@storyshelf/app 0.7.0 → 0.8.0

package/dist/routers/helpers.mjs

@@ -5,7 +5,7 @@ import { getStore } from "../store.mjs";
 import { sha256, timingSafeEqualString } from "@storyshelf/core/utils";
 import { MemberModel, ProjectModel, TokenModel, UserModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/helpers.ts
+// src/routers/helpers.ts
 /** Throw a 401 Unauthorized error for unauthenticated requests. */
 function unauthorized() {
 	throw new HTTPException(401, { message: "Unauthorized" });
@@ -120,7 +120,6 @@ function requireSiteAdmin(c) {
 	if (user?.role === "admin" || requestHasAdminToken(c)) return;
 	forbidden();
 }
-//#endregion
 export { assertRole, currentProjectRole, findProjectBySlug, forbidden, notFound, requestHasAdminToken, requireSiteAdmin, resolveAuthorizedProject, resolveReviewer, unauthorized };
 
 //# sourceMappingURL=helpers.mjs.map

package/dist/routers/htmx.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-//#region src/routers/htmx.ts
+// src/routers/htmx.ts
 /** Check whether the request came from HTMX (HX-Request header). */
 function isHxRequest(c) {
 	return c.req.header("HX-Request") === "true";
@@ -18,7 +18,6 @@ function hxRedirect(c, url) {
 function hxRefresh(c) {
 	if (isHxRequest(c)) c.header("HX-Refresh", "true");
 }
-//#endregion
 export { hxRedirect, hxRefresh, isHxRequest };
 
 //# sourceMappingURL=htmx.mjs.map

package/dist/routers/insights-ui.mjs

@@ -10,7 +10,7 @@ import { InsightPanel } from "../pages/build-diff-insight.mjs";
 import { HealthPanel } from "../pages/health-panel.mjs";
 import { projectForRegenerate, projectForView } from "./insights.handlers.mjs";
 import { jsx } from "hono/jsx/jsx-runtime";
-//#region src/routers/insights-ui.tsx
+// src/routers/insights-ui.tsx
 /** Register the HTMX fragments for the project health panel. */
 function registerHealthFragments(app) {
 	app.get("/projects/:slug/insights/health/panel", async (c) => {
@@ -58,7 +58,6 @@ function registerInsightFragments(app) {
 		})) : notFound();
 	});
 }
-//#endregion
 export { registerInsightFragments };
 
 //# sourceMappingURL=insights-ui.mjs.map

package/dist/routers/insights.handlers.mjs

@@ -6,7 +6,7 @@ import { failWith } from "../insights/errors.mjs";
 import { assertRole, requestHasAdminToken, resolveAuthorizedProject } from "./helpers.mjs";
 import { insightDepsFromStore } from "../insights/deps.mjs";
 import { APPROVER_ROLES, VIEW_ROLES } from "./builds.handlers.mjs";
-//#region src/routers/insights.handlers.ts
+// src/routers/insights.handlers.ts
 /** AI deps or `501 ai-disabled` when the site has no AI configured. */
 function requireAi() {
 	const deps = insightDepsFromStore();
@@ -39,7 +39,6 @@ async function projectForRegenerate(c, slug) {
 		project
 	};
 }
-//#endregion
 export { isSiteAdmin, projectForRegenerate, projectForView, requireAi, requireProjectAi };
 
 //# sourceMappingURL=insights.handlers.mjs.map

package/dist/routers/insights.mjs

@@ -11,7 +11,7 @@ import { requestHealth, requestTriage } from "../insights/request.mjs";
 import { isSiteAdmin, projectForRegenerate, projectForView } from "./insights.handlers.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { InsightModel } from "@storyshelf/core/models";
-//#region src/routers/insights.ts
+// src/routers/insights.ts
 const BUILD_PARAMS = z.object({
 	slug: z.string(),
 	buildId: z.string()
@@ -183,7 +183,6 @@ function registerInsights(app) {
 	registerBuildInsights(app);
 	registerHealthInsights(app);
 }
-//#endregion
 export { registerInsights };
 
 //# sourceMappingURL=insights.mjs.map

package/dist/routers/labels.mjs

@@ -7,7 +7,7 @@ import { labelTypeCreateSchema, labelTypeSchema, labelTypeUpdateSchema, notFound
 import { createRoute, z } from "@hono/zod-openapi";
 import { LabelModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/labels.ts
+// src/routers/labels.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -112,7 +112,6 @@ function registerLabels(app) {
 		}
 	});
 }
-//#endregion
 export { registerLabels };
 
 //# sourceMappingURL=labels.mjs.map

package/dist/routers/links.handlers.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { catalogOf, getStore } from "../store.mjs";
 import { resolveAuthorizedProject } from "./helpers.mjs";
 import { BuildModel, PackageUsageModel, ProjectModel, SnapshotModel, matchUpstreamStory } from "@storyshelf/core/models";
-//#region src/routers/links.handlers.ts
+// src/routers/links.handlers.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -74,7 +74,6 @@ async function linkedUsageFor(c, project, buildId, storyImportPath) {
 	if (!storyImportPath) return [];
 	return (await linkedUsageByStory(c, project, buildId, storyImportPath)).get(storyImportPath) ?? [];
 }
-//#endregion
 export { linkedUsageByStory, linkedUsageFor };
 
 //# sourceMappingURL=links.handlers.mjs.map

package/dist/routers/links.mjs

@@ -9,7 +9,7 @@ import { linkedUsageFor } from "./links.handlers.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { PackageUsageModel, ProjectModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/links.ts
+// src/routers/links.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -133,7 +133,6 @@ function registerLinks(app) {
 		return c.json(await linkedUsageFor(c, project, build.id, snapshot.storyImportPath));
 	});
 }
-//#endregion
 export { registerLinks };
 
 //# sourceMappingURL=links.mjs.map

package/dist/routers/media.mjs

@@ -4,8 +4,9 @@ import.meta.url;
 import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
 import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
-import { BaselineModel, BuildModel, DesignCredentialModel, DesignNodeModel, SnapshotModel } from "@storyshelf/core/models";
-//#region src/routers/media.ts
+import { readComparisonImage, validFrozenReference } from "./comparison-image.mjs";
+import { BaselineModel, BuildModel, DesignCredentialModel, DesignNodeModel, SnapshotModel, baselineStatus } from "@storyshelf/core/models";
+// src/routers/media.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -50,10 +51,19 @@ function registerMedia(app) {
 		const snapshot = await findSnapshot(c.req.param("buildId"), c.req.param("snapshotId"), project.id);
 		const build = await new BuildModel(getStore().db).get(snapshot.buildId);
 		if (!build) notFound("Build not found");
+		if (c.req.query("reference") !== "default" && (snapshot.comparisonImagePath || snapshot.comparisonMetadata)) {
+			const frozen = validFrozenReference(snapshot, project.id, build.id);
+			if (!frozen) notFound("Original baseline is unavailable");
+			const image = await readComparisonImage(frozen.path, frozen.reference.imageSha256);
+			if (!image) notFound("Original baseline image is unavailable");
+			return imageResponse(image, "private, no-store");
+		}
 		const baselines = new BaselineModel(getStore().db, void 0, getStore().storage);
-		const baseline = await baselines.resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch, snapshot.browser);
+		const baseline = c.req.query("reference") === "default" ? await baselines.getFor(project.id, snapshot.storyId, snapshot.viewportName, project.gitDefaultBranch, snapshot.browser) : await baselines.resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch, snapshot.browser);
+		if (c.req.query("reference") === "default" && (baseline?.id !== c.req.query("id") || baseline?.updatedAt !== c.req.query("version"))) notFound("Default baseline changed; reload the comparison");
 		if (!baseline) notFound("No baseline for this snapshot");
-		return imageResponse(await baselines.read(baseline));
+		if (c.req.query("reference") !== "default" && snapshot.baselineVersion !== null && baselineStatus(snapshot, baseline) !== "current") notFound("Original baseline is no longer available");
+		return imageResponse(await baselines.read(baseline), "private, no-store");
 	});
 }
 async function findSnapshot(buildId, snapshotId, projectId) {
@@ -61,7 +71,6 @@ async function findSnapshot(buildId, snapshotId, projectId) {
 	if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) notFound("Snapshot not found");
 	return snapshot;
 }
-//#endregion
 export { registerMedia };
 
 //# sourceMappingURL=media.mjs.map

package/dist/routers/media.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"media.mjs","names":[],"sources":["../../src/routers/media.ts"],"sourcesContent":["import { BaselineModel, DesignCredentialModel, DesignNodeModel } from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Snapshot } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\nconst PNG = \"image/png\";\n\nfunction imageResponse(buffer: Buffer, cacheControl = \"private, max-age=3600\"): Response {\n  return new Response(new Uint8Array(buffer), {\n    headers: { \"content-type\": PNG, \"cache-control\": cacheControl },\n  });\n}\n\n/** Design renders are addressed by file version (`?v=`): immutable once the version matches the row. */\nconst RENDER_IMMUTABLE = \"private, max-age=31536000, immutable\";\n\n/** Register the PNG image, diff, and baseline media endpoints for snapshots. */\nexport function registerMedia(app: ShelfRouter): void {\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    return imageResponse(await getStore().storage.read(snapshot.screenshotPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    if (!snapshot.diffPath) {\n      notFound(\"No diff for this snapshot\");\n    }\n    return imageResponse(await getStore().storage.read(snapshot.diffPath));\n  });\n\n  // `:renderId` is the internal design_nodes row id (a ULID), not a provider node id.\n  app.get(\"/api/v1/projects/:slug/design/renders/:renderId\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const { db, config, storage, design } = getStore();\n    const credentials = new DesignCredentialModel(db, credentialKeys(config));\n    const nodes = new DesignNodeModel(db, credentials, design, { storage });\n    const found = await nodes.get(project.id, c.req.param(\"renderId\"));\n    // A render fetched with a member's own connection is theirs alone (it may show files others cannot open).\n    const node =\n      found && (found.viewerId === \"\" || found.viewerId === getStore().user?.id) ? found : null;\n    const png = node ? await nodes.readRender(node) : null;\n    if (!png) {\n      notFound(\"No design render\");\n    }\n    const versioned = node?.renderVersion && c.req.query(\"v\") === node.renderVersion;\n    return imageResponse(png, versioned ? RENDER_IMMUTABLE : undefined);\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    const build = await new BuildModel(getStore().db).get(snapshot.buildId);\n    if (!build) {\n      notFound(\"Build not found\");\n    }\n    const baselines = new BaselineModel(getStore().db, undefined, getStore().storage);\n    const baseline = await baselines.resolve(\n      project.id,\n      snapshot.storyId,\n      snapshot.viewportName,\n      build.gitBranch,\n      project.gitDefaultBranch,\n      snapshot.browser,\n    );\n    if (!baseline) {\n      notFound(\"No baseline for this snapshot\");\n    }\n    return imageResponse(await baselines.read(baseline));\n  });\n}\n\nasync function findSnapshot(\n  buildId: string,\n  snapshotId: string,\n  projectId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n"],"mappings":";;;;;;;;AASA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAEtF,MAAM,MAAM;AAEZ,SAAS,cAAc,QAAgB,eAAe,yBAAmC;CACvF,OAAO,IAAI,SAAS,IAAI,WAAW,MAAM,GAAG,EAC1C,SAAS;EAAE,gBAAgB;EAAK,iBAAiB;CAAa,EAChE,CAAC;AACH;;AAGA,MAAM,mBAAmB;;AAGzB,SAAgB,cAAc,KAAwB;CACpD,IAAI,IAAI,sEAAsE,OAAO,MAAM;EACzF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,cAAc,CAAC;CAC7E,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACxF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,IAAI,CAAC,SAAS,UACZ,SAAS,2BAA2B;EAEtC,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,QAAQ,CAAC;CACvE,CAAC;CAGD,IAAI,IAAI,mDAAmD,OAAO,MAAM;EACtE,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,EAAE,IAAI,QAAQ,SAAS,WAAW,SAAS;EACjD,MAAM,cAAc,IAAI,sBAAsB,IAAI,eAAe,MAAM,CAAC;EACxE,MAAM,QAAQ,IAAI,gBAAgB,IAAI,aAAa,QAAQ,EAAE,QAAQ,CAAC;EACtE,MAAM,QAAQ,MAAM,MAAM,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,UAAU,CAAC;EAEjE,MAAM,OACJ,UAAU,MAAM,aAAa,MAAM,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,MAAM,QAAQ;EACvF,MAAM,MAAM,OAAO,MAAM,MAAM,WAAW,IAAI,IAAI;EAClD,IAAI,CAAC,KACH,SAAS,kBAAkB;EAG7B,OAAO,cAAc,KADH,MAAM,iBAAiB,EAAE,IAAI,MAAM,GAAG,MAAM,KAAK,gBAC7B,mBAAmB,KAAA,CAAS;CACpE,CAAC;CAED,IAAI,IAAI,yEAAyE,OAAO,MAAM;EAC5F,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;EACtE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,OAAO;EAChF,MAAM,WAAW,MAAM,UAAU,QAC/B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;EACA,IAAI,CAAC,UACH,SAAS,+BAA+B;EAE1C,OAAO,cAAc,MAAM,UAAU,KAAK,QAAQ,CAAC;CACrD,CAAC;AACH;AAEA,eAAe,aACb,SACA,YACA,WACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,WAAW,SAAS,cAAc,WACtE,SAAS,oBAAoB;CAE/B,OAAO;AACT"}
+{"version":3,"file":"media.mjs","names":[],"sources":["../../src/routers/media.ts"],"sourcesContent":["import {\n  BaselineModel,\n  DesignCredentialModel,\n  DesignNodeModel,\n  baselineStatus,\n} from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Snapshot } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { readComparisonImage, validFrozenReference } from \"./comparison-image.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\nconst PNG = \"image/png\";\n\nfunction imageResponse(buffer: Buffer, cacheControl = \"private, max-age=3600\"): Response {\n  return new Response(new Uint8Array(buffer), {\n    headers: { \"content-type\": PNG, \"cache-control\": cacheControl },\n  });\n}\n\n/** Design renders are addressed by file version (`?v=`): immutable once the version matches the row. */\nconst RENDER_IMMUTABLE = \"private, max-age=31536000, immutable\";\n\n/** Register the PNG image, diff, and baseline media endpoints for snapshots. */\nexport function registerMedia(app: ShelfRouter): void {\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    return imageResponse(await getStore().storage.read(snapshot.screenshotPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    if (!snapshot.diffPath) {\n      notFound(\"No diff for this snapshot\");\n    }\n    return imageResponse(await getStore().storage.read(snapshot.diffPath));\n  });\n\n  // `:renderId` is the internal design_nodes row id (a ULID), not a provider node id.\n  app.get(\"/api/v1/projects/:slug/design/renders/:renderId\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const { db, config, storage, design } = getStore();\n    const credentials = new DesignCredentialModel(db, credentialKeys(config));\n    const nodes = new DesignNodeModel(db, credentials, design, { storage });\n    const found = await nodes.get(project.id, c.req.param(\"renderId\"));\n    // A render fetched with a member's own connection is theirs alone (it may show files others cannot open).\n    const node =\n      found && (found.viewerId === \"\" || found.viewerId === getStore().user?.id) ? found : null;\n    const png = node ? await nodes.readRender(node) : null;\n    if (!png) {\n      notFound(\"No design render\");\n    }\n    const versioned = node?.renderVersion && c.req.query(\"v\") === node.renderVersion;\n    return imageResponse(png, versioned ? RENDER_IMMUTABLE : undefined);\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    const build = await new BuildModel(getStore().db).get(snapshot.buildId);\n    if (!build) {\n      notFound(\"Build not found\");\n    }\n    if (\n      c.req.query(\"reference\") !== \"default\" &&\n      (snapshot.comparisonImagePath || snapshot.comparisonMetadata)\n    ) {\n      const frozen = validFrozenReference(snapshot, project.id, build.id);\n      if (!frozen) {\n        notFound(\"Original baseline is unavailable\");\n      }\n      const image = await readComparisonImage(frozen.path, frozen.reference.imageSha256);\n      if (!image) {\n        notFound(\"Original baseline image is unavailable\");\n      }\n      return imageResponse(image, \"private, no-store\");\n    }\n    const baselines = new BaselineModel(getStore().db, undefined, getStore().storage);\n    const baseline =\n      c.req.query(\"reference\") === \"default\"\n        ? await baselines.getFor(\n            project.id,\n            snapshot.storyId,\n            snapshot.viewportName,\n            project.gitDefaultBranch,\n            snapshot.browser,\n          )\n        : await baselines.resolve(\n            project.id,\n            snapshot.storyId,\n            snapshot.viewportName,\n            build.gitBranch,\n            project.gitDefaultBranch,\n            snapshot.browser,\n          );\n    if (\n      c.req.query(\"reference\") === \"default\" &&\n      (baseline?.id !== c.req.query(\"id\") || baseline?.updatedAt !== c.req.query(\"version\"))\n    ) {\n      notFound(\"Default baseline changed; reload the comparison\");\n    }\n    if (!baseline) {\n      notFound(\"No baseline for this snapshot\");\n    }\n    if (\n      c.req.query(\"reference\") !== \"default\" &&\n      snapshot.baselineVersion !== null &&\n      baselineStatus(snapshot, baseline) !== \"current\"\n    ) {\n      notFound(\"Original baseline is no longer available\");\n    }\n    return imageResponse(await baselines.read(baseline), \"private, no-store\");\n  });\n}\n\nasync function findSnapshot(\n  buildId: string,\n  snapshotId: string,\n  projectId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n"],"mappings":";;;;;;;;;AAeA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAEtF,MAAM,MAAM;AAEZ,SAAS,cAAc,QAAgB,eAAe,yBAAmC;CACvF,OAAO,IAAI,SAAS,IAAI,WAAW,MAAM,GAAG,EAC1C,SAAS;EAAE,gBAAgB;EAAK,iBAAiB;CAAa,EAChE,CAAC;AACH;;AAGA,MAAM,mBAAmB;;AAGzB,SAAgB,cAAc,KAAwB;CACpD,IAAI,IAAI,sEAAsE,OAAO,MAAM;EACzF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,cAAc,CAAC;CAC7E,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACxF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,IAAI,CAAC,SAAS,UACZ,SAAS,2BAA2B;EAEtC,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,QAAQ,CAAC;CACvE,CAAC;CAGD,IAAI,IAAI,mDAAmD,OAAO,MAAM;EACtE,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,EAAE,IAAI,QAAQ,SAAS,WAAW,SAAS;EACjD,MAAM,cAAc,IAAI,sBAAsB,IAAI,eAAe,MAAM,CAAC;EACxE,MAAM,QAAQ,IAAI,gBAAgB,IAAI,aAAa,QAAQ,EAAE,QAAQ,CAAC;EACtE,MAAM,QAAQ,MAAM,MAAM,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,UAAU,CAAC;EAEjE,MAAM,OACJ,UAAU,MAAM,aAAa,MAAM,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,MAAM,QAAQ;EACvF,MAAM,MAAM,OAAO,MAAM,MAAM,WAAW,IAAI,IAAI;EAClD,IAAI,CAAC,KACH,SAAS,kBAAkB;EAG7B,OAAO,cAAc,KADH,MAAM,iBAAiB,EAAE,IAAI,MAAM,GAAG,MAAM,KAAK,gBAC7B,mBAAmB,KAAA,CAAS;CACpE,CAAC;CAED,IAAI,IAAI,yEAAyE,OAAO,MAAM;EAC5F,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;EACtE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,cAC5B,SAAS,uBAAuB,SAAS,qBAC1C;GACA,MAAM,SAAS,qBAAqB,UAAU,QAAQ,IAAI,MAAM,EAAE;GAClE,IAAI,CAAC,QACH,SAAS,kCAAkC;GAE7C,MAAM,QAAQ,MAAM,oBAAoB,OAAO,MAAM,OAAO,UAAU,WAAW;GACjF,IAAI,CAAC,OACH,SAAS,wCAAwC;GAEnD,OAAO,cAAc,OAAO,mBAAmB;EACjD;EACA,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,OAAO;EAChF,MAAM,WACJ,EAAE,IAAI,MAAM,WAAW,MAAM,YACzB,MAAM,UAAU,OACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,QAAQ,kBACR,SAAS,OACX,IACA,MAAM,UAAU,QACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;EACN,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,cAC5B,UAAU,OAAO,EAAE,IAAI,MAAM,IAAI,KAAK,UAAU,cAAc,EAAE,IAAI,MAAM,SAAS,IAEpF,SAAS,iDAAiD;EAE5D,IAAI,CAAC,UACH,SAAS,+BAA+B;EAE1C,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,aAC7B,SAAS,oBAAoB,QAC7B,eAAe,UAAU,QAAQ,MAAM,WAEvC,SAAS,0CAA0C;EAErD,OAAO,cAAc,MAAM,UAAU,KAAK,QAAQ,GAAG,mBAAmB;CAC1E,CAAC;AACH;AAEA,eAAe,aACb,SACA,YACA,WACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,WAAW,SAAS,cAAc,WACtE,SAAS,oBAAoB;CAE/B,OAAO;AACT"}

package/dist/routers/members.mjs

@@ -7,7 +7,7 @@ import { groupMappingCreateSchema, groupMappingSchema, memberRoleSchema, memberS
 import { createRoute, z } from "@hono/zod-openapi";
 import { MemberModel, ProjectGroupMappingModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/members.ts
+// src/routers/members.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -172,7 +172,6 @@ function registerGroupMappingRoutes(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerMembers };
 
 //# sourceMappingURL=members.mjs.map

package/dist/routers/notification-channels.mjs

@@ -7,7 +7,7 @@ import { notFound as notFound$1, notificationChannelCreateSchema, notificationCh
 import { notificationChannelModel } from "./scoped-models.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { NotificationChannelModel } from "@storyshelf/core/models";
-//#region src/routers/notification-channels.ts
+// src/routers/notification-channels.ts
 const ADMIN_ROLES = ["admin"];
 /** Public channel view (secret redacted, config/events decoded). */
 function toPublic(row) {
@@ -178,7 +178,6 @@ function registerSystemChannels(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerNotificationChannels, registerSystemChannels };
 
 //# sourceMappingURL=notification-channels.mjs.map

package/dist/routers/notification-subscriptions.mjs

@@ -6,7 +6,7 @@ import { resolveAuthorizedProject, unauthorized } from "./helpers.mjs";
 import { notFound, notificationSubscriptionPutSchema, notificationSubscriptionSchema, unauthorized as unauthorized$1 } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { NotificationSubscriptionModel } from "@storyshelf/core/models";
-//#region src/routers/notification-subscriptions.ts
+// src/routers/notification-subscriptions.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -114,7 +114,6 @@ function registerNotificationSubscriptions(app) {
 		return c.json(rows.map((row) => toPublic(row)));
 	});
 }
-//#endregion
 export { registerNotificationSubscriptions };
 
 //# sourceMappingURL=notification-subscriptions.mjs.map

package/dist/routers/oauth-state.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { timingSafeEqualString } from "@storyshelf/core/utils";
 import { createHmac, randomBytes } from "node:crypto";
-//#region src/routers/oauth-state.ts
+// src/routers/oauth-state.ts
 /** Signed, expiring OAuth `state` for "connect your account" flows (binds user, service and browser). */
 /** State lifetime: long enough to sign in at the service, short enough to limit replay. */
 const STATE_TTL_MS = 6e5;
@@ -39,7 +39,6 @@ function safeReturnPath(value, fallback) {
 function mac(secret, payload) {
 	return createHmac("sha256", secret).update(`oauth-connect:${payload}`).digest("base64url");
 }
-//#endregion
 export { safeReturnPath, signState, verifyState };
 
 //# sourceMappingURL=oauth-state.mjs.map

package/dist/routers/preview-base.mjs

@@ -6,7 +6,7 @@ import { getStore, testingEnabled } from "../store.mjs";
 import { isAnonymouslyViewable, publishedAccess } from "./published-access.mjs";
 import { STORYBOOK_TOKEN_PREFIX, signStorybookToken } from "@storyshelf/core/utils";
 import { createUrlBuilder } from "@storyshelf/core/urls";
-//#region src/routers/preview-base.ts
+// src/routers/preview-base.ts
 /** Lifetime of the token in a page: long enough to open the frame, short enough to be harmless. */
 const PREVIEW_TOKEN_TTL = 3600;
 /**
@@ -32,7 +32,6 @@ async function previewBaseOf(project, build) {
 	});
 	return `${STORYBOOK_TOKEN_PREFIX}${token}`;
 }
-//#endregion
 export { PREVIEW_TOKEN_REFRESH, PREVIEW_TOKEN_TTL, isSignedPreviewBase, previewBaseOf };
 
 //# sourceMappingURL=preview-base.mjs.map

package/dist/routers/preview-token.mjs

@@ -6,7 +6,7 @@ import { isSignedPreviewBase, previewBaseOf } from "./preview-base.mjs";
 import { SIGNED_URL_HEADERS } from "./published-files.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { BuildModel, ProjectModel } from "@storyshelf/core/models";
-//#region src/routers/preview-token.ts
+// src/routers/preview-token.ts
 /**
 * `GET /api/v1/projects/:slug/builds/:buildId/preview-token`: a fresh root for a component page's preview frame
 * (ADR 0006, decision 9). A frame holding a signed `/_s/<token>` URL (ADR 0007, decision 5) outlives
@@ -45,7 +45,6 @@ function registerPreviewToken(app) {
 		return c.json({ base }, 200, SIGNED_URL_HEADERS);
 	});
 }
-//#endregion
 export { registerPreviewToken };
 
 //# sourceMappingURL=preview-token.mjs.map

package/dist/routers/profile.mjs

@@ -11,7 +11,7 @@ import { NotificationSubscriptionModel, ProjectModel, UserModel } from "@storysh
 import { SESSION_COOKIE } from "@storyshelf/core/types";
 import { MIN_PASSWORD_LENGTH, unsignedToken } from "@storyshelf/core/auth";
 import { eq, getTableColumns } from "@storyshelf/core/orm";
-//#region src/routers/profile.ts
+// src/routers/profile.ts
 function field(form, name) {
 	const raw = form.get(name);
 	return typeof raw === "string" ? raw : "";
@@ -272,7 +272,6 @@ function readPasswordChange(form) {
 		next
 	};
 }
-//#endregion
 export { registerProfile };
 
 //# sourceMappingURL=profile.mjs.map

package/dist/routers/projects.mjs

@@ -11,7 +11,7 @@ import { createRoute, z } from "@hono/zod-openapi";
 import { resolveBrowsers } from "@storyshelf/core/capture";
 import { LabelModel, MemberModel, ProjectModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/projects.ts
+// src/routers/projects.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -143,7 +143,6 @@ function registerProjects(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerProjects };
 
 //# sourceMappingURL=projects.mjs.map

package/dist/routers/publish-upload.mjs

@@ -4,10 +4,10 @@ import.meta.url;
 import { getStore } from "../store.mjs";
 import { DEFAULT_SCRATCH_DIR } from "@storyshelf/core/config";
 import { storybookZipPath } from "@storyshelf/core/utils";
-import { FILE_BY_FILE_HINT, extractionLimitsOf, publishRoute, publishStoredZip, resolvePublishLimits } from "@storyshelf/core/capture";
+import { FILE_BY_FILE_HINT, ZipInvalidError, ZipLimitError, extractionLimitsOf, publishRoute, publishStoredZip, resolvePublishLimits } from "@storyshelf/core/capture";
 import { BuildModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/publish-upload.ts
+// src/routers/publish-upload.ts
 /**
 * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it
 * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a
@@ -61,18 +61,25 @@ async function publishInline(build) {
 		logger.info({ buildId: build.id }, "upload statics persisted inline");
 		await publish?.completer.complete(build.id, { ok: true });
 	} catch (error) {
-		const message = error instanceof Error ? error.message : String(error);
-		logger.error({
-			err: error,
-			buildId: build.id
-		}, "inline publish failed");
-		await publish?.completer.complete(build.id, {
-			ok: false,
-			error: message
-		});
+		if (error instanceof ZipInvalidError || error instanceof ZipLimitError) {
+			await discardZip(build.projectId, build.id);
+			throw new HTTPException(422, { message: error.message });
+		}
+		await failInlinePublish(build, error);
 	}
 }
-//#endregion
+async function failInlinePublish(build, error) {
+	const { logger, publish } = getStore();
+	const message = error instanceof Error ? error.message : String(error);
+	logger.error({
+		err: error,
+		buildId: build.id
+	}, "inline publish failed");
+	await publish?.completer.complete(build.id, {
+		ok: false,
+		error: message
+	});
+}
 export { discardZip, planUpload, publishUpload };
 
 //# sourceMappingURL=publish-upload.mjs.map

package/dist/routers/publish-upload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"publish-upload.mjs","names":[],"sources":["../../src/routers/publish-upload.ts"],"sourcesContent":["/**\n * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it\n * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a\n * pointer to the file-by-file route on a host that runs no consumer.\n */\nimport {\n  extractionLimitsOf,\n  FILE_BY_FILE_HINT,\n  publishRoute,\n  publishStoredZip,\n  resolvePublishLimits,\n} from \"@storyshelf/core/capture\";\nimport { DEFAULT_SCRATCH_DIR } from \"@storyshelf/core/config\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */\nexport function planUpload(zipBytes: number): \"inline\" | \"job\" {\n  const { config, publish } = getStore();\n  const route = publishRoute(zipBytes, resolvePublishLimits(config));\n  if (route === \"job\" && !publish?.enqueuePublish) {\n    throw new HTTPException(413, { message: FILE_BY_FILE_HINT });\n  }\n  return route;\n}\n\n/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */\nexport async function discardZip(projectId: string, buildId: string): Promise<void> {\n  try {\n    await getStore().storage.delete(storybookZipPath(projectId, buildId));\n  } catch (error) {\n    getStore().logger.warn({ err: error, buildId }, \"could not remove a refused zip\");\n  }\n}\n\n/**\n * Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a\n * failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.\n * Resolves to the build as it stands afterwards.\n */\nexport async function publishUpload(\n  route: \"inline\" | \"job\",\n  build: Build,\n  reqId: string | undefined,\n): Promise<Build> {\n  const { publish } = getStore();\n  if (route === \"job\") {\n    await publish?.enqueuePublish?.(build.id, reqId);\n    return build;\n  }\n  await publishInline(build);\n  return (await new BuildModel(getStore().db).get(build.id)) ?? build;\n}\n\nasync function publishInline(build: Build): Promise<void> {\n  const { storage, config, logger, publish, db } = getStore();\n  try {\n    await publishStoredZip(\n      {\n        storage,\n        scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,\n        limits: extractionLimitsOf(resolvePublishLimits(config)),\n        db,\n        logger,\n      },\n      { projectId: build.projectId, buildId: build.id },\n    );\n    logger.info({ buildId: build.id }, \"upload statics persisted inline\");\n    await publish?.completer.complete(build.id, { ok: true });\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    logger.error({ err: error, buildId: build.id }, \"inline publish failed\");\n    await publish?.completer.complete(build.id, { ok: false, error: message });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,SAAgB,WAAW,UAAoC;CAC7D,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,QAAQ,aAAa,UAAU,qBAAqB,MAAM,CAAC;CACjE,IAAI,UAAU,SAAS,CAAC,SAAS,gBAC/B,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kBAAkB,CAAC;CAE7D,OAAO;AACT;;AAGA,eAAsB,WAAW,WAAmB,SAAgC;CAClF,IAAI;EACF,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,iBAAiB,WAAW,OAAO,CAAC;CACtE,SAAS,OAAO;EACd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO;EAAQ,GAAG,gCAAgC;CAClF;AACF;;;;;;AAOA,eAAsB,cACpB,OACA,OACA,OACgB;CAChB,MAAM,EAAE,YAAY,SAAS;CAC7B,IAAI,UAAU,OAAO;EACnB,MAAM,SAAS,iBAAiB,MAAM,IAAI,KAAK;EAC/C,OAAO;CACT;CACA,MAAM,cAAc,KAAK;CACzB,OAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,KAAM;AAChE;AAEA,eAAe,cAAc,OAA6B;CACxD,MAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,OAAO,SAAS;CAC1D,IAAI;EACF,MAAM,iBACJ;GACE;GACA,YAAY,OAAO,cAAc;GACjC,QAAQ,mBAAmB,qBAAqB,MAAM,CAAC;GACvD;GACA;EACF,GACA;GAAE,WAAW,MAAM;GAAW,SAAS,MAAM;EAAG,CAClD;EACA,OAAO,KAAK,EAAE,SAAS,MAAM,GAAG,GAAG,iCAAiC;EACpE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;CAC1D,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO,MAAM;GAAE,KAAK;GAAO,SAAS,MAAM;EAAG,GAAG,uBAAuB;EACvE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;GAAE,IAAI;GAAO,OAAO;EAAQ,CAAC;CAC3E;AACF"}
+{"version":3,"file":"publish-upload.mjs","names":[],"sources":["../../src/routers/publish-upload.ts"],"sourcesContent":["/**\n * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it\n * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a\n * pointer to the file-by-file route on a host that runs no consumer.\n */\nimport {\n  extractionLimitsOf,\n  FILE_BY_FILE_HINT,\n  publishRoute,\n  publishStoredZip,\n  resolvePublishLimits,\n  ZipInvalidError,\n  ZipLimitError,\n} from \"@storyshelf/core/capture\";\nimport { DEFAULT_SCRATCH_DIR } from \"@storyshelf/core/config\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */\nexport function planUpload(zipBytes: number): \"inline\" | \"job\" {\n  const { config, publish } = getStore();\n  const route = publishRoute(zipBytes, resolvePublishLimits(config));\n  if (route === \"job\" && !publish?.enqueuePublish) {\n    throw new HTTPException(413, { message: FILE_BY_FILE_HINT });\n  }\n  return route;\n}\n\n/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */\nexport async function discardZip(projectId: string, buildId: string): Promise<void> {\n  try {\n    await getStore().storage.delete(storybookZipPath(projectId, buildId));\n  } catch (error) {\n    getStore().logger.warn({ err: error, buildId }, \"could not remove a refused zip\");\n  }\n}\n\n/**\n * Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a\n * failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.\n * Resolves to the build as it stands afterwards.\n */\nexport async function publishUpload(\n  route: \"inline\" | \"job\",\n  build: Build,\n  reqId: string | undefined,\n): Promise<Build> {\n  const { publish } = getStore();\n  if (route === \"job\") {\n    await publish?.enqueuePublish?.(build.id, reqId);\n    return build;\n  }\n  await publishInline(build);\n  return (await new BuildModel(getStore().db).get(build.id)) ?? build;\n}\n\nasync function publishInline(build: Build): Promise<void> {\n  const { storage, config, logger, publish, db } = getStore();\n  try {\n    await publishStoredZip(\n      {\n        storage,\n        scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,\n        limits: extractionLimitsOf(resolvePublishLimits(config)),\n        db,\n        logger,\n      },\n      { projectId: build.projectId, buildId: build.id },\n    );\n    logger.info({ buildId: build.id }, \"upload statics persisted inline\");\n    await publish?.completer.complete(build.id, { ok: true });\n  } catch (error) {\n    if (error instanceof ZipInvalidError || error instanceof ZipLimitError) {\n      await discardZip(build.projectId, build.id);\n      throw new HTTPException(422, { message: error.message });\n    }\n    await failInlinePublish(build, error);\n  }\n}\n\nasync function failInlinePublish(build: Build, error: unknown): Promise<void> {\n  const { logger, publish } = getStore();\n  const message = error instanceof Error ? error.message : String(error);\n  logger.error({ err: error, buildId: build.id }, \"inline publish failed\");\n  await publish?.completer.complete(build.id, { ok: false, error: message });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAsBA,SAAgB,WAAW,UAAoC;CAC7D,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,QAAQ,aAAa,UAAU,qBAAqB,MAAM,CAAC;CACjE,IAAI,UAAU,SAAS,CAAC,SAAS,gBAC/B,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kBAAkB,CAAC;CAE7D,OAAO;AACT;;AAGA,eAAsB,WAAW,WAAmB,SAAgC;CAClF,IAAI;EACF,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,iBAAiB,WAAW,OAAO,CAAC;CACtE,SAAS,OAAO;EACd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO;EAAQ,GAAG,gCAAgC;CAClF;AACF;;;;;;AAOA,eAAsB,cACpB,OACA,OACA,OACgB;CAChB,MAAM,EAAE,YAAY,SAAS;CAC7B,IAAI,UAAU,OAAO;EACnB,MAAM,SAAS,iBAAiB,MAAM,IAAI,KAAK;EAC/C,OAAO;CACT;CACA,MAAM,cAAc,KAAK;CACzB,OAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,KAAM;AAChE;AAEA,eAAe,cAAc,OAA6B;CACxD,MAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,OAAO,SAAS;CAC1D,IAAI;EACF,MAAM,iBACJ;GACE;GACA,YAAY,OAAO,cAAc;GACjC,QAAQ,mBAAmB,qBAAqB,MAAM,CAAC;GACvD;GACA;EACF,GACA;GAAE,WAAW,MAAM;GAAW,SAAS,MAAM;EAAG,CAClD;EACA,OAAO,KAAK,EAAE,SAAS,MAAM,GAAG,GAAG,iCAAiC;EACpE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;CAC1D,SAAS,OAAO;EACd,IAAI,iBAAiB,mBAAmB,iBAAiB,eAAe;GACtE,MAAM,WAAW,MAAM,WAAW,MAAM,EAAE;GAC1C,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,MAAM,QAAQ,CAAC;EACzD;EACA,MAAM,kBAAkB,OAAO,KAAK;CACtC;AACF;AAEA,eAAe,kBAAkB,OAAc,OAA+B;CAC5E,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,MAAM;EAAE,KAAK;EAAO,SAAS,MAAM;CAAG,GAAG,uBAAuB;CACvE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;EAAE,IAAI;EAAO,OAAO;CAAQ,CAAC;AAC3E"}

package/dist/routers/published-access.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { getStore } from "../store.mjs";
 import { currentProjectRole } from "./helpers.mjs";
 import { isPublicBuild } from "@storyshelf/core/models";
-//#region src/routers/published-access.ts
+// src/routers/published-access.ts
 /**
 * The one policy for reading a build's published files (ADR 0007, decision 5; ADR 0011): a signed
 * token naming the build, or a build anyone may open (public, or an instance without sign-in), or
@@ -46,7 +46,6 @@ function isAnonymouslyViewable(build, project) {
 function publishedCorsHeaders(access) {
 	return access === "session" ? {} : { "access-control-allow-origin": "*" };
 }
-//#endregion
 export { isAnonymouslyViewable, publishedAccess, publishedCorsHeaders };
 
 //# sourceMappingURL=published-access.mjs.map

package/dist/routers/published-compression.mjs

@@ -0,0 +1,109 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { publishedGzipPath } from "@storyshelf/core/utils";
+import { createHash } from "node:crypto";
+import { promisify } from "node:util";
+import { gunzip, gzip } from "node:zlib";
+// src/routers/published-compression.ts
+const compress = promisify(gzip);
+const decompress = promisify(gunzip);
+const MAX_FILE_BYTES = 8388608;
+const MAX_JOBS = 2;
+const MAX_READS = 4;
+const READ_TIMEOUT_MS = 250;
+const states = /* @__PURE__ */ new WeakMap();
+/** Gzip is chosen only if explicitly accepted, or by a nonzero wildcard. */
+function acceptsGzip(header) {
+	if (!header) return false;
+	const entries = header.split(",").map((part) => part.trim().split(";"));
+	const entry = entries.find(([name]) => name?.trim().toLowerCase() === "gzip") ?? entries.find(([name]) => name?.trim() === "*");
+	if (!entry) return false;
+	const quality = entry.slice(1).find((part) => /^\s*q\s*=/iu.test(part));
+	if (quality === void 0) return true;
+	const value = Number(quality.split("=")[1]);
+	return Number.isFinite(value) && value > 0 && value <= 1;
+}
+/** Return a verified existing variant, or the original while a bounded background job runs. */
+async function publishedGzip(storage, hash, original, mime) {
+	if (typeof hash !== "string" || !eligible(hash, original, mime)) return void 0;
+	const state = stateOf(storage);
+	if (state.reads >= MAX_READS) return void 0;
+	state.reads += 1;
+	const found = await withDeadline(findVariant(storage, hash, original).finally(() => {
+		state.reads -= 1;
+	}));
+	if (found === "timeout") return void 0;
+	if (found) return found;
+	schedule(storage, state, hash, original);
+}
+function eligible(hash, original, mime) {
+	return typeof hash === "string" && /^[a-f0-9]{64}$/u.test(hash) && original.length > 0 && original.length <= MAX_FILE_BYTES && /^(?:text\/|application\/(?:javascript|json|xml|wasm)|image\/svg\+xml)/iu.test(mime);
+}
+function stateOf(storage) {
+	let state = states.get(storage);
+	if (!state) {
+		state = {
+			jobs: /* @__PURE__ */ new Map(),
+			reads: 0
+		};
+		states.set(storage, state);
+	}
+	return state;
+}
+async function findVariant(storage, hash, original) {
+	try {
+		const path = publishedGzipPath(hash);
+		if (!await storage.exists(path)) return void 0;
+		const bytes = await readBounded(storage, path, original.length);
+		if (!bytes || bytes.length === 0) return void 0;
+		return (await decompress(bytes, { maxOutputLength: original.length })).equals(original) ? bytes : void 0;
+	} catch {
+		return;
+	}
+}
+/** Do not allocate an unbounded buffer when a damaged storage object is oversized. */
+async function readBounded(storage, path, limit) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of await storage.readStream(path)) {
+		const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		size += bytes.length;
+		if (size >= limit) return;
+		chunks.push(bytes);
+	}
+	return Buffer.concat(chunks, size);
+}
+/** No queue: at capacity a future request may try again. */
+function schedule(storage, state, hash, original) {
+	if (state.jobs.has(hash) || state.jobs.size >= MAX_JOBS) return;
+	const job = generate(storage, hash, original).catch(() => {}).finally(() => {
+		state.jobs.delete(hash);
+	});
+	state.jobs.set(hash, job);
+}
+async function generate(storage, hash, original) {
+	if (createHash("sha256").update(original).digest("hex") !== hash) return;
+	const source = `content/${hash}`;
+	if (!await storage.exists(source)) return;
+	const compressed = await compress(original);
+	if (compressed.length >= original.length || !await storage.exists(source)) return;
+	const path = publishedGzipPath(hash);
+	await storage.write(path, compressed);
+	if (!await storage.exists(source)) await storage.delete(path);
+}
+async function withDeadline(promise) {
+	let timer;
+	try {
+		return await Promise.race([promise, new Promise((resolve) => {
+			timer = setTimeout(() => {
+				resolve("timeout");
+			}, READ_TIMEOUT_MS);
+		})]);
+	} finally {
+		if (timer) clearTimeout(timer);
+	}
+}
+export { acceptsGzip, publishedGzip };
+
+//# sourceMappingURL=published-compression.mjs.map

package/dist/routers/published-compression.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"published-compression.mjs","names":[],"sources":["../../src/routers/published-compression.ts"],"sourcesContent":["/** Disposable, content-addressed gzip variants of authorized published files. */\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport { publishedGzipPath } from \"@storyshelf/core/utils\";\nimport { createHash } from \"node:crypto\";\nimport { promisify } from \"node:util\";\nimport { gunzip, gzip } from \"node:zlib\";\n\nconst compress = promisify(gzip);\nconst decompress = promisify(gunzip);\nconst MAX_FILE_BYTES = 8 * 1024 * 1024;\nconst MAX_JOBS = 2;\nconst MAX_READS = 4;\nconst READ_TIMEOUT_MS = 250;\nconst states = new WeakMap<StorageAdapter, State>();\n\ninterface State {\n  jobs: Map<string, Promise<void>>;\n  reads: number;\n}\n\n/** Gzip is chosen only if explicitly accepted, or by a nonzero wildcard. */\nexport function acceptsGzip(header?: string): boolean {\n  if (!header) return false;\n  const entries = header.split(\",\").map((part) => part.trim().split(\";\"));\n  const entry =\n    entries.find(([name]) => name?.trim().toLowerCase() === \"gzip\") ??\n    entries.find(([name]) => name?.trim() === \"*\");\n  if (!entry) return false;\n  const quality = entry.slice(1).find((part) => /^\\s*q\\s*=/iu.test(part));\n  if (quality === undefined) return true;\n  const value = Number(quality.split(\"=\")[1]);\n  return Number.isFinite(value) && value > 0 && value <= 1;\n}\n\n/** Return a verified existing variant, or the original while a bounded background job runs. */\nexport async function publishedGzip(\n  storage: StorageAdapter,\n  hash: string | undefined,\n  original: Buffer,\n  mime: string,\n): Promise<Buffer | undefined> {\n  if (typeof hash !== \"string\" || !eligible(hash, original, mime)) return undefined;\n  const state = stateOf(storage);\n  if (state.reads >= MAX_READS) return undefined;\n  state.reads += 1;\n  const read = findVariant(storage, hash, original).finally(() => {\n    state.reads -= 1;\n  });\n  const found = await withDeadline(read);\n  if (found === \"timeout\") return undefined;\n  if (found) return found;\n  schedule(storage, state, hash, original);\n  return undefined;\n}\n\nfunction eligible(hash: string | undefined, original: Buffer, mime: string): boolean {\n  return (\n    typeof hash === \"string\" &&\n    /^[a-f0-9]{64}$/u.test(hash) &&\n    original.length > 0 &&\n    original.length <= MAX_FILE_BYTES &&\n    /^(?:text\\/|application\\/(?:javascript|json|xml|wasm)|image\\/svg\\+xml)/iu.test(mime)\n  );\n}\n\nfunction stateOf(storage: StorageAdapter): State {\n  let state = states.get(storage);\n  if (!state) {\n    state = { jobs: new Map(), reads: 0 };\n    states.set(storage, state);\n  }\n  return state;\n}\n\nasync function findVariant(\n  storage: StorageAdapter,\n  hash: string,\n  original: Buffer,\n): Promise<Buffer | undefined> {\n  try {\n    const path = publishedGzipPath(hash);\n    if (!(await storage.exists(path))) return undefined;\n    const bytes = await readBounded(storage, path, original.length);\n    if (!bytes || bytes.length === 0) return undefined;\n    const decoded = await decompress(bytes, { maxOutputLength: original.length });\n    return decoded.equals(original) ? bytes : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/** Do not allocate an unbounded buffer when a damaged storage object is oversized. */\nasync function readBounded(\n  storage: StorageAdapter,\n  path: string,\n  limit: number,\n): Promise<Buffer | undefined> {\n  const chunks: Buffer[] = [];\n  let size = 0;\n  for await (const chunk of await storage.readStream(path)) {\n    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk as Uint8Array);\n    size += bytes.length;\n    if (size >= limit) {\n      return undefined;\n    }\n    chunks.push(bytes);\n  }\n  return Buffer.concat(chunks, size);\n}\n\n/** No queue: at capacity a future request may try again. */\nfunction schedule(storage: StorageAdapter, state: State, hash: string, original: Buffer): void {\n  if (state.jobs.has(hash) || state.jobs.size >= MAX_JOBS) return;\n  const job = generate(storage, hash, original)\n    .catch(() => {})\n    .finally(() => {\n      state.jobs.delete(hash);\n    });\n  state.jobs.set(hash, job);\n}\n\nasync function generate(storage: StorageAdapter, hash: string, original: Buffer): Promise<void> {\n  if (createHash(\"sha256\").update(original).digest(\"hex\") !== hash) return;\n  const source = `content/${hash}`;\n  if (!(await storage.exists(source))) return;\n  const compressed = await compress(original);\n  if (compressed.length >= original.length || !(await storage.exists(source))) return;\n  const path = publishedGzipPath(hash);\n  await storage.write(path, compressed);\n  // A purge can remove the original while compression is in flight.\n  if (!(await storage.exists(source))) await storage.delete(path);\n}\n\nasync function withDeadline<T>(promise: Promise<T>): Promise<T | \"timeout\"> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<\"timeout\">((resolve) => {\n        timer = setTimeout(() => {\n          resolve(\"timeout\");\n        }, READ_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,WAAW,UAAU,IAAI;AAC/B,MAAM,aAAa,UAAU,MAAM;AACnC,MAAM,iBAAiB;AACvB,MAAM,WAAW;AACjB,MAAM,YAAY;AAClB,MAAM,kBAAkB;AACxB,MAAM,yBAAS,IAAI,QAA+B;;AAQlD,SAAgB,YAAY,QAA0B;CACpD,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,UAAU,OAAO,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;CACtE,MAAM,QACJ,QAAQ,MAAM,CAAC,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY,MAAM,MAAM,KAC9D,QAAQ,MAAM,CAAC,UAAU,MAAM,KAAK,MAAM,GAAG;CAC/C,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,UAAU,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,SAAS,cAAc,KAAK,IAAI,CAAC;CACtE,IAAI,YAAY,KAAA,GAAW,OAAO;CAClC,MAAM,QAAQ,OAAO,QAAQ,MAAM,GAAG,CAAC,CAAC,EAAE;CAC1C,OAAO,OAAO,SAAS,KAAK,KAAK,QAAQ,KAAK,SAAS;AACzD;;AAGA,eAAsB,cACpB,SACA,MACA,UACA,MAC6B;CAC7B,IAAI,OAAO,SAAS,YAAY,CAAC,SAAS,MAAM,UAAU,IAAI,GAAG,OAAO,KAAA;CACxE,MAAM,QAAQ,QAAQ,OAAO;CAC7B,IAAI,MAAM,SAAS,WAAW,OAAO,KAAA;CACrC,MAAM,SAAS;CAIf,MAAM,QAAQ,MAAM,aAHP,YAAY,SAAS,MAAM,QAAQ,CAAC,CAAC,cAAc;EAC9D,MAAM,SAAS;CACjB,CACoC,CAAC;CACrC,IAAI,UAAU,WAAW,OAAO,KAAA;CAChC,IAAI,OAAO,OAAO;CAClB,SAAS,SAAS,OAAO,MAAM,QAAQ;AAEzC;AAEA,SAAS,SAAS,MAA0B,UAAkB,MAAuB;CACnF,OACE,OAAO,SAAS,YAChB,kBAAkB,KAAK,IAAI,KAC3B,SAAS,SAAS,KAClB,SAAS,UAAU,kBACnB,0EAA0E,KAAK,IAAI;AAEvF;AAEA,SAAS,QAAQ,SAAgC;CAC/C,IAAI,QAAQ,OAAO,IAAI,OAAO;CAC9B,IAAI,CAAC,OAAO;EACV,QAAQ;GAAE,sBAAM,IAAI,IAAI;GAAG,OAAO;EAAE;EACpC,OAAO,IAAI,SAAS,KAAK;CAC3B;CACA,OAAO;AACT;AAEA,eAAe,YACb,SACA,MACA,UAC6B;CAC7B,IAAI;EACF,MAAM,OAAO,kBAAkB,IAAI;EACnC,IAAI,CAAE,MAAM,QAAQ,OAAO,IAAI,GAAI,OAAO,KAAA;EAC1C,MAAM,QAAQ,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;EAC9D,IAAI,CAAC,SAAS,MAAM,WAAW,GAAG,OAAO,KAAA;EAEzC,QAAO,MADe,WAAW,OAAO,EAAE,iBAAiB,SAAS,OAAO,CAAC,EAAA,CAC7D,OAAO,QAAQ,IAAI,QAAQ,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;;AAGA,eAAe,YACb,SACA,MACA,OAC6B;CAC7B,MAAM,SAAmB,CAAC;CAC1B,IAAI,OAAO;CACX,WAAW,MAAM,SAAS,MAAM,QAAQ,WAAW,IAAI,GAAG;EACxD,MAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAmB;EAC9E,QAAQ,MAAM;EACd,IAAI,QAAQ,OACV;EAEF,OAAO,KAAK,KAAK;CACnB;CACA,OAAO,OAAO,OAAO,QAAQ,IAAI;AACnC;;AAGA,SAAS,SAAS,SAAyB,OAAc,MAAc,UAAwB;CAC7F,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,QAAQ,UAAU;CACzD,MAAM,MAAM,SAAS,SAAS,MAAM,QAAQ,CAAC,CAC1C,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;EACb,MAAM,KAAK,OAAO,IAAI;CACxB,CAAC;CACH,MAAM,KAAK,IAAI,MAAM,GAAG;AAC1B;AAEA,eAAe,SAAS,SAAyB,MAAc,UAAiC;CAC9F,IAAI,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,KAAK,MAAM,MAAM;CAClE,MAAM,SAAS,WAAW;CAC1B,IAAI,CAAE,MAAM,QAAQ,OAAO,MAAM,GAAI;CACrC,MAAM,aAAa,MAAM,SAAS,QAAQ;CAC1C,IAAI,WAAW,UAAU,SAAS,UAAU,CAAE,MAAM,QAAQ,OAAO,MAAM,GAAI;CAC7E,MAAM,OAAO,kBAAkB,IAAI;CACnC,MAAM,QAAQ,MAAM,MAAM,UAAU;CAEpC,IAAI,CAAE,MAAM,QAAQ,OAAO,MAAM,GAAI,MAAM,QAAQ,OAAO,IAAI;AAChE;AAEA,eAAe,aAAgB,SAA6C;CAC1E,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAoB,YAAY;GAClC,QAAQ,iBAAiB;IACvB,QAAQ,SAAS;GACnB,GAAG,eAAe;EACpB,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF"}