@storyshelf/app 0.7.0 → 0.9.0-next-d2cc082

package/dist/routers/media.mjs

@@ -4,8 +4,9 @@ import.meta.url;
 import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
 import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
-import { BaselineModel, BuildModel, DesignCredentialModel, DesignNodeModel, SnapshotModel } from "@storyshelf/core/models";
-//#region src/routers/media.ts
+import { readComparisonImage, validFrozenReference } from "./comparison-image.mjs";
+import { BaselineModel, BuildModel, DesignCredentialModel, DesignNodeModel, SnapshotModel, baselineStatus } from "@storyshelf/core/models";
+// src/routers/media.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -50,10 +51,19 @@ function registerMedia(app) {
 		const snapshot = await findSnapshot(c.req.param("buildId"), c.req.param("snapshotId"), project.id);
 		const build = await new BuildModel(getStore().db).get(snapshot.buildId);
 		if (!build) notFound("Build not found");
+		if (c.req.query("reference") !== "default" && (snapshot.comparisonImagePath || snapshot.comparisonMetadata)) {
+			const frozen = validFrozenReference(snapshot, project.id, build.id);
+			if (!frozen) notFound("Original baseline is unavailable");
+			const image = await readComparisonImage(frozen.path, frozen.reference.imageSha256);
+			if (!image) notFound("Original baseline image is unavailable");
+			return imageResponse(image, "private, no-store");
+		}
 		const baselines = new BaselineModel(getStore().db, void 0, getStore().storage);
-		const baseline = await baselines.resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch, snapshot.browser);
+		const baseline = c.req.query("reference") === "default" ? await baselines.getFor(project.id, snapshot.storyId, snapshot.viewportName, project.gitDefaultBranch, snapshot.browser) : await baselines.resolve(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, project.gitDefaultBranch, snapshot.browser);
+		if (c.req.query("reference") === "default" && (baseline?.id !== c.req.query("id") || baseline?.updatedAt !== c.req.query("version"))) notFound("Default baseline changed; reload the comparison");
 		if (!baseline) notFound("No baseline for this snapshot");
-		return imageResponse(await baselines.read(baseline));
+		if (c.req.query("reference") !== "default" && snapshot.baselineVersion !== null && baselineStatus(snapshot, baseline) !== "current") notFound("Original baseline is no longer available");
+		return imageResponse(await baselines.read(baseline), "private, no-store");
 	});
 }
 async function findSnapshot(buildId, snapshotId, projectId) {
@@ -61,7 +71,6 @@ async function findSnapshot(buildId, snapshotId, projectId) {
 	if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) notFound("Snapshot not found");
 	return snapshot;
 }
-//#endregion
 export { registerMedia };
 
 //# sourceMappingURL=media.mjs.map

package/dist/routers/media.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"media.mjs","names":[],"sources":["../../src/routers/media.ts"],"sourcesContent":["import { BaselineModel, DesignCredentialModel, DesignNodeModel } from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Snapshot } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\nconst PNG = \"image/png\";\n\nfunction imageResponse(buffer: Buffer, cacheControl = \"private, max-age=3600\"): Response {\n  return new Response(new Uint8Array(buffer), {\n    headers: { \"content-type\": PNG, \"cache-control\": cacheControl },\n  });\n}\n\n/** Design renders are addressed by file version (`?v=`): immutable once the version matches the row. */\nconst RENDER_IMMUTABLE = \"private, max-age=31536000, immutable\";\n\n/** Register the PNG image, diff, and baseline media endpoints for snapshots. */\nexport function registerMedia(app: ShelfRouter): void {\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    return imageResponse(await getStore().storage.read(snapshot.screenshotPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    if (!snapshot.diffPath) {\n      notFound(\"No diff for this snapshot\");\n    }\n    return imageResponse(await getStore().storage.read(snapshot.diffPath));\n  });\n\n  // `:renderId` is the internal design_nodes row id (a ULID), not a provider node id.\n  app.get(\"/api/v1/projects/:slug/design/renders/:renderId\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const { db, config, storage, design } = getStore();\n    const credentials = new DesignCredentialModel(db, credentialKeys(config));\n    const nodes = new DesignNodeModel(db, credentials, design, { storage });\n    const found = await nodes.get(project.id, c.req.param(\"renderId\"));\n    // A render fetched with a member's own connection is theirs alone (it may show files others cannot open).\n    const node =\n      found && (found.viewerId === \"\" || found.viewerId === getStore().user?.id) ? found : null;\n    const png = node ? await nodes.readRender(node) : null;\n    if (!png) {\n      notFound(\"No design render\");\n    }\n    const versioned = node?.renderVersion && c.req.query(\"v\") === node.renderVersion;\n    return imageResponse(png, versioned ? RENDER_IMMUTABLE : undefined);\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    const build = await new BuildModel(getStore().db).get(snapshot.buildId);\n    if (!build) {\n      notFound(\"Build not found\");\n    }\n    const baselines = new BaselineModel(getStore().db, undefined, getStore().storage);\n    const baseline = await baselines.resolve(\n      project.id,\n      snapshot.storyId,\n      snapshot.viewportName,\n      build.gitBranch,\n      project.gitDefaultBranch,\n      snapshot.browser,\n    );\n    if (!baseline) {\n      notFound(\"No baseline for this snapshot\");\n    }\n    return imageResponse(await baselines.read(baseline));\n  });\n}\n\nasync function findSnapshot(\n  buildId: string,\n  snapshotId: string,\n  projectId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n"],"mappings":";;;;;;;;AASA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAEtF,MAAM,MAAM;AAEZ,SAAS,cAAc,QAAgB,eAAe,yBAAmC;CACvF,OAAO,IAAI,SAAS,IAAI,WAAW,MAAM,GAAG,EAC1C,SAAS;EAAE,gBAAgB;EAAK,iBAAiB;CAAa,EAChE,CAAC;AACH;;AAGA,MAAM,mBAAmB;;AAGzB,SAAgB,cAAc,KAAwB;CACpD,IAAI,IAAI,sEAAsE,OAAO,MAAM;EACzF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,cAAc,CAAC;CAC7E,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACxF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,IAAI,CAAC,SAAS,UACZ,SAAS,2BAA2B;EAEtC,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,QAAQ,CAAC;CACvE,CAAC;CAGD,IAAI,IAAI,mDAAmD,OAAO,MAAM;EACtE,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,EAAE,IAAI,QAAQ,SAAS,WAAW,SAAS;EACjD,MAAM,cAAc,IAAI,sBAAsB,IAAI,eAAe,MAAM,CAAC;EACxE,MAAM,QAAQ,IAAI,gBAAgB,IAAI,aAAa,QAAQ,EAAE,QAAQ,CAAC;EACtE,MAAM,QAAQ,MAAM,MAAM,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,UAAU,CAAC;EAEjE,MAAM,OACJ,UAAU,MAAM,aAAa,MAAM,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,MAAM,QAAQ;EACvF,MAAM,MAAM,OAAO,MAAM,MAAM,WAAW,IAAI,IAAI;EAClD,IAAI,CAAC,KACH,SAAS,kBAAkB;EAG7B,OAAO,cAAc,KADH,MAAM,iBAAiB,EAAE,IAAI,MAAM,GAAG,MAAM,KAAK,gBAC7B,mBAAmB,KAAA,CAAS;CACpE,CAAC;CAED,IAAI,IAAI,yEAAyE,OAAO,MAAM;EAC5F,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;EACtE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,OAAO;EAChF,MAAM,WAAW,MAAM,UAAU,QAC/B,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;EACA,IAAI,CAAC,UACH,SAAS,+BAA+B;EAE1C,OAAO,cAAc,MAAM,UAAU,KAAK,QAAQ,CAAC;CACrD,CAAC;AACH;AAEA,eAAe,aACb,SACA,YACA,WACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,WAAW,SAAS,cAAc,WACtE,SAAS,oBAAoB;CAE/B,OAAO;AACT"}
+{"version":3,"file":"media.mjs","names":[],"sources":["../../src/routers/media.ts"],"sourcesContent":["import {\n  BaselineModel,\n  DesignCredentialModel,\n  DesignNodeModel,\n  baselineStatus,\n} from \"@storyshelf/core/models\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { Snapshot } from \"@storyshelf/core/schema\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { readComparisonImage, validFrozenReference } from \"./comparison-image.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nconst VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n\nconst PNG = \"image/png\";\n\nfunction imageResponse(buffer: Buffer, cacheControl = \"private, max-age=3600\"): Response {\n  return new Response(new Uint8Array(buffer), {\n    headers: { \"content-type\": PNG, \"cache-control\": cacheControl },\n  });\n}\n\n/** Design renders are addressed by file version (`?v=`): immutable once the version matches the row. */\nconst RENDER_IMMUTABLE = \"private, max-age=31536000, immutable\";\n\n/** Register the PNG image, diff, and baseline media endpoints for snapshots. */\nexport function registerMedia(app: ShelfRouter): void {\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/image\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    return imageResponse(await getStore().storage.read(snapshot.screenshotPath));\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/diff\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    if (!snapshot.diffPath) {\n      notFound(\"No diff for this snapshot\");\n    }\n    return imageResponse(await getStore().storage.read(snapshot.diffPath));\n  });\n\n  // `:renderId` is the internal design_nodes row id (a ULID), not a provider node id.\n  app.get(\"/api/v1/projects/:slug/design/renders/:renderId\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const { db, config, storage, design } = getStore();\n    const credentials = new DesignCredentialModel(db, credentialKeys(config));\n    const nodes = new DesignNodeModel(db, credentials, design, { storage });\n    const found = await nodes.get(project.id, c.req.param(\"renderId\"));\n    // A render fetched with a member's own connection is theirs alone (it may show files others cannot open).\n    const node =\n      found && (found.viewerId === \"\" || found.viewerId === getStore().user?.id) ? found : null;\n    const png = node ? await nodes.readRender(node) : null;\n    if (!png) {\n      notFound(\"No design render\");\n    }\n    const versioned = node?.renderVersion && c.req.query(\"v\") === node.renderVersion;\n    return imageResponse(png, versioned ? RENDER_IMMUTABLE : undefined);\n  });\n\n  app.get(\"/api/v1/projects/:slug/builds/:buildId/snapshots/:snapshotId/baseline\", async (c) => {\n    const project = await resolveAuthorizedProject(c, c.req.param(\"slug\"), ...VIEW_ROLES);\n    const snapshot = await findSnapshot(\n      c.req.param(\"buildId\"),\n      c.req.param(\"snapshotId\"),\n      project.id,\n    );\n    const build = await new BuildModel(getStore().db).get(snapshot.buildId);\n    if (!build) {\n      notFound(\"Build not found\");\n    }\n    if (\n      c.req.query(\"reference\") !== \"default\" &&\n      (snapshot.comparisonImagePath || snapshot.comparisonMetadata)\n    ) {\n      const frozen = validFrozenReference(snapshot, project.id, build.id);\n      if (!frozen) {\n        notFound(\"Original baseline is unavailable\");\n      }\n      const image = await readComparisonImage(frozen.path, frozen.reference.imageSha256);\n      if (!image) {\n        notFound(\"Original baseline image is unavailable\");\n      }\n      return imageResponse(image, \"private, no-store\");\n    }\n    const baselines = new BaselineModel(getStore().db, undefined, getStore().storage);\n    const baseline =\n      c.req.query(\"reference\") === \"default\"\n        ? await baselines.getFor(\n            project.id,\n            snapshot.storyId,\n            snapshot.viewportName,\n            project.gitDefaultBranch,\n            snapshot.browser,\n          )\n        : await baselines.resolve(\n            project.id,\n            snapshot.storyId,\n            snapshot.viewportName,\n            build.gitBranch,\n            project.gitDefaultBranch,\n            snapshot.browser,\n          );\n    if (\n      c.req.query(\"reference\") === \"default\" &&\n      (baseline?.id !== c.req.query(\"id\") || baseline?.updatedAt !== c.req.query(\"version\"))\n    ) {\n      notFound(\"Default baseline changed; reload the comparison\");\n    }\n    if (!baseline) {\n      notFound(\"No baseline for this snapshot\");\n    }\n    if (\n      c.req.query(\"reference\") !== \"default\" &&\n      snapshot.baselineVersion !== null &&\n      baselineStatus(snapshot, baseline) !== \"current\"\n    ) {\n      notFound(\"Original baseline is no longer available\");\n    }\n    return imageResponse(await baselines.read(baseline), \"private, no-store\");\n  });\n}\n\nasync function findSnapshot(\n  buildId: string,\n  snapshotId: string,\n  projectId: string,\n): Promise<Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== buildId || snapshot.projectId !== projectId) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n"],"mappings":";;;;;;;;;AAeA,MAAM,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;AAEtF,MAAM,MAAM;AAEZ,SAAS,cAAc,QAAgB,eAAe,yBAAmC;CACvF,OAAO,IAAI,SAAS,IAAI,WAAW,MAAM,GAAG,EAC1C,SAAS;EAAE,gBAAgB;EAAK,iBAAiB;CAAa,EAChE,CAAC;AACH;;AAGA,MAAM,mBAAmB;;AAGzB,SAAgB,cAAc,KAAwB;CACpD,IAAI,IAAI,sEAAsE,OAAO,MAAM;EACzF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,cAAc,CAAC;CAC7E,CAAC;CAED,IAAI,IAAI,qEAAqE,OAAO,MAAM;EACxF,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,IAAI,CAAC,SAAS,UACZ,SAAS,2BAA2B;EAEtC,OAAO,cAAc,MAAM,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,QAAQ,CAAC;CACvE,CAAC;CAGD,IAAI,IAAI,mDAAmD,OAAO,MAAM;EACtE,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,EAAE,IAAI,QAAQ,SAAS,WAAW,SAAS;EACjD,MAAM,cAAc,IAAI,sBAAsB,IAAI,eAAe,MAAM,CAAC;EACxE,MAAM,QAAQ,IAAI,gBAAgB,IAAI,aAAa,QAAQ,EAAE,QAAQ,CAAC;EACtE,MAAM,QAAQ,MAAM,MAAM,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,UAAU,CAAC;EAEjE,MAAM,OACJ,UAAU,MAAM,aAAa,MAAM,MAAM,aAAa,SAAS,CAAC,CAAC,MAAM,MAAM,QAAQ;EACvF,MAAM,MAAM,OAAO,MAAM,MAAM,WAAW,IAAI,IAAI;EAClD,IAAI,CAAC,KACH,SAAS,kBAAkB;EAG7B,OAAO,cAAc,KADH,MAAM,iBAAiB,EAAE,IAAI,MAAM,GAAG,MAAM,KAAK,gBAC7B,mBAAmB,KAAA,CAAS;CACpE,CAAC;CAED,IAAI,IAAI,yEAAyE,OAAO,MAAM;EAC5F,MAAM,UAAU,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,GAAG,GAAG,UAAU;EACpF,MAAM,WAAW,MAAM,aACrB,EAAE,IAAI,MAAM,SAAS,GACrB,EAAE,IAAI,MAAM,YAAY,GACxB,QAAQ,EACV;EACA,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;EACtE,IAAI,CAAC,OACH,SAAS,iBAAiB;EAE5B,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,cAC5B,SAAS,uBAAuB,SAAS,qBAC1C;GACA,MAAM,SAAS,qBAAqB,UAAU,QAAQ,IAAI,MAAM,EAAE;GAClE,IAAI,CAAC,QACH,SAAS,kCAAkC;GAE7C,MAAM,QAAQ,MAAM,oBAAoB,OAAO,MAAM,OAAO,UAAU,WAAW;GACjF,IAAI,CAAC,OACH,SAAS,wCAAwC;GAEnD,OAAO,cAAc,OAAO,mBAAmB;EACjD;EACA,MAAM,YAAY,IAAI,cAAc,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,SAAS,CAAC,CAAC,OAAO;EAChF,MAAM,WACJ,EAAE,IAAI,MAAM,WAAW,MAAM,YACzB,MAAM,UAAU,OACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,QAAQ,kBACR,SAAS,OACX,IACA,MAAM,UAAU,QACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,QAAQ,kBACR,SAAS,OACX;EACN,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,cAC5B,UAAU,OAAO,EAAE,IAAI,MAAM,IAAI,KAAK,UAAU,cAAc,EAAE,IAAI,MAAM,SAAS,IAEpF,SAAS,iDAAiD;EAE5D,IAAI,CAAC,UACH,SAAS,+BAA+B;EAE1C,IACE,EAAE,IAAI,MAAM,WAAW,MAAM,aAC7B,SAAS,oBAAoB,QAC7B,eAAe,UAAU,QAAQ,MAAM,WAEvC,SAAS,0CAA0C;EAErD,OAAO,cAAc,MAAM,UAAU,KAAK,QAAQ,GAAG,mBAAmB;CAC1E,CAAC;AACH;AAEA,eAAe,aACb,SACA,YACA,WACmB;CACnB,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,WAAW,SAAS,cAAc,WACtE,SAAS,oBAAoB;CAE/B,OAAO;AACT"}

package/dist/routers/members.mjs

@@ -7,7 +7,7 @@ import { groupMappingCreateSchema, groupMappingSchema, memberRoleSchema, memberS
 import { createRoute, z } from "@hono/zod-openapi";
 import { MemberModel, ProjectGroupMappingModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/members.ts
+// src/routers/members.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -172,7 +172,6 @@ function registerGroupMappingRoutes(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerMembers };
 
 //# sourceMappingURL=members.mjs.map

package/dist/routers/notification-channels.mjs

@@ -7,7 +7,7 @@ import { notFound as notFound$1, notificationChannelCreateSchema, notificationCh
 import { notificationChannelModel } from "./scoped-models.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { NotificationChannelModel } from "@storyshelf/core/models";
-//#region src/routers/notification-channels.ts
+// src/routers/notification-channels.ts
 const ADMIN_ROLES = ["admin"];
 /** Public channel view (secret redacted, config/events decoded). */
 function toPublic(row) {
@@ -178,7 +178,6 @@ function registerSystemChannels(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerNotificationChannels, registerSystemChannels };
 
 //# sourceMappingURL=notification-channels.mjs.map

package/dist/routers/notification-subscriptions.mjs

@@ -6,7 +6,7 @@ import { resolveAuthorizedProject, unauthorized } from "./helpers.mjs";
 import { notFound, notificationSubscriptionPutSchema, notificationSubscriptionSchema, unauthorized as unauthorized$1 } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { NotificationSubscriptionModel } from "@storyshelf/core/models";
-//#region src/routers/notification-subscriptions.ts
+// src/routers/notification-subscriptions.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -114,7 +114,6 @@ function registerNotificationSubscriptions(app) {
 		return c.json(rows.map((row) => toPublic(row)));
 	});
 }
-//#endregion
 export { registerNotificationSubscriptions };
 
 //# sourceMappingURL=notification-subscriptions.mjs.map

package/dist/routers/oauth-state.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { timingSafeEqualString } from "@storyshelf/core/utils";
 import { createHmac, randomBytes } from "node:crypto";
-//#region src/routers/oauth-state.ts
+// src/routers/oauth-state.ts
 /** Signed, expiring OAuth `state` for "connect your account" flows (binds user, service and browser). */
 /** State lifetime: long enough to sign in at the service, short enough to limit replay. */
 const STATE_TTL_MS = 6e5;
@@ -39,7 +39,6 @@ function safeReturnPath(value, fallback) {
 function mac(secret, payload) {
 	return createHmac("sha256", secret).update(`oauth-connect:${payload}`).digest("base64url");
 }
-//#endregion
 export { safeReturnPath, signState, verifyState };
 
 //# sourceMappingURL=oauth-state.mjs.map

package/dist/routers/preview-base.mjs

@@ -6,7 +6,7 @@ import { getStore, testingEnabled } from "../store.mjs";
 import { isAnonymouslyViewable, publishedAccess } from "./published-access.mjs";
 import { STORYBOOK_TOKEN_PREFIX, signStorybookToken } from "@storyshelf/core/utils";
 import { createUrlBuilder } from "@storyshelf/core/urls";
-//#region src/routers/preview-base.ts
+// src/routers/preview-base.ts
 /** Lifetime of the token in a page: long enough to open the frame, short enough to be harmless. */
 const PREVIEW_TOKEN_TTL = 3600;
 /**
@@ -32,7 +32,6 @@ async function previewBaseOf(project, build) {
 	});
 	return `${STORYBOOK_TOKEN_PREFIX}${token}`;
 }
-//#endregion
 export { PREVIEW_TOKEN_REFRESH, PREVIEW_TOKEN_TTL, isSignedPreviewBase, previewBaseOf };
 
 //# sourceMappingURL=preview-base.mjs.map

package/dist/routers/preview-token.mjs

@@ -6,7 +6,7 @@ import { isSignedPreviewBase, previewBaseOf } from "./preview-base.mjs";
 import { SIGNED_URL_HEADERS } from "./published-files.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { BuildModel, ProjectModel } from "@storyshelf/core/models";
-//#region src/routers/preview-token.ts
+// src/routers/preview-token.ts
 /**
 * `GET /api/v1/projects/:slug/builds/:buildId/preview-token`: a fresh root for a component page's preview frame
 * (ADR 0006, decision 9). A frame holding a signed `/_s/<token>` URL (ADR 0007, decision 5) outlives
@@ -45,7 +45,6 @@ function registerPreviewToken(app) {
 		return c.json({ base }, 200, SIGNED_URL_HEADERS);
 	});
 }
-//#endregion
 export { registerPreviewToken };
 
 //# sourceMappingURL=preview-token.mjs.map

package/dist/routers/profile.mjs

@@ -11,7 +11,7 @@ import { NotificationSubscriptionModel, ProjectModel, UserModel } from "@storysh
 import { SESSION_COOKIE } from "@storyshelf/core/types";
 import { MIN_PASSWORD_LENGTH, unsignedToken } from "@storyshelf/core/auth";
 import { eq, getTableColumns } from "@storyshelf/core/orm";
-//#region src/routers/profile.ts
+// src/routers/profile.ts
 function field(form, name) {
 	const raw = form.get(name);
 	return typeof raw === "string" ? raw : "";
@@ -272,7 +272,6 @@ function readPasswordChange(form) {
 		next
 	};
 }
-//#endregion
 export { registerProfile };
 
 //# sourceMappingURL=profile.mjs.map

package/dist/routers/projects.mjs

@@ -11,7 +11,7 @@ import { createRoute, z } from "@hono/zod-openapi";
 import { resolveBrowsers } from "@storyshelf/core/capture";
 import { LabelModel, MemberModel, ProjectModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/projects.ts
+// src/routers/projects.ts
 const VIEW_ROLES = [
 	"viewer",
 	"developer",
@@ -143,7 +143,6 @@ function registerProjects(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerProjects };
 
 //# sourceMappingURL=projects.mjs.map

package/dist/routers/publish-upload.mjs

@@ -4,10 +4,10 @@ import.meta.url;
 import { getStore } from "../store.mjs";
 import { DEFAULT_SCRATCH_DIR } from "@storyshelf/core/config";
 import { storybookZipPath } from "@storyshelf/core/utils";
-import { FILE_BY_FILE_HINT, extractionLimitsOf, publishRoute, publishStoredZip, resolvePublishLimits } from "@storyshelf/core/capture";
+import { FILE_BY_FILE_HINT, ZipInvalidError, ZipLimitError, extractionLimitsOf, publishRoute, publishStoredZip, resolvePublishLimits } from "@storyshelf/core/capture";
 import { BuildModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/publish-upload.ts
+// src/routers/publish-upload.ts
 /**
 * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it
 * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a
@@ -61,18 +61,25 @@ async function publishInline(build) {
 		logger.info({ buildId: build.id }, "upload statics persisted inline");
 		await publish?.completer.complete(build.id, { ok: true });
 	} catch (error) {
-		const message = error instanceof Error ? error.message : String(error);
-		logger.error({
-			err: error,
-			buildId: build.id
-		}, "inline publish failed");
-		await publish?.completer.complete(build.id, {
-			ok: false,
-			error: message
-		});
+		if (error instanceof ZipInvalidError || error instanceof ZipLimitError) {
+			await discardZip(build.projectId, build.id);
+			throw new HTTPException(422, { message: error.message });
+		}
+		await failInlinePublish(build, error);
 	}
 }
-//#endregion
+async function failInlinePublish(build, error) {
+	const { logger, publish } = getStore();
+	const message = error instanceof Error ? error.message : String(error);
+	logger.error({
+		err: error,
+		buildId: build.id
+	}, "inline publish failed");
+	await publish?.completer.complete(build.id, {
+		ok: false,
+		error: message
+	});
+}
 export { discardZip, planUpload, publishUpload };
 
 //# sourceMappingURL=publish-upload.mjs.map

package/dist/routers/publish-upload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"publish-upload.mjs","names":[],"sources":["../../src/routers/publish-upload.ts"],"sourcesContent":["/**\n * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it\n * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a\n * pointer to the file-by-file route on a host that runs no consumer.\n */\nimport {\n  extractionLimitsOf,\n  FILE_BY_FILE_HINT,\n  publishRoute,\n  publishStoredZip,\n  resolvePublishLimits,\n} from \"@storyshelf/core/capture\";\nimport { DEFAULT_SCRATCH_DIR } from \"@storyshelf/core/config\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */\nexport function planUpload(zipBytes: number): \"inline\" | \"job\" {\n  const { config, publish } = getStore();\n  const route = publishRoute(zipBytes, resolvePublishLimits(config));\n  if (route === \"job\" && !publish?.enqueuePublish) {\n    throw new HTTPException(413, { message: FILE_BY_FILE_HINT });\n  }\n  return route;\n}\n\n/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */\nexport async function discardZip(projectId: string, buildId: string): Promise<void> {\n  try {\n    await getStore().storage.delete(storybookZipPath(projectId, buildId));\n  } catch (error) {\n    getStore().logger.warn({ err: error, buildId }, \"could not remove a refused zip\");\n  }\n}\n\n/**\n * Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a\n * failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.\n * Resolves to the build as it stands afterwards.\n */\nexport async function publishUpload(\n  route: \"inline\" | \"job\",\n  build: Build,\n  reqId: string | undefined,\n): Promise<Build> {\n  const { publish } = getStore();\n  if (route === \"job\") {\n    await publish?.enqueuePublish?.(build.id, reqId);\n    return build;\n  }\n  await publishInline(build);\n  return (await new BuildModel(getStore().db).get(build.id)) ?? build;\n}\n\nasync function publishInline(build: Build): Promise<void> {\n  const { storage, config, logger, publish, db } = getStore();\n  try {\n    await publishStoredZip(\n      {\n        storage,\n        scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,\n        limits: extractionLimitsOf(resolvePublishLimits(config)),\n        db,\n        logger,\n      },\n      { projectId: build.projectId, buildId: build.id },\n    );\n    logger.info({ buildId: build.id }, \"upload statics persisted inline\");\n    await publish?.completer.complete(build.id, { ok: true });\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    logger.error({ err: error, buildId: build.id }, \"inline publish failed\");\n    await publish?.completer.complete(build.id, { ok: false, error: message });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,SAAgB,WAAW,UAAoC;CAC7D,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,QAAQ,aAAa,UAAU,qBAAqB,MAAM,CAAC;CACjE,IAAI,UAAU,SAAS,CAAC,SAAS,gBAC/B,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kBAAkB,CAAC;CAE7D,OAAO;AACT;;AAGA,eAAsB,WAAW,WAAmB,SAAgC;CAClF,IAAI;EACF,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,iBAAiB,WAAW,OAAO,CAAC;CACtE,SAAS,OAAO;EACd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO;EAAQ,GAAG,gCAAgC;CAClF;AACF;;;;;;AAOA,eAAsB,cACpB,OACA,OACA,OACgB;CAChB,MAAM,EAAE,YAAY,SAAS;CAC7B,IAAI,UAAU,OAAO;EACnB,MAAM,SAAS,iBAAiB,MAAM,IAAI,KAAK;EAC/C,OAAO;CACT;CACA,MAAM,cAAc,KAAK;CACzB,OAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,KAAM;AAChE;AAEA,eAAe,cAAc,OAA6B;CACxD,MAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,OAAO,SAAS;CAC1D,IAAI;EACF,MAAM,iBACJ;GACE;GACA,YAAY,OAAO,cAAc;GACjC,QAAQ,mBAAmB,qBAAqB,MAAM,CAAC;GACvD;GACA;EACF,GACA;GAAE,WAAW,MAAM;GAAW,SAAS,MAAM;EAAG,CAClD;EACA,OAAO,KAAK,EAAE,SAAS,MAAM,GAAG,GAAG,iCAAiC;EACpE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;CAC1D,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO,MAAM;GAAE,KAAK;GAAO,SAAS,MAAM;EAAG,GAAG,uBAAuB;EACvE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;GAAE,IAAI;GAAO,OAAO;EAAQ,CAAC;CAC3E;AACF"}
+{"version":3,"file":"publish-upload.mjs","names":[],"sources":["../../src/routers/publish-upload.ts"],"sourcesContent":["/**\n * What the zip upload route does once the zip is stored (ADR 0006, decision 10): extract it\n * inline when it is small, hand it to a `publish` job when it is larger, or refuse it with a\n * pointer to the file-by-file route on a host that runs no consumer.\n */\nimport {\n  extractionLimitsOf,\n  FILE_BY_FILE_HINT,\n  publishRoute,\n  publishStoredZip,\n  resolvePublishLimits,\n  ZipInvalidError,\n  ZipLimitError,\n} from \"@storyshelf/core/capture\";\nimport { DEFAULT_SCRATCH_DIR } from \"@storyshelf/core/config\";\nimport { BuildModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport { storybookZipPath } from \"@storyshelf/core/utils\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { getStore } from \"../store.ts\";\n\n/** How an upload of `zipBytes` will be published, or a 413 when this host cannot publish it. */\nexport function planUpload(zipBytes: number): \"inline\" | \"job\" {\n  const { config, publish } = getStore();\n  const route = publishRoute(zipBytes, resolvePublishLimits(config));\n  if (route === \"job\" && !publish?.enqueuePublish) {\n    throw new HTTPException(413, { message: FILE_BY_FILE_HINT });\n  }\n  return route;\n}\n\n/** Remove a stored zip that was refused (best effort), so no orphan is left behind. */\nexport async function discardZip(projectId: string, buildId: string): Promise<void> {\n  try {\n    await getStore().storage.delete(storybookZipPath(projectId, buildId));\n  } catch (error) {\n    getStore().logger.warn({ err: error, buildId }, \"could not remove a refused zip\");\n  }\n}\n\n/**\n * Publish the stored zip of `build` per `route`. Inline: extract now and complete the build (a\n * failure fails it, or, with a capture to come, is left for capture to backfill). Job: queue it.\n * Resolves to the build as it stands afterwards.\n */\nexport async function publishUpload(\n  route: \"inline\" | \"job\",\n  build: Build,\n  reqId: string | undefined,\n): Promise<Build> {\n  const { publish } = getStore();\n  if (route === \"job\") {\n    await publish?.enqueuePublish?.(build.id, reqId);\n    return build;\n  }\n  await publishInline(build);\n  return (await new BuildModel(getStore().db).get(build.id)) ?? build;\n}\n\nasync function publishInline(build: Build): Promise<void> {\n  const { storage, config, logger, publish, db } = getStore();\n  try {\n    await publishStoredZip(\n      {\n        storage,\n        scratchDir: config.scratchDir ?? DEFAULT_SCRATCH_DIR,\n        limits: extractionLimitsOf(resolvePublishLimits(config)),\n        db,\n        logger,\n      },\n      { projectId: build.projectId, buildId: build.id },\n    );\n    logger.info({ buildId: build.id }, \"upload statics persisted inline\");\n    await publish?.completer.complete(build.id, { ok: true });\n  } catch (error) {\n    if (error instanceof ZipInvalidError || error instanceof ZipLimitError) {\n      await discardZip(build.projectId, build.id);\n      throw new HTTPException(422, { message: error.message });\n    }\n    await failInlinePublish(build, error);\n  }\n}\n\nasync function failInlinePublish(build: Build, error: unknown): Promise<void> {\n  const { logger, publish } = getStore();\n  const message = error instanceof Error ? error.message : String(error);\n  logger.error({ err: error, buildId: build.id }, \"inline publish failed\");\n  await publish?.completer.complete(build.id, { ok: false, error: message });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAsBA,SAAgB,WAAW,UAAoC;CAC7D,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,QAAQ,aAAa,UAAU,qBAAqB,MAAM,CAAC;CACjE,IAAI,UAAU,SAAS,CAAC,SAAS,gBAC/B,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,kBAAkB,CAAC;CAE7D,OAAO;AACT;;AAGA,eAAsB,WAAW,WAAmB,SAAgC;CAClF,IAAI;EACF,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,iBAAiB,WAAW,OAAO,CAAC;CACtE,SAAS,OAAO;EACd,SAAS,CAAC,CAAC,OAAO,KAAK;GAAE,KAAK;GAAO;EAAQ,GAAG,gCAAgC;CAClF;AACF;;;;;;AAOA,eAAsB,cACpB,OACA,OACA,OACgB;CAChB,MAAM,EAAE,YAAY,SAAS;CAC7B,IAAI,UAAU,OAAO;EACnB,MAAM,SAAS,iBAAiB,MAAM,IAAI,KAAK;EAC/C,OAAO;CACT;CACA,MAAM,cAAc,KAAK;CACzB,OAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,KAAM;AAChE;AAEA,eAAe,cAAc,OAA6B;CACxD,MAAM,EAAE,SAAS,QAAQ,QAAQ,SAAS,OAAO,SAAS;CAC1D,IAAI;EACF,MAAM,iBACJ;GACE;GACA,YAAY,OAAO,cAAc;GACjC,QAAQ,mBAAmB,qBAAqB,MAAM,CAAC;GACvD;GACA;EACF,GACA;GAAE,WAAW,MAAM;GAAW,SAAS,MAAM;EAAG,CAClD;EACA,OAAO,KAAK,EAAE,SAAS,MAAM,GAAG,GAAG,iCAAiC;EACpE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC;CAC1D,SAAS,OAAO;EACd,IAAI,iBAAiB,mBAAmB,iBAAiB,eAAe;GACtE,MAAM,WAAW,MAAM,WAAW,MAAM,EAAE;GAC1C,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,MAAM,QAAQ,CAAC;EACzD;EACA,MAAM,kBAAkB,OAAO,KAAK;CACtC;AACF;AAEA,eAAe,kBAAkB,OAAc,OAA+B;CAC5E,MAAM,EAAE,QAAQ,YAAY,SAAS;CACrC,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,OAAO,MAAM;EAAE,KAAK;EAAO,SAAS,MAAM;CAAG,GAAG,uBAAuB;CACvE,MAAM,SAAS,UAAU,SAAS,MAAM,IAAI;EAAE,IAAI;EAAO,OAAO;CAAQ,CAAC;AAC3E"}

package/dist/routers/published-access.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { getStore } from "../store.mjs";
 import { currentProjectRole } from "./helpers.mjs";
 import { isPublicBuild } from "@storyshelf/core/models";
-//#region src/routers/published-access.ts
+// src/routers/published-access.ts
 /**
 * The one policy for reading a build's published files (ADR 0007, decision 5; ADR 0011): a signed
 * token naming the build, or a build anyone may open (public, or an instance without sign-in), or
@@ -46,7 +46,6 @@ function isAnonymouslyViewable(build, project) {
 function publishedCorsHeaders(access) {
 	return access === "session" ? {} : { "access-control-allow-origin": "*" };
 }
-//#endregion
 export { isAnonymouslyViewable, publishedAccess, publishedCorsHeaders };
 
 //# sourceMappingURL=published-access.mjs.map

package/dist/routers/published-compression.mjs

@@ -0,0 +1,109 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { publishedGzipPath } from "@storyshelf/core/utils";
+import { createHash } from "node:crypto";
+import { promisify } from "node:util";
+import { gunzip, gzip } from "node:zlib";
+// src/routers/published-compression.ts
+const compress = promisify(gzip);
+const decompress = promisify(gunzip);
+const MAX_FILE_BYTES = 8388608;
+const MAX_JOBS = 2;
+const MAX_READS = 4;
+const READ_TIMEOUT_MS = 250;
+const states = /* @__PURE__ */ new WeakMap();
+/** Gzip is chosen only if explicitly accepted, or by a nonzero wildcard. */
+function acceptsGzip(header) {
+	if (!header) return false;
+	const entries = header.split(",").map((part) => part.trim().split(";"));
+	const entry = entries.find(([name]) => name?.trim().toLowerCase() === "gzip") ?? entries.find(([name]) => name?.trim() === "*");
+	if (!entry) return false;
+	const quality = entry.slice(1).find((part) => /^\s*q\s*=/iu.test(part));
+	if (quality === void 0) return true;
+	const value = Number(quality.split("=")[1]);
+	return Number.isFinite(value) && value > 0 && value <= 1;
+}
+/** Return a verified existing variant, or the original while a bounded background job runs. */
+async function publishedGzip(storage, hash, original, mime) {
+	if (typeof hash !== "string" || !eligible(hash, original, mime)) return void 0;
+	const state = stateOf(storage);
+	if (state.reads >= MAX_READS) return void 0;
+	state.reads += 1;
+	const found = await withDeadline(findVariant(storage, hash, original).finally(() => {
+		state.reads -= 1;
+	}));
+	if (found === "timeout") return void 0;
+	if (found) return found;
+	schedule(storage, state, hash, original);
+}
+function eligible(hash, original, mime) {
+	return typeof hash === "string" && /^[a-f0-9]{64}$/u.test(hash) && original.length > 0 && original.length <= MAX_FILE_BYTES && /^(?:text\/|application\/(?:javascript|json|xml|wasm)|image\/svg\+xml)/iu.test(mime);
+}
+function stateOf(storage) {
+	let state = states.get(storage);
+	if (!state) {
+		state = {
+			jobs: /* @__PURE__ */ new Map(),
+			reads: 0
+		};
+		states.set(storage, state);
+	}
+	return state;
+}
+async function findVariant(storage, hash, original) {
+	try {
+		const path = publishedGzipPath(hash);
+		if (!await storage.exists(path)) return void 0;
+		const bytes = await readBounded(storage, path, original.length);
+		if (!bytes || bytes.length === 0) return void 0;
+		return (await decompress(bytes, { maxOutputLength: original.length })).equals(original) ? bytes : void 0;
+	} catch {
+		return;
+	}
+}
+/** Do not allocate an unbounded buffer when a damaged storage object is oversized. */
+async function readBounded(storage, path, limit) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of await storage.readStream(path)) {
+		const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		size += bytes.length;
+		if (size >= limit) return;
+		chunks.push(bytes);
+	}
+	return Buffer.concat(chunks, size);
+}
+/** No queue: at capacity a future request may try again. */
+function schedule(storage, state, hash, original) {
+	if (state.jobs.has(hash) || state.jobs.size >= MAX_JOBS) return;
+	const job = generate(storage, hash, original).catch(() => {}).finally(() => {
+		state.jobs.delete(hash);
+	});
+	state.jobs.set(hash, job);
+}
+async function generate(storage, hash, original) {
+	if (createHash("sha256").update(original).digest("hex") !== hash) return;
+	const source = `content/${hash}`;
+	if (!await storage.exists(source)) return;
+	const compressed = await compress(original);
+	if (compressed.length >= original.length || !await storage.exists(source)) return;
+	const path = publishedGzipPath(hash);
+	await storage.write(path, compressed);
+	if (!await storage.exists(source)) await storage.delete(path);
+}
+async function withDeadline(promise) {
+	let timer;
+	try {
+		return await Promise.race([promise, new Promise((resolve) => {
+			timer = setTimeout(() => {
+				resolve("timeout");
+			}, READ_TIMEOUT_MS);
+		})]);
+	} finally {
+		if (timer) clearTimeout(timer);
+	}
+}
+export { acceptsGzip, publishedGzip };
+
+//# sourceMappingURL=published-compression.mjs.map

package/dist/routers/published-compression.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"published-compression.mjs","names":[],"sources":["../../src/routers/published-compression.ts"],"sourcesContent":["/** Disposable, content-addressed gzip variants of authorized published files. */\nimport type { StorageAdapter } from \"@storyshelf/core/adapter/storage\";\nimport { publishedGzipPath } from \"@storyshelf/core/utils\";\nimport { createHash } from \"node:crypto\";\nimport { promisify } from \"node:util\";\nimport { gunzip, gzip } from \"node:zlib\";\n\nconst compress = promisify(gzip);\nconst decompress = promisify(gunzip);\nconst MAX_FILE_BYTES = 8 * 1024 * 1024;\nconst MAX_JOBS = 2;\nconst MAX_READS = 4;\nconst READ_TIMEOUT_MS = 250;\nconst states = new WeakMap<StorageAdapter, State>();\n\ninterface State {\n  jobs: Map<string, Promise<void>>;\n  reads: number;\n}\n\n/** Gzip is chosen only if explicitly accepted, or by a nonzero wildcard. */\nexport function acceptsGzip(header?: string): boolean {\n  if (!header) return false;\n  const entries = header.split(\",\").map((part) => part.trim().split(\";\"));\n  const entry =\n    entries.find(([name]) => name?.trim().toLowerCase() === \"gzip\") ??\n    entries.find(([name]) => name?.trim() === \"*\");\n  if (!entry) return false;\n  const quality = entry.slice(1).find((part) => /^\\s*q\\s*=/iu.test(part));\n  if (quality === undefined) return true;\n  const value = Number(quality.split(\"=\")[1]);\n  return Number.isFinite(value) && value > 0 && value <= 1;\n}\n\n/** Return a verified existing variant, or the original while a bounded background job runs. */\nexport async function publishedGzip(\n  storage: StorageAdapter,\n  hash: string | undefined,\n  original: Buffer,\n  mime: string,\n): Promise<Buffer | undefined> {\n  if (typeof hash !== \"string\" || !eligible(hash, original, mime)) return undefined;\n  const state = stateOf(storage);\n  if (state.reads >= MAX_READS) return undefined;\n  state.reads += 1;\n  const read = findVariant(storage, hash, original).finally(() => {\n    state.reads -= 1;\n  });\n  const found = await withDeadline(read);\n  if (found === \"timeout\") return undefined;\n  if (found) return found;\n  schedule(storage, state, hash, original);\n  return undefined;\n}\n\nfunction eligible(hash: string | undefined, original: Buffer, mime: string): boolean {\n  return (\n    typeof hash === \"string\" &&\n    /^[a-f0-9]{64}$/u.test(hash) &&\n    original.length > 0 &&\n    original.length <= MAX_FILE_BYTES &&\n    /^(?:text\\/|application\\/(?:javascript|json|xml|wasm)|image\\/svg\\+xml)/iu.test(mime)\n  );\n}\n\nfunction stateOf(storage: StorageAdapter): State {\n  let state = states.get(storage);\n  if (!state) {\n    state = { jobs: new Map(), reads: 0 };\n    states.set(storage, state);\n  }\n  return state;\n}\n\nasync function findVariant(\n  storage: StorageAdapter,\n  hash: string,\n  original: Buffer,\n): Promise<Buffer | undefined> {\n  try {\n    const path = publishedGzipPath(hash);\n    if (!(await storage.exists(path))) return undefined;\n    const bytes = await readBounded(storage, path, original.length);\n    if (!bytes || bytes.length === 0) return undefined;\n    const decoded = await decompress(bytes, { maxOutputLength: original.length });\n    return decoded.equals(original) ? bytes : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/** Do not allocate an unbounded buffer when a damaged storage object is oversized. */\nasync function readBounded(\n  storage: StorageAdapter,\n  path: string,\n  limit: number,\n): Promise<Buffer | undefined> {\n  const chunks: Buffer[] = [];\n  let size = 0;\n  for await (const chunk of await storage.readStream(path)) {\n    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk as Uint8Array);\n    size += bytes.length;\n    if (size >= limit) {\n      return undefined;\n    }\n    chunks.push(bytes);\n  }\n  return Buffer.concat(chunks, size);\n}\n\n/** No queue: at capacity a future request may try again. */\nfunction schedule(storage: StorageAdapter, state: State, hash: string, original: Buffer): void {\n  if (state.jobs.has(hash) || state.jobs.size >= MAX_JOBS) return;\n  const job = generate(storage, hash, original)\n    .catch(() => {})\n    .finally(() => {\n      state.jobs.delete(hash);\n    });\n  state.jobs.set(hash, job);\n}\n\nasync function generate(storage: StorageAdapter, hash: string, original: Buffer): Promise<void> {\n  if (createHash(\"sha256\").update(original).digest(\"hex\") !== hash) return;\n  const source = `content/${hash}`;\n  if (!(await storage.exists(source))) return;\n  const compressed = await compress(original);\n  if (compressed.length >= original.length || !(await storage.exists(source))) return;\n  const path = publishedGzipPath(hash);\n  await storage.write(path, compressed);\n  // A purge can remove the original while compression is in flight.\n  if (!(await storage.exists(source))) await storage.delete(path);\n}\n\nasync function withDeadline<T>(promise: Promise<T>): Promise<T | \"timeout\"> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      promise,\n      new Promise<\"timeout\">((resolve) => {\n        timer = setTimeout(() => {\n          resolve(\"timeout\");\n        }, READ_TIMEOUT_MS);\n      }),\n    ]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,WAAW,UAAU,IAAI;AAC/B,MAAM,aAAa,UAAU,MAAM;AACnC,MAAM,iBAAiB;AACvB,MAAM,WAAW;AACjB,MAAM,YAAY;AAClB,MAAM,kBAAkB;AACxB,MAAM,yBAAS,IAAI,QAA+B;;AAQlD,SAAgB,YAAY,QAA0B;CACpD,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,UAAU,OAAO,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;CACtE,MAAM,QACJ,QAAQ,MAAM,CAAC,UAAU,MAAM,KAAK,CAAC,CAAC,YAAY,MAAM,MAAM,KAC9D,QAAQ,MAAM,CAAC,UAAU,MAAM,KAAK,MAAM,GAAG;CAC/C,IAAI,CAAC,OAAO,OAAO;CACnB,MAAM,UAAU,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,SAAS,cAAc,KAAK,IAAI,CAAC;CACtE,IAAI,YAAY,KAAA,GAAW,OAAO;CAClC,MAAM,QAAQ,OAAO,QAAQ,MAAM,GAAG,CAAC,CAAC,EAAE;CAC1C,OAAO,OAAO,SAAS,KAAK,KAAK,QAAQ,KAAK,SAAS;AACzD;;AAGA,eAAsB,cACpB,SACA,MACA,UACA,MAC6B;CAC7B,IAAI,OAAO,SAAS,YAAY,CAAC,SAAS,MAAM,UAAU,IAAI,GAAG,OAAO,KAAA;CACxE,MAAM,QAAQ,QAAQ,OAAO;CAC7B,IAAI,MAAM,SAAS,WAAW,OAAO,KAAA;CACrC,MAAM,SAAS;CAIf,MAAM,QAAQ,MAAM,aAHP,YAAY,SAAS,MAAM,QAAQ,CAAC,CAAC,cAAc;EAC9D,MAAM,SAAS;CACjB,CACoC,CAAC;CACrC,IAAI,UAAU,WAAW,OAAO,KAAA;CAChC,IAAI,OAAO,OAAO;CAClB,SAAS,SAAS,OAAO,MAAM,QAAQ;AAEzC;AAEA,SAAS,SAAS,MAA0B,UAAkB,MAAuB;CACnF,OACE,OAAO,SAAS,YAChB,kBAAkB,KAAK,IAAI,KAC3B,SAAS,SAAS,KAClB,SAAS,UAAU,kBACnB,0EAA0E,KAAK,IAAI;AAEvF;AAEA,SAAS,QAAQ,SAAgC;CAC/C,IAAI,QAAQ,OAAO,IAAI,OAAO;CAC9B,IAAI,CAAC,OAAO;EACV,QAAQ;GAAE,sBAAM,IAAI,IAAI;GAAG,OAAO;EAAE;EACpC,OAAO,IAAI,SAAS,KAAK;CAC3B;CACA,OAAO;AACT;AAEA,eAAe,YACb,SACA,MACA,UAC6B;CAC7B,IAAI;EACF,MAAM,OAAO,kBAAkB,IAAI;EACnC,IAAI,CAAE,MAAM,QAAQ,OAAO,IAAI,GAAI,OAAO,KAAA;EAC1C,MAAM,QAAQ,MAAM,YAAY,SAAS,MAAM,SAAS,MAAM;EAC9D,IAAI,CAAC,SAAS,MAAM,WAAW,GAAG,OAAO,KAAA;EAEzC,QAAO,MADe,WAAW,OAAO,EAAE,iBAAiB,SAAS,OAAO,CAAC,EAAA,CAC7D,OAAO,QAAQ,IAAI,QAAQ,KAAA;CAC5C,QAAQ;EACN;CACF;AACF;;AAGA,eAAe,YACb,SACA,MACA,OAC6B;CAC7B,MAAM,SAAmB,CAAC;CAC1B,IAAI,OAAO;CACX,WAAW,MAAM,SAAS,MAAM,QAAQ,WAAW,IAAI,GAAG;EACxD,MAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAmB;EAC9E,QAAQ,MAAM;EACd,IAAI,QAAQ,OACV;EAEF,OAAO,KAAK,KAAK;CACnB;CACA,OAAO,OAAO,OAAO,QAAQ,IAAI;AACnC;;AAGA,SAAS,SAAS,SAAyB,OAAc,MAAc,UAAwB;CAC7F,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,QAAQ,UAAU;CACzD,MAAM,MAAM,SAAS,SAAS,MAAM,QAAQ,CAAC,CAC1C,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;EACb,MAAM,KAAK,OAAO,IAAI;CACxB,CAAC;CACH,MAAM,KAAK,IAAI,MAAM,GAAG;AAC1B;AAEA,eAAe,SAAS,SAAyB,MAAc,UAAiC;CAC9F,IAAI,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,OAAO,KAAK,MAAM,MAAM;CAClE,MAAM,SAAS,WAAW;CAC1B,IAAI,CAAE,MAAM,QAAQ,OAAO,MAAM,GAAI;CACrC,MAAM,aAAa,MAAM,SAAS,QAAQ;CAC1C,IAAI,WAAW,UAAU,SAAS,UAAU,CAAE,MAAM,QAAQ,OAAO,MAAM,GAAI;CAC7E,MAAM,OAAO,kBAAkB,IAAI;CACnC,MAAM,QAAQ,MAAM,MAAM,UAAU;CAEpC,IAAI,CAAE,MAAM,QAAQ,OAAO,MAAM,GAAI,MAAM,QAAQ,OAAO,IAAI;AAChE;AAEA,eAAe,aAAgB,SAA6C;CAC1E,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,QAAQ,KAAK,CACxB,SACA,IAAI,SAAoB,YAAY;GAClC,QAAQ,iBAAiB;IACvB,QAAQ,SAAS;GACnB,GAAG,eAAe;EACpB,CAAC,CACH,CAAC;CACH,UAAU;EACR,IAAI,OAAO,aAAa,KAAK;CAC/B;AACF"}

package/dist/routers/published-files.mjs

@@ -3,9 +3,11 @@ import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
 import { publishedCorsHeaders } from "./published-access.mjs";
+import { SIGNED_NO_STORE, signedCacheControl } from "./capture-cache.mjs";
+import { acceptsGzip, publishedGzip } from "./published-compression.mjs";
 import { isSafeSegment, mimeFor } from "@storyshelf/core/utils";
-import { readPublishedFile } from "@storyshelf/core/capture";
-//#region src/routers/published-files.ts
+import { readPublishedFileInfo } from "@storyshelf/core/capture";
+// src/routers/published-files.ts
 /**
 * Serving a build's published files (ADR 0010, ADR 0007 decision 5): the single place that decodes
 * and checks a request path, reads the file through the build's manifest and sets the headers.
@@ -13,9 +15,13 @@ import { readPublishedFile } from "@storyshelf/core/capture";
 * signed URL route (`/_s/:token/*`) all end here, each bringing the access {@link publishedAccess}
 * granted.
 */
-/** Headers of every signed URL answer: a token URL must not be cached, indexed or leaked by `Referer`. */
+/**
+* Headers of every signed URL answer: a token URL must not be indexed or leaked by `Referer`, and
+* is `no-store` here. Only a successful answer for a capture grant may replace `cache-control`
+* (`signedCacheControl`); an error always sends these as they are.
+*/
 const SIGNED_URL_HEADERS = {
-	"cache-control": "private, no-store",
+	"cache-control": SIGNED_NO_STORE,
 	"referrer-policy": "no-referrer",
 	"x-robots-tag": "noindex, nofollow",
 	"x-content-type-options": "nosniff"
@@ -37,16 +43,27 @@ function publishedRelativePath(path, base) {
 /** The file as a response, or `null` when the build has no such file. */
 async function servePublishedFile(c, request) {
 	const { projectId, buildId, rel, access } = request;
-	const file = await readPublishedFile(getStore().storage, projectId, buildId, rel);
+	const { storage, config } = getStore();
+	const file = await readPublishedFileInfo(storage, projectId, buildId, rel);
 	if (!file) return null;
-	const headers = access === "token" ? SIGNED_URL_HEADERS : { "cache-control": request.cacheControl };
-	return c.body(new Uint8Array(file), 200, {
+	const headers = access === "token" ? {
+		...SIGNED_URL_HEADERS,
+		"cache-control": signedCacheControl({
+			cacheMaxAgeSeconds: config.captureAssets?.cacheMaxAgeSeconds,
+			grant: request.grant,
+			immutable: file.contentHash !== void 0
+		})
+	} : { "cache-control": request.cacheControl };
+	const mime = mimeFor(rel);
+	const compressed = config.publishedCompression && acceptsGzip(c.req.header("accept-encoding")) ? await publishedGzip(storage, file.contentHash, file.bytes, mime) : void 0;
+	return c.body(new Uint8Array(compressed ?? file.bytes), 200, {
 		...headers,
 		...publishedCorsHeaders(access),
-		"content-type": mimeFor(rel)
+		"content-type": mime,
+		...config.publishedCompression ? { vary: "Accept-Encoding" } : {},
+		...compressed ? { "content-encoding": "gzip" } : {}
 	});
 }
-//#endregion
 export { SIGNED_URL_HEADERS, publishedRelativePath, servePublishedFile };
 
 //# sourceMappingURL=published-files.mjs.map

package/dist/routers/published-files.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"published-files.mjs","names":[],"sources":["../../src/routers/published-files.ts"],"sourcesContent":["/**\n * Serving a build's published files (ADR 0010, ADR 0007 decision 5): the single place that decodes\n * and checks a request path, reads the file through the build's manifest and sets the headers.\n * The published Storybook routes (`/projects/:slug/storybook/build/:id/*`, `/_/:id/*`) and the\n * signed URL route (`/_s/:token/*`) all end here, each bringing the access {@link publishedAccess}\n * granted.\n */\nimport { readPublishedFile } from \"@storyshelf/core/capture\";\nimport { isSafeSegment, mimeFor } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { getStore } from \"../store.ts\";\nimport { publishedCorsHeaders, type PublishedAccess } from \"./published-access.ts\";\n\n/** Headers of every signed URL answer: a token URL must not be cached, indexed or leaked by `Referer`. */\nexport const SIGNED_URL_HEADERS = {\n  \"cache-control\": \"private, no-store\",\n  \"referrer-policy\": \"no-referrer\",\n  \"x-robots-tag\": \"noindex, nofollow\",\n  \"x-content-type-options\": \"nosniff\",\n} as const;\n\n/**\n * The file path after `base`, decoded once. `\"\"` is the root; `null` when the path is not under\n * `base` or could leave the build: empty, `.` or `..` segments, backslashes and NUL are refused.\n */\nexport function publishedRelativePath(path: string, base: string): string | null {\n  if (!path.startsWith(base)) {\n    return null;\n  }\n  let rest: string;\n  try {\n    rest = decodeURIComponent(path.slice(base.length));\n  } catch {\n    return null;\n  }\n  const safe =\n    rest === \"\" ||\n    rest\n      .split(\"/\")\n      .every(\n        (segment) =>\n          segment !== \"\" && segment !== \".\" && !segment.includes(\"\\0\") && isSafeSegment(segment),\n      );\n  return safe ? rest : null;\n}\n\n/** Where a file of a build lives and how the request got to it. */\nexport interface PublishedFileRequest {\n  projectId: string;\n  buildId: string;\n  /** A path accepted by {@link publishedRelativePath}, not the root. */\n  rel: string;\n  access: PublishedAccess;\n  /** `Cache-Control` of a normal answer; a signed URL always answers `private, no-store`. */\n  cacheControl: string;\n}\n\n/** The file as a response, or `null` when the build has no such file. */\nexport async function servePublishedFile(\n  c: Context,\n  request: PublishedFileRequest,\n): Promise<Response | null> {\n  const { projectId, buildId, rel, access } = request;\n  const file = await readPublishedFile(getStore().storage, projectId, buildId, rel);\n  if (!file) {\n    return null;\n  }\n  const headers =\n    access === \"token\" ? SIGNED_URL_HEADERS : { \"cache-control\": request.cacheControl };\n  return c.body(new Uint8Array(file), 200, {\n    ...headers,\n    ...publishedCorsHeaders(access),\n    \"content-type\": mimeFor(rel),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAcA,MAAa,qBAAqB;CAChC,iBAAiB;CACjB,mBAAmB;CACnB,gBAAgB;CAChB,0BAA0B;AAC5B;;;;;AAMA,SAAgB,sBAAsB,MAAc,MAA6B;CAC/E,IAAI,CAAC,KAAK,WAAW,IAAI,GACvB,OAAO;CAET,IAAI;CACJ,IAAI;EACF,OAAO,mBAAmB,KAAK,MAAM,KAAK,MAAM,CAAC;CACnD,QAAQ;EACN,OAAO;CACT;CASA,OAPE,SAAS,MACT,KACG,MAAM,GAAG,CAAC,CACV,OACE,YACC,YAAY,MAAM,YAAY,OAAO,CAAC,QAAQ,SAAS,IAAI,KAAK,cAAc,OAAO,CACzF,IACU,OAAO;AACvB;;AAcA,eAAsB,mBACpB,GACA,SAC0B;CAC1B,MAAM,EAAE,WAAW,SAAS,KAAK,WAAW;CAC5C,MAAM,OAAO,MAAM,kBAAkB,SAAS,CAAC,CAAC,SAAS,WAAW,SAAS,GAAG;CAChF,IAAI,CAAC,MACH,OAAO;CAET,MAAM,UACJ,WAAW,UAAU,qBAAqB,EAAE,iBAAiB,QAAQ,aAAa;CACpF,OAAO,EAAE,KAAK,IAAI,WAAW,IAAI,GAAG,KAAK;EACvC,GAAG;EACH,GAAG,qBAAqB,MAAM;EAC9B,gBAAgB,QAAQ,GAAG;CAC7B,CAAC;AACH"}
+{"version":3,"file":"published-files.mjs","names":[],"sources":["../../src/routers/published-files.ts"],"sourcesContent":["/**\n * Serving a build's published files (ADR 0010, ADR 0007 decision 5): the single place that decodes\n * and checks a request path, reads the file through the build's manifest and sets the headers.\n * The published Storybook routes (`/projects/:slug/storybook/build/:id/*`, `/_/:id/*`) and the\n * signed URL route (`/_s/:token/*`) all end here, each bringing the access {@link publishedAccess}\n * granted.\n */\nimport { readPublishedFileInfo } from \"@storyshelf/core/capture\";\nimport { isSafeSegment, mimeFor, type StorybookTokenClaims } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { getStore } from \"../store.ts\";\nimport { signedCacheControl, SIGNED_NO_STORE } from \"./capture-cache.ts\";\nimport { publishedCorsHeaders, type PublishedAccess } from \"./published-access.ts\";\nimport { acceptsGzip, publishedGzip } from \"./published-compression.ts\";\n\n/**\n * Headers of every signed URL answer: a token URL must not be indexed or leaked by `Referer`, and\n * is `no-store` here. Only a successful answer for a capture grant may replace `cache-control`\n * (`signedCacheControl`); an error always sends these as they are.\n */\nexport const SIGNED_URL_HEADERS = {\n  \"cache-control\": SIGNED_NO_STORE,\n  \"referrer-policy\": \"no-referrer\",\n  \"x-robots-tag\": \"noindex, nofollow\",\n  \"x-content-type-options\": \"nosniff\",\n} as const;\n\n/**\n * The file path after `base`, decoded once. `\"\"` is the root; `null` when the path is not under\n * `base` or could leave the build: empty, `.` or `..` segments, backslashes and NUL are refused.\n */\nexport function publishedRelativePath(path: string, base: string): string | null {\n  if (!path.startsWith(base)) {\n    return null;\n  }\n  let rest: string;\n  try {\n    rest = decodeURIComponent(path.slice(base.length));\n  } catch {\n    return null;\n  }\n  const safe =\n    rest === \"\" ||\n    rest\n      .split(\"/\")\n      .every(\n        (segment) =>\n          segment !== \"\" && segment !== \".\" && !segment.includes(\"\\0\") && isSafeSegment(segment),\n      );\n  return safe ? rest : null;\n}\n\n/** Where a file of a build lives and how the request got to it. */\nexport interface PublishedFileRequest {\n  projectId: string;\n  buildId: string;\n  /** A path accepted by {@link publishedRelativePath}, not the root. */\n  rel: string;\n  access: PublishedAccess;\n  /** `Cache-Control` of a normal answer; a signed URL answers `signedCacheControl` instead. */\n  cacheControl: string;\n  /** The verified claims of a signed URL's token; decides whether its answer may be fresh. */\n  grant?: StorybookTokenClaims | undefined;\n}\n\n/** The file as a response, or `null` when the build has no such file. */\nexport async function servePublishedFile(\n  c: Context,\n  request: PublishedFileRequest,\n): Promise<Response | null> {\n  const { projectId, buildId, rel, access } = request;\n  const { storage, config } = getStore();\n  const file = await readPublishedFileInfo(storage, projectId, buildId, rel);\n  if (!file) {\n    return null;\n  }\n  const headers =\n    access === \"token\"\n      ? {\n          ...SIGNED_URL_HEADERS,\n          \"cache-control\": signedCacheControl({\n            cacheMaxAgeSeconds: config.captureAssets?.cacheMaxAgeSeconds,\n            grant: request.grant,\n            immutable: file.contentHash !== undefined,\n          }),\n        }\n      : { \"cache-control\": request.cacheControl };\n  const mime = mimeFor(rel);\n  const compressed =\n    config.publishedCompression && acceptsGzip(c.req.header(\"accept-encoding\"))\n      ? await publishedGzip(storage, file.contentHash, file.bytes, mime)\n      : undefined;\n  return c.body(new Uint8Array(compressed ?? file.bytes), 200, {\n    ...headers,\n    ...publishedCorsHeaders(access),\n    \"content-type\": mime,\n    ...(config.publishedCompression ? { vary: \"Accept-Encoding\" } : {}),\n    ...(compressed ? { \"content-encoding\": \"gzip\" } : {}),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,qBAAqB;CAChC,iBAAiB;CACjB,mBAAmB;CACnB,gBAAgB;CAChB,0BAA0B;AAC5B;;;;;AAMA,SAAgB,sBAAsB,MAAc,MAA6B;CAC/E,IAAI,CAAC,KAAK,WAAW,IAAI,GACvB,OAAO;CAET,IAAI;CACJ,IAAI;EACF,OAAO,mBAAmB,KAAK,MAAM,KAAK,MAAM,CAAC;CACnD,QAAQ;EACN,OAAO;CACT;CASA,OAPE,SAAS,MACT,KACG,MAAM,GAAG,CAAC,CACV,OACE,YACC,YAAY,MAAM,YAAY,OAAO,CAAC,QAAQ,SAAS,IAAI,KAAK,cAAc,OAAO,CACzF,IACU,OAAO;AACvB;;AAgBA,eAAsB,mBACpB,GACA,SAC0B;CAC1B,MAAM,EAAE,WAAW,SAAS,KAAK,WAAW;CAC5C,MAAM,EAAE,SAAS,WAAW,SAAS;CACrC,MAAM,OAAO,MAAM,sBAAsB,SAAS,WAAW,SAAS,GAAG;CACzE,IAAI,CAAC,MACH,OAAO;CAET,MAAM,UACJ,WAAW,UACP;EACE,GAAG;EACH,iBAAiB,mBAAmB;GAClC,oBAAoB,OAAO,eAAe;GAC1C,OAAO,QAAQ;GACf,WAAW,KAAK,gBAAgB,KAAA;EAClC,CAAC;CACH,IACA,EAAE,iBAAiB,QAAQ,aAAa;CAC9C,MAAM,OAAO,QAAQ,GAAG;CACxB,MAAM,aACJ,OAAO,wBAAwB,YAAY,EAAE,IAAI,OAAO,iBAAiB,CAAC,IACtE,MAAM,cAAc,SAAS,KAAK,aAAa,KAAK,OAAO,IAAI,IAC/D,KAAA;CACN,OAAO,EAAE,KAAK,IAAI,WAAW,cAAc,KAAK,KAAK,GAAG,KAAK;EAC3D,GAAG;EACH,GAAG,qBAAqB,MAAM;EAC9B,gBAAgB;EAChB,GAAI,OAAO,uBAAuB,EAAE,MAAM,kBAAkB,IAAI,CAAC;EACjE,GAAI,aAAa,EAAE,oBAAoB,OAAO,IAAI,CAAC;CACrD,CAAC;AACH"}

package/dist/routers/review-forms.mjs

@@ -9,7 +9,7 @@ import { APPROVER_ROLES, DEVELOPER_ROLES, buildForProject } from "./builds.handl
 import { giveVerdict } from "./build-reviews.handlers.mjs";
 import { createComment, resolveBuildComment } from "./comments.mjs";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/review-forms.ts
+// src/routers/review-forms.ts
 /** Register the form routes of review (`review` class). */
 function registerReviewForms(app) {
 	const base = "/projects/:slug/builds/:buildId";
@@ -66,7 +66,6 @@ function returnPath(c, buildId) {
 		return fallback;
 	}
 }
-//#endregion
 export { registerReviewForms };
 
 //# sourceMappingURL=review-forms.mjs.map

package/dist/routers/review-next.mjs

@@ -5,7 +5,7 @@ import { getStore } from "../store.mjs";
 import { hxRefresh, isHxRequest } from "./htmx.mjs";
 import { isOpenSnapshot } from "./baseline-guard.mjs";
 import { SnapshotModel } from "@storyshelf/core/models";
-//#region src/routers/review-next.ts
+// src/routers/review-next.ts
 /**
 * The next snapshot still waiting for a decision after `currentId`, in list
 * order, wrapping to the start. Null when nothing else is open.
@@ -41,7 +41,6 @@ async function hxAdvance(c, target) {
 	}
 	c.header("HX-Redirect", url);
 }
-//#endregion
 export { hxAdvance, nextOpenSnapshotId };
 
 //# sourceMappingURL=review-next.mjs.map

package/dist/routers/review-section.handlers.mjs

@@ -6,7 +6,7 @@ import { currentProjectRole } from "./helpers.mjs";
 import { reviewStateOf } from "./build-reviews.handlers.mjs";
 import { publishingOf } from "@storyshelf/core/capture";
 import { CommentModel, UserModel, changesetOf } from "@storyshelf/core/models";
-//#region src/routers/review-section.handlers.ts
+// src/routers/review-section.handlers.ts
 /** Data behind the review section of the build page (ADR 0013): verdicts, changeset and comments. */
 /** Whether review is on for the project (a row without the column counts as on). */
 function reviewIsOn(project) {
@@ -79,7 +79,6 @@ async function loadComponentReview(project, build) {
 		canComment: capabilities.canComment
 	};
 }
-//#endregion
 export { loadComponentReview, loadReviewSection, namesOf, reviewCapabilities, reviewIsOn };
 
 //# sourceMappingURL=review-section.handlers.mjs.map

package/dist/routers/review-switch-off.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { getStore } from "../store.mjs";
 import { requestBuildState } from "../git-status.mjs";
 import { acceptPendingWithoutWork } from "@storyshelf/core/models";
-//#region src/routers/review-switch-off.ts
+// src/routers/review-switch-off.ts
 /** The switch-off pass at the app level (ADR 0013, decision 1): accept the queue review leaves behind. */
 /**
 * When a save turned review off (`before` had it on), accept the project's pending builds that no
@@ -23,7 +23,6 @@ async function runSwitchOffPass(before, after) {
 	}, "review turned off: accepted pending builds");
 	return accepted.length;
 }
-//#endregion
 export { runSwitchOffPass };
 
 //# sourceMappingURL=review-switch-off.mjs.map

package/dist/routers/schemas.mjs

@@ -6,7 +6,7 @@ import { storybookUrlTtlOverrideError } from "@storyshelf/core/utils";
 import { WebhookModel } from "@storyshelf/core/models";
 import { BUILD_STATUSES, PROJECT_ROLES, REVIEW_VERDICTS, SNAPSHOT_STATUSES } from "@storyshelf/core/types";
 import { BROWSER_NAMES, TARGET_NAME_PATTERN } from "@storyshelf/core/adapter/capture-runner";
-//#region src/routers/schemas.ts
+// src/routers/schemas.ts
 /** A capture target: an engine (`chromium`) or a remote one, `<engine>@<name>` (ADR 0007). */
 const captureTargetSchema = z.string().regex(new RegExp(`^(?:${BROWSER_NAMES.join("|")})(?:@${TARGET_NAME_PATTERN.source.slice(1, -1)})?$`, "u"), "Expected an engine (chromium, firefox, webkit, chrome) or <engine>@<name>");
 const reviewApprovalsSchema = z.number().int().min(1).max(20);
@@ -449,7 +449,6 @@ const healthRequestSchema = z.object({
 	window: z.string().optional(),
 	force: z.boolean().optional()
 }).openapi("HealthInsightRequest");
-//#endregion
 export { approveAllResultSchema, attemptLogSchema, attemptSchema, badRequest, baselineChangedSchema, buildReviewCreateSchema, buildReviewSchema, buildReviewStateSchema, buildSchema, commentCreateSchema, commentSchema, errorSchema, forbidden, groupDecisionResultSchema, groupMappingCreateSchema, groupMappingSchema, healthRequestSchema, insightRequestSchema, insightSchema, labelTypeCreateSchema, labelTypeSchema, labelTypeUpdateSchema, memberRoleSchema, memberSchema, memberSetSchema, notFound, notificationChannelCreateSchema, notificationChannelSchema, notificationSubscriptionPutSchema, notificationSubscriptionSchema, okSchema, projectCreateSchema, projectSchema, projectUpdateSchema, purgeInputSchema, purgeSchema, rediffResultSchema, snapshotSchema, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized, webhookCreateSchema, webhookCreatedSchema, webhookPublicSchema };
 
 //# sourceMappingURL=schemas.mjs.map