CACvE,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE;CACjD,MAAM,QAAQ,IACZ,QAAQ,IAAI,OAAO,WAAW,MAAM,UAAU,OAAO,OAAO,IAAI,YAAY,MAAM,CAAC,CACrF;CACA,MAAM,aAAa,MAAM,EAAE;CAC3B,OAAO,QAAQ,KAAK,WAAW,OAAO,EAAE;AAC1C;;;;;AAMA,SAAgB,aACd,MACA,SACiD;CACjD,MAAM,UAAU,IAAI,IAAI,KAAK,QAAQ,MAAM,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,SAAS,CAAC,CAAC,CAAC;CACrF,OAAO;EACL,YAAY,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC;EACxD,SAAS,KAAK,QAAQ,MAAM,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC;CACtD;AACF"}

package/dist/routers/snapshots.mjs

@@ -2,13 +2,14 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
 import { hxRefresh, isHxRequest } from "./htmx.mjs";
 import { flashHx } from "./flash.mjs";
-import { resolveAuthorizedProject } from "./helpers.mjs";
-import { approveAllResultSchema, baselineChangedSchema, errorSchema, notFound, okSchema, rediffResultSchema, snapshotSchema, unauthorized } from "./schemas.mjs";
+import { approveAllResultSchema, baselineChangedSchema, errorSchema, groupDecisionResultSchema, notFound, okSchema, rediffResultSchema, snapshotSchema, unauthorized } from "./schemas.mjs";
 import { findDriftedSnapshots, isBaselineChanged, isOpenSnapshot } from "./baseline-guard.mjs";
 import { APPROVER_ROLES, VIEW_ROLES, approveSnapshot, buildForProject, refreshBuild, snapshotForBuild } from "./builds.handlers.mjs";
 import { hxAdvance } from "./review-next.mjs";
+import { approveGroup, rejectGroup, splitByDrift } from "./snapshot-groups.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { REDIFFABLE_BUILD_STATUSES, rediffBuild } from "@storyshelf/core/capture";
 import { SnapshotModel } from "@storyshelf/core/models";
@@ -95,6 +96,47 @@ const approveAllRoute = createRoute({
 		...notFound
 	}
 });
+const groupParams = z.object({
+	slug: z.string(),
+	buildId: z.string(),
+	storyId: z.string(),
+	modeKey: z.string()
+});
+const approveGroupRoute = createRoute({
+	method: "post",
+	tags: ["Review"],
+	summary: "Approve a story/mode across all browsers",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/approve",
+	request: {
+		params: groupParams,
+		query: z.object({ force: z.enum(["true", "false"]).optional() })
+	},
+	responses: {
+		200: {
+			content: { "application/json": { schema: groupDecisionResultSchema } },
+			description: "Every open snapshot of the story and mode approved and each engine's baseline promoted"
+		},
+		409: {
+			content: { "application/json": { schema: baselineChangedSchema } },
+			description: "A member's baseline changed after its diff; nothing was approved. Re-diff or pass force=true"
+		},
+		...notFound
+	}
+});
+const rejectGroupRoute = createRoute({
+	method: "post",
+	tags: ["Review"],
+	summary: "Reject a story/mode across all browsers",
+	path: "/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/reject",
+	request: { params: groupParams },
+	responses: {
+		200: {
+			content: { "application/json": { schema: groupDecisionResultSchema } },
+			description: "Every open snapshot of the story and mode rejected"
+		},
+		...notFound
+	}
+});
 const rediffRoute = createRoute({
 	method: "post",
 	tags: ["Review"],
@@ -191,15 +233,71 @@ function registerSnapshots(app) {
 		const userId = getStore().user?.id ?? null;
 		const forced = force === "true";
 		const drifted = forced ? /* @__PURE__ */ new Map() : await findDriftedSnapshots(project, build, snapshots);
-		await Promise.all(snapshots.filter((snapshot) => isOpenSnapshot(snapshot) && !drifted.has(snapshot.id)).map(async (snapshot) => {
-			await approveSnapshot(snapshot.id, userId, { force: forced });
+		const { approvable, skipped } = splitByDrift(snapshots.filter((snapshot) => isOpenSnapshot(snapshot)), drifted);
+		await Promise.all(approvable.map(async (snapshot) => {
+			await approveSnapshot(snapshot.id, userId, {
+				force: forced,
+				deferRefresh: true
+			});
 		}));
+		await refreshBuild(build.id);
 		hxRefresh(c);
 		return c.json({
 			ok: true,
-			skipped: [...drifted.keys()]
+			skipped: skipped.map((snapshot) => snapshot.id)
 		});
 	});
+	app.openapi(approveGroupRoute, async (c) => {
+		const { slug, buildId, storyId, modeKey } = c.req.valid("param");
+		const { force } = c.req.valid("query");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const userId = getStore().user?.id ?? null;
+		let snapshotIds;
+		try {
+			snapshotIds = await approveGroup(project, build, {
+				storyId,
+				modeKey
+			}, userId, { force: force === "true" });
+		} catch (error) {
+			if (!isHxRequest(c) || !isBaselineChanged(error)) throw error;
+			c.header("HX-Redirect", `/projects/${slug}/builds/${buildId}/diff`);
+			return c.json({
+				ok: true,
+				snapshotIds: []
+			}, 200);
+		}
+		const first = snapshotIds[0];
+		if (first) await hxAdvance(c, {
+			slug,
+			buildId,
+			snapshotId: first
+		});
+		return c.json({
+			ok: true,
+			snapshotIds
+		}, 200);
+	});
+	app.openapi(rejectGroupRoute, async (c) => {
+		const { slug, buildId, storyId, modeKey } = c.req.valid("param");
+		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);
+		const build = await buildForProject(project.id, buildId);
+		const userId = getStore().user?.id ?? null;
+		const snapshotIds = await rejectGroup(build, {
+			storyId,
+			modeKey
+		}, userId);
+		const first = snapshotIds[0];
+		if (first) await hxAdvance(c, {
+			slug,
+			buildId,
+			snapshotId: first
+		});
+		return c.json({
+			ok: true,
+			snapshotIds
+		}, 200);
+	});
 	app.openapi(rediffRoute, async (c) => {
 		const { slug, buildId } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);

package/dist/routers/snapshots.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { REDIFFABLE_BUILD_STATUSES, rediffBuild } from \"@storyshelf/core/capture\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { findDriftedSnapshots, isBaselineChanged, isOpenSnapshot } from \"./baseline-guard.ts\";\nimport {\n  VIEW_ROLES,\n  APPROVER_ROLES,\n  snapshotForBuild,\n  refreshBuild,\n  approveSnapshot,\n  buildForProject,\n} from \"./builds.handlers.ts\";\nimport { flashHx } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRefresh, isHxRequest } from \"./htmx.ts\";\nimport { hxAdvance } from \"./review-next.ts\";\nimport {\n  snapshotSchema,\n  okSchema,\n  approveAllResultSchema,\n  rediffResultSchema,\n  baselineChangedSchema,\n  errorSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Review\"],\n  summary: \"List snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: snapshotSchema.array() } },\n      description: \"List snapshots for a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot approved\",\n    },\n    409: {\n      content: { \"application/json\": { schema: baselineChangedSchema } },\n      description:\n        \"The baseline changed after this diff was computed; re-diff the build or pass force=true\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: approveAllResultSchema } },\n      description: \"Open snapshots approved; snapshots with a changed baseline are skipped\",\n    },\n    ...notFound,\n  },\n});\n\nconst rediffRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Re-diff against current baselines\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/rediff\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: rediffResultSchema } },\n      description:\n        \"Undecided snapshots re-diffed against the current baselines (no re-render). Decided snapshots are untouched.\",\n    },\n    400: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Default-branch builds are authoritative and are not re-diffed\",\n    },\n    409: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Build has not finished capturing or failed; retry capture instead\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots rejected\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the snapshot list, approve, reject, and bulk-review endpoints. */\nexport function registerSnapshots(app: ShelfRouter): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    try {\n      await approveSnapshot(snapshotId, userId, { force: force === \"true\" });\n    } catch (error) {\n      if (!isHxRequest(c) || !isBaselineChanged(error)) {\n        throw error;\n      }\n      // The review page recomputes staleness on load and offers re-diff / approve anyway.\n      c.header(\"HX-Redirect\", `/projects/${slug}/builds/${buildId}/diff?snapshot=${snapshotId}`);\n      return c.json({ ok: true }, 200);\n    }\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true }, 200);\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    const forced = force === \"true\";\n    const drifted = forced ? new Map() : await findDriftedSnapshots(project, build, snapshots);\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => isOpenSnapshot(snapshot) && !drifted.has(snapshot.id))\n        .map(async (snapshot) => {\n          await approveSnapshot(snapshot.id, userId, { force: forced });\n        }),\n    );\n    hxRefresh(c);\n    return c.json({ ok: true, skipped: [...drifted.keys()] });\n  });\n\n  app.openapi(rediffRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    if (build.isDefault) {\n      throw new HTTPException(400, { message: \"Default-branch builds are not re-diffed\" });\n    }\n    if (!REDIFFABLE_BUILD_STATUSES.has(build.status)) {\n      throw new HTTPException(409, {\n        message: `Build is ${build.status}; wait for capture to finish or retry capture`,\n      });\n    }\n    const { db, storage, logger } = getStore();\n    const result = await rediffBuild({ db, storage, logger }, project, build);\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    flashHx(c, \"Re-diffed against current baselines\");\n    return c.json({ ok: true, ...result }, 200);\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    return c.json({ ok: true });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA6BA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAClE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;GAAG,YAAY,EAAE,OAAO;EAAE,CAAC;EAClF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;GACjE,aACE;EACJ;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,uBAAuB,EAAE;GAClE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,IAAI;GACF,MAAM,gBAAgB,YAAY,QAAQ,EAAE,OAAO,UAAU,OAAO,CAAC;EACvE,SAAS,OAAO;GACd,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAC7C,MAAM;GAGR,EAAE,OAAO,eAAe,aAAa,KAAK,UAAU,QAAQ,iBAAiB,YAAY;GACzF,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;EACjC;EACA,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;CACjC,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,SAAS,UAAU;EACzB,MAAM,UAAU,yBAAS,IAAI,IAAI,IAAI,MAAM,qBAAqB,SAAS,OAAO,SAAS;EACzF,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,eAAe,QAAQ,KAAK,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAC3E,IAAI,OAAO,aAAa;GACvB,MAAM,gBAAgB,SAAS,IAAI,QAAQ,EAAE,OAAO,OAAO,CAAC;EAC9D,CAAC,CACL;EACA,UAAU,CAAC;EACX,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,CAAC,GAAG,QAAQ,KAAK,CAAC;EAAE,CAAC;CAC1D,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,IAAI,MAAM,WACR,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,0CAA0C,CAAC;EAErF,IAAI,CAAC,0BAA0B,IAAI,MAAM,MAAM,GAC7C,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,YAAY,MAAM,OAAO,+CACpC,CAAC;EAEH,MAAM,EAAE,IAAI,SAAS,WAAW,SAAS;EACzC,MAAM,SAAS,MAAM,YAAY;GAAE;GAAI;GAAS;EAAO,GAAG,SAAS,KAAK;EACxE,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,QAAQ,GAAG,qCAAqC;EAChD,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,GAAG;EAAO,GAAG,GAAG;CAC5C,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}
+{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { REDIFFABLE_BUILD_STATUSES, rediffBuild } from \"@storyshelf/core/capture\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { findDriftedSnapshots, isBaselineChanged, isOpenSnapshot } from \"./baseline-guard.ts\";\nimport {\n  VIEW_ROLES,\n  APPROVER_ROLES,\n  snapshotForBuild,\n  refreshBuild,\n  approveSnapshot,\n  buildForProject,\n} from \"./builds.handlers.ts\";\nimport { flashHx } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRefresh, isHxRequest } from \"./htmx.ts\";\nimport { hxAdvance } from \"./review-next.ts\";\nimport {\n  snapshotSchema,\n  okSchema,\n  approveAllResultSchema,\n  groupDecisionResultSchema,\n  rediffResultSchema,\n  baselineChangedSchema,\n  errorSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { approveGroup, rejectGroup, splitByDrift } from \"./snapshot-groups.ts\";\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Review\"],\n  summary: \"List snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: snapshotSchema.array() } },\n      description: \"List snapshots for a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot approved\",\n    },\n    409: {\n      content: { \"application/json\": { schema: baselineChangedSchema } },\n      description:\n        \"The baseline changed after this diff was computed; re-diff the build or pass force=true\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: approveAllResultSchema } },\n      description: \"Open snapshots approved; snapshots with a changed baseline are skipped\",\n    },\n    ...notFound,\n  },\n});\n\nconst groupParams = z.object({\n  slug: z.string(),\n  buildId: z.string(),\n  storyId: z.string(),\n  modeKey: z.string(),\n});\n\nconst approveGroupRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve a story/mode across all browsers\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/approve\",\n  request: {\n    params: groupParams,\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: groupDecisionResultSchema } },\n      description:\n        \"Every open snapshot of the story and mode approved and each engine's baseline promoted\",\n    },\n    409: {\n      content: { \"application/json\": { schema: baselineChangedSchema } },\n      description:\n        \"A member's baseline changed after its diff; nothing was approved. Re-diff or pass force=true\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectGroupRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject a story/mode across all browsers\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/reject\",\n  request: { params: groupParams },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: groupDecisionResultSchema } },\n      description: \"Every open snapshot of the story and mode rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst rediffRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Re-diff against current baselines\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/rediff\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: rediffResultSchema } },\n      description:\n        \"Undecided snapshots re-diffed against the current baselines (no re-render). Decided snapshots are untouched.\",\n    },\n    400: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Default-branch builds are authoritative and are not re-diffed\",\n    },\n    409: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Build has not finished capturing or failed; retry capture instead\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots rejected\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the snapshot list, approve, reject, and bulk-review endpoints. */\nexport function registerSnapshots(app: ShelfRouter): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    try {\n      await approveSnapshot(snapshotId, userId, { force: force === \"true\" });\n    } catch (error) {\n      if (!isHxRequest(c) || !isBaselineChanged(error)) {\n        throw error;\n      }\n      // The review page recomputes staleness on load and offers re-diff / approve anyway.\n      c.header(\"HX-Redirect\", `/projects/${slug}/builds/${buildId}/diff?snapshot=${snapshotId}`);\n      return c.json({ ok: true }, 200);\n    }\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true }, 200);\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    const forced = force === \"true\";\n    const drifted = forced ? new Map() : await findDriftedSnapshots(project, build, snapshots);\n    // A story/mode is approved on every engine or on none: one drifted member skips its group.\n    const { approvable, skipped } = splitByDrift(\n      snapshots.filter((snapshot) => isOpenSnapshot(snapshot)),\n      drifted,\n    );\n    await Promise.all(\n      approvable.map(async (snapshot) => {\n        await approveSnapshot(snapshot.id, userId, { force: forced, deferRefresh: true });\n      }),\n    );\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    return c.json({ ok: true, skipped: skipped.map((snapshot) => snapshot.id) });\n  });\n\n  app.openapi(approveGroupRoute, async (c) => {\n    const { slug, buildId, storyId, modeKey } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const userId = getStore().user?.id ?? null;\n    let snapshotIds: string[];\n    try {\n      snapshotIds = await approveGroup(project, build, { storyId, modeKey }, userId, {\n        force: force === \"true\",\n      });\n    } catch (error) {\n      if (!isHxRequest(c) || !isBaselineChanged(error)) {\n        throw error;\n      }\n      c.header(\"HX-Redirect\", `/projects/${slug}/builds/${buildId}/diff`);\n      return c.json({ ok: true, snapshotIds: [] }, 200);\n    }\n    const first = snapshotIds[0];\n    if (first) await hxAdvance(c, { slug, buildId, snapshotId: first });\n    return c.json({ ok: true, snapshotIds }, 200);\n  });\n\n  app.openapi(rejectGroupRoute, async (c) => {\n    const { slug, buildId, storyId, modeKey } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const userId = getStore().user?.id ?? null;\n    const snapshotIds = await rejectGroup(build, { storyId, modeKey }, userId);\n    const first = snapshotIds[0];\n    if (first) await hxAdvance(c, { slug, buildId, snapshotId: first });\n    return c.json({ ok: true, snapshotIds }, 200);\n  });\n\n  app.openapi(rediffRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    if (build.isDefault) {\n      throw new HTTPException(400, { message: \"Default-branch builds are not re-diffed\" });\n    }\n    if (!REDIFFABLE_BUILD_STATUSES.has(build.status)) {\n      throw new HTTPException(409, {\n        message: `Build is ${build.status}; wait for capture to finish or retry capture`,\n      });\n    }\n    const { db, storage, logger } = getStore();\n    const result = await rediffBuild({ db, storage, logger }, project, build);\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    flashHx(c, \"Re-diffed against current baselines\");\n    return c.json({ ok: true, ...result }, 200);\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    return c.json({ ok: true });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+BA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAClE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;GAAG,YAAY,EAAE,OAAO;EAAE,CAAC;EAClF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;GACjE,aACE;EACJ;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,uBAAuB,EAAE;GAClE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;CAC3B,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;AACpB,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ;EACR,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;GACjE,aACE;EACJ;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,YAAY;CAC/B,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,IAAI;GACF,MAAM,gBAAgB,YAAY,QAAQ,EAAE,OAAO,UAAU,OAAO,CAAC;EACvE,SAAS,OAAO;GACd,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAC7C,MAAM;GAGR,EAAE,OAAO,eAAe,aAAa,KAAK,UAAU,QAAQ,iBAAiB,YAAY;GACzF,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;EACjC;EACA,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;CACjC,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,SAAS,UAAU;EACzB,MAAM,UAAU,yBAAS,IAAI,IAAI,IAAI,MAAM,qBAAqB,SAAS,OAAO,SAAS;EAEzF,MAAM,EAAE,YAAY,YAAY,aAC9B,UAAU,QAAQ,aAAa,eAAe,QAAQ,CAAC,GACvD,OACF;EACA,MAAM,QAAQ,IACZ,WAAW,IAAI,OAAO,aAAa;GACjC,MAAM,gBAAgB,SAAS,IAAI,QAAQ;IAAE,OAAO;IAAQ,cAAc;GAAK,CAAC;EAClF,CAAC,CACH;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,QAAQ,KAAK,aAAa,SAAS,EAAE;EAAE,CAAC;CAC7E,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,SAAS,SAAS,YAAY,EAAE,IAAI,MAAM,OAAO;EAC/D,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,IAAI;EACJ,IAAI;GACF,cAAc,MAAM,aAAa,SAAS,OAAO;IAAE;IAAS;GAAQ,GAAG,QAAQ,EAC7E,OAAO,UAAU,OACnB,CAAC;EACH,SAAS,OAAO;GACd,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAC7C,MAAM;GAER,EAAE,OAAO,eAAe,aAAa,KAAK,UAAU,QAAQ,MAAM;GAClE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,aAAa,CAAC;GAAE,GAAG,GAAG;EAClD;EACA,MAAM,QAAQ,YAAY;EAC1B,IAAI,OAAO,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS,YAAY;EAAM,CAAC;EAClE,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM;EAAY,GAAG,GAAG;CAC9C,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,SAAS,SAAS,YAAY,EAAE,IAAI,MAAM,OAAO;EAC/D,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,cAAc,MAAM,YAAY,OAAO;GAAE;GAAS;EAAQ,GAAG,MAAM;EACzE,MAAM,QAAQ,YAAY;EAC1B,IAAI,OAAO,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS,YAAY;EAAM,CAAC;EAClE,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM;EAAY,GAAG,GAAG;CAC9C,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,IAAI,MAAM,WACR,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,0CAA0C,CAAC;EAErF,IAAI,CAAC,0BAA0B,IAAI,MAAM,MAAM,GAC7C,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,YAAY,MAAM,OAAO,+CACpC,CAAC;EAEH,MAAM,EAAE,IAAI,SAAS,WAAW,SAAS;EACzC,MAAM,SAAS,MAAM,YAAY;GAAE;GAAI;GAAS;EAAO,GAAG,SAAS,KAAK;EACxE,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,QAAQ,GAAG,qCAAqC;EAChD,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,GAAG;EAAO,GAAG,GAAG;CAC5C,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}

package/dist/routers/storybook.mjs

@@ -2,55 +2,19 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
-import { currentProjectRole, notFound } from "./helpers.mjs";
+import { notFound } from "./helpers.mjs";
+import { publishedAccess } from "./published-access.mjs";
+import { publishedRelativePath, servePublishedFile } from "./published-files.mjs";
 import { renderStorybookPage, renderStorybookPreparingPage } from "../pages/storybook.mjs";
-import { BuildModel, LabelModel, ProjectModel, isPublicBuild } from "@storyshelf/core/models";
-import { isSafeSegment, mimeFor, storybookDir } from "@storyshelf/core/utils";
+import { storybookDir } from "@storyshelf/core/utils";
+import { BuildModel, LabelModel, ProjectModel } from "@storyshelf/core/models";
 import { posix } from "node:path";
 //#region src/routers/storybook.ts
-const VIEW_ROLES = /* @__PURE__ */ new Set([
-	"viewer",
-	"developer",
-	"approver",
-	"admin"
-]);
-function contentTypeFor(path) {
-	return mimeFor(path);
-}
-/**
-* Decide whether the current request may view `build`'s published Storybook.
-*
-* Public builds (ADR 0011) are viewable without auth; every other build requires
-* a logged-in session with at least `viewer` membership on the project.
-*/
-async function canViewBuild(build, project) {
-	if (isPublicBuild(project, build)) return true;
-	const { authEnabled } = getStore();
-	if (!authEnabled) return true;
-	const role = await currentProjectRole(project.id);
-	return Boolean(role && VIEW_ROLES.has(role));
-}
 /** Check whether a build's extracted statics are available for serving. */
 async function staticsReady(projectId, buildId) {
 	if (await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), "manifest.json"))) return true;
 	return await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), "iframe.html"));
 }
-async function readWithManifestFallback(projectId, buildId, rel) {
-	try {
-		const manifestPath = posix.join(storybookDir(projectId, buildId), "manifest.json");
-		if (await getStore().storage.exists(manifestPath)) {
-			const manifestRaw = await getStore().storage.read(manifestPath);
-			const hash = JSON.parse(manifestRaw.toString("utf8"))[rel];
-			if (hash) {
-				const contentPath = `content/${hash}`;
-				if (await getStore().storage.exists(contentPath)) return await getStore().storage.read(contentPath);
-			}
-		}
-	} catch {}
-	const legacyPath = posix.join(storybookDir(projectId, buildId), rel);
-	if (await getStore().storage.exists(legacyPath)) return await getStore().storage.read(legacyPath);
-	return null;
-}
 /** Register the published Storybook resolver and static-asset routes. */
 function registerStorybook(app) {
 	app.get("/_", (c) => c.redirect("/", 302));
@@ -61,7 +25,7 @@ function registerStorybook(app) {
 		if (!project) notFound("Project not found");
 		const build = await new BuildModel(getStore().db).latestApprovedDefault(project);
 		if (!build) notFound("No approved build on the default branch yet");
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
+		if (!await publishedAccess(build, project)) return c.redirect("/auth/login", 302);
 		return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);
 	});
 	app.get("/projects/:slug/storybook/:key/:value", async (c) => {
@@ -74,7 +38,7 @@ function registerStorybook(app) {
 		const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);
 		if (!buildId) notFound("No build carries that label");
 		const build = await new BuildModel(getStore().db).get(buildId);
-		if (!build || !await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
+		if (!build || !await publishedAccess(build, project)) return c.redirect("/auth/login", 302);
 		return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);
 	});
 	app.get("/_/:id", async (c) => {
@@ -87,14 +51,8 @@ function registerStorybook(app) {
 	app.get("/_/:id/*", async (c) => {
 		const id = c.req.param("id");
 		const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);
-		const base = `/_/${id}/`;
-		if (!c.req.path.startsWith(base)) return c.notFound();
-		let rest;
-		try {
-			rest = decodeURIComponent(c.req.path.slice(base.length));
-		} catch {
-			return c.notFound();
-		}
+		const rest = publishedRelativePath(c.req.path, `/_/${id}/`);
+		if (rest === null) return c.notFound();
 		let project = null;
 		let build = null;
 		if (isUlid26) {
@@ -108,45 +66,31 @@ function registerStorybook(app) {
 			build = await new BuildModel(getStore().db).latestApprovedDefault(project);
 			if (!build) return c.notFound();
 		}
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
-		if (rest === "") {
-			if (!await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);
-			const buffer = await readWithManifestFallback(project.id, build.id, "index.html");
-			if (!buffer) return c.redirect(isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`, 302);
-			const cacheControl = isUlid26 ? "public, max-age=31536000, immutable" : "public, max-age=60";
-			return c.body(new Uint8Array(buffer), 200, {
-				"content-type": "text/html; charset=utf-8",
-				"cache-control": cacheControl
-			});
-		}
-		if (rest.split("/").some((segment) => !isSafeSegment(segment))) return c.notFound();
-		const buffer = await readWithManifestFallback(project.id, build.id, rest);
-		if (!buffer) {
-			if (rest === "index.html") return c.redirect(isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`, 302);
-			return c.notFound();
-		}
-		const cacheControl = isUlid26 ? "public, max-age=31536000, immutable" : "public, max-age=3600";
-		return c.body(new Uint8Array(buffer), 200, {
-			"content-type": contentTypeFor(rest),
-			"cache-control": cacheControl
+		const access = await publishedAccess(build, project);
+		if (!access) return c.redirect("/auth/login", 302);
+		if (rest === "" && !await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);
+		const fallback = isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`;
+		const served = await servePublishedFile(c, {
+			projectId: project.id,
+			buildId: build.id,
+			rel: rest === "" ? "index.html" : rest,
+			access,
+			cacheControl: shortLinkCache(isUlid26, rest === "")
 		});
+		if (served) return served;
+		return rest === "" || rest === "index.html" ? c.redirect(fallback, 302) : c.notFound();
 	});
 	app.get("/projects/:slug/storybook/build/:buildId/*", async (c) => {
 		const slug = c.req.param("slug");
 		const buildId = c.req.param("buildId");
-		const base = `/projects/${slug}/storybook/build/${buildId}/`;
-		if (!c.req.path.startsWith(base)) return c.notFound();
-		let rest;
-		try {
-			rest = decodeURIComponent(c.req.path.slice(base.length));
-		} catch {
-			return c.notFound();
-		}
+		const rest = publishedRelativePath(c.req.path, `/projects/${slug}/storybook/build/${buildId}/`);
+		if (rest === null) return c.notFound();
 		const project = await new ProjectModel(getStore().db).getBySlug(slug);
 		if (!project) notFound("Project not found");
 		const build = await new BuildModel(getStore().db).get(buildId);
 		if (!build || build.projectId !== project.id) notFound("Build not found");
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
+		const access = await publishedAccess(build, project);
+		if (!access) return c.redirect("/auth/login", 302);
 		if (rest === "") {
 			if (!await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, slug), 200);
 			const storyId = c.req.query("storyId") ?? c.req.query("id") ?? void 0;
@@ -156,15 +100,20 @@ function registerStorybook(app) {
 				viewMode
 			}), 200);
 		}
-		if (rest.split("/").some((segment) => !isSafeSegment(segment))) return c.notFound();
-		const buffer = await readWithManifestFallback(project.id, build.id, rest);
-		if (!buffer) return c.notFound();
-		return c.body(new Uint8Array(buffer), 200, {
-			"content-type": contentTypeFor(rest),
-			"cache-control": "public, max-age=31536000, immutable"
-		});
+		return await servePublishedFile(c, {
+			projectId: project.id,
+			buildId: build.id,
+			rel: rest,
+			access,
+			cacheControl: "public, max-age=31536000, immutable"
+		}) ?? c.notFound();
 	});
 }
+/** Cache policy of the short link: a ULID names one build forever; a slug follows the latest. */
+function shortLinkCache(isUlid26, isRoot) {
+	if (isUlid26) return "public, max-age=31536000, immutable";
+	return isRoot ? "public, max-age=60" : "public, max-age=3600";
+}
 //#endregion
 export { registerStorybook };
 

package/dist/routers/storybook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { isPublicBuild, BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { isSafeSegment, mimeFor, storybookDir } from \"@storyshelf/core/utils\";\nimport { posix } from \"node:path\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { currentProjectRole, notFound } from \"./helpers.ts\";\nconst VIEW_ROLES: ReadonlySet<string> = new Set([\"viewer\", \"developer\", \"approver\", \"admin\"]);\n\nfunction contentTypeFor(path: string): string {\n  return mimeFor(path);\n}\n\n/**\n * Decide whether the current request may view `build`'s published Storybook.\n *\n * Public builds (ADR 0011) are viewable without auth; every other build requires\n * a logged-in session with at least `viewer` membership on the project.\n */\nasync function canViewBuild(\n  build: Pick<Build, \"public\" | \"gitBranch\">,\n  project: Project,\n): Promise<boolean> {\n  if (isPublicBuild(project, build)) {\n    return true;\n  }\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const role = await currentProjectRole(project.id);\n  return Boolean(role && VIEW_ROLES.has(role));\n}\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  // New path: manifest.json indicates content-addressed storage; fallback to legacy iframe.html\n  if (\n    await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), \"manifest.json\"))\n  ) {\n    return true;\n  }\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\nasync function readWithManifestFallback(\n  projectId: string,\n  buildId: string,\n  rel: string,\n): Promise<Buffer | null> {\n  // Try manifest indirection first (content-addressed)\n  try {\n    const manifestPath = posix.join(storybookDir(projectId, buildId), \"manifest.json\");\n    if (await getStore().storage.exists(manifestPath)) {\n      const manifestRaw = await getStore().storage.read(manifestPath);\n      const manifest = JSON.parse(manifestRaw.toString(\"utf8\")) as Record<string, string>;\n      const hash = manifest[rel];\n      if (hash) {\n        const contentPath = `content/${hash}`;\n        if (await getStore().storage.exists(contentPath)) {\n          return await getStore().storage.read(contentPath);\n        }\n      }\n    }\n  } catch {\n    // ignore — manifest may not exist for old builds\n  }\n  // Fallback to legacy per-build path\n  const legacyPath = posix.join(storybookDir(projectId, buildId), rel);\n  if (await getStore().storage.exists(legacyPath)) {\n    return await getStore().storage.read(legacyPath);\n  }\n  return null;\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfRouter): void {\n  app.get(\"/_\", (c) => c.redirect(\"/\", 302));\n  app.get(\"/_/\", (c) => c.redirect(\"/\", 302));\n\n  // Resolver: latest approved build on the default branch (never feature branches).\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n    if (!build) {\n      notFound(\"No approved build on the default branch yet\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Short link canonical is /_/:id/ with trailing slash (so relative ./sb-manager/... resolves).\n  // 26-char ULID → that exact build, whatever its status (visibility check only).\n  // Any other id → project slug → latest approved build on the default branch, else 404\n  // (no fallback to feature-branch or unreviewed builds). No fall-through on ULID.\n  app.get(\"/_/:id\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    if (isUlid26) {\n      const build = await new BuildModel(getStore().db).get(id);\n      if (!build) notFound();\n    } else {\n      const project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) notFound();\n    }\n    return c.redirect(`/_/${id}/`, 302);\n  });\n\n  app.get(\"/_/:id/*\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    const base = `/_/${id}/`;\n    if (!c.req.path.startsWith(base)) return c.notFound();\n    let rest: string;\n    try {\n      rest = decodeURIComponent(c.req.path.slice(base.length));\n    } catch {\n      return c.notFound();\n    }\n    let project: Project | null = null;\n    let build: Build | null = null;\n    if (isUlid26) {\n      build = await new BuildModel(getStore().db).get(id);\n      if (!build) return c.notFound();\n      project = await new ProjectModel(getStore().db).get(build.projectId);\n      if (!project) return c.notFound();\n    } else {\n      project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) return c.notFound();\n      build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n      if (!build) return c.notFound();\n    }\n    if (!(await canViewBuild(build, project))) return c.redirect(\"/auth/login\", 302);\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);\n      }\n      const buffer = await readWithManifestFallback(project.id, build.id, \"index.html\");\n      if (!buffer) {\n        return c.redirect(\n          isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`,\n          302,\n        );\n      }\n      const cacheControl = isUlid26 ? \"public, max-age=31536000, immutable\" : \"public, max-age=60\";\n      return c.body(new Uint8Array(buffer), 200, {\n        \"content-type\": \"text/html; charset=utf-8\",\n        \"cache-control\": cacheControl,\n      });\n    }\n    const segments = rest.split(\"/\");\n    if (segments.some((segment) => !isSafeSegment(segment))) return c.notFound();\n    const buffer = await readWithManifestFallback(project.id, build.id, rest);\n    if (!buffer) {\n      if (rest === \"index.html\") {\n        return c.redirect(\n          isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`,\n          302,\n        );\n      }\n      return c.notFound();\n    }\n    const cacheControl = isUlid26 ? \"public, max-age=31536000, immutable\" : \"public, max-age=3600\";\n    return c.body(new Uint8Array(buffer), 200, {\n      \"content-type\": contentTypeFor(rest),\n      \"cache-control\": cacheControl,\n    });\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const base = `/projects/${slug}/storybook/build/${buildId}/`;\n    if (!c.req.path.startsWith(base)) {\n      return c.notFound();\n    }\n    let rest: string;\n    try {\n      rest = decodeURIComponent(c.req.path.slice(base.length));\n    } catch {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      const storyId = c.req.query(\"storyId\") ?? c.req.query(\"id\") ?? undefined;\n      const viewMode = c.req.query(\"viewMode\") === \"docs\" ? \"docs\" : undefined;\n      return c.html(renderStorybookPage(project, build, slug, { storyId, viewMode }), 200);\n    }\n\n    const segments = rest.split(\"/\");\n    if (segments.some((segment) => !isSafeSegment(segment))) {\n      return c.notFound();\n    }\n    const buffer = await readWithManifestFallback(project.id, build.id, rest);\n    if (!buffer) return c.notFound();\n    return c.body(new Uint8Array(buffer), 200, {\n      \"content-type\": contentTypeFor(rest),\n      \"cache-control\": \"public, max-age=31536000, immutable\",\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;AAWA,MAAM,6BAAkC,IAAI,IAAI;CAAC;CAAU;CAAa;CAAY;AAAO,CAAC;AAE5F,SAAS,eAAe,MAAsB;CAC5C,OAAO,QAAQ,IAAI;AACrB;;;;;;;AAQA,eAAe,aACb,OACA,SACkB;CAClB,IAAI,cAAc,SAAS,KAAK,GAC9B,OAAO;CAET,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,OAAO,MAAM,mBAAmB,QAAQ,EAAE;CAChD,OAAO,QAAQ,QAAQ,WAAW,IAAI,IAAI,CAAC;AAC7C;;AAGA,eAAe,aAAa,WAAmB,SAAmC;CAEhF,IACE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe,CAAC,GAE7F,OAAO;CAET,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;AAEA,eAAe,yBACb,WACA,SACA,KACwB;CAExB,IAAI;EACF,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe;EACjF,IAAI,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,YAAY,GAAG;GACjD,MAAM,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,YAAY;GAE9D,MAAM,OADW,KAAK,MAAM,YAAY,SAAS,MAAM,CACnC,CAAC,CAAC;GACtB,IAAI,MAAM;IACR,MAAM,cAAc,WAAW;IAC/B,IAAI,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,WAAW,GAC7C,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,WAAW;GAEpD;EACF;CACF,QAAQ,CAER;CAEA,MAAM,aAAa,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,GAAG;CACnE,IAAI,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,UAAU,GAC5C,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,UAAU;CAEjD,OAAO;AACT;;AAGA,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CACzC,IAAI,IAAI,QAAQ,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CAG1C,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;EAC/E,IAAI,CAAC,OACH,SAAS,6CAA6C;EAExD,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,aAAa,OAAO,OAAO,GAC/C,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAMD,IAAI,IAAI,UAAU,OAAO,MAAM;EAC7B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAE3B,IADiB,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE,GAGvE;OAAA,CAAC,MADe,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAC5C,SAAS;EAAA,OAGrB,IAAI,CAAC,MADiB,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GACpD,SAAS;EAEzB,OAAO,EAAE,SAAS,MAAM,GAAG,IAAI,GAAG;CACpC,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,MAAM,WAAW,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE;EAC7E,MAAM,OAAO,MAAM,GAAG;EACtB,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,IAAI,GAAG,OAAO,EAAE,SAAS;EACpD,IAAI;EACJ,IAAI;GACF,OAAO,mBAAmB,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC;EACzD,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,IAAI,UAA0B;EAC9B,IAAI,QAAsB;EAC1B,IAAI,UAAU;GACZ,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;GAClD,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;GAC9B,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;GACnE,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;EAClC,OAAO;GACL,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE;GAC5D,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;GAChC,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;GACzE,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;EAChC;EACA,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GAAI,OAAO,EAAE,SAAS,eAAe,GAAG;EAC/E,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,QAAQ,IAAI,GAAG,GAAG;GAE/E,MAAM,SAAS,MAAM,yBAAyB,QAAQ,IAAI,MAAM,IAAI,YAAY;GAChF,IAAI,CAAC,QACH,OAAO,EAAE,SACP,WAAW,aAAa,QAAQ,KAAK,UAAU,MAAM,OAAO,aAAa,QAAQ,QACjF,GACF;GAEF,MAAM,eAAe,WAAW,wCAAwC;GACxE,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;IACzC,gBAAgB;IAChB,iBAAiB;GACnB,CAAC;EACH;EAEA,IADiB,KAAK,MAAM,GACjB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,OAAO,CAAC,GAAG,OAAO,EAAE,SAAS;EAC3E,MAAM,SAAS,MAAM,yBAAyB,QAAQ,IAAI,MAAM,IAAI,IAAI;EACxE,IAAI,CAAC,QAAQ;GACX,IAAI,SAAS,cACX,OAAO,EAAE,SACP,WAAW,aAAa,QAAQ,KAAK,UAAU,MAAM,OAAO,aAAa,QAAQ,QACjF,GACF;GAEF,OAAO,EAAE,SAAS;EACpB;EACA,MAAM,eAAe,WAAW,wCAAwC;EACxE,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;GACzC,gBAAgB,eAAe,IAAI;GACnC,iBAAiB;EACnB,CAAC;CACH,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,aAAa,KAAK,mBAAmB,QAAQ;EAC1D,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,IAAI,GAC7B,OAAO,EAAE,SAAS;EAEpB,IAAI;EACJ,IAAI;GACF,OAAO,mBAAmB,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC;EACzD,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE,IAAI,MAAM,IAAI,KAAK,KAAA;GAC/D,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU,MAAM,SAAS,SAAS,KAAA;GAC/D,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,MAAM;IAAE;IAAS;GAAS,CAAC,GAAG,GAAG;EACrF;EAGA,IADiB,KAAK,MAAM,GACjB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,OAAO,CAAC,GACpD,OAAO,EAAE,SAAS;EAEpB,MAAM,SAAS,MAAM,yBAAyB,QAAQ,IAAI,MAAM,IAAI,IAAI;EACxE,IAAI,CAAC,QAAQ,OAAO,EAAE,SAAS;EAC/B,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;GACzC,gBAAgB,eAAe,IAAI;GACnC,iBAAiB;EACnB,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { storybookDir } from \"@storyshelf/core/utils\";\nimport { posix } from \"node:path\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport { publishedRelativePath, servePublishedFile } from \"./published-files.ts\";\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  // New path: manifest.json indicates content-addressed storage; fallback to legacy iframe.html\n  if (\n    await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), \"manifest.json\"))\n  ) {\n    return true;\n  }\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfRouter): void {\n  app.get(\"/_\", (c) => c.redirect(\"/\", 302));\n  app.get(\"/_/\", (c) => c.redirect(\"/\", 302));\n\n  // Resolver: latest approved build on the default branch (never feature branches).\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n    if (!build) {\n      notFound(\"No approved build on the default branch yet\");\n    }\n    if (!(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Short link canonical is /_/:id/ with trailing slash (so relative ./sb-manager/... resolves).\n  // 26-char ULID → that exact build, whatever its status (visibility check only).\n  // Any other id → project slug → latest approved build on the default branch, else 404\n  // (no fallback to feature-branch or unreviewed builds). No fall-through on ULID.\n  app.get(\"/_/:id\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    if (isUlid26) {\n      const build = await new BuildModel(getStore().db).get(id);\n      if (!build) notFound();\n    } else {\n      const project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) notFound();\n    }\n    return c.redirect(`/_/${id}/`, 302);\n  });\n\n  app.get(\"/_/:id/*\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    const rest = publishedRelativePath(c.req.path, `/_/${id}/`);\n    if (rest === null) return c.notFound();\n    let project: Project | null = null;\n    let build: Build | null = null;\n    if (isUlid26) {\n      build = await new BuildModel(getStore().db).get(id);\n      if (!build) return c.notFound();\n      project = await new ProjectModel(getStore().db).get(build.projectId);\n      if (!project) return c.notFound();\n    } else {\n      project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) return c.notFound();\n      build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n      if (!build) return c.notFound();\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) return c.redirect(\"/auth/login\", 302);\n    if (rest === \"\" && !(await staticsReady(project.id, build.id))) {\n      return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);\n    }\n    const fallback = isUlid26\n      ? `/projects/${project.slug}/builds/${build.id}`\n      : `/projects/${project.slug}`;\n    const served = await servePublishedFile(c, {\n      projectId: project.id,\n      buildId: build.id,\n      rel: rest === \"\" ? \"index.html\" : rest,\n      access,\n      cacheControl: shortLinkCache(isUlid26, rest === \"\"),\n    });\n    if (served) return served;\n    return rest === \"\" || rest === \"index.html\" ? c.redirect(fallback, 302) : c.notFound();\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const rest = publishedRelativePath(c.req.path, `/projects/${slug}/storybook/build/${buildId}/`);\n    if (rest === null) {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      const storyId = c.req.query(\"storyId\") ?? c.req.query(\"id\") ?? undefined;\n      const viewMode = c.req.query(\"viewMode\") === \"docs\" ? \"docs\" : undefined;\n      return c.html(renderStorybookPage(project, build, slug, { storyId, viewMode }), 200);\n    }\n\n    return (\n      (await servePublishedFile(c, {\n        projectId: project.id,\n        buildId: build.id,\n        rel: rest,\n        access,\n        cacheControl: \"public, max-age=31536000, immutable\",\n      })) ?? c.notFound()\n    );\n  });\n}\n\n/** Cache policy of the short link: a ULID names one build forever; a slug follows the latest. */\nfunction shortLinkCache(isUlid26: boolean, isRoot: boolean): string {\n  if (isUlid26) {\n    return \"public, max-age=31536000, immutable\";\n  }\n  return isRoot ? \"public, max-age=60\" : \"public, max-age=3600\";\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,eAAe,aAAa,WAAmB,SAAmC;CAEhF,IACE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe,CAAC,GAE7F,OAAO;CAET,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;;AAGA,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CACzC,IAAI,IAAI,QAAQ,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CAG1C,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;EAC/E,IAAI,CAAC,OACH,SAAS,6CAA6C;EAExD,IAAI,CAAE,MAAM,gBAAgB,OAAO,OAAO,GACxC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,gBAAgB,OAAO,OAAO,GAClD,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAMD,IAAI,IAAI,UAAU,OAAO,MAAM;EAC7B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAE3B,IADiB,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE,GAGvE;OAAA,CAAC,MADe,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAC5C,SAAS;EAAA,OAGrB,IAAI,CAAC,MADiB,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GACpD,SAAS;EAEzB,OAAO,EAAE,SAAS,MAAM,GAAG,IAAI,GAAG;CACpC,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,MAAM,WAAW,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE;EAC7E,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE;EAC1D,IAAI,SAAS,MAAM,OAAO,EAAE,SAAS;EACrC,IAAI,UAA0B;EAC9B,IAAI,QAAsB;EAC1B,IAAI,UAAU;GACZ,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;GAClD,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;GAC9B,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;GACnE,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;EAClC,OAAO;GACL,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE;GAC5D,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;GAChC,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;GACzE,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;EAChC;EACA,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QAAQ,OAAO,EAAE,SAAS,eAAe,GAAG;EACjD,IAAI,SAAS,MAAM,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC1D,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,QAAQ,IAAI,GAAG,GAAG;EAE/E,MAAM,WAAW,WACb,aAAa,QAAQ,KAAK,UAAU,MAAM,OAC1C,aAAa,QAAQ;EACzB,MAAM,SAAS,MAAM,mBAAmB,GAAG;GACzC,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK,SAAS,KAAK,eAAe;GAClC;GACA,cAAc,eAAe,UAAU,SAAS,EAAE;EACpD,CAAC;EACD,IAAI,QAAQ,OAAO;EACnB,OAAO,SAAS,MAAM,SAAS,eAAe,EAAE,SAAS,UAAU,GAAG,IAAI,EAAE,SAAS;CACvF,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,aAAa,KAAK,mBAAmB,QAAQ,EAAE;EAC9F,IAAI,SAAS,MACX,OAAO,EAAE,SAAS;EAEpB,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE,IAAI,MAAM,IAAI,KAAK,KAAA;GAC/D,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU,MAAM,SAAS,SAAS,KAAA;GAC/D,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,MAAM;IAAE;IAAS;GAAS,CAAC,GAAG,GAAG;EACrF;EAEA,OACG,MAAM,mBAAmB,GAAG;GAC3B,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK;GACL;GACA,cAAc;EAChB,CAAC,KAAM,EAAE,SAAS;CAEtB,CAAC;AACH;;AAGA,SAAS,eAAe,UAAmB,QAAyB;CAClE,IAAI,UACF,OAAO;CAET,OAAO,SAAS,uBAAuB;AACzC"}