@storyshelf/core 0.6.2 → 0.7.0

package/dist/capture/skip-checks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"skip-checks.mjs","names":[],"sources":["../../src/capture/skip-checks.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { Logger } from \"../logger.ts\";\nimport { BuildModel, type BuildTables } from \"../models/build.ts\";\nimport { StatusConfigModel, type StatusConfigTables } from \"../models/status-config.ts\";\nimport type { ProjectStatusConfig } from \"../schema/status-config.ts\";\nimport type { SecretInput } from \"../utils/encrypt.ts\";\n\n/** Skip capture when another approved build already covers the same commit. */\nexport async function hasApprovedBuildForSha(\n  db: DatabaseAdapter,\n  tables: BuildTables,\n  projectId: string,\n  sha: string,\n  excludeBuildId: string,\n): Promise<boolean> {\n  const builds = await new BuildModel(db, tables).list(projectId);\n  return builds.some((b) => b.gitSha === sha && b.id !== excludeBuildId && b.status === \"approved\");\n}\n\n/** Inputs for checking whether a commit is already merged upstream. */\nexport interface MergeCheck {\n  providers: GitHostProvider[];\n  sha: string;\n  branch: string;\n  secret: SecretInput;\n  db: DatabaseAdapter;\n  tables: StatusConfigTables;\n  projectId: string;\n  logger?: Logger;\n}\n\ninterface ParsedRow {\n  provider: GitHostProvider;\n  config: unknown;\n  token: string;\n}\n\nfunction findRowProvider(\n  providers: GitHostProvider[],\n  row: { provider: string },\n): GitHostProvider | undefined {\n  return providers.find((p) => p.metadata.kind === row.provider);\n}\n\nfunction decodeRowConfig(provider: GitHostProvider, configJson: string): unknown {\n  try {\n    const parsed: unknown = JSON.parse(configJson);\n    provider.metadata.schema.parse(parsed);\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\nfunction decodeRowToken(model: StatusConfigModel, row: ProjectStatusConfig): string | null {\n  try {\n    return model.decryptToken(row);\n  } catch {\n    return null;\n  }\n}\n\nfunction parseRow(\n  model: StatusConfigModel,\n  row: ProjectStatusConfig,\n  providers: GitHostProvider[],\n): ParsedRow | null {\n  const provider = findRowProvider(providers, row);\n  if (!provider) {\n    return null;\n  }\n  const parsed = decodeRowConfig(provider, row.config);\n  if (parsed === null) {\n    return null;\n  }\n  const token = decodeRowToken(model, row);\n  if (token === null) {\n    return null;\n  }\n  return { provider, config: parsed, token };\n}\n\nasync function checkRowMerged(\n  parsed: ParsedRow,\n  sha: string,\n  branch: string,\n  logger?: Logger,\n): Promise<boolean> {\n  const adapter = parsed.provider.create({ config: parsed.config, token: parsed.token, logger });\n  if (!adapter.isMerged) {\n    return false;\n  }\n  try {\n    return await adapter.isMerged({ sha, branch });\n  } catch {\n    // Ignore provider errors — do not skip on failure\n    return false;\n  }\n}\n\n/** Check one status-config row for an upstream merge. */\nasync function checkRow(\n  model: StatusConfigModel,\n  row: ProjectStatusConfig,\n  providers: GitHostProvider[],\n  sha: string,\n  branch: string,\n  logger?: Logger,\n): Promise<boolean> {\n  const parsed = parseRow(model, row, providers);\n  if (!parsed) {\n    return false;\n  }\n  return await checkRowMerged(parsed, sha, branch, logger);\n}\n\n/** True when any configured provider reports the commit already merged. */\nexport async function isAlreadyMerged(opts: MergeCheck): Promise<boolean> {\n  if (opts.providers.length === 0) {\n    return false;\n  }\n  const model = new StatusConfigModel(opts.db, opts.tables, opts.secret);\n  const rows = await model.list(opts.projectId);\n  for (const row of rows) {\n    // eslint-disable-next-line no-await-in-loop -- short-circuit on first merged status\n    if (await checkRow(model, row, opts.providers, opts.sha, opts.branch, opts.logger)) {\n      return true;\n    }\n  }\n  return false;\n}\n"],"mappings":";;;;;;;AASA,eAAsB,uBACpB,IACA,QACA,WACA,KACA,gBACkB;CAElB,QAAO,MADc,IAAI,WAAW,IAAI,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CAChD,MAAM,MAAM,EAAE,WAAW,OAAO,EAAE,OAAO,kBAAkB,EAAE,WAAW,UAAU;AAClG;AAoBA,SAAS,gBACP,WACA,KAC6B;CAC7B,OAAO,UAAU,MAAM,MAAM,EAAE,SAAS,SAAS,IAAI,QAAQ;AAC/D;AAEA,SAAS,gBAAgB,UAA2B,YAA6B;CAC/E,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,UAAU;EAC7C,SAAS,SAAS,OAAO,MAAM,MAAM;EACrC,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,OAA0B,KAAyC;CACzF,IAAI;EACF,OAAO,MAAM,aAAa,GAAG;CAC/B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,SACP,OACA,KACA,WACkB;CAClB,MAAM,WAAW,gBAAgB,WAAW,GAAG;CAC/C,IAAI,CAAC,UACH,OAAO;CAET,MAAM,SAAS,gBAAgB,UAAU,IAAI,MAAM;CACnD,IAAI,WAAW,MACb,OAAO;CAET,MAAM,QAAQ,eAAe,OAAO,GAAG;CACvC,IAAI,UAAU,MACZ,OAAO;CAET,OAAO;EAAE;EAAU,QAAQ;EAAQ;CAAM;AAC3C;AAEA,eAAe,eACb,QACA,KACA,QACA,QACkB;CAClB,MAAM,UAAU,OAAO,SAAS,OAAO;EAAE,QAAQ,OAAO;EAAQ,OAAO,OAAO;EAAO;CAAO,CAAC;CAC7F,IAAI,CAAC,QAAQ,UACX,OAAO;CAET,IAAI;EACF,OAAO,MAAM,QAAQ,SAAS;GAAE;GAAK;EAAO,CAAC;CAC/C,QAAQ;EAEN,OAAO;CACT;AACF;;AAGA,eAAe,SACb,OACA,KACA,WACA,KACA,QACA,QACkB;CAClB,MAAM,SAAS,SAAS,OAAO,KAAK,SAAS;CAC7C,IAAI,CAAC,QACH,OAAO;CAET,OAAO,MAAM,eAAe,QAAQ,KAAK,QAAQ,MAAM;AACzD;;AAGA,eAAsB,gBAAgB,MAAoC;CACxE,IAAI,KAAK,UAAU,WAAW,GAC5B,OAAO;CAET,MAAM,QAAQ,IAAI,kBAAkB,KAAK,IAAI,KAAK,QAAQ,KAAK,MAAM;CACrE,MAAM,OAAO,MAAM,MAAM,KAAK,KAAK,SAAS;CAC5C,KAAK,MAAM,OAAO,MAEhB,IAAI,MAAM,SAAS,OAAO,KAAK,KAAK,WAAW,KAAK,KAAK,KAAK,QAAQ,KAAK,MAAM,GAC/E,OAAO;CAGX,OAAO;AACT"}
+{"version":3,"file":"skip-checks.mjs","names":[],"sources":["../../src/capture/skip-checks.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { BuildModel, type BuildTables } from \"../models/build.ts\";\n\n/** Skip capture when another approved build already covers the same commit. */\nexport async function hasApprovedBuildForSha(\n  db: DatabaseAdapter,\n  tables: BuildTables,\n  projectId: string,\n  sha: string,\n  excludeBuildId: string,\n): Promise<boolean> {\n  const approved = await new BuildModel(db, tables).list(projectId, { status: \"approved\" });\n  return approved.some((build) => build.gitSha === sha && build.id !== excludeBuildId);\n}\n"],"mappings":";;;;;;AAIA,eAAsB,uBACpB,IACA,QACA,WACA,KACA,gBACkB;CAElB,QAAO,MADgB,IAAI,WAAW,IAAI,MAAM,CAAC,CAAC,KAAK,WAAW,EAAE,QAAQ,WAAW,CAAC,EAAA,CACxE,MAAM,UAAU,MAAM,WAAW,OAAO,MAAM,OAAO,cAAc;AACrF"}

package/dist/capture/statics.d.mts

@@ -2,23 +2,22 @@ import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { DatabaseAdapter } from "../adapter/database.mjs";
 import { StorageAdapter } from "../adapter/storage.mjs";
+import { ExtractionLimits } from "./publish/limits.mjs";
 //#region src/capture/statics.d.ts
 /**
- * Shared Storybook statics handling: unzip a stored build into a scratch
- * directory and persist the extracted files back to storage. Used by the
- * capture orchestrator and by the upload path for opt-in inline extraction
- * (`maxInlineUnzipSize`); both write identical keys, so either may run first.
- */
-/**
- * Extract a build's stored zip into a dedicated scratch directory.
+ * Extract a build's stored zip into a dedicated scratch directory. The caller removes it when
+ * done (`removeJobScratch`).
  *
  * @param storage - Storage holding the uploaded zip.
  * @param scratchDir - Root under which per-build scratch dirs are created.
  * @param projectId - Owning project id.
  * @param buildId - Build whose zip to extract.
+ * @param shardId - Shard extracting it; gives the shard a directory of its own.
+ * @param limits - Entry and uncompressed-byte caps (safe defaults when omitted).
  * @returns The extracted Storybook directory.
+ * @throws {ZipLimitError} When the archive breaks a cap or escapes the target directory.
  */
-declare function extractStorybookToScratch(storage: StorageAdapter, scratchDir: string, projectId: string, buildId: string): Promise<string>;
+declare function extractStorybookToScratch(storage: StorageAdapter, scratchDir: string, projectId: string, buildId: string, shardId?: string, limits?: ExtractionLimits): Promise<string>;
 /**
  * Persist an extracted Storybook directory to storage for published serving.
  *

package/dist/capture/statics.mjs

@@ -2,11 +2,13 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { storybookDir, storybookZipPath } from "../paths.mjs";
-import { dirname, join, relative, resolve, sep } from "node:path";
+import { mapLimit } from "../utils/map-limit.mjs";
+import { jobScratchDir, shardScratchDir } from "./scratch.mjs";
+import { DEFAULT_MAX_UNZIPPED_BYTES, DEFAULT_MAX_ZIP_ENTRIES } from "./publish/limits.mjs";
+import { extractZipStream } from "./publish/extract.mjs";
+import { join, relative, resolve } from "node:path";
+import { createHash } from "node:crypto";
 import { mkdir, readFile, readdir, rm } from "node:fs/promises";
-import { createWriteStream } from "node:fs";
-import { pipeline } from "node:stream/promises";
-import { Parse } from "unzipper";
 //#region src/capture/statics.ts
 /**
 * Shared Storybook statics handling: unzip a stored build into a scratch
@@ -14,23 +16,29 @@ import { Parse } from "unzipper";
 * capture orchestrator and by the upload path for opt-in inline extraction
 * (`maxInlineUnzipSize`); both write identical keys, so either may run first.
 */
+const DEFAULT_EXTRACTION_LIMITS = {
+	maxEntries: DEFAULT_MAX_ZIP_ENTRIES,
+	maxBytes: DEFAULT_MAX_UNZIPPED_BYTES
+};
 /**
-* Extract a build's stored zip into a dedicated scratch directory.
+* Extract a build's stored zip into a dedicated scratch directory. The caller removes it when
+* done (`removeJobScratch`).
 *
 * @param storage - Storage holding the uploaded zip.
 * @param scratchDir - Root under which per-build scratch dirs are created.
 * @param projectId - Owning project id.
 * @param buildId - Build whose zip to extract.
+* @param shardId - Shard extracting it; gives the shard a directory of its own.
+* @param limits - Entry and uncompressed-byte caps (safe defaults when omitted).
 * @returns The extracted Storybook directory.
+* @throws {ZipLimitError} When the archive breaks a cap or escapes the target directory.
 */
-async function extractStorybookToScratch(storage, scratchDir, projectId, buildId) {
-	const targetDir = join(scratchDir, projectId, "builds", buildId, "storybook");
+async function extractStorybookToScratch(storage, scratchDir, projectId, buildId, shardId, limits = DEFAULT_EXTRACTION_LIMITS) {
+	const base = shardId ? shardScratchDir(scratchDir, projectId, buildId, shardId) : jobScratchDir(scratchDir, projectId, buildId);
+	const targetDir = join(base, "storybook");
 	const root = await prepareTargetDir(targetDir);
 	const source = await storage.readStream(storybookZipPath(projectId, buildId));
-	const writes = [];
-	const parseError = await runParser(root, source, writes);
-	if (parseError) throw parseError;
-	await awaitWrites(writes);
+	await extractZipStream(source, root, limits);
 	return targetDir;
 }
 /** Reset a scratch target directory, returning its resolved root. */
@@ -42,11 +50,6 @@ async function prepareTargetDir(targetDir) {
 	await mkdir(targetDir, { recursive: true });
 	return resolve(targetDir);
 }
-/** Await streamed zip writes, throwing the first write failure. */
-async function awaitWrites(writes) {
-	const writeError = (await Promise.allSettled(writes)).find((outcome) => outcome.status === "rejected");
-	if (writeError) throw writeError.reason;
-}
 /**
 * Persist an extracted Storybook directory to storage for published serving.
 *
@@ -65,22 +68,19 @@ async function persistStorybookStatics(storage, sourceDir, projectId, buildId, d
 	const destinationPrefix = storybookDir(projectId, buildId);
 	const files = await walkFiles(root);
 	const manifest = {};
-	await Promise.all(files.map(async (file) => {
+	await mapLimit(files, STATICS_CONCURRENCY, async (file) => {
 		const rel = relative(root, file);
 		const buffer = await readFile(file);
-		const hash = await hashBuffer(buffer);
-		const contentPath = `content/${hash}`;
+		const hash = createHash("sha256").update(buffer).digest("hex");
 		manifest[rel] = hash;
-		if (!await storage.exists(contentPath)) await storage.write(contentPath, buffer);
+		if (!await storage.exists(`content/${hash}`)) await storage.write(`content/${hash}`, buffer);
 		await storage.write(`${destinationPrefix}/${rel}`, buffer);
 		if (db) await upsertContentRef(db, hash);
-	}));
+	});
 	await storage.write(`${destinationPrefix}/manifest.json`, Buffer.from(JSON.stringify(manifest)));
 }
-async function hashBuffer(buffer) {
-	const { createHash } = await import("node:crypto");
-	return createHash("sha256").update(buffer).digest("hex");
-}
+/** Files persisted at once; bounds how many file buffers are in memory together. */
+const STATICS_CONCURRENCY = 8;
 async function upsertContentRef(db, hash) {
 	try {
 		const contentRefs = db.tables.contentRefs;
@@ -98,52 +98,6 @@ async function upsertContentRef(db, hash) {
 		});
 	} catch {}
 }
-function blockedTarget(root, entryName) {
-	const candidate = resolve(join(root, entryName));
-	return candidate !== root && !candidate.startsWith(root + sep);
-}
-/** Pipe one zip entry to disk, tracking the write for later aggregation. */
-function handleEntry(root, entry, writes, fail) {
-	if (blockedTarget(root, entry.path)) {
-		entry.autodrain();
-		fail(/* @__PURE__ */ new Error(`Blocked path traversal in uploaded Storybook: ${entry.path}`));
-		return;
-	}
-	if (entry.type === "Directory") {
-		entry.autodrain();
-		return;
-	}
-	writeEntry(root, entry, writes);
-}
-/** Stream one zip entry to disk, tracking the write for later aggregation. */
-function writeEntry(root, entry, writes) {
-	const target = join(root, entry.path);
-	const done = (async () => {
-		await mkdir(dirname(target), { recursive: true });
-		await pipeline(entry, createWriteStream(target));
-	})();
-	writes.push(done);
-	done.catch(() => {});
-}
-/** Run the unzipper parser, resolving with the first parse error (or null). */
-function runParser(root, source, writes) {
-	return new Promise((settle) => {
-		const parser = Parse();
-		const fail = (error) => {
-			source.destroy();
-			settle(error);
-		};
-		parser.on("entry", (entry) => {
-			handleEntry(root, entry, writes, fail);
-		});
-		parser.on("error", fail);
-		parser.on("close", () => {
-			settle(null);
-		});
-		source.on("error", fail);
-		source.pipe(parser);
-	});
-}
 async function walkFiles(dir) {
 	const entries = await readdir(dir, { withFileTypes: true });
 	return (await Promise.all(entries.map(async (entry) => {

package/dist/capture/statics.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"statics.mjs","names":[],"sources":["../../src/capture/statics.ts"],"sourcesContent":["import { createWriteStream } from \"node:fs\";\nimport { mkdir, readdir, readFile, rm } from \"node:fs/promises\";\nimport { dirname, join, relative, resolve, sep } from \"node:path\";\nimport { pipeline } from \"node:stream/promises\";\nimport { Parse, type Entry } from \"unzipper\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { storybookDir, storybookZipPath } from \"../utils/paths.ts\";\n\n/**\n * Shared Storybook statics handling: unzip a stored build into a scratch\n * directory and persist the extracted files back to storage. Used by the\n * capture orchestrator and by the upload path for opt-in inline extraction\n * (`maxInlineUnzipSize`); both write identical keys, so either may run first.\n */\n\n/**\n * Extract a build's stored zip into a dedicated scratch directory.\n *\n * @param storage - Storage holding the uploaded zip.\n * @param scratchDir - Root under which per-build scratch dirs are created.\n * @param projectId - Owning project id.\n * @param buildId - Build whose zip to extract.\n * @returns The extracted Storybook directory.\n */\nexport async function extractStorybookToScratch(\n  storage: StorageAdapter,\n  scratchDir: string,\n  projectId: string,\n  buildId: string,\n): Promise<string> {\n  const targetDir = join(scratchDir, projectId, \"builds\", buildId, \"storybook\");\n  const root = await prepareTargetDir(targetDir);\n  const source = await storage.readStream(storybookZipPath(projectId, buildId));\n  const writes: Promise<void>[] = [];\n  const parseError = await runParser(root, source, writes);\n  if (parseError) {\n    throw parseError;\n  }\n  await awaitWrites(writes);\n  return targetDir;\n}\n\n/** Reset a scratch target directory, returning its resolved root. */\nasync function prepareTargetDir(targetDir: string): Promise<string> {\n  await rm(targetDir, { recursive: true, force: true });\n  await mkdir(targetDir, { recursive: true });\n  return resolve(targetDir);\n}\n\n/** Await streamed zip writes, throwing the first write failure. */\nasync function awaitWrites(writes: Promise<void>[]): Promise<void> {\n  const outcomes = await Promise.allSettled(writes);\n  const writeError = outcomes.find(\n    (outcome): outcome is PromiseRejectedResult => outcome.status === \"rejected\",\n  );\n  if (writeError) {\n    throw writeError.reason;\n  }\n}\n\n/**\n * Persist an extracted Storybook directory to storage for published serving.\n *\n * Uses content-addressed deduplication: each file is hashed and stored once\n * under `content/<hash>`, with a per-build manifest at\n * `${projectId}/builds/${buildId}/storybook/manifest.json`.\n *\n * @param storage - Destination storage adapter.\n * @param sourceDir - Extracted Storybook directory.\n * @param projectId - Owning project id.\n * @param buildId - Build the files belong to.\n * @param db - Optional database for content ref tracking (enables GC).\n */\nexport async function persistStorybookStatics(\n  storage: StorageAdapter,\n  sourceDir: string,\n  projectId: string,\n  buildId: string,\n  db?: DatabaseAdapter,\n): Promise<void> {\n  const root = resolve(sourceDir);\n  const destinationPrefix = storybookDir(projectId, buildId);\n  const files = await walkFiles(root);\n  const manifest: Record<string, string> = {};\n  await Promise.all(\n    files.map(async (file) => {\n      const rel = relative(root, file);\n      const buffer = await readFile(file);\n      const hash = await hashBuffer(buffer);\n      const contentPath = `content/${hash}`;\n      manifest[rel] = hash;\n      // Only write if not already exists (dedup)\n      if (!(await storage.exists(contentPath))) {\n        await storage.write(contentPath, buffer);\n      }\n      // Also write to legacy per-build path for backward compat (can be removed after migration)\n      // and maintain content_refs for GC\n      await storage.write(`${destinationPrefix}/${rel}`, buffer);\n      if (db) {\n        await upsertContentRef(db, hash);\n      }\n    }),\n  );\n  await storage.write(`${destinationPrefix}/manifest.json`, Buffer.from(JSON.stringify(manifest)));\n}\n\nasync function hashBuffer(buffer: Buffer): Promise<string> {\n  const { createHash } = await import(\"node:crypto\");\n  return createHash(\"sha256\").update(buffer).digest(\"hex\");\n}\n\nasync function upsertContentRef(db: DatabaseAdapter, hash: string): Promise<void> {\n  try {\n    const contentRefs = db.tables.contentRefs;\n    const now = new Date().toISOString();\n    const existing = (await db.get(contentRefs, hash)) as unknown as { refCount: number } | null;\n    if (existing) {\n      await db.update(contentRefs, hash, {\n        refCount: existing.refCount + 1,\n        lastSeenAt: now,\n      });\n    } else {\n      await db.insert(contentRefs, { hash, refCount: 1, lastSeenAt: now, createdAt: now });\n    }\n  } catch {\n    // content_refs table may not exist yet (old DB) — ignore\n  }\n}\n\nfunction blockedTarget(root: string, entryName: string): boolean {\n  const candidate = resolve(join(root, entryName));\n  return candidate !== root && !candidate.startsWith(root + sep);\n}\n\n/** Pipe one zip entry to disk, tracking the write for later aggregation. */\nfunction handleEntry(\n  root: string,\n  entry: Entry,\n  writes: Promise<void>[],\n  fail: (error: unknown) => void,\n): void {\n  if (blockedTarget(root, entry.path)) {\n    entry.autodrain();\n    fail(new Error(`Blocked path traversal in uploaded Storybook: ${entry.path}`));\n    return;\n  }\n  if (entry.type === \"Directory\") {\n    entry.autodrain();\n    return;\n  }\n  writeEntry(root, entry, writes);\n}\n\n/** Stream one zip entry to disk, tracking the write for later aggregation. */\nfunction writeEntry(root: string, entry: Entry, writes: Promise<void>[]): void {\n  const target = join(root, entry.path);\n  const done = (async (): Promise<void> => {\n    await mkdir(dirname(target), { recursive: true });\n    await pipeline(entry, createWriteStream(target));\n  })();\n  writes.push(done);\n  done.catch(() => {}); // Intentionally empty — aggregated via allSettled by the caller\n}\n\n/** Run the unzipper parser, resolving with the first parse error (or null). */\n// oxlint-disable-next-line typescript/promise-function-async -- executor-style promise wrapper around events\nfunction runParser(\n  root: string,\n  source: import(\"node:stream\").Readable,\n  writes: Promise<void>[],\n): Promise<unknown> {\n  return new Promise((settle) => {\n    const parser = Parse();\n    const fail = (error: unknown): void => {\n      source.destroy();\n      settle(error);\n    };\n    parser.on(\"entry\", (entry: Entry) => {\n      handleEntry(root, entry, writes, fail);\n    });\n    parser.on(\"error\", fail);\n    parser.on(\"close\", () => {\n      settle(null);\n    });\n    source.on(\"error\", fail);\n    source.pipe(parser);\n  });\n}\n\nasync function walkFiles(dir: string): Promise<string[]> {\n  const entries = await readdir(dir, { withFileTypes: true });\n  const nested = await Promise.all(\n    entries.map(async (entry) => {\n      const full = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        return await walkFiles(full);\n      }\n      return [full];\n    }),\n  );\n  return nested.flat();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,eAAsB,0BACpB,SACA,YACA,WACA,SACiB;CACjB,MAAM,YAAY,KAAK,YAAY,WAAW,UAAU,SAAS,WAAW;CAC5E,MAAM,OAAO,MAAM,iBAAiB,SAAS;CAC7C,MAAM,SAAS,MAAM,QAAQ,WAAW,iBAAiB,WAAW,OAAO,CAAC;CAC5E,MAAM,SAA0B,CAAC;CACjC,MAAM,aAAa,MAAM,UAAU,MAAM,QAAQ,MAAM;CACvD,IAAI,YACF,MAAM;CAER,MAAM,YAAY,MAAM;CACxB,OAAO;AACT;;AAGA,eAAe,iBAAiB,WAAoC;CAClE,MAAM,GAAG,WAAW;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CACpD,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,OAAO,QAAQ,SAAS;AAC1B;;AAGA,eAAe,YAAY,QAAwC;CAEjE,MAAM,cAAa,MADI,QAAQ,WAAW,MAAM,EAAA,CACpB,MACzB,YAA8C,QAAQ,WAAW,UACpE;CACA,IAAI,YACF,MAAM,WAAW;AAErB;;;;;;;;;;;;;;AAeA,eAAsB,wBACpB,SACA,WACA,WACA,SACA,IACe;CACf,MAAM,OAAO,QAAQ,SAAS;CAC9B,MAAM,oBAAoB,aAAa,WAAW,OAAO;CACzD,MAAM,QAAQ,MAAM,UAAU,IAAI;CAClC,MAAM,WAAmC,CAAC;CAC1C,MAAM,QAAQ,IACZ,MAAM,IAAI,OAAO,SAAS;EACxB,MAAM,MAAM,SAAS,MAAM,IAAI;EAC/B,MAAM,SAAS,MAAM,SAAS,IAAI;EAClC,MAAM,OAAO,MAAM,WAAW,MAAM;EACpC,MAAM,cAAc,WAAW;EAC/B,SAAS,OAAO;EAEhB,IAAI,CAAE,MAAM,QAAQ,OAAO,WAAW,GACpC,MAAM,QAAQ,MAAM,aAAa,MAAM;EAIzC,MAAM,QAAQ,MAAM,GAAG,kBAAkB,GAAG,OAAO,MAAM;EACzD,IAAI,IACF,MAAM,iBAAiB,IAAI,IAAI;CAEnC,CAAC,CACH;CACA,MAAM,QAAQ,MAAM,GAAG,kBAAkB,iBAAiB,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC,CAAC;AACjG;AAEA,eAAe,WAAW,QAAiC;CACzD,MAAM,EAAE,eAAe,MAAM,OAAO;CACpC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO,KAAK;AACzD;AAEA,eAAe,iBAAiB,IAAqB,MAA6B;CAChF,IAAI;EACF,MAAM,cAAc,GAAG,OAAO;EAC9B,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAY,MAAM,GAAG,IAAI,aAAa,IAAI;EAChD,IAAI,UACF,MAAM,GAAG,OAAO,aAAa,MAAM;GACjC,UAAU,SAAS,WAAW;GAC9B,YAAY;EACd,CAAC;OAED,MAAM,GAAG,OAAO,aAAa;GAAE;GAAM,UAAU;GAAG,YAAY;GAAK,WAAW;EAAI,CAAC;CAEvF,QAAQ,CAER;AACF;AAEA,SAAS,cAAc,MAAc,WAA4B;CAC/D,MAAM,YAAY,QAAQ,KAAK,MAAM,SAAS,CAAC;CAC/C,OAAO,cAAc,QAAQ,CAAC,UAAU,WAAW,OAAO,GAAG;AAC/D;;AAGA,SAAS,YACP,MACA,OACA,QACA,MACM;CACN,IAAI,cAAc,MAAM,MAAM,IAAI,GAAG;EACnC,MAAM,UAAU;EAChB,qBAAK,IAAI,MAAM,iDAAiD,MAAM,MAAM,CAAC;EAC7E;CACF;CACA,IAAI,MAAM,SAAS,aAAa;EAC9B,MAAM,UAAU;EAChB;CACF;CACA,WAAW,MAAM,OAAO,MAAM;AAChC;;AAGA,SAAS,WAAW,MAAc,OAAc,QAA+B;CAC7E,MAAM,SAAS,KAAK,MAAM,MAAM,IAAI;CACpC,MAAM,QAAQ,YAA2B;EACvC,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAChD,MAAM,SAAS,OAAO,kBAAkB,MAAM,CAAC;CACjD,EAAA,CAAG;CACH,OAAO,KAAK,IAAI;CAChB,KAAK,YAAY,CAAC,CAAC;AACrB;;AAIA,SAAS,UACP,MACA,QACA,QACkB;CAClB,OAAO,IAAI,SAAS,WAAW;EAC7B,MAAM,SAAS,MAAM;EACrB,MAAM,QAAQ,UAAyB;GACrC,OAAO,QAAQ;GACf,OAAO,KAAK;EACd;EACA,OAAO,GAAG,UAAU,UAAiB;GACnC,YAAY,MAAM,OAAO,QAAQ,IAAI;EACvC,CAAC;EACD,OAAO,GAAG,SAAS,IAAI;EACvB,OAAO,GAAG,eAAe;GACvB,OAAO,IAAI;EACb,CAAC;EACD,OAAO,GAAG,SAAS,IAAI;EACvB,OAAO,KAAK,MAAM;CACpB,CAAC;AACH;AAEA,eAAe,UAAU,KAAgC;CACvD,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;CAU1D,QAAO,MATc,QAAQ,IAC3B,QAAQ,IAAI,OAAO,UAAU;EAC3B,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;EACjC,IAAI,MAAM,YAAY,GACpB,OAAO,MAAM,UAAU,IAAI;EAE7B,OAAO,CAAC,IAAI;CACd,CAAC,CACH,EAAA,CACc,KAAK;AACrB"}
+{"version":3,"file":"statics.mjs","names":[],"sources":["../../src/capture/statics.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { mkdir, readdir, readFile, rm } from \"node:fs/promises\";\nimport { join, relative, resolve } from \"node:path\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { mapLimit } from \"../utils/map-limit.ts\";\nimport { storybookDir, storybookZipPath } from \"../utils/paths.ts\";\nimport { extractZipStream } from \"./publish/extract.ts\";\nimport {\n  DEFAULT_MAX_UNZIPPED_BYTES,\n  DEFAULT_MAX_ZIP_ENTRIES,\n  type ExtractionLimits,\n} from \"./publish/limits.ts\";\nimport { jobScratchDir, shardScratchDir } from \"./scratch.ts\";\n\n/**\n * Shared Storybook statics handling: unzip a stored build into a scratch\n * directory and persist the extracted files back to storage. Used by the\n * capture orchestrator and by the upload path for opt-in inline extraction\n * (`maxInlineUnzipSize`); both write identical keys, so either may run first.\n */\n\nconst DEFAULT_EXTRACTION_LIMITS: ExtractionLimits = {\n  maxEntries: DEFAULT_MAX_ZIP_ENTRIES,\n  maxBytes: DEFAULT_MAX_UNZIPPED_BYTES,\n};\n\n/**\n * Extract a build's stored zip into a dedicated scratch directory. The caller removes it when\n * done (`removeJobScratch`).\n *\n * @param storage - Storage holding the uploaded zip.\n * @param scratchDir - Root under which per-build scratch dirs are created.\n * @param projectId - Owning project id.\n * @param buildId - Build whose zip to extract.\n * @param shardId - Shard extracting it; gives the shard a directory of its own.\n * @param limits - Entry and uncompressed-byte caps (safe defaults when omitted).\n * @returns The extracted Storybook directory.\n * @throws {ZipLimitError} When the archive breaks a cap or escapes the target directory.\n */\nexport async function extractStorybookToScratch(\n  storage: StorageAdapter,\n  scratchDir: string,\n  projectId: string,\n  buildId: string,\n  shardId?: string,\n  limits: ExtractionLimits = DEFAULT_EXTRACTION_LIMITS,\n): Promise<string> {\n  const base = shardId\n    ? shardScratchDir(scratchDir, projectId, buildId, shardId)\n    : jobScratchDir(scratchDir, projectId, buildId);\n  const targetDir = join(base, \"storybook\");\n  const root = await prepareTargetDir(targetDir);\n  const source = await storage.readStream(storybookZipPath(projectId, buildId));\n  await extractZipStream(source, root, limits);\n  return targetDir;\n}\n\n/** Reset a scratch target directory, returning its resolved root. */\nasync function prepareTargetDir(targetDir: string): Promise<string> {\n  await rm(targetDir, { recursive: true, force: true });\n  await mkdir(targetDir, { recursive: true });\n  return resolve(targetDir);\n}\n\n/**\n * Persist an extracted Storybook directory to storage for published serving.\n *\n * Uses content-addressed deduplication: each file is hashed and stored once\n * under `content/<hash>`, with a per-build manifest at\n * `${projectId}/builds/${buildId}/storybook/manifest.json`.\n *\n * @param storage - Destination storage adapter.\n * @param sourceDir - Extracted Storybook directory.\n * @param projectId - Owning project id.\n * @param buildId - Build the files belong to.\n * @param db - Optional database for content ref tracking (enables GC).\n */\nexport async function persistStorybookStatics(\n  storage: StorageAdapter,\n  sourceDir: string,\n  projectId: string,\n  buildId: string,\n  db?: DatabaseAdapter,\n): Promise<void> {\n  const root = resolve(sourceDir);\n  const destinationPrefix = storybookDir(projectId, buildId);\n  const files = await walkFiles(root);\n  const manifest: Record<string, string> = {};\n  // Bounded: a large Storybook has thousands of files, and buffering them all\n  // at once exhausts memory on small hosts. Each file is read fully before any\n  // write: the scratch dir is often the storage root, so the per-build path\n  // below can be the very file being read (a streamed write would truncate it).\n  await mapLimit(files, STATICS_CONCURRENCY, async (file) => {\n    const rel = relative(root, file);\n    const buffer = await readFile(file);\n    const hash = createHash(\"sha256\").update(buffer).digest(\"hex\");\n    manifest[rel] = hash;\n    // Only write if not already exists (dedup)\n    if (!(await storage.exists(`content/${hash}`))) {\n      await storage.write(`content/${hash}`, buffer);\n    }\n    // Also write to legacy per-build path for backward compat (can be removed after migration)\n    // and maintain content_refs for GC\n    await storage.write(`${destinationPrefix}/${rel}`, buffer);\n    if (db) {\n      await upsertContentRef(db, hash);\n    }\n  });\n  await storage.write(`${destinationPrefix}/manifest.json`, Buffer.from(JSON.stringify(manifest)));\n}\n\n/** Files persisted at once; bounds how many file buffers are in memory together. */\nconst STATICS_CONCURRENCY = 8;\n\nasync function upsertContentRef(db: DatabaseAdapter, hash: string): Promise<void> {\n  try {\n    const contentRefs = db.tables.contentRefs;\n    const now = new Date().toISOString();\n    const existing = (await db.get(contentRefs, hash)) as unknown as { refCount: number } | null;\n    if (existing) {\n      await db.update(contentRefs, hash, {\n        refCount: existing.refCount + 1,\n        lastSeenAt: now,\n      });\n    } else {\n      await db.insert(contentRefs, { hash, refCount: 1, lastSeenAt: now, createdAt: now });\n    }\n  } catch {\n    // content_refs table may not exist yet (old DB) — ignore\n  }\n}\n\nasync function walkFiles(dir: string): Promise<string[]> {\n  const entries = await readdir(dir, { withFileTypes: true });\n  const nested = await Promise.all(\n    entries.map(async (entry) => {\n      const full = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        return await walkFiles(full);\n      }\n      return [full];\n    }),\n  );\n  return nested.flat();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsBA,MAAM,4BAA8C;CAClD,YAAY;CACZ,UAAU;AACZ;;;;;;;;;;;;;;AAeA,eAAsB,0BACpB,SACA,YACA,WACA,SACA,SACA,SAA2B,2BACV;CACjB,MAAM,OAAO,UACT,gBAAgB,YAAY,WAAW,SAAS,OAAO,IACvD,cAAc,YAAY,WAAW,OAAO;CAChD,MAAM,YAAY,KAAK,MAAM,WAAW;CACxC,MAAM,OAAO,MAAM,iBAAiB,SAAS;CAC7C,MAAM,SAAS,MAAM,QAAQ,WAAW,iBAAiB,WAAW,OAAO,CAAC;CAC5E,MAAM,iBAAiB,QAAQ,MAAM,MAAM;CAC3C,OAAO;AACT;;AAGA,eAAe,iBAAiB,WAAoC;CAClE,MAAM,GAAG,WAAW;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CACpD,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,OAAO,QAAQ,SAAS;AAC1B;;;;;;;;;;;;;;AAeA,eAAsB,wBACpB,SACA,WACA,WACA,SACA,IACe;CACf,MAAM,OAAO,QAAQ,SAAS;CAC9B,MAAM,oBAAoB,aAAa,WAAW,OAAO;CACzD,MAAM,QAAQ,MAAM,UAAU,IAAI;CAClC,MAAM,WAAmC,CAAC;CAK1C,MAAM,SAAS,OAAO,qBAAqB,OAAO,SAAS;EACzD,MAAM,MAAM,SAAS,MAAM,IAAI;EAC/B,MAAM,SAAS,MAAM,SAAS,IAAI;EAClC,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO,KAAK;EAC7D,SAAS,OAAO;EAEhB,IAAI,CAAE,MAAM,QAAQ,OAAO,WAAW,MAAM,GAC1C,MAAM,QAAQ,MAAM,WAAW,QAAQ,MAAM;EAI/C,MAAM,QAAQ,MAAM,GAAG,kBAAkB,GAAG,OAAO,MAAM;EACzD,IAAI,IACF,MAAM,iBAAiB,IAAI,IAAI;CAEnC,CAAC;CACD,MAAM,QAAQ,MAAM,GAAG,kBAAkB,iBAAiB,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC,CAAC;AACjG;;AAGA,MAAM,sBAAsB;AAE5B,eAAe,iBAAiB,IAAqB,MAA6B;CAChF,IAAI;EACF,MAAM,cAAc,GAAG,OAAO;EAC9B,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAY,MAAM,GAAG,IAAI,aAAa,IAAI;EAChD,IAAI,UACF,MAAM,GAAG,OAAO,aAAa,MAAM;GACjC,UAAU,SAAS,WAAW;GAC9B,YAAY;EACd,CAAC;OAED,MAAM,GAAG,OAAO,aAAa;GAAE;GAAM,UAAU;GAAG,YAAY;GAAK,WAAW;EAAI,CAAC;CAEvF,QAAQ,CAER;AACF;AAEA,eAAe,UAAU,KAAgC;CACvD,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;CAU1D,QAAO,MATc,QAAQ,IAC3B,QAAQ,IAAI,OAAO,UAAU;EAC3B,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;EACjC,IAAI,MAAM,YAAY,GACpB,OAAO,MAAM,UAAU,IAAI;EAE7B,OAAO,CAAC,IAAI;CACd,CAAC,CACH,EAAA,CACc,KAAK;AACrB"}

package/dist/capture/storybook-urls.d.mts

@@ -0,0 +1,40 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { CaptureTarget } from "../adapters/capture-target.mjs";
+import { CaptureRunner } from "../adapter/capture-runner.mjs";
+import { SecretInput } from "../utils/encrypt.mjs";
+import { Build } from "../schema/build.mjs";
+import { Project } from "../schema/project.mjs";
+//#region src/capture/storybook-urls.d.ts
+/** What a pass tells the source: how long it may run, which sizes the token's lifetime. */
+interface StorybookUrlPass {
+  /** The render budget of the pass in ms (`renderBudgetMs`); unset when the pass has none. */
+  budgetMs?: number | undefined;
+}
+/** Gives the URL a target's browser opens, or `undefined` when it needs none (or none can be made). */
+type StorybookUrlSource = ((target: CaptureTarget, pass?: StorybookUrlPass) => Promise<string | undefined>) & {
+  /**
+   * The lifetime in seconds a token minted for a pass of this budget gets (the project's override
+   * or the derived, capped one). A pass that outlasts it is rendered in slices, each with a fresh
+   * token (`renderInSlices`). `undefined` for a target that needs no signed URL (it is never
+   * sliced), and absent on a source that has no such limit.
+   */
+  ttlSeconds?: (target: CaptureTarget, budgetMs: number) => number | undefined;
+};
+/** What minting needs of a capture job. */
+interface StorybookUrlOptions {
+  runner: Pick<CaptureRunner, "metadata">;
+  secret?: SecretInput;
+  publicOrigin?: (() => Promise<string | undefined>) | undefined;
+}
+/**
+ * A source of signed URLs for one build. Every call mints a fresh token, so a shard that waited in
+ * the queue or a retried pass is never handed a token minted before it started.
+ */
+declare function storybookUrlSource(options: StorybookUrlOptions, subject: {
+  build: Pick<Build, "id" | "projectId">;
+  project: Pick<Project, "storybookUrlTtlSeconds">;
+}): StorybookUrlSource;
+//#endregion
+export { StorybookUrlOptions, StorybookUrlPass, StorybookUrlSource, storybookUrlSource };
+//# sourceMappingURL=storybook-urls.d.mts.map

package/dist/capture/storybook-urls.mjs

@@ -0,0 +1,41 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { signStorybookToken, storybookTokenPath, storybookUrlTtl } from "../utils/storybook-token.mjs";
+//#region src/capture/storybook-urls.ts
+/**
+* A source of signed URLs for one build. Every call mints a fresh token, so a shard that waited in
+* the queue or a retried pass is never handed a token minted before it started.
+*/
+function storybookUrlSource(options, subject) {
+	const source = async (target, pass = {}) => {
+		const origin = needsUrl(options.runner, target) ? await options.publicOrigin?.() : void 0;
+		return origin !== void 0 && options.secret ? `${origin}${mint(options.secret, subject, pass)}` : void 0;
+	};
+	source.ttlSeconds = (target, budgetMs) => needsUrl(options.runner, target) ? storybookUrlTtl({
+		override: subject.project.storybookUrlTtlSeconds,
+		budgetMs
+	}) : void 0;
+	return source;
+}
+/** The path of a fresh token for one pass of the build. */
+function mint(secret, subject, pass) {
+	const ttlSeconds = storybookUrlTtl({
+		override: subject.project.storybookUrlTtlSeconds,
+		budgetMs: pass.budgetMs ?? 0
+	});
+	const { id: buildId, projectId } = subject.build;
+	return storybookTokenPath(signStorybookToken({
+		secret,
+		projectId,
+		buildId,
+		ttlSeconds
+	}));
+}
+function needsUrl(runner, target) {
+	return runner.metadata.targets?.some((t) => t.target === target && t.reach === "url") ?? false;
+}
+//#endregion
+export { storybookUrlSource };
+
+//# sourceMappingURL=storybook-urls.mjs.map

package/dist/capture/storybook-urls.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"storybook-urls.mjs","names":[],"sources":["../../src/capture/storybook-urls.ts"],"sourcesContent":["/**\n * The signed Storybook URL of a render (ADR 0007, decision 5): minted at the moment a pass starts,\n * only for a target whose browser cannot reach this host (`reach: \"url\"`). The URL is the build's\n * Storybook root, `<publicOrigin>/_s/<token>/`; it carries the token and is never logged. Its\n * lifetime comes from the pass's render budget unless the project sets one (`storybookUrlTtl`).\n */\nimport type { CaptureRunner, CaptureTarget } from \"../adapters/capture-runner.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport type { SecretInput } from \"../utils/encrypt.ts\";\nimport {\n  signStorybookToken,\n  storybookTokenPath,\n  storybookUrlTtl,\n} from \"../utils/storybook-token.ts\";\n\n/** What a pass tells the source: how long it may run, which sizes the token's lifetime. */\nexport interface StorybookUrlPass {\n  /** The render budget of the pass in ms (`renderBudgetMs`); unset when the pass has none. */\n  budgetMs?: number | undefined;\n}\n\n/** Gives the URL a target's browser opens, or `undefined` when it needs none (or none can be made). */\nexport type StorybookUrlSource = ((\n  target: CaptureTarget,\n  pass?: StorybookUrlPass,\n) => Promise<string | undefined>) & {\n  /**\n   * The lifetime in seconds a token minted for a pass of this budget gets (the project's override\n   * or the derived, capped one). A pass that outlasts it is rendered in slices, each with a fresh\n   * token (`renderInSlices`). `undefined` for a target that needs no signed URL (it is never\n   * sliced), and absent on a source that has no such limit.\n   */\n  ttlSeconds?: (target: CaptureTarget, budgetMs: number) => number | undefined;\n};\n\n/** What minting needs of a capture job. */\nexport interface StorybookUrlOptions {\n  runner: Pick<CaptureRunner, \"metadata\">;\n  secret?: SecretInput;\n  publicOrigin?: (() => Promise<string | undefined>) | undefined;\n}\n\n/**\n * A source of signed URLs for one build. Every call mints a fresh token, so a shard that waited in\n * the queue or a retried pass is never handed a token minted before it started.\n */\nexport function storybookUrlSource(\n  options: StorybookUrlOptions,\n  subject: {\n    build: Pick<Build, \"id\" | \"projectId\">;\n    project: Pick<Project, \"storybookUrlTtlSeconds\">;\n  },\n): StorybookUrlSource {\n  const source: StorybookUrlSource = async (target, pass = {}) => {\n    const origin = needsUrl(options.runner, target) ? await options.publicOrigin?.() : undefined;\n    return origin !== undefined && options.secret\n      ? `${origin}${mint(options.secret, subject, pass)}`\n      : undefined;\n  };\n  source.ttlSeconds = (target, budgetMs): number | undefined =>\n    needsUrl(options.runner, target)\n      ? storybookUrlTtl({ override: subject.project.storybookUrlTtlSeconds, budgetMs })\n      : undefined;\n  return source;\n}\n\n/** The path of a fresh token for one pass of the build. */\nfunction mint(\n  secret: SecretInput,\n  subject: Parameters<typeof storybookUrlSource>[1],\n  pass: StorybookUrlPass,\n): string {\n  const ttlSeconds = storybookUrlTtl({\n    override: subject.project.storybookUrlTtlSeconds,\n    budgetMs: pass.budgetMs ?? 0,\n  });\n  const { id: buildId, projectId } = subject.build;\n  return storybookTokenPath(signStorybookToken({ secret, projectId, buildId, ttlSeconds }));\n}\n\nfunction needsUrl(runner: Pick<CaptureRunner, \"metadata\">, target: CaptureTarget): boolean {\n  return runner.metadata.targets?.some((t) => t.target === target && t.reach === \"url\") ?? false;\n}\n"],"mappings":";;;;;;;;;AA+CA,SAAgB,mBACd,SACA,SAIoB;CACpB,MAAM,SAA6B,OAAO,QAAQ,OAAO,CAAC,MAAM;EAC9D,MAAM,SAAS,SAAS,QAAQ,QAAQ,MAAM,IAAI,MAAM,QAAQ,eAAe,IAAI,KAAA;EACnF,OAAO,WAAW,KAAA,KAAa,QAAQ,SACnC,GAAG,SAAS,KAAK,QAAQ,QAAQ,SAAS,IAAI,MAC9C,KAAA;CACN;CACA,OAAO,cAAc,QAAQ,aAC3B,SAAS,QAAQ,QAAQ,MAAM,IAC3B,gBAAgB;EAAE,UAAU,QAAQ,QAAQ;EAAwB;CAAS,CAAC,IAC9E,KAAA;CACN,OAAO;AACT;;AAGA,SAAS,KACP,QACA,SACA,MACQ;CACR,MAAM,aAAa,gBAAgB;EACjC,UAAU,QAAQ,QAAQ;EAC1B,UAAU,KAAK,YAAY;CAC7B,CAAC;CACD,MAAM,EAAE,IAAI,SAAS,cAAc,QAAQ;CAC3C,OAAO,mBAAmB,mBAAmB;EAAE;EAAQ;EAAW;EAAS;CAAW,CAAC,CAAC;AAC1F;AAEA,SAAS,SAAS,QAAyC,QAAgC;CACzF,OAAO,OAAO,SAAS,SAAS,MAAM,MAAM,EAAE,WAAW,UAAU,EAAE,UAAU,KAAK,KAAK;AAC3F"}

package/dist/capture/storybook.d.mts

@@ -1,13 +1,16 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-import { StoryEntry, StoryParameters, StorySourceAdapter, StoryViewportConfig, Viewport } from "./adapter.mjs";
+import { DiscoverOptions, StoryEntry, StoryParameters, StorySourceAdapter, StoryViewportConfig, Viewport } from "./adapter.mjs";
 import { DepGraph } from "@storyshelf/affected";
 //#region src/capture/storybook.d.ts
 /** Story parameters as serialized by the Storybook index. */
 interface StorybookParameters {
   chromatic?: StoryParameters;
-  storyshelf?: StoryParameters;
+  storyshelf?: StoryParameters & {
+    figma?: unknown;
+  };
   viewport?: StoryViewportConfig;
+  design?: unknown;
 }
 /** Merge the `chromatic` and `storyshelf` parameter layers (`storyshelf` wins). */
 declare function mergeParameters(entry: {
@@ -29,8 +32,13 @@ declare function resolveStoryViewports(entry: Pick<StoryEntry, "parameters">, gl
 declare class StorybookAdapter implements StorySourceAdapter {
   readonly name = "storybook";
   readonly screenshotSelector = "#storybook-root";
-  discover(source: string): Promise<StoryEntry[]>;
-  buildUrl(baseUrl: string, storyId: string): string;
+  discover(source: string, options?: DiscoverOptions): Promise<StoryEntry[]>;
+  /**
+   * The `.test()` entries of a Storybook 10 build (index `subtype: "test"`), which {@link discover}
+   * leaves out. Empty for older Storybooks, whose index has no such entries.
+   */
+  discoverTests(source: string): Promise<StoryEntry[]>;
+  buildUrl(baseUrl: string, storyId: string, globals?: Record<string, unknown>): string;
   /**
    * Load the Vite stats dependency graph of an extracted build for affected
    * capture. Resolves `null` when the build ships no usable stats, in which

package/dist/capture/storybook.mjs

@@ -1,19 +1,32 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { STATS_FILENAME, loadDepGraph } from "@storyshelf/affected";
+import { applyModes, buildGlobalsParam } from "./modes.mjs";
+import { extractDesignUrl } from "./design.mjs";
 import { join } from "node:path";
+import { STATS_FILENAME, loadDepGraph } from "@storyshelf/affected";
 import { readFile } from "node:fs/promises";
 //#region src/capture/storybook.ts
 /** Merge the `chromatic` and `storyshelf` parameter layers (`storyshelf` wins). */
 function mergeParameters(entry) {
+	const { figma: _figma, ...storyshelf } = entry.parameters?.storyshelf ?? {};
 	const merged = {
 		...entry.parameters?.chromatic,
-		...entry.parameters?.storyshelf
+		...storyshelf
 	};
+	const modes = mergeModes(entry.parameters?.chromatic?.modes, entry.parameters?.storyshelf?.modes);
+	if (modes) merged.modes = modes;
 	if (entry.parameters?.viewport) merged.viewport = entry.parameters.viewport;
 	return Object.keys(merged).length > 0 ? merged : void 0;
 }
+/** Union both parameter keys' modes by name (`storyshelf` wins per mode). */
+function mergeModes(chromatic, storyshelf) {
+	const merged = {
+		...chromatic,
+		...storyshelf
+	};
+	return Object.keys(merged).length > 0 ? merged : void 0;
+}
 /**
 * The Storybook `MINIMAL_VIEWPORTS` snapshot used to resolve a story's
 * `defaultViewport` name at capture time. Dimensions are the documented
@@ -48,8 +61,13 @@ const STORYBOOK_BUILTIN_VIEWPORTS = {
 */
 function resolveStoryViewports(entry, globalViewports) {
 	const resolved = storyViewport(entry);
-	if (resolved && !globalViewports.some((v) => v.name === resolved.name)) return [...globalViewports, resolved];
-	return [...globalViewports];
+	const withDefault = resolved && !globalViewports.some((v) => v.name === resolved.name) ? [...globalViewports, resolved] : [...globalViewports];
+	return applyModes(entry.parameters?.modes, withDefault, (name) => namedViewport(entry, name));
+}
+/** Resolve a Storybook viewport name via the story's inline config, then builtins. */
+function namedViewport(entry, name) {
+	const inline = entry.parameters?.viewport?.viewports?.[name];
+	return (inline ? viewportFromInline(name, inline) : void 0) ?? STORYBOOK_BUILTIN_VIEWPORTS[name];
 }
 function storyViewport(entry) {
 	const config = entry.parameters?.viewport;
@@ -78,24 +96,46 @@ function pxOf(value) {
 	const match = /^(\d+(?:\.\d+)?)px$/u.exec(bare);
 	return match ? Number(match[1]) : void 0;
 }
+function toTestEntry(entry) {
+	const test = toStoryEntry(entry);
+	if (entry.parent !== void 0) test.parentId = entry.parent;
+	return test;
+}
+function toStoryEntry(entry, parseDesignUrl) {
+	const design = parseDesignUrl ? extractDesignUrl(entry.parameters, parseDesignUrl) : {};
+	const story = {
+		id: entry.id,
+		title: entry.title,
+		name: entry.name,
+		importPath: entry.importPath,
+		tags: entry.tags,
+		type: entry.type === "docs" ? "docs" : "story",
+		parameters: mergeParameters(entry)
+	};
+	if (design.url) story.designUrl = design.url;
+	if (design.invalid) story.designInvalid = design.invalid;
+	return story;
+}
 /** Discovers stories from a built Storybook via its index file. */
 var StorybookAdapter = class {
 	name = "storybook";
 	screenshotSelector = "#storybook-root";
-	async discover(source) {
+	async discover(source, options = {}) {
+		const index = await this.readIndex(source);
+		return Object.values(index.entries).filter((entry) => entry.type !== "docs" && entry.subtype !== "test").map((entry) => toStoryEntry(entry, options.parseDesignUrl));
+	}
+	/**
+	* The `.test()` entries of a Storybook 10 build (index `subtype: "test"`), which {@link discover}
+	* leaves out. Empty for older Storybooks, whose index has no such entries.
+	*/
+	async discoverTests(source) {
 		const index = await this.readIndex(source);
-		return Object.values(index.entries).filter((entry) => entry.type !== "docs" && entry.subtype !== "test").map((entry) => ({
-			id: entry.id,
-			title: entry.title,
-			name: entry.name,
-			importPath: entry.importPath,
-			tags: entry.tags,
-			type: entry.type === "docs" ? "docs" : "story",
-			parameters: mergeParameters(entry)
-		}));
+		return Object.values(index.entries).filter((entry) => entry.subtype === "test" && entry.type !== "docs").map((entry) => toTestEntry(entry));
 	}
-	buildUrl(baseUrl, storyId) {
-		return `${baseUrl}/iframe.html?id=${encodeURIComponent(storyId)}&viewMode=story`;
+	buildUrl(baseUrl, storyId, globals) {
+		const url = `${baseUrl}/iframe.html?id=${encodeURIComponent(storyId)}&viewMode=story`;
+		const param = globals ? buildGlobalsParam(globals) : "";
+		return param === "" ? url : `${url}&globals=${encodeURIComponent(param)}`;
 	}
 	/**
 	* Load the Vite stats dependency graph of an extracted build for affected

package/dist/capture/storybook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/capture/storybook.ts"],"sourcesContent":["import { loadDepGraph, STATS_FILENAME, type DepGraph } from \"@storyshelf/affected\";\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type {\n  StoryEntry,\n  StoryParameters,\n  StorySourceAdapter,\n  StoryViewportConfig,\n  StoryViewportDefinition,\n  Viewport,\n} from \"./adapter.ts\";\n\ninterface StorybookIndex {\n  v: number;\n  entries: Record<\n    string,\n    {\n      id: string;\n      name: string;\n      title: string;\n      importPath?: string;\n      tags?: string[];\n      type: string;\n      subtype?: string;\n      parameters?: StorybookParameters;\n    }\n  >;\n}\n\n/** Story parameters as serialized by the Storybook index. */\ninterface StorybookParameters {\n  chromatic?: StoryParameters;\n  storyshelf?: StoryParameters;\n  viewport?: StoryViewportConfig;\n}\n\n/** Merge the `chromatic` and `storyshelf` parameter layers (`storyshelf` wins). */\nexport function mergeParameters(entry: {\n  parameters?: StorybookParameters;\n}): StoryParameters | undefined {\n  const merged: StoryParameters = {\n    ...entry.parameters?.chromatic,\n    ...entry.parameters?.storyshelf,\n  };\n  if (entry.parameters?.viewport) merged.viewport = entry.parameters.viewport;\n  return Object.keys(merged).length > 0 ? merged : undefined;\n}\n\n/**\n * The Storybook `MINIMAL_VIEWPORTS` snapshot used to resolve a story's\n * `defaultViewport` name at capture time. Dimensions are the documented\n * stable set; inline `parameters.viewport.viewports` always win over these.\n */\nexport const STORYBOOK_BUILTIN_VIEWPORTS: Readonly<Record<string, Viewport>> = {\n  mobile1: { name: \"mobile1\", width: 320, height: 568 },\n  mobile2: { name: \"mobile2\", width: 414, height: 896 },\n  tablet: { name: \"tablet\", width: 834, height: 1112 },\n  desktop: { name: \"desktop\", width: 1024, height: 1280 },\n};\n\n/**\n * Resolve the viewports a story should be captured at: the project's global\n * list plus the story's Storybook default viewport (union), deduplicated by\n * name. An unresolvable or duplicate default contributes nothing extra.\n */\nexport function resolveStoryViewports(\n  entry: Pick<StoryEntry, \"parameters\">,\n  globalViewports: Viewport[],\n): Viewport[] {\n  const resolved = storyViewport(entry);\n  if (resolved && !globalViewports.some((v) => v.name === resolved.name)) {\n    return [...globalViewports, resolved];\n  }\n  return [...globalViewports];\n}\n\nfunction storyViewport(entry: Pick<StoryEntry, \"parameters\">): Viewport | undefined {\n  const config = entry.parameters?.viewport;\n  const name = config?.defaultViewport;\n  const inline = name ? config?.viewports?.[name] : undefined;\n  const resolved =\n    name && inline\n      ? viewportFromInline(name, inline)\n      : name\n        ? STORYBOOK_BUILTIN_VIEWPORTS[name]\n        : undefined;\n  return resolved;\n}\n\nfunction viewportFromInline(\n  defaultName: string,\n  inline: StoryViewportDefinition,\n): Viewport | undefined {\n  const dims = viewportDims(inline.styles);\n  return dims ? { name: inline.name ?? defaultName, ...dims } : undefined;\n}\n\nfunction viewportDims(\n  styles: StoryViewportDefinition[\"styles\"] | undefined,\n): { width: number; height: number } | undefined {\n  const width = pxOf(styles?.width);\n  const height = pxOf(styles?.height);\n  return width !== undefined && height !== undefined ? { width, height } : undefined;\n}\n\nfunction pxOf(value: string | number | undefined): number | undefined {\n  if (typeof value === \"number\") return Math.round(value);\n  const bare = typeof value === \"string\" ? value.trim() : \"\";\n  const match = /^(\\d+(?:\\.\\d+)?)px$/u.exec(bare);\n  return match ? Number(match[1]) : undefined;\n}\n\n/** Discovers stories from a built Storybook via its index file. */\nexport class StorybookAdapter implements StorySourceAdapter {\n  readonly name = \"storybook\";\n  readonly screenshotSelector = \"#storybook-root\";\n\n  async discover(source: string): Promise<StoryEntry[]> {\n    const index = await this.readIndex(source);\n    return Object.values(index.entries)\n      .filter((entry) => entry.type !== \"docs\" && entry.subtype !== \"test\")\n      .map((entry) => ({\n        id: entry.id,\n        title: entry.title,\n        name: entry.name,\n        importPath: entry.importPath,\n        tags: entry.tags,\n        type: entry.type === \"docs\" ? \"docs\" : \"story\",\n        parameters: mergeParameters(entry),\n      }));\n  }\n\n  // eslint-disable-next-line class-methods-use-this\n  buildUrl(baseUrl: string, storyId: string): string {\n    return `${baseUrl}/iframe.html?id=${encodeURIComponent(storyId)}&viewMode=story`;\n  }\n\n  /**\n   * Load the Vite stats dependency graph of an extracted build for affected\n   * capture. Resolves `null` when the build ships no usable stats, in which\n   * case the orchestrator renders every story.\n   */\n  // eslint-disable-next-line class-methods-use-this\n  async loadDependencyGraph(source: string): Promise<DepGraph | null> {\n    return await loadDepGraph(join(source, STATS_FILENAME));\n  }\n\n  // eslint-disable-next-line class-methods-use-this\n  private async readIndex(source: string): Promise<StorybookIndex> {\n    const candidates: string[] = [\"stories.json\", \"index.json\"];\n    const results = await Promise.all(\n      candidates.map(async (name) => {\n        try {\n          const raw = await readFile(join(source, name), \"utf8\");\n          return JSON.parse(raw) as StorybookIndex;\n        } catch {\n          return null;\n        }\n      }),\n    );\n    const found = results.find((index) => index !== null);\n    if (found) {\n      return found;\n    }\n    throw new Error(`No Storybook index found in ${source}`);\n  }\n}\n"],"mappings":";;;;;;;;AAqCA,SAAgB,gBAAgB,OAEA;CAC9B,MAAM,SAA0B;EAC9B,GAAG,MAAM,YAAY;EACrB,GAAG,MAAM,YAAY;CACvB;CACA,IAAI,MAAM,YAAY,UAAU,OAAO,WAAW,MAAM,WAAW;CACnE,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,IAAI,SAAS,KAAA;AACnD;;;;;;AAOA,MAAa,8BAAkE;CAC7E,SAAS;EAAE,MAAM;EAAW,OAAO;EAAK,QAAQ;CAAI;CACpD,SAAS;EAAE,MAAM;EAAW,OAAO;EAAK,QAAQ;CAAI;CACpD,QAAQ;EAAE,MAAM;EAAU,OAAO;EAAK,QAAQ;CAAK;CACnD,SAAS;EAAE,MAAM;EAAW,OAAO;EAAM,QAAQ;CAAK;AACxD;;;;;;AAOA,SAAgB,sBACd,OACA,iBACY;CACZ,MAAM,WAAW,cAAc,KAAK;CACpC,IAAI,YAAY,CAAC,gBAAgB,MAAM,MAAM,EAAE,SAAS,SAAS,IAAI,GACnE,OAAO,CAAC,GAAG,iBAAiB,QAAQ;CAEtC,OAAO,CAAC,GAAG,eAAe;AAC5B;AAEA,SAAS,cAAc,OAA6D;CAClF,MAAM,SAAS,MAAM,YAAY;CACjC,MAAM,OAAO,QAAQ;CACrB,MAAM,SAAS,OAAO,QAAQ,YAAY,QAAQ,KAAA;CAOlD,OALE,QAAQ,SACJ,mBAAmB,MAAM,MAAM,IAC/B,OACE,4BAA4B,QAC5B,KAAA;AAEV;AAEA,SAAS,mBACP,aACA,QACsB;CACtB,MAAM,OAAO,aAAa,OAAO,MAAM;CACvC,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ;EAAa,GAAG;CAAK,IAAI,KAAA;AAChE;AAEA,SAAS,aACP,QAC+C;CAC/C,MAAM,QAAQ,KAAK,QAAQ,KAAK;CAChC,MAAM,SAAS,KAAK,QAAQ,MAAM;CAClC,OAAO,UAAU,KAAA,KAAa,WAAW,KAAA,IAAY;EAAE;EAAO;CAAO,IAAI,KAAA;AAC3E;AAEA,SAAS,KAAK,OAAwD;CACpE,IAAI,OAAO,UAAU,UAAU,OAAO,KAAK,MAAM,KAAK;CACtD,MAAM,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;CACxD,MAAM,QAAQ,uBAAuB,KAAK,IAAI;CAC9C,OAAO,QAAQ,OAAO,MAAM,EAAE,IAAI,KAAA;AACpC;;AAGA,IAAa,mBAAb,MAA4D;CAC1D,OAAgB;CAChB,qBAA8B;CAE9B,MAAM,SAAS,QAAuC;EACpD,MAAM,QAAQ,MAAM,KAAK,UAAU,MAAM;EACzC,OAAO,OAAO,OAAO,MAAM,OAAO,CAAC,CAChC,QAAQ,UAAU,MAAM,SAAS,UAAU,MAAM,YAAY,MAAM,CAAC,CACpE,KAAK,WAAW;GACf,IAAI,MAAM;GACV,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,MAAM,MAAM,SAAS,SAAS,SAAS;GACvC,YAAY,gBAAgB,KAAK;EACnC,EAAE;CACN;CAGA,SAAS,SAAiB,SAAyB;EACjD,OAAO,GAAG,QAAQ,kBAAkB,mBAAmB,OAAO,EAAE;CAClE;;;;;;CAQA,MAAM,oBAAoB,QAA0C;EAClE,OAAO,MAAM,aAAa,KAAK,QAAQ,cAAc,CAAC;CACxD;CAGA,MAAc,UAAU,QAAyC;EAY/D,MAAM,SAAQ,MAVQ,QAAQ,IAC5B,CAF4B,gBAAgB,YAEnC,CAAC,CAAC,IAAI,OAAO,SAAS;GAC7B,IAAI;IACF,MAAM,MAAM,MAAM,SAAS,KAAK,QAAQ,IAAI,GAAG,MAAM;IACrD,OAAO,KAAK,MAAM,GAAG;GACvB,QAAQ;IACN,OAAO;GACT;EACF,CAAC,CACH,EAAA,CACsB,MAAM,UAAU,UAAU,IAAI;EACpD,IAAI,OACF,OAAO;EAET,MAAM,IAAI,MAAM,+BAA+B,QAAQ;CACzD;AACF"}
+{"version":3,"file":"storybook.mjs","names":[],"sources":["../../src/capture/storybook.ts"],"sourcesContent":["import { loadDepGraph, STATS_FILENAME, type DepGraph } from \"@storyshelf/affected\";\nimport { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type {\n  ModeMap,\n  StoryEntry,\n  StoryParameters,\n  StorySourceAdapter,\n  StoryViewportConfig,\n  StoryViewportDefinition,\n  Viewport,\n} from \"./adapter.ts\";\nimport type { DiscoverOptions } from \"./adapter.ts\";\nimport { extractDesignUrl, type DesignUrlParser } from \"./design.ts\";\nimport { applyModes, buildGlobalsParam } from \"./modes.ts\";\n\ninterface StorybookIndex {\n  v: number;\n  entries: Record<\n    string,\n    {\n      id: string;\n      name: string;\n      title: string;\n      importPath?: string;\n      tags?: string[];\n      type: string;\n      subtype?: string;\n      /** Test entries only: the id of the story the `.test()` is written under. */\n      parent?: string;\n      parameters?: StorybookParameters;\n    }\n  >;\n}\n\n/** Story parameters as serialized by the Storybook index. */\ninterface StorybookParameters {\n  chromatic?: StoryParameters;\n  storyshelf?: StoryParameters & { figma?: unknown };\n  viewport?: StoryViewportConfig;\n  design?: unknown;\n}\n\n/** Merge the `chromatic` and `storyshelf` parameter layers (`storyshelf` wins). */\nexport function mergeParameters(entry: {\n  parameters?: StorybookParameters;\n}): StoryParameters | undefined {\n  const { figma: _figma, ...storyshelf } = entry.parameters?.storyshelf ?? {};\n  const merged: StoryParameters = { ...entry.parameters?.chromatic, ...storyshelf };\n  const modes = mergeModes(entry.parameters?.chromatic?.modes, entry.parameters?.storyshelf?.modes);\n  if (modes) merged.modes = modes;\n  if (entry.parameters?.viewport) merged.viewport = entry.parameters.viewport;\n  return Object.keys(merged).length > 0 ? merged : undefined;\n}\n\n/** Union both parameter keys' modes by name (`storyshelf` wins per mode). */\nfunction mergeModes(chromatic?: ModeMap, storyshelf?: ModeMap): ModeMap | undefined {\n  const merged = { ...chromatic, ...storyshelf };\n  return Object.keys(merged).length > 0 ? merged : undefined;\n}\n\n/**\n * The Storybook `MINIMAL_VIEWPORTS` snapshot used to resolve a story's\n * `defaultViewport` name at capture time. Dimensions are the documented\n * stable set; inline `parameters.viewport.viewports` always win over these.\n */\nexport const STORYBOOK_BUILTIN_VIEWPORTS: Readonly<Record<string, Viewport>> = {\n  mobile1: { name: \"mobile1\", width: 320, height: 568 },\n  mobile2: { name: \"mobile2\", width: 414, height: 896 },\n  tablet: { name: \"tablet\", width: 834, height: 1112 },\n  desktop: { name: \"desktop\", width: 1024, height: 1280 },\n};\n\n/**\n * Resolve the viewports a story should be captured at: the project's global\n * list plus the story's Storybook default viewport (union), deduplicated by\n * name. An unresolvable or duplicate default contributes nothing extra.\n */\nexport function resolveStoryViewports(\n  entry: Pick<StoryEntry, \"parameters\">,\n  globalViewports: Viewport[],\n): Viewport[] {\n  const resolved = storyViewport(entry);\n  const withDefault =\n    resolved && !globalViewports.some((v) => v.name === resolved.name)\n      ? [...globalViewports, resolved]\n      : [...globalViewports];\n  return applyModes(entry.parameters?.modes, withDefault, (name) => namedViewport(entry, name));\n}\n\n/** Resolve a Storybook viewport name via the story's inline config, then builtins. */\nfunction namedViewport(entry: Pick<StoryEntry, \"parameters\">, name: string): Viewport | undefined {\n  const inline = entry.parameters?.viewport?.viewports?.[name];\n  return (\n    (inline ? viewportFromInline(name, inline) : undefined) ?? STORYBOOK_BUILTIN_VIEWPORTS[name]\n  );\n}\n\nfunction storyViewport(entry: Pick<StoryEntry, \"parameters\">): Viewport | undefined {\n  const config = entry.parameters?.viewport;\n  const name = config?.defaultViewport;\n  const inline = name ? config?.viewports?.[name] : undefined;\n  const resolved =\n    name && inline\n      ? viewportFromInline(name, inline)\n      : name\n        ? STORYBOOK_BUILTIN_VIEWPORTS[name]\n        : undefined;\n  return resolved;\n}\n\nfunction viewportFromInline(\n  defaultName: string,\n  inline: StoryViewportDefinition,\n): Viewport | undefined {\n  const dims = viewportDims(inline.styles);\n  return dims ? { name: inline.name ?? defaultName, ...dims } : undefined;\n}\n\nfunction viewportDims(\n  styles: StoryViewportDefinition[\"styles\"] | undefined,\n): { width: number; height: number } | undefined {\n  const width = pxOf(styles?.width);\n  const height = pxOf(styles?.height);\n  return width !== undefined && height !== undefined ? { width, height } : undefined;\n}\n\nfunction pxOf(value: string | number | undefined): number | undefined {\n  if (typeof value === \"number\") return Math.round(value);\n  const bare = typeof value === \"string\" ? value.trim() : \"\";\n  const match = /^(\\d+(?:\\.\\d+)?)px$/u.exec(bare);\n  return match ? Number(match[1]) : undefined;\n}\n\nfunction toTestEntry(entry: StorybookIndex[\"entries\"][string]): StoryEntry {\n  const test = toStoryEntry(entry);\n  if (entry.parent !== undefined) test.parentId = entry.parent;\n  return test;\n}\n\nfunction toStoryEntry(\n  entry: StorybookIndex[\"entries\"][string],\n  parseDesignUrl?: DesignUrlParser,\n): StoryEntry {\n  const design = parseDesignUrl ? extractDesignUrl(entry.parameters, parseDesignUrl) : {};\n  const story: StoryEntry = {\n    id: entry.id,\n    title: entry.title,\n    name: entry.name,\n    importPath: entry.importPath,\n    tags: entry.tags,\n    type: entry.type === \"docs\" ? \"docs\" : \"story\",\n    parameters: mergeParameters(entry),\n  };\n  if (design.url) story.designUrl = design.url;\n  if (design.invalid) story.designInvalid = design.invalid;\n  return story;\n}\n\n/** Discovers stories from a built Storybook via its index file. */\nexport class StorybookAdapter implements StorySourceAdapter {\n  readonly name = \"storybook\";\n  readonly screenshotSelector = \"#storybook-root\";\n\n  async discover(source: string, options: DiscoverOptions = {}): Promise<StoryEntry[]> {\n    const index = await this.readIndex(source);\n    return Object.values(index.entries)\n      .filter((entry) => entry.type !== \"docs\" && entry.subtype !== \"test\")\n      .map((entry) => toStoryEntry(entry, options.parseDesignUrl));\n  }\n\n  /**\n   * The `.test()` entries of a Storybook 10 build (index `subtype: \"test\"`), which {@link discover}\n   * leaves out. Empty for older Storybooks, whose index has no such entries.\n   */\n  async discoverTests(source: string): Promise<StoryEntry[]> {\n    const index = await this.readIndex(source);\n    return Object.values(index.entries)\n      .filter((entry) => entry.subtype === \"test\" && entry.type !== \"docs\")\n      .map((entry) => toTestEntry(entry));\n  }\n\n  // eslint-disable-next-line class-methods-use-this\n  buildUrl(baseUrl: string, storyId: string, globals?: Record<string, unknown>): string {\n    const url = `${baseUrl}/iframe.html?id=${encodeURIComponent(storyId)}&viewMode=story`;\n    const param = globals ? buildGlobalsParam(globals) : \"\";\n    return param === \"\" ? url : `${url}&globals=${encodeURIComponent(param)}`;\n  }\n\n  /**\n   * Load the Vite stats dependency graph of an extracted build for affected\n   * capture. Resolves `null` when the build ships no usable stats, in which\n   * case the orchestrator renders every story.\n   */\n  // eslint-disable-next-line class-methods-use-this\n  async loadDependencyGraph(source: string): Promise<DepGraph | null> {\n    return await loadDepGraph(join(source, STATS_FILENAME));\n  }\n\n  // eslint-disable-next-line class-methods-use-this\n  private async readIndex(source: string): Promise<StorybookIndex> {\n    const candidates: string[] = [\"stories.json\", \"index.json\"];\n    const results = await Promise.all(\n      candidates.map(async (name) => {\n        try {\n          const raw = await readFile(join(source, name), \"utf8\");\n          return JSON.parse(raw) as StorybookIndex;\n        } catch {\n          return null;\n        }\n      }),\n    );\n    const found = results.find((index) => index !== null);\n    if (found) {\n      return found;\n    }\n    throw new Error(`No Storybook index found in ${source}`);\n  }\n}\n"],"mappings":";;;;;;;;;;AA4CA,SAAgB,gBAAgB,OAEA;CAC9B,MAAM,EAAE,OAAO,QAAQ,GAAG,eAAe,MAAM,YAAY,cAAc,CAAC;CAC1E,MAAM,SAA0B;EAAE,GAAG,MAAM,YAAY;EAAW,GAAG;CAAW;CAChF,MAAM,QAAQ,WAAW,MAAM,YAAY,WAAW,OAAO,MAAM,YAAY,YAAY,KAAK;CAChG,IAAI,OAAO,OAAO,QAAQ;CAC1B,IAAI,MAAM,YAAY,UAAU,OAAO,WAAW,MAAM,WAAW;CACnE,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,IAAI,SAAS,KAAA;AACnD;;AAGA,SAAS,WAAW,WAAqB,YAA2C;CAClF,MAAM,SAAS;EAAE,GAAG;EAAW,GAAG;CAAW;CAC7C,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,IAAI,SAAS,KAAA;AACnD;;;;;;AAOA,MAAa,8BAAkE;CAC7E,SAAS;EAAE,MAAM;EAAW,OAAO;EAAK,QAAQ;CAAI;CACpD,SAAS;EAAE,MAAM;EAAW,OAAO;EAAK,QAAQ;CAAI;CACpD,QAAQ;EAAE,MAAM;EAAU,OAAO;EAAK,QAAQ;CAAK;CACnD,SAAS;EAAE,MAAM;EAAW,OAAO;EAAM,QAAQ;CAAK;AACxD;;;;;;AAOA,SAAgB,sBACd,OACA,iBACY;CACZ,MAAM,WAAW,cAAc,KAAK;CACpC,MAAM,cACJ,YAAY,CAAC,gBAAgB,MAAM,MAAM,EAAE,SAAS,SAAS,IAAI,IAC7D,CAAC,GAAG,iBAAiB,QAAQ,IAC7B,CAAC,GAAG,eAAe;CACzB,OAAO,WAAW,MAAM,YAAY,OAAO,cAAc,SAAS,cAAc,OAAO,IAAI,CAAC;AAC9F;;AAGA,SAAS,cAAc,OAAuC,MAAoC;CAChG,MAAM,SAAS,MAAM,YAAY,UAAU,YAAY;CACvD,QACG,SAAS,mBAAmB,MAAM,MAAM,IAAI,KAAA,MAAc,4BAA4B;AAE3F;AAEA,SAAS,cAAc,OAA6D;CAClF,MAAM,SAAS,MAAM,YAAY;CACjC,MAAM,OAAO,QAAQ;CACrB,MAAM,SAAS,OAAO,QAAQ,YAAY,QAAQ,KAAA;CAOlD,OALE,QAAQ,SACJ,mBAAmB,MAAM,MAAM,IAC/B,OACE,4BAA4B,QAC5B,KAAA;AAEV;AAEA,SAAS,mBACP,aACA,QACsB;CACtB,MAAM,OAAO,aAAa,OAAO,MAAM;CACvC,OAAO,OAAO;EAAE,MAAM,OAAO,QAAQ;EAAa,GAAG;CAAK,IAAI,KAAA;AAChE;AAEA,SAAS,aACP,QAC+C;CAC/C,MAAM,QAAQ,KAAK,QAAQ,KAAK;CAChC,MAAM,SAAS,KAAK,QAAQ,MAAM;CAClC,OAAO,UAAU,KAAA,KAAa,WAAW,KAAA,IAAY;EAAE;EAAO;CAAO,IAAI,KAAA;AAC3E;AAEA,SAAS,KAAK,OAAwD;CACpE,IAAI,OAAO,UAAU,UAAU,OAAO,KAAK,MAAM,KAAK;CACtD,MAAM,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;CACxD,MAAM,QAAQ,uBAAuB,KAAK,IAAI;CAC9C,OAAO,QAAQ,OAAO,MAAM,EAAE,IAAI,KAAA;AACpC;AAEA,SAAS,YAAY,OAAsD;CACzE,MAAM,OAAO,aAAa,KAAK;CAC/B,IAAI,MAAM,WAAW,KAAA,GAAW,KAAK,WAAW,MAAM;CACtD,OAAO;AACT;AAEA,SAAS,aACP,OACA,gBACY;CACZ,MAAM,SAAS,iBAAiB,iBAAiB,MAAM,YAAY,cAAc,IAAI,CAAC;CACtF,MAAM,QAAoB;EACxB,IAAI,MAAM;EACV,OAAO,MAAM;EACb,MAAM,MAAM;EACZ,YAAY,MAAM;EAClB,MAAM,MAAM;EACZ,MAAM,MAAM,SAAS,SAAS,SAAS;EACvC,YAAY,gBAAgB,KAAK;CACnC;CACA,IAAI,OAAO,KAAK,MAAM,YAAY,OAAO;CACzC,IAAI,OAAO,SAAS,MAAM,gBAAgB,OAAO;CACjD,OAAO;AACT;;AAGA,IAAa,mBAAb,MAA4D;CAC1D,OAAgB;CAChB,qBAA8B;CAE9B,MAAM,SAAS,QAAgB,UAA2B,CAAC,GAA0B;EACnF,MAAM,QAAQ,MAAM,KAAK,UAAU,MAAM;EACzC,OAAO,OAAO,OAAO,MAAM,OAAO,CAAC,CAChC,QAAQ,UAAU,MAAM,SAAS,UAAU,MAAM,YAAY,MAAM,CAAC,CACpE,KAAK,UAAU,aAAa,OAAO,QAAQ,cAAc,CAAC;CAC/D;;;;;CAMA,MAAM,cAAc,QAAuC;EACzD,MAAM,QAAQ,MAAM,KAAK,UAAU,MAAM;EACzC,OAAO,OAAO,OAAO,MAAM,OAAO,CAAC,CAChC,QAAQ,UAAU,MAAM,YAAY,UAAU,MAAM,SAAS,MAAM,CAAC,CACpE,KAAK,UAAU,YAAY,KAAK,CAAC;CACtC;CAGA,SAAS,SAAiB,SAAiB,SAA2C;EACpF,MAAM,MAAM,GAAG,QAAQ,kBAAkB,mBAAmB,OAAO,EAAE;EACrE,MAAM,QAAQ,UAAU,kBAAkB,OAAO,IAAI;EACrD,OAAO,UAAU,KAAK,MAAM,GAAG,IAAI,WAAW,mBAAmB,KAAK;CACxE;;;;;;CAQA,MAAM,oBAAoB,QAA0C;EAClE,OAAO,MAAM,aAAa,KAAK,QAAQ,cAAc,CAAC;CACxD;CAGA,MAAc,UAAU,QAAyC;EAY/D,MAAM,SAAQ,MAVQ,QAAQ,IAC5B,CAF4B,gBAAgB,YAEnC,CAAC,CAAC,IAAI,OAAO,SAAS;GAC7B,IAAI;IACF,MAAM,MAAM,MAAM,SAAS,KAAK,QAAQ,IAAI,GAAG,MAAM;IACrD,OAAO,KAAK,MAAM,GAAG;GACvB,QAAQ;IACN,OAAO;GACT;EACF,CAAC,CACH,EAAA,CACsB,MAAM,UAAU,UAAU,IAAI;EACpD,IAAI,OACF,OAAO;EAET,MAAM,IAAI,MAAM,+BAA+B,QAAQ;CACzD;AACF"}

package/dist/capture/target.mjs

@@ -0,0 +1,21 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { BuildModel } from "../models/build.mjs";
+import { ProjectModel } from "../models/project.mjs";
+//#region src/capture/target.ts
+/** Load a build and its project, throwing when either is gone. */
+async function loadTarget(options, buildId) {
+	const build = await new BuildModel(options.db, options.tables).get(buildId);
+	if (!build) throw new Error(`Build not found: ${buildId}`);
+	const project = await new ProjectModel(options.db, options.tables).get(build.projectId);
+	if (!project) throw new Error(`Project not found: ${build.projectId}`);
+	return {
+		build,
+		project
+	};
+}
+//#endregion
+export { loadTarget };
+
+//# sourceMappingURL=target.mjs.map

package/dist/capture/target.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.mjs","names":[],"sources":["../../src/capture/target.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { BuildModel, type BuildTables } from \"../models/build.ts\";\nimport { ProjectModel, type ProjectTables } from \"../models/project.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\n\n/** Load a build and its project, throwing when either is gone. */\nexport async function loadTarget(\n  options: { db: DatabaseAdapter; tables: BuildTables & ProjectTables },\n  buildId: string,\n): Promise<{ build: Build; project: Project }> {\n  const build = await new BuildModel(options.db, options.tables).get(buildId);\n  if (!build) {\n    throw new Error(`Build not found: ${buildId}`);\n  }\n  const project = await new ProjectModel(options.db, options.tables).get(build.projectId);\n  if (!project) {\n    throw new Error(`Project not found: ${build.projectId}`);\n  }\n  return { build, project };\n}\n"],"mappings":";;;;;;;AAOA,eAAsB,WACpB,SACA,SAC6C;CAC7C,MAAM,QAAQ,MAAM,IAAI,WAAW,QAAQ,IAAI,QAAQ,MAAM,CAAC,CAAC,IAAI,OAAO;CAC1E,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,oBAAoB,SAAS;CAE/C,MAAM,UAAU,MAAM,IAAI,aAAa,QAAQ,IAAI,QAAQ,MAAM,CAAC,CAAC,IAAI,MAAM,SAAS;CACtF,IAAI,CAAC,SACH,MAAM,IAAI,MAAM,sBAAsB,MAAM,WAAW;CAEzD,OAAO;EAAE;EAAO;CAAQ;AAC1B"}

package/dist/capture/targets.d.mts

@@ -0,0 +1,25 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { RunnerTarget } from "../adapters/capture-target.mjs";
+import { CaptureRunner } from "../adapter/capture-runner.mjs";
+//#region src/capture/targets.d.ts
+/** Why a `reach: "url"` target is unavailable without a secret (the first words are matched by tests and docs). */
+declare const NO_SECRET_REASON = "no secret: set the server secret, it signs the Storybook URL the remote browser opens";
+/** Why it is unavailable without a confirmed public origin. */
+declare const NO_ORIGIN_REASON = "no public origin: set PUBLIC_BASE_URL, or confirm the detected origin on the System page";
+/** What a target that needs a URL depends on. */
+interface TargetPrerequisites {
+  /** The confirmed public origin (ADR 0007, decision 6); absent while none is confirmed. */
+  publicOrigin: string | undefined;
+  /** Whether the server has a `secret` to sign Storybook URLs with. */
+  hasSecret: boolean;
+}
+/**
+ * The runner's targets with `reach: "url"` ones marked `unavailable` while they lack a `secret` or a
+ * public origin (ADR 0007), so a settings save refuses them and a build fails at once with the
+ * reason. `undefined` when the runner publishes no list (it offers any target).
+ */
+declare function offeredTargets(runner: Pick<CaptureRunner, "metadata">, prerequisites: TargetPrerequisites): readonly RunnerTarget[] | undefined;
+//#endregion
+export { NO_ORIGIN_REASON, NO_SECRET_REASON, TargetPrerequisites, offeredTargets };
+//# sourceMappingURL=targets.d.mts.map

package/dist/capture/targets.mjs

@@ -0,0 +1,32 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/capture/targets.ts
+/** Why a `reach: "url"` target is unavailable without a secret (the first words are matched by tests and docs). */
+const NO_SECRET_REASON = "no secret: set the server secret, it signs the Storybook URL the remote browser opens";
+/** Why it is unavailable without a confirmed public origin. */
+const NO_ORIGIN_REASON = "no public origin: set PUBLIC_BASE_URL, or confirm the detected origin on the System page";
+/**
+* The runner's targets with `reach: "url"` ones marked `unavailable` while they lack a `secret` or a
+* public origin (ADR 0007), so a settings save refuses them and a build fails at once with the
+* reason. `undefined` when the runner publishes no list (it offers any target).
+*/
+function offeredTargets(runner, prerequisites) {
+	return runner.metadata.targets?.map((entry) => withPrerequisites(entry, prerequisites));
+}
+function withPrerequisites(entry, prerequisites) {
+	if (entry.reach !== "url" || entry.status !== "ready") return entry;
+	if (!prerequisites.hasSecret) return {
+		...entry,
+		status: { unavailable: NO_SECRET_REASON }
+	};
+	if (prerequisites.publicOrigin === void 0) return {
+		...entry,
+		status: { unavailable: NO_ORIGIN_REASON }
+	};
+	return entry;
+}
+//#endregion
+export { NO_ORIGIN_REASON, NO_SECRET_REASON, offeredTargets };
+
+//# sourceMappingURL=targets.mjs.map

package/dist/capture/targets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.mjs","names":[],"sources":["../../src/capture/targets.ts"],"sourcesContent":["/** What a runner offers right now: its declared targets, minus the ones this deployment cannot reach. */\nimport type { CaptureRunner, RunnerTarget } from \"../adapters/capture-runner.ts\";\n\n/** Why a `reach: \"url\"` target is unavailable without a secret (the first words are matched by tests and docs). */\nexport const NO_SECRET_REASON =\n  \"no secret: set the server secret, it signs the Storybook URL the remote browser opens\";\n\n/** Why it is unavailable without a confirmed public origin. */\nexport const NO_ORIGIN_REASON =\n  \"no public origin: set PUBLIC_BASE_URL, or confirm the detected origin on the System page\";\n\n/** What a target that needs a URL depends on. */\nexport interface TargetPrerequisites {\n  /** The confirmed public origin (ADR 0007, decision 6); absent while none is confirmed. */\n  publicOrigin: string | undefined;\n  /** Whether the server has a `secret` to sign Storybook URLs with. */\n  hasSecret: boolean;\n}\n\n/**\n * The runner's targets with `reach: \"url\"` ones marked `unavailable` while they lack a `secret` or a\n * public origin (ADR 0007), so a settings save refuses them and a build fails at once with the\n * reason. `undefined` when the runner publishes no list (it offers any target).\n */\nexport function offeredTargets(\n  runner: Pick<CaptureRunner, \"metadata\">,\n  prerequisites: TargetPrerequisites,\n): readonly RunnerTarget[] | undefined {\n  return runner.metadata.targets?.map((entry) => withPrerequisites(entry, prerequisites));\n}\n\nfunction withPrerequisites(entry: RunnerTarget, prerequisites: TargetPrerequisites): RunnerTarget {\n  if (entry.reach !== \"url\" || entry.status !== \"ready\") {\n    return entry;\n  }\n  if (!prerequisites.hasSecret) {\n    return { ...entry, status: { unavailable: NO_SECRET_REASON } };\n  }\n  if (prerequisites.publicOrigin === undefined) {\n    return { ...entry, status: { unavailable: NO_ORIGIN_REASON } };\n  }\n  return entry;\n}\n"],"mappings":";;;;;AAIA,MAAa,mBACX;;AAGF,MAAa,mBACX;;;;;;AAeF,SAAgB,eACd,QACA,eACqC;CACrC,OAAO,OAAO,SAAS,SAAS,KAAK,UAAU,kBAAkB,OAAO,aAAa,CAAC;AACxF;AAEA,SAAS,kBAAkB,OAAqB,eAAkD;CAChG,IAAI,MAAM,UAAU,SAAS,MAAM,WAAW,SAC5C,OAAO;CAET,IAAI,CAAC,cAAc,WACjB,OAAO;EAAE,GAAG;EAAO,QAAQ,EAAE,aAAa,iBAAiB;CAAE;CAE/D,IAAI,cAAc,iBAAiB,KAAA,GACjC,OAAO;EAAE,GAAG;EAAO,QAAQ,EAAE,aAAa,iBAAiB;CAAE;CAE/D,OAAO;AACT"}