@storyshelf/core 0.3.2 → 0.5.4

package/dist/pages/storybook.mjs

@@ -1,96 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { getStore } from "../store.mjs";
-//#region src/pages/storybook.tsx
-/**
-* Placeholder shown while a build's statics are not yet available.
-* Refreshes itself; once extraction lands, the route serves the live page.
-*/
-function renderStorybookPreparingPage(project, build, slug) {
-	const { ui } = getStore();
-	const name = ui.name ?? "StoryShelf";
-	return `<!doctype html>
-<html lang="en" data-theme="system">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <meta http-equiv="refresh" content="5" />
-    <title>${escapeHtml(project.name)} Storybook · ${name}</title>
-    <style>
-      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }
-      header { display: flex; align-items: center; gap: .75rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); }
-      header a { color: inherit; text-decoration: none; }
-      header .crumb { opacity: .7; }
-      main { flex: 1; display: flex; align-items: center; justify-content: center; opacity: .7; }
-    </style>
-  </head>
-  <body>
-    <header>
-      <a href="/">${name}</a>
-      <span class="crumb">/</span>
-      <a href="/projects/${escapeAttr(slug)}/builds">${escapeHtml(project.name)}</a>
-      <span class="crumb">/</span>
-      <span>${escapeHtml(build.gitBranch)}</span>
-      <span class="crumb">· ${build.gitSha.slice(0, 7)}</span>
-    </header>
-    <main>
-      <p>Preparing preview — this page refreshes automatically. <a href="/projects/${escapeAttr(slug)}/builds/${escapeAttr(build.id)}">View build status</a></p>
-    </main>
-  </body>
-</html>`;
-}
-/**
-* Landing page for a published Storybook build. Presents the live Storybook
-* (via an iframe against the same build's statics) with the project chrome, so
-* the URL is shareable with designers/managers (ADR 0011).
-*/
-function renderStorybookPage(project, build, slug) {
-	const { ui } = getStore();
-	const name = ui.name ?? "StoryShelf";
-	return `<!doctype html>
-<html lang="en" data-theme="system">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>${escapeHtml(project.name)} Storybook · ${name}</title>
-    <style>
-      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }
-      header { display: flex; align-items: center; gap: .75rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); }
-      header a { color: inherit; text-decoration: none; }
-      header .crumb { opacity: .7; }
-      header .branch { font-weight: 600; }
-      iframe { flex: 1; border: 0; width: 100%; }
-    </style>
-  </head>
-  <body>
-    <header>
-      <a href="/">${name}</a>
-      <span class="crumb">/</span>
-      <a href="/projects/${escapeAttr(slug)}/builds">${escapeHtml(project.name)}</a>
-      <span class="crumb">/</span>
-      <span class="branch">${escapeHtml(build.gitBranch)}</span>
-      <span class="crumb">· ${build.gitSha.slice(0, 7)}</span>
-    </header>
-    <iframe src="${escapeAttr(`./iframe.html`)}" title="${escapeAttr(project.name)} Storybook"></iframe>
-  </body>
-</html>`;
-}
-function escapeHtml(value) {
-	return value.replaceAll(/[&<>"']/gu, (ch) => {
-		switch (ch) {
-			case "&": return "&amp;";
-			case "<": return "&lt;";
-			case ">": return "&gt;";
-			case "\"": return "&quot;";
-			default: return "&#39;";
-		}
-	});
-}
-function escapeAttr(value) {
-	return escapeHtml(value);
-}
-//#endregion
-export { renderStorybookPage, renderStorybookPreparingPage };
-
-//# sourceMappingURL=storybook.mjs.map

package/dist/pages/storybook.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/pages/storybook.tsx"],"sourcesContent":["import type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { getStore } from \"../store.ts\";\n\n/**\n * Placeholder shown while a build's statics are not yet available.\n * Refreshes itself; once extraction lands, the route serves the live page.\n */\nexport function renderStorybookPreparingPage(project: Project, build: Build, slug: string): string {\n  const { ui } = getStore();\n  const name = ui.name ?? \"StoryShelf\";\n  return `<!doctype html>\n<html lang=\"en\" data-theme=\"system\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <meta http-equiv=\"refresh\" content=\"5\" />\n    <title>${escapeHtml(project.name)} Storybook · ${name}</title>\n    <style>\n      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }\n      header { display: flex; align-items: center; gap: .75rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); }\n      header a { color: inherit; text-decoration: none; }\n      header .crumb { opacity: .7; }\n      main { flex: 1; display: flex; align-items: center; justify-content: center; opacity: .7; }\n    </style>\n  </head>\n  <body>\n    <header>\n      <a href=\"/\">${name}</a>\n      <span class=\"crumb\">/</span>\n      <a href=\"/projects/${escapeAttr(slug)}/builds\">${escapeHtml(project.name)}</a>\n      <span class=\"crumb\">/</span>\n      <span>${escapeHtml(build.gitBranch)}</span>\n      <span class=\"crumb\">· ${build.gitSha.slice(0, 7)}</span>\n    </header>\n    <main>\n      <p>Preparing preview — this page refreshes automatically. <a href=\"/projects/${escapeAttr(slug)}/builds/${escapeAttr(build.id)}\">View build status</a></p>\n    </main>\n  </body>\n</html>`;\n}\n/**\n * Landing page for a published Storybook build. Presents the live Storybook\n * (via an iframe against the same build's statics) with the project chrome, so\n * the URL is shareable with designers/managers (ADR 0011).\n */\nexport function renderStorybookPage(project: Project, build: Build, slug: string): string {\n  const { ui } = getStore();\n  const name = ui.name ?? \"StoryShelf\";\n  const iframeSrc = `./iframe.html`;\n  return `<!doctype html>\n<html lang=\"en\" data-theme=\"system\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>${escapeHtml(project.name)} Storybook · ${name}</title>\n    <style>\n      html, body { margin: 0; height: 100%; display: flex; flex-direction: column; font-family: system-ui, sans-serif; }\n      header { display: flex; align-items: center; gap: .75rem; padding: .5rem 1rem; border-bottom: 1px solid var(--border, #ddd); }\n      header a { color: inherit; text-decoration: none; }\n      header .crumb { opacity: .7; }\n      header .branch { font-weight: 600; }\n      iframe { flex: 1; border: 0; width: 100%; }\n    </style>\n  </head>\n  <body>\n    <header>\n      <a href=\"/\">${name}</a>\n      <span class=\"crumb\">/</span>\n      <a href=\"/projects/${escapeAttr(slug)}/builds\">${escapeHtml(project.name)}</a>\n      <span class=\"crumb\">/</span>\n      <span class=\"branch\">${escapeHtml(build.gitBranch)}</span>\n      <span class=\"crumb\">· ${build.gitSha.slice(0, 7)}</span>\n    </header>\n    <iframe src=\"${escapeAttr(iframeSrc)}\" title=\"${escapeAttr(project.name)} Storybook\"></iframe>\n  </body>\n</html>`;\n}\n\nfunction escapeHtml(value: string): string {\n  return value.replaceAll(/[&<>\"']/gu, (ch) => {\n    switch (ch) {\n      case \"&\": {\n        return \"&amp;\";\n      }\n      case \"<\": {\n        return \"&lt;\";\n      }\n      case \">\": {\n        return \"&gt;\";\n      }\n      case '\"': {\n        return \"&quot;\";\n      }\n      default: {\n        return \"&#39;\";\n      }\n    }\n  });\n}\n\nfunction escapeAttr(value: string): string {\n  return escapeHtml(value);\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,6BAA6B,SAAkB,OAAc,MAAsB;CACjG,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,OAAO,GAAG,QAAQ;CACxB,OAAO;;;;;;aAMI,WAAW,QAAQ,IAAI,EAAE,eAAe,KAAK;;;;;;;;;;;oBAWtC,KAAK;;2BAEE,WAAW,IAAI,EAAE,WAAW,WAAW,QAAQ,IAAI,EAAE;;cAElE,WAAW,MAAM,SAAS,EAAE;8BACZ,MAAM,OAAO,MAAM,GAAG,CAAC,EAAE;;;qFAG8B,WAAW,IAAI,EAAE,UAAU,WAAW,MAAM,EAAE,EAAE;;;;AAIrI;;;;;;AAMA,SAAgB,oBAAoB,SAAkB,OAAc,MAAsB;CACxF,MAAM,EAAE,OAAO,SAAS;CACxB,MAAM,OAAO,GAAG,QAAQ;CAExB,OAAO;;;;;aAKI,WAAW,QAAQ,IAAI,EAAE,eAAe,KAAK;;;;;;;;;;;;oBAYtC,KAAK;;2BAEE,WAAW,IAAI,EAAE,WAAW,WAAW,QAAQ,IAAI,EAAE;;6BAEnD,WAAW,MAAM,SAAS,EAAE;8BAC3B,MAAM,OAAO,MAAM,GAAG,CAAC,EAAE;;mBAEpC,WAAW,eAAS,EAAE,WAAW,WAAW,QAAQ,IAAI,EAAE;;;AAG7E;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,MAAM,WAAW,cAAc,OAAO;EAC3C,QAAQ,IAAR;GACE,KAAK,KACH,OAAO;GAET,KAAK,KACH,OAAO;GAET,KAAK,KACH,OAAO;GAET,KAAK,MACH,OAAO;GAET,SACE,OAAO;EAEX;CACF,CAAC;AACH;AAEA,SAAS,WAAW,OAAuB;CACzC,OAAO,WAAW,KAAK;AACzB"}

package/dist/retention/purge.mjs

@@ -1,70 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { builds } from "../schema/build.mjs";
-import { BuildModel } from "../models/build.mjs";
-import { TERMINAL_BUILD_STATUSES } from "../types.mjs";
-import { LabelModel } from "../models/label.mjs";
-import { and, desc, eq, inArray, lt } from "drizzle-orm";
-//#region src/retention/purge.ts
-/** Removes expired transient builds while keeping baselines and persistent builds. */
-var Retention = class {
-	db;
-	storage;
-	logger;
-	constructor(db, storage, logger) {
-		this.db = db;
-		this.storage = storage;
-		this.logger = logger;
-	}
-	async purge(project, options) {
-		const cutoff = (/* @__PURE__ */ new Date(Date.now() - options.ttlDays * 864e5)).toISOString();
-		const candidates = await this.db.list(builds, { where: and(eq(builds.projectId, project.id), inArray(builds.status, [...TERMINAL_BUILD_STATUSES]), lt(builds.updatedAt, cutoff)) });
-		const keep = options.keepLatestPerBranch ? await this.latestPerBranch(project.id) : /* @__PURE__ */ new Set();
-		const labelModel = new LabelModel(this.db);
-		const buildIds = (await Promise.all(candidates.map(async (build) => {
-			if (keep.has(build.id) || await labelModel.hasPersistent(project.id, build.id)) return null;
-			return build.id;
-		}))).filter((id) => id !== null);
-		const results = await Promise.all(buildIds.map(async (buildId) => ({
-			files: await this.deleteBuildFiles(project.id, buildId),
-			removed: await this.removeBuild(buildId)
-		})));
-		const removedBuilds = results.filter((r) => r.removed).length;
-		const removedFiles = results.reduce((sum, r) => sum + r.files, 0);
-		this.logger?.info({
-			projectId: project.id,
-			removedBuilds,
-			removedFiles
-		}, "build retention purge complete");
-		return {
-			removedBuilds,
-			removedFiles
-		};
-	}
-	async removeBuild(buildId) {
-		await new BuildModel(this.db).remove(buildId);
-		return true;
-	}
-	async latestPerBranch(projectId) {
-		const rows = await this.db.list(builds, {
-			where: eq(builds.projectId, projectId),
-			orderBy: desc(builds.updatedAt)
-		});
-		const latest = /* @__PURE__ */ new Map();
-		for (const row of rows) if (!latest.get(row.gitBranch)) latest.set(row.gitBranch, row.id);
-		return new Set(latest.values());
-	}
-	async deleteBuildFiles(projectId, buildId) {
-		const prefix = `${projectId}/builds/${buildId}/`;
-		const files = await this.storage.list(prefix);
-		await Promise.all(files.map(async (file) => {
-			await this.storage.delete(file);
-		}));
-		return files.length;
-	}
-};
-//#endregion
-export { Retention };
-
-//# sourceMappingURL=purge.mjs.map

package/dist/retention/purge.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"purge.mjs","names":[],"sources":["../../src/retention/purge.ts"],"sourcesContent":["import { and, desc, eq, inArray, lt } from \"drizzle-orm\";\nimport type { Logger } from \"pino\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { LabelModel } from \"../models/label.ts\";\nimport { builds } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { TERMINAL_BUILD_STATUSES } from \"../types.ts\";\n\n/** Options controlling which builds a retention purge removes. */\nexport interface PurgeOptions {\n  ttlDays: number;\n  keepLatestPerBranch: boolean;\n}\n\n/** Counts of builds and files removed by a retention purge. */\nexport interface PurgeResult {\n  removedBuilds: number;\n  removedFiles: number;\n}\n/** Removes expired transient builds while keeping baselines and persistent builds. */\nexport class Retention {\n  constructor(\n    private readonly db: DatabaseAdapter,\n    private readonly storage: StorageAdapter,\n    private readonly logger?: Logger,\n  ) {}\n\n  async purge(project: Project, options: PurgeOptions): Promise<PurgeResult> {\n    const cutoff = new Date(Date.now() - options.ttlDays * 86_400_000).toISOString();\n    const candidates = await this.db.list(builds, {\n      where: and(\n        eq(builds.projectId, project.id),\n        inArray(builds.status, [...TERMINAL_BUILD_STATUSES]),\n        lt(builds.updatedAt, cutoff),\n      ),\n    });\n\n    const keep = options.keepLatestPerBranch\n      ? await this.latestPerBranch(project.id)\n      : new Set<string>();\n    const labelModel = new LabelModel(this.db);\n    const target = await Promise.all(\n      candidates.map(async (build) => {\n        if (keep.has(build.id) || (await labelModel.hasPersistent(project.id, build.id))) {\n          return null;\n        }\n        return build.id;\n      }),\n    );\n\n    const buildIds = target.filter((id): id is string => id !== null);\n    const results = await Promise.all(\n      buildIds.map(async (buildId) => ({\n        files: await this.deleteBuildFiles(project.id, buildId),\n        removed: await this.removeBuild(buildId),\n      })),\n    );\n    const removedBuilds = results.filter((r) => r.removed).length;\n    const removedFiles = results.reduce((sum, r) => sum + r.files, 0);\n    this.logger?.info(\n      { projectId: project.id, removedBuilds, removedFiles },\n      \"build retention purge complete\",\n    );\n    return { removedBuilds, removedFiles };\n  }\n\n  private async removeBuild(buildId: string): Promise<boolean> {\n    await new BuildModel(this.db).remove(buildId);\n    return true;\n  }\n\n  private async latestPerBranch(projectId: string): Promise<Set<string>> {\n    const rows = await this.db.list(builds, {\n      where: eq(builds.projectId, projectId),\n      orderBy: desc(builds.updatedAt),\n    });\n    const latest = new Map<string, string>();\n    for (const row of rows) {\n      const current = latest.get(row.gitBranch);\n      if (!current) {\n        latest.set(row.gitBranch, row.id);\n      }\n    }\n    return new Set(latest.values());\n  }\n\n  private async deleteBuildFiles(projectId: string, buildId: string): Promise<number> {\n    const prefix = `${projectId}/builds/${buildId}/`;\n    const files = await this.storage.list(prefix);\n    await Promise.all(\n      files.map(async (file) => {\n        await this.storage.delete(file);\n      }),\n    );\n    return files.length;\n  }\n}\n"],"mappings":";;;;;;;;;;AAsBA,IAAa,YAAb,MAAuB;CAEF;CACA;CACA;CAHnB,YACE,IACA,SACA,QACA;EAHiB,KAAA,KAAA;EACA,KAAA,UAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,MAAM,SAAkB,SAA6C;EACzE,MAAM,0BAAS,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,UAAU,KAAU,EAAA,CAAE,YAAY;EAC/E,MAAM,aAAa,MAAM,KAAK,GAAG,KAAK,QAAQ,EAC5C,OAAO,IACL,GAAG,OAAO,WAAW,QAAQ,EAAE,GAC/B,QAAQ,OAAO,QAAQ,CAAC,GAAG,uBAAuB,CAAC,GACnD,GAAG,OAAO,WAAW,MAAM,CAC7B,EACF,CAAC;EAED,MAAM,OAAO,QAAQ,sBACjB,MAAM,KAAK,gBAAgB,QAAQ,EAAE,oBACrC,IAAI,IAAY;EACpB,MAAM,aAAa,IAAI,WAAW,KAAK,EAAE;EAUzC,MAAM,YAAW,MATI,QAAQ,IAC3B,WAAW,IAAI,OAAO,UAAU;GAC9B,IAAI,KAAK,IAAI,MAAM,EAAE,KAAM,MAAM,WAAW,cAAc,QAAQ,IAAI,MAAM,EAAE,GAC5E,OAAO;GAET,OAAO,MAAM;EACf,CAAC,CACH,EAAA,CAEwB,QAAQ,OAAqB,OAAO,IAAI;EAChE,MAAM,UAAU,MAAM,QAAQ,IAC5B,SAAS,IAAI,OAAO,aAAa;GAC/B,OAAO,MAAM,KAAK,iBAAiB,QAAQ,IAAI,OAAO;GACtD,SAAS,MAAM,KAAK,YAAY,OAAO;EACzC,EAAE,CACJ;EACA,MAAM,gBAAgB,QAAQ,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC;EACvD,MAAM,eAAe,QAAQ,QAAQ,KAAK,MAAM,MAAM,EAAE,OAAO,CAAC;EAChE,KAAK,QAAQ,KACX;GAAE,WAAW,QAAQ;GAAI;GAAe;EAAa,GACrD,gCACF;EACA,OAAO;GAAE;GAAe;EAAa;CACvC;CAEA,MAAc,YAAY,SAAmC;EAC3D,MAAM,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,OAAO,OAAO;EAC5C,OAAO;CACT;CAEA,MAAc,gBAAgB,WAAyC;EACrE,MAAM,OAAO,MAAM,KAAK,GAAG,KAAK,QAAQ;GACtC,OAAO,GAAG,OAAO,WAAW,SAAS;GACrC,SAAS,KAAK,OAAO,SAAS;EAChC,CAAC;EACD,MAAM,yBAAS,IAAI,IAAoB;EACvC,KAAK,MAAM,OAAO,MAEhB,IAAI,CADY,OAAO,IAAI,IAAI,SACpB,GACT,OAAO,IAAI,IAAI,WAAW,IAAI,EAAE;EAGpC,OAAO,IAAI,IAAI,OAAO,OAAO,CAAC;CAChC;CAEA,MAAc,iBAAiB,WAAmB,SAAkC;EAClF,MAAM,SAAS,GAAG,UAAU,UAAU,QAAQ;EAC9C,MAAM,QAAQ,MAAM,KAAK,QAAQ,KAAK,MAAM;EAC5C,MAAM,QAAQ,IACZ,MAAM,IAAI,OAAO,SAAS;GACxB,MAAM,KAAK,QAAQ,OAAO,IAAI;EAChC,CAAC,CACH;EACA,OAAO,MAAM;CACf;AACF"}

package/dist/routers/admin.mjs

@@ -1,42 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { ProjectModel } from "../models/project.mjs";
-import { getStore } from "../store.mjs";
-import { Retention } from "../retention/purge.mjs";
-import { requireSiteAdmin } from "./helpers.mjs";
-import { forbidden, purgeInputSchema, purgeSchema } from "./schemas.mjs";
-import { createRoute } from "@hono/zod-openapi";
-//#region src/routers/admin.ts
-const purgeRoute = createRoute({
-	method: "post",
-	path: "/api/v1/admin/purge",
-	request: { body: { content: { "application/json": { schema: purgeInputSchema } } } },
-	responses: {
-		200: {
-			content: { "application/json": { schema: purgeSchema } },
-			description: "Retention purge run"
-		},
-		...forbidden
-	}
-});
-/** Register the site-admin retention purge endpoint. */
-function registerAdmin(app) {
-	app.openapi(purgeRoute, async (c) => {
-		requireSiteAdmin();
-		const ttlDays = c.req.valid("json").ttlDays ?? getStore().config.purgeTtlDays ?? 30;
-		const projects = await new ProjectModel(getStore().db).list();
-		const retention = new Retention(getStore().db, getStore().storage);
-		const removedBuilds = (await Promise.all(projects.map(async (project) => {
-			return await retention.purge(project, {
-				ttlDays,
-				keepLatestPerBranch: true
-			});
-		}))).reduce((sum, result) => sum + result.removedBuilds, 0);
-		return c.json({ removedBuilds });
-	});
-}
-//#endregion
-export { registerAdmin };
-
-//# sourceMappingURL=admin.mjs.map

package/dist/routers/admin.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.mjs","names":["forbiddenResponse"],"sources":["../../src/routers/admin.ts"],"sourcesContent":["import { createRoute } from \"@hono/zod-openapi\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { Retention } from \"../retention/purge.ts\";\nimport { getStore } from \"../store.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport { forbidden as forbiddenResponse, purgeInputSchema, purgeSchema } from \"./schemas.ts\";\n\nconst purgeRoute = createRoute({\n  method: \"post\",\n  path: \"/api/v1/admin/purge\",\n  request: { body: { content: { \"application/json\": { schema: purgeInputSchema } } } },\n  responses: {\n    200: {\n      content: { \"application/json\": { schema: purgeSchema } },\n      description: \"Retention purge run\",\n    },\n    ...forbiddenResponse,\n  },\n});\n\n/** Register the site-admin retention purge endpoint. */\nexport function registerAdmin(app: ShelfApp): void {\n  app.openapi(purgeRoute, async (c) => {\n    requireSiteAdmin();\n    const body = c.req.valid(\"json\");\n    const ttlDays = body.ttlDays ?? getStore().config.purgeTtlDays ?? 30;\n    const projects = await new ProjectModel(getStore().db).list();\n    const retention = new Retention(getStore().db, getStore().storage);\n    const results = await Promise.all(\n      projects.map(async (project) => {\n        return await retention.purge(project, { ttlDays, keepLatestPerBranch: true });\n      }),\n    );\n    const removedBuilds = results.reduce((sum, result) => sum + result.removedBuilds, 0);\n    return c.json({ removedBuilds });\n  });\n}\n"],"mappings":";;;;;;;;;;AAQA,MAAM,aAAa,YAAY;CAC7B,QAAQ;CACR,MAAM;CACN,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,iBAAiB,EAAE,EAAE,EAAE;CACnF,WAAW;EACT,KAAK;GACH,SAAS,EAAE,oBAAoB,EAAE,QAAQ,YAAY,EAAE;GACvD,aAAa;EACf;EACA,GAAGA;CACL;AACF,CAAC;;AAGD,SAAgB,cAAc,KAAqB;CACjD,IAAI,QAAQ,YAAY,OAAO,MAAM;EACnC,iBAAiB;EAEjB,MAAM,UADO,EAAE,IAAI,MAAM,MACN,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,OAAO,gBAAgB;EAClE,MAAM,WAAW,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;EAC5D,MAAM,YAAY,IAAI,UAAU,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO;EAMjE,MAAM,iBAAgB,MALA,QAAQ,IAC5B,SAAS,IAAI,OAAO,YAAY;GAC9B,OAAO,MAAM,UAAU,MAAM,SAAS;IAAE;IAAS,qBAAqB;GAAK,CAAC;EAC9E,CAAC,CACH,EAAA,CAC8B,QAAQ,KAAK,WAAW,MAAM,OAAO,eAAe,CAAC;EACnF,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC;CACjC,CAAC;AACH"}

package/dist/routers/assets.mjs

@@ -1,25 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { readFile } from "node:fs/promises";
-import { fileURLToPath } from "node:url";
-//#region src/routers/assets.ts
-let htmxSource = null;
-async function htmxScript() {
-	htmxSource ??= await readFile(fileURLToPath(new URL("../assets/htmx.min.js", import.meta.url)), "utf8");
-	return htmxSource;
-}
-/** Register the vendored static-asset routes (HTMX bundle). */
-function registerAssets(app) {
-	app.get("/assets/htmx.js", async (c) => {
-		const body = await htmxScript();
-		return c.body(body, 200, {
-			"content-type": "application/javascript",
-			"cache-control": "public, max-age=31536000, immutable"
-		});
-	});
-}
-//#endregion
-export { registerAssets };
-
-//# sourceMappingURL=assets.mjs.map

package/dist/routers/assets.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"assets.mjs","names":[],"sources":["../../src/routers/assets.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { fileURLToPath } from \"node:url\";\nimport type { ShelfApp } from \"../index.tsx\";\n\nlet htmxSource: string | null = null;\n\nasync function htmxScript(): Promise<string> {\n  htmxSource ??= await readFile(\n    fileURLToPath(new URL(\"../assets/htmx.min.js\", import.meta.url)),\n    \"utf8\",\n  );\n  return htmxSource;\n}\n\n/** Register the vendored static-asset routes (HTMX bundle). */\nexport function registerAssets(app: ShelfApp): void {\n  app.get(\"/assets/htmx.js\", async (c) => {\n    const body = await htmxScript();\n    return c.body(body, 200, {\n      \"content-type\": \"application/javascript\",\n      \"cache-control\": \"public, max-age=31536000, immutable\",\n    });\n  });\n}\n"],"mappings":";;;;;;AAIA,IAAI,aAA4B;AAEhC,eAAe,aAA8B;CAC3C,eAAe,MAAM,SACnB,cAAc,IAAI,IAAI,yBAAyB,YAAY,GAAG,CAAC,GAC/D,MACF;CACA,OAAO;AACT;;AAGA,SAAgB,eAAe,KAAqB;CAClD,IAAI,IAAI,mBAAmB,OAAO,MAAM;EACtC,MAAM,OAAO,MAAM,WAAW;EAC9B,OAAO,EAAE,KAAK,MAAM,KAAK;GACvB,gBAAgB;GAChB,iBAAiB;EACnB,CAAC;CACH,CAAC;AACH"}

package/dist/routers/auth.mjs

@@ -1,78 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { randomToken } from "../utils/hash.mjs";
-import { SESSION_COOKIE } from "../adapter/auth.mjs";
-import { renderLoginPage } from "../pages/login.mjs";
-import { hxRedirect } from "./htmx.mjs";
-import { HTTPException } from "hono/http-exception";
-//#region src/routers/auth.ts
-const OAUTH_STATE_COOKIE = "storyshelf_oauth_state";
-const SESSION_TTL_SECONDS = 604800;
-const SHARED_USER = {
-	id: "shared",
-	email: "admin@local",
-	name: "Admin",
-	role: "admin"
-};
-function sessionCookieHeader(token) {
-	return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_TTL_SECONDS}`;
-}
-function clearSessionCookieHeader() {
-	return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;
-}
-function hasPasswordLogin(auth) {
-	return "login" in auth;
-}
-function hasSso(auth) {
-	return "loginUrl" in auth;
-}
-function buildSsoUrl(c, auth) {
-	const state = randomToken("shelf_").value;
-	c.header("set-cookie", `${OAUTH_STATE_COOKIE}=${state}; Path=/; HttpOnly; SameSite=Lax; Max-Age=600`);
-	return auth.loginUrl(state);
-}
-/** Register the password and SSO login, callback, and logout routes. */
-function registerAuth(app, auth) {
-	app.get("/auth/login", async (c) => {
-		if (hasSso(auth) && !hasPasswordLogin(auth)) return c.redirect(buildSsoUrl(c, auth));
-		const ssoUrl = hasSso(auth) ? buildSsoUrl(c, auth) : void 0;
-		return c.html(await renderLoginPage({ ssoUrl }));
-	});
-	app.post("/auth/login", async (c) => {
-		if (!hasPasswordLogin(auth)) throw new HTTPException(404, { message: "Password login is not configured" });
-		const raw = (await c.req.formData()).get("password");
-		const password = typeof raw === "string" ? raw : "";
-		try {
-			const token = await auth.login(password, SHARED_USER);
-			c.header("set-cookie", sessionCookieHeader(token));
-			return hxRedirect(c, "/");
-		} catch {
-			return c.html(await renderLoginPage({ error: "Invalid password" }), 401);
-		}
-	});
-	app.get("/auth/callback", async (c) => {
-		if (!auth.handleCallback) return c.notFound();
-		const code = c.req.query("code") ?? "";
-		const state = c.req.query("state") ?? "";
-		if (!code || !state) throw new HTTPException(400, { message: "Missing code or state" });
-		const user = await auth.handleCallback({
-			provider: "oidc",
-			code,
-			state
-		});
-		if (!user) return c.html(await renderLoginPage({ error: "SSO sign in failed" }), 401);
-		const token = await auth.createSession(user);
-		c.header("set-cookie", sessionCookieHeader(token));
-		return c.redirect("/");
-	});
-	app.post("/auth/logout", async (c) => {
-		await auth.destroySession("");
-		c.header("set-cookie", clearSessionCookieHeader());
-		return hxRedirect(c, "/auth/login");
-	});
-}
-//#endregion
-export { registerAuth };
-
-//# sourceMappingURL=auth.mjs.map

package/dist/routers/auth.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.mjs","names":[],"sources":["../../src/routers/auth.ts"],"sourcesContent":["import type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { SESSION_COOKIE, type AuthAdapter, type AuthUser } from \"../adapters/auth.ts\";\nimport type { ShelfApp } from \"../index.tsx\";\nimport { renderLoginPage } from \"../pages/login.tsx\";\nimport { randomToken } from \"../utils/hash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\n\nconst OAUTH_STATE_COOKIE = \"storyshelf_oauth_state\";\nconst SESSION_TTL_SECONDS = 7 * 24 * 60 * 60;\n\nconst SHARED_USER: AuthUser = { id: \"shared\", email: \"admin@local\", name: \"Admin\", role: \"admin\" };\n\nfunction sessionCookieHeader(token: string): string {\n  return `${SESSION_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${SESSION_TTL_SECONDS}`;\n}\n\nfunction clearSessionCookieHeader(): string {\n  return `${SESSION_COOKIE}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;\n}\n\ntype PasswordAuth = AuthAdapter & { login(password: string, user: AuthUser): Promise<string> };\ntype SsoAuth = AuthAdapter & { loginUrl(state: string): string };\n\nfunction hasPasswordLogin(auth: AuthAdapter): auth is PasswordAuth {\n  return \"login\" in auth;\n}\n\nfunction hasSso(auth: AuthAdapter): auth is SsoAuth {\n  return \"loginUrl\" in auth;\n}\n\nfunction buildSsoUrl(c: Context, auth: SsoAuth): string {\n  const state = randomToken(\"shelf_\").value;\n  c.header(\n    \"set-cookie\",\n    `${OAUTH_STATE_COOKIE}=${state}; Path=/; HttpOnly; SameSite=Lax; Max-Age=600`,\n  );\n  return auth.loginUrl(state);\n}\n\n/** Register the password and SSO login, callback, and logout routes. */\nexport function registerAuth(app: ShelfApp, auth: AuthAdapter): void {\n  app.get(\"/auth/login\", async (c) => {\n    if (hasSso(auth) && !hasPasswordLogin(auth)) {\n      return c.redirect(buildSsoUrl(c, auth));\n    }\n    const ssoUrl = hasSso(auth) ? buildSsoUrl(c, auth) : undefined;\n    return c.html(await renderLoginPage({ ssoUrl }));\n  });\n\n  app.post(\"/auth/login\", async (c) => {\n    if (!hasPasswordLogin(auth)) {\n      throw new HTTPException(404, { message: \"Password login is not configured\" });\n    }\n    const form = await c.req.formData();\n    const raw = form.get(\"password\");\n    const password = typeof raw === \"string\" ? raw : \"\";\n    try {\n      const token = await auth.login(password, SHARED_USER);\n      c.header(\"set-cookie\", sessionCookieHeader(token));\n      return hxRedirect(c, \"/\");\n    } catch {\n      return c.html(await renderLoginPage({ error: \"Invalid password\" }), 401);\n    }\n  });\n\n  app.get(\"/auth/callback\", async (c) => {\n    if (!auth.handleCallback) {\n      return c.notFound();\n    }\n    const code = c.req.query(\"code\") ?? \"\";\n    const state = c.req.query(\"state\") ?? \"\";\n    if (!code || !state) {\n      throw new HTTPException(400, { message: \"Missing code or state\" });\n    }\n    const user = await auth.handleCallback({ provider: \"oidc\", code, state });\n    if (!user) {\n      return c.html(await renderLoginPage({ error: \"SSO sign in failed\" }), 401);\n    }\n    const token = await auth.createSession(user);\n    c.header(\"set-cookie\", sessionCookieHeader(token));\n    return c.redirect(\"/\");\n  });\n\n  app.post(\"/auth/logout\", async (c) => {\n    await auth.destroySession(\"\");\n    c.header(\"set-cookie\", clearSessionCookieHeader());\n    return hxRedirect(c, \"/auth/login\");\n  });\n}\n"],"mappings":";;;;;;;;;AAQA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,cAAwB;CAAE,IAAI;CAAU,OAAO;CAAe,MAAM;CAAS,MAAM;AAAQ;AAEjG,SAAS,oBAAoB,OAAuB;CAClD,OAAO,GAAG,eAAe,GAAG,MAAM,4CAA4C;AAChF;AAEA,SAAS,2BAAmC;CAC1C,OAAO,GAAG,eAAe;AAC3B;AAKA,SAAS,iBAAiB,MAAyC;CACjE,OAAO,WAAW;AACpB;AAEA,SAAS,OAAO,MAAoC;CAClD,OAAO,cAAc;AACvB;AAEA,SAAS,YAAY,GAAY,MAAuB;CACtD,MAAM,QAAQ,YAAY,QAAQ,CAAC,CAAC;CACpC,EAAE,OACA,cACA,GAAG,mBAAmB,GAAG,MAAM,8CACjC;CACA,OAAO,KAAK,SAAS,KAAK;AAC5B;;AAGA,SAAgB,aAAa,KAAe,MAAyB;CACnE,IAAI,IAAI,eAAe,OAAO,MAAM;EAClC,IAAI,OAAO,IAAI,KAAK,CAAC,iBAAiB,IAAI,GACxC,OAAO,EAAE,SAAS,YAAY,GAAG,IAAI,CAAC;EAExC,MAAM,SAAS,OAAO,IAAI,IAAI,YAAY,GAAG,IAAI,IAAI,KAAA;EACrD,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC;CACjD,CAAC;CAED,IAAI,KAAK,eAAe,OAAO,MAAM;EACnC,IAAI,CAAC,iBAAiB,IAAI,GACxB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,mCAAmC,CAAC;EAG9E,MAAM,OAAM,MADO,EAAE,IAAI,SAAS,EAAA,CACjB,IAAI,UAAU;EAC/B,MAAM,WAAW,OAAO,QAAQ,WAAW,MAAM;EACjD,IAAI;GACF,MAAM,QAAQ,MAAM,KAAK,MAAM,UAAU,WAAW;GACpD,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;GACjD,OAAO,WAAW,GAAG,GAAG;EAC1B,QAAQ;GACN,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,mBAAmB,CAAC,GAAG,GAAG;EACzE;CACF,CAAC;CAED,IAAI,IAAI,kBAAkB,OAAO,MAAM;EACrC,IAAI,CAAC,KAAK,gBACR,OAAO,EAAE,SAAS;EAEpB,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;EACpC,MAAM,QAAQ,EAAE,IAAI,MAAM,OAAO,KAAK;EACtC,IAAI,CAAC,QAAQ,CAAC,OACZ,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,wBAAwB,CAAC;EAEnE,MAAM,OAAO,MAAM,KAAK,eAAe;GAAE,UAAU;GAAQ;GAAM;EAAM,CAAC;EACxE,IAAI,CAAC,MACH,OAAO,EAAE,KAAK,MAAM,gBAAgB,EAAE,OAAO,qBAAqB,CAAC,GAAG,GAAG;EAE3E,MAAM,QAAQ,MAAM,KAAK,cAAc,IAAI;EAC3C,EAAE,OAAO,cAAc,oBAAoB,KAAK,CAAC;EACjD,OAAO,EAAE,SAAS,GAAG;CACvB,CAAC;CAED,IAAI,KAAK,gBAAgB,OAAO,MAAM;EACpC,MAAM,KAAK,eAAe,EAAE;EAC5B,EAAE,OAAO,cAAc,yBAAyB,CAAC;EACjD,OAAO,WAAW,GAAG,aAAa;CACpC,CAAC;AACH"}

package/dist/routers/builds.handlers.mjs

@@ -1,184 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { BuildModel } from "../models/build.mjs";
-import { ProjectModel } from "../models/project.mjs";
-import { emitWebhookEvent } from "../adapters/webhook-events.mjs";
-import { BaselineModel } from "../models/baseline.mjs";
-import { SnapshotModel } from "../models/snapshot.mjs";
-import { extractStorybookToScratch, persistStorybookStatics } from "../capture/statics.mjs";
-import { getStore } from "../store.mjs";
-import { BUILD_STATUSES } from "../types.mjs";
-import { LabelModel } from "../models/label.mjs";
-import { notFound } from "./helpers.mjs";
-import { z } from "@hono/zod-openapi";
-import { HTTPException } from "hono/http-exception";
-import { Readable, Transform } from "node:stream";
-//#region src/routers/builds.handlers.ts
-/** Roles permitted to view builds, snapshots, and comments. */
-const VIEW_ROLES = [
-	"viewer",
-	"developer",
-	"approver",
-	"admin"
-];
-/** Roles permitted to upload builds and write comments. */
-const DEVELOPER_ROLES = [
-	"developer",
-	"approver",
-	"admin"
-];
-/** Roles permitted to approve or reject snapshots and delete builds. */
-const APPROVER_ROLES = ["approver", "admin"];
-/** JSON input schema for creating a build before streaming its bundle. */
-const buildCreateJsonSchema = z.object({
-	gitSha: z.string().min(1),
-	gitBranch: z.string().min(1),
-	authorEmail: z.string().optional(),
-	authorName: z.string().optional(),
-	message: z.string().optional(),
-	labels: z.array(z.object({
-		key: z.string().min(1),
-		value: z.string()
-	})).optional()
-}).openapi("BuildCreate");
-async function attachLabels(db, projectId, buildId, labels) {
-	const models = new LabelModel(db);
-	for (const { key, value } of labels) {
-		if (!await models.getType(projectId, key)) await models.createType(projectId, {
-			key,
-			name: key
-		});
-		await models.attach(projectId, buildId, key, value);
-	}
-}
-/**
-* Create a build record with labels and the `build:created` webhook.
-* Shared by the build-creation route.
-*/
-async function createBuildRecord(project, meta) {
-	const { db, config } = getStore();
-	if (!meta.gitSha || !meta.gitBranch) throw new HTTPException(400, { message: "gitSha and gitBranch are required" });
-	const build = await new BuildModel(db).create(project.id, {
-		gitSha: meta.gitSha,
-		gitBranch: meta.gitBranch,
-		isDefault: meta.gitBranch === project.gitDefaultBranch,
-		authorEmail: meta.authorEmail,
-		authorName: meta.authorName,
-		message: meta.message
-	});
-	if (meta.labels && meta.labels.length > 0) await attachLabels(db, project.id, build.id, meta.labels);
-	await emitWebhookEvent(db, project.id, "build:created", {
-		buildId: build.id,
-		gitSha: meta.gitSha,
-		gitBranch: meta.gitBranch,
-		authorEmail: meta.authorEmail,
-		authorName: meta.authorName,
-		message: meta.message
-	}, config.secret);
-	return build;
-}
-/**
-* Stream a raw request body into storage with a byte cap.
-* Throws 400 for a missing body, 413 once `maxBytes` is exceeded.
-*/
-async function storeUploadStream(storage, path, body, maxBytes) {
-	if (!body) throw new HTTPException(400, { message: "Missing request body" });
-	let seen = 0;
-	const limiter = new Transform({ transform(chunk, _encoding, callback) {
-		seen += chunk.length;
-		if (seen > maxBytes) callback(/* @__PURE__ */ new Error(`Upload exceeds ${maxBytes} byte limit`));
-		else callback(null, chunk);
-	} });
-	try {
-		const nodeBody = Readable.fromWeb(body);
-		await storage.writeStream(path, nodeBody.pipe(limiter));
-	} catch (error) {
-		if (seen > maxBytes) throw new HTTPException(413, { message: "Upload exceeds size limit" });
-		throw error;
-	}
-}
-/** Parse a Content-Length header value into bytes, or undefined when unknown. */
-function parseContentLength(value) {
-	if (!value) return;
-	const parsed = Math.trunc(Number(value));
-	return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
-}
-/**
-* Best-effort inline statics extraction for small uploads (see
-* `maxInlineUnzipSize`). Never throws: failures are logged and the capture
-* job backfills the same keys idempotently.
-*/
-async function persistInlineStatics(storage, scratchDir, maxInlineBytes, contentLength, projectId, buildId, logger) {
-	if (!scratchDir || !maxInlineBytes) return;
-	const size = parseContentLength(contentLength);
-	if (size === void 0 || size > maxInlineBytes) return;
-	try {
-		const extractedDir = await extractStorybookToScratch(storage, scratchDir, projectId, buildId);
-		await persistStorybookStatics(storage, extractedDir, projectId, buildId);
-		logger.info({
-			buildId,
-			size
-		}, "upload statics persisted inline");
-	} catch (error) {
-		logger.error({
-			err: error,
-			buildId
-		}, "inline statics persist failed; capture will backfill");
-	}
-}
-/** Query filters accepted by the build list endpoint. */
-const buildListQuery = z.object({
-	status: z.enum(BUILD_STATUSES).optional(),
-	branch: z.string().optional(),
-	labelKey: z.string().optional(),
-	labelValue: z.string().optional()
-});
-/** Fetch a build scoped to its project, throwing 404 when it does not belong. */
-async function buildForProject(projectId, buildId) {
-	const build = await new BuildModel(getStore().db).get(buildId);
-	if (!build || build.projectId !== projectId) notFound("Build not found");
-	return build;
-}
-/** Fetch a snapshot scoped to its build, throwing 404 when it does not belong. */
-async function snapshotForBuild(build, snapshotId) {
-	const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);
-	if (!snapshot || snapshot.buildId !== build.id) notFound("Snapshot not found");
-	return snapshot;
-}
-/** Recompute a build's counts and roll its status up from its snapshots. */
-async function refreshBuild(buildId) {
-	const { db, config } = getStore();
-	await new BuildModel(db).updateCounts(buildId);
-	const snapshots = await new SnapshotModel(db).listByBuild(buildId);
-	const unresolved = snapshots.some((s) => s.status === "new" || s.status === "changed");
-	let status;
-	if (unresolved) status = "reviewing";
-	else status = snapshots.some((s) => s.status === "rejected") ? "rejected" : "approved";
-	const build = await new BuildModel(db).get(buildId);
-	if (build) {
-		await new BuildModel(db).setStatus(buildId, status);
-		await emitWebhookEvent(db, build.projectId, `build:${status}`, {
-			buildId,
-			status,
-			snapshotCount: snapshots.length
-		}, config.secret);
-	}
-}
-/** Approve a snapshot, promote its screenshot to baseline, and refresh the build. */
-async function approveSnapshot(snapshotId, userId) {
-	const { db, config } = getStore();
-	const snapshots = new SnapshotModel(db);
-	const snapshot = await snapshots.get(snapshotId);
-	if (!snapshot) notFound("Snapshot not found");
-	const project = await new ProjectModel(db).get(snapshot.projectId);
-	const build = await new BuildModel(db).get(snapshot.buildId);
-	if (!project || !build) notFound("Project or build not found");
-	await snapshots.review(snapshotId, "approved", userId);
-	await new BaselineModel(db, getStore().storage, config.secret).upsert(project.id, snapshot.storyId, snapshot.viewportName, build.gitBranch, snapshot.id, snapshot.screenshotPath);
-	await refreshBuild(build.id);
-}
-//#endregion
-export { APPROVER_ROLES, DEVELOPER_ROLES, VIEW_ROLES, approveSnapshot, buildCreateJsonSchema, buildForProject, buildListQuery, createBuildRecord, persistInlineStatics, refreshBuild, snapshotForBuild, storeUploadStream };
-
-//# sourceMappingURL=builds.handlers.mjs.map

package/dist/routers/builds.handlers.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"builds.handlers.mjs","names":[],"sources":["../../src/routers/builds.handlers.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { HTTPException } from \"hono/http-exception\";\nimport { Readable, Transform } from \"node:stream\";\nimport type { ReadableStream as NodeWebStream } from \"node:stream/web\";\nimport type { Logger } from \"pino\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { emitWebhookEvent } from \"../adapters/webhook-events.ts\";\nimport { extractStorybookToScratch, persistStorybookStatics } from \"../capture/statics.ts\";\nimport { BaselineModel } from \"../models/baseline.ts\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { LabelModel } from \"../models/label.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport { SnapshotModel } from \"../models/snapshot.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { getStore } from \"../store.ts\";\nimport { type ProjectRole, BUILD_STATUSES } from \"../types.ts\";\nimport { notFound } from \"./helpers.ts\";\n\n/** Roles permitted to view builds, snapshots, and comments. */\nexport const VIEW_ROLES: readonly ProjectRole[] = [\"viewer\", \"developer\", \"approver\", \"admin\"];\n/** Roles permitted to upload builds and write comments. */\nexport const DEVELOPER_ROLES: readonly ProjectRole[] = [\"developer\", \"approver\", \"admin\"];\n/** Roles permitted to approve or reject snapshots and delete builds. */\nexport const APPROVER_ROLES: readonly ProjectRole[] = [\"approver\", \"admin\"];\n\n/** JSON input schema for creating a build before streaming its bundle. */\nexport const buildCreateJsonSchema = z\n  .object({\n    gitSha: z.string().min(1),\n    gitBranch: z.string().min(1),\n    authorEmail: z.string().optional(),\n    authorName: z.string().optional(),\n    message: z.string().optional(),\n    labels: z.array(z.object({ key: z.string().min(1), value: z.string() })).optional(),\n  })\n  .openapi(\"BuildCreate\");\n\n/** Metadata accepted by either build-creation route. */\nexport interface BuildCreateMetadata {\n  gitSha: string;\n  gitBranch: string;\n  authorEmail?: string;\n  authorName?: string;\n  message?: string;\n  labels?: { key: string; value: string }[];\n}\n\n/* oxlint-disable eslint/no-await-in-loop -- label attach is intentionally sequential */\nasync function attachLabels(\n  db: import(\"../adapters/database.ts\").DatabaseAdapter,\n  projectId: string,\n  buildId: string,\n  labels: { key: string; value: string }[],\n): Promise<void> {\n  const models = new LabelModel(db);\n  for (const { key, value } of labels) {\n    const existing = await models.getType(projectId, key);\n    if (!existing) {\n      await models.createType(projectId, { key, name: key });\n    }\n    await models.attach(projectId, buildId, key, value);\n  }\n}\n/* oxlint-enable eslint/no-await-in-loop */\n\n/**\n * Create a build record with labels and the `build:created` webhook.\n * Shared by the build-creation route.\n */\nexport async function createBuildRecord(\n  project: Project,\n  meta: BuildCreateMetadata,\n): Promise<import(\"../schema/build.ts\").Build> {\n  const { db, config } = getStore();\n  if (!meta.gitSha || !meta.gitBranch) {\n    throw new HTTPException(400, { message: \"gitSha and gitBranch are required\" });\n  }\n  const build = await new BuildModel(db).create(project.id, {\n    gitSha: meta.gitSha,\n    gitBranch: meta.gitBranch,\n    isDefault: meta.gitBranch === project.gitDefaultBranch,\n    authorEmail: meta.authorEmail,\n    authorName: meta.authorName,\n    message: meta.message,\n  });\n  if (meta.labels && meta.labels.length > 0) {\n    await attachLabels(db, project.id, build.id, meta.labels);\n  }\n  await emitWebhookEvent(\n    db,\n    project.id,\n    \"build:created\",\n    {\n      buildId: build.id,\n      gitSha: meta.gitSha,\n      gitBranch: meta.gitBranch,\n      authorEmail: meta.authorEmail,\n      authorName: meta.authorName,\n      message: meta.message,\n    },\n    config.secret,\n  );\n  return build;\n}\n\n/**\n * Stream a raw request body into storage with a byte cap.\n * Throws 400 for a missing body, 413 once `maxBytes` is exceeded.\n */\nexport async function storeUploadStream(\n  storage: StorageAdapter,\n  path: string,\n  body: ReadableStream<Uint8Array> | null,\n  maxBytes: number,\n): Promise<void> {\n  if (!body) {\n    throw new HTTPException(400, { message: \"Missing request body\" });\n  }\n  let seen = 0;\n  const limiter = new Transform({\n    transform(\n      chunk: Buffer,\n      _encoding: string,\n      callback: (error?: Error | null, data?: Buffer) => void,\n    ): void {\n      seen += chunk.length;\n      if (seen > maxBytes) {\n        callback(new Error(`Upload exceeds ${maxBytes} byte limit`));\n      } else {\n        callback(null, chunk);\n      }\n    },\n  });\n  try {\n    const nodeBody = Readable.fromWeb(body as unknown as NodeWebStream);\n    await storage.writeStream(path, nodeBody.pipe(limiter));\n  } catch (error) {\n    if (seen > maxBytes) {\n      throw new HTTPException(413, { message: \"Upload exceeds size limit\" });\n    }\n    throw error;\n  }\n}\n\n/** Parse a Content-Length header value into bytes, or undefined when unknown. */\nfunction parseContentLength(value: string | undefined): number | undefined {\n  if (!value) {\n    return undefined;\n  }\n  const parsed = Math.trunc(Number(value));\n  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : undefined;\n}\n\n/**\n * Best-effort inline statics extraction for small uploads (see\n * `maxInlineUnzipSize`). Never throws: failures are logged and the capture\n * job backfills the same keys idempotently.\n */\nexport async function persistInlineStatics(\n  storage: StorageAdapter,\n  scratchDir: string | undefined,\n  maxInlineBytes: number | undefined,\n  contentLength: string | undefined,\n  projectId: string,\n  buildId: string,\n  logger: Logger,\n): Promise<void> {\n  if (!scratchDir || !maxInlineBytes) {\n    return;\n  }\n  const size = parseContentLength(contentLength);\n  if (size === undefined || size > maxInlineBytes) {\n    return;\n  }\n  try {\n    const extractedDir = await extractStorybookToScratch(storage, scratchDir, projectId, buildId);\n    await persistStorybookStatics(storage, extractedDir, projectId, buildId);\n    logger.info({ buildId, size }, \"upload statics persisted inline\");\n  } catch (error) {\n    logger.error({ err: error, buildId }, \"inline statics persist failed; capture will backfill\");\n  }\n}\n/** Query filters accepted by the build list endpoint. */\nexport const buildListQuery = z.object({\n  status: z.enum(BUILD_STATUSES).optional(),\n  branch: z.string().optional(),\n  labelKey: z.string().optional(),\n  labelValue: z.string().optional(),\n});\n\n/** Fetch a build scoped to its project, throwing 404 when it does not belong. */\nexport async function buildForProject(\n  projectId: string,\n  buildId: string,\n): Promise<import(\"../schema/build.ts\").Build> {\n  const build = await new BuildModel(getStore().db).get(buildId);\n  if (!build || build.projectId !== projectId) {\n    notFound(\"Build not found\");\n  }\n  return build;\n}\n\n/** Fetch a snapshot scoped to its build, throwing 404 when it does not belong. */\nexport async function snapshotForBuild(\n  build: { id: string },\n  snapshotId: string,\n): Promise<import(\"../schema/snapshot.ts\").Snapshot> {\n  const snapshot = await new SnapshotModel(getStore().db).get(snapshotId);\n  if (!snapshot || snapshot.buildId !== build.id) {\n    notFound(\"Snapshot not found\");\n  }\n  return snapshot;\n}\n\n/** Recompute a build's counts and roll its status up from its snapshots. */\nexport async function refreshBuild(buildId: string): Promise<void> {\n  const { db, config } = getStore();\n  await new BuildModel(db).updateCounts(buildId);\n  const snapshots = await new SnapshotModel(db).listByBuild(buildId);\n  const unresolved = snapshots.some((s) => s.status === \"new\" || s.status === \"changed\");\n  let status: \"reviewing\" | \"rejected\" | \"approved\";\n  if (unresolved) {\n    status = \"reviewing\";\n  } else {\n    const rejected = snapshots.some((s) => s.status === \"rejected\");\n    status = rejected ? \"rejected\" : \"approved\";\n  }\n  const build = await new BuildModel(db).get(buildId);\n  if (build) {\n    await new BuildModel(db).setStatus(buildId, status);\n    await emitWebhookEvent(\n      db,\n      build.projectId,\n      `build:${status}`,\n      {\n        buildId,\n        status,\n        snapshotCount: snapshots.length,\n      },\n      config.secret,\n    );\n  }\n}\n\n/** Approve a snapshot, promote its screenshot to baseline, and refresh the build. */\nexport async function approveSnapshot(snapshotId: string, userId: string): Promise<void> {\n  const { db, config } = getStore();\n  const snapshots = new SnapshotModel(db);\n  const snapshot = await snapshots.get(snapshotId);\n  if (!snapshot) {\n    notFound(\"Snapshot not found\");\n  }\n  const project = await new ProjectModel(db).get(snapshot.projectId);\n  const build = await new BuildModel(db).get(snapshot.buildId);\n  if (!project || !build) {\n    notFound(\"Project or build not found\");\n  }\n  await snapshots.review(snapshotId, \"approved\", userId);\n  const baselines = new BaselineModel(db, getStore().storage, config.secret);\n  await baselines.upsert(\n    project.id,\n    snapshot.storyId,\n    snapshot.viewportName,\n    build.gitBranch,\n    snapshot.id,\n    snapshot.screenshotPath,\n  );\n  await refreshBuild(build.id);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmBA,MAAa,aAAqC;CAAC;CAAU;CAAa;CAAY;AAAO;;AAE7F,MAAa,kBAA0C;CAAC;CAAa;CAAY;AAAO;;AAExF,MAAa,iBAAyC,CAAC,YAAY,OAAO;;AAG1E,MAAa,wBAAwB,EAClC,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC3B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,QAAQ,EAAE,MAAM,EAAE,OAAO;EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAAG,OAAO,EAAE,OAAO;CAAE,CAAC,CAAC,CAAC,CAAC,SAAS;AACpF,CAAC,CAAC,CACD,QAAQ,aAAa;AAaxB,eAAe,aACb,IACA,WACA,SACA,QACe;CACf,MAAM,SAAS,IAAI,WAAW,EAAE;CAChC,KAAK,MAAM,EAAE,KAAK,WAAW,QAAQ;EAEnC,IAAI,CAAC,MADkB,OAAO,QAAQ,WAAW,GAAG,GAElD,MAAM,OAAO,WAAW,WAAW;GAAE;GAAK,MAAM;EAAI,CAAC;EAEvD,MAAM,OAAO,OAAO,WAAW,SAAS,KAAK,KAAK;CACpD;AACF;;;;;AAOA,eAAsB,kBACpB,SACA,MAC6C;CAC7C,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,WACxB,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,oCAAoC,CAAC;CAE/E,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;EACxD,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,WAAW,KAAK,cAAc,QAAQ;EACtC,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,CAAC;CACD,IAAI,KAAK,UAAU,KAAK,OAAO,SAAS,GACtC,MAAM,aAAa,IAAI,QAAQ,IAAI,MAAM,IAAI,KAAK,MAAM;CAE1D,MAAM,iBACJ,IACA,QAAQ,IACR,iBACA;EACE,SAAS,MAAM;EACf,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,aAAa,KAAK;EAClB,YAAY,KAAK;EACjB,SAAS,KAAK;CAChB,GACA,OAAO,MACT;CACA,OAAO;AACT;;;;;AAMA,eAAsB,kBACpB,SACA,MACA,MACA,UACe;CACf,IAAI,CAAC,MACH,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,uBAAuB,CAAC;CAElE,IAAI,OAAO;CACX,MAAM,UAAU,IAAI,UAAU,EAC5B,UACE,OACA,WACA,UACM;EACN,QAAQ,MAAM;EACd,IAAI,OAAO,UACT,yBAAS,IAAI,MAAM,kBAAkB,SAAS,YAAY,CAAC;OAE3D,SAAS,MAAM,KAAK;CAExB,EACF,CAAC;CACD,IAAI;EACF,MAAM,WAAW,SAAS,QAAQ,IAAgC;EAClE,MAAM,QAAQ,YAAY,MAAM,SAAS,KAAK,OAAO,CAAC;CACxD,SAAS,OAAO;EACd,IAAI,OAAO,UACT,MAAM,IAAI,cAAc,KAAK,EAAE,SAAS,4BAA4B,CAAC;EAEvE,MAAM;CACR;AACF;;AAGA,SAAS,mBAAmB,OAA+C;CACzE,IAAI,CAAC,OACH;CAEF,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,CAAC;CACvC,OAAO,OAAO,cAAc,MAAM,KAAK,SAAS,IAAI,SAAS,KAAA;AAC/D;;;;;;AAOA,eAAsB,qBACpB,SACA,YACA,gBACA,eACA,WACA,SACA,QACe;CACf,IAAI,CAAC,cAAc,CAAC,gBAClB;CAEF,MAAM,OAAO,mBAAmB,aAAa;CAC7C,IAAI,SAAS,KAAA,KAAa,OAAO,gBAC/B;CAEF,IAAI;EACF,MAAM,eAAe,MAAM,0BAA0B,SAAS,YAAY,WAAW,OAAO;EAC5F,MAAM,wBAAwB,SAAS,cAAc,WAAW,OAAO;EACvE,OAAO,KAAK;GAAE;GAAS;EAAK,GAAG,iCAAiC;CAClE,SAAS,OAAO;EACd,OAAO,MAAM;GAAE,KAAK;GAAO;EAAQ,GAAG,sDAAsD;CAC9F;AACF;;AAEA,MAAa,iBAAiB,EAAE,OAAO;CACrC,QAAQ,EAAE,KAAK,cAAc,CAAC,CAAC,SAAS;CACxC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;;AAGD,eAAsB,gBACpB,WACA,SAC6C;CAC7C,MAAM,QAAQ,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO;CAC7D,IAAI,CAAC,SAAS,MAAM,cAAc,WAChC,SAAS,iBAAiB;CAE5B,OAAO;AACT;;AAGA,eAAsB,iBACpB,OACA,YACmD;CACnD,MAAM,WAAW,MAAM,IAAI,cAAc,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;CACtE,IAAI,CAAC,YAAY,SAAS,YAAY,MAAM,IAC1C,SAAS,oBAAoB;CAE/B,OAAO;AACT;;AAGA,eAAsB,aAAa,SAAgC;CACjE,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,aAAa,OAAO;CAC7C,MAAM,YAAY,MAAM,IAAI,cAAc,EAAE,CAAC,CAAC,YAAY,OAAO;CACjE,MAAM,aAAa,UAAU,MAAM,MAAM,EAAE,WAAW,SAAS,EAAE,WAAW,SAAS;CACrF,IAAI;CACJ,IAAI,YACF,SAAS;MAGT,SADiB,UAAU,MAAM,MAAM,EAAE,WAAW,UACpC,IAAI,aAAa;CAEnC,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,OAAO;CAClD,IAAI,OAAO;EACT,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS,MAAM;EAClD,MAAM,iBACJ,IACA,MAAM,WACN,SAAS,UACT;GACE;GACA;GACA,eAAe,UAAU;EAC3B,GACA,OAAO,MACT;CACF;AACF;;AAGA,eAAsB,gBAAgB,YAAoB,QAA+B;CACvF,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,MAAM,YAAY,IAAI,cAAc,EAAE;CACtC,MAAM,WAAW,MAAM,UAAU,IAAI,UAAU;CAC/C,IAAI,CAAC,UACH,SAAS,oBAAoB;CAE/B,MAAM,UAAU,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,IAAI,SAAS,SAAS;CACjE,MAAM,QAAQ,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,IAAI,SAAS,OAAO;CAC3D,IAAI,CAAC,WAAW,CAAC,OACf,SAAS,4BAA4B;CAEvC,MAAM,UAAU,OAAO,YAAY,YAAY,MAAM;CAErD,MAAM,IADgB,cAAc,IAAI,SAAS,CAAC,CAAC,SAAS,OAAO,MACrD,CAAC,CAAC,OACd,QAAQ,IACR,SAAS,SACT,SAAS,cACT,MAAM,WACN,SAAS,IACT,SAAS,cACX;CACA,MAAM,aAAa,MAAM,EAAE;AAC7B"}