@storyshelf/app 0.7.0 → 0.9.0-next-d2cc082

package/dist/routers/scoped-models.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
 import { NotificationChannelModel, WebhookModel } from "@storyshelf/core/models";
-//#region src/routers/scoped-models.ts
+// src/routers/scoped-models.ts
 /** Models that encrypt secrets at rest, bound to the current request's db and server secret. */
 /** Webhook model for the current request. */
 function webhookModel() {
@@ -16,7 +16,6 @@ function notificationChannelModel() {
 	const { db, config } = getStore();
 	return new NotificationChannelModel(db, void 0, credentialKeys(config));
 }
-//#endregion
 export { notificationChannelModel, webhookModel };
 
 //# sourceMappingURL=scoped-models.mjs.map

package/dist/routers/settings-ai.mjs

@@ -7,7 +7,7 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { ProjectModel } from "@storyshelf/core/models";
-//#region src/routers/settings-ai.ts
+// src/routers/settings-ai.ts
 /** Register the project AI settings tab (site admins set the profile gate). */
 function registerAiSettings(app) {
 	app.get("/projects/:slug/settings/ai", async (c) => c.html(await renderSettingsPage(c, "ai")));
@@ -29,7 +29,6 @@ async function handleAiUpdate(c) {
 	flash(c, requested === "" ? "AI turned off for this project" : "AI profile saved");
 	return hxRedirect(c, `/projects/${project.slug}/settings/ai`);
 }
-//#endregion
 export { registerAiSettings };
 
 //# sourceMappingURL=settings-ai.mjs.map

package/dist/routers/settings-capture.mjs

@@ -12,7 +12,7 @@ import { resolveBrowsers } from "@storyshelf/core/capture";
 import { ProjectModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
 import { isCaptureTarget } from "@storyshelf/core/adapter/capture-runner";
-//#region src/routers/settings-capture.ts
+// src/routers/settings-capture.ts
 /** Capture settings: browsers (primary + extras), the mode allowlist and the signed URL lifetime. */
 function registerCaptureSettings(app) {
 	app.get("/projects/:slug/settings/capture", async (c) => c.html(await renderSettingsPage(c, "capture")));
@@ -71,7 +71,6 @@ async function handleCaptureUpdate(c) {
 	flash(c, "Capture settings saved");
 	return hxRedirect(c, `/projects/${project.slug}/settings/capture`);
 }
-//#endregion
 export { registerCaptureSettings };
 
 //# sourceMappingURL=settings-capture.mjs.map

package/dist/routers/settings-design.mjs

@@ -9,7 +9,7 @@ import { flash } from "./flash.mjs";
 import { asString, renderSettingsPage } from "./settings.handlers.mjs";
 import { DesignCredentialModel, DesignModel } from "@storyshelf/core/models";
 import { InvalidDesignUrlError } from "@storyshelf/core/adapter/design";
-//#region src/routers/settings-design.ts
+// src/routers/settings-design.ts
 /** Design settings (project design files, component mapping, provider credentials). */
 function registerDesignSettings(app) {
 	const base = "/projects/:slug/settings/design";
@@ -97,7 +97,6 @@ async function handleRemoveToken(c) {
 	await credentialModel().remove(project.id, provider.metadata.kind);
 	return done(c, project.slug, `${provider.metadata.name} token removed`);
 }
-//#endregion
 export { registerDesignSettings };
 
 //# sourceMappingURL=settings-design.mjs.map

package/dist/routers/settings-general.mjs

@@ -10,7 +10,7 @@ import { runSwitchOffPass } from "./review-switch-off.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { resolveBrowsers } from "@storyshelf/core/capture";
 import { ProjectModel } from "@storyshelf/core/models";
-//#region src/routers/settings-general.ts
+// src/routers/settings-general.ts
 /** General project settings (name, repo, thresholds) and danger-zone delete. */
 function registerGeneralSettings(app) {
 	app.get("/projects/:slug/settings", async (c) => c.html(await renderSettingsPage(c, "general")));
@@ -143,7 +143,6 @@ function approvalsOf(form, project) {
 function reviewSavedMessage(accepted) {
 	return accepted > 0 ? `Review settings saved; accepted ${accepted} pending build${accepted === 1 ? "" : "s"}` : "Review settings saved";
 }
-//#endregion
 export { registerGeneralSettings };
 
 //# sourceMappingURL=settings-general.mjs.map

package/dist/routers/settings-git-channel.mjs

@@ -6,7 +6,7 @@ import { flash } from "./flash.mjs";
 import { notificationChannelModel } from "./scoped-models.mjs";
 import { asString, renderSettingsPage } from "./settings.handlers.mjs";
 import { NotificationChannelModel } from "@storyshelf/core/models";
-//#region src/routers/settings-git-channel.ts
+// src/routers/settings-git-channel.ts
 /** Create a git (`state`) channel from the settings form: repository, status prefix and token. */
 const CONFIG_FIELDS = [
 	"owner",
@@ -71,7 +71,6 @@ function gitChannelProblem(project, provider, config, secret) {
 	});
 	return checked.ok ? null : fieldErrors(secret.secretField, checked);
 }
-//#endregion
 export { createGitChannel };
 
 //# sourceMappingURL=settings-git-channel.mjs.map

package/dist/routers/settings-labels.mjs

@@ -6,7 +6,7 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { LabelModel } from "@storyshelf/core/models";
-//#region src/routers/settings-labels.ts
+// src/routers/settings-labels.ts
 /** Label-type settings (create custom types, delete removable ones). */
 function registerLabelSettings(app) {
 	app.get("/projects/:slug/settings/labels", async (c) => c.html(await renderSettingsPage(c, "labels", { editKey: c.req.query("edit") })));
@@ -72,7 +72,6 @@ async function handleDeleteLabelType(c) {
 	flash(c, "Label type deleted");
 	return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
 }
-//#endregion
 export { registerLabelSettings };
 
 //# sourceMappingURL=settings-labels.mjs.map

package/dist/routers/settings-links.mjs

@@ -6,7 +6,7 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { PackageUsageModel, ProjectModel } from "@storyshelf/core/models";
-//#region src/routers/settings-links.ts
+// src/routers/settings-links.ts
 /** Package-link settings (link a consumed package to its upstream project, or unlink it). */
 function registerLinkSettings(app) {
 	app.get("/projects/:slug/settings/links", async (c) => c.html(await renderSettingsPage(c, "links")));
@@ -57,7 +57,6 @@ async function handleRemoveLink(c) {
 	flash(c, "Link removed");
 	return hxRedirect(c, `/projects/${project.slug}/settings/links`);
 }
-//#endregion
 export { registerLinkSettings };
 
 //# sourceMappingURL=settings-links.mjs.map

package/dist/routers/settings-members.mjs

@@ -7,7 +7,7 @@ import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { MemberModel, ProjectGroupMappingModel } from "@storyshelf/core/models";
 import { isProjectRole } from "@storyshelf/core/types";
-//#region src/routers/settings-members.ts
+// src/routers/settings-members.ts
 /** Project member settings (assign roles, remove members). */
 function registerMemberSettings(app) {
 	app.get("/projects/:slug/settings/members", async (c) => c.html(await renderSettingsPage(c, "members")));
@@ -49,7 +49,6 @@ function registerGroupMappingSettings(app) {
 		return hxRedirect(c, `/projects/${project.slug}/settings/members`);
 	});
 }
-//#endregion
 export { registerMemberSettings };
 
 //# sourceMappingURL=settings-members.mjs.map

package/dist/routers/settings-notifications.mjs

@@ -7,7 +7,7 @@ import { notificationChannelModel } from "./scoped-models.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { createGitChannel } from "./settings-git-channel.mjs";
 import { NotificationChannelModel, NotificationSubscriptionModel } from "@storyshelf/core/models";
-//#region src/routers/settings-notifications.ts
+// src/routers/settings-notifications.ts
 /** Notifications settings (message and git channels plus my preferences). */
 function registerNotificationSettings(app) {
 	app.get("/projects/:slug/settings/notifications", async (c) => c.html(await renderSettingsPage(c, "notifications")));
@@ -107,7 +107,6 @@ async function saveSubscription(project, userId, form) {
 	}
 	await model.remove(project.id, userId);
 }
-//#endregion
 export { registerNotificationSettings };
 
 //# sourceMappingURL=settings-notifications.mjs.map

package/dist/routers/settings-tokens.mjs

@@ -6,7 +6,7 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { TokenModel } from "@storyshelf/core/models";
-//#region src/routers/settings-tokens.ts
+// src/routers/settings-tokens.ts
 /** CI token settings (create with one-time display, delete). */
 function registerTokenSettings(app) {
 	app.get("/projects/:slug/settings/tokens", async (c) => c.html(await renderSettingsPage(c, "tokens")));
@@ -31,7 +31,6 @@ async function handleDeleteToken(c) {
 	flash(c, "Token deleted");
 	return hxRedirect(c, `/projects/${project.slug}/settings/tokens`);
 }
-//#endregion
 export { registerTokenSettings };
 
 //# sourceMappingURL=settings-tokens.mjs.map

package/dist/routers/settings-webhooks.mjs

@@ -7,7 +7,7 @@ import { flash } from "./flash.mjs";
 import { webhookModel } from "./scoped-models.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { WebhookModel } from "@storyshelf/core/models";
-//#region src/routers/settings-webhooks.ts
+// src/routers/settings-webhooks.ts
 /** Webhook settings (create with one-time secret display, delete). */
 function registerWebhookSettings(app) {
 	app.get("/projects/:slug/settings/webhooks", async (c) => c.html(await renderSettingsPage(c, "webhooks")));
@@ -44,7 +44,6 @@ async function handleDeleteWebhook(c) {
 	flash(c, "Webhook deleted");
 	return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);
 }
-//#endregion
 export { registerWebhookSettings };
 
 //# sourceMappingURL=settings-webhooks.mjs.map

package/dist/routers/settings.handlers.mjs

@@ -9,7 +9,7 @@ import { runnerTargets } from "../targets.mjs";
 import { isSiteAdmin } from "./insights.handlers.mjs";
 import { renderProjectSettingsPage } from "../pages/project-settings.mjs";
 import { DesignCredentialModel, DesignModel, LabelModel, MemberModel, NotificationChannelModel, NotificationSubscriptionModel, PackageUsageModel, ProjectGroupMappingModel, ProjectModel, TokenModel, WebhookModel, credentialDaysLeft } from "@storyshelf/core/models";
-//#region src/routers/settings.handlers.ts
+// src/routers/settings.handlers.ts
 /** Tokens without hashes for the settings UI. */
 async function loadTokenSummaries(db, projectId) {
 	return (await new TokenModel(db).list(projectId)).map(({ hash: _hash, ...rest }) => rest);
@@ -224,7 +224,6 @@ async function findProject(slug) {
 function asString(value) {
 	return typeof value === "string" ? value.trim() : void 0;
 }
-//#endregion
 export { asString, findProject, renderSettingsPage };
 
 //# sourceMappingURL=settings.handlers.mjs.map

package/dist/routers/settings.mjs

@@ -11,7 +11,7 @@ import { registerMemberSettings } from "./settings-members.mjs";
 import { registerNotificationSettings } from "./settings-notifications.mjs";
 import { registerTokenSettings } from "./settings-tokens.mjs";
 import { registerWebhookSettings } from "./settings-webhooks.mjs";
-//#region src/routers/settings.ts
+// src/routers/settings.ts
 /** Register the server-rendered project settings pages and their form handlers. */
 function registerSettingsPages(app) {
 	registerProjectSettings(app);
@@ -31,7 +31,6 @@ function registerCatalogSettings(app) {
 	registerLinkSettings(app);
 	registerDesignSettings(app);
 }
-//#endregion
 export { registerSettingsPages };
 
 //# sourceMappingURL=settings.mjs.map

package/dist/routers/signed-storybook.mjs

@@ -7,13 +7,15 @@ import { publishedAccess } from "./published-access.mjs";
 import { SIGNED_URL_HEADERS, publishedRelativePath, servePublishedFile } from "./published-files.mjs";
 import { STORYBOOK_TOKEN_PREFIX, storybookTokenPath, verifyStorybookToken } from "@storyshelf/core/utils";
 import { BuildModel, ProjectModel } from "@storyshelf/core/models";
-//#region src/routers/signed-storybook.ts
+// src/routers/signed-storybook.ts
 /**
 * Signed Storybook URLs (ADR 0007, decision 5): `GET /_s/<token>/<file>` serves one build's static
 * Storybook files to a remote browser, with no session. The HMAC token is the only credential; it
 * names one project and one build and expires. The file itself is served by the same handler and
 * access policy as the other published routes (`published-files.ts`, `published-access.ts`).
 * Nothing else lives under `/_s/`: no wrapper page, no API, no other build, no listing.
+* Answers are `private, no-store`, except a success for a capture-purpose grant when the server
+* opted in (`captureAssets.cacheMaxAgeSeconds`, see `capture-cache.ts`).
 */
 /** Register the signed-URL file route. */
 function registerSignedStorybook(app) {
@@ -39,7 +41,8 @@ async function serveGranted(c, token, rel) {
 		buildId,
 		rel,
 		access,
-		cacheControl: ""
+		cacheControl: "",
+		grant: verified.claims
 	});
 }
 /** The one answer for every refusal, so a caller cannot tell a bad signature from an expired token. */
@@ -47,7 +50,6 @@ function refuse(c, reason) {
 	getStore().logger.debug({ reason }, "signed storybook request refused");
 	return c.text("Not found", 404, SIGNED_URL_HEADERS);
 }
-//#endregion
 export { registerSignedStorybook };
 
 //# sourceMappingURL=signed-storybook.mjs.map

package/dist/routers/signed-storybook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"signed-storybook.mjs","names":[],"sources":["../../src/routers/signed-storybook.ts"],"sourcesContent":["/**\n * Signed Storybook URLs (ADR 0007, decision 5): `GET /_s/<token>/<file>` serves one build's static\n * Storybook files to a remote browser, with no session. The HMAC token is the only credential; it\n * names one project and one build and expires. The file itself is served by the same handler and\n * access policy as the other published routes (`published-files.ts`, `published-access.ts`).\n * Nothing else lives under `/_s/`: no wrapper page, no API, no other build, no listing.\n */\nimport { BuildModel, ProjectModel } from \"@storyshelf/core/models\";\nimport {\n  STORYBOOK_TOKEN_PREFIX,\n  storybookTokenPath,\n  verifyStorybookToken,\n} from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport {\n  publishedRelativePath,\n  servePublishedFile,\n  SIGNED_URL_HEADERS,\n} from \"./published-files.ts\";\n\n/** Register the signed-URL file route. */\nexport function registerSignedStorybook(app: ShelfRouter): void {\n  app.get(`${STORYBOOK_TOKEN_PREFIX}:token/*`, async (c) => await serveSigned(c));\n}\n\nasync function serveSigned(c: Context): Promise<Response> {\n  const token = c.req.param(\"token\") ?? \"\";\n  const rel = publishedRelativePath(c.req.path, storybookTokenPath(token));\n  if (!rel) {\n    return refuse(c, \"bad path\");\n  }\n  return (await serveGranted(c, token, rel)) ?? refuse(c, \"no such file\");\n}\n\n/** The file the token grants as a response, or null (for the debug log only: why not). */\nasync function serveGranted(c: Context, token: string, rel: string): Promise<Response | null> {\n  const { config, db } = getStore();\n  const verified = verifyStorybookToken(token, credentialKeys(config));\n  if (!verified.ok) {\n    return refuse(c, verified.reason);\n  }\n  const { projectId, buildId } = verified.claims;\n  const [project, build] = await Promise.all([\n    new ProjectModel(db).get(projectId),\n    new BuildModel(db).get(buildId),\n  ]);\n  const access = project && build ? await publishedAccess(build, project, verified.claims) : null;\n  if (access !== \"token\") {\n    return refuse(c, \"unknown build\");\n  }\n  return await servePublishedFile(c, { projectId, buildId, rel, access, cacheControl: \"\" });\n}\n\n/** The one answer for every refusal, so a caller cannot tell a bad signature from an expired token. */\nfunction refuse(c: Context, reason: string): Response {\n  getStore().logger.debug({ reason }, \"signed storybook request refused\");\n  return c.text(\"Not found\", 404, SIGNED_URL_HEADERS);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyBA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,GAAG,uBAAuB,WAAW,OAAO,MAAM,MAAM,YAAY,CAAC,CAAC;AAChF;AAEA,eAAe,YAAY,GAA+B;CACxD,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;CACtC,MAAM,MAAM,sBAAsB,EAAE,IAAI,MAAM,mBAAmB,KAAK,CAAC;CACvE,IAAI,CAAC,KACH,OAAO,OAAO,GAAG,UAAU;CAE7B,OAAQ,MAAM,aAAa,GAAG,OAAO,GAAG,KAAM,OAAO,GAAG,cAAc;AACxE;;AAGA,eAAe,aAAa,GAAY,OAAe,KAAuC;CAC5F,MAAM,EAAE,QAAQ,OAAO,SAAS;CAChC,MAAM,WAAW,qBAAqB,OAAO,eAAe,MAAM,CAAC;CACnE,IAAI,CAAC,SAAS,IACZ,OAAO,OAAO,GAAG,SAAS,MAAM;CAElC,MAAM,EAAE,WAAW,YAAY,SAAS;CACxC,MAAM,CAAC,SAAS,SAAS,MAAM,QAAQ,IAAI,CACzC,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,GAClC,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO,CAChC,CAAC;CACD,MAAM,SAAS,WAAW,QAAQ,MAAM,gBAAgB,OAAO,SAAS,SAAS,MAAM,IAAI;CAC3F,IAAI,WAAW,SACb,OAAO,OAAO,GAAG,eAAe;CAElC,OAAO,MAAM,mBAAmB,GAAG;EAAE;EAAW;EAAS;EAAK;EAAQ,cAAc;CAAG,CAAC;AAC1F;;AAGA,SAAS,OAAO,GAAY,QAA0B;CACpD,SAAS,CAAC,CAAC,OAAO,MAAM,EAAE,OAAO,GAAG,kCAAkC;CACtE,OAAO,EAAE,KAAK,aAAa,KAAK,kBAAkB;AACpD"}
+{"version":3,"file":"signed-storybook.mjs","names":[],"sources":["../../src/routers/signed-storybook.ts"],"sourcesContent":["/**\n * Signed Storybook URLs (ADR 0007, decision 5): `GET /_s/<token>/<file>` serves one build's static\n * Storybook files to a remote browser, with no session. The HMAC token is the only credential; it\n * names one project and one build and expires. The file itself is served by the same handler and\n * access policy as the other published routes (`published-files.ts`, `published-access.ts`).\n * Nothing else lives under `/_s/`: no wrapper page, no API, no other build, no listing.\n * Answers are `private, no-store`, except a success for a capture-purpose grant when the server\n * opted in (`captureAssets.cacheMaxAgeSeconds`, see `capture-cache.ts`).\n */\nimport { BuildModel, ProjectModel } from \"@storyshelf/core/models\";\nimport {\n  STORYBOOK_TOKEN_PREFIX,\n  storybookTokenPath,\n  verifyStorybookToken,\n} from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport {\n  publishedRelativePath,\n  servePublishedFile,\n  SIGNED_URL_HEADERS,\n} from \"./published-files.ts\";\n\n/** Register the signed-URL file route. */\nexport function registerSignedStorybook(app: ShelfRouter): void {\n  app.get(`${STORYBOOK_TOKEN_PREFIX}:token/*`, async (c) => await serveSigned(c));\n}\n\nasync function serveSigned(c: Context): Promise<Response> {\n  const token = c.req.param(\"token\") ?? \"\";\n  const rel = publishedRelativePath(c.req.path, storybookTokenPath(token));\n  if (!rel) {\n    return refuse(c, \"bad path\");\n  }\n  return (await serveGranted(c, token, rel)) ?? refuse(c, \"no such file\");\n}\n\n/** The file the token grants as a response, or null (for the debug log only: why not). */\nasync function serveGranted(c: Context, token: string, rel: string): Promise<Response | null> {\n  const { config, db } = getStore();\n  const verified = verifyStorybookToken(token, credentialKeys(config));\n  if (!verified.ok) {\n    return refuse(c, verified.reason);\n  }\n  const { projectId, buildId } = verified.claims;\n  const [project, build] = await Promise.all([\n    new ProjectModel(db).get(projectId),\n    new BuildModel(db).get(buildId),\n  ]);\n  const access = project && build ? await publishedAccess(build, project, verified.claims) : null;\n  if (access !== \"token\") {\n    return refuse(c, \"unknown build\");\n  }\n  return await servePublishedFile(c, {\n    projectId,\n    buildId,\n    rel,\n    access,\n    cacheControl: \"\",\n    grant: verified.claims,\n  });\n}\n\n/** The one answer for every refusal, so a caller cannot tell a bad signature from an expired token. */\nfunction refuse(c: Context, reason: string): Response {\n  getStore().logger.debug({ reason }, \"signed storybook request refused\");\n  return c.text(\"Not found\", 404, SIGNED_URL_HEADERS);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA2BA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,GAAG,uBAAuB,WAAW,OAAO,MAAM,MAAM,YAAY,CAAC,CAAC;AAChF;AAEA,eAAe,YAAY,GAA+B;CACxD,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;CACtC,MAAM,MAAM,sBAAsB,EAAE,IAAI,MAAM,mBAAmB,KAAK,CAAC;CACvE,IAAI,CAAC,KACH,OAAO,OAAO,GAAG,UAAU;CAE7B,OAAQ,MAAM,aAAa,GAAG,OAAO,GAAG,KAAM,OAAO,GAAG,cAAc;AACxE;;AAGA,eAAe,aAAa,GAAY,OAAe,KAAuC;CAC5F,MAAM,EAAE,QAAQ,OAAO,SAAS;CAChC,MAAM,WAAW,qBAAqB,OAAO,eAAe,MAAM,CAAC;CACnE,IAAI,CAAC,SAAS,IACZ,OAAO,OAAO,GAAG,SAAS,MAAM;CAElC,MAAM,EAAE,WAAW,YAAY,SAAS;CACxC,MAAM,CAAC,SAAS,SAAS,MAAM,QAAQ,IAAI,CACzC,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,GAClC,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO,CAChC,CAAC;CACD,MAAM,SAAS,WAAW,QAAQ,MAAM,gBAAgB,OAAO,SAAS,SAAS,MAAM,IAAI;CAC3F,IAAI,WAAW,SACb,OAAO,OAAO,GAAG,eAAe;CAElC,OAAO,MAAM,mBAAmB,GAAG;EACjC;EACA;EACA;EACA;EACA,cAAc;EACd,OAAO,SAAS;CAClB,CAAC;AACH;;AAGA,SAAS,OAAO,GAAY,QAA0B;CACpD,SAAS,CAAC,CAAC,OAAO,MAAM,EAAE,OAAO,GAAG,kCAAkC;CACtE,OAAO,EAAE,KAAK,aAAa,KAAK,kBAAkB;AACpD"}

package/dist/routers/snapshot-groups.mjs

@@ -6,7 +6,7 @@ import { notFound } from "./helpers.mjs";
 import { baselineChanged, findDriftedSnapshots, isOpenSnapshot } from "./baseline-guard.mjs";
 import { approveSnapshot, refreshBuild } from "./builds.handlers.mjs";
 import { SnapshotModel } from "@storyshelf/core/models";
-//#region src/routers/snapshot-groups.ts
+// src/routers/snapshot-groups.ts
 /** Shared (story, mode) review: one decision covers every browser's snapshot. */
 /** Identity of a review group: the same story and mode across engines. */
 function groupKey(snapshot) {
@@ -57,7 +57,6 @@ function splitByDrift(open, drifted) {
 		skipped: open.filter((s) => blocked.has(groupKey(s)))
 	};
 }
-//#endregion
 export { approveGroup, groupKey, rejectGroup, splitByDrift };
 
 //# sourceMappingURL=snapshot-groups.mjs.map

package/dist/routers/snapshots.mjs

@@ -14,7 +14,7 @@ import { createRoute, z } from "@hono/zod-openapi";
 import { REDIFFABLE_BUILD_STATUSES, rediffBuild } from "@storyshelf/core/capture";
 import { SnapshotModel } from "@storyshelf/core/models";
 import { HTTPException } from "hono/http-exception";
-//#region src/routers/snapshots.ts
+// src/routers/snapshots.ts
 const listSnapshotsRoute = createRoute({
 	method: "get",
 	tags: ["Review"],
@@ -332,7 +332,6 @@ function registerSnapshots(app) {
 		return c.json({ ok: true });
 	});
 }
-//#endregion
 export { registerSnapshots };
 
 //# sourceMappingURL=snapshots.mjs.map

package/dist/routers/storybook.mjs

@@ -1,4 +1,4 @@
-import "node:path";
+import { posix } from "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
@@ -8,8 +8,7 @@ import { publishedRelativePath, servePublishedFile } from "./published-files.mjs
 import { renderStorybookPage, renderStorybookPreparingPage } from "../pages/storybook.mjs";
 import { storybookDir } from "@storyshelf/core/utils";
 import { BuildModel, LabelModel, ProjectModel } from "@storyshelf/core/models";
-import { posix } from "node:path";
-//#region src/routers/storybook.ts
+// src/routers/storybook.ts
 /** Check whether a build's extracted statics are available for serving. */
 async function staticsReady(projectId, buildId) {
 	if (await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), "manifest.json"))) return true;
@@ -28,19 +27,6 @@ function registerStorybook(app) {
 		if (!await publishedAccess(build, project)) return c.redirect("/auth/login", 302);
 		return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);
 	});
-	app.get("/projects/:slug/storybook/:key/:value", async (c) => {
-		const slug = c.req.param("slug");
-		const key = c.req.param("key");
-		if (key === "build") return c.notFound();
-		const value = c.req.param("value");
-		const project = await new ProjectModel(getStore().db).getBySlug(slug);
-		if (!project) notFound("Project not found");
-		const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);
-		if (!buildId) notFound("No build carries that label");
-		const build = await new BuildModel(getStore().db).get(buildId);
-		if (!build || !await publishedAccess(build, project)) return c.redirect("/auth/login", 302);
-		return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);
-	});
 	app.get("/_/:id", async (c) => {
 		const id = c.req.param("id");
 		if (id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id)) {
@@ -108,13 +94,31 @@ function registerStorybook(app) {
 			cacheControl: "public, max-age=31536000, immutable"
 		}) ?? c.notFound();
 	});
+	app.get("/projects/:slug/storybook/:key/*", async (c) => {
+		const slug = c.req.param("slug");
+		const key = c.req.param("key");
+		if (key === "build") return c.notFound();
+		let value;
+		try {
+			value = decodeURIComponent(c.req.path.split("/").slice(5).join("/"));
+		} catch {
+			return c.notFound();
+		}
+		if (!value) return c.notFound();
+		const project = await new ProjectModel(getStore().db).getBySlug(slug);
+		if (!project) notFound("Project not found");
+		const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);
+		if (!buildId) notFound("No build carries that label");
+		const build = await new BuildModel(getStore().db).get(buildId);
+		if (!build || !await publishedAccess(build, project)) return c.redirect("/auth/login", 302);
+		return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);
+	});
 }
 /** Cache policy of the short link: a ULID names one build forever; a slug follows the latest. */
 function shortLinkCache(isUlid26, isRoot) {
 	if (isUlid26) return "public, max-age=31536000, immutable";
 	return isRoot ? "public, max-age=60" : "public, max-age=3600";
 }
-//#endregion
 export { registerStorybook };
 
 //# sourceMappingURL=storybook.mjs.map

package/dist/routers/storybook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { storybookDir } from \"@storyshelf/core/utils\";\nimport { posix } from \"node:path\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport { publishedRelativePath, servePublishedFile } from \"./published-files.ts\";\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  // New path: manifest.json indicates content-addressed storage; fallback to legacy iframe.html\n  if (\n    await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), \"manifest.json\"))\n  ) {\n    return true;\n  }\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfRouter): void {\n  app.get(\"/_\", (c) => c.redirect(\"/\", 302));\n  app.get(\"/_/\", (c) => c.redirect(\"/\", 302));\n\n  // Resolver: latest approved build on the default branch (never feature branches).\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n    if (!build) {\n      notFound(\"No approved build on the default branch yet\");\n    }\n    if (!(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/:value\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    const value = c.req.param(\"value\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n\n  // Short link canonical is /_/:id/ with trailing slash (so relative ./sb-manager/... resolves).\n  // 26-char ULID → that exact build, whatever its status (visibility check only).\n  // Any other id → project slug → latest approved build on the default branch, else 404\n  // (no fallback to feature-branch or unreviewed builds). No fall-through on ULID.\n  app.get(\"/_/:id\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    if (isUlid26) {\n      const build = await new BuildModel(getStore().db).get(id);\n      if (!build) notFound();\n    } else {\n      const project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) notFound();\n    }\n    return c.redirect(`/_/${id}/`, 302);\n  });\n\n  app.get(\"/_/:id/*\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    const rest = publishedRelativePath(c.req.path, `/_/${id}/`);\n    if (rest === null) return c.notFound();\n    let project: Project | null = null;\n    let build: Build | null = null;\n    if (isUlid26) {\n      build = await new BuildModel(getStore().db).get(id);\n      if (!build) return c.notFound();\n      project = await new ProjectModel(getStore().db).get(build.projectId);\n      if (!project) return c.notFound();\n    } else {\n      project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) return c.notFound();\n      build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n      if (!build) return c.notFound();\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) return c.redirect(\"/auth/login\", 302);\n    if (rest === \"\" && !(await staticsReady(project.id, build.id))) {\n      return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);\n    }\n    const fallback = isUlid26\n      ? `/projects/${project.slug}/builds/${build.id}`\n      : `/projects/${project.slug}`;\n    const served = await servePublishedFile(c, {\n      projectId: project.id,\n      buildId: build.id,\n      rel: rest === \"\" ? \"index.html\" : rest,\n      access,\n      cacheControl: shortLinkCache(isUlid26, rest === \"\"),\n    });\n    if (served) return served;\n    return rest === \"\" || rest === \"index.html\" ? c.redirect(fallback, 302) : c.notFound();\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const rest = publishedRelativePath(c.req.path, `/projects/${slug}/storybook/build/${buildId}/`);\n    if (rest === null) {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      const storyId = c.req.query(\"storyId\") ?? c.req.query(\"id\") ?? undefined;\n      const viewMode = c.req.query(\"viewMode\") === \"docs\" ? \"docs\" : undefined;\n      return c.html(renderStorybookPage(project, build, slug, { storyId, viewMode }), 200);\n    }\n\n    return (\n      (await servePublishedFile(c, {\n        projectId: project.id,\n        buildId: build.id,\n        rel: rest,\n        access,\n        cacheControl: \"public, max-age=31536000, immutable\",\n      })) ?? c.notFound()\n    );\n  });\n}\n\n/** Cache policy of the short link: a ULID names one build forever; a slug follows the latest. */\nfunction shortLinkCache(isUlid26: boolean, isRoot: boolean): string {\n  if (isUlid26) {\n    return \"public, max-age=31536000, immutable\";\n  }\n  return isRoot ? \"public, max-age=60\" : \"public, max-age=3600\";\n}\n"],"mappings":";;;;;;;;;;;;;AAeA,eAAe,aAAa,WAAmB,SAAmC;CAEhF,IACE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe,CAAC,GAE7F,OAAO;CAET,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;;AAGA,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CACzC,IAAI,IAAI,QAAQ,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CAG1C,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;EAC/E,IAAI,CAAC,OACH,SAAS,6CAA6C;EAExD,IAAI,CAAE,MAAM,gBAAgB,OAAO,OAAO,GACxC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAGD,IAAI,IAAI,yCAAyC,OAAO,MAAM;EAC5D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO;EACjC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,gBAAgB,OAAO,OAAO,GAClD,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;CAMD,IAAI,IAAI,UAAU,OAAO,MAAM;EAC7B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAE3B,IADiB,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE,GAGvE;OAAA,CAAC,MADe,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAC5C,SAAS;EAAA,OAGrB,IAAI,CAAC,MADiB,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GACpD,SAAS;EAEzB,OAAO,EAAE,SAAS,MAAM,GAAG,IAAI,GAAG;CACpC,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,MAAM,WAAW,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE;EAC7E,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE;EAC1D,IAAI,SAAS,MAAM,OAAO,EAAE,SAAS;EACrC,IAAI,UAA0B;EAC9B,IAAI,QAAsB;EAC1B,IAAI,UAAU;GACZ,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;GAClD,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;GAC9B,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;GACnE,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;EAClC,OAAO;GACL,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE;GAC5D,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;GAChC,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;GACzE,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;EAChC;EACA,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QAAQ,OAAO,EAAE,SAAS,eAAe,GAAG;EACjD,IAAI,SAAS,MAAM,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC1D,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,QAAQ,IAAI,GAAG,GAAG;EAE/E,MAAM,WAAW,WACb,aAAa,QAAQ,KAAK,UAAU,MAAM,OAC1C,aAAa,QAAQ;EACzB,MAAM,SAAS,MAAM,mBAAmB,GAAG;GACzC,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK,SAAS,KAAK,eAAe;GAClC;GACA,cAAc,eAAe,UAAU,SAAS,EAAE;EACpD,CAAC;EACD,IAAI,QAAQ,OAAO;EACnB,OAAO,SAAS,MAAM,SAAS,eAAe,EAAE,SAAS,UAAU,GAAG,IAAI,EAAE,SAAS;CACvF,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,aAAa,KAAK,mBAAmB,QAAQ,EAAE;EAC9F,IAAI,SAAS,MACX,OAAO,EAAE,SAAS;EAEpB,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE,IAAI,MAAM,IAAI,KAAK,KAAA;GAC/D,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU,MAAM,SAAS,SAAS,KAAA;GAC/D,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,MAAM;IAAE;IAAS;GAAS,CAAC,GAAG,GAAG;EACrF;EAEA,OACG,MAAM,mBAAmB,GAAG;GAC3B,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK;GACL;GACA,cAAc;EAChB,CAAC,KAAM,EAAE,SAAS;CAEtB,CAAC;AACH;;AAGA,SAAS,eAAe,UAAmB,QAAyB;CAClE,IAAI,UACF,OAAO;CAET,OAAO,SAAS,uBAAuB;AACzC"}
+{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/routers/storybook.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Build } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { storybookDir } from \"@storyshelf/core/utils\";\nimport { posix } from \"node:path\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { renderStorybookPage, renderStorybookPreparingPage } from \"../pages/storybook.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { publishedAccess } from \"./published-access.ts\";\nimport { publishedRelativePath, servePublishedFile } from \"./published-files.ts\";\n\n/** Check whether a build's extracted statics are available for serving. */\nasync function staticsReady(projectId: string, buildId: string): Promise<boolean> {\n  // New path: manifest.json indicates content-addressed storage; fallback to legacy iframe.html\n  if (\n    await getStore().storage.exists(posix.join(storybookDir(projectId, buildId), \"manifest.json\"))\n  ) {\n    return true;\n  }\n  return await getStore().storage.exists(\n    posix.join(storybookDir(projectId, buildId), \"iframe.html\"),\n  );\n}\n\n/** Register the published Storybook resolver and static-asset routes. */\nexport function registerStorybook(app: ShelfRouter): void {\n  app.get(\"/_\", (c) => c.redirect(\"/\", 302));\n  app.get(\"/_/\", (c) => c.redirect(\"/\", 302));\n\n  // Resolver: latest approved build on the default branch (never feature branches).\n  app.get(\"/projects/:slug/storybook\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n    if (!build) {\n      notFound(\"No approved build on the default branch yet\");\n    }\n    if (!(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${build.id}/`, 302);\n  });\n\n  // Short link canonical is /_/:id/ with trailing slash (so relative ./sb-manager/... resolves).\n  // 26-char ULID → that exact build, whatever its status (visibility check only).\n  // Any other id → project slug → latest approved build on the default branch, else 404\n  // (no fallback to feature-branch or unreviewed builds). No fall-through on ULID.\n  app.get(\"/_/:id\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    if (isUlid26) {\n      const build = await new BuildModel(getStore().db).get(id);\n      if (!build) notFound();\n    } else {\n      const project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) notFound();\n    }\n    return c.redirect(`/_/${id}/`, 302);\n  });\n\n  app.get(\"/_/:id/*\", async (c) => {\n    const id = c.req.param(\"id\");\n    const isUlid26 = id.length === 26 && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(id);\n    const rest = publishedRelativePath(c.req.path, `/_/${id}/`);\n    if (rest === null) return c.notFound();\n    let project: Project | null = null;\n    let build: Build | null = null;\n    if (isUlid26) {\n      build = await new BuildModel(getStore().db).get(id);\n      if (!build) return c.notFound();\n      project = await new ProjectModel(getStore().db).get(build.projectId);\n      if (!project) return c.notFound();\n    } else {\n      project = await new ProjectModel(getStore().db).getBySlug(id);\n      if (!project) return c.notFound();\n      build = await new BuildModel(getStore().db).latestApprovedDefault(project);\n      if (!build) return c.notFound();\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) return c.redirect(\"/auth/login\", 302);\n    if (rest === \"\" && !(await staticsReady(project.id, build.id))) {\n      return c.html(renderStorybookPreparingPage(project, build, project.slug), 200);\n    }\n    const fallback = isUlid26\n      ? `/projects/${project.slug}/builds/${build.id}`\n      : `/projects/${project.slug}`;\n    const served = await servePublishedFile(c, {\n      projectId: project.id,\n      buildId: build.id,\n      rel: rest === \"\" ? \"index.html\" : rest,\n      access,\n      cacheControl: shortLinkCache(isUlid26, rest === \"\"),\n    });\n    if (served) return served;\n    return rest === \"\" || rest === \"index.html\" ? c.redirect(fallback, 302) : c.notFound();\n  });\n\n  // Canonical build route: serves the static Storybook and the landing page.\n  app.get(\"/projects/:slug/storybook/build/:buildId/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // remainder from the raw request path (un-encoded) and decode it ourselves.\n    const rest = publishedRelativePath(c.req.path, `/projects/${slug}/storybook/build/${buildId}/`);\n    if (rest === null) {\n      return c.notFound();\n    }\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      notFound(\"Build not found\");\n    }\n    const access = await publishedAccess(build, project);\n    if (!access) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n\n    if (rest === \"\") {\n      if (!(await staticsReady(project.id, build.id))) {\n        return c.html(renderStorybookPreparingPage(project, build, slug), 200);\n      }\n      const storyId = c.req.query(\"storyId\") ?? c.req.query(\"id\") ?? undefined;\n      const viewMode = c.req.query(\"viewMode\") === \"docs\" ? \"docs\" : undefined;\n      return c.html(renderStorybookPage(project, build, slug, { storyId, viewMode }), 200);\n    }\n\n    return (\n      (await servePublishedFile(c, {\n        projectId: project.id,\n        buildId: build.id,\n        rel: rest,\n        access,\n        cacheControl: \"public, max-age=31536000, immutable\",\n      })) ?? c.notFound()\n    );\n  });\n\n  // Resolver: latest build bearing a label (`build` is a reserved label key).\n  app.get(\"/projects/:slug/storybook/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    if (key === \"build\") {\n      return c.notFound();\n    }\n    let value: string;\n    try {\n      value = decodeURIComponent(c.req.path.split(\"/\").slice(5).join(\"/\"));\n    } catch {\n      return c.notFound();\n    }\n    if (!value) return c.notFound();\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      notFound(\"Project not found\");\n    }\n    const buildId = await new LabelModel(getStore().db).latestBuildId(project.id, key, value);\n    if (!buildId) {\n      notFound(\"No build carries that label\");\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || !(await publishedAccess(build, project))) {\n      return c.redirect(\"/auth/login\", 302);\n    }\n    return c.redirect(`/projects/${slug}/storybook/build/${buildId}/`, 302);\n  });\n}\n\n/** Cache policy of the short link: a ULID names one build forever; a slug follows the latest. */\nfunction shortLinkCache(isUlid26: boolean, isRoot: boolean): string {\n  if (isUlid26) {\n    return \"public, max-age=31536000, immutable\";\n  }\n  return isRoot ? \"public, max-age=60\" : \"public, max-age=3600\";\n}\n"],"mappings":";;;;;;;;;;;;AAeA,eAAe,aAAa,WAAmB,SAAmC;CAEhF,IACE,MAAM,SAAS,CAAC,CAAC,QAAQ,OAAO,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,eAAe,CAAC,GAE7F,OAAO;CAET,OAAO,MAAM,SAAS,CAAC,CAAC,QAAQ,OAC9B,MAAM,KAAK,aAAa,WAAW,OAAO,GAAG,aAAa,CAC5D;AACF;;AAGA,SAAgB,kBAAkB,KAAwB;CACxD,IAAI,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CACzC,IAAI,IAAI,QAAQ,MAAM,EAAE,SAAS,KAAK,GAAG,CAAC;CAG1C,IAAI,IAAI,6BAA6B,OAAO,MAAM;EAChD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;EAC/E,IAAI,CAAC,OACH,SAAS,6CAA6C;EAExD,IAAI,CAAE,MAAM,gBAAgB,OAAO,OAAO,GACxC,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,MAAM,GAAG,IAAI,GAAG;CACzE,CAAC;CAMD,IAAI,IAAI,UAAU,OAAO,MAAM;EAC7B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAE3B,IADiB,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE,GAGvE;OAAA,CAAC,MADe,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAC5C,SAAS;EAAA,OAGrB,IAAI,CAAC,MADiB,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GACpD,SAAS;EAEzB,OAAO,EAAE,SAAS,MAAM,GAAG,IAAI,GAAG;CACpC,CAAC;CAED,IAAI,IAAI,YAAY,OAAO,MAAM;EAC/B,MAAM,KAAK,EAAE,IAAI,MAAM,IAAI;EAC3B,MAAM,WAAW,GAAG,WAAW,MAAM,iCAAiC,KAAK,EAAE;EAC7E,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE;EAC1D,IAAI,SAAS,MAAM,OAAO,EAAE,SAAS;EACrC,IAAI,UAA0B;EAC9B,IAAI,QAAsB;EAC1B,IAAI,UAAU;GACZ,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE;GAClD,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;GAC9B,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;GACnE,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;EAClC,OAAO;GACL,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE;GAC5D,IAAI,CAAC,SAAS,OAAO,EAAE,SAAS;GAChC,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,OAAO;GACzE,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;EAChC;EACA,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QAAQ,OAAO,EAAE,SAAS,eAAe,GAAG;EACjD,IAAI,SAAS,MAAM,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC1D,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,QAAQ,IAAI,GAAG,GAAG;EAE/E,MAAM,WAAW,WACb,aAAa,QAAQ,KAAK,UAAU,MAAM,OAC1C,aAAa,QAAQ;EACzB,MAAM,SAAS,MAAM,mBAAmB,GAAG;GACzC,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK,SAAS,KAAK,eAAe;GAClC;GACA,cAAc,eAAe,UAAU,SAAS,EAAE;EACpD,CAAC;EACD,IAAI,QAAQ,OAAO;EACnB,OAAO,SAAS,MAAM,SAAS,eAAe,EAAE,SAAS,UAAU,GAAG,IAAI,EAAE,SAAS;CACvF,CAAC;CAGD,IAAI,IAAI,8CAA8C,OAAO,MAAM;EACjE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGrC,MAAM,OAAO,sBAAsB,EAAE,IAAI,MAAM,aAAa,KAAK,mBAAmB,QAAQ,EAAE;EAC9F,IAAI,SAAS,MACX,OAAO,EAAE,SAAS;EAEpB,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,SAAS,iBAAiB;EAE5B,MAAM,SAAS,MAAM,gBAAgB,OAAO,OAAO;EACnD,IAAI,CAAC,QACH,OAAO,EAAE,SAAS,eAAe,GAAG;EAGtC,IAAI,SAAS,IAAI;GACf,IAAI,CAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,EAAE,GAC3C,OAAO,EAAE,KAAK,6BAA6B,SAAS,OAAO,IAAI,GAAG,GAAG;GAEvE,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE,IAAI,MAAM,IAAI,KAAK,KAAA;GAC/D,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU,MAAM,SAAS,SAAS,KAAA;GAC/D,OAAO,EAAE,KAAK,oBAAoB,SAAS,OAAO,MAAM;IAAE;IAAS;GAAS,CAAC,GAAG,GAAG;EACrF;EAEA,OACG,MAAM,mBAAmB,GAAG;GAC3B,WAAW,QAAQ;GACnB,SAAS,MAAM;GACf,KAAK;GACL;GACA,cAAc;EAChB,CAAC,KAAM,EAAE,SAAS;CAEtB,CAAC;CAGD,IAAI,IAAI,oCAAoC,OAAO,MAAM;EACvD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAC7B,IAAI,QAAQ,SACV,OAAO,EAAE,SAAS;EAEpB,IAAI;EACJ,IAAI;GACF,QAAQ,mBAAmB,EAAE,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;EACrE,QAAQ;GACN,OAAO,EAAE,SAAS;EACpB;EACA,IAAI,CAAC,OAAO,OAAO,EAAE,SAAS;EAC9B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;EAE9B,MAAM,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,QAAQ,IAAI,KAAK,KAAK;EACxF,IAAI,CAAC,SACH,SAAS,6BAA6B;EAExC,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,CAAE,MAAM,gBAAgB,OAAO,OAAO,GAClD,OAAO,EAAE,SAAS,eAAe,GAAG;EAEtC,OAAO,EAAE,SAAS,aAAa,KAAK,mBAAmB,QAAQ,IAAI,GAAG;CACxE,CAAC;AACH;;AAGA,SAAS,eAAe,UAAmB,QAAyB;CAClE,IAAI,UACF,OAAO;CAET,OAAO,SAAS,uBAAuB;AACzC"}

package/dist/routers/tokens.mjs

@@ -6,7 +6,7 @@ import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
 import { notFound as notFound$1, tokenCreateSchema, tokenCreatedSchema, tokenPublicSchema, unauthorized } from "./schemas.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { TokenModel } from "@storyshelf/core/models";
-//#region src/routers/tokens.ts
+// src/routers/tokens.ts
 const ADMIN_ROLES = ["admin"];
 const listTokensRoute = createRoute({
 	method: "get",
@@ -82,7 +82,6 @@ function registerTokens(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerTokens };
 
 //# sourceMappingURL=tokens.mjs.map

package/dist/routers/ui.mjs

@@ -19,10 +19,11 @@ import { renderProjectBuildsPage } from "../pages/project-builds.mjs";
 import { renderProjectCreatePage } from "../pages/project-create.mjs";
 import { renderProjectsPage } from "../pages/projects.mjs";
 import { renderRootPage } from "../pages/root.mjs";
+import { loadBaselineReference, loadDefaultComparison } from "./baseline-reference.mjs";
 import { loadComponentPage } from "./component.handlers.mjs";
 import { registerSettingsPages } from "./settings.mjs";
 import { BuildModel, CommentModel, LabelModel, ProjectModel, SnapshotModel } from "@storyshelf/core/models";
-//#region src/routers/ui.ts
+// src/routers/ui.ts
 function asString(value) {
 	return typeof value === "string" ? value.trim() : void 0;
 }
@@ -145,6 +146,8 @@ function registerUiPages(app) {
 			canReview,
 			hasBaseline,
 			drifted,
+			reference: selected ? await loadBaselineReference(project, build, selected) : void 0,
+			defaultComparison: selected ? await loadDefaultComparison(project, build, selected) : null,
 			insight: await loadInsightPanel(project, build),
 			design,
 			usage: await linkedUsageFor(c, project, build.id, selectedSnapshot(snapshots, snapshotId)?.storyImportPath ?? null).catch(() => []),
@@ -189,7 +192,6 @@ async function loadBuildUsage(c, buildId) {
 		return /* @__PURE__ */ new Map();
 	}
 }
-//#endregion
 export { registerUiPages };
 
 //# sourceMappingURL=ui.mjs.map

package/dist/routers/ui.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ui.mjs","names":[],"sources":["../../src/routers/ui.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { CommentModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { loadInsightPanel } from \"../insights/panel.ts\";\nimport { renderBuildDetailPage } from \"../pages/build-detail.tsx\";\nimport type { LinkedUsageItem } from \"../pages/build-diff-usage.tsx\";\nimport { renderBuildDiffPage, selectedSnapshot } from \"../pages/build-diff.tsx\";\nimport { renderComponentPage } from \"../pages/component-detail.tsx\";\nimport { renderComputeJobsPage, renderActiveQueue } from \"../pages/compute-jobs.tsx\";\nimport { renderLabelDetailPage, renderLabelsPage } from \"../pages/label-detail.tsx\";\nimport { renderLibraryPage } from \"../pages/library.tsx\";\nimport { renderProjectBuildsPage } from \"../pages/project-builds.tsx\";\nimport { renderProjectCreatePage } from \"../pages/project-create.tsx\";\nimport { renderProjectsPage } from \"../pages/projects.tsx\";\nimport { renderRootPage } from \"../pages/root.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { loadBaselineView } from \"./baseline-guard.ts\";\nimport { loadComponentPage } from \"./component.handlers.ts\";\nimport {\n  designUrlsFor,\n  loadDesignResolutions,\n  loadReviewDesign,\n  returnPathOf,\n} from \"./design.handlers.ts\";\nimport { flash } from \"./flash.ts\";\nimport { currentProjectRole } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { linkedUsageByStory, linkedUsageFor } from \"./links.handlers.ts\";\nimport { registerSettingsPages } from \"./settings.ts\";\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction decodeRest(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return \"\";\n  }\n}\n\ninterface QueueView {\n  buildId: string;\n  status: string;\n  queuedAt: string;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nasync function getQueueView(): Promise<QueueView[]> {\n  const queue = getStore().captureQueue;\n  if (!queue) {\n    return [];\n  }\n  const active = await queue.active();\n  return active.map((entry) => ({\n    buildId: entry.buildId,\n    status: entry.status,\n    queuedAt: entry.queuedAt,\n    startedAt: entry.startedAt,\n    finishedAt: entry.finishedAt,\n    error: entry.error,\n  }));\n}\n\nasync function canManageJobs(projectId: string): Promise<boolean> {\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const roles: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n  const role = await currentProjectRole(projectId);\n  return Boolean(role && roles.includes(role));\n}\n\n/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */\nexport function registerUiPages(app: ShelfRouter): void {\n  // eslint-disable-next-line promise-function-async -- renderRootPage returns RenderedContent (string | Promise<string>)\n  app.get(\"/\", async (c) => c.html(await renderRootPage()));\n  app.get(\"/projects\", async (c) => c.html(await renderProjectsPage()));\n  // eslint-disable-next-line promise-function-async -- renderProjectCreatePage returns RenderedContent (string | Promise<string>)\n  app.get(\"/projects/new\", async (c) => c.html(await renderProjectCreatePage()));\n\n  app.post(\"/projects/new\", async (c) => {\n    const form = await c.req.formData();\n    const name = asString(form.get(\"name\"));\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    if (!name) {\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          errors: { name: \"Name is required\" },\n        }),\n        400,\n      );\n    }\n    try {\n      const project = await new ProjectModel(getStore().db).create({\n        name,\n        gitRepository,\n        gitDefaultBranch,\n      });\n      await new LabelModel(getStore().db).seedFor(project.id);\n      flash(c, `Created ${project.name}`);\n      return hxRedirect(c, `/projects/${project.slug}/library`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create project\";\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          globalError: message,\n        }),\n        400,\n      );\n    }\n  });\n\n  app.get(\"/projects/:slug\", (c) => c.redirect(`/projects/${c.req.param(\"slug\")}/library`, 302));\n\n  app.get(\"/projects/:slug/builds\", async (c) => {\n    const html = await renderProjectBuildsPage(c.req.param(\"slug\"), {\n      status: c.req.query(\"status\"),\n      branch: c.req.query(\"branch\"),\n    });\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId\", async (c) => {\n    const buildId = c.req.param(\"buildId\");\n    const html = await renderBuildDetailPage(buildId, await loadBuildUsage(c, buildId));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/jobs\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const queueView = await getQueueView();\n    const canRetry = await canManageJobs(project.id);\n    if (c.req.query(\"partial\") === \"queue\") {\n      return c.html(renderActiveQueue(slug, queueView));\n    }\n    const html = await renderComputeJobsPage(slug, queueView, canRetry);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId/diff\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    const snapshotId = c.req.query(\"snapshot\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      return c.notFound();\n    }\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const comments = await new CommentModel(getStore().db).listByBuild(build.id);\n    const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);\n    const { user, authEnabled } = getStore();\n    const canReview = !authEnabled || Boolean(user);\n    const selected = selectedSnapshot(snapshots, snapshotId);\n    const design = selected\n      ? await loadReviewDesign(\n          project,\n          selected,\n          designUrlsFor(await loadDesignResolutions(project, snapshots), selected),\n          returnPathOf(c),\n        ).catch(() => [])\n      : [];\n    return c.html(\n      renderBuildDiffPage({\n        project,\n        build,\n        snapshots,\n        comments,\n        selectedId: snapshotId,\n        canReview,\n        hasBaseline,\n        drifted,\n        insight: await loadInsightPanel(project, build),\n        design,\n        usage: await linkedUsageFor(\n          c,\n          project,\n          build.id,\n          selectedSnapshot(snapshots, snapshotId)?.storyImportPath ?? null,\n        ).catch(() => []),\n        publishedBaseDomain: getStore().config.publishedBaseDomain,\n      }),\n    );\n  });\n\n  app.get(\"/projects/:slug/labels\", async (c) => {\n    const html = await renderLabelsPage(c.req.param(\"slug\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/labels/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // label value from the raw request path and decode it ourselves.\n    const base = `/projects/${slug}/labels/${key}/`;\n    const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const html = await renderLabelDetailPage(slug, key, value);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/components/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const base = `/projects/${slug}/components/`;\n    const path = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const data = await loadComponentPage(c, slug, path, c.req.query(\"tab\"), c.req.query(\"story\"));\n    return data ? c.html(renderComponentPage(data)) : c.notFound();\n  });\n\n  app.get(\"/projects/:slug/library\", async (c) => {\n    const html = await renderLibraryPage(c.req.param(\"slug\"), c.req.query(\"branch\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  registerSettingsPages(app);\n}\n\n/** Linked-package usage for every story of a build; empty on any failure so the page still renders. */\nasync function loadBuildUsage(\n  c: Context,\n  buildId: string,\n): Promise<Map<string, LinkedUsageItem[]>> {\n  try {\n    const build = await new BuildModel(getStore().db).get(buildId);\n    const project = build ? await new ProjectModel(getStore().db).get(build.projectId) : null;\n    return build && project ? await linkedUsageByStory(c, project, build.id) : new Map();\n  } catch {\n    return new Map();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO;CACT;AACF;AAWA,eAAe,eAAqC;CAClD,MAAM,QAAQ,SAAS,CAAC,CAAC;CACzB,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,QAAO,MADc,MAAM,OAAO,EAAA,CACpB,KAAK,WAAW;EAC5B,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,OAAO,MAAM;CACf,EAAE;AACJ;AAEA,eAAe,cAAc,WAAqC;CAChE,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,QAAgC;EAAC;EAAa;EAAY;CAAO;CACvE,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,OAAO,QAAQ,QAAQ,MAAM,SAAS,IAAI,CAAC;AAC7C;;AAGA,SAAgB,gBAAgB,KAAwB;CAEtD,IAAI,IAAI,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,eAAe,CAAC,CAAC;CACxD,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,CAAC,CAAC;CAEpE,IAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,MAAM,wBAAwB,CAAC,CAAC;CAE7E,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,IAAI,CAAC,MACH,OAAO,EAAE,KACP,wBAAwB;GACtB,QAAQ;IAAE;IAAM;IAAe;GAAiB;GAChD,QAAQ,EAAE,MAAM,mBAAmB;EACrC,CAAC,GACD,GACF;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO;IAC3D;IACA;IACA;GACF,CAAC;GACD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACtD,MAAM,GAAG,WAAW,QAAQ,MAAM;GAClC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,SAAS;EAC1D,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KACP,wBAAwB;IACtB,QAAQ;KAAE;KAAM;KAAe;IAAiB;IAChD,aAAa;GACf,CAAC,GACD,GACF;EACF;CACF,CAAC;CAED,IAAI,IAAI,oBAAoB,MAAM,EAAE,SAAS,aAAa,EAAE,IAAI,MAAM,MAAM,EAAE,WAAW,GAAG,CAAC;CAE7F,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,wBAAwB,EAAE,IAAI,MAAM,MAAM,GAAG;GAC9D,QAAQ,EAAE,IAAI,MAAM,QAAQ;GAC5B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC9B,CAAC;EACD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,mCAAmC,OAAO,MAAM;EACtD,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,OAAO,MAAM,sBAAsB,SAAS,MAAM,eAAe,GAAG,OAAO,CAAC;EAClF,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wBAAwB,OAAO,MAAM;EAC3C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,WAAW,MAAM,cAAc,QAAQ,EAAE;EAC/C,IAAI,EAAE,IAAI,MAAM,SAAS,MAAM,SAC7B,OAAO,EAAE,KAAK,kBAAkB,MAAM,SAAS,CAAC;EAElD,MAAM,OAAO,MAAM,sBAAsB,MAAM,WAAW,QAAQ;EAClE,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC3D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU;EACzC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC3E,MAAM,EAAE,aAAa,YAAY,MAAM,iBAAiB,SAAS,OAAO,SAAS;EACjF,MAAM,EAAE,MAAM,gBAAgB,SAAS;EACvC,MAAM,YAAY,CAAC,eAAe,QAAQ,IAAI;EAC9C,MAAM,WAAW,iBAAiB,WAAW,UAAU;EACvD,MAAM,SAAS,WACX,MAAM,iBACJ,SACA,UACA,cAAc,MAAM,sBAAsB,SAAS,SAAS,GAAG,QAAQ,GACvE,aAAa,CAAC,CAChB,CAAC,CAAC,YAAY,CAAC,CAAC,IAChB,CAAC;EACL,OAAO,EAAE,KACP,oBAAoB;GAClB;GACA;GACA;GACA;GACA,YAAY;GACZ;GACA;GACA;GACA,SAAS,MAAM,iBAAiB,SAAS,KAAK;GAC9C;GACA,OAAO,MAAM,eACX,GACA,SACA,MAAM,IACN,iBAAiB,WAAW,UAAU,CAAC,EAAE,mBAAmB,IAC9D,CAAC,CAAC,YAAY,CAAC,CAAC;GAChB,qBAAqB,SAAS,CAAC,CAAC,OAAO;EACzC,CAAC,CACH;CACF,CAAC;CAED,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM,CAAC;EACvD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACpD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAG7B,MAAM,OAAO,aAAa,KAAK,UAAU,IAAI;EAC7C,MAAM,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACxF,MAAM,OAAO,MAAM,sBAAsB,MAAM,KAAK,KAAK;EACzD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,gCAAgC,OAAO,MAAM;EACnD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,OAAO,aAAa,KAAK;EAC/B,MAAM,OAAO,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACvF,MAAM,OAAO,MAAM,kBAAkB,GAAG,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC;EAC5F,OAAO,OAAO,EAAE,KAAK,oBAAoB,IAAI,CAAC,IAAI,EAAE,SAAS;CAC/D,CAAC;CAED,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,OAAO,MAAM,kBAAkB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/E,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,sBAAsB,GAAG;AAC3B;;AAGA,eAAe,eACb,GACA,SACyC;CACzC,IAAI;EACF,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,MAAM,UAAU,QAAQ,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS,IAAI;EACrF,OAAO,SAAS,UAAU,MAAM,mBAAmB,GAAG,SAAS,MAAM,EAAE,oBAAI,IAAI,IAAI;CACrF,QAAQ;EACN,uBAAO,IAAI,IAAI;CACjB;AACF"}
+{"version":3,"file":"ui.mjs","names":[],"sources":["../../src/routers/ui.ts"],"sourcesContent":["import { BuildModel } from \"@storyshelf/core/models\";\nimport { CommentModel } from \"@storyshelf/core/models\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { SnapshotModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { loadInsightPanel } from \"../insights/panel.ts\";\nimport { renderBuildDetailPage } from \"../pages/build-detail.tsx\";\nimport type { LinkedUsageItem } from \"../pages/build-diff-usage.tsx\";\nimport { renderBuildDiffPage, selectedSnapshot } from \"../pages/build-diff.tsx\";\nimport { renderComponentPage } from \"../pages/component-detail.tsx\";\nimport { renderComputeJobsPage, renderActiveQueue } from \"../pages/compute-jobs.tsx\";\nimport { renderLabelDetailPage, renderLabelsPage } from \"../pages/label-detail.tsx\";\nimport { renderLibraryPage } from \"../pages/library.tsx\";\nimport { renderProjectBuildsPage } from \"../pages/project-builds.tsx\";\nimport { renderProjectCreatePage } from \"../pages/project-create.tsx\";\nimport { renderProjectsPage } from \"../pages/projects.tsx\";\nimport { renderRootPage } from \"../pages/root.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { loadBaselineView } from \"./baseline-guard.ts\";\nimport { loadBaselineReference, loadDefaultComparison } from \"./baseline-reference.ts\";\nimport { loadComponentPage } from \"./component.handlers.ts\";\nimport {\n  designUrlsFor,\n  loadDesignResolutions,\n  loadReviewDesign,\n  returnPathOf,\n} from \"./design.handlers.ts\";\nimport { flash } from \"./flash.ts\";\nimport { currentProjectRole } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { linkedUsageByStory, linkedUsageFor } from \"./links.handlers.ts\";\nimport { registerSettingsPages } from \"./settings.ts\";\nfunction asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n\nfunction decodeRest(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return \"\";\n  }\n}\n\ninterface QueueView {\n  buildId: string;\n  status: string;\n  queuedAt: string;\n  startedAt?: string;\n  finishedAt?: string;\n  error?: string;\n}\n\nasync function getQueueView(): Promise<QueueView[]> {\n  const queue = getStore().captureQueue;\n  if (!queue) {\n    return [];\n  }\n  const active = await queue.active();\n  return active.map((entry) => ({\n    buildId: entry.buildId,\n    status: entry.status,\n    queuedAt: entry.queuedAt,\n    startedAt: entry.startedAt,\n    finishedAt: entry.finishedAt,\n    error: entry.error,\n  }));\n}\n\nasync function canManageJobs(projectId: string): Promise<boolean> {\n  const { authEnabled } = getStore();\n  if (!authEnabled) {\n    return true;\n  }\n  const roles: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n  const role = await currentProjectRole(projectId);\n  return Boolean(role && roles.includes(role));\n}\n\n/** Register the server-rendered HTML pages (projects, builds, diffs, labels, settings). */\nexport function registerUiPages(app: ShelfRouter): void {\n  // eslint-disable-next-line promise-function-async -- renderRootPage returns RenderedContent (string | Promise<string>)\n  app.get(\"/\", async (c) => c.html(await renderRootPage()));\n  app.get(\"/projects\", async (c) => c.html(await renderProjectsPage()));\n  // eslint-disable-next-line promise-function-async -- renderProjectCreatePage returns RenderedContent (string | Promise<string>)\n  app.get(\"/projects/new\", async (c) => c.html(await renderProjectCreatePage()));\n\n  app.post(\"/projects/new\", async (c) => {\n    const form = await c.req.formData();\n    const name = asString(form.get(\"name\"));\n    const gitRepository = asString(form.get(\"gitRepository\"));\n    const gitDefaultBranch = asString(form.get(\"gitDefaultBranch\"));\n    if (!name) {\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          errors: { name: \"Name is required\" },\n        }),\n        400,\n      );\n    }\n    try {\n      const project = await new ProjectModel(getStore().db).create({\n        name,\n        gitRepository,\n        gitDefaultBranch,\n      });\n      await new LabelModel(getStore().db).seedFor(project.id);\n      flash(c, `Created ${project.name}`);\n      return hxRedirect(c, `/projects/${project.slug}/library`);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : \"Failed to create project\";\n      return c.html(\n        renderProjectCreatePage({\n          values: { name, gitRepository, gitDefaultBranch },\n          globalError: message,\n        }),\n        400,\n      );\n    }\n  });\n\n  app.get(\"/projects/:slug\", (c) => c.redirect(`/projects/${c.req.param(\"slug\")}/library`, 302));\n\n  app.get(\"/projects/:slug/builds\", async (c) => {\n    const html = await renderProjectBuildsPage(c.req.param(\"slug\"), {\n      status: c.req.query(\"status\"),\n      branch: c.req.query(\"branch\"),\n    });\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId\", async (c) => {\n    const buildId = c.req.param(\"buildId\");\n    const html = await renderBuildDetailPage(buildId, await loadBuildUsage(c, buildId));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/jobs\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const queueView = await getQueueView();\n    const canRetry = await canManageJobs(project.id);\n    if (c.req.query(\"partial\") === \"queue\") {\n      return c.html(renderActiveQueue(slug, queueView));\n    }\n    const html = await renderComputeJobsPage(slug, queueView, canRetry);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/builds/:buildId/diff\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const buildId = c.req.param(\"buildId\");\n    const snapshotId = c.req.query(\"snapshot\");\n    const project = await new ProjectModel(getStore().db).getBySlug(slug);\n    if (!project) {\n      return c.notFound();\n    }\n    const build = await new BuildModel(getStore().db).get(buildId);\n    if (!build || build.projectId !== project.id) {\n      return c.notFound();\n    }\n    const snapshots = await new SnapshotModel(getStore().db).listByBuild(build.id);\n    const comments = await new CommentModel(getStore().db).listByBuild(build.id);\n    const { hasBaseline, drifted } = await loadBaselineView(project, build, snapshots);\n    const { user, authEnabled } = getStore();\n    const canReview = !authEnabled || Boolean(user);\n    const selected = selectedSnapshot(snapshots, snapshotId);\n    const design = selected\n      ? await loadReviewDesign(\n          project,\n          selected,\n          designUrlsFor(await loadDesignResolutions(project, snapshots), selected),\n          returnPathOf(c),\n        ).catch(() => [])\n      : [];\n    return c.html(\n      renderBuildDiffPage({\n        project,\n        build,\n        snapshots,\n        comments,\n        selectedId: snapshotId,\n        canReview,\n        hasBaseline,\n        drifted,\n        reference: selected ? await loadBaselineReference(project, build, selected) : undefined,\n        defaultComparison: selected ? await loadDefaultComparison(project, build, selected) : null,\n        insight: await loadInsightPanel(project, build),\n        design,\n        usage: await linkedUsageFor(\n          c,\n          project,\n          build.id,\n          selectedSnapshot(snapshots, snapshotId)?.storyImportPath ?? null,\n        ).catch(() => []),\n        publishedBaseDomain: getStore().config.publishedBaseDomain,\n      }),\n    );\n  });\n\n  app.get(\"/projects/:slug/labels\", async (c) => {\n    const html = await renderLabelsPage(c.req.param(\"slug\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/labels/:key/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const key = c.req.param(\"key\");\n    // Hono's bare `/*` wildcard is not exposed through `param()`, so derive the\n    // label value from the raw request path and decode it ourselves.\n    const base = `/projects/${slug}/labels/${key}/`;\n    const value = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const html = await renderLabelDetailPage(slug, key, value);\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  app.get(\"/projects/:slug/components/*\", async (c) => {\n    const slug = c.req.param(\"slug\");\n    const base = `/projects/${slug}/components/`;\n    const path = c.req.path.startsWith(base) ? decodeRest(c.req.path.slice(base.length)) : \"\";\n    const data = await loadComponentPage(c, slug, path, c.req.query(\"tab\"), c.req.query(\"story\"));\n    return data ? c.html(renderComponentPage(data)) : c.notFound();\n  });\n\n  app.get(\"/projects/:slug/library\", async (c) => {\n    const html = await renderLibraryPage(c.req.param(\"slug\"), c.req.query(\"branch\"));\n    if (!html) {\n      return c.notFound();\n    }\n    return c.html(html);\n  });\n\n  registerSettingsPages(app);\n}\n\n/** Linked-package usage for every story of a build; empty on any failure so the page still renders. */\nasync function loadBuildUsage(\n  c: Context,\n  buildId: string,\n): Promise<Map<string, LinkedUsageItem[]>> {\n  try {\n    const build = await new BuildModel(getStore().db).get(buildId);\n    const project = build ? await new ProjectModel(getStore().db).get(build.projectId) : null;\n    return build && project ? await linkedUsageByStory(c, project, build.id) : new Map();\n  } catch {\n    return new Map();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,SAAS,SAAS,OAAsD;CACtE,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD;AAEA,SAAS,WAAW,OAAuB;CACzC,IAAI;EACF,OAAO,mBAAmB,KAAK;CACjC,QAAQ;EACN,OAAO;CACT;AACF;AAWA,eAAe,eAAqC;CAClD,MAAM,QAAQ,SAAS,CAAC,CAAC;CACzB,IAAI,CAAC,OACH,OAAO,CAAC;CAGV,QAAO,MADc,MAAM,OAAO,EAAA,CACpB,KAAK,WAAW;EAC5B,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,OAAO,MAAM;CACf,EAAE;AACJ;AAEA,eAAe,cAAc,WAAqC;CAChE,MAAM,EAAE,gBAAgB,SAAS;CACjC,IAAI,CAAC,aACH,OAAO;CAET,MAAM,QAAgC;EAAC;EAAa;EAAY;CAAO;CACvE,MAAM,OAAO,MAAM,mBAAmB,SAAS;CAC/C,OAAO,QAAQ,QAAQ,MAAM,SAAS,IAAI,CAAC;AAC7C;;AAGA,SAAgB,gBAAgB,KAAwB;CAEtD,IAAI,IAAI,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,eAAe,CAAC,CAAC;CACxD,IAAI,IAAI,aAAa,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,CAAC,CAAC;CAEpE,IAAI,IAAI,iBAAiB,OAAO,MAAM,EAAE,KAAK,MAAM,wBAAwB,CAAC,CAAC;CAE7E,IAAI,KAAK,iBAAiB,OAAO,MAAM;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,gBAAgB,SAAS,KAAK,IAAI,eAAe,CAAC;EACxD,MAAM,mBAAmB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EAC9D,IAAI,CAAC,MACH,OAAO,EAAE,KACP,wBAAwB;GACtB,QAAQ;IAAE;IAAM;IAAe;GAAiB;GAChD,QAAQ,EAAE,MAAM,mBAAmB;EACrC,CAAC,GACD,GACF;EAEF,IAAI;GACF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO;IAC3D;IACA;IACA;GACF,CAAC;GACD,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE;GACtD,MAAM,GAAG,WAAW,QAAQ,MAAM;GAClC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,SAAS;EAC1D,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;GACzD,OAAO,EAAE,KACP,wBAAwB;IACtB,QAAQ;KAAE;KAAM;KAAe;IAAiB;IAChD,aAAa;GACf,CAAC,GACD,GACF;EACF;CACF,CAAC;CAED,IAAI,IAAI,oBAAoB,MAAM,EAAE,SAAS,aAAa,EAAE,IAAI,MAAM,MAAM,EAAE,WAAW,GAAG,CAAC;CAE7F,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,wBAAwB,EAAE,IAAI,MAAM,MAAM,GAAG;GAC9D,QAAQ,EAAE,IAAI,MAAM,QAAQ;GAC5B,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAC9B,CAAC;EACD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,mCAAmC,OAAO,MAAM;EACtD,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,OAAO,MAAM,sBAAsB,SAAS,MAAM,eAAe,GAAG,OAAO,CAAC;EAClF,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wBAAwB,OAAO,MAAM;EAC3C,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,WAAW,MAAM,cAAc,QAAQ,EAAE;EAC/C,IAAI,EAAE,IAAI,MAAM,SAAS,MAAM,SAC7B,OAAO,EAAE,KAAK,kBAAkB,MAAM,SAAS,CAAC;EAElD,MAAM,OAAO,MAAM,sBAAsB,MAAM,WAAW,QAAQ;EAClE,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,wCAAwC,OAAO,MAAM;EAC3D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EACrC,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU;EACzC,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;EACpE,IAAI,CAAC,SACH,OAAO,EAAE,SAAS;EAEpB,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,QAAQ,IACxC,OAAO,EAAE,SAAS;EAEpB,MAAM,YAAY,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE;EAC3E,MAAM,EAAE,aAAa,YAAY,MAAM,iBAAiB,SAAS,OAAO,SAAS;EACjF,MAAM,EAAE,MAAM,gBAAgB,SAAS;EACvC,MAAM,YAAY,CAAC,eAAe,QAAQ,IAAI;EAC9C,MAAM,WAAW,iBAAiB,WAAW,UAAU;EACvD,MAAM,SAAS,WACX,MAAM,iBACJ,SACA,UACA,cAAc,MAAM,sBAAsB,SAAS,SAAS,GAAG,QAAQ,GACvE,aAAa,CAAC,CAChB,CAAC,CAAC,YAAY,CAAC,CAAC,IAChB,CAAC;EACL,OAAO,EAAE,KACP,oBAAoB;GAClB;GACA;GACA;GACA;GACA,YAAY;GACZ;GACA;GACA;GACA,WAAW,WAAW,MAAM,sBAAsB,SAAS,OAAO,QAAQ,IAAI,KAAA;GAC9E,mBAAmB,WAAW,MAAM,sBAAsB,SAAS,OAAO,QAAQ,IAAI;GACtF,SAAS,MAAM,iBAAiB,SAAS,KAAK;GAC9C;GACA,OAAO,MAAM,eACX,GACA,SACA,MAAM,IACN,iBAAiB,WAAW,UAAU,CAAC,EAAE,mBAAmB,IAC9D,CAAC,CAAC,YAAY,CAAC,CAAC;GAChB,qBAAqB,SAAS,CAAC,CAAC,OAAO;EACzC,CAAC,CACH;CACF,CAAC;CAED,IAAI,IAAI,0BAA0B,OAAO,MAAM;EAC7C,MAAM,OAAO,MAAM,iBAAiB,EAAE,IAAI,MAAM,MAAM,CAAC;EACvD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,iCAAiC,OAAO,MAAM;EACpD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK;EAG7B,MAAM,OAAO,aAAa,KAAK,UAAU,IAAI;EAC7C,MAAM,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACxF,MAAM,OAAO,MAAM,sBAAsB,MAAM,KAAK,KAAK;EACzD,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,IAAI,IAAI,gCAAgC,OAAO,MAAM;EACnD,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAC/B,MAAM,OAAO,aAAa,KAAK;EAC/B,MAAM,OAAO,EAAE,IAAI,KAAK,WAAW,IAAI,IAAI,WAAW,EAAE,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,IAAI;EACvF,MAAM,OAAO,MAAM,kBAAkB,GAAG,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE,IAAI,MAAM,OAAO,CAAC;EAC5F,OAAO,OAAO,EAAE,KAAK,oBAAoB,IAAI,CAAC,IAAI,EAAE,SAAS;CAC/D,CAAC;CAED,IAAI,IAAI,2BAA2B,OAAO,MAAM;EAC9C,MAAM,OAAO,MAAM,kBAAkB,EAAE,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/E,IAAI,CAAC,MACH,OAAO,EAAE,SAAS;EAEpB,OAAO,EAAE,KAAK,IAAI;CACpB,CAAC;CAED,sBAAsB,GAAG;AAC3B;;AAGA,eAAe,eACb,GACA,SACyC;CACzC,IAAI;EACF,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;EAC7D,MAAM,UAAU,QAAQ,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS,IAAI;EACrF,OAAO,SAAS,UAAU,MAAM,mBAAmB,GAAG,SAAS,MAAM,EAAE,oBAAI,IAAI,IAAI;CACrF,QAAQ;EACN,uBAAO,IAAI,IAAI;CACjB;AACF"}

package/dist/routers/webhooks.mjs

@@ -6,7 +6,7 @@ import { notFound as notFound$1, unauthorized, webhookCreateSchema, webhookCreat
 import { webhookModel } from "./scoped-models.mjs";
 import { createRoute, z } from "@hono/zod-openapi";
 import { WebhookModel } from "@storyshelf/core/models";
-//#region src/routers/webhooks.ts
+// src/routers/webhooks.ts
 const ADMIN_ROLES = ["admin"];
 const listWebhooksRoute = createRoute({
 	method: "get",
@@ -85,7 +85,6 @@ function registerWebhooks(app) {
 		return c.body(null, 204);
 	});
 }
-//#endregion
 export { registerWebhooks };
 
 //# sourceMappingURL=webhooks.mjs.map