@storyshelf/app 0.7.0 → 0.8.0

package/dist/publish-setup.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { DEFAULT_SCRATCH_DIR } from "@storyshelf/core/config";
 import { createCatalogHook, createCatalogLoader, createPublishCompleter, createPublishHandler, extractionLimitsOf, resolvePublishLimits } from "@storyshelf/core/capture";
-//#region src/publish-setup.ts
+// src/publish-setup.ts
 /**
 * Publishing wiring (ADR 0006, decision 10): the completer every upload route ends in, and the
 * `publish` job kind on the shared database queue. Its handler runs on every instance with a
@@ -83,7 +83,6 @@ function publishHooks(catalog, captureWillRun, delivery) {
 		}
 	];
 }
-//#endregion
 export { setupPublishing };
 
 //# sourceMappingURL=publish-setup.mjs.map

package/dist/retention-timer.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { ProjectModel } from "@storyshelf/core/models";
 import { Retention, purgeAiData } from "@storyshelf/core/retention";
-//#region src/retention-timer.ts
+// src/retention-timer.ts
 const DEFAULT_BRANCH_TTL_DAYS = 30;
 const DEFAULT_BRANCH_GC_INTERVAL_MS = 864e5;
 /**
@@ -17,16 +17,20 @@ const DEFAULT_BRANCH_GC_INTERVAL_MS = 864e5;
 * @param logger - Structured logger for sweep diagnostics
 * @returns Timer handle with `stop()`, or `null` if GC is disabled
 */
-function startBranchGcTimer(db, storage, config, logger) {
+function startBranchGcTimer(db, storage, config, logger, testing = false) {
 	const ttlDays = config.branchTtlDays ?? DEFAULT_BRANCH_TTL_DAYS;
 	if (ttlDays === null) return null;
 	const intervalMs = config.branchGcIntervalMs ?? DEFAULT_BRANCH_GC_INTERVAL_MS;
 	if (intervalMs <= 0) return null;
-	return scheduleBranchGc(createBranchGcRunner(db, storage, logger, ttlDays), intervalMs);
+	return scheduleBranchGc(createBranchGcRunner(db, storage, logger, ttlDays, testing), intervalMs);
 }
-function createBranchGcRunner(db, storage, logger, ttlDays) {
+function createBranchGcRunner(db, storage, logger, ttlDays, testing) {
 	return async () => {
 		try {
+			if (testing) {
+				await purgeAiData(db, /* @__PURE__ */ new Date(), logger);
+				return;
+			}
 			const projects = await new ProjectModel(db).list();
 			const retention = new Retention(db, storage, {
 				builds: db.tables.builds,
@@ -47,20 +51,15 @@ function createBranchGcRunner(db, storage, logger, ttlDays) {
 	};
 }
 function scheduleBranchGc(run, intervalMs) {
-	const timeout = setTimeout(() => {
-		run();
-	}, Math.min(36e5, intervalMs));
+	const timeout = setTimeout(() => run(), Math.min(36e5, intervalMs));
 	timeout.unref?.();
-	const interval = setInterval(() => {
-		run();
-	}, intervalMs);
+	const interval = setInterval(() => run(), intervalMs);
 	interval.unref?.();
 	return { stop: () => {
 		clearTimeout(timeout);
 		clearInterval(interval);
 	} };
 }
-//#endregion
 export { startBranchGcTimer };
 
 //# sourceMappingURL=retention-timer.mjs.map

package/dist/retention-timer.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"retention-timer.mjs","names":[],"sources":["../src/retention-timer.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport type { ShelfConfig } from \"@storyshelf/core/config\";\nimport type { Logger } from \"@storyshelf/core/logger\";\n/* oxlint-disable typescript/promise-function-async -- interval helpers return promise factories */\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { Retention, purgeAiData } from \"@storyshelf/core/retention\";\n\nconst DEFAULT_BRANCH_TTL_DAYS = 30;\nconst DEFAULT_BRANCH_GC_INTERVAL_MS = 86_400_000;\n\n/** Handle for the background branch-GC interval; call `stop()` on server shutdown. */\nexport interface BranchGcTimer {\n  stop(): void;\n}\n\n/**\n * Start a daily sweep that removes baselines for branches that have not\n * been updated within `branchTtlDays`. Returns a timer handle or `null`\n * when GC is disabled (`branchTtlDays: null` or non-positive interval).\n *\n * @param db - Database adapter to list projects\n * @param storage - Storage adapter for baseline cleanup\n * @param config - Shelf config supplying `branchTtlDays` and `branchGcIntervalMs`\n * @param logger - Structured logger for sweep diagnostics\n * @returns Timer handle with `stop()`, or `null` if GC is disabled\n */\nexport function startBranchGcTimer(\n  db: DatabaseAdapter,\n  storage: StorageAdapter,\n  config: ShelfConfig,\n  logger: Logger,\n): BranchGcTimer | null {\n  const ttlDays = config.branchTtlDays ?? DEFAULT_BRANCH_TTL_DAYS;\n  if (ttlDays === null) {\n    return null;\n  }\n  const intervalMs = config.branchGcIntervalMs ?? DEFAULT_BRANCH_GC_INTERVAL_MS;\n  if (intervalMs <= 0) {\n    return null;\n  }\n  const run = createBranchGcRunner(db, storage, logger, ttlDays);\n  return scheduleBranchGc(run, intervalMs);\n}\n\n// oxlint-disable-next-line typescript/promise-function-async\nfunction createBranchGcRunner(\n  db: DatabaseAdapter,\n  storage: StorageAdapter,\n  logger: Logger,\n  ttlDays: number,\n): () => Promise<void> {\n  return async (): Promise<void> => {\n    try {\n      const projects = await new ProjectModel(db).list();\n      const retention = new Retention(\n        db,\n        storage,\n        {\n          builds: db.tables.builds,\n          buildLabels: db.tables.buildLabels,\n          baselines: db.tables.baselines,\n        },\n        logger,\n      );\n      const results = await Promise.all(\n        projects.map((project) => retention.purgeStaleBranches(project, ttlDays)),\n      );\n      const totalBranches = results.reduce(\n        (sum: number, r: { removedBranches: number }) => sum + r.removedBranches,\n        0,\n      );\n      const totalBaselines = results.reduce(\n        (sum: number, r: { removedBaselines: number }) => sum + r.removedBaselines,\n        0,\n      );\n      await purgeAiData(db, new Date(), logger);\n      if (totalBranches > 0 || totalBaselines > 0) {\n        logger.info({ totalBranches, totalBaselines }, \"branch GC daily sweep complete\");\n      }\n    } catch (error) {\n      logger.error({ err: error }, \"branch GC sweep failed\");\n    }\n  };\n}\n\nfunction scheduleBranchGc(run: () => Promise<void>, intervalMs: number): BranchGcTimer {\n  const firstDelay = Math.min(3_600_000, intervalMs);\n  const timeout = setTimeout(() => {\n    // oxlint-disable-next-line no-void -- fire-and-forget interval task\n    void run();\n  }, firstDelay);\n  timeout.unref?.();\n\n  const interval = setInterval(() => {\n    // oxlint-disable-next-line no-void -- fire-and-forget interval task\n    void run();\n  }, intervalMs);\n  interval.unref?.();\n\n  return {\n    stop: () => {\n      clearTimeout(timeout);\n      clearInterval(interval);\n    },\n  };\n}\n"],"mappings":";;;;;;AAQA,MAAM,0BAA0B;AAChC,MAAM,gCAAgC;;;;;;;;;;;;AAkBtC,SAAgB,mBACd,IACA,SACA,QACA,QACsB;CACtB,MAAM,UAAU,OAAO,iBAAiB;CACxC,IAAI,YAAY,MACd,OAAO;CAET,MAAM,aAAa,OAAO,sBAAsB;CAChD,IAAI,cAAc,GAChB,OAAO;CAGT,OAAO,iBADK,qBAAqB,IAAI,SAAS,QAAQ,OAC5B,GAAG,UAAU;AACzC;AAGA,SAAS,qBACP,IACA,SACA,QACA,SACqB;CACrB,OAAO,YAA2B;EAChC,IAAI;GACF,MAAM,WAAW,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK;GACjD,MAAM,YAAY,IAAI,UACpB,IACA,SACA;IACE,QAAQ,GAAG,OAAO;IAClB,aAAa,GAAG,OAAO;IACvB,WAAW,GAAG,OAAO;GACvB,GACA,MACF;GACA,MAAM,UAAU,MAAM,QAAQ,IAC5B,SAAS,KAAK,YAAY,UAAU,mBAAmB,SAAS,OAAO,CAAC,CAC1E;GACA,MAAM,gBAAgB,QAAQ,QAC3B,KAAa,MAAmC,MAAM,EAAE,iBACzD,CACF;GACA,MAAM,iBAAiB,QAAQ,QAC5B,KAAa,MAAoC,MAAM,EAAE,kBAC1D,CACF;GACA,MAAM,YAAY,oBAAI,IAAI,KAAK,GAAG,MAAM;GACxC,IAAI,gBAAgB,KAAK,iBAAiB,GACxC,OAAO,KAAK;IAAE;IAAe;GAAe,GAAG,gCAAgC;EAEnF,SAAS,OAAO;GACd,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,wBAAwB;EACvD;CACF;AACF;AAEA,SAAS,iBAAiB,KAA0B,YAAmC;CAErF,MAAM,UAAU,iBAAiB;EAE/B,IAAS;CACX,GAJmB,KAAK,IAAI,MAAW,UAI3B,CAAC;CACb,QAAQ,QAAQ;CAEhB,MAAM,WAAW,kBAAkB;EAEjC,IAAS;CACX,GAAG,UAAU;CACb,SAAS,QAAQ;CAEjB,OAAO,EACL,YAAY;EACV,aAAa,OAAO;EACpB,cAAc,QAAQ;CACxB,EACF;AACF"}
+{"version":3,"file":"retention-timer.mjs","names":[],"sources":["../src/retention-timer.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport type { ShelfConfig } from \"@storyshelf/core/config\";\nimport type { Logger } from \"@storyshelf/core/logger\";\n/* oxlint-disable typescript/promise-function-async -- interval helpers return promise factories */\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { Retention, purgeAiData } from \"@storyshelf/core/retention\";\n\nconst DEFAULT_BRANCH_TTL_DAYS = 30;\nconst DEFAULT_BRANCH_GC_INTERVAL_MS = 86_400_000;\n\n/** Handle for the background branch-GC interval; call `stop()` on server shutdown. */\nexport interface BranchGcTimer {\n  stop(): void;\n}\n\n/**\n * Start a daily sweep that removes baselines for branches that have not\n * been updated within `branchTtlDays`. Returns a timer handle or `null`\n * when GC is disabled (`branchTtlDays: null` or non-positive interval).\n *\n * @param db - Database adapter to list projects\n * @param storage - Storage adapter for baseline cleanup\n * @param config - Shelf config supplying `branchTtlDays` and `branchGcIntervalMs`\n * @param logger - Structured logger for sweep diagnostics\n * @returns Timer handle with `stop()`, or `null` if GC is disabled\n */\nexport function startBranchGcTimer(\n  db: DatabaseAdapter,\n  storage: StorageAdapter,\n  config: ShelfConfig,\n  logger: Logger,\n  testing = false,\n): BranchGcTimer | null {\n  const ttlDays = config.branchTtlDays ?? DEFAULT_BRANCH_TTL_DAYS;\n  if (ttlDays === null) {\n    return null;\n  }\n  const intervalMs = config.branchGcIntervalMs ?? DEFAULT_BRANCH_GC_INTERVAL_MS;\n  if (intervalMs <= 0) {\n    return null;\n  }\n  const run = createBranchGcRunner(db, storage, logger, ttlDays, testing);\n  return scheduleBranchGc(run, intervalMs);\n}\n\n// oxlint-disable-next-line typescript/promise-function-async\nfunction createBranchGcRunner(\n  db: DatabaseAdapter,\n  storage: StorageAdapter,\n  logger: Logger,\n  ttlDays: number,\n  testing: boolean,\n): () => Promise<void> {\n  // oxlint-disable-next-line eslint/max-statements -- the sweep and its error boundary are kept together\n  return async (): Promise<void> => {\n    try {\n      // Baseline removal must be coordinated with references before testing deployments can GC.\n      // Keep independent AI-data cleanup running even while branch GC is disabled.\n      if (testing) {\n        await purgeAiData(db, new Date(), logger);\n        return;\n      }\n      const projects = await new ProjectModel(db).list();\n      const retention = new Retention(\n        db,\n        storage,\n        {\n          builds: db.tables.builds,\n          buildLabels: db.tables.buildLabels,\n          baselines: db.tables.baselines,\n        },\n        logger,\n      );\n      const results = await Promise.all(\n        projects.map((project) => retention.purgeStaleBranches(project, ttlDays)),\n      );\n      const totalBranches = results.reduce(\n        (sum: number, r: { removedBranches: number }) => sum + r.removedBranches,\n        0,\n      );\n      const totalBaselines = results.reduce(\n        (sum: number, r: { removedBaselines: number }) => sum + r.removedBaselines,\n        0,\n      );\n      await purgeAiData(db, new Date(), logger);\n      if (totalBranches > 0 || totalBaselines > 0) {\n        logger.info({ totalBranches, totalBaselines }, \"branch GC daily sweep complete\");\n      }\n    } catch (error) {\n      logger.error({ err: error }, \"branch GC sweep failed\");\n    }\n  };\n}\n\nfunction scheduleBranchGc(run: () => Promise<void>, intervalMs: number): BranchGcTimer {\n  const firstDelay = Math.min(3_600_000, intervalMs);\n  // oxlint-disable-next-line typescript/no-misused-promises, typescript/strict-void-return -- run catches failures; returning it allows deterministic completion in tests\n  const timeout = setTimeout(() => run(), firstDelay);\n  timeout.unref?.();\n\n  // oxlint-disable-next-line typescript/no-misused-promises, typescript/strict-void-return -- run catches failures\n  const interval = setInterval(() => run(), intervalMs);\n  interval.unref?.();\n\n  return {\n    stop: () => {\n      clearTimeout(timeout);\n      clearInterval(interval);\n    },\n  };\n}\n"],"mappings":";;;;;;AAQA,MAAM,0BAA0B;AAChC,MAAM,gCAAgC;;;;;;;;;;;;AAkBtC,SAAgB,mBACd,IACA,SACA,QACA,QACA,UAAU,OACY;CACtB,MAAM,UAAU,OAAO,iBAAiB;CACxC,IAAI,YAAY,MACd,OAAO;CAET,MAAM,aAAa,OAAO,sBAAsB;CAChD,IAAI,cAAc,GAChB,OAAO;CAGT,OAAO,iBADK,qBAAqB,IAAI,SAAS,QAAQ,SAAS,OACrC,GAAG,UAAU;AACzC;AAGA,SAAS,qBACP,IACA,SACA,QACA,SACA,SACqB;CAErB,OAAO,YAA2B;EAChC,IAAI;GAGF,IAAI,SAAS;IACX,MAAM,YAAY,oBAAI,IAAI,KAAK,GAAG,MAAM;IACxC;GACF;GACA,MAAM,WAAW,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK;GACjD,MAAM,YAAY,IAAI,UACpB,IACA,SACA;IACE,QAAQ,GAAG,OAAO;IAClB,aAAa,GAAG,OAAO;IACvB,WAAW,GAAG,OAAO;GACvB,GACA,MACF;GACA,MAAM,UAAU,MAAM,QAAQ,IAC5B,SAAS,KAAK,YAAY,UAAU,mBAAmB,SAAS,OAAO,CAAC,CAC1E;GACA,MAAM,gBAAgB,QAAQ,QAC3B,KAAa,MAAmC,MAAM,EAAE,iBACzD,CACF;GACA,MAAM,iBAAiB,QAAQ,QAC5B,KAAa,MAAoC,MAAM,EAAE,kBAC1D,CACF;GACA,MAAM,YAAY,oBAAI,IAAI,KAAK,GAAG,MAAM;GACxC,IAAI,gBAAgB,KAAK,iBAAiB,GACxC,OAAO,KAAK;IAAE;IAAe;GAAe,GAAG,gCAAgC;EAEnF,SAAS,OAAO;GACd,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,wBAAwB;EACvD;CACF;AACF;AAEA,SAAS,iBAAiB,KAA0B,YAAmC;CAGrF,MAAM,UAAU,iBAAiB,IAAI,GAFlB,KAAK,IAAI,MAAW,UAEU,CAAC;CAClD,QAAQ,QAAQ;CAGhB,MAAM,WAAW,kBAAkB,IAAI,GAAG,UAAU;CACpD,SAAS,QAAQ;CAEjB,OAAO,EACL,YAAY;EACV,aAAa,OAAO;EACpB,cAAc,QAAQ;CACxB,EACF;AACF"}

package/dist/review-events.mjs

@@ -5,7 +5,7 @@ import { credentialKeys } from "./credential-keys.mjs";
 import { getStore } from "./store.mjs";
 import { notifyProjectWith } from "./notify.mjs";
 import { emitWebhookEvent } from "@storyshelf/core/adapter/webhook-events";
-//#region src/review-events.ts
+// src/review-events.ts
 /**
 * Review events (ADR 0013, decisions 4 and 10; ADR 0014, decision 10). They ride the existing
 * paths: signed webhooks to the project's subscribers and the notification fan-out (stored
@@ -42,7 +42,6 @@ function reviewRequestedData(build) {
 		message: build.message
 	};
 }
-//#endregion
 export { REVIEW_EVENTS, announceReview, announceReviewWith, reviewRequestedData };
 
 //# sourceMappingURL=review-events.mjs.map

package/dist/routers/admin-pages.mjs

@@ -15,7 +15,7 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { collectHealthReport } from "./health-report.mjs";
 import { describeCaptureHost } from "@storyshelf/core/utils";
-//#region src/routers/admin-pages.ts
+// src/routers/admin-pages.ts
 /** Register the site-admin System page (adapter inventory + in-depth health). */
 function registerAdminPages(app, deps, auth) {
 	app.get("/admin", async (c) => {
@@ -84,7 +84,6 @@ async function publicOriginView() {
 		learns: authEnabled
 	};
 }
-//#endregion
 export { registerAdminPages };
 
 //# sourceMappingURL=admin-pages.mjs.map

package/dist/routers/admin-public-origin.mjs

@@ -8,7 +8,7 @@ import { flash } from "./flash.mjs";
 import { requestOpenBuildStatesNow } from "../git-status.mjs";
 import { normalizeOrigin } from "@storyshelf/core/utils";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/admin-public-origin.ts
+// src/routers/admin-public-origin.ts
 /**
 * The public origin, learnt from an admin's browser (ADR 0007, decision 6): the System page reports
 * `location.origin`, an admin confirms or replaces it, and background jobs read it from the database.
@@ -20,6 +20,13 @@ function registerPublicOriginRoutes(app) {
 	app.post("/admin/public-origin", handleSet);
 	app.post("/admin/public-origin/clear", handleClear);
 }
+/** What an admin is told when the origin is not theirs to set. */
+const FIXED_ORIGIN_MESSAGE = "The public origin comes from PUBLIC_BASE_URL or the hosting platform, so there is nothing to confirm";
+/** Whether the configuration or the platform answers: an origin an admin cannot confirm or replace. */
+async function isFixed() {
+	const source = (await getStore().publicOrigin?.resolve())?.source;
+	return source === "config" || source === "platform";
+}
 /** The origin a report names, once it matches what the browser says it used; throws 400 otherwise. */
 async function reportedOrigin(c) {
 	const body = await c.req.json().catch(() => null);
@@ -31,7 +38,7 @@ async function reportedOrigin(c) {
 async function handleReport(c) {
 	requireSiteAdmin(c);
 	const { authEnabled, publicOrigin, user } = getStore();
-	if (!authEnabled || publicOrigin === void 0) return c.body(null, 204);
+	if (!authEnabled || publicOrigin === void 0 || await isFixed()) return c.body(null, 204);
 	const reported = await reportedOrigin(c);
 	const before = await publicOrigin.stored();
 	const wasResolved = await publicOrigin.url() !== void 0;
@@ -48,6 +55,7 @@ async function resumeIfResolved(wasResolved) {
 }
 /** Store what an admin typed; the message says why not when it is no origin. */
 async function storeTyped(c) {
+	if (await isFixed()) return FIXED_ORIGIN_MESSAGE;
 	const { publicOrigin, user } = getStore();
 	const origin = (await c.req.formData()).get("origin");
 	try {
@@ -79,7 +87,6 @@ async function handleClear(c) {
 	flash(c, "Stored public origin removed");
 	return hxRedirect(c, "/admin");
 }
-//#endregion
 export { registerPublicOriginRoutes };
 
 //# sourceMappingURL=admin-public-origin.mjs.map

package/dist/routers/admin-public-origin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin-public-origin.mjs","names":[],"sources":["../../src/routers/admin-public-origin.ts"],"sourcesContent":["/**\n * The public origin, learnt from an admin's browser (ADR 0007, decision 6): the System page reports\n * `location.origin`, an admin confirms or replaces it, and background jobs read it from the database.\n * Site-admin and CSRF protected; with authentication off there is no admin, so nothing is learnt.\n */\nimport { normalizeOrigin } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { requestOpenBuildStatesNow } from \"../git-status.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\n/** Register the public-origin routes of the System page. */\nexport function registerPublicOriginRoutes(app: ShelfRouter): void {\n  app.post(\"/admin/public-origin/report\", handleReport);\n  app.post(\"/admin/public-origin\", handleSet);\n  app.post(\"/admin/public-origin/clear\", handleClear);\n}\n\n/** The origin a report names, once it matches what the browser says it used; throws 400 otherwise. */\nasync function reportedOrigin(c: Context): Promise<string> {\n  const body = (await c.req.json().catch(() => null)) as { origin?: unknown } | null;\n  const reported = typeof body?.origin === \"string\" ? normalizeOrigin(body.origin) : undefined;\n  // The browser states the origin it used itself; a report that disagrees is not one.\n  if (reported === undefined || c.req.header(\"origin\") !== reported) {\n    throw new HTTPException(400, { message: \"Origin does not match the request\" });\n  }\n  return reported;\n}\n\n/** The page reports the origin it was loaded from; the first report is kept. */\nasync function handleReport(c: Context): Promise<Response> {\n  requireSiteAdmin(c);\n  const { authEnabled, publicOrigin, user } = getStore();\n  if (!authEnabled || publicOrigin === undefined) {\n    return c.body(null, 204);\n  }\n  const reported = await reportedOrigin(c);\n  const before = await publicOrigin.stored();\n  const wasResolved = (await publicOrigin.url()) !== undefined;\n  const stored = await publicOrigin.report(reported, user?.id);\n  await resumeIfResolved(wasResolved);\n  return c.json(stored, before === null ? 201 : 200);\n}\n\n/**\n * Notifications were paused and an origin now resolves (an admin confirmed one; a mere report\n * resolves nothing): re-request the state of open builds.\n */\nasync function resumeIfResolved(wasResolved: boolean): Promise<void> {\n  if (!wasResolved && (await getStore().publicOrigin?.url()) !== undefined) {\n    requestOpenBuildStatesNow().catch(() => 0);\n  }\n}\n\n/** Store what an admin typed; the message says why not when it is no origin. */\nasync function storeTyped(c: Context): Promise<string> {\n  const { publicOrigin, user } = getStore();\n  const origin = (await c.req.formData()).get(\"origin\");\n  try {\n    const wasResolved = (await publicOrigin?.url()) !== undefined;\n    await publicOrigin?.set(typeof origin === \"string\" ? origin : \"\", user?.id);\n    await resumeIfResolved(wasResolved);\n    return \"Public origin saved\";\n  } catch (error) {\n    return error instanceof Error ? error.message : \"Invalid origin\";\n  }\n}\n\n/** An admin confirmed the detected origin or entered another. */\nasync function handleSet(c: Context): Promise<Response> {\n  requireSiteAdmin(c);\n  const { authEnabled, publicOrigin } = getStore();\n  if (!authEnabled || publicOrigin === undefined) {\n    flash(\n      c,\n      \"The public origin is learnt from an admin's browser, which needs authentication\",\n      \"warning\",\n    );\n    return hxRedirect(c, \"/admin\");\n  }\n  const message = await storeTyped(c);\n  flash(c, message, message === \"Public origin saved\" ? \"success\" : \"warning\");\n  return hxRedirect(c, \"/admin\");\n}\n\n/** An admin dropped the stored origin; the next admin visit reports a fresh one. */\nasync function handleClear(c: Context): Promise<Response> {\n  requireSiteAdmin(c);\n  const { publicOrigin } = getStore();\n  await publicOrigin?.clear();\n  flash(c, \"Stored public origin removed\");\n  return hxRedirect(c, \"/admin\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,SAAgB,2BAA2B,KAAwB;CACjE,IAAI,KAAK,+BAA+B,YAAY;CACpD,IAAI,KAAK,wBAAwB,SAAS;CAC1C,IAAI,KAAK,8BAA8B,WAAW;AACpD;;AAGA,eAAe,eAAe,GAA6B;CACzD,MAAM,OAAQ,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,IAAI;CACjD,MAAM,WAAW,OAAO,MAAM,WAAW,WAAW,gBAAgB,KAAK,MAAM,IAAI,KAAA;CAEnF,IAAI,aAAa,KAAA,KAAa,EAAE,IAAI,OAAO,QAAQ,MAAM,UACvD,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,oCAAoC,CAAC;CAE/E,OAAO;AACT;;AAGA,eAAe,aAAa,GAA+B;CACzD,iBAAiB,CAAC;CAClB,MAAM,EAAE,aAAa,cAAc,SAAS,SAAS;CACrD,IAAI,CAAC,eAAe,iBAAiB,KAAA,GACnC,OAAO,EAAE,KAAK,MAAM,GAAG;CAEzB,MAAM,WAAW,MAAM,eAAe,CAAC;CACvC,MAAM,SAAS,MAAM,aAAa,OAAO;CACzC,MAAM,cAAe,MAAM,aAAa,IAAI,MAAO,KAAA;CACnD,MAAM,SAAS,MAAM,aAAa,OAAO,UAAU,MAAM,EAAE;CAC3D,MAAM,iBAAiB,WAAW;CAClC,OAAO,EAAE,KAAK,QAAQ,WAAW,OAAO,MAAM,GAAG;AACnD;;;;;AAMA,eAAe,iBAAiB,aAAqC;CACnE,IAAI,CAAC,eAAgB,MAAM,SAAS,CAAC,CAAC,cAAc,IAAI,MAAO,KAAA,GAC7D,0BAA0B,CAAC,CAAC,YAAY,CAAC;AAE7C;;AAGA,eAAe,WAAW,GAA6B;CACrD,MAAM,EAAE,cAAc,SAAS,SAAS;CACxC,MAAM,UAAU,MAAM,EAAE,IAAI,SAAS,EAAA,CAAG,IAAI,QAAQ;CACpD,IAAI;EACF,MAAM,cAAe,MAAM,cAAc,IAAI,MAAO,KAAA;EACpD,MAAM,cAAc,IAAI,OAAO,WAAW,WAAW,SAAS,IAAI,MAAM,EAAE;EAC1E,MAAM,iBAAiB,WAAW;EAClC,OAAO;CACT,SAAS,OAAO;EACd,OAAO,iBAAiB,QAAQ,MAAM,UAAU;CAClD;AACF;;AAGA,eAAe,UAAU,GAA+B;CACtD,iBAAiB,CAAC;CAClB,MAAM,EAAE,aAAa,iBAAiB,SAAS;CAC/C,IAAI,CAAC,eAAe,iBAAiB,KAAA,GAAW;EAC9C,MACE,GACA,mFACA,SACF;EACA,OAAO,WAAW,GAAG,QAAQ;CAC/B;CACA,MAAM,UAAU,MAAM,WAAW,CAAC;CAClC,MAAM,GAAG,SAAS,YAAY,wBAAwB,YAAY,SAAS;CAC3E,OAAO,WAAW,GAAG,QAAQ;AAC/B;;AAGA,eAAe,YAAY,GAA+B;CACxD,iBAAiB,CAAC;CAClB,MAAM,EAAE,iBAAiB,SAAS;CAClC,MAAM,cAAc,MAAM;CAC1B,MAAM,GAAG,8BAA8B;CACvC,OAAO,WAAW,GAAG,QAAQ;AAC/B"}
+{"version":3,"file":"admin-public-origin.mjs","names":[],"sources":["../../src/routers/admin-public-origin.ts"],"sourcesContent":["/**\n * The public origin, learnt from an admin's browser (ADR 0007, decision 6): the System page reports\n * `location.origin`, an admin confirms or replaces it, and background jobs read it from the database.\n * Site-admin and CSRF protected; with authentication off there is no admin, so nothing is learnt.\n */\nimport { normalizeOrigin } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { requestOpenBuildStatesNow } from \"../git-status.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\n/** Register the public-origin routes of the System page. */\nexport function registerPublicOriginRoutes(app: ShelfRouter): void {\n  app.post(\"/admin/public-origin/report\", handleReport);\n  app.post(\"/admin/public-origin\", handleSet);\n  app.post(\"/admin/public-origin/clear\", handleClear);\n}\n\n/** What an admin is told when the origin is not theirs to set. */\nconst FIXED_ORIGIN_MESSAGE =\n  \"The public origin comes from PUBLIC_BASE_URL or the hosting platform, so there is nothing to confirm\";\n\n/** Whether the configuration or the platform answers: an origin an admin cannot confirm or replace. */\nasync function isFixed(): Promise<boolean> {\n  const source = (await getStore().publicOrigin?.resolve())?.source;\n  return source === \"config\" || source === \"platform\";\n}\n\n/** The origin a report names, once it matches what the browser says it used; throws 400 otherwise. */\nasync function reportedOrigin(c: Context): Promise<string> {\n  const body = (await c.req.json().catch(() => null)) as { origin?: unknown } | null;\n  const reported = typeof body?.origin === \"string\" ? normalizeOrigin(body.origin) : undefined;\n  // The browser states the origin it used itself; a report that disagrees is not one.\n  if (reported === undefined || c.req.header(\"origin\") !== reported) {\n    throw new HTTPException(400, { message: \"Origin does not match the request\" });\n  }\n  return reported;\n}\n\n/** The page reports the origin it was loaded from; the first report is kept. */\nasync function handleReport(c: Context): Promise<Response> {\n  requireSiteAdmin(c);\n  const { authEnabled, publicOrigin, user } = getStore();\n  if (!authEnabled || publicOrigin === undefined || (await isFixed())) {\n    return c.body(null, 204);\n  }\n  const reported = await reportedOrigin(c);\n  const before = await publicOrigin.stored();\n  const wasResolved = (await publicOrigin.url()) !== undefined;\n  const stored = await publicOrigin.report(reported, user?.id);\n  await resumeIfResolved(wasResolved);\n  return c.json(stored, before === null ? 201 : 200);\n}\n\n/**\n * Notifications were paused and an origin now resolves (an admin confirmed one; a mere report\n * resolves nothing): re-request the state of open builds.\n */\nasync function resumeIfResolved(wasResolved: boolean): Promise<void> {\n  if (!wasResolved && (await getStore().publicOrigin?.url()) !== undefined) {\n    requestOpenBuildStatesNow().catch(() => 0);\n  }\n}\n\n/** Store what an admin typed; the message says why not when it is no origin. */\nasync function storeTyped(c: Context): Promise<string> {\n  if (await isFixed()) {\n    return FIXED_ORIGIN_MESSAGE;\n  }\n  const { publicOrigin, user } = getStore();\n  const origin = (await c.req.formData()).get(\"origin\");\n  try {\n    const wasResolved = (await publicOrigin?.url()) !== undefined;\n    await publicOrigin?.set(typeof origin === \"string\" ? origin : \"\", user?.id);\n    await resumeIfResolved(wasResolved);\n    return \"Public origin saved\";\n  } catch (error) {\n    return error instanceof Error ? error.message : \"Invalid origin\";\n  }\n}\n\n/** An admin confirmed the detected origin or entered another. */\nasync function handleSet(c: Context): Promise<Response> {\n  requireSiteAdmin(c);\n  const { authEnabled, publicOrigin } = getStore();\n  if (!authEnabled || publicOrigin === undefined) {\n    flash(\n      c,\n      \"The public origin is learnt from an admin's browser, which needs authentication\",\n      \"warning\",\n    );\n    return hxRedirect(c, \"/admin\");\n  }\n  const message = await storeTyped(c);\n  flash(c, message, message === \"Public origin saved\" ? \"success\" : \"warning\");\n  return hxRedirect(c, \"/admin\");\n}\n\n/** An admin dropped the stored origin; the next admin visit reports a fresh one. */\nasync function handleClear(c: Context): Promise<Response> {\n  requireSiteAdmin(c);\n  const { publicOrigin } = getStore();\n  await publicOrigin?.clear();\n  flash(c, \"Stored public origin removed\");\n  return hxRedirect(c, \"/admin\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,SAAgB,2BAA2B,KAAwB;CACjE,IAAI,KAAK,+BAA+B,YAAY;CACpD,IAAI,KAAK,wBAAwB,SAAS;CAC1C,IAAI,KAAK,8BAA8B,WAAW;AACpD;;AAGA,MAAM,uBACJ;;AAGF,eAAe,UAA4B;CACzC,MAAM,UAAU,MAAM,SAAS,CAAC,CAAC,cAAc,QAAQ,EAAA,EAAI;CAC3D,OAAO,WAAW,YAAY,WAAW;AAC3C;;AAGA,eAAe,eAAe,GAA6B;CACzD,MAAM,OAAQ,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,YAAY,IAAI;CACjD,MAAM,WAAW,OAAO,MAAM,WAAW,WAAW,gBAAgB,KAAK,MAAM,IAAI,KAAA;CAEnF,IAAI,aAAa,KAAA,KAAa,EAAE,IAAI,OAAO,QAAQ,MAAM,UACvD,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,oCAAoC,CAAC;CAE/E,OAAO;AACT;;AAGA,eAAe,aAAa,GAA+B;CACzD,iBAAiB,CAAC;CAClB,MAAM,EAAE,aAAa,cAAc,SAAS,SAAS;CACrD,IAAI,CAAC,eAAe,iBAAiB,KAAA,KAAc,MAAM,QAAQ,GAC/D,OAAO,EAAE,KAAK,MAAM,GAAG;CAEzB,MAAM,WAAW,MAAM,eAAe,CAAC;CACvC,MAAM,SAAS,MAAM,aAAa,OAAO;CACzC,MAAM,cAAe,MAAM,aAAa,IAAI,MAAO,KAAA;CACnD,MAAM,SAAS,MAAM,aAAa,OAAO,UAAU,MAAM,EAAE;CAC3D,MAAM,iBAAiB,WAAW;CAClC,OAAO,EAAE,KAAK,QAAQ,WAAW,OAAO,MAAM,GAAG;AACnD;;;;;AAMA,eAAe,iBAAiB,aAAqC;CACnE,IAAI,CAAC,eAAgB,MAAM,SAAS,CAAC,CAAC,cAAc,IAAI,MAAO,KAAA,GAC7D,0BAA0B,CAAC,CAAC,YAAY,CAAC;AAE7C;;AAGA,eAAe,WAAW,GAA6B;CACrD,IAAI,MAAM,QAAQ,GAChB,OAAO;CAET,MAAM,EAAE,cAAc,SAAS,SAAS;CACxC,MAAM,UAAU,MAAM,EAAE,IAAI,SAAS,EAAA,CAAG,IAAI,QAAQ;CACpD,IAAI;EACF,MAAM,cAAe,MAAM,cAAc,IAAI,MAAO,KAAA;EACpD,MAAM,cAAc,IAAI,OAAO,WAAW,WAAW,SAAS,IAAI,MAAM,EAAE;EAC1E,MAAM,iBAAiB,WAAW;EAClC,OAAO;CACT,SAAS,OAAO;EACd,OAAO,iBAAiB,QAAQ,MAAM,UAAU;CAClD;AACF;;AAGA,eAAe,UAAU,GAA+B;CACtD,iBAAiB,CAAC;CAClB,MAAM,EAAE,aAAa,iBAAiB,SAAS;CAC/C,IAAI,CAAC,eAAe,iBAAiB,KAAA,GAAW;EAC9C,MACE,GACA,mFACA,SACF;EACA,OAAO,WAAW,GAAG,QAAQ;CAC/B;CACA,MAAM,UAAU,MAAM,WAAW,CAAC;CAClC,MAAM,GAAG,SAAS,YAAY,wBAAwB,YAAY,SAAS;CAC3E,OAAO,WAAW,GAAG,QAAQ;AAC/B;;AAGA,eAAe,YAAY,GAA+B;CACxD,iBAAiB,CAAC;CAClB,MAAM,EAAE,iBAAiB,SAAS;CAClC,MAAM,cAAc,MAAM;CAC1B,MAAM,GAAG,8BAA8B;CACvC,OAAO,WAAW,GAAG,QAAQ;AAC/B"}

package/dist/routers/admin.mjs

@@ -5,11 +5,11 @@ import { getStore } from "../store.mjs";
 import { notifySystem } from "../notify.mjs";
 import { reencryptWithCurrent } from "../credentials.mjs";
 import { requireSiteAdmin } from "./helpers.mjs";
-import { forbidden, purgeInputSchema, purgeSchema } from "./schemas.mjs";
+import { errorSchema, forbidden, purgeInputSchema, purgeSchema } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { ProjectModel } from "@storyshelf/core/models";
 import { Retention } from "@storyshelf/core/retention";
-//#region src/routers/admin.ts
+// src/routers/admin.ts
 const purgeRoute = createRoute({
 	method: "post",
 	tags: ["Admin"],
@@ -21,6 +21,10 @@ const purgeRoute = createRoute({
 			content: { "application/json": { schema: purgeSchema } },
 			description: "Retention purge run"
 		},
+		503: {
+			content: { "application/json": { schema: errorSchema } },
+			description: "Testing retention requires atomic build lifecycle support"
+		},
 		...forbidden
 	}
 });
@@ -61,6 +65,7 @@ function registerAdmin(app) {
 	});
 	app.openapi(purgeRoute, async (c) => {
 		requireSiteAdmin(c);
+		if (getStore().testing) return c.json({ message: "Build purge is unavailable for testing deployments until the database adapter supports safe baseline retention. Builds are retained; contact your administrator." }, 503);
 		const ttlDays = c.req.valid("json").ttlDays ?? getStore().config.purgeTtlDays ?? 30;
 		const removedBuilds = await purgeBuilds(ttlDays);
 		const branch = await purgeBranches();
@@ -74,7 +79,7 @@ function registerAdmin(app) {
 			removedBuilds,
 			removedBranches: branch.removedBranches,
 			removedBaselines: branch.removedBaselines
-		});
+		}, 200);
 	});
 }
 async function purgeBuilds(ttlDays) {
@@ -107,7 +112,6 @@ async function purgeBranches() {
 		removedBaselines: results.reduce((sum, r) => sum + r.removedBaselines, 0)
 	};
 }
-//#endregion
 export { registerAdmin };
 
 //# sourceMappingURL=admin.mjs.map

package/dist/routers/admin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin.mjs","names":["forbiddenResponse"],"sources":["../../src/routers/admin.ts"],"sourcesContent":["/* oxlint-disable typescript/promise-function-async -- admin helpers are async by design */\nimport { createRoute, z } from \"@hono/zod-openapi\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { Retention } from \"@storyshelf/core/retention\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { reencryptWithCurrent } from \"../credentials.ts\";\nimport { notifySystem } from \"../notify.ts\";\nimport { getStore } from \"../store.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport { forbidden as forbiddenResponse, purgeInputSchema, purgeSchema } from \"./schemas.ts\";\nconst purgeRoute = createRoute({\n  method: \"post\",\n  tags: [\"Admin\"],\n  summary: \"Run the retention purge\",\n  path: \"/api/v1/admin/purge\",\n  request: { body: { content: { \"application/json\": { schema: purgeInputSchema } } } },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: purgeSchema } },\n      description: \"Retention purge run\",\n    },\n    ...forbiddenResponse,\n  },\n});\n\nconst reencryptSchema = z.object({\n  reencrypted: z.number().int(),\n  failed: z.number().int(),\n  unreadable: z.number().int(),\n});\n\nconst reencryptRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/admin/credentials/reencrypt\",\n  tags: [\"Admin\"],\n  summary: \"Re-encrypt stored credentials with the current secret\",\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: reencryptSchema } },\n      description: \"Credentials re-encrypted with the current secret\",\n    },\n    409: {\n      content: { \"application/json\": { schema: z.object({ error: z.string() }) } },\n      description: \"No previousSecret configured\",\n    },\n    ...forbiddenResponse,\n  },\n});\n\n/** Register the site-admin endpoints: retention purge and credential re-encryption. */\nexport function registerAdmin(app: ShelfRouter): void {\n  app.openapi(reencryptRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { db, config } = getStore();\n    if (!config.previousSecret) {\n      return c.json({ error: \"No previousSecret is configured; nothing to re-encrypt\" }, 409);\n    }\n    const result = await reencryptWithCurrent(db, config);\n    return c.json(\n      {\n        reencrypted: result.reencrypted,\n        failed: result.failed,\n        unreadable: result.unreadable.length,\n      },\n      200,\n    );\n  });\n\n  app.openapi(purgeRoute, async (c) => {\n    requireSiteAdmin(c);\n    const body = c.req.valid(\"json\");\n    const ttlDays = body.ttlDays ?? getStore().config.purgeTtlDays ?? 30;\n    const removedBuilds = await purgeBuilds(ttlDays);\n    const branch = await purgeBranches();\n    await notifySystem(\"sys:purge-completed\", {\n      removedBuilds,\n      removedBranches: branch.removedBranches,\n      removedBaselines: branch.removedBaselines,\n      ttlDays,\n    });\n    return c.json({\n      removedBuilds,\n      removedBranches: branch.removedBranches,\n      removedBaselines: branch.removedBaselines,\n    });\n  });\n}\n\n// oxlint-disable-next-line typescript/promise-function-async\nasync function purgeBuilds(ttlDays: number): Promise<number> {\n  const projects = await new ProjectModel(getStore().db).list();\n  const retention = new Retention(\n    getStore().db,\n    getStore().storage,\n    {\n      builds: getStore().db.tables.builds,\n      buildLabels: getStore().db.tables.buildLabels,\n      baselines: getStore().db.tables.baselines,\n    },\n    getStore().logger,\n  );\n  const results = await Promise.all(\n    projects.map((project) => retention.purge(project, { ttlDays, keepLatestPerBranch: true })),\n  );\n  return results.reduce((sum, result) => sum + result.removedBuilds, 0);\n}\n\n// oxlint-disable-next-line typescript/promise-function-async\nasync function purgeBranches(): Promise<{ removedBranches: number; removedBaselines: number }> {\n  const branchTtl = getStore().config.branchTtlDays ?? 30;\n  if (branchTtl === null) {\n    return { removedBranches: 0, removedBaselines: 0 };\n  }\n  const projects = await new ProjectModel(getStore().db).list();\n  const retention = new Retention(\n    getStore().db,\n    getStore().storage,\n    {\n      builds: getStore().db.tables.builds,\n      buildLabels: getStore().db.tables.buildLabels,\n      baselines: getStore().db.tables.baselines,\n    },\n    getStore().logger,\n  );\n  const results = await Promise.all(\n    projects.map((project) => retention.purgeStaleBranches(project, branchTtl)),\n  );\n  const removedBranches = results.reduce(\n    (sum: number, r: { removedBranches: number }) => sum + r.removedBranches,\n    0,\n  );\n  const removedBaselines = results.reduce(\n    (sum: number, r: { removedBaselines: number }) => sum + r.removedBaselines,\n    0,\n  );\n  return { removedBranches, removedBaselines };\n}\n"],"mappings":";;;;;;;;;;;;AAUA,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM,CAAC,OAAO;CACd,SAAS;CACT,MAAM;CACN,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,iBAAiB,EAAE,EAAE,EAAE;CACnF,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,EAAE,OAAO;CAC/B,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI;CAC5B,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI;CACvB,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI;AAC7B,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,MAAM,CAAC,OAAO;CACd,SAAS;CACT,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE;GAC3D,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC3E,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,cAAc,KAAwB;CACpD,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,iBAAiB,CAAC;EAClB,MAAM,EAAE,IAAI,WAAW,SAAS;EAChC,IAAI,CAAC,OAAO,gBACV,OAAO,EAAE,KAAK,EAAE,OAAO,yDAAyD,GAAG,GAAG;EAExF,MAAM,SAAS,MAAM,qBAAqB,IAAI,MAAM;EACpD,OAAO,EAAE,KACP;GACE,aAAa,OAAO;GACpB,QAAQ,OAAO;GACf,YAAY,OAAO,WAAW;EAChC,GACA,GACF;CACF,CAAC;CAED,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,iBAAiB,CAAC;EAElB,MAAM,UADO,EAAE,IAAI,MAAM,MACN,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,OAAO,gBAAgB;EAClE,MAAM,gBAAgB,MAAM,YAAY,OAAO;EAC/C,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,aAAa,uBAAuB;GACxC;GACA,iBAAiB,OAAO;GACxB,kBAAkB,OAAO;GACzB;EACF,CAAC;EACD,OAAO,EAAE,KAAK;GACZ;GACA,iBAAiB,OAAO;GACxB,kBAAkB,OAAO;EAC3B,CAAC;CACH,CAAC;AACH;AAGA,eAAe,YAAY,SAAkC;CAC3D,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;CAC5D,MAAM,YAAY,IAAI,UACpB,SAAS,CAAC,CAAC,IACX,SAAS,CAAC,CAAC,SACX;EACE,QAAQ,SAAS,CAAC,CAAC,GAAG,OAAO;EAC7B,aAAa,SAAS,CAAC,CAAC,GAAG,OAAO;EAClC,WAAW,SAAS,CAAC,CAAC,GAAG,OAAO;CAClC,GACA,SAAS,CAAC,CAAC,MACb;CAIA,QAAO,MAHe,QAAQ,IAC5B,SAAS,KAAK,YAAY,UAAU,MAAM,SAAS;EAAE;EAAS,qBAAqB;CAAK,CAAC,CAAC,CAC5F,EAAA,CACe,QAAQ,KAAK,WAAW,MAAM,OAAO,eAAe,CAAC;AACtE;AAGA,eAAe,gBAAgF;CAC7F,MAAM,YAAY,SAAS,CAAC,CAAC,OAAO,iBAAiB;CACrD,IAAI,cAAc,MAChB,OAAO;EAAE,iBAAiB;EAAG,kBAAkB;CAAE;CAEnD,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;CAC5D,MAAM,YAAY,IAAI,UACpB,SAAS,CAAC,CAAC,IACX,SAAS,CAAC,CAAC,SACX;EACE,QAAQ,SAAS,CAAC,CAAC,GAAG,OAAO;EAC7B,aAAa,SAAS,CAAC,CAAC,GAAG,OAAO;EAClC,WAAW,SAAS,CAAC,CAAC,GAAG,OAAO;CAClC,GACA,SAAS,CAAC,CAAC,MACb;CACA,MAAM,UAAU,MAAM,QAAQ,IAC5B,SAAS,KAAK,YAAY,UAAU,mBAAmB,SAAS,SAAS,CAAC,CAC5E;CASA,OAAO;EAAE,iBARe,QAAQ,QAC7B,KAAa,MAAmC,MAAM,EAAE,iBACzD,CAMqB;EAAG,kBAJD,QAAQ,QAC9B,KAAa,MAAoC,MAAM,EAAE,kBAC1D,CAEuC;CAAE;AAC7C"}
+{"version":3,"file":"admin.mjs","names":["forbiddenResponse"],"sources":["../../src/routers/admin.ts"],"sourcesContent":["/* oxlint-disable typescript/promise-function-async -- admin helpers are async by design */\nimport { createRoute, z } from \"@hono/zod-openapi\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { Retention } from \"@storyshelf/core/retention\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { reencryptWithCurrent } from \"../credentials.ts\";\nimport { notifySystem } from \"../notify.ts\";\nimport { getStore } from \"../store.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport {\n  errorSchema,\n  forbidden as forbiddenResponse,\n  purgeInputSchema,\n  purgeSchema,\n} from \"./schemas.ts\";\nconst purgeRoute = createRoute({\n  method: \"post\",\n  tags: [\"Admin\"],\n  summary: \"Run the retention purge\",\n  path: \"/api/v1/admin/purge\",\n  request: { body: { content: { \"application/json\": { schema: purgeInputSchema } } } },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: purgeSchema } },\n      description: \"Retention purge run\",\n    },\n    503: {\n      content: { \"application/json\": { schema: errorSchema } },\n      description: \"Testing retention requires atomic build lifecycle support\",\n    },\n    ...forbiddenResponse,\n  },\n});\n\nconst reencryptSchema = z.object({\n  reencrypted: z.number().int(),\n  failed: z.number().int(),\n  unreadable: z.number().int(),\n});\n\nconst reencryptRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/admin/credentials/reencrypt\",\n  tags: [\"Admin\"],\n  summary: \"Re-encrypt stored credentials with the current secret\",\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: reencryptSchema } },\n      description: \"Credentials re-encrypted with the current secret\",\n    },\n    409: {\n      content: { \"application/json\": { schema: z.object({ error: z.string() }) } },\n      description: \"No previousSecret configured\",\n    },\n    ...forbiddenResponse,\n  },\n});\n\n/** Register the site-admin endpoints: retention purge and credential re-encryption. */\nexport function registerAdmin(app: ShelfRouter): void {\n  app.openapi(reencryptRoute, async (c) => {\n    requireSiteAdmin(c);\n    const { db, config } = getStore();\n    if (!config.previousSecret) {\n      return c.json({ error: \"No previousSecret is configured; nothing to re-encrypt\" }, 409);\n    }\n    const result = await reencryptWithCurrent(db, config);\n    return c.json(\n      {\n        reencrypted: result.reencrypted,\n        failed: result.failed,\n        unreadable: result.unreadable.length,\n      },\n      200,\n    );\n  });\n\n  app.openapi(purgeRoute, async (c) => {\n    requireSiteAdmin(c);\n    // Until the database provides atomic reference admission and tombstones, deletion in a\n    // testing deployment can race a baseline promotion. Do not expose unsafe purge.\n    if (getStore().testing) {\n      return c.json(\n        {\n          message:\n            \"Build purge is unavailable for testing deployments until the database adapter supports safe baseline retention. Builds are retained; contact your administrator.\",\n        },\n        503,\n      );\n    }\n    const body = c.req.valid(\"json\");\n    const ttlDays = body.ttlDays ?? getStore().config.purgeTtlDays ?? 30;\n    const removedBuilds = await purgeBuilds(ttlDays);\n    const branch = await purgeBranches();\n    await notifySystem(\"sys:purge-completed\", {\n      removedBuilds,\n      removedBranches: branch.removedBranches,\n      removedBaselines: branch.removedBaselines,\n      ttlDays,\n    });\n    return c.json(\n      {\n        removedBuilds,\n        removedBranches: branch.removedBranches,\n        removedBaselines: branch.removedBaselines,\n      },\n      200,\n    );\n  });\n}\n\n// oxlint-disable-next-line typescript/promise-function-async\nasync function purgeBuilds(ttlDays: number): Promise<number> {\n  const projects = await new ProjectModel(getStore().db).list();\n  const retention = new Retention(\n    getStore().db,\n    getStore().storage,\n    {\n      builds: getStore().db.tables.builds,\n      buildLabels: getStore().db.tables.buildLabels,\n      baselines: getStore().db.tables.baselines,\n    },\n    getStore().logger,\n  );\n  const results = await Promise.all(\n    projects.map((project) => retention.purge(project, { ttlDays, keepLatestPerBranch: true })),\n  );\n  return results.reduce((sum, result) => sum + result.removedBuilds, 0);\n}\n\n// oxlint-disable-next-line typescript/promise-function-async\nasync function purgeBranches(): Promise<{ removedBranches: number; removedBaselines: number }> {\n  const branchTtl = getStore().config.branchTtlDays ?? 30;\n  if (branchTtl === null) {\n    return { removedBranches: 0, removedBaselines: 0 };\n  }\n  const projects = await new ProjectModel(getStore().db).list();\n  const retention = new Retention(\n    getStore().db,\n    getStore().storage,\n    {\n      builds: getStore().db.tables.builds,\n      buildLabels: getStore().db.tables.buildLabels,\n      baselines: getStore().db.tables.baselines,\n    },\n    getStore().logger,\n  );\n  const results = await Promise.all(\n    projects.map((project) => retention.purgeStaleBranches(project, branchTtl)),\n  );\n  const removedBranches = results.reduce(\n    (sum: number, r: { removedBranches: number }) => sum + r.removedBranches,\n    0,\n  );\n  const removedBaselines = results.reduce(\n    (sum: number, r: { removedBaselines: number }) => sum + r.removedBaselines,\n    0,\n  );\n  return { removedBranches, removedBaselines };\n}\n"],"mappings":";;;;;;;;;;;;AAeA,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM,CAAC,OAAO;CACd,SAAS;CACT,MAAM;CACN,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,iBAAiB,EAAE,EAAE,EAAE;CACnF,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;AAED,MAAM,kBAAkB,EAAE,OAAO;CAC/B,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI;CAC5B,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI;CACvB,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI;AAC7B,CAAC;AAED,MAAM,iBAAiB,YAAY;CACjC,QAAQ;CACR,MAAM;CACN,MAAM,CAAC,OAAO;CACd,SAAS;CACT,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE;GAC3D,aAAa;EACf;EACA,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE;GAC3E,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,cAAc,KAAwB;CACpD,IAAI,QAAQ,gBAAgB,OAAO,MAAM;EACvC,iBAAiB,CAAC;EAClB,MAAM,EAAE,IAAI,WAAW,SAAS;EAChC,IAAI,CAAC,OAAO,gBACV,OAAO,EAAE,KAAK,EAAE,OAAO,yDAAyD,GAAG,GAAG;EAExF,MAAM,SAAS,MAAM,qBAAqB,IAAI,MAAM;EACpD,OAAO,EAAE,KACP;GACE,aAAa,OAAO;GACpB,QAAQ,OAAO;GACf,YAAY,OAAO,WAAW;EAChC,GACA,GACF;CACF,CAAC;CAED,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,iBAAiB,CAAC;EAGlB,IAAI,SAAS,CAAC,CAAC,SACb,OAAO,EAAE,KACP,EACE,SACE,mKACJ,GACA,GACF;EAGF,MAAM,UADO,EAAE,IAAI,MAAM,MACN,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,OAAO,gBAAgB;EAClE,MAAM,gBAAgB,MAAM,YAAY,OAAO;EAC/C,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,aAAa,uBAAuB;GACxC;GACA,iBAAiB,OAAO;GACxB,kBAAkB,OAAO;GACzB;EACF,CAAC;EACD,OAAO,EAAE,KACP;GACE;GACA,iBAAiB,OAAO;GACxB,kBAAkB,OAAO;EAC3B,GACA,GACF;CACF,CAAC;AACH;AAGA,eAAe,YAAY,SAAkC;CAC3D,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;CAC5D,MAAM,YAAY,IAAI,UACpB,SAAS,CAAC,CAAC,IACX,SAAS,CAAC,CAAC,SACX;EACE,QAAQ,SAAS,CAAC,CAAC,GAAG,OAAO;EAC7B,aAAa,SAAS,CAAC,CAAC,GAAG,OAAO;EAClC,WAAW,SAAS,CAAC,CAAC,GAAG,OAAO;CAClC,GACA,SAAS,CAAC,CAAC,MACb;CAIA,QAAO,MAHe,QAAQ,IAC5B,SAAS,KAAK,YAAY,UAAU,MAAM,SAAS;EAAE;EAAS,qBAAqB;CAAK,CAAC,CAAC,CAC5F,EAAA,CACe,QAAQ,KAAK,WAAW,MAAM,OAAO,eAAe,CAAC;AACtE;AAGA,eAAe,gBAAgF;CAC7F,MAAM,YAAY,SAAS,CAAC,CAAC,OAAO,iBAAiB;CACrD,IAAI,cAAc,MAChB,OAAO;EAAE,iBAAiB;EAAG,kBAAkB;CAAE;CAEnD,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;CAC5D,MAAM,YAAY,IAAI,UACpB,SAAS,CAAC,CAAC,IACX,SAAS,CAAC,CAAC,SACX;EACE,QAAQ,SAAS,CAAC,CAAC,GAAG,OAAO;EAC7B,aAAa,SAAS,CAAC,CAAC,GAAG,OAAO;EAClC,WAAW,SAAS,CAAC,CAAC,GAAG,OAAO;CAClC,GACA,SAAS,CAAC,CAAC,MACb;CACA,MAAM,UAAU,MAAM,QAAQ,IAC5B,SAAS,KAAK,YAAY,UAAU,mBAAmB,SAAS,SAAS,CAAC,CAC5E;CASA,OAAO;EAAE,iBARe,QAAQ,QAC7B,KAAa,MAAmC,MAAM,EAAE,iBACzD,CAMqB;EAAG,kBAJD,QAAQ,QAC9B,KAAa,MAAoC,MAAM,EAAE,kBAC1D,CAEuC;CAAE;AAC7C"}

package/dist/routers/assets.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { assetManifest } from "../asset-manifest.mjs";
-//#region src/routers/assets.ts
+// src/routers/assets.ts
 const IMMUTABLE = "public, max-age=31536000, immutable";
 /**
 * Serve a content-addressed asset. A matching hash is cacheable forever and
@@ -65,7 +65,6 @@ function registerAssets(app) {
 		});
 	});
 }
-//#endregion
 export { registerAssets };
 
 //# sourceMappingURL=assets.mjs.map

package/dist/routers/attempts.mjs

@@ -7,7 +7,7 @@ import { attemptLogSchema, attemptSchema, notFound as notFound$1, unauthorized }
 import { VIEW_ROLES, buildForProject } from "./builds.handlers.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { CaptureAttemptModel, CaptureLogModel } from "@storyshelf/core/models";
-//#region src/routers/attempts.ts
+// src/routers/attempts.ts
 /** Register the capture-attempt history and per-attempt log endpoints. */
 function registerAttempts(app) {
 	app.openapi(listAttemptsRoute, async (c) => {
@@ -90,7 +90,6 @@ async function attemptForBuild(build, attemptNo) {
 	if (!attempt) notFound("Attempt not found");
 	return attempt;
 }
-//#endregion
 export { registerAttempts };
 
 //# sourceMappingURL=attempts.mjs.map

package/dist/routers/auth-sync.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { MemberModel, ProjectGroupMappingModel, ProjectModel, UserModel } from "@storyshelf/core/models";
-//#region src/routers/auth-sync.ts
+// src/routers/auth-sync.ts
 const ROLE_RANK = {
 	viewer: 0,
 	developer: 1,
@@ -58,7 +58,6 @@ async function syncProjectMembership(members, mappings, projectId, userId, group
 	const existing = await members.get(projectId, userId);
 	if (!existing || existing.role !== top.role || existing.source !== `oidc:${top.groupName}`) await members.set(projectId, userId, top.role, `oidc:${top.groupName}`);
 }
-//#endregion
 export { syncLoginMemberships };
 
 //# sourceMappingURL=auth-sync.mjs.map

package/dist/routers/auth.mjs

@@ -11,7 +11,7 @@ import { UserModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
 import { SESSION_COOKIE } from "@storyshelf/core/types";
 import { MIN_PASSWORD_LENGTH } from "@storyshelf/core/auth";
-//#region src/routers/auth.ts
+// src/routers/auth.ts
 /** Provider ids are URL path segments: strict charset, bounded length. */
 function validProviderId(value) {
 	return /^[a-zA-Z0-9_-]{1,64}$/u.test(value);
@@ -232,7 +232,6 @@ function registerEngineAuth(app, engine) {
 		return hxRedirect(c, "/auth/login");
 	});
 }
-//#endregion
 export { forwardToEngine, registerEngineAuth };
 
 //# sourceMappingURL=auth.mjs.map

package/dist/routers/baseline-guard.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { getStore } from "../store.mjs";
 import { BaselineModel, baselineStatus, isBaselineDrifted } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/baseline-guard.ts
+// src/routers/baseline-guard.ts
 /** Refuse to promote a screenshot over a baseline the reviewer has not seen. */
 /** Whether a snapshot is awaiting a review decision. */
 function isOpenSnapshot(snapshot) {
@@ -71,13 +71,12 @@ async function loadBaselineView(project, build, snapshots) {
 		drifted: {}
 	};
 	for (const { snapshot, current } of entries) {
-		view.hasBaseline[snapshot.id] = Boolean(current);
+		view.hasBaseline[snapshot.id] = Boolean(snapshot.comparisonImagePath ?? current);
 		const status = baselineStatus(snapshot, current);
 		if (!build.isDefault && isOpenSnapshot(snapshot) && (status === "stale" || status === "removed")) view.drifted[snapshot.id] = status;
 	}
 	return view;
 }
-//#endregion
 export { assertBaselineCurrent, baselineChanged, findDriftedSnapshots, isBaselineChanged, isOpenSnapshot, loadBaselineView, snapshotBaselineStatus };
 
 //# sourceMappingURL=baseline-guard.mjs.map

package/dist/routers/baseline-guard.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"baseline-guard.mjs","names":[],"sources":["../../src/routers/baseline-guard.ts"],"sourcesContent":["/** Refuse to promote a screenshot over a baseline the reviewer has not seen. */\nimport {\n  BaselineModel,\n  baselineStatus,\n  isBaselineDrifted,\n  type BaselineStatus,\n} from \"@storyshelf/core/models\";\nimport type { Build, Project, Snapshot } from \"@storyshelf/core/schema\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** Whether a snapshot is awaiting a review decision. */\nexport function isOpenSnapshot(snapshot: Pick<Snapshot, \"status\">): boolean {\n  return snapshot.status === \"new\" || snapshot.status === \"changed\";\n}\n\n/** Compare a snapshot's recorded baseline with the baseline that applies to it now. */\nexport async function snapshotBaselineStatus(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\">,\n  snapshot: Snapshot,\n): Promise<BaselineStatus> {\n  const baselines = new BaselineModel(getStore().db);\n  const current = await baselines.resolve(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    build.gitBranch,\n    project.gitDefaultBranch,\n    snapshot.browser,\n  );\n  return baselineStatus(snapshot, current);\n}\n\n/** Open snapshots whose diff no longer matches the current baseline. */\nexport async function findDriftedSnapshots(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\">,\n  snapshots: Snapshot[],\n): Promise<Map<string, BaselineStatus>> {\n  const open = snapshots.filter((snapshot) => isOpenSnapshot(snapshot));\n  const statuses = await Promise.all(\n    open.map(async (snapshot) => await snapshotBaselineStatus(project, build, snapshot)),\n  );\n  const drifted = new Map<string, BaselineStatus>();\n  for (const [index, snapshot] of open.entries()) {\n    const status = statuses[index];\n    if (status && isBaselineDrifted(status)) {\n      drifted.set(snapshot.id, status);\n    }\n  }\n  return drifted;\n}\n\n/** 409 telling the client the diff is out of date; recompute it or force the approval. */\nexport function baselineChanged(snapshotId: string, status: BaselineStatus): HTTPException {\n  const body = {\n    code: \"baseline_changed\",\n    message:\n      \"The baseline changed after this diff was computed. Re-diff the build, or approve with force.\",\n    snapshotId,\n    baselineStatus: status,\n  };\n  return new HTTPException(409, {\n    res: new Response(JSON.stringify(body), {\n      status: 409,\n      headers: { \"content-type\": \"application/json\" },\n    }),\n  });\n}\n\n/** Throw {@link baselineChanged} when an open snapshot's baseline drifted and `force` is off. */\nexport async function assertBaselineCurrent(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\">,\n  snapshot: Snapshot,\n  force: boolean,\n): Promise<void> {\n  if (!isOpenSnapshot(snapshot)) {\n    return;\n  }\n  const status = await snapshotBaselineStatus(project, build, snapshot);\n  if (!isBaselineDrifted(status)) {\n    return;\n  }\n  if (force) {\n    getStore().logger.warn(\n      { snapshotId: snapshot.id, baselineStatus: status, userId: getStore().user?.id ?? null },\n      \"approved snapshot despite changed baseline (forced)\",\n    );\n    return;\n  }\n  throw baselineChanged(snapshot.id, status);\n}\n\n/** True when `error` is the 409 raised by {@link baselineChanged}. */\nexport function isBaselineChanged(error: unknown): boolean {\n  return error instanceof HTTPException && error.status === 409;\n}\n\n/** Per-snapshot baseline facts the review pages need. */\nexport interface BaselineView {\n  /** Snapshot ids that have a baseline to compare against. */\n  hasBaseline: Record<string, boolean>;\n  /** Open snapshots whose recorded baseline no longer matches the current one. */\n  drifted: Record<string, \"stale\" | \"removed\">;\n}\n\n/** Resolve each snapshot's current baseline once and derive presence plus drift. */\nexport async function loadBaselineView(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\" | \"isDefault\">,\n  snapshots: Snapshot[],\n): Promise<BaselineView> {\n  const baselines = new BaselineModel(getStore().db);\n  const entries = await Promise.all(\n    snapshots.map(async (snapshot) => {\n      const current = await baselines.resolve(\n        project.id,\n        snapshot.storyId,\n        snapshot.viewportName,\n        build.gitBranch,\n        project.gitDefaultBranch,\n        snapshot.browser,\n      );\n      return { snapshot, current };\n    }),\n  );\n  const view: BaselineView = { hasBaseline: {}, drifted: {} };\n  for (const { snapshot, current } of entries) {\n    view.hasBaseline[snapshot.id] = Boolean(current);\n    const status = baselineStatus(snapshot, current);\n    if (\n      !build.isDefault &&\n      isOpenSnapshot(snapshot) &&\n      (status === \"stale\" || status === \"removed\")\n    ) {\n      view.drifted[snapshot.id] = status;\n    }\n  }\n  return view;\n}\n"],"mappings":";;;;;;;;;AAYA,SAAgB,eAAe,UAA6C;CAC1E,OAAO,SAAS,WAAW,SAAS,SAAS,WAAW;AAC1D;;AAGA,eAAsB,uBACpB,SACA,OACA,UACyB;CAEzB,MAAM,UAAU,MAAM,IADA,cAAc,SAAS,CAAC,CAAC,EACjB,CAAC,CAAC,QAC9B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;CACA,OAAO,eAAe,UAAU,OAAO;AACzC;;AAGA,eAAsB,qBACpB,SACA,OACA,WACsC;CACtC,MAAM,OAAO,UAAU,QAAQ,aAAa,eAAe,QAAQ,CAAC;CACpE,MAAM,WAAW,MAAM,QAAQ,IAC7B,KAAK,IAAI,OAAO,aAAa,MAAM,uBAAuB,SAAS,OAAO,QAAQ,CAAC,CACrF;CACA,MAAM,0BAAU,IAAI,IAA4B;CAChD,KAAK,MAAM,CAAC,OAAO,aAAa,KAAK,QAAQ,GAAG;EAC9C,MAAM,SAAS,SAAS;EACxB,IAAI,UAAU,kBAAkB,MAAM,GACpC,QAAQ,IAAI,SAAS,IAAI,MAAM;CAEnC;CACA,OAAO;AACT;;AAGA,SAAgB,gBAAgB,YAAoB,QAAuC;CAQzF,OAAO,IAAI,cAAc,KAAK,EAC5B,KAAK,IAAI,SAAS,KAAK,UAAU;EAPjC,MAAM;EACN,SACE;EACF;EACA,gBAAgB;CAGoB,CAAC,GAAG;EACtC,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC,EACH,CAAC;AACH;;AAGA,eAAsB,sBACpB,SACA,OACA,UACA,OACe;CACf,IAAI,CAAC,eAAe,QAAQ,GAC1B;CAEF,MAAM,SAAS,MAAM,uBAAuB,SAAS,OAAO,QAAQ;CACpE,IAAI,CAAC,kBAAkB,MAAM,GAC3B;CAEF,IAAI,OAAO;EACT,SAAS,CAAC,CAAC,OAAO,KAChB;GAAE,YAAY,SAAS;GAAI,gBAAgB;GAAQ,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;EAAK,GACvF,qDACF;EACA;CACF;CACA,MAAM,gBAAgB,SAAS,IAAI,MAAM;AAC3C;;AAGA,SAAgB,kBAAkB,OAAyB;CACzD,OAAO,iBAAiB,iBAAiB,MAAM,WAAW;AAC5D;;AAWA,eAAsB,iBACpB,SACA,OACA,WACuB;CACvB,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE;CACjD,MAAM,UAAU,MAAM,QAAQ,IAC5B,UAAU,IAAI,OAAO,aAAa;EAShC,OAAO;GAAE;GAAU,SAAA,MARG,UAAU,QAC9B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;EAC2B;CAC7B,CAAC,CACH;CACA,MAAM,OAAqB;EAAE,aAAa,CAAC;EAAG,SAAS,CAAC;CAAE;CAC1D,KAAK,MAAM,EAAE,UAAU,aAAa,SAAS;EAC3C,KAAK,YAAY,SAAS,MAAM,QAAQ,OAAO;EAC/C,MAAM,SAAS,eAAe,UAAU,OAAO;EAC/C,IACE,CAAC,MAAM,aACP,eAAe,QAAQ,MACtB,WAAW,WAAW,WAAW,YAElC,KAAK,QAAQ,SAAS,MAAM;CAEhC;CACA,OAAO;AACT"}
+{"version":3,"file":"baseline-guard.mjs","names":[],"sources":["../../src/routers/baseline-guard.ts"],"sourcesContent":["/** Refuse to promote a screenshot over a baseline the reviewer has not seen. */\nimport {\n  BaselineModel,\n  baselineStatus,\n  isBaselineDrifted,\n  type BaselineStatus,\n} from \"@storyshelf/core/models\";\nimport type { Build, Project, Snapshot } from \"@storyshelf/core/schema\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** Whether a snapshot is awaiting a review decision. */\nexport function isOpenSnapshot(snapshot: Pick<Snapshot, \"status\">): boolean {\n  return snapshot.status === \"new\" || snapshot.status === \"changed\";\n}\n\n/** Compare a snapshot's recorded baseline with the baseline that applies to it now. */\nexport async function snapshotBaselineStatus(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\">,\n  snapshot: Snapshot,\n): Promise<BaselineStatus> {\n  const baselines = new BaselineModel(getStore().db);\n  const current = await baselines.resolve(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    build.gitBranch,\n    project.gitDefaultBranch,\n    snapshot.browser,\n  );\n  return baselineStatus(snapshot, current);\n}\n\n/** Open snapshots whose diff no longer matches the current baseline. */\nexport async function findDriftedSnapshots(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\">,\n  snapshots: Snapshot[],\n): Promise<Map<string, BaselineStatus>> {\n  const open = snapshots.filter((snapshot) => isOpenSnapshot(snapshot));\n  const statuses = await Promise.all(\n    open.map(async (snapshot) => await snapshotBaselineStatus(project, build, snapshot)),\n  );\n  const drifted = new Map<string, BaselineStatus>();\n  for (const [index, snapshot] of open.entries()) {\n    const status = statuses[index];\n    if (status && isBaselineDrifted(status)) {\n      drifted.set(snapshot.id, status);\n    }\n  }\n  return drifted;\n}\n\n/** 409 telling the client the diff is out of date; recompute it or force the approval. */\nexport function baselineChanged(snapshotId: string, status: BaselineStatus): HTTPException {\n  const body = {\n    code: \"baseline_changed\",\n    message:\n      \"The baseline changed after this diff was computed. Re-diff the build, or approve with force.\",\n    snapshotId,\n    baselineStatus: status,\n  };\n  return new HTTPException(409, {\n    res: new Response(JSON.stringify(body), {\n      status: 409,\n      headers: { \"content-type\": \"application/json\" },\n    }),\n  });\n}\n\n/** Throw {@link baselineChanged} when an open snapshot's baseline drifted and `force` is off. */\nexport async function assertBaselineCurrent(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\">,\n  snapshot: Snapshot,\n  force: boolean,\n): Promise<void> {\n  if (!isOpenSnapshot(snapshot)) {\n    return;\n  }\n  const status = await snapshotBaselineStatus(project, build, snapshot);\n  if (!isBaselineDrifted(status)) {\n    return;\n  }\n  if (force) {\n    getStore().logger.warn(\n      { snapshotId: snapshot.id, baselineStatus: status, userId: getStore().user?.id ?? null },\n      \"approved snapshot despite changed baseline (forced)\",\n    );\n    return;\n  }\n  throw baselineChanged(snapshot.id, status);\n}\n\n/** True when `error` is the 409 raised by {@link baselineChanged}. */\nexport function isBaselineChanged(error: unknown): boolean {\n  return error instanceof HTTPException && error.status === 409;\n}\n\n/** Per-snapshot baseline facts the review pages need. */\nexport interface BaselineView {\n  /** Snapshot ids that have a baseline to compare against. */\n  hasBaseline: Record<string, boolean>;\n  /** Open snapshots whose recorded baseline no longer matches the current one. */\n  drifted: Record<string, \"stale\" | \"removed\">;\n}\n\n/** Resolve each snapshot's current baseline once and derive presence plus drift. */\nexport async function loadBaselineView(\n  project: Pick<Project, \"id\" | \"gitDefaultBranch\">,\n  build: Pick<Build, \"gitBranch\" | \"isDefault\">,\n  snapshots: Snapshot[],\n): Promise<BaselineView> {\n  const baselines = new BaselineModel(getStore().db);\n  const entries = await Promise.all(\n    snapshots.map(async (snapshot) => {\n      const current = await baselines.resolve(\n        project.id,\n        snapshot.storyId,\n        snapshot.viewportName,\n        build.gitBranch,\n        project.gitDefaultBranch,\n        snapshot.browser,\n      );\n      return { snapshot, current };\n    }),\n  );\n  const view: BaselineView = { hasBaseline: {}, drifted: {} };\n  for (const { snapshot, current } of entries) {\n    view.hasBaseline[snapshot.id] = Boolean(snapshot.comparisonImagePath ?? current);\n    const status = baselineStatus(snapshot, current);\n    if (\n      !build.isDefault &&\n      isOpenSnapshot(snapshot) &&\n      (status === \"stale\" || status === \"removed\")\n    ) {\n      view.drifted[snapshot.id] = status;\n    }\n  }\n  return view;\n}\n"],"mappings":";;;;;;;;;AAYA,SAAgB,eAAe,UAA6C;CAC1E,OAAO,SAAS,WAAW,SAAS,SAAS,WAAW;AAC1D;;AAGA,eAAsB,uBACpB,SACA,OACA,UACyB;CAEzB,MAAM,UAAU,MAAM,IADA,cAAc,SAAS,CAAC,CAAC,EACjB,CAAC,CAAC,QAC9B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;CACA,OAAO,eAAe,UAAU,OAAO;AACzC;;AAGA,eAAsB,qBACpB,SACA,OACA,WACsC;CACtC,MAAM,OAAO,UAAU,QAAQ,aAAa,eAAe,QAAQ,CAAC;CACpE,MAAM,WAAW,MAAM,QAAQ,IAC7B,KAAK,IAAI,OAAO,aAAa,MAAM,uBAAuB,SAAS,OAAO,QAAQ,CAAC,CACrF;CACA,MAAM,0BAAU,IAAI,IAA4B;CAChD,KAAK,MAAM,CAAC,OAAO,aAAa,KAAK,QAAQ,GAAG;EAC9C,MAAM,SAAS,SAAS;EACxB,IAAI,UAAU,kBAAkB,MAAM,GACpC,QAAQ,IAAI,SAAS,IAAI,MAAM;CAEnC;CACA,OAAO;AACT;;AAGA,SAAgB,gBAAgB,YAAoB,QAAuC;CAQzF,OAAO,IAAI,cAAc,KAAK,EAC5B,KAAK,IAAI,SAAS,KAAK,UAAU;EAPjC,MAAM;EACN,SACE;EACF;EACA,gBAAgB;CAGoB,CAAC,GAAG;EACtC,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC,EACH,CAAC;AACH;;AAGA,eAAsB,sBACpB,SACA,OACA,UACA,OACe;CACf,IAAI,CAAC,eAAe,QAAQ,GAC1B;CAEF,MAAM,SAAS,MAAM,uBAAuB,SAAS,OAAO,QAAQ;CACpE,IAAI,CAAC,kBAAkB,MAAM,GAC3B;CAEF,IAAI,OAAO;EACT,SAAS,CAAC,CAAC,OAAO,KAChB;GAAE,YAAY,SAAS;GAAI,gBAAgB;GAAQ,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;EAAK,GACvF,qDACF;EACA;CACF;CACA,MAAM,gBAAgB,SAAS,IAAI,MAAM;AAC3C;;AAGA,SAAgB,kBAAkB,OAAyB;CACzD,OAAO,iBAAiB,iBAAiB,MAAM,WAAW;AAC5D;;AAWA,eAAsB,iBACpB,SACA,OACA,WACuB;CACvB,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE;CACjD,MAAM,UAAU,MAAM,QAAQ,IAC5B,UAAU,IAAI,OAAO,aAAa;EAShC,OAAO;GAAE;GAAU,SAAA,MARG,UAAU,QAC9B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;EAC2B;CAC7B,CAAC,CACH;CACA,MAAM,OAAqB;EAAE,aAAa,CAAC;EAAG,SAAS,CAAC;CAAE;CAC1D,KAAK,MAAM,EAAE,UAAU,aAAa,SAAS;EAC3C,KAAK,YAAY,SAAS,MAAM,QAAQ,SAAS,uBAAuB,OAAO;EAC/E,MAAM,SAAS,eAAe,UAAU,OAAO;EAC/C,IACE,CAAC,MAAM,aACP,eAAe,QAAQ,MACtB,WAAW,WAAW,WAAW,YAElC,KAAK,QAAQ,SAAS,MAAM;CAEhC;CACA,OAAO;AACT"}

package/dist/routers/baseline-reference.mjs

@@ -0,0 +1,72 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { readComparisonImage, validFrozenReference } from "./comparison-image.mjs";
+import { BaselineModel, BuildModel, SnapshotModel, baselineStatus, resolveBaselineOrigin } from "@storyshelf/core/models";
+// src/routers/baseline-reference.ts
+async function loadBaselineReference(project, build, snapshot) {
+	if (snapshot.comparisonImagePath || snapshot.comparisonMetadata) return await frozenReference(project, build, snapshot);
+	return await legacyReference(project, build, snapshot);
+}
+async function legacyReference(project, build, snapshot) {
+	if (snapshot.baselineVersion === "none" && snapshot.baselineId === null) return { kind: "none" };
+	if (!snapshot.baselineId || !snapshot.baselineVersion) return { kind: "unavailable" };
+	const db = getStore().db;
+	const baseline = await new BaselineModel(db).resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch, snapshot.browser);
+	if (!baseline || baselineStatus(snapshot, baseline) !== "current") return { kind: "unavailable" };
+	const snapshots = new SnapshotModel(db);
+	const builds = new BuildModel(db);
+	const reference = await resolveBaselineOrigin(baseline, {
+		baseline: async (id) => await db.get(db.tables.baselines, id),
+		snapshot: async (id) => await snapshots.get(id),
+		build: async (id) => await builds.get(id)
+	});
+	return {
+		kind: "known",
+		branch: baseline.branch,
+		defaultBranch: baseline.branch === project.gitDefaultBranch,
+		updatedAt: baseline.updatedAt,
+		imageAvailable: await imageExists(baseline.screenshotPath),
+		build: reference
+	};
+}
+async function frozenReference(project, build, snapshot) {
+	const frozen = validFrozenReference(snapshot, project.id, build.id);
+	if (!frozen) return { kind: "unavailable" };
+	const { reference: metadata, path } = frozen;
+	const reference = metadata.sourceBuildId ? await new BuildModel(getStore().db).get(metadata.sourceBuildId) : null;
+	return {
+		kind: "known",
+		branch: metadata.branch,
+		defaultBranch: metadata.defaultBranch,
+		updatedAt: metadata.baselineVersion,
+		imageAvailable: Boolean(await readComparisonImage(path, metadata.imageSha256)),
+		build: reference?.projectId === project.id ? reference : null
+	};
+}
+/** A separate, read-only view of the current default-branch reference. */
+async function loadDefaultComparison(project, build, snapshot) {
+	if (build.gitBranch === project.gitDefaultBranch) return null;
+	const { db } = getStore();
+	const baseline = await new BaselineModel(db).getFor(project.id, snapshot.storyId, snapshot.viewportName, project.gitDefaultBranch, snapshot.browser);
+	if (!baseline || baseline.id === snapshot.baselineId && baseline.updatedAt === snapshot.baselineVersion) return null;
+	const environment = !baseline.infraHash || !snapshot.infraHash ? "unknown" : baseline.infraHash === snapshot.infraHash ? "matching" : "different";
+	return {
+		id: baseline.id,
+		version: baseline.updatedAt,
+		branch: baseline.branch,
+		available: await imageExists(baseline.screenshotPath),
+		environment
+	};
+}
+async function imageExists(path) {
+	try {
+		return await getStore().storage.exists(path);
+	} catch {
+		return false;
+	}
+}
+export { loadBaselineReference, loadDefaultComparison };
+
+//# sourceMappingURL=baseline-reference.mjs.map

package/dist/routers/baseline-reference.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-reference.mjs","names":[],"sources":["../../src/routers/baseline-reference.ts"],"sourcesContent":["import {\n  BaselineModel,\n  BuildModel,\n  SnapshotModel,\n  baselineStatus,\n  resolveBaselineOrigin,\n} from \"@storyshelf/core/models\";\nimport type { Baseline, Build, Project, Snapshot } from \"@storyshelf/core/schema\";\nimport { getStore } from \"../store.ts\";\nimport { readComparisonImage, validFrozenReference } from \"./comparison-image.ts\";\n\n/** Reference information is only reliable while the recorded baseline version still exists. */\nexport type BaselineReference =\n  | { kind: \"none\" }\n  | { kind: \"unavailable\" }\n  | {\n      kind: \"known\";\n      branch: string;\n      defaultBranch: boolean;\n      updatedAt: string;\n      build: Build | null;\n      imageAvailable: boolean;\n    };\n\nexport async function loadBaselineReference(\n  project: Project,\n  build: Build,\n  snapshot: Snapshot,\n): Promise<BaselineReference> {\n  if (snapshot.comparisonImagePath || snapshot.comparisonMetadata) {\n    return await frozenReference(project, build, snapshot);\n  }\n  return await legacyReference(project, build, snapshot);\n}\n\nasync function legacyReference(\n  project: Project,\n  build: Build,\n  snapshot: Snapshot,\n): Promise<BaselineReference> {\n  if (snapshot.baselineVersion === \"none\" && snapshot.baselineId === null) return { kind: \"none\" };\n  if (!snapshot.baselineId || !snapshot.baselineVersion) return { kind: \"unavailable\" };\n  const db = getStore().db;\n  const baseline = await new BaselineModel(db).resolve(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    build.gitBranch,\n    project.gitDefaultBranch,\n    snapshot.browser,\n  );\n  if (!baseline || baselineStatus(snapshot, baseline) !== \"current\") return { kind: \"unavailable\" };\n  const snapshots = new SnapshotModel(db);\n  const builds = new BuildModel(db);\n  const reference = await resolveBaselineOrigin(baseline, {\n    baseline: async (id) => (await db.get(db.tables.baselines, id)) as unknown as Baseline | null,\n    snapshot: async (id) => await snapshots.get(id),\n    build: async (id) => await builds.get(id),\n  });\n  return {\n    kind: \"known\",\n    branch: baseline.branch,\n    defaultBranch: baseline.branch === project.gitDefaultBranch,\n    updatedAt: baseline.updatedAt,\n    imageAvailable: await imageExists(baseline.screenshotPath),\n    build: reference,\n  };\n}\n\nasync function frozenReference(\n  project: Project,\n  build: Build,\n  snapshot: Snapshot,\n): Promise<BaselineReference> {\n  const frozen = validFrozenReference(snapshot, project.id, build.id);\n  if (!frozen) return { kind: \"unavailable\" };\n  const { reference: metadata, path } = frozen;\n  const reference = metadata.sourceBuildId\n    ? await new BuildModel(getStore().db).get(metadata.sourceBuildId)\n    : null;\n  return {\n    kind: \"known\",\n    branch: metadata.branch,\n    defaultBranch: metadata.defaultBranch,\n    updatedAt: metadata.baselineVersion,\n    imageAvailable: Boolean(await readComparisonImage(path, metadata.imageSha256)),\n    build: reference?.projectId === project.id ? reference : null,\n  };\n}\n\nexport interface DefaultComparison {\n  id: string;\n  version: string;\n  branch: string;\n  available: boolean;\n  environment: \"unknown\" | \"matching\" | \"different\";\n}\n\n/** A separate, read-only view of the current default-branch reference. */\nexport async function loadDefaultComparison(\n  project: Project,\n  build: Build,\n  snapshot: Snapshot,\n): Promise<DefaultComparison | null> {\n  if (build.gitBranch === project.gitDefaultBranch) return null;\n  const { db } = getStore();\n  const baseline = await new BaselineModel(db).getFor(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    project.gitDefaultBranch,\n    snapshot.browser,\n  );\n  if (\n    !baseline ||\n    (baseline.id === snapshot.baselineId && baseline.updatedAt === snapshot.baselineVersion)\n  )\n    return null;\n  const environment =\n    !baseline.infraHash || !snapshot.infraHash\n      ? \"unknown\"\n      : baseline.infraHash === snapshot.infraHash\n        ? \"matching\"\n        : \"different\";\n  return {\n    id: baseline.id,\n    version: baseline.updatedAt,\n    branch: baseline.branch,\n    available: await imageExists(baseline.screenshotPath),\n    environment,\n  };\n}\n\nasync function imageExists(path: string): Promise<boolean> {\n  try {\n    return await getStore().storage.exists(path);\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAwBA,eAAsB,sBACpB,SACA,OACA,UAC4B;CAC5B,IAAI,SAAS,uBAAuB,SAAS,oBAC3C,OAAO,MAAM,gBAAgB,SAAS,OAAO,QAAQ;CAEvD,OAAO,MAAM,gBAAgB,SAAS,OAAO,QAAQ;AACvD;AAEA,eAAe,gBACb,SACA,OACA,UAC4B;CAC5B,IAAI,SAAS,oBAAoB,UAAU,SAAS,eAAe,MAAM,OAAO,EAAE,MAAM,OAAO;CAC/F,IAAI,CAAC,SAAS,cAAc,CAAC,SAAS,iBAAiB,OAAO,EAAE,MAAM,cAAc;CACpF,MAAM,KAAK,SAAS,CAAC,CAAC;CACtB,MAAM,WAAW,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,QAC3C,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;CACA,IAAI,CAAC,YAAY,eAAe,UAAU,QAAQ,MAAM,WAAW,OAAO,EAAE,MAAM,cAAc;CAChG,MAAM,YAAY,IAAI,cAAc,EAAE;CACtC,MAAM,SAAS,IAAI,WAAW,EAAE;CAChC,MAAM,YAAY,MAAM,sBAAsB,UAAU;EACtD,UAAU,OAAO,OAAQ,MAAM,GAAG,IAAI,GAAG,OAAO,WAAW,EAAE;EAC7D,UAAU,OAAO,OAAO,MAAM,UAAU,IAAI,EAAE;EAC9C,OAAO,OAAO,OAAO,MAAM,OAAO,IAAI,EAAE;CAC1C,CAAC;CACD,OAAO;EACL,MAAM;EACN,QAAQ,SAAS;EACjB,eAAe,SAAS,WAAW,QAAQ;EAC3C,WAAW,SAAS;EACpB,gBAAgB,MAAM,YAAY,SAAS,cAAc;EACzD,OAAO;CACT;AACF;AAEA,eAAe,gBACb,SACA,OACA,UAC4B;CAC5B,MAAM,SAAS,qBAAqB,UAAU,QAAQ,IAAI,MAAM,EAAE;CAClE,IAAI,CAAC,QAAQ,OAAO,EAAE,MAAM,cAAc;CAC1C,MAAM,EAAE,WAAW,UAAU,SAAS;CACtC,MAAM,YAAY,SAAS,gBACvB,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,aAAa,IAC9D;CACJ,OAAO;EACL,MAAM;EACN,QAAQ,SAAS;EACjB,eAAe,SAAS;EACxB,WAAW,SAAS;EACpB,gBAAgB,QAAQ,MAAM,oBAAoB,MAAM,SAAS,WAAW,CAAC;EAC7E,OAAO,WAAW,cAAc,QAAQ,KAAK,YAAY;CAC3D;AACF;;AAWA,eAAsB,sBACpB,SACA,OACA,UACmC;CACnC,IAAI,MAAM,cAAc,QAAQ,kBAAkB,OAAO;CACzD,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,WAAW,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,OAC3C,QAAQ,IACR,SAAS,SACT,SAAS,cACT,QAAQ,kBACR,SAAS,OACX;CACA,IACE,CAAC,YACA,SAAS,OAAO,SAAS,cAAc,SAAS,cAAc,SAAS,iBAExE,OAAO;CACT,MAAM,cACJ,CAAC,SAAS,aAAa,CAAC,SAAS,YAC7B,YACA,SAAS,cAAc,SAAS,YAC9B,aACA;CACR,OAAO;EACL,IAAI,SAAS;EACb,SAAS,SAAS;EAClB,QAAQ,SAAS;EACjB,WAAW,MAAM,YAAY,SAAS,cAAc;EACpD;CACF;AACF;AAEA,eAAe,YAAY,MAAgC;CACzD,IAAI;EACF,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,IAAI;CAC7C,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/routers/baselines.handlers.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { DEFAULT_MAX_UPLOAD_BYTES } from "@storyshelf/core/config";
 import { BASELINE_ARCHIVE_LIMITS } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/baselines.handlers.ts
+// src/routers/baselines.handlers.ts
 /** HTTP helpers for the baseline export/import router. */
 /** Ceiling for a buffered import archive, whatever `maxUploadBytes` allows. */
 const MAX_BASELINE_IMPORT_BYTES = BASELINE_ARCHIVE_LIMITS.maxArchiveBytes;
@@ -58,7 +58,6 @@ function toWebStream(chunks) {
 function archiveFileName(slug, branch) {
 	return `${(branch ? `${slug}-baselines-${branch}` : `${slug}-baselines`).replaceAll(/[^\w.-]+/gu, "_")}.zip`;
 }
-//#endregion
 export { MAX_BASELINE_IMPORT_BYTES, archiveFileName, importByteLimit, readCappedBody, toWebStream };
 
 //# sourceMappingURL=baselines.handlers.mjs.map

package/dist/routers/baselines.mjs

@@ -8,7 +8,7 @@ import { archiveFileName, importByteLimit, readCappedBody, toWebStream } from ".
 import { createRoute, z } from "@hono/zod-openapi";
 import { BaselineArchiveError, BaselineTransferModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/baselines.ts
+// src/routers/baselines.ts
 /**
 * Baseline portability endpoints: export a project's baselines as a zip
 * (`manifest.json` + PNGs, format v1) and import (upsert) the same format.
@@ -119,7 +119,6 @@ function registerBaselines(app) {
 		return c.json(result, 200);
 	});
 }
-//#endregion
 export { registerBaselines };
 
 //# sourceMappingURL=baselines.mjs.map

package/dist/routers/build-cancel.mjs

@@ -11,7 +11,7 @@ import { createRoute, z } from "@hono/zod-openapi";
 import { BuildModel, CaptureAttemptModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
 import { CANCELLABLE_BUILD_STATUSES } from "@storyshelf/core/types";
-//#region src/routers/build-cancel.ts
+// src/routers/build-cancel.ts
 const cancelBuildRoute = createRoute({
 	method: "post",
 	tags: ["Builds"],
@@ -62,7 +62,6 @@ async function cancelBuild(buildId) {
 	await announceBuildStatus(buildId, "cancelled");
 	return updated;
 }
-//#endregion
 export { registerBuildCancel };
 
 //# sourceMappingURL=build-cancel.mjs.map

package/dist/routers/build-changeset.mjs

@@ -7,7 +7,7 @@ import { notFound, unauthorized } from "./schemas.mjs";
 import { VIEW_ROLES, buildForProject } from "./builds.handlers.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { changesetOf } from "@storyshelf/core/models";
-//#region src/routers/build-changeset.ts
+// src/routers/build-changeset.ts
 const component = z.object({
 	importPath: z.string(),
 	title: z.string(),
@@ -64,7 +64,6 @@ function registerBuildChangeset(app) {
 		});
 	});
 }
-//#endregion
 export { registerBuildChangeset };
 
 //# sourceMappingURL=build-changeset.mjs.map

package/dist/routers/build-reviews.handlers.mjs

@@ -8,7 +8,7 @@ import { announceBuildStatus } from "./builds.handlers.mjs";
 import { publishingOf } from "@storyshelf/core/capture";
 import { BuildModel, BuildReviewModel, deriveReviewStatus, latestVerdicts } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/build-reviews.handlers.ts
+// src/routers/build-reviews.handlers.ts
 /**
 * Build-level verdicts (ADR 0013, decision 3): giving one and reading where a build stands. The
 * routes are classed `review`, so `requireReview` answers 404 for a project with review off.
@@ -80,7 +80,6 @@ async function decideBuild(project, build) {
 function approvalsRequired(project) {
 	return Math.max(1, project.reviewApprovals ?? 1);
 }
-//#endregion
 export { giveVerdict, reviewStateOf };
 
 //# sourceMappingURL=build-reviews.handlers.mjs.map