@storyshelf/app 0.6.2 → 0.7.0

package/dist/routers/snapshots.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { REDIFFABLE_BUILD_STATUSES, rediffBuild } from \"@storyshelf/core/capture\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { findDriftedSnapshots, isBaselineChanged, isOpenSnapshot } from \"./baseline-guard.ts\";\nimport {\n  VIEW_ROLES,\n  APPROVER_ROLES,\n  snapshotForBuild,\n  refreshBuild,\n  approveSnapshot,\n  buildForProject,\n} from \"./builds.handlers.ts\";\nimport { flashHx } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRefresh, isHxRequest } from \"./htmx.ts\";\nimport { hxAdvance } from \"./review-next.ts\";\nimport {\n  snapshotSchema,\n  okSchema,\n  approveAllResultSchema,\n  rediffResultSchema,\n  baselineChangedSchema,\n  errorSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Review\"],\n  summary: \"List snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: snapshotSchema.array() } },\n      description: \"List snapshots for a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot approved\",\n    },\n    409: {\n      content: { \"application/json\": { schema: baselineChangedSchema } },\n      description:\n        \"The baseline changed after this diff was computed; re-diff the build or pass force=true\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: approveAllResultSchema } },\n      description: \"Open snapshots approved; snapshots with a changed baseline are skipped\",\n    },\n    ...notFound,\n  },\n});\n\nconst rediffRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Re-diff against current baselines\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/rediff\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: rediffResultSchema } },\n      description:\n        \"Undecided snapshots re-diffed against the current baselines (no re-render). Decided snapshots are untouched.\",\n    },\n    400: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Default-branch builds are authoritative and are not re-diffed\",\n    },\n    409: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Build has not finished capturing or failed; retry capture instead\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots rejected\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the snapshot list, approve, reject, and bulk-review endpoints. */\nexport function registerSnapshots(app: ShelfRouter): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    try {\n      await approveSnapshot(snapshotId, userId, { force: force === \"true\" });\n    } catch (error) {\n      if (!isHxRequest(c) || !isBaselineChanged(error)) {\n        throw error;\n      }\n      // The review page recomputes staleness on load and offers re-diff / approve anyway.\n      c.header(\"HX-Redirect\", `/projects/${slug}/builds/${buildId}/diff?snapshot=${snapshotId}`);\n      return c.json({ ok: true }, 200);\n    }\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true }, 200);\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    const forced = force === \"true\";\n    const drifted = forced ? new Map() : await findDriftedSnapshots(project, build, snapshots);\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => isOpenSnapshot(snapshot) && !drifted.has(snapshot.id))\n        .map(async (snapshot) => {\n          await approveSnapshot(snapshot.id, userId, { force: forced });\n        }),\n    );\n    hxRefresh(c);\n    return c.json({ ok: true, skipped: [...drifted.keys()] });\n  });\n\n  app.openapi(rediffRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    if (build.isDefault) {\n      throw new HTTPException(400, { message: \"Default-branch builds are not re-diffed\" });\n    }\n    if (!REDIFFABLE_BUILD_STATUSES.has(build.status)) {\n      throw new HTTPException(409, {\n        message: `Build is ${build.status}; wait for capture to finish or retry capture`,\n      });\n    }\n    const { db, storage, logger } = getStore();\n    const result = await rediffBuild({ db, storage, logger }, project, build);\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    flashHx(c, \"Re-diffed against current baselines\");\n    return c.json({ ok: true, ...result }, 200);\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    return c.json({ ok: true });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA6BA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAClE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;GAAG,YAAY,EAAE,OAAO;EAAE,CAAC;EAClF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;GACjE,aACE;EACJ;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,uBAAuB,EAAE;GAClE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,IAAI;GACF,MAAM,gBAAgB,YAAY,QAAQ,EAAE,OAAO,UAAU,OAAO,CAAC;EACvE,SAAS,OAAO;GACd,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAC7C,MAAM;GAGR,EAAE,OAAO,eAAe,aAAa,KAAK,UAAU,QAAQ,iBAAiB,YAAY;GACzF,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;EACjC;EACA,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;CACjC,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,SAAS,UAAU;EACzB,MAAM,UAAU,yBAAS,IAAI,IAAI,IAAI,MAAM,qBAAqB,SAAS,OAAO,SAAS;EACzF,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,eAAe,QAAQ,KAAK,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAC3E,IAAI,OAAO,aAAa;GACvB,MAAM,gBAAgB,SAAS,IAAI,QAAQ,EAAE,OAAO,OAAO,CAAC;EAC9D,CAAC,CACL;EACA,UAAU,CAAC;EACX,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,CAAC,GAAG,QAAQ,KAAK,CAAC;EAAE,CAAC;CAC1D,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,IAAI,MAAM,WACR,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,0CAA0C,CAAC;EAErF,IAAI,CAAC,0BAA0B,IAAI,MAAM,MAAM,GAC7C,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,YAAY,MAAM,OAAO,+CACpC,CAAC;EAEH,MAAM,EAAE,IAAI,SAAS,WAAW,SAAS;EACzC,MAAM,SAAS,MAAM,YAAY;GAAE;GAAI;GAAS;EAAO,GAAG,SAAS,KAAK;EACxE,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,QAAQ,GAAG,qCAAqC;EAChD,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,GAAG;EAAO,GAAG,GAAG;CAC5C,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}
+{"version":3,"file":"snapshots.mjs","names":[],"sources":["../../src/routers/snapshots.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { REDIFFABLE_BUILD_STATUSES, rediffBuild } from \"@storyshelf/core/capture\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { findDriftedSnapshots, isBaselineChanged, isOpenSnapshot } from \"./baseline-guard.ts\";\nimport {\n  VIEW_ROLES,\n  APPROVER_ROLES,\n  snapshotForBuild,\n  refreshBuild,\n  approveSnapshot,\n  buildForProject,\n} from \"./builds.handlers.ts\";\nimport { flashHx } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRefresh, isHxRequest } from \"./htmx.ts\";\nimport { hxAdvance } from \"./review-next.ts\";\nimport {\n  snapshotSchema,\n  okSchema,\n  approveAllResultSchema,\n  groupDecisionResultSchema,\n  rediffResultSchema,\n  baselineChangedSchema,\n  errorSchema,\n  notFound,\n  unauthorized,\n} from \"./schemas.ts\";\nimport { approveGroup, rejectGroup, splitByDrift } from \"./snapshot-groups.ts\";\nconst listSnapshotsRoute = createRoute({\n  method: \"get\",\n  tags: [\"Review\"],\n  summary: \"List snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: snapshotSchema.array() } },\n      description: \"List snapshots for a build\",\n    },\n    ...notFound,\n    ...unauthorized,\n  },\n});\n\nconst approveSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/approve\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot approved\",\n    },\n    409: {\n      content: { \"application/json\": { schema: baselineChangedSchema } },\n      description:\n        \"The baseline changed after this diff was computed; re-diff the build or pass force=true\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectSnapshotRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject a snapshot\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/snapshots/{snapshotId}/reject\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string(), snapshotId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"Snapshot rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst approveAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/approve-all\",\n  request: {\n    params: z.object({ slug: z.string(), buildId: z.string() }),\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: approveAllResultSchema } },\n      description: \"Open snapshots approved; snapshots with a changed baseline are skipped\",\n    },\n    ...notFound,\n  },\n});\n\nconst groupParams = z.object({\n  slug: z.string(),\n  buildId: z.string(),\n  storyId: z.string(),\n  modeKey: z.string(),\n});\n\nconst approveGroupRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Approve a story/mode across all browsers\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/approve\",\n  request: {\n    params: groupParams,\n    query: z.object({ force: z.enum([\"true\", \"false\"]).optional() }),\n  },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: groupDecisionResultSchema } },\n      description:\n        \"Every open snapshot of the story and mode approved and each engine's baseline promoted\",\n    },\n    409: {\n      content: { \"application/json\": { schema: baselineChangedSchema } },\n      description:\n        \"A member's baseline changed after its diff; nothing was approved. Re-diff or pass force=true\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectGroupRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject a story/mode across all browsers\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/stories/{storyId}/modes/{modeKey}/reject\",\n  request: { params: groupParams },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: groupDecisionResultSchema } },\n      description: \"Every open snapshot of the story and mode rejected\",\n    },\n    ...notFound,\n  },\n});\n\nconst rediffRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Re-diff against current baselines\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/rediff\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: rediffResultSchema } },\n      description:\n        \"Undecided snapshots re-diffed against the current baselines (no re-render). Decided snapshots are untouched.\",\n    },\n    400: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Default-branch builds are authoritative and are not re-diffed\",\n    },\n    409: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Build has not finished capturing or failed; retry capture instead\",\n    },\n    ...notFound,\n  },\n});\n\nconst rejectAllRoute = createRoute({\n  method: \"post\",\n  tags: [\"Review\"],\n  summary: \"Reject all open snapshots\",\n  path: \"/api/v1/projects/{slug}/builds/{buildId}/reject-all\",\n  request: { params: z.object({ slug: z.string(), buildId: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: okSchema } },\n      description: \"All snapshots rejected\",\n    },\n    ...notFound,\n  },\n});\n\n/** Register the snapshot list, approve, reject, and bulk-review endpoints. */\nexport function registerSnapshots(app: ShelfRouter): void {\n  app.openapi(listSnapshotsRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...VIEW_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = new SnapshotModel(getStore().db).listByBuild(build.id);\n    return c.json(await snapshots);\n  });\n\n  app.openapi(approveSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    try {\n      await approveSnapshot(snapshotId, userId, { force: force === \"true\" });\n    } catch (error) {\n      if (!isHxRequest(c) || !isBaselineChanged(error)) {\n        throw error;\n      }\n      // The review page recomputes staleness on load and offers re-diff / approve anyway.\n      c.header(\"HX-Redirect\", `/projects/${slug}/builds/${buildId}/diff?snapshot=${snapshotId}`);\n      return c.json({ ok: true }, 200);\n    }\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true }, 200);\n  });\n\n  app.openapi(rejectSnapshotRoute, async (c) => {\n    const { slug, buildId, snapshotId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshot = await snapshotForBuild(build, snapshotId);\n    const userId = getStore().user?.id ?? null;\n    await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n    await refreshBuild(build.id);\n    await hxAdvance(c, { slug, buildId, snapshotId });\n    return c.json({ ok: true });\n  });\n\n  app.openapi(approveAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    const forced = force === \"true\";\n    const drifted = forced ? new Map() : await findDriftedSnapshots(project, build, snapshots);\n    // A story/mode is approved on every engine or on none: one drifted member skips its group.\n    const { approvable, skipped } = splitByDrift(\n      snapshots.filter((snapshot) => isOpenSnapshot(snapshot)),\n      drifted,\n    );\n    await Promise.all(\n      approvable.map(async (snapshot) => {\n        await approveSnapshot(snapshot.id, userId, { force: forced, deferRefresh: true });\n      }),\n    );\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    return c.json({ ok: true, skipped: skipped.map((snapshot) => snapshot.id) });\n  });\n\n  app.openapi(approveGroupRoute, async (c) => {\n    const { slug, buildId, storyId, modeKey } = c.req.valid(\"param\");\n    const { force } = c.req.valid(\"query\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const userId = getStore().user?.id ?? null;\n    let snapshotIds: string[];\n    try {\n      snapshotIds = await approveGroup(project, build, { storyId, modeKey }, userId, {\n        force: force === \"true\",\n      });\n    } catch (error) {\n      if (!isHxRequest(c) || !isBaselineChanged(error)) {\n        throw error;\n      }\n      c.header(\"HX-Redirect\", `/projects/${slug}/builds/${buildId}/diff`);\n      return c.json({ ok: true, snapshotIds: [] }, 200);\n    }\n    const first = snapshotIds[0];\n    if (first) await hxAdvance(c, { slug, buildId, snapshotId: first });\n    return c.json({ ok: true, snapshotIds }, 200);\n  });\n\n  app.openapi(rejectGroupRoute, async (c) => {\n    const { slug, buildId, storyId, modeKey } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const userId = getStore().user?.id ?? null;\n    const snapshotIds = await rejectGroup(build, { storyId, modeKey }, userId);\n    const first = snapshotIds[0];\n    if (first) await hxAdvance(c, { slug, buildId, snapshotId: first });\n    return c.json({ ok: true, snapshotIds }, 200);\n  });\n\n  app.openapi(rediffRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    if (build.isDefault) {\n      throw new HTTPException(400, { message: \"Default-branch builds are not re-diffed\" });\n    }\n    if (!REDIFFABLE_BUILD_STATUSES.has(build.status)) {\n      throw new HTTPException(409, {\n        message: `Build is ${build.status}; wait for capture to finish or retry capture`,\n      });\n    }\n    const { db, storage, logger } = getStore();\n    const result = await rediffBuild({ db, storage, logger }, project, build);\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    flashHx(c, \"Re-diffed against current baselines\");\n    return c.json({ ok: true, ...result }, 200);\n  });\n\n  app.openapi(rejectAllRoute, async (c) => {\n    const { slug, buildId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...APPROVER_ROLES);\n    const build = await buildForProject(project.id, buildId);\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const userId = getStore().user?.id ?? null;\n    await Promise.all(\n      snapshots\n        .filter((snapshot) => snapshot.status === \"new\" || snapshot.status === \"changed\")\n        .map(async (snapshot) => {\n          await new SnapshotModel(getStore().db).review(snapshot.id, \"rejected\", userId);\n        }),\n    );\n    await refreshBuild(build.id);\n    hxRefresh(c);\n    return c.json({ ok: true });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+BA,MAAM,qBAAqB,YAAY;CACrC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,eAAe,MAAM,EAAE,EAAE;GAClE,aAAa;EACf;EACA,GAAG;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,uBAAuB,YAAY;CACvC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;GAAG,YAAY,EAAE,OAAO;EAAE,CAAC;EAClF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;GACjE,aACE;EACJ;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,sBAAsB,YAAY;CACtC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;EAAG,YAAY,EAAE,OAAO;CAAE,CAAC,EAAE;CAC/F,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO;GAAE,MAAM,EAAE,OAAO;GAAG,SAAS,EAAE,OAAO;EAAE,CAAC;EAC1D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,uBAAuB,EAAE;GAClE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;CAC3B,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;AACpB,CAAC;AAED,MAAM,oBAAoB,YAAY;CACpC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ;EACR,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACjE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,sBAAsB,EAAE;GACjE,aACE;EACJ;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,YAAY;CAC/B,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,0BAA0B,EAAE;GACrE,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,cAAc,YAAY;CAC9B,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aACE;EACJ;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,SAAS,EAAE;GACpD,aAAa;EACf;EACA,GAAG;CACL;AACF,CAAC;;AAGD,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,QAAQ,oBAAoB,OAAO,MAAM;EAC3C,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,UAAU;EACrE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EACvE,OAAO,EAAE,KAAK,MAAM,SAAS;CAC/B,CAAC;CAED,IAAI,QAAQ,sBAAsB,OAAO,MAAM;EAC7C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,iBAAiB,OAAO,UAAU;EACxC,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,IAAI;GACF,MAAM,gBAAgB,YAAY,QAAQ,EAAE,OAAO,UAAU,OAAO,CAAC;EACvE,SAAS,OAAO;GACd,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAC7C,MAAM;GAGR,EAAE,OAAO,eAAe,aAAa,KAAK,UAAU,QAAQ,iBAAiB,YAAY;GACzF,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;EACjC;EACA,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,GAAG,GAAG;CACjC,CAAC;CAED,IAAI,QAAQ,qBAAqB,OAAO,MAAM;EAC5C,MAAM,EAAE,MAAM,SAAS,eAAe,EAAE,IAAI,MAAM,OAAO;EACzD,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,WAAW,MAAM,iBAAiB,OAAO,UAAU;EACzD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC7E,MAAM,aAAa,MAAM,EAAE;EAC3B,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS;EAAW,CAAC;EAChD,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;CAED,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,SAAS,UAAU;EACzB,MAAM,UAAU,yBAAS,IAAI,IAAI,IAAI,MAAM,qBAAqB,SAAS,OAAO,SAAS;EAEzF,MAAM,EAAE,YAAY,YAAY,aAC9B,UAAU,QAAQ,aAAa,eAAe,QAAQ,CAAC,GACvD,OACF;EACA,MAAM,QAAQ,IACZ,WAAW,IAAI,OAAO,aAAa;GACjC,MAAM,gBAAgB,SAAS,IAAI,QAAQ;IAAE,OAAO;IAAQ,cAAc;GAAK,CAAC;EAClF,CAAC,CACH;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,QAAQ,KAAK,aAAa,SAAS,EAAE;EAAE,CAAC;CAC7E,CAAC;CAED,IAAI,QAAQ,mBAAmB,OAAO,MAAM;EAC1C,MAAM,EAAE,MAAM,SAAS,SAAS,YAAY,EAAE,IAAI,MAAM,OAAO;EAC/D,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,OAAO;EACrC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,IAAI;EACJ,IAAI;GACF,cAAc,MAAM,aAAa,SAAS,OAAO;IAAE;IAAS;GAAQ,GAAG,QAAQ,EAC7E,OAAO,UAAU,OACnB,CAAC;EACH,SAAS,OAAO;GACd,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,KAAK,GAC7C,MAAM;GAER,EAAE,OAAO,eAAe,aAAa,KAAK,UAAU,QAAQ,MAAM;GAClE,OAAO,EAAE,KAAK;IAAE,IAAI;IAAM,aAAa,CAAC;GAAE,GAAG,GAAG;EAClD;EACA,MAAM,QAAQ,YAAY;EAC1B,IAAI,OAAO,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS,YAAY;EAAM,CAAC;EAClE,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM;EAAY,GAAG,GAAG;CAC9C,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,SAAS,SAAS,YAAY,EAAE,IAAI,MAAM,OAAO;EAC/D,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,cAAc,MAAM,YAAY,OAAO;GAAE;GAAS;EAAQ,GAAG,MAAM;EACzE,MAAM,QAAQ,YAAY;EAC1B,IAAI,OAAO,MAAM,UAAU,GAAG;GAAE;GAAM;GAAS,YAAY;EAAM,CAAC;EAClE,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM;EAAY,GAAG,GAAG;CAC9C,CAAC;CAED,IAAI,QAAQ,aAAa,OAAO,MAAM;EACpC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,IAAI,MAAM,WACR,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,0CAA0C,CAAC;EAErF,IAAI,CAAC,0BAA0B,IAAI,MAAM,MAAM,GAC7C,MAAM,IAAI,cAAc,KAAK,EAC3B,SAAS,YAAY,MAAM,OAAO,+CACpC,CAAC;EAEH,MAAM,EAAE,IAAI,SAAS,WAAW,SAAS;EACzC,MAAM,SAAS,MAAM,YAAY;GAAE;GAAI;GAAS;EAAO,GAAG,SAAS,KAAK;EACxE,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,QAAQ,GAAG,qCAAqC;EAChD,OAAO,EAAE,KAAK;GAAE,IAAI;GAAM,GAAG;EAAO,GAAG,GAAG;CAC5C,CAAC;CAED,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,cAAc;EACzE,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,IAAI,OAAO;EACvD,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,SAAS,SAAS,CAAC,CAAC,MAAM,MAAM;EACtC,MAAM,QAAQ,IACZ,UACG,QAAQ,aAAa,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,CAAC,CAChF,IAAI,OAAO,aAAa;GACvB,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,SAAS,IAAI,YAAY,MAAM;EAC/E,CAAC,CACL;EACA,MAAM,aAAa,MAAM,EAAE;EAC3B,UAAU,CAAC;EACX,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC;CAC5B,CAAC;AACH"}

package/dist/routers/storybook.mjs

@@ -2,55 +2,19 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
-import { currentProjectRole, notFound } from "./helpers.mjs";
+import { notFound } from "./helpers.mjs";
+import { publishedAccess } from "./published-access.mjs";
+import { publishedRelativePath, servePublishedFile } from "./published-files.mjs";
 import { renderStorybookPage, renderStorybookPreparingPage } from "../pages/storybook.mjs";
-import { BuildModel, LabelModel, ProjectModel, isPublicBuild } from "@storyshelf/core/models";
-import { isSafeSegment, mimeFor, storybookDir } from "@storyshelf/core/utils";
+import { storybookDir } from "@storyshelf/core/utils";
+import { BuildModel, LabelModel, ProjectModel } from "@storyshelf/core/models";
 import { posix } from "node:path";
 //#region src/routers/storybook.ts
-const VIEW_ROLES = /* @__PURE__ */ new Set([
-	"viewer",
-	"developer",
-	"approver",
-	"admin"
-]);
-function contentTypeFor(path) {
-	return mimeFor(path);
-}
-/**
-* Decide whether the current request may view `build`'s published Storybook.
-*
-* Public builds (ADR 0011) are viewable without auth; every other build requires
-* a logged-in session with at least `viewer` membership on the project.
-*/
-async function canViewBuild(build, project) {
-	if (isPublicBuild(project, build)) return true;
-	const { authEnabled } = getStore();
-	if (!authEnabled) return true;
-	const role = await currentProjectRole(project.id);
-	return Boolean(role && VIEW_ROLES.has(role));
-}
 /** Check whether a build's extracted statics are available for serving. */
 async function staticsReady(projectId, buildId) {
 	if (await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), "manifest.json"))) return true;
 	return await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), "iframe.html"));
 }
-async function readWithManifestFallback(projectId, buildId, rel) {
-	try {
-		const manifestPath = posix.join(storybookDir(projectId, buildId), "manifest.json");
-		if (await getStore().storage.exists(manifestPath)) {
-			const manifestRaw = await getStore().storage.read(manifestPath);
-			const hash = JSON.parse(manifestRaw.toString("utf8"))[rel];
-			if (hash) {
-				const contentPath = `content/${hash}`;
-				if (await getStore().storage.exists(contentPath)) return await getStore().storage.read(contentPath);
-			}
-		}
-	} catch {}
-	const legacyPath = posix.join(storybookDir(projectId, buildId), rel);
-	if (await getStore().storage.exists(legacyPath)) return await getStore().storage.read(legacyPath);
-	return null;
-}
 /** Register the published Storybook resolver and static-asset routes. */
 function registerStorybook(app) {
 	app.get("/_", (c) => c.redirect("/", 302));
@@ -61,7 +25,7 @@ function registerStorybook(app) {
 		if (!project) notFound("Project not found");
 		const build = await new BuildModel(getStore().db).latestApprovedDefault(project);
 		if (!build) notFound("No approved build on the default branch yet");
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
+		if (!await publishedAccess(build, project)) return c.redirect("/auth/login", 302);
 		return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);
 	});
 	app.get("/projects/:slug/storybook/:key/:value", async (c) => {
@@ -74,7 +38,7 @@ function registerStorybook(app) {
 		const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);
 		if (!buildId) notFound("No build carries that label");
 		const build = await new BuildModel(getStore().db).get(buildId);
-		if (!build || !await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
+		if (!build || !await publishedAccess(build, project)) return c.redirect("/auth/login", 302);
 		return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);
 	});
 	app.get("/_/:id", async (c) => {
@@ -87,14 +51,8 @@ function registerStorybook(app) {
 	app.get("/_/:id/*", async (c) => {
 		const id = c.req.param("id");
 		const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);
-		const base = `/_/${id}/`;
-		if (!c.req.path.startsWith(base)) return c.notFound();
-		let rest;
-		try {
-			rest = decodeURIComponent(c.req.path.slice(base.length));
-		} catch {
-			return c.notFound();
-		}
+		const rest = publishedRelativePath(c.req.path, `/_/${id}/`);
+		if (rest === null) return c.notFound();
 		let project = null;
 		let build = null;
 		if (isUlid26) {
@@ -108,45 +66,31 @@ function registerStorybook(app) {
 			build = await new BuildModel(getStore().db).latestApprovedDefault(project);
 			if (!build) return c.notFound();
 		}
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
-		if (rest === "") {
-			if (!await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);
-			const buffer = await readWithManifestFallback(project.id, build.id, "index.html");
-			if (!buffer) return c.redirect(isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`, 302);
-			const cacheControl = isUlid26 ? "public, max-age=31536000, immutable" : "public, max-age=60";
-			return c.body(new Uint8Array(buffer), 200, {
-				"content-type": "text/html; charset=utf-8",
-				"cache-control": cacheControl
-			});
-		}
-		if (rest.split("/").some((segment) => !isSafeSegment(segment))) return c.notFound();
-		const buffer = await readWithManifestFallback(project.id, build.id, rest);
-		if (!buffer) {
-			if (rest === "index.html") return c.redirect(isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`, 302);
-			return c.notFound();
-		}
-		const cacheControl = isUlid26 ? "public, max-age=31536000, immutable" : "public, max-age=3600";
-		return c.body(new Uint8Array(buffer), 200, {
-			"content-type": contentTypeFor(rest),
-			"cache-control": cacheControl
+		const access = await publishedAccess(build, project);
+		if (!access) return c.redirect("/auth/login", 302);
+		if (rest === "" && !await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);
+		const fallback = isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`;
+		const served = await servePublishedFile(c, {
+			projectId: project.id,
+			buildId: build.id,
+			rel: rest === "" ? "index.html" : rest,
+			access,
+			cacheControl: shortLinkCache(isUlid26, rest === "")
 		});
+		if (served) return served;
+		return rest === "" || rest === "index.html" ? c.redirect(fallback, 302) : c.notFound();
 	});
 	app.get("/projects/:slug/storybook/build/:buildId/*", async (c) => {
 		const slug = c.req.param("slug");
 		const buildId = c.req.param("buildId");
-		const base = `/projects/${slug}/storybook/build/${buildId}/`;
-		if (!c.req.path.startsWith(base)) return c.notFound();
-		let rest;
-		try {
-			rest = decodeURIComponent(c.req.path.slice(base.length));
-		} catch {
-			return c.notFound();
-		}
+		const rest = publishedRelativePath(c.req.path, `/projects/${slug}/storybook/build/${buildId}/`);
+		if (rest === null) return c.notFound();
 		const project = await new ProjectModel(getStore().db).getBySlug(slug);
 		if (!project) notFound("Project not found");
 		const build = await new BuildModel(getStore().db).get(buildId);
 		if (!build || build.projectId !== project.id) notFound("Build not found");
-		if (!await canViewBuild(build, project)) return c.redirect("/auth/login", 302);
+		const access = await publishedAccess(build, project);
+		if (!access) return c.redirect("/auth/login", 302);
 		if (rest === "") {
 			if (!await staticsReady(project.id, build.id)) return c.html(renderStorybookPreparingPage(project, build, slug), 200);
 			const storyId = c.req.query("storyId") ?? c.req.query("id") ?? void 0;
@@ -156,15 +100,20 @@ function registerStorybook(app) {
 				viewMode
 			}), 200);
 		}
-		if (rest.split("/").some((segment) => !isSafeSegment(segment))) return c.notFound();
-		const buffer = await readWithManifestFallback(project.id, build.id, rest);
-		if (!buffer) return c.notFound();
-		return c.body(new Uint8Array(buffer), 200, {
-			"content-type": contentTypeFor(rest),
-			"cache-control": "public, max-age=31536000, immutable"
-		});
+		return await servePublishedFile(c, {
+			projectId: project.id,
+			buildId: build.id,
+			rel: rest,
+			access,
+			cacheControl: "public, max-age=31536000, immutable"
+		}) ?? c.notFound();
 	});
 }
+/** Cache policy of the short link: a ULID names one build forever; a slug follows the latest. */
+function shortLinkCache(isUlid26, isRoot) {
+	if (isUlid26) return "public, max-age=31536000, immutable";
+	return isRoot ? "public, max-age=60" : "public, max-age=3600";
+}
 //#endregion
 export { registerStorybook };
 

package/dist/routers/storybook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { isPublicBuild, BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { isSafeSegment, mimeFor, storybookDir } from \"@storyshelf/core/utils\";\nimport { posix } from \"node:path\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { currentProjectRole, notFound } from \"./helpers.ts\";\nconst VIEW_ROLES: ReadonlySet<string> = new Set([\"viewer\", \"developer\", \"approver\", \"admin\"]);\n\nfunction contentTypeFor(path: string): string {\n  return mimeFor(path);\n}\n\n/**\n * Decide whether the current request may view `build`'s published Storybook.\n *\n * Public builds (ADR 0011) are viewable without auth; every other build requires\n * a logged-in session with at least `viewer` membership on the project.\n */\nasync function canViewBuild(\n  build: Pick<Build, \"public\" | \"gitBranch\">,\n  project: Project,\n): Promise<boolean> {\n  if (isPublicBuild(project, build)) {\n    return true;\n  }\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const role = await currentProjectRole(project.id);\n  return Boolean(role && VIEW_ROLES.has(role));\n}\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  // New path: manifest.json indicates content-addressed storage; fallback to legacy iframe.html\n  if (\n    await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), \"manifest.json\"))\n  ) {\n    return true;\n  }\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\nasync function readWithManifestFallback(\n  projectId: string,\n  buildId: string,\n  rel: string,\n): Promise<Buffer | null> {\n  // Try manifest indirection first (content-addressed)\n  try {\n    const manifestPath = posix.join(storybookDir(projectId, buildId), \"manifest.json\");\n    if (await getStore().storage.exists(manifestPath)) {\n      const manifestRaw = await getStore().storage.read(manifestPath);\n      const manifest = JSON.parse(manifestRaw.toString(\"utf8\")) as Record<string, string>;\n      const hash = manifest[rel];\n      if (hash) {\n        const contentPath = `content/${hash}`;\n        if (await getStore().storage.exists(contentPath)) {\n          return await getStore().storage.read(contentPath);\n        }\n      }\n    }\n  } catch {\n    // ignore — manifest may not exist for old builds\n  }\n  // Fallback to legacy per-build path\n  const legacyPath = posix.join(storybookDir(projectId, buildId), rel);\n  if (await getStore().storage.exists(legacyPath)) {\n    return await getStore().storage.read(legacyPath);\n  }\n  return null;\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfRouter): void {\n  app.get(\"/_\", (c) => c.redirect(\"/\", 302));\n  app.get(\"/_/\", (c) => c.redirect(\"/\", 302));\n\n  // Resolver: latest approved build on the default branch (never feature branches).\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n    if (!build) {\n      notFound(\"No approved build on the default branch yet\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Short link canonical is /_/:id/ with trailing slash (so relative ./sb-manager/... resolves).\n  // 26-char ULID → that exact build, whatever its status (visibility check only).\n  // Any other id → project slug → latest approved build on the default branch, else 404\n  // (no fallback to feature-branch or unreviewed builds). No fall-through on ULID.\n  app.get(\"/_/:id\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    if (isUlid26) {\n      const build = await new BuildModel(getStore().db).get(id);\n      if (!build) notFound();\n    } else {\n      const project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) notFound();\n    }\n    return c.redirect(`/_/${id}/`, 302);\n  });\n\n  app.get(\"/_/:id/*\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    const base = `/_/${id}/`;\n    if (!c.req.path.startsWith(base)) return c.notFound();\n    let rest: string;\n    try {\n      rest = decodeURIComponent(c.req.path.slice(base.length));\n    } catch {\n      return c.notFound();\n    }\n    let project: Project | null = null;\n    let build: Build | null = null;\n    if (isUlid26) {\n      build = await new BuildModel(getStore().db).get(id);\n      if (!build) return c.notFound();\n      project = await new ProjectModel(getStore().db).get(build.projectId);\n      if (!project) return c.notFound();\n    } else {\n      project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) return c.notFound();\n      build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n      if (!build) return c.notFound();\n    }\n    if (!(await canViewBuild(build, project))) return c.redirect(\"/auth/login\", 302);\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);\n      }\n      const buffer = await readWithManifestFallback(project.id, build.id, \"index.html\");\n      if (!buffer) {\n        return c.redirect(\n          isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`,\n          302,\n        );\n      }\n      const cacheControl = isUlid26 ? \"public, max-age=31536000, immutable\" : \"public, max-age=60\";\n      return c.body(new Uint8Array(buffer), 200, {\n        \"content-type\": \"text/html; charset=utf-8\",\n        \"cache-control\": cacheControl,\n      });\n    }\n    const segments = rest.split(\"/\");\n    if (segments.some((segment) => !isSafeSegment(segment))) return c.notFound();\n    const buffer = await readWithManifestFallback(project.id, build.id, rest);\n    if (!buffer) {\n      if (rest === \"index.html\") {\n        return c.redirect(\n          isUlid26 ? `/projects/${project.slug}/builds/${build.id}` : `/projects/${project.slug}`,\n          302,\n        );\n      }\n      return c.notFound();\n    }\n    const cacheControl = isUlid26 ? \"public, max-age=31536000, immutable\" : \"public, max-age=3600\";\n    return c.body(new Uint8Array(buffer), 200, {\n      \"content-type\": contentTypeFor(rest),\n      \"cache-control\": cacheControl,\n    });\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const base = `/projects/${slug}/storybook/build/${buildId}/`;\n    if (!c.req.path.startsWith(base)) {\n      return c.notFound();\n    }\n    let rest: string;\n    try {\n      rest = decodeURIComponent(c.req.path.slice(base.length));\n    } catch {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    if (!(await canViewBuild(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      const storyId = c.req.query(\"storyId\") ?? c.req.query(\"id\") ?? undefined;\n      const viewMode = c.req.query(\"viewMode\") === \"docs\" ? \"docs\" : undefined;\n      return c.html(renderStorybookPage(project, build, slug, { storyId, viewMode }), 200);\n    }\n\n    const segments = rest.split(\"/\");\n    if (segments.some((segment) => !isSafeSegment(segment))) {\n      return c.notFound();\n    }\n    const buffer = await readWithManifestFallback(project.id, build.id, rest);\n    if (!buffer) return c.notFound();\n    return c.body(new Uint8Array(buffer), 200, {\n      \"content-type\": contentTypeFor(rest),\n      \"cache-control\": \"public, max-age=31536000, immutable\",\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;AAWA,MAAM,6BAAkC,IAAI,IAAI;CAAC;CAAU;CAAa;CAAY;AAAO,CAAC;AAE5F,SAAS,eAAe,MAAsB;CAC5C,OAAO,QAAQ,IAAI;AACrB;;;;;;;AAQA,eAAe,aACb,OACA,SACkB;CAClB,IAAI,cAAc,SAAS,KAAK,GAC9B,OAAO;CAET,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,OAAO,MAAM,mBAAmB,QAAQ,EAAE;CAChD,OAAO,QAAQ,QAAQ,WAAW,IAAI,IAAI,CAAC;AAC7C;;AAGA,eAAe,aAAa,WAAmB,SAAmC;CAEhF,IACE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe,CAAC,GAE7F,OAAO;CAET,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;AAEA,eAAe,yBACb,WACA,SACA,KACwB;CAExB,IAAI;EACF,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe;EACjF,IAAI,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,YAAY,GAAG;GACjD,MAAM,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,YAAY;GAE9D,MAAM,OADW,KAAK,MAAM,YAAY,SAAS,MAAM,CACnC,CAAC,CAAC;GACtB,IAAI,MAAM;IACR,MAAM,cAAc,WAAW;IAC/B,IAAI,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,WAAW,GAC7C,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,WAAW;GAEpD;EACF;CACF,QAAQ,CAER;CAEA,MAAM,aAAa,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,GAAG;CACnE,IAAI,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,UAAU,GAC5C,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,UAAU;CAEjD,OAAO;AACT;;AAGA,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CACzC,IAAI,IAAI,QAAQ,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CAG1C,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;EAC/E,IAAI,CAAC,OACH,SAAS,6CAA6C;EAExD,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,aAAa,OAAO,OAAO,GAC/C,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAMD,IAAI,IAAI,UAAU,OAAO,MAAM;EAC7B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAE3B,IADiB,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE,GAGvE;OAAA,CAAC,MADe,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAC5C,SAAS;EAAA,OAGrB,IAAI,CAAC,MADiB,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GACpD,SAAS;EAEzB,OAAO,EAAE,SAAS,MAAM,GAAG,IAAI,GAAG;CACpC,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,MAAM,WAAW,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE;EAC7E,MAAM,OAAO,MAAM,GAAG;EACtB,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,IAAI,GAAG,OAAO,EAAE,SAAS;EACpD,IAAI;EACJ,IAAI;GACF,OAAO,mBAAmB,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC;EACzD,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,IAAI,UAA0B;EAC9B,IAAI,QAAsB;EAC1B,IAAI,UAAU;GACZ,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;GAClD,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;GAC9B,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;GACnE,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;EAClC,OAAO;GACL,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE;GAC5D,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;GAChC,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;GACzE,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;EAChC;EACA,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GAAI,OAAO,EAAE,SAAS,eAAe,GAAG;EAC/E,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,QAAQ,IAAI,GAAG,GAAG;GAE/E,MAAM,SAAS,MAAM,yBAAyB,QAAQ,IAAI,MAAM,IAAI,YAAY;GAChF,IAAI,CAAC,QACH,OAAO,EAAE,SACP,WAAW,aAAa,QAAQ,KAAK,UAAU,MAAM,OAAO,aAAa,QAAQ,QACjF,GACF;GAEF,MAAM,eAAe,WAAW,wCAAwC;GACxE,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;IACzC,gBAAgB;IAChB,iBAAiB;GACnB,CAAC;EACH;EAEA,IADiB,KAAK,MAAM,GACjB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,OAAO,CAAC,GAAG,OAAO,EAAE,SAAS;EAC3E,MAAM,SAAS,MAAM,yBAAyB,QAAQ,IAAI,MAAM,IAAI,IAAI;EACxE,IAAI,CAAC,QAAQ;GACX,IAAI,SAAS,cACX,OAAO,EAAE,SACP,WAAW,aAAa,QAAQ,KAAK,UAAU,MAAM,OAAO,aAAa,QAAQ,QACjF,GACF;GAEF,OAAO,EAAE,SAAS;EACpB;EACA,MAAM,eAAe,WAAW,wCAAwC;EACxE,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;GACzC,gBAAgB,eAAe,IAAI;GACnC,iBAAiB;EACnB,CAAC;CACH,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,aAAa,KAAK,mBAAmB,QAAQ;EAC1D,IAAI,CAAC,EAAE,IAAI,KAAK,WAAW,IAAI,GAC7B,OAAO,EAAE,SAAS;EAEpB,IAAI;EACJ,IAAI;GACF,OAAO,mBAAmB,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC;EACzD,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,IAAI,CAAE,MAAM,aAAa,OAAO,OAAO,GACrC,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE,IAAI,MAAM,IAAI,KAAK,KAAA;GAC/D,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU,MAAM,SAAS,SAAS,KAAA;GAC/D,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,MAAM;IAAE;IAAS;GAAS,CAAC,GAAG,GAAG;EACrF;EAGA,IADiB,KAAK,MAAM,GACjB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,OAAO,CAAC,GACpD,OAAO,EAAE,SAAS;EAEpB,MAAM,SAAS,MAAM,yBAAyB,QAAQ,IAAI,MAAM,IAAI,IAAI;EACxE,IAAI,CAAC,QAAQ,OAAO,EAAE,SAAS;EAC/B,OAAO,EAAE,KAAK,IAAI,WAAW,MAAM,GAAG,KAAK;GACzC,gBAAgB,eAAe,IAAI;GACnC,iBAAiB;EACnB,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { storybookDir } from \"@storyshelf/core/utils\";\nimport { posix } from \"node:path\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport { publishedRelativePath, servePublishedFile } from \"./published-files.ts\";\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  // New path: manifest.json indicates content-addressed storage; fallback to legacy iframe.html\n  if (\n    await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), \"manifest.json\"))\n  ) {\n    return true;\n  }\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfRouter): void {\n  app.get(\"/_\", (c) => c.redirect(\"/\", 302));\n  app.get(\"/_/\", (c) => c.redirect(\"/\", 302));\n\n  // Resolver: latest approved build on the default branch (never feature branches).\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n    if (!build) {\n      notFound(\"No approved build on the default branch yet\");\n    }\n    if (!(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Short link canonical is /_/:id/ with trailing slash (so relative ./sb-manager/... resolves).\n  // 26-char ULID → that exact build, whatever its status (visibility check only).\n  // Any other id → project slug → latest approved build on the default branch, else 404\n  // (no fallback to feature-branch or unreviewed builds). No fall-through on ULID.\n  app.get(\"/_/:id\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    if (isUlid26) {\n      const build = await new BuildModel(getStore().db).get(id);\n      if (!build) notFound();\n    } else {\n      const project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) notFound();\n    }\n    return c.redirect(`/_/${id}/`, 302);\n  });\n\n  app.get(\"/_/:id/*\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    const rest = publishedRelativePath(c.req.path, `/_/${id}/`);\n    if (rest === null) return c.notFound();\n    let project: Project | null = null;\n    let build: Build | null = null;\n    if (isUlid26) {\n      build = await new BuildModel(getStore().db).get(id);\n      if (!build) return c.notFound();\n      project = await new ProjectModel(getStore().db).get(build.projectId);\n      if (!project) return c.notFound();\n    } else {\n      project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) return c.notFound();\n      build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n      if (!build) return c.notFound();\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) return c.redirect(\"/auth/login\", 302);\n    if (rest === \"\" && !(await staticsReady(project.id, build.id))) {\n      return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);\n    }\n    const fallback = isUlid26\n      ? `/projects/${project.slug}/builds/${build.id}`\n      : `/projects/${project.slug}`;\n    const served = await servePublishedFile(c, {\n      projectId: project.id,\n      buildId: build.id,\n      rel: rest === \"\" ? \"index.html\" : rest,\n      access,\n      cacheControl: shortLinkCache(isUlid26, rest === \"\"),\n    });\n    if (served) return served;\n    return rest === \"\" || rest === \"index.html\" ? c.redirect(fallback, 302) : c.notFound();\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const rest = publishedRelativePath(c.req.path, `/projects/${slug}/storybook/build/${buildId}/`);\n    if (rest === null) {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      const storyId = c.req.query(\"storyId\") ?? c.req.query(\"id\") ?? undefined;\n      const viewMode = c.req.query(\"viewMode\") === \"docs\" ? \"docs\" : undefined;\n      return c.html(renderStorybookPage(project, build, slug, { storyId, viewMode }), 200);\n    }\n\n    return (\n      (await servePublishedFile(c, {\n        projectId: project.id,\n        buildId: build.id,\n        rel: rest,\n        access,\n        cacheControl: \"public, max-age=31536000, immutable\",\n      })) ?? c.notFound()\n    );\n  });\n}\n\n/** Cache policy of the short link: a ULID names one build forever; a slug follows the latest. */\nfunction shortLinkCache(isUlid26: boolean, isRoot: boolean): string {\n  if (isUlid26) {\n    return \"public, max-age=31536000, immutable\";\n  }\n  return isRoot ? \"public, max-age=60\" : \"public, max-age=3600\";\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,eAAe,aAAa,WAAmB,SAAmC;CAEhF,IACE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe,CAAC,GAE7F,OAAO;CAET,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;;AAGA,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CACzC,IAAI,IAAI,QAAQ,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CAG1C,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;EAC/E,IAAI,CAAC,OACH,SAAS,6CAA6C;EAExD,IAAI,CAAE,MAAM,gBAAgB,OAAO,OAAO,GACxC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,gBAAgB,OAAO,OAAO,GAClD,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAMD,IAAI,IAAI,UAAU,OAAO,MAAM;EAC7B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAE3B,IADiB,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE,GAGvE;OAAA,CAAC,MADe,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAC5C,SAAS;EAAA,OAGrB,IAAI,CAAC,MADiB,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GACpD,SAAS;EAEzB,OAAO,EAAE,SAAS,MAAM,GAAG,IAAI,GAAG;CACpC,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,MAAM,WAAW,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE;EAC7E,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE;EAC1D,IAAI,SAAS,MAAM,OAAO,EAAE,SAAS;EACrC,IAAI,UAA0B;EAC9B,IAAI,QAAsB;EAC1B,IAAI,UAAU;GACZ,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;GAClD,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;GAC9B,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;GACnE,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;EAClC,OAAO;GACL,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE;GAC5D,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;GAChC,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;GACzE,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;EAChC;EACA,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QAAQ,OAAO,EAAE,SAAS,eAAe,GAAG;EACjD,IAAI,SAAS,MAAM,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC1D,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,QAAQ,IAAI,GAAG,GAAG;EAE/E,MAAM,WAAW,WACb,aAAa,QAAQ,KAAK,UAAU,MAAM,OAC1C,aAAa,QAAQ;EACzB,MAAM,SAAS,MAAM,mBAAmB,GAAG;GACzC,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK,SAAS,KAAK,eAAe;GAClC;GACA,cAAc,eAAe,UAAU,SAAS,EAAE;EACpD,CAAC;EACD,IAAI,QAAQ,OAAO;EACnB,OAAO,SAAS,MAAM,SAAS,eAAe,EAAE,SAAS,UAAU,GAAG,IAAI,EAAE,SAAS;CACvF,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,aAAa,KAAK,mBAAmB,QAAQ,EAAE;EAC9F,IAAI,SAAS,MACX,OAAO,EAAE,SAAS;EAEpB,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE,IAAI,MAAM,IAAI,KAAK,KAAA;GAC/D,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU,MAAM,SAAS,SAAS,KAAA;GAC/D,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,MAAM;IAAE;IAAS;GAAS,CAAC,GAAG,GAAG;EACrF;EAEA,OACG,MAAM,mBAAmB,GAAG;GAC3B,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK;GACL;GACA,cAAc;EAChB,CAAC,KAAM,EAAE,SAAS;CAEtB,CAAC;AACH;;AAGA,SAAS,eAAe,UAAmB,QAAyB;CAClE,IAAI,UACF,OAAO;CAET,OAAO,SAAS,uBAAuB;AACzC"}

package/dist/routers/tokens.mjs

@@ -6,7 +6,6 @@ import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { TokenModel } from "@storyshelf/core/models";
-import { randomToken } from "@storyshelf/core/utils";
 //#region src/routers/tokens.ts
 const ADMIN_ROLES = ["admin"];
 const listTokensRoute = createRoute({
@@ -65,15 +64,13 @@ function registerTokens(app) {
 	app.openapi(createTokenRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
 		const body = c.req.valid("json");
-		const token = randomToken("shelf_");
-		await new TokenModel(getStore().db).create(project.id, {
+		const { value } = await new TokenModel(getStore().db).issue(project.id, {
 			name: body.name,
-			hash: token.hash,
 			userId: getStore().user?.id ?? null
 		});
 		return c.json({
 			...body,
-			token: token.value
+			token: value
 		}, 201);
 	});
 	app.openapi(deleteTokenRoute, async (c) => {

package/dist/routers/tokens.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport { randomToken } from \"@storyshelf/core/utils\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  tags: [\"Tokens\"],\n  summary: \"List API tokens\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: tokenPublicSchema.array() } },\n      description: \"List API tokens\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  tags: [\"Tokens\"],\n  summary: \"Create an API token\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: tokenCreatedSchema } },\n      description: \"Created token\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Tokens\"],\n  summary: \"Delete an API token\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project API token list, create, and revoke endpoints. */\nexport function registerTokens(app: ShelfRouter): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const token = randomToken(\"shelf_\");\n    await new TokenModel(getStore().db).create(project.id, {\n      name: body.name,\n      hash: token.hash,\n      userId: getStore().user?.id ?? null,\n    });\n    return c.json({ ...body, token: token.value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GACrE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,QAAQ,YAAY,QAAQ;EAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACrD,MAAM,KAAK;GACX,MAAM,MAAM;GACZ,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;EACjC,CAAC;EACD,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO,MAAM;EAAM,GAAG,GAAG;CACpD,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}
+{"version":3,"file":"tokens.mjs","names":["notFoundResponse"],"sources":["../../src/routers/tokens.ts"],"sourcesContent":["import { createRoute, z } from \"@hono/zod-openapi\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { resolveAuthorizedProject, notFound } from \"./helpers.ts\";\nimport {\n  notFound as notFoundResponse,\n  tokenCreatedSchema,\n  tokenCreateSchema,\n  tokenPublicSchema,\n  unauthorized,\n} from \"./schemas.ts\";\nconst ADMIN_ROLES: readonly ProjectRole[] = [\"admin\"];\n\nconst listTokensRoute = createRoute({\n  method: \"get\",\n  tags: [\"Tokens\"],\n  summary: \"List API tokens\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: { params: z.object({ slug: z.string() }) },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: tokenPublicSchema.array() } },\n      description: \"List API tokens\",\n    },\n    ...notFoundResponse,\n    ...unauthorized,\n  },\n});\n\nconst createTokenRoute = createRoute({\n  method: \"post\",\n  tags: [\"Tokens\"],\n  summary: \"Create an API token\",\n  path: \"/api/v1/projects/{slug}/tokens\",\n  request: {\n    params: z.object({ slug: z.string() }),\n    body: { content: { \"application/json\": { schema: tokenCreateSchema } } },\n  },\n  responses: {\n    201: {\n      content: { \"application/json\": { schema: tokenCreatedSchema } },\n      description: \"Created token\",\n    },\n    ...notFoundResponse,\n  },\n});\n\nconst deleteTokenRoute = createRoute({\n  method: \"delete\",\n  tags: [\"Tokens\"],\n  summary: \"Delete an API token\",\n  path: \"/api/v1/projects/{slug}/tokens/{tokenId}\",\n  request: { params: z.object({ slug: z.string(), tokenId: z.string() }) },\n  responses: {\n    204: { description: \"Deleted token\" },\n    ...notFoundResponse,\n  },\n});\n\n/** Register the project API token list, create, and revoke endpoints. */\nexport function registerTokens(app: ShelfRouter): void {\n  app.openapi(listTokensRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const tokens = await new TokenModel(getStore().db).list(project.id);\n    return c.json(tokens.map(({ hash: _hash, ...rest }) => rest));\n  });\n\n  app.openapi(createTokenRoute, async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.valid(\"param\").slug, ...ADMIN_ROLES);\n    const body = c.req.valid(\"json\");\n    const { value } = await new TokenModel(getStore().db).issue(project.id, {\n      name: body.name,\n      userId: getStore().user?.id ?? null,\n    });\n    return c.json({ ...body, token: value }, 201);\n  });\n\n  app.openapi(deleteTokenRoute, async (c) => {\n    const { slug, tokenId } = c.req.valid(\"param\");\n    const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);\n    const found = await new TokenModel(getStore().db).get(project.id, tokenId);\n    if (!found) {\n      notFound(\"Token not found\");\n    }\n    await new TokenModel(getStore().db).remove(found.id);\n    return c.body(null, 204);\n  });\n}\n"],"mappings":";;;;;;;;;AAaA,MAAM,cAAsC,CAAC,OAAO;AAEpD,MAAM,kBAAkB,YAAY;CAClC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;CAClD,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,MAAM,EAAE,EAAE;GACrE,aAAa;EACf;EACA,GAAGA;EACH,GAAG;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS;EACP,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;EACrC,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,kBAAkB,EAAE,EAAE;CACzE;CACA,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,mBAAmB,EAAE;GAC9D,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,mBAAmB,YAAY;CACnC,QAAQ;CACR,MAAM,CAAC,QAAQ;CACf,SAAS;CACT,MAAM;CACN,SAAS,EAAE,QAAQ,EAAE,OAAO;EAAE,MAAM,EAAE,OAAO;EAAG,SAAS,EAAE,OAAO;CAAE,CAAC,EAAE;CACvE,WAAW;EACT,KAAK,EAAE,aAAa,gBAAgB;EACpC,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,eAAe,KAAwB;CACrD,IAAI,QAAQ,iBAAiB,OAAO,MAAM;EACxC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,SAAS,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,EAAE;EAClE,OAAO,EAAE,KAAK,OAAO,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC;CAC9D,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW;EAC3F,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,EAAE,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,QAAQ,IAAI;GACtE,MAAM,KAAK;GACX,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;EACjC,CAAC;EACD,OAAO,EAAE,KAAK;GAAE,GAAG;GAAM,OAAO;EAAM,GAAG,GAAG;CAC9C,CAAC;CAED,IAAI,QAAQ,kBAAkB,OAAO,MAAM;EACzC,MAAM,EAAE,MAAM,YAAY,EAAE,IAAI,MAAM,OAAO;EAC7C,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,GAAG,WAAW;EACtE,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,OAAO;EACzE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,MAAM,EAAE;EACnD,OAAO,EAAE,KAAK,MAAM,GAAG;CACzB,CAAC;AACH"}

package/dist/routers/ui.mjs

@@ -2,12 +2,16 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { currentProjectRole } from "./helpers.mjs";
 import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
-import { currentProjectRole } from "./helpers.mjs";
 import { loadBaselineView } from "./baseline-guard.mjs";
+import { loadInsightPanel } from "../insights/panel.mjs";
+import { linkedUsageByStory, linkedUsageFor } from "./links.handlers.mjs";
+import { designUrlsFor, loadDesignResolutions, loadReviewDesign, returnPathOf } from "./design.handlers.mjs";
 import { renderBuildDetailPage } from "../pages/build-detail.mjs";
-import { renderBuildDiffPage } from "../pages/build-diff.mjs";
+import { renderBuildDiffPage, selectedSnapshot } from "../pages/build-diff.mjs";
+import { renderComponentPage } from "../pages/component-detail.mjs";
 import { renderActiveQueue, renderComputeJobsPage } from "../pages/compute-jobs.mjs";
 import { renderLabelDetailPage, renderLabelsPage } from "../pages/label-detail.mjs";
 import { renderLibraryPage } from "../pages/library.mjs";
@@ -15,6 +19,7 @@ import { renderProjectBuildsPage } from "../pages/project-builds.mjs";
 import { renderProjectCreatePage } from "../pages/project-create.mjs";
 import { renderProjectsPage } from "../pages/projects.mjs";
 import { renderRootPage } from "../pages/root.mjs";
+import { loadComponentPage } from "./component.handlers.mjs";
 import { registerSettingsPages } from "./settings.mjs";
 import { BuildModel, CommentModel, LabelModel, ProjectModel, SnapshotModel } from "@storyshelf/core/models";
 //#region src/routers/ui.ts
@@ -100,7 +105,8 @@ function registerUiPages(app) {
 		return c.html(html);
 	});
 	app.get("/projects/:slug/builds/:buildId", async (c) => {
-		const html = await renderBuildDetailPage(c.req.param("buildId"));
+		const buildId = c.req.param("buildId");
+		const html = await renderBuildDetailPage(buildId, await loadBuildUsage(c, buildId));
 		if (!html) return c.notFound();
 		return c.html(html);
 	});
@@ -111,7 +117,7 @@ function registerUiPages(app) {
 		const queueView = await getQueueView();
 		const canRetry = await canManageJobs(project.id);
 		if (c.req.query("partial") === "queue") return c.html(renderActiveQueue(slug, queueView));
-		const html = await renderComputeJobsPage(slug, queueView, canRetry, getStore().captureQueue?.metadata.kind === "memory");
+		const html = await renderComputeJobsPage(slug, queueView, canRetry);
 		if (!html) return c.notFound();
 		return c.html(html);
 	});
@@ -128,6 +134,8 @@ function registerUiPages(app) {
 		const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);
 		const { user, authEnabled } = getStore();
 		const canReview = !authEnabled || Boolean(user);
+		const selected = selectedSnapshot(snapshots, snapshotId);
+		const design = selected ? await loadReviewDesign(project, selected, designUrlsFor(await loadDesignResolutions(project, snapshots), selected), returnPathOf(c)).catch(() => []) : [];
 		return c.html(renderBuildDiffPage({
 			project,
 			build,
@@ -136,7 +144,11 @@ function registerUiPages(app) {
 			selectedId: snapshotId,
 			canReview,
 			hasBaseline,
-			drifted
+			drifted,
+			insight: await loadInsightPanel(project, build),
+			design,
+			usage: await linkedUsageFor(c, project, build.id, selectedSnapshot(snapshots, snapshotId)?.storyImportPath ?? null).catch(() => []),
+			publishedBaseDomain: getStore().config.publishedBaseDomain
 		}));
 	});
 	app.get("/projects/:slug/labels", async (c) => {
@@ -153,6 +165,13 @@ function registerUiPages(app) {
 		if (!html) return c.notFound();
 		return c.html(html);
 	});
+	app.get("/projects/:slug/components/*", async (c) => {
+		const slug = c.req.param("slug");
+		const base = `/projects/${slug}/components/`;
+		const path = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : "";
+		const data = await loadComponentPage(c, slug, path, c.req.query("tab"), c.req.query("story"));
+		return data ? c.html(renderComponentPage(data)) : c.notFound();
+	});
 	app.get("/projects/:slug/library", async (c) => {
 		const html = await renderLibraryPage(c.req.param("slug"), c.req.query("branch"));
 		if (!html) return c.notFound();
@@ -160,6 +179,16 @@ function registerUiPages(app) {
 	});
 	registerSettingsPages(app);
 }
+/** Linked-package usage for every story of a build; empty on any failure so the page still renders. */
+async function loadBuildUsage(c, buildId) {
+	try {
+		const build = await new BuildModel(getStore().db).get(buildId);
+		const project = build ? await new ProjectModel(getStore().db).get(build.projectId) : null;
+		return build && project ? await linkedUsageByStory(c, project, build.id) : /* @__PURE__ */ new Map();
+	} catch {
+		return /* @__PURE__ */ new Map();
+	}
+}
 //#endregion
 export { registerUiPages };
 

package/dist/routers/ui.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ui.mjs","names":[],"sources":["../../src/routers/ui.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { CommentModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderBuildDetailPage } from \"../pages/build-detail.tsx\";\nimport { renderBuildDiffPage } from \"../pages/build-diff.tsx\";\nimport { renderComputeJobsPage, renderActiveQueue } from \"../pages/compute-jobs.tsx\";\nimport { renderLabelDetailPage, renderLabelsPage } from \"../pages/label-detail.tsx\";\nimport { renderLibraryPage } from \"../pages/library.tsx\";\nimport { renderProjectBuildsPage } from \"../pages/project-builds.tsx\";\nimport { renderProjectCreatePage } from \"../pages/project-create.tsx\";\nimport { renderProjectsPage } from \"../pages/projects.tsx\";\nimport { renderRootPage } from \"../pages/root.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { loadBaselineView } from \"./baseline-guard.ts\";\nimport { flash } from \"./flash.ts\";\nimport { currentProjectRole } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { registerSettingsPages } from \"./settings.ts\";\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction decodeRest(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return \"\";\n  }\n}\n\ninterface QueueView {\n  buildId: string;\n  status: string;\n  queuedAt: string;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nasync function getQueueView(): Promise<QueueView[]> {\n  const queue = getStore().captureQueue;\n  if (!queue) {\n    return [];\n  }\n  const active = await queue.active();\n  return active.map((entry) => ({\n    buildId: entry.buildId,\n    status: entry.status,\n    queuedAt: entry.queuedAt,\n    startedAt: entry.startedAt,\n    finishedAt: entry.finishedAt,\n    error: entry.error,\n  }));\n}\n\nasync function canManageJobs(projectId: string): Promise<boolean> {\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const roles: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n  const role = await currentProjectRole(projectId);\n  return Boolean(role && roles.includes(role));\n}\n\n/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */\nexport function registerUiPages(app: ShelfRouter): void {\n  // eslint-disable-next-line promise-function-async -- renderRootPage returns RenderedContent (string | Promise<string>)\n  app.get(\"/\", async (c) => c.html(await renderRootPage()));\n  app.get(\"/projects\", async (c) => c.html(await renderProjectsPage()));\n  // eslint-disable-next-line promise-function-async -- renderProjectCreatePage returns RenderedContent (string | Promise<string>)\n  app.get(\"/projects/new\", async (c) => c.html(await renderProjectCreatePage()));\n\n  app.post(\"/projects/new\", async (c) => {\n    const form = await c.req.formData();\n    const name = asString(form.get(\"name\"));\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    if (!name) {\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          errors: { name: \"Name is required\" },\n        }),\n        400,\n      );\n    }\n    try {\n      const project = await new ProjectModel(getStore().db).create({\n        name,\n        gitRepository,\n        gitDefaultBranch,\n      });\n      await new LabelModel(getStore().db).seedFor(project.id);\n      flash(c, `Created ${project.name}`);\n      return hxRedirect(c, `/projects/${project.slug}/library`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create project\";\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          globalError: message,\n        }),\n        400,\n      );\n    }\n  });\n\n  app.get(\"/projects/:slug\", (c) => c.redirect(`/projects/${c.req.param(\"slug\")}/library`, 302));\n\n  app.get(\"/projects/:slug/builds\", async (c) => {\n    const html = await renderProjectBuildsPage(c.req.param(\"slug\"), {\n      status: c.req.query(\"status\"),\n      branch: c.req.query(\"branch\"),\n    });\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId\", async (c) => {\n    const html = await renderBuildDetailPage(c.req.param(\"buildId\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/jobs\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const queueView = await getQueueView();\n    const canRetry = await canManageJobs(project.id);\n    if (c.req.query(\"partial\") === \"queue\") {\n      return c.html(renderActiveQueue(slug, queueView));\n    }\n    const html = await renderComputeJobsPage(\n      slug,\n      queueView,\n      canRetry,\n      getStore().captureQueue?.metadata.kind === \"memory\",\n    );\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId/diff\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    const snapshotId = c.req.query(\"snapshot\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      return c.notFound();\n    }\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const comments = await new CommentModel(getStore().db).listByBuild(build.id);\n    const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);\n    const { user, authEnabled } = getStore();\n    const canReview = !authEnabled || Boolean(user);\n    return c.html(\n      renderBuildDiffPage({\n        project,\n        build,\n        snapshots,\n        comments,\n        selectedId: snapshotId,\n        canReview,\n        hasBaseline,\n        drifted,\n      }),\n    );\n  });\n\n  app.get(\"/projects/:slug/labels\", async (c) => {\n    const html = await renderLabelsPage(c.req.param(\"slug\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/labels/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // label value from the raw request path and decode it ourselves.\n    const base = `/projects/${slug}/labels/${key}/`;\n    const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const html = await renderLabelDetailPage(slug, key, value);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/library\", async (c) => {\n    const html = await renderLibraryPage(c.req.param(\"slug\"), c.req.query(\"branch\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  registerSettingsPages(app);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO;CACT;AACF;AAWA,eAAe,eAAqC;CAClD,MAAM,QAAQ,SAAS,CAAC,CAAC;CACzB,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,QAAO,MADc,MAAM,OAAO,EAAA,CACpB,KAAK,WAAW;EAC5B,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,OAAO,MAAM;CACf,EAAE;AACJ;AAEA,eAAe,cAAc,WAAqC;CAChE,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,QAAgC;EAAC;EAAa;EAAY;CAAO;CACvE,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,OAAO,QAAQ,QAAQ,MAAM,SAAS,IAAI,CAAC;AAC7C;;AAGA,SAAgB,gBAAgB,KAAwB;CAEtD,IAAI,IAAI,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,eAAe,CAAC,CAAC;CACxD,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,CAAC,CAAC;CAEpE,IAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,MAAM,wBAAwB,CAAC,CAAC;CAE7E,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,IAAI,CAAC,MACH,OAAO,EAAE,KACP,wBAAwB;GACtB,QAAQ;IAAE;IAAM;IAAe;GAAiB;GAChD,QAAQ,EAAE,MAAM,mBAAmB;EACrC,CAAC,GACD,GACF;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO;IAC3D;IACA;IACA;GACF,CAAC;GACD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACtD,MAAM,GAAG,WAAW,QAAQ,MAAM;GAClC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,SAAS;EAC1D,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KACP,wBAAwB;IACtB,QAAQ;KAAE;KAAM;KAAe;IAAiB;IAChD,aAAa;GACf,CAAC,GACD,GACF;EACF;CACF,CAAC;CAED,IAAI,IAAI,oBAAoB,MAAM,EAAE,SAAS,aAAa,EAAE,IAAI,MAAM,MAAM,EAAE,WAAW,GAAG,CAAC;CAE7F,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,wBAAwB,EAAE,IAAI,MAAM,MAAM,GAAG;GAC9D,QAAQ,EAAE,IAAI,MAAM,QAAQ;GAC5B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC9B,CAAC;EACD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,mCAAmC,OAAO,MAAM;EACtD,MAAM,OAAO,MAAM,sBAAsB,EAAE,IAAI,MAAM,SAAS,CAAC;EAC/D,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wBAAwB,OAAO,MAAM;EAC3C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,WAAW,MAAM,cAAc,QAAQ,EAAE;EAC/C,IAAI,EAAE,IAAI,MAAM,SAAS,MAAM,SAC7B,OAAO,EAAE,KAAK,kBAAkB,MAAM,SAAS,CAAC;EAElD,MAAM,OAAO,MAAM,sBACjB,MACA,WACA,UACA,SAAS,CAAC,CAAC,cAAc,SAAS,SAAS,QAC7C;EACA,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC3D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU;EACzC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC3E,MAAM,EAAE,aAAa,YAAY,MAAM,iBAAiB,SAAS,OAAO,SAAS;EACjF,MAAM,EAAE,MAAM,gBAAgB,SAAS;EACvC,MAAM,YAAY,CAAC,eAAe,QAAQ,IAAI;EAC9C,OAAO,EAAE,KACP,oBAAoB;GAClB;GACA;GACA;GACA;GACA,YAAY;GACZ;GACA;GACA;EACF,CAAC,CACH;CACF,CAAC;CAED,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM,CAAC;EACvD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACpD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAG7B,MAAM,OAAO,aAAa,KAAK,UAAU,IAAI;EAC7C,MAAM,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACxF,MAAM,OAAO,MAAM,sBAAsB,MAAM,KAAK,KAAK;EACzD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,OAAO,MAAM,kBAAkB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/E,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,sBAAsB,GAAG;AAC3B"}
+{"version":3,"file":"ui.mjs","names":[],"sources":["../../src/routers/ui.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { CommentModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { loadInsightPanel } from \"../insights/panel.ts\";\nimport { renderBuildDetailPage } from \"../pages/build-detail.tsx\";\nimport type { LinkedUsageItem } from \"../pages/build-diff-usage.tsx\";\nimport { renderBuildDiffPage, selectedSnapshot } from \"../pages/build-diff.tsx\";\nimport { renderComponentPage } from \"../pages/component-detail.tsx\";\nimport { renderComputeJobsPage, renderActiveQueue } from \"../pages/compute-jobs.tsx\";\nimport { renderLabelDetailPage, renderLabelsPage } from \"../pages/label-detail.tsx\";\nimport { renderLibraryPage } from \"../pages/library.tsx\";\nimport { renderProjectBuildsPage } from \"../pages/project-builds.tsx\";\nimport { renderProjectCreatePage } from \"../pages/project-create.tsx\";\nimport { renderProjectsPage } from \"../pages/projects.tsx\";\nimport { renderRootPage } from \"../pages/root.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { loadBaselineView } from \"./baseline-guard.ts\";\nimport { loadComponentPage } from \"./component.handlers.ts\";\nimport {\n  designUrlsFor,\n  loadDesignResolutions,\n  loadReviewDesign,\n  returnPathOf,\n} from \"./design.handlers.ts\";\nimport { flash } from \"./flash.ts\";\nimport { currentProjectRole } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { linkedUsageByStory, linkedUsageFor } from \"./links.handlers.ts\";\nimport { registerSettingsPages } from \"./settings.ts\";\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction decodeRest(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return \"\";\n  }\n}\n\ninterface QueueView {\n  buildId: string;\n  status: string;\n  queuedAt: string;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nasync function getQueueView(): Promise<QueueView[]> {\n  const queue = getStore().captureQueue;\n  if (!queue) {\n    return [];\n  }\n  const active = await queue.active();\n  return active.map((entry) => ({\n    buildId: entry.buildId,\n    status: entry.status,\n    queuedAt: entry.queuedAt,\n    startedAt: entry.startedAt,\n    finishedAt: entry.finishedAt,\n    error: entry.error,\n  }));\n}\n\nasync function canManageJobs(projectId: string): Promise<boolean> {\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const roles: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n  const role = await currentProjectRole(projectId);\n  return Boolean(role && roles.includes(role));\n}\n\n/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */\nexport function registerUiPages(app: ShelfRouter): void {\n  // eslint-disable-next-line promise-function-async -- renderRootPage returns RenderedContent (string | Promise<string>)\n  app.get(\"/\", async (c) => c.html(await renderRootPage()));\n  app.get(\"/projects\", async (c) => c.html(await renderProjectsPage()));\n  // eslint-disable-next-line promise-function-async -- renderProjectCreatePage returns RenderedContent (string | Promise<string>)\n  app.get(\"/projects/new\", async (c) => c.html(await renderProjectCreatePage()));\n\n  app.post(\"/projects/new\", async (c) => {\n    const form = await c.req.formData();\n    const name = asString(form.get(\"name\"));\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    if (!name) {\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          errors: { name: \"Name is required\" },\n        }),\n        400,\n      );\n    }\n    try {\n      const project = await new ProjectModel(getStore().db).create({\n        name,\n        gitRepository,\n        gitDefaultBranch,\n      });\n      await new LabelModel(getStore().db).seedFor(project.id);\n      flash(c, `Created ${project.name}`);\n      return hxRedirect(c, `/projects/${project.slug}/library`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create project\";\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          globalError: message,\n        }),\n        400,\n      );\n    }\n  });\n\n  app.get(\"/projects/:slug\", (c) => c.redirect(`/projects/${c.req.param(\"slug\")}/library`, 302));\n\n  app.get(\"/projects/:slug/builds\", async (c) => {\n    const html = await renderProjectBuildsPage(c.req.param(\"slug\"), {\n      status: c.req.query(\"status\"),\n      branch: c.req.query(\"branch\"),\n    });\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId\", async (c) => {\n    const buildId = c.req.param(\"buildId\");\n    const html = await renderBuildDetailPage(buildId, await loadBuildUsage(c, buildId));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/jobs\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const queueView = await getQueueView();\n    const canRetry = await canManageJobs(project.id);\n    if (c.req.query(\"partial\") === \"queue\") {\n      return c.html(renderActiveQueue(slug, queueView));\n    }\n    const html = await renderComputeJobsPage(slug, queueView, canRetry);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId/diff\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    const snapshotId = c.req.query(\"snapshot\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      return c.notFound();\n    }\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const comments = await new CommentModel(getStore().db).listByBuild(build.id);\n    const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);\n    const { user, authEnabled } = getStore();\n    const canReview = !authEnabled || Boolean(user);\n    const selected = selectedSnapshot(snapshots, snapshotId);\n    const design = selected\n      ? await loadReviewDesign(\n          project,\n          selected,\n          designUrlsFor(await loadDesignResolutions(project, snapshots), selected),\n          returnPathOf(c),\n        ).catch(() => [])\n      : [];\n    return c.html(\n      renderBuildDiffPage({\n        project,\n        build,\n        snapshots,\n        comments,\n        selectedId: snapshotId,\n        canReview,\n        hasBaseline,\n        drifted,\n        insight: await loadInsightPanel(project, build),\n        design,\n        usage: await linkedUsageFor(\n          c,\n          project,\n          build.id,\n          selectedSnapshot(snapshots, snapshotId)?.storyImportPath ?? null,\n        ).catch(() => []),\n        publishedBaseDomain: getStore().config.publishedBaseDomain,\n      }),\n    );\n  });\n\n  app.get(\"/projects/:slug/labels\", async (c) => {\n    const html = await renderLabelsPage(c.req.param(\"slug\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/labels/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // label value from the raw request path and decode it ourselves.\n    const base = `/projects/${slug}/labels/${key}/`;\n    const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const html = await renderLabelDetailPage(slug, key, value);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/components/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const base = `/projects/${slug}/components/`;\n    const path = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const data = await loadComponentPage(c, slug, path, c.req.query(\"tab\"), c.req.query(\"story\"));\n    return data ? c.html(renderComponentPage(data)) : c.notFound();\n  });\n\n  app.get(\"/projects/:slug/library\", async (c) => {\n    const html = await renderLibraryPage(c.req.param(\"slug\"), c.req.query(\"branch\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  registerSettingsPages(app);\n}\n\n/** Linked-package usage for every story of a build; empty on any failure so the page still renders. */\nasync function loadBuildUsage(\n  c: Context,\n  buildId: string,\n): Promise<Map<string, LinkedUsageItem[]>> {\n  try {\n    const build = await new BuildModel(getStore().db).get(buildId);\n    const project = build ? await new ProjectModel(getStore().db).get(build.projectId) : null;\n    return build && project ? await linkedUsageByStory(c, project, build.id) : new Map();\n  } catch {\n    return new Map();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO;CACT;AACF;AAWA,eAAe,eAAqC;CAClD,MAAM,QAAQ,SAAS,CAAC,CAAC;CACzB,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,QAAO,MADc,MAAM,OAAO,EAAA,CACpB,KAAK,WAAW;EAC5B,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,OAAO,MAAM;CACf,EAAE;AACJ;AAEA,eAAe,cAAc,WAAqC;CAChE,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,QAAgC;EAAC;EAAa;EAAY;CAAO;CACvE,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,OAAO,QAAQ,QAAQ,MAAM,SAAS,IAAI,CAAC;AAC7C;;AAGA,SAAgB,gBAAgB,KAAwB;CAEtD,IAAI,IAAI,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,eAAe,CAAC,CAAC;CACxD,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,CAAC,CAAC;CAEpE,IAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,MAAM,wBAAwB,CAAC,CAAC;CAE7E,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,IAAI,CAAC,MACH,OAAO,EAAE,KACP,wBAAwB;GACtB,QAAQ;IAAE;IAAM;IAAe;GAAiB;GAChD,QAAQ,EAAE,MAAM,mBAAmB;EACrC,CAAC,GACD,GACF;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO;IAC3D;IACA;IACA;GACF,CAAC;GACD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACtD,MAAM,GAAG,WAAW,QAAQ,MAAM;GAClC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,SAAS;EAC1D,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KACP,wBAAwB;IACtB,QAAQ;KAAE;KAAM;KAAe;IAAiB;IAChD,aAAa;GACf,CAAC,GACD,GACF;EACF;CACF,CAAC;CAED,IAAI,IAAI,oBAAoB,MAAM,EAAE,SAAS,aAAa,EAAE,IAAI,MAAM,MAAM,EAAE,WAAW,GAAG,CAAC;CAE7F,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,wBAAwB,EAAE,IAAI,MAAM,MAAM,GAAG;GAC9D,QAAQ,EAAE,IAAI,MAAM,QAAQ;GAC5B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC9B,CAAC;EACD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,mCAAmC,OAAO,MAAM;EACtD,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,OAAO,MAAM,sBAAsB,SAAS,MAAM,eAAe,GAAG,OAAO,CAAC;EAClF,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wBAAwB,OAAO,MAAM;EAC3C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,WAAW,MAAM,cAAc,QAAQ,EAAE;EAC/C,IAAI,EAAE,IAAI,MAAM,SAAS,MAAM,SAC7B,OAAO,EAAE,KAAK,kBAAkB,MAAM,SAAS,CAAC;EAElD,MAAM,OAAO,MAAM,sBAAsB,MAAM,WAAW,QAAQ;EAClE,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC3D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU;EACzC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC3E,MAAM,EAAE,aAAa,YAAY,MAAM,iBAAiB,SAAS,OAAO,SAAS;EACjF,MAAM,EAAE,MAAM,gBAAgB,SAAS;EACvC,MAAM,YAAY,CAAC,eAAe,QAAQ,IAAI;EAC9C,MAAM,WAAW,iBAAiB,WAAW,UAAU;EACvD,MAAM,SAAS,WACX,MAAM,iBACJ,SACA,UACA,cAAc,MAAM,sBAAsB,SAAS,SAAS,GAAG,QAAQ,GACvE,aAAa,CAAC,CAChB,CAAC,CAAC,YAAY,CAAC,CAAC,IAChB,CAAC;EACL,OAAO,EAAE,KACP,oBAAoB;GAClB;GACA;GACA;GACA;GACA,YAAY;GACZ;GACA;GACA;GACA,SAAS,MAAM,iBAAiB,SAAS,KAAK;GAC9C;GACA,OAAO,MAAM,eACX,GACA,SACA,MAAM,IACN,iBAAiB,WAAW,UAAU,CAAC,EAAE,mBAAmB,IAC9D,CAAC,CAAC,YAAY,CAAC,CAAC;GAChB,qBAAqB,SAAS,CAAC,CAAC,OAAO;EACzC,CAAC,CACH;CACF,CAAC;CAED,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM,CAAC;EACvD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACpD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAG7B,MAAM,OAAO,aAAa,KAAK,UAAU,IAAI;EAC7C,MAAM,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACxF,MAAM,OAAO,MAAM,sBAAsB,MAAM,KAAK,KAAK;EACzD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,gCAAgC,OAAO,MAAM;EACnD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,OAAO,aAAa,KAAK;EAC/B,MAAM,OAAO,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACvF,MAAM,OAAO,MAAM,kBAAkB,GAAG,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC;EAC5F,OAAO,OAAO,EAAE,KAAK,oBAAoB,IAAI,CAAC,IAAI,EAAE,SAAS;CAC/D,CAAC;CAED,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,OAAO,MAAM,kBAAkB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/E,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,sBAAsB,GAAG;AAC3B;;AAGA,eAAe,eACb,GACA,SACyC;CACzC,IAAI;EACF,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,MAAM,UAAU,QAAQ,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS,IAAI;EACrF,OAAO,SAAS,UAAU,MAAM,mBAAmB,GAAG,SAAS,MAAM,EAAE,oBAAI,IAAI,IAAI;CACrF,QAAQ;EACN,uBAAO,IAAI,IAAI;CACjB;AACF"}

package/dist/routers/webhooks.mjs

@@ -1,13 +1,11 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { credentialKeys } from "../credential-keys.mjs";
-import { getStore } from "../store.mjs";
 import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, unauthorized, webhookCreateSchema, webhookCreatedSchema, webhookPublicSchema } from "./schemas.mjs";
+import { webhookModel } from "./scoped-models.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { WebhookModel } from "@storyshelf/core/models";
-import { randomToken } from "@storyshelf/core/utils";
 //#region src/routers/webhooks.ts
 const ADMIN_ROLES = ["admin"];
 const listWebhooksRoute = createRoute({
@@ -60,7 +58,7 @@ const deleteWebhookRoute = createRoute({
 function registerWebhooks(app) {
 	app.openapi(listWebhooksRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
-		const webhooks = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).list(project.id);
+		const webhooks = await webhookModel().list(project.id);
 		return c.json(webhooks.map((webhook) => ({
 			id: webhook.id,
 			url: webhook.url,
@@ -70,11 +68,7 @@ function registerWebhooks(app) {
 	app.openapi(createWebhookRoute, async (c) => {
 		const project = await resolveAuthorizedProject(c, c.req.valid("param").slug, ...ADMIN_ROLES);
 		const body = c.req.valid("json");
-		const secret = randomToken("whsec_").value;
-		const webhook = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).create(project.id, {
-			...body,
-			secret
-		});
+		const { webhook, secret } = await webhookModel().issue(project.id, body);
 		return c.json({
 			id: webhook.id,
 			url: webhook.url,
@@ -85,9 +79,9 @@ function registerWebhooks(app) {
 	app.openapi(deleteWebhookRoute, async (c) => {
 		const { slug, webhookId } = c.req.valid("param");
 		const project = await resolveAuthorizedProject(c, slug, ...ADMIN_ROLES);
-		const webhook = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).get(project.id, webhookId);
+		const webhook = await webhookModel().get(project.id, webhookId);
 		if (!webhook) notFound("Webhook not found");
-		await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).remove(project.id, webhook.id);
+		await webhookModel().remove(project.id, webhook.id);
 		return c.body(null, 204);
 	});
 }