@storyshelf/core 0.6.2 → 0.8.0

package/dist/capture/shards/reduce.mjs

@@ -0,0 +1,96 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { BuildModel } from "../../models/build.mjs";
+import { finalizeBuild } from "../pipeline.mjs";
+import { CaptureShardModel } from "../../models/capture-shard.mjs";
+import { contextOf } from "./context.mjs";
+// src/capture/shards/reduce.ts
+/** The reduce stage: when the last render shard ends, exactly one worker finishes the build. */
+/**
+* When every render shard has ended, claim the finalize (exactly one worker can) and finish the
+* build from the plan and the shards' outcomes. Returns the summary for the winner, else null.
+*
+* A finalize that throws gives its claim back, so the next run to reduce the build (a redelivery
+* of the same shard) finalizes it instead of finding the claim taken. On a last try (`final`)
+* nothing will come back for it, so the build is failed and the failure reported as the summary.
+*/
+async function reduceBuild(target, final = true) {
+	const shards = new CaptureShardModel(target.options.db);
+	const rows = await closedShards(shards, target.build.id);
+	if (!rows || !await shards.claimFinalize(target.project.id, target.build.id)) return null;
+	return await finalizeClaimed(target, shards, rows, final);
+}
+/** Finalize under the claim this run holds; on failure, give the claim back. */
+async function finalizeClaimed(target, shards, rows, final) {
+	const plan = await shards.plan(target.build.id);
+	try {
+		const summary = await finalizeSharded(target, rows, plan);
+		await shards.finishFinalize(target.build.id);
+		return summary;
+	} catch (error) {
+		await shards.releaseFinalize(target.build.id);
+		if (!final) throw error;
+		return await failFinalize(target, plan, error);
+	}
+}
+/** The build's render shards once every one has ended, else null (none, or some still open). */
+async function closedShards(shards, buildId) {
+	const rows = await shards.renderShards(buildId);
+	const open = rows.some((row) => row.status === "pending" || row.status === "running");
+	return rows.length === 0 || open ? null : rows;
+}
+async function finalizeSharded(target, rows, plan) {
+	const planResult = planResultOf(plan);
+	const sets = collectSets(rows, planResult);
+	await finalizeBuild(contextOf(target, {
+		viewports: [],
+		browsers: []
+	}), new Set(planResult.storyIds ?? []), sets.failed, sets.flaky, sets.a11y);
+	const finished = await new BuildModel(target.options.db, target.options.tables).get(target.build.id);
+	return {
+		storyCount: planResult.storyIds?.length ?? 0,
+		failedCount: sets.failed.size,
+		buildStatus: finished?.status ?? "failed",
+		attemptId: plan?.attemptId ?? null
+	};
+}
+/** The last try at finalizing failed: fail the build, so it does not sit in `capturing`. */
+async function failFinalize(target, plan, error) {
+	await new BuildModel(target.options.db, target.options.tables).setStatus(target.build.id, "failed");
+	return {
+		storyCount: planResultOf(plan).storyIds?.length ?? 0,
+		failedCount: 0,
+		buildStatus: "failed",
+		attemptId: plan?.attemptId ?? null,
+		error: error instanceof Error ? error.message : String(error)
+	};
+}
+function planResultOf(plan) {
+	return JSON.parse(plan?.result ?? "{}");
+}
+/** Union the plan's and every shard's failures; a shard that ended `failed` fails all its stories. */
+function collectSets(rows, plan) {
+	const union = {
+		failed: new Set(plan.failedStoryIds ?? []),
+		flaky: /* @__PURE__ */ new Set(),
+		a11y: /* @__PURE__ */ new Set()
+	};
+	for (const row of rows) if (row.status === "failed") addAll(union.failed, storyIdsOf(row));
+	else addShardResult(union, JSON.parse(row.result ?? "{}"));
+	return union;
+}
+function addShardResult(union, result) {
+	addAll(union.failed, result.failedStoryIds ?? []);
+	addAll(union.flaky, result.flakyStoryIds ?? []);
+	addAll(union.a11y, result.a11yStoryIds ?? []);
+}
+function addAll(into, ids) {
+	for (const id of ids) into.add(id);
+}
+function storyIdsOf(row) {
+	return (JSON.parse(row.payload ?? "{}").browsers ?? []).flatMap((engine) => engine.stories.map((story) => story.id));
+}
+export { reduceBuild };
+
+//# sourceMappingURL=reduce.mjs.map

package/dist/capture/shards/reduce.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"reduce.mjs","names":[],"sources":["../../../src/capture/shards/reduce.ts"],"sourcesContent":["/** The reduce stage: when the last render shard ends, exactly one worker finishes the build. */\nimport { BuildModel } from \"../../models/build.ts\";\nimport { CaptureShardModel } from \"../../models/capture-shard.ts\";\nimport type { CaptureShard } from \"../../schema/capture-shard.ts\";\nimport type { BuildStatus } from \"../../types.ts\";\nimport { finalizeBuild } from \"../pipeline.ts\";\nimport type { PlanResult, ShardPayload, ShardResult } from \"../shard-plan.ts\";\nimport { contextOf, type ShardTarget } from \"./context.ts\";\n\n/** The finished build, reported by whichever worker finalized it. */\nexport interface FinalSummary {\n  storyCount: number;\n  failedCount: number;\n  buildStatus: BuildStatus;\n  /** The attempt row the plan was made under, to be closed by the caller. */\n  attemptId: string | null;\n  /** Set when the finalize itself failed on a last try, and the build was failed for it. */\n  error?: string;\n}\n\n/**\n * When every render shard has ended, claim the finalize (exactly one worker can) and finish the\n * build from the plan and the shards' outcomes. Returns the summary for the winner, else null.\n *\n * A finalize that throws gives its claim back, so the next run to reduce the build (a redelivery\n * of the same shard) finalizes it instead of finding the claim taken. On a last try (`final`)\n * nothing will come back for it, so the build is failed and the failure reported as the summary.\n */\nexport async function reduceBuild(target: ShardTarget, final = true): Promise<FinalSummary | null> {\n  const shards = new CaptureShardModel(target.options.db);\n  const rows = await closedShards(shards, target.build.id);\n  if (!rows || !(await shards.claimFinalize(target.project.id, target.build.id))) {\n    return null;\n  }\n  return await finalizeClaimed(target, shards, rows, final);\n}\n\n/** Finalize under the claim this run holds; on failure, give the claim back. */\nasync function finalizeClaimed(\n  target: ShardTarget,\n  shards: CaptureShardModel,\n  rows: CaptureShard[],\n  final: boolean,\n): Promise<FinalSummary> {\n  const plan = await shards.plan(target.build.id);\n  try {\n    const summary = await finalizeSharded(target, rows, plan);\n    await shards.finishFinalize(target.build.id);\n    return summary;\n  } catch (error) {\n    await shards.releaseFinalize(target.build.id);\n    if (!final) {\n      throw error;\n    }\n    return await failFinalize(target, plan, error);\n  }\n}\n\n/** The build's render shards once every one has ended, else null (none, or some still open). */\nasync function closedShards(\n  shards: CaptureShardModel,\n  buildId: string,\n): Promise<CaptureShard[] | null> {\n  const rows = await shards.renderShards(buildId);\n  const open = rows.some((row) => row.status === \"pending\" || row.status === \"running\");\n  return rows.length === 0 || open ? null : rows;\n}\n\nasync function finalizeSharded(\n  target: ShardTarget,\n  rows: CaptureShard[],\n  plan: CaptureShard | null,\n): Promise<FinalSummary> {\n  const planResult = planResultOf(plan);\n  const sets = collectSets(rows, planResult);\n  await finalizeBuild(\n    contextOf(target, { viewports: [], browsers: [] }),\n    new Set(planResult.storyIds ?? []),\n    sets.failed,\n    sets.flaky,\n    sets.a11y,\n  );\n  const finished = await new BuildModel(target.options.db, target.options.tables).get(\n    target.build.id,\n  );\n  return {\n    storyCount: planResult.storyIds?.length ?? 0,\n    failedCount: sets.failed.size,\n    buildStatus: finished?.status ?? \"failed\",\n    attemptId: plan?.attemptId ?? null,\n  };\n}\n\n/** The last try at finalizing failed: fail the build, so it does not sit in `capturing`. */\nasync function failFinalize(\n  target: ShardTarget,\n  plan: CaptureShard | null,\n  error: unknown,\n): Promise<FinalSummary> {\n  await new BuildModel(target.options.db, target.options.tables).setStatus(\n    target.build.id,\n    \"failed\",\n  );\n  return {\n    storyCount: planResultOf(plan).storyIds?.length ?? 0,\n    failedCount: 0,\n    buildStatus: \"failed\",\n    attemptId: plan?.attemptId ?? null,\n    error: error instanceof Error ? error.message : String(error),\n  };\n}\n\nfunction planResultOf(plan: CaptureShard | null): Partial<PlanResult> {\n  return JSON.parse(plan?.result ?? \"{}\") as Partial<PlanResult>;\n}\n\ninterface FailureUnion {\n  failed: Set<string>;\n  flaky: Set<string>;\n  a11y: Set<string>;\n}\n\n/** Union the plan's and every shard's failures; a shard that ended `failed` fails all its stories. */\nfunction collectSets(rows: CaptureShard[], plan: Partial<PlanResult>): FailureUnion {\n  const union: FailureUnion = {\n    failed: new Set(plan.failedStoryIds ?? []),\n    flaky: new Set(),\n    a11y: new Set(),\n  };\n  for (const row of rows) {\n    if (row.status === \"failed\") {\n      addAll(union.failed, storyIdsOf(row));\n    } else {\n      addShardResult(union, JSON.parse(row.result ?? \"{}\") as Partial<ShardResult>);\n    }\n  }\n  return union;\n}\n\nfunction addShardResult(union: FailureUnion, result: Partial<ShardResult>): void {\n  addAll(union.failed, result.failedStoryIds ?? []);\n  addAll(union.flaky, result.flakyStoryIds ?? []);\n  addAll(union.a11y, result.a11yStoryIds ?? []);\n}\n\nfunction addAll(into: Set<string>, ids: readonly string[]): void {\n  for (const id of ids) {\n    into.add(id);\n  }\n}\n\nfunction storyIdsOf(row: CaptureShard): string[] {\n  const payload = JSON.parse(row.payload ?? \"{}\") as Partial<ShardPayload>;\n  return (payload.browsers ?? []).flatMap((engine) => engine.stories.map((story) => story.id));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA4BA,eAAsB,YAAY,QAAqB,QAAQ,MAAoC;CACjG,MAAM,SAAS,IAAI,kBAAkB,OAAO,QAAQ,EAAE;CACtD,MAAM,OAAO,MAAM,aAAa,QAAQ,OAAO,MAAM,EAAE;CACvD,IAAI,CAAC,QAAQ,CAAE,MAAM,OAAO,cAAc,OAAO,QAAQ,IAAI,OAAO,MAAM,EAAE,GAC1E,OAAO;CAET,OAAO,MAAM,gBAAgB,QAAQ,QAAQ,MAAM,KAAK;AAC1D;;AAGA,eAAe,gBACb,QACA,QACA,MACA,OACuB;CACvB,MAAM,OAAO,MAAM,OAAO,KAAK,OAAO,MAAM,EAAE;CAC9C,IAAI;EACF,MAAM,UAAU,MAAM,gBAAgB,QAAQ,MAAM,IAAI;EACxD,MAAM,OAAO,eAAe,OAAO,MAAM,EAAE;EAC3C,OAAO;CACT,SAAS,OAAO;EACd,MAAM,OAAO,gBAAgB,OAAO,MAAM,EAAE;EAC5C,IAAI,CAAC,OACH,MAAM;EAER,OAAO,MAAM,aAAa,QAAQ,MAAM,KAAK;CAC/C;AACF;;AAGA,eAAe,aACb,QACA,SACgC;CAChC,MAAM,OAAO,MAAM,OAAO,aAAa,OAAO;CAC9C,MAAM,OAAO,KAAK,MAAM,QAAQ,IAAI,WAAW,aAAa,IAAI,WAAW,SAAS;CACpF,OAAO,KAAK,WAAW,KAAK,OAAO,OAAO;AAC5C;AAEA,eAAe,gBACb,QACA,MACA,MACuB;CACvB,MAAM,aAAa,aAAa,IAAI;CACpC,MAAM,OAAO,YAAY,MAAM,UAAU;CACzC,MAAM,cACJ,UAAU,QAAQ;EAAE,WAAW,CAAC;EAAG,UAAU,CAAC;CAAE,CAAC,GACjD,IAAI,IAAI,WAAW,YAAY,CAAC,CAAC,GACjC,KAAK,QACL,KAAK,OACL,KAAK,IACP;CACA,MAAM,WAAW,MAAM,IAAI,WAAW,OAAO,QAAQ,IAAI,OAAO,QAAQ,MAAM,CAAC,CAAC,IAC9E,OAAO,MAAM,EACf;CACA,OAAO;EACL,YAAY,WAAW,UAAU,UAAU;EAC3C,aAAa,KAAK,OAAO;EACzB,aAAa,UAAU,UAAU;EACjC,WAAW,MAAM,aAAa;CAChC;AACF;;AAGA,eAAe,aACb,QACA,MACA,OACuB;CACvB,MAAM,IAAI,WAAW,OAAO,QAAQ,IAAI,OAAO,QAAQ,MAAM,CAAC,CAAC,UAC7D,OAAO,MAAM,IACb,QACF;CACA,OAAO;EACL,YAAY,aAAa,IAAI,CAAC,CAAC,UAAU,UAAU;EACnD,aAAa;EACb,aAAa;EACb,WAAW,MAAM,aAAa;EAC9B,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CAC9D;AACF;AAEA,SAAS,aAAa,MAAgD;CACpE,OAAO,KAAK,MAAM,MAAM,UAAU,IAAI;AACxC;;AASA,SAAS,YAAY,MAAsB,MAAyC;CAClF,MAAM,QAAsB;EAC1B,QAAQ,IAAI,IAAI,KAAK,kBAAkB,CAAC,CAAC;EACzC,uBAAO,IAAI,IAAI;EACf,sBAAM,IAAI,IAAI;CAChB;CACA,KAAK,MAAM,OAAO,MAChB,IAAI,IAAI,WAAW,UACjB,OAAO,MAAM,QAAQ,WAAW,GAAG,CAAC;MAEpC,eAAe,OAAO,KAAK,MAAM,IAAI,UAAU,IAAI,CAAyB;CAGhF,OAAO;AACT;AAEA,SAAS,eAAe,OAAqB,QAAoC;CAC/E,OAAO,MAAM,QAAQ,OAAO,kBAAkB,CAAC,CAAC;CAChD,OAAO,MAAM,OAAO,OAAO,iBAAiB,CAAC,CAAC;CAC9C,OAAO,MAAM,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAC9C;AAEA,SAAS,OAAO,MAAmB,KAA8B;CAC/D,KAAK,MAAM,MAAM,KACf,KAAK,IAAI,EAAE;AAEf;AAEA,SAAS,WAAW,KAA6B;CAE/C,QADgB,KAAK,MAAM,IAAI,WAAW,IAC5B,CAAC,CAAC,YAAY,CAAC,EAAA,CAAG,SAAS,WAAW,OAAO,QAAQ,KAAK,UAAU,MAAM,EAAE,CAAC;AAC7F"}

package/dist/capture/sizing.d.mts

@@ -1,7 +1,6 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { Viewport } from "./adapter.mjs";
-//#region src/capture/sizing.d.ts
 /** Default min/max dimensions for cropped/fullPage screenshots (diff stability). */
 declare const SIZING_DEFAULTS: {
   readonly minWidth: 100;
@@ -53,6 +52,5 @@ interface ScreenshotPlan {
 declare function getScreenshotPlan(viewport: Viewport, box: BoundingBox | null, options?: SizingOptions): ScreenshotPlan;
 /** Resolve viewports from project/server config with fallback to default (not sizing, just list). */
 declare function resolveViewports(rawViewports: string | null | undefined, fallback: Viewport[], serverViewports?: Viewport[]): Viewport[];
-//#endregion
 export { BoundingBox, SIZING_DEFAULTS, ScreenshotPlan, SizingOptions, getScreenshotPlan, resolveViewports };
 //# sourceMappingURL=sizing.d.mts.map

package/dist/capture/sizing.mjs

@@ -1,8 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { sha256 } from "../utils/hash.mjs";
-//#region src/capture/sizing.ts
+// src/capture/sizing.ts
 /** Padding around the cropped component (8px each side). */
 const PAD = 16;
 const HALF_PAD = 8;
@@ -104,16 +103,6 @@ function parsedViewports(raw) {
 	} catch {}
 	return null;
 }
-/** Hash infra determinism: browser + viewports + sizing defaults. */
-function infraHashFor(browser, viewports, defaults = SIZING_DEFAULTS) {
-	const payload = JSON.stringify({
-		browser,
-		viewports,
-		defaults
-	});
-	return sha256(payload);
-}
-//#endregion
-export { SIZING_DEFAULTS, getScreenshotPlan, infraHashFor, resolveViewports };
+export { SIZING_DEFAULTS, getScreenshotPlan, resolveViewports };
 
 //# sourceMappingURL=sizing.mjs.map

package/dist/capture/sizing.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sizing.mjs","names":[],"sources":["../../src/capture/sizing.ts"],"sourcesContent":["import { sha256 } from \"../utils/hash.ts\";\nimport type { Viewport } from \"./adapter.ts\";\n\n/** Padding around the cropped component (8px each side). */\nconst PAD = 16;\nconst HALF_PAD = 8;\n\n/** Default min/max dimensions for cropped/fullPage screenshots (diff stability). */\nexport const SIZING_DEFAULTS = {\n  minWidth: 100,\n  minHeight: 100,\n  maxWidth: 2000,\n  maxHeight: 4000,\n  whitespaceThreshold: 0.6,\n} as const;\n\n/** Bounding box of #storybook-root as returned by Playwright/Puppeteer. */\nexport interface BoundingBox {\n  x: number;\n  y: number;\n  width: number;\n  height: number;\n}\n\n/** Options for computing the screenshot plan. */\nexport interface SizingOptions {\n  /** Per-story override: false forces full viewport, true forces crop when possible. */\n  autoCrop?: boolean;\n  /** Whitespace fraction (0..1) above which we crop; default 0.6. */\n  whitespaceThreshold?: number;\n  /** Whether overflow should trigger fullPage; default true. */\n  fullPageOnOverflow?: boolean;\n  /** Min dimensions for the final PNG (clamp after padding). */\n  minWidth?: number;\n  minHeight?: number;\n  /** Max dimensions for the final PNG (clamp after padding). */\n  maxWidth?: number;\n  maxHeight?: number;\n}\n\n/** Result of the sizing decision — what the runner should do. */\nexport interface ScreenshotPlan {\n  /** Viewport to set on the page before capture. */\n  viewport: Viewport;\n  /** Clip to use for page.screenshot({clip}). Undefined means full viewport. */\n  clip?: { x: number; y: number; width: number; height: number };\n  /** Whether to use fullPage screenshot (for overflow). */\n  fullPage: boolean;\n}\n\n/** Clamp value between min and max. */\nfunction clamp(value: number, min: number, max: number): number {\n  return Math.max(min, Math.min(max, value));\n}\n\nfunction isOverflowing(box: BoundingBox, viewport: Viewport): boolean {\n  return box.width > viewport.width || box.height > viewport.height;\n}\n\nfunction whitespaceOf(box: BoundingBox, viewport: Viewport): number {\n  const viewportArea = viewport.width * viewport.height;\n  const boxArea = box.width * box.height;\n  const coverage = viewportArea > 0 ? boxArea / viewportArea : 1;\n  return 1 - Math.min(coverage, 1);\n}\n\nfunction shouldCrop(\n  box: BoundingBox,\n  viewport: Viewport,\n  opts: SizingOptions,\n  threshold: number,\n): boolean {\n  if (opts.autoCrop === true) return true;\n  return whitespaceOf(box, viewport) > threshold;\n}\n\nfunction paddedClip(\n  box: BoundingBox,\n  minW: number,\n  maxW: number,\n  minH: number,\n  maxH: number,\n): BoundingBox {\n  const w = clamp(Math.ceil(box.width + PAD), minW, maxW);\n  const h = clamp(Math.ceil(box.height + PAD), minH, maxH);\n  return {\n    x: Math.max(0, box.x - HALF_PAD),\n    y: Math.max(0, box.y - HALF_PAD),\n    width: w,\n    height: h,\n  };\n}\n\n/**\n * Compute the screenshot plan for a single story×viewport.\n * Single prod owner for sizing logic — runners import this, never duplicate.\n */\nexport function getScreenshotPlan(\n  viewport: Viewport,\n  box: BoundingBox | null,\n  options: SizingOptions = {},\n): ScreenshotPlan {\n  if (options.autoCrop === false) return { viewport, fullPage: false };\n  if (!box) return { viewport, fullPage: false };\n  if (isOverflowing(box, viewport) && (options.fullPageOnOverflow ?? true)) {\n    return { viewport, fullPage: true };\n  }\n  if (isOverflowing(box, viewport)) {\n    return grownViewportPlan(viewport, box, options);\n  }\n  return maybeCroppedPlan(viewport, box, options);\n}\n\nfunction grownViewportPlan(\n  viewport: Viewport,\n  box: BoundingBox,\n  options: SizingOptions,\n): ScreenshotPlan {\n  const maxH = options.maxHeight ?? SIZING_DEFAULTS.maxHeight;\n  const grownHeight = clamp(Math.ceil(box.height + PAD), viewport.height, maxH);\n  return { viewport: { ...viewport, height: grownHeight }, fullPage: false };\n}\n\nfunction maybeCroppedPlan(\n  viewport: Viewport,\n  box: BoundingBox,\n  options: SizingOptions,\n): ScreenshotPlan {\n  const threshold = options.whitespaceThreshold ?? SIZING_DEFAULTS.whitespaceThreshold;\n  if (!shouldCrop(box, viewport, options, threshold)) return { viewport, fullPage: false };\n  const minW = options.minWidth ?? SIZING_DEFAULTS.minWidth;\n  const minH = options.minHeight ?? SIZING_DEFAULTS.minHeight;\n  const maxW = options.maxWidth ?? SIZING_DEFAULTS.maxWidth;\n  const maxH = options.maxHeight ?? SIZING_DEFAULTS.maxHeight;\n  const clip = paddedClip(box, minW, maxW, minH, maxH);\n  return {\n    viewport,\n    clip: { x: Math.round(clip.x), y: Math.round(clip.y), width: clip.width, height: clip.height },\n    fullPage: false,\n  };\n}\n\n/** Resolve viewports from project/server config with fallback to default (not sizing, just list). */\nexport function resolveViewports(\n  rawViewports: string | null | undefined,\n  fallback: Viewport[],\n  serverViewports?: Viewport[],\n): Viewport[] {\n  if (serverViewports && serverViewports.length > 0) return serverViewports;\n  if (rawViewports) return parsedViewports(rawViewports) ?? fallback;\n  return fallback;\n}\n\nfunction parsedViewports(raw: string): Viewport[] | null {\n  try {\n    const parsed = JSON.parse(raw) as Viewport[];\n    if (Array.isArray(parsed) && parsed.length > 0) return parsed;\n  } catch {\n    // fallback\n  }\n  return null;\n}\n\n/** Hash infra determinism: browser + viewports + sizing defaults. */\nexport function infraHashFor(\n  browser: string,\n  viewports: Viewport[],\n  defaults: typeof SIZING_DEFAULTS = SIZING_DEFAULTS,\n): string {\n  const payload = JSON.stringify({ browser, viewports, defaults });\n  return sha256(payload);\n}\n"],"mappings":";;;;;;AAIA,MAAM,MAAM;AACZ,MAAM,WAAW;;AAGjB,MAAa,kBAAkB;CAC7B,UAAU;CACV,WAAW;CACX,UAAU;CACV,WAAW;CACX,qBAAqB;AACvB;;AAqCA,SAAS,MAAM,OAAe,KAAa,KAAqB;CAC9D,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,CAAC;AAC3C;AAEA,SAAS,cAAc,KAAkB,UAA6B;CACpE,OAAO,IAAI,QAAQ,SAAS,SAAS,IAAI,SAAS,SAAS;AAC7D;AAEA,SAAS,aAAa,KAAkB,UAA4B;CAClE,MAAM,eAAe,SAAS,QAAQ,SAAS;CAC/C,MAAM,UAAU,IAAI,QAAQ,IAAI;CAChC,MAAM,WAAW,eAAe,IAAI,UAAU,eAAe;CAC7D,OAAO,IAAI,KAAK,IAAI,UAAU,CAAC;AACjC;AAEA,SAAS,WACP,KACA,UACA,MACA,WACS;CACT,IAAI,KAAK,aAAa,MAAM,OAAO;CACnC,OAAO,aAAa,KAAK,QAAQ,IAAI;AACvC;AAEA,SAAS,WACP,KACA,MACA,MACA,MACA,MACa;CACb,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,GAAG,GAAG,MAAM,IAAI;CACtD,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,SAAS,GAAG,GAAG,MAAM,IAAI;CACvD,OAAO;EACL,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,QAAQ;EAC/B,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,QAAQ;EAC/B,OAAO;EACP,QAAQ;CACV;AACF;;;;;AAMA,SAAgB,kBACd,UACA,KACA,UAAyB,CAAC,GACV;CAChB,IAAI,QAAQ,aAAa,OAAO,OAAO;EAAE;EAAU,UAAU;CAAM;CACnE,IAAI,CAAC,KAAK,OAAO;EAAE;EAAU,UAAU;CAAM;CAC7C,IAAI,cAAc,KAAK,QAAQ,MAAM,QAAQ,sBAAsB,OACjE,OAAO;EAAE;EAAU,UAAU;CAAK;CAEpC,IAAI,cAAc,KAAK,QAAQ,GAC7B,OAAO,kBAAkB,UAAU,KAAK,OAAO;CAEjD,OAAO,iBAAiB,UAAU,KAAK,OAAO;AAChD;AAEA,SAAS,kBACP,UACA,KACA,SACgB;CAChB,MAAM,OAAO,QAAQ,aAAa,gBAAgB;CAClD,MAAM,cAAc,MAAM,KAAK,KAAK,IAAI,SAAS,GAAG,GAAG,SAAS,QAAQ,IAAI;CAC5E,OAAO;EAAE,UAAU;GAAE,GAAG;GAAU,QAAQ;EAAY;EAAG,UAAU;CAAM;AAC3E;AAEA,SAAS,iBACP,UACA,KACA,SACgB;CAEhB,IAAI,CAAC,WAAW,KAAK,UAAU,SADb,QAAQ,uBAAuB,gBAAgB,mBAChB,GAAG,OAAO;EAAE;EAAU,UAAU;CAAM;CACvF,MAAM,OAAO,QAAQ,YAAY,gBAAgB;CACjD,MAAM,OAAO,QAAQ,aAAa,gBAAgB;CAGlD,MAAM,OAAO,WAAW,KAAK,MAFhB,QAAQ,YAAY,gBAAgB,UAER,MAD5B,QAAQ,aAAa,gBAAgB,SACC;CACnD,OAAO;EACL;EACA,MAAM;GAAE,GAAG,KAAK,MAAM,KAAK,CAAC;GAAG,GAAG,KAAK,MAAM,KAAK,CAAC;GAAG,OAAO,KAAK;GAAO,QAAQ,KAAK;EAAO;EAC7F,UAAU;CACZ;AACF;;AAGA,SAAgB,iBACd,cACA,UACA,iBACY;CACZ,IAAI,mBAAmB,gBAAgB,SAAS,GAAG,OAAO;CAC1D,IAAI,cAAc,OAAO,gBAAgB,YAAY,KAAK;CAC1D,OAAO;AACT;AAEA,SAAS,gBAAgB,KAAgC;CACvD,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS,GAAG,OAAO;CACzD,QAAQ,CAER;CACA,OAAO;AACT;;AAGA,SAAgB,aACd,SACA,WACA,WAAmC,iBAC3B;CACR,MAAM,UAAU,KAAK,UAAU;EAAE;EAAS;EAAW;CAAS,CAAC;CAC/D,OAAO,OAAO,OAAO;AACvB"}
+{"version":3,"file":"sizing.mjs","names":[],"sources":["../../src/capture/sizing.ts"],"sourcesContent":["import type { Viewport } from \"./adapter.ts\";\n\n/** Padding around the cropped component (8px each side). */\nconst PAD = 16;\nconst HALF_PAD = 8;\n\n/** Default min/max dimensions for cropped/fullPage screenshots (diff stability). */\nexport const SIZING_DEFAULTS = {\n  minWidth: 100,\n  minHeight: 100,\n  maxWidth: 2000,\n  maxHeight: 4000,\n  whitespaceThreshold: 0.6,\n} as const;\n\n/** Bounding box of #storybook-root as returned by Playwright/Puppeteer. */\nexport interface BoundingBox {\n  x: number;\n  y: number;\n  width: number;\n  height: number;\n}\n\n/** Options for computing the screenshot plan. */\nexport interface SizingOptions {\n  /** Per-story override: false forces full viewport, true forces crop when possible. */\n  autoCrop?: boolean;\n  /** Whitespace fraction (0..1) above which we crop; default 0.6. */\n  whitespaceThreshold?: number;\n  /** Whether overflow should trigger fullPage; default true. */\n  fullPageOnOverflow?: boolean;\n  /** Min dimensions for the final PNG (clamp after padding). */\n  minWidth?: number;\n  minHeight?: number;\n  /** Max dimensions for the final PNG (clamp after padding). */\n  maxWidth?: number;\n  maxHeight?: number;\n}\n\n/** Result of the sizing decision — what the runner should do. */\nexport interface ScreenshotPlan {\n  /** Viewport to set on the page before capture. */\n  viewport: Viewport;\n  /** Clip to use for page.screenshot({clip}). Undefined means full viewport. */\n  clip?: { x: number; y: number; width: number; height: number };\n  /** Whether to use fullPage screenshot (for overflow). */\n  fullPage: boolean;\n}\n\n/** Clamp value between min and max. */\nfunction clamp(value: number, min: number, max: number): number {\n  return Math.max(min, Math.min(max, value));\n}\n\nfunction isOverflowing(box: BoundingBox, viewport: Viewport): boolean {\n  return box.width > viewport.width || box.height > viewport.height;\n}\n\nfunction whitespaceOf(box: BoundingBox, viewport: Viewport): number {\n  const viewportArea = viewport.width * viewport.height;\n  const boxArea = box.width * box.height;\n  const coverage = viewportArea > 0 ? boxArea / viewportArea : 1;\n  return 1 - Math.min(coverage, 1);\n}\n\nfunction shouldCrop(\n  box: BoundingBox,\n  viewport: Viewport,\n  opts: SizingOptions,\n  threshold: number,\n): boolean {\n  if (opts.autoCrop === true) return true;\n  return whitespaceOf(box, viewport) > threshold;\n}\n\nfunction paddedClip(\n  box: BoundingBox,\n  minW: number,\n  maxW: number,\n  minH: number,\n  maxH: number,\n): BoundingBox {\n  const w = clamp(Math.ceil(box.width + PAD), minW, maxW);\n  const h = clamp(Math.ceil(box.height + PAD), minH, maxH);\n  return {\n    x: Math.max(0, box.x - HALF_PAD),\n    y: Math.max(0, box.y - HALF_PAD),\n    width: w,\n    height: h,\n  };\n}\n\n/**\n * Compute the screenshot plan for a single story×viewport.\n * Single prod owner for sizing logic — runners import this, never duplicate.\n */\nexport function getScreenshotPlan(\n  viewport: Viewport,\n  box: BoundingBox | null,\n  options: SizingOptions = {},\n): ScreenshotPlan {\n  if (options.autoCrop === false) return { viewport, fullPage: false };\n  if (!box) return { viewport, fullPage: false };\n  if (isOverflowing(box, viewport) && (options.fullPageOnOverflow ?? true)) {\n    return { viewport, fullPage: true };\n  }\n  if (isOverflowing(box, viewport)) {\n    return grownViewportPlan(viewport, box, options);\n  }\n  return maybeCroppedPlan(viewport, box, options);\n}\n\nfunction grownViewportPlan(\n  viewport: Viewport,\n  box: BoundingBox,\n  options: SizingOptions,\n): ScreenshotPlan {\n  const maxH = options.maxHeight ?? SIZING_DEFAULTS.maxHeight;\n  const grownHeight = clamp(Math.ceil(box.height + PAD), viewport.height, maxH);\n  return { viewport: { ...viewport, height: grownHeight }, fullPage: false };\n}\n\nfunction maybeCroppedPlan(\n  viewport: Viewport,\n  box: BoundingBox,\n  options: SizingOptions,\n): ScreenshotPlan {\n  const threshold = options.whitespaceThreshold ?? SIZING_DEFAULTS.whitespaceThreshold;\n  if (!shouldCrop(box, viewport, options, threshold)) return { viewport, fullPage: false };\n  const minW = options.minWidth ?? SIZING_DEFAULTS.minWidth;\n  const minH = options.minHeight ?? SIZING_DEFAULTS.minHeight;\n  const maxW = options.maxWidth ?? SIZING_DEFAULTS.maxWidth;\n  const maxH = options.maxHeight ?? SIZING_DEFAULTS.maxHeight;\n  const clip = paddedClip(box, minW, maxW, minH, maxH);\n  return {\n    viewport,\n    clip: { x: Math.round(clip.x), y: Math.round(clip.y), width: clip.width, height: clip.height },\n    fullPage: false,\n  };\n}\n\n/** Resolve viewports from project/server config with fallback to default (not sizing, just list). */\nexport function resolveViewports(\n  rawViewports: string | null | undefined,\n  fallback: Viewport[],\n  serverViewports?: Viewport[],\n): Viewport[] {\n  if (serverViewports && serverViewports.length > 0) return serverViewports;\n  if (rawViewports) return parsedViewports(rawViewports) ?? fallback;\n  return fallback;\n}\n\nfunction parsedViewports(raw: string): Viewport[] | null {\n  try {\n    const parsed = JSON.parse(raw) as Viewport[];\n    if (Array.isArray(parsed) && parsed.length > 0) return parsed;\n  } catch {\n    // fallback\n  }\n  return null;\n}\n"],"mappings":";;;;;AAGA,MAAM,MAAM;AACZ,MAAM,WAAW;;AAGjB,MAAa,kBAAkB;CAC7B,UAAU;CACV,WAAW;CACX,UAAU;CACV,WAAW;CACX,qBAAqB;AACvB;;AAqCA,SAAS,MAAM,OAAe,KAAa,KAAqB;CAC9D,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,CAAC;AAC3C;AAEA,SAAS,cAAc,KAAkB,UAA6B;CACpE,OAAO,IAAI,QAAQ,SAAS,SAAS,IAAI,SAAS,SAAS;AAC7D;AAEA,SAAS,aAAa,KAAkB,UAA4B;CAClE,MAAM,eAAe,SAAS,QAAQ,SAAS;CAC/C,MAAM,UAAU,IAAI,QAAQ,IAAI;CAChC,MAAM,WAAW,eAAe,IAAI,UAAU,eAAe;CAC7D,OAAO,IAAI,KAAK,IAAI,UAAU,CAAC;AACjC;AAEA,SAAS,WACP,KACA,UACA,MACA,WACS;CACT,IAAI,KAAK,aAAa,MAAM,OAAO;CACnC,OAAO,aAAa,KAAK,QAAQ,IAAI;AACvC;AAEA,SAAS,WACP,KACA,MACA,MACA,MACA,MACa;CACb,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,GAAG,GAAG,MAAM,IAAI;CACtD,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,SAAS,GAAG,GAAG,MAAM,IAAI;CACvD,OAAO;EACL,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,QAAQ;EAC/B,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,QAAQ;EAC/B,OAAO;EACP,QAAQ;CACV;AACF;;;;;AAMA,SAAgB,kBACd,UACA,KACA,UAAyB,CAAC,GACV;CAChB,IAAI,QAAQ,aAAa,OAAO,OAAO;EAAE;EAAU,UAAU;CAAM;CACnE,IAAI,CAAC,KAAK,OAAO;EAAE;EAAU,UAAU;CAAM;CAC7C,IAAI,cAAc,KAAK,QAAQ,MAAM,QAAQ,sBAAsB,OACjE,OAAO;EAAE;EAAU,UAAU;CAAK;CAEpC,IAAI,cAAc,KAAK,QAAQ,GAC7B,OAAO,kBAAkB,UAAU,KAAK,OAAO;CAEjD,OAAO,iBAAiB,UAAU,KAAK,OAAO;AAChD;AAEA,SAAS,kBACP,UACA,KACA,SACgB;CAChB,MAAM,OAAO,QAAQ,aAAa,gBAAgB;CAClD,MAAM,cAAc,MAAM,KAAK,KAAK,IAAI,SAAS,GAAG,GAAG,SAAS,QAAQ,IAAI;CAC5E,OAAO;EAAE,UAAU;GAAE,GAAG;GAAU,QAAQ;EAAY;EAAG,UAAU;CAAM;AAC3E;AAEA,SAAS,iBACP,UACA,KACA,SACgB;CAEhB,IAAI,CAAC,WAAW,KAAK,UAAU,SADb,QAAQ,uBAAuB,gBAAgB,mBAChB,GAAG,OAAO;EAAE;EAAU,UAAU;CAAM;CACvF,MAAM,OAAO,QAAQ,YAAY,gBAAgB;CACjD,MAAM,OAAO,QAAQ,aAAa,gBAAgB;CAGlD,MAAM,OAAO,WAAW,KAAK,MAFhB,QAAQ,YAAY,gBAAgB,UAER,MAD5B,QAAQ,aAAa,gBAAgB,SACC;CACnD,OAAO;EACL;EACA,MAAM;GAAE,GAAG,KAAK,MAAM,KAAK,CAAC;GAAG,GAAG,KAAK,MAAM,KAAK,CAAC;GAAG,OAAO,KAAK;GAAO,QAAQ,KAAK;EAAO;EAC7F,UAAU;CACZ;AACF;;AAGA,SAAgB,iBACd,cACA,UACA,iBACY;CACZ,IAAI,mBAAmB,gBAAgB,SAAS,GAAG,OAAO;CAC1D,IAAI,cAAc,OAAO,gBAAgB,YAAY,KAAK;CAC1D,OAAO;AACT;AAEA,SAAS,gBAAgB,KAAgC;CACvD,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,IAAI,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS,GAAG,OAAO;CACzD,QAAQ,CAER;CACA,OAAO;AACT"}

package/dist/capture/skip-checks.mjs

@@ -2,75 +2,11 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { BuildModel } from "../models/build.mjs";
-import { StatusConfigModel } from "../models/status-config.mjs";
-//#region src/capture/skip-checks.ts
+// src/capture/skip-checks.ts
 /** Skip capture when another approved build already covers the same commit. */
 async function hasApprovedBuildForSha(db, tables, projectId, sha, excludeBuildId) {
-	return (await new BuildModel(db, tables).list(projectId)).some((b) => b.gitSha === sha && b.id !== excludeBuildId && b.status === "approved");
+	return (await new BuildModel(db, tables).list(projectId, { status: "approved" })).some((build) => build.gitSha === sha && build.id !== excludeBuildId);
 }
-function findRowProvider(providers, row) {
-	return providers.find((p) => p.metadata.kind === row.provider);
-}
-function decodeRowConfig(provider, configJson) {
-	try {
-		const parsed = JSON.parse(configJson);
-		provider.metadata.schema.parse(parsed);
-		return parsed;
-	} catch {
-		return null;
-	}
-}
-function decodeRowToken(model, row) {
-	try {
-		return model.decryptToken(row);
-	} catch {
-		return null;
-	}
-}
-function parseRow(model, row, providers) {
-	const provider = findRowProvider(providers, row);
-	if (!provider) return null;
-	const parsed = decodeRowConfig(provider, row.config);
-	if (parsed === null) return null;
-	const token = decodeRowToken(model, row);
-	if (token === null) return null;
-	return {
-		provider,
-		config: parsed,
-		token
-	};
-}
-async function checkRowMerged(parsed, sha, branch, logger) {
-	const adapter = parsed.provider.create({
-		config: parsed.config,
-		token: parsed.token,
-		logger
-	});
-	if (!adapter.isMerged) return false;
-	try {
-		return await adapter.isMerged({
-			sha,
-			branch
-		});
-	} catch {
-		return false;
-	}
-}
-/** Check one status-config row for an upstream merge. */
-async function checkRow(model, row, providers, sha, branch, logger) {
-	const parsed = parseRow(model, row, providers);
-	if (!parsed) return false;
-	return await checkRowMerged(parsed, sha, branch, logger);
-}
-/** True when any configured provider reports the commit already merged. */
-async function isAlreadyMerged(opts) {
-	if (opts.providers.length === 0) return false;
-	const model = new StatusConfigModel(opts.db, opts.tables, opts.secret);
-	const rows = await model.list(opts.projectId);
-	for (const row of rows) if (await checkRow(model, row, opts.providers, opts.sha, opts.branch, opts.logger)) return true;
-	return false;
-}
-//#endregion
-export { hasApprovedBuildForSha, isAlreadyMerged };
+export { hasApprovedBuildForSha };
 
 //# sourceMappingURL=skip-checks.mjs.map

package/dist/capture/skip-checks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"skip-checks.mjs","names":[],"sources":["../../src/capture/skip-checks.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { Logger } from \"../logger.ts\";\nimport { BuildModel, type BuildTables } from \"../models/build.ts\";\nimport { StatusConfigModel, type StatusConfigTables } from \"../models/status-config.ts\";\nimport type { ProjectStatusConfig } from \"../schema/status-config.ts\";\nimport type { SecretInput } from \"../utils/encrypt.ts\";\n\n/** Skip capture when another approved build already covers the same commit. */\nexport async function hasApprovedBuildForSha(\n  db: DatabaseAdapter,\n  tables: BuildTables,\n  projectId: string,\n  sha: string,\n  excludeBuildId: string,\n): Promise<boolean> {\n  const builds = await new BuildModel(db, tables).list(projectId);\n  return builds.some((b) => b.gitSha === sha && b.id !== excludeBuildId && b.status === \"approved\");\n}\n\n/** Inputs for checking whether a commit is already merged upstream. */\nexport interface MergeCheck {\n  providers: GitHostProvider[];\n  sha: string;\n  branch: string;\n  secret: SecretInput;\n  db: DatabaseAdapter;\n  tables: StatusConfigTables;\n  projectId: string;\n  logger?: Logger;\n}\n\ninterface ParsedRow {\n  provider: GitHostProvider;\n  config: unknown;\n  token: string;\n}\n\nfunction findRowProvider(\n  providers: GitHostProvider[],\n  row: { provider: string },\n): GitHostProvider | undefined {\n  return providers.find((p) => p.metadata.kind === row.provider);\n}\n\nfunction decodeRowConfig(provider: GitHostProvider, configJson: string): unknown {\n  try {\n    const parsed: unknown = JSON.parse(configJson);\n    provider.metadata.schema.parse(parsed);\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\nfunction decodeRowToken(model: StatusConfigModel, row: ProjectStatusConfig): string | null {\n  try {\n    return model.decryptToken(row);\n  } catch {\n    return null;\n  }\n}\n\nfunction parseRow(\n  model: StatusConfigModel,\n  row: ProjectStatusConfig,\n  providers: GitHostProvider[],\n): ParsedRow | null {\n  const provider = findRowProvider(providers, row);\n  if (!provider) {\n    return null;\n  }\n  const parsed = decodeRowConfig(provider, row.config);\n  if (parsed === null) {\n    return null;\n  }\n  const token = decodeRowToken(model, row);\n  if (token === null) {\n    return null;\n  }\n  return { provider, config: parsed, token };\n}\n\nasync function checkRowMerged(\n  parsed: ParsedRow,\n  sha: string,\n  branch: string,\n  logger?: Logger,\n): Promise<boolean> {\n  const adapter = parsed.provider.create({ config: parsed.config, token: parsed.token, logger });\n  if (!adapter.isMerged) {\n    return false;\n  }\n  try {\n    return await adapter.isMerged({ sha, branch });\n  } catch {\n    // Ignore provider errors — do not skip on failure\n    return false;\n  }\n}\n\n/** Check one status-config row for an upstream merge. */\nasync function checkRow(\n  model: StatusConfigModel,\n  row: ProjectStatusConfig,\n  providers: GitHostProvider[],\n  sha: string,\n  branch: string,\n  logger?: Logger,\n): Promise<boolean> {\n  const parsed = parseRow(model, row, providers);\n  if (!parsed) {\n    return false;\n  }\n  return await checkRowMerged(parsed, sha, branch, logger);\n}\n\n/** True when any configured provider reports the commit already merged. */\nexport async function isAlreadyMerged(opts: MergeCheck): Promise<boolean> {\n  if (opts.providers.length === 0) {\n    return false;\n  }\n  const model = new StatusConfigModel(opts.db, opts.tables, opts.secret);\n  const rows = await model.list(opts.projectId);\n  for (const row of rows) {\n    // eslint-disable-next-line no-await-in-loop -- short-circuit on first merged status\n    if (await checkRow(model, row, opts.providers, opts.sha, opts.branch, opts.logger)) {\n      return true;\n    }\n  }\n  return false;\n}\n"],"mappings":";;;;;;;AASA,eAAsB,uBACpB,IACA,QACA,WACA,KACA,gBACkB;CAElB,QAAO,MADc,IAAI,WAAW,IAAI,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CAChD,MAAM,MAAM,EAAE,WAAW,OAAO,EAAE,OAAO,kBAAkB,EAAE,WAAW,UAAU;AAClG;AAoBA,SAAS,gBACP,WACA,KAC6B;CAC7B,OAAO,UAAU,MAAM,MAAM,EAAE,SAAS,SAAS,IAAI,QAAQ;AAC/D;AAEA,SAAS,gBAAgB,UAA2B,YAA6B;CAC/E,IAAI;EACF,MAAM,SAAkB,KAAK,MAAM,UAAU;EAC7C,SAAS,SAAS,OAAO,MAAM,MAAM;EACrC,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,OAA0B,KAAyC;CACzF,IAAI;EACF,OAAO,MAAM,aAAa,GAAG;CAC/B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,SACP,OACA,KACA,WACkB;CAClB,MAAM,WAAW,gBAAgB,WAAW,GAAG;CAC/C,IAAI,CAAC,UACH,OAAO;CAET,MAAM,SAAS,gBAAgB,UAAU,IAAI,MAAM;CACnD,IAAI,WAAW,MACb,OAAO;CAET,MAAM,QAAQ,eAAe,OAAO,GAAG;CACvC,IAAI,UAAU,MACZ,OAAO;CAET,OAAO;EAAE;EAAU,QAAQ;EAAQ;CAAM;AAC3C;AAEA,eAAe,eACb,QACA,KACA,QACA,QACkB;CAClB,MAAM,UAAU,OAAO,SAAS,OAAO;EAAE,QAAQ,OAAO;EAAQ,OAAO,OAAO;EAAO;CAAO,CAAC;CAC7F,IAAI,CAAC,QAAQ,UACX,OAAO;CAET,IAAI;EACF,OAAO,MAAM,QAAQ,SAAS;GAAE;GAAK;EAAO,CAAC;CAC/C,QAAQ;EAEN,OAAO;CACT;AACF;;AAGA,eAAe,SACb,OACA,KACA,WACA,KACA,QACA,QACkB;CAClB,MAAM,SAAS,SAAS,OAAO,KAAK,SAAS;CAC7C,IAAI,CAAC,QACH,OAAO;CAET,OAAO,MAAM,eAAe,QAAQ,KAAK,QAAQ,MAAM;AACzD;;AAGA,eAAsB,gBAAgB,MAAoC;CACxE,IAAI,KAAK,UAAU,WAAW,GAC5B,OAAO;CAET,MAAM,QAAQ,IAAI,kBAAkB,KAAK,IAAI,KAAK,QAAQ,KAAK,MAAM;CACrE,MAAM,OAAO,MAAM,MAAM,KAAK,KAAK,SAAS;CAC5C,KAAK,MAAM,OAAO,MAEhB,IAAI,MAAM,SAAS,OAAO,KAAK,KAAK,WAAW,KAAK,KAAK,KAAK,QAAQ,KAAK,MAAM,GAC/E,OAAO;CAGX,OAAO;AACT"}
+{"version":3,"file":"skip-checks.mjs","names":[],"sources":["../../src/capture/skip-checks.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { BuildModel, type BuildTables } from \"../models/build.ts\";\n\n/** Skip capture when another approved build already covers the same commit. */\nexport async function hasApprovedBuildForSha(\n  db: DatabaseAdapter,\n  tables: BuildTables,\n  projectId: string,\n  sha: string,\n  excludeBuildId: string,\n): Promise<boolean> {\n  const approved = await new BuildModel(db, tables).list(projectId, { status: \"approved\" });\n  return approved.some((build) => build.gitSha === sha && build.id !== excludeBuildId);\n}\n"],"mappings":";;;;;;AAIA,eAAsB,uBACpB,IACA,QACA,WACA,KACA,gBACkB;CAElB,QAAO,MADgB,IAAI,WAAW,IAAI,MAAM,CAAC,CAAC,KAAK,WAAW,EAAE,QAAQ,WAAW,CAAC,EAAA,CACxE,MAAM,UAAU,MAAM,WAAW,OAAO,MAAM,OAAO,cAAc;AACrF"}

package/dist/capture/statics.d.mts

@@ -2,23 +2,21 @@ import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { DatabaseAdapter } from "../adapter/database.mjs";
 import { StorageAdapter } from "../adapter/storage.mjs";
-//#region src/capture/statics.d.ts
+import { ExtractionLimits } from "./publish/limits.mjs";
 /**
- * Shared Storybook statics handling: unzip a stored build into a scratch
- * directory and persist the extracted files back to storage. Used by the
- * capture orchestrator and by the upload path for opt-in inline extraction
- * (`maxInlineUnzipSize`); both write identical keys, so either may run first.
- */
-/**
- * Extract a build's stored zip into a dedicated scratch directory.
+ * Extract a build's stored zip into a dedicated scratch directory. The caller removes it when
+ * done (`removeJobScratch`).
  *
  * @param storage - Storage holding the uploaded zip.
  * @param scratchDir - Root under which per-build scratch dirs are created.
  * @param projectId - Owning project id.
  * @param buildId - Build whose zip to extract.
+ * @param shardId - Shard extracting it; gives the shard a directory of its own.
+ * @param limits - Entry and uncompressed-byte caps (safe defaults when omitted).
  * @returns The extracted Storybook directory.
+ * @throws {ZipLimitError} When the archive breaks a cap or escapes the target directory.
  */
-declare function extractStorybookToScratch(storage: StorageAdapter, scratchDir: string, projectId: string, buildId: string): Promise<string>;
+declare function extractStorybookToScratch(storage: StorageAdapter, scratchDir: string, projectId: string, buildId: string, shardId?: string, limits?: ExtractionLimits): Promise<string>;
 /**
  * Persist an extracted Storybook directory to storage for published serving.
  *
@@ -33,6 +31,5 @@ declare function extractStorybookToScratch(storage: StorageAdapter, scratchDir:
  * @param db - Optional database for content ref tracking (enables GC).
  */
 declare function persistStorybookStatics(storage: StorageAdapter, sourceDir: string, projectId: string, buildId: string, db?: DatabaseAdapter): Promise<void>;
-//#endregion
 export { extractStorybookToScratch, persistStorybookStatics };
 //# sourceMappingURL=statics.d.mts.map

package/dist/capture/statics.mjs

@@ -1,36 +1,43 @@
-import "node:path";
+import { join, relative, resolve } from "node:path";
 import "node:url";
 import.meta.url;
 import { storybookDir, storybookZipPath } from "../paths.mjs";
-import { dirname, join, relative, resolve, sep } from "node:path";
+import { mapLimit } from "../utils/map-limit.mjs";
+import { jobScratchDir, shardScratchDir } from "./scratch.mjs";
+import { DEFAULT_MAX_UNZIPPED_BYTES, DEFAULT_MAX_ZIP_ENTRIES } from "./publish/limits.mjs";
+import { extractZipStream } from "./publish/extract.mjs";
+import { createHash } from "node:crypto";
 import { mkdir, readFile, readdir, rm } from "node:fs/promises";
-import { createWriteStream } from "node:fs";
-import { pipeline } from "node:stream/promises";
-import { Parse } from "unzipper";
-//#region src/capture/statics.ts
+// src/capture/statics.ts
 /**
 * Shared Storybook statics handling: unzip a stored build into a scratch
 * directory and persist the extracted files back to storage. Used by the
 * capture orchestrator and by the upload path for opt-in inline extraction
 * (`maxInlineUnzipSize`); both write identical keys, so either may run first.
 */
+const DEFAULT_EXTRACTION_LIMITS = {
+	maxEntries: DEFAULT_MAX_ZIP_ENTRIES,
+	maxBytes: DEFAULT_MAX_UNZIPPED_BYTES
+};
 /**
-* Extract a build's stored zip into a dedicated scratch directory.
+* Extract a build's stored zip into a dedicated scratch directory. The caller removes it when
+* done (`removeJobScratch`).
 *
 * @param storage - Storage holding the uploaded zip.
 * @param scratchDir - Root under which per-build scratch dirs are created.
 * @param projectId - Owning project id.
 * @param buildId - Build whose zip to extract.
+* @param shardId - Shard extracting it; gives the shard a directory of its own.
+* @param limits - Entry and uncompressed-byte caps (safe defaults when omitted).
 * @returns The extracted Storybook directory.
+* @throws {ZipLimitError} When the archive breaks a cap or escapes the target directory.
 */
-async function extractStorybookToScratch(storage, scratchDir, projectId, buildId) {
-	const targetDir = join(scratchDir, projectId, "builds", buildId, "storybook");
+async function extractStorybookToScratch(storage, scratchDir, projectId, buildId, shardId, limits = DEFAULT_EXTRACTION_LIMITS) {
+	const base = shardId ? shardScratchDir(scratchDir, projectId, buildId, shardId) : jobScratchDir(scratchDir, projectId, buildId);
+	const targetDir = join(base, "storybook");
 	const root = await prepareTargetDir(targetDir);
 	const source = await storage.readStream(storybookZipPath(projectId, buildId));
-	const writes = [];
-	const parseError = await runParser(root, source, writes);
-	if (parseError) throw parseError;
-	await awaitWrites(writes);
+	await extractZipStream(source, root, limits);
 	return targetDir;
 }
 /** Reset a scratch target directory, returning its resolved root. */
@@ -42,11 +49,6 @@ async function prepareTargetDir(targetDir) {
 	await mkdir(targetDir, { recursive: true });
 	return resolve(targetDir);
 }
-/** Await streamed zip writes, throwing the first write failure. */
-async function awaitWrites(writes) {
-	const writeError = (await Promise.allSettled(writes)).find((outcome) => outcome.status === "rejected");
-	if (writeError) throw writeError.reason;
-}
 /**
 * Persist an extracted Storybook directory to storage for published serving.
 *
@@ -65,22 +67,19 @@ async function persistStorybookStatics(storage, sourceDir, projectId, buildId, d
 	const destinationPrefix = storybookDir(projectId, buildId);
 	const files = await walkFiles(root);
 	const manifest = {};
-	await Promise.all(files.map(async (file) => {
+	await mapLimit(files, STATICS_CONCURRENCY, async (file) => {
 		const rel = relative(root, file);
 		const buffer = await readFile(file);
-		const hash = await hashBuffer(buffer);
-		const contentPath = `content/${hash}`;
+		const hash = createHash("sha256").update(buffer).digest("hex");
 		manifest[rel] = hash;
-		if (!await storage.exists(contentPath)) await storage.write(contentPath, buffer);
+		if (!await storage.exists(`content/${hash}`)) await storage.write(`content/${hash}`, buffer);
 		await storage.write(`${destinationPrefix}/${rel}`, buffer);
 		if (db) await upsertContentRef(db, hash);
-	}));
+	});
 	await storage.write(`${destinationPrefix}/manifest.json`, Buffer.from(JSON.stringify(manifest)));
 }
-async function hashBuffer(buffer) {
-	const { createHash } = await import("node:crypto");
-	return createHash("sha256").update(buffer).digest("hex");
-}
+/** Files persisted at once; bounds how many file buffers are in memory together. */
+const STATICS_CONCURRENCY = 8;
 async function upsertContentRef(db, hash) {
 	try {
 		const contentRefs = db.tables.contentRefs;
@@ -98,52 +97,6 @@ async function upsertContentRef(db, hash) {
 		});
 	} catch {}
 }
-function blockedTarget(root, entryName) {
-	const candidate = resolve(join(root, entryName));
-	return candidate !== root && !candidate.startsWith(root + sep);
-}
-/** Pipe one zip entry to disk, tracking the write for later aggregation. */
-function handleEntry(root, entry, writes, fail) {
-	if (blockedTarget(root, entry.path)) {
-		entry.autodrain();
-		fail(/* @__PURE__ */ new Error(`Blocked path traversal in uploaded Storybook: ${entry.path}`));
-		return;
-	}
-	if (entry.type === "Directory") {
-		entry.autodrain();
-		return;
-	}
-	writeEntry(root, entry, writes);
-}
-/** Stream one zip entry to disk, tracking the write for later aggregation. */
-function writeEntry(root, entry, writes) {
-	const target = join(root, entry.path);
-	const done = (async () => {
-		await mkdir(dirname(target), { recursive: true });
-		await pipeline(entry, createWriteStream(target));
-	})();
-	writes.push(done);
-	done.catch(() => {});
-}
-/** Run the unzipper parser, resolving with the first parse error (or null). */
-function runParser(root, source, writes) {
-	return new Promise((settle) => {
-		const parser = Parse();
-		const fail = (error) => {
-			source.destroy();
-			settle(error);
-		};
-		parser.on("entry", (entry) => {
-			handleEntry(root, entry, writes, fail);
-		});
-		parser.on("error", fail);
-		parser.on("close", () => {
-			settle(null);
-		});
-		source.on("error", fail);
-		source.pipe(parser);
-	});
-}
 async function walkFiles(dir) {
 	const entries = await readdir(dir, { withFileTypes: true });
 	return (await Promise.all(entries.map(async (entry) => {
@@ -152,7 +105,6 @@ async function walkFiles(dir) {
 		return [full];
 	}))).flat();
 }
-//#endregion
 export { extractStorybookToScratch, persistStorybookStatics };
 
 //# sourceMappingURL=statics.mjs.map

package/dist/capture/statics.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"statics.mjs","names":[],"sources":["../../src/capture/statics.ts"],"sourcesContent":["import { createWriteStream } from \"node:fs\";\nimport { mkdir, readdir, readFile, rm } from \"node:fs/promises\";\nimport { dirname, join, relative, resolve, sep } from \"node:path\";\nimport { pipeline } from \"node:stream/promises\";\nimport { Parse, type Entry } from \"unzipper\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { storybookDir, storybookZipPath } from \"../utils/paths.ts\";\n\n/**\n * Shared Storybook statics handling: unzip a stored build into a scratch\n * directory and persist the extracted files back to storage. Used by the\n * capture orchestrator and by the upload path for opt-in inline extraction\n * (`maxInlineUnzipSize`); both write identical keys, so either may run first.\n */\n\n/**\n * Extract a build's stored zip into a dedicated scratch directory.\n *\n * @param storage - Storage holding the uploaded zip.\n * @param scratchDir - Root under which per-build scratch dirs are created.\n * @param projectId - Owning project id.\n * @param buildId - Build whose zip to extract.\n * @returns The extracted Storybook directory.\n */\nexport async function extractStorybookToScratch(\n  storage: StorageAdapter,\n  scratchDir: string,\n  projectId: string,\n  buildId: string,\n): Promise<string> {\n  const targetDir = join(scratchDir, projectId, \"builds\", buildId, \"storybook\");\n  const root = await prepareTargetDir(targetDir);\n  const source = await storage.readStream(storybookZipPath(projectId, buildId));\n  const writes: Promise<void>[] = [];\n  const parseError = await runParser(root, source, writes);\n  if (parseError) {\n    throw parseError;\n  }\n  await awaitWrites(writes);\n  return targetDir;\n}\n\n/** Reset a scratch target directory, returning its resolved root. */\nasync function prepareTargetDir(targetDir: string): Promise<string> {\n  await rm(targetDir, { recursive: true, force: true });\n  await mkdir(targetDir, { recursive: true });\n  return resolve(targetDir);\n}\n\n/** Await streamed zip writes, throwing the first write failure. */\nasync function awaitWrites(writes: Promise<void>[]): Promise<void> {\n  const outcomes = await Promise.allSettled(writes);\n  const writeError = outcomes.find(\n    (outcome): outcome is PromiseRejectedResult => outcome.status === \"rejected\",\n  );\n  if (writeError) {\n    throw writeError.reason;\n  }\n}\n\n/**\n * Persist an extracted Storybook directory to storage for published serving.\n *\n * Uses content-addressed deduplication: each file is hashed and stored once\n * under `content/<hash>`, with a per-build manifest at\n * `${projectId}/builds/${buildId}/storybook/manifest.json`.\n *\n * @param storage - Destination storage adapter.\n * @param sourceDir - Extracted Storybook directory.\n * @param projectId - Owning project id.\n * @param buildId - Build the files belong to.\n * @param db - Optional database for content ref tracking (enables GC).\n */\nexport async function persistStorybookStatics(\n  storage: StorageAdapter,\n  sourceDir: string,\n  projectId: string,\n  buildId: string,\n  db?: DatabaseAdapter,\n): Promise<void> {\n  const root = resolve(sourceDir);\n  const destinationPrefix = storybookDir(projectId, buildId);\n  const files = await walkFiles(root);\n  const manifest: Record<string, string> = {};\n  await Promise.all(\n    files.map(async (file) => {\n      const rel = relative(root, file);\n      const buffer = await readFile(file);\n      const hash = await hashBuffer(buffer);\n      const contentPath = `content/${hash}`;\n      manifest[rel] = hash;\n      // Only write if not already exists (dedup)\n      if (!(await storage.exists(contentPath))) {\n        await storage.write(contentPath, buffer);\n      }\n      // Also write to legacy per-build path for backward compat (can be removed after migration)\n      // and maintain content_refs for GC\n      await storage.write(`${destinationPrefix}/${rel}`, buffer);\n      if (db) {\n        await upsertContentRef(db, hash);\n      }\n    }),\n  );\n  await storage.write(`${destinationPrefix}/manifest.json`, Buffer.from(JSON.stringify(manifest)));\n}\n\nasync function hashBuffer(buffer: Buffer): Promise<string> {\n  const { createHash } = await import(\"node:crypto\");\n  return createHash(\"sha256\").update(buffer).digest(\"hex\");\n}\n\nasync function upsertContentRef(db: DatabaseAdapter, hash: string): Promise<void> {\n  try {\n    const contentRefs = db.tables.contentRefs;\n    const now = new Date().toISOString();\n    const existing = (await db.get(contentRefs, hash)) as unknown as { refCount: number } | null;\n    if (existing) {\n      await db.update(contentRefs, hash, {\n        refCount: existing.refCount + 1,\n        lastSeenAt: now,\n      });\n    } else {\n      await db.insert(contentRefs, { hash, refCount: 1, lastSeenAt: now, createdAt: now });\n    }\n  } catch {\n    // content_refs table may not exist yet (old DB) — ignore\n  }\n}\n\nfunction blockedTarget(root: string, entryName: string): boolean {\n  const candidate = resolve(join(root, entryName));\n  return candidate !== root && !candidate.startsWith(root + sep);\n}\n\n/** Pipe one zip entry to disk, tracking the write for later aggregation. */\nfunction handleEntry(\n  root: string,\n  entry: Entry,\n  writes: Promise<void>[],\n  fail: (error: unknown) => void,\n): void {\n  if (blockedTarget(root, entry.path)) {\n    entry.autodrain();\n    fail(new Error(`Blocked path traversal in uploaded Storybook: ${entry.path}`));\n    return;\n  }\n  if (entry.type === \"Directory\") {\n    entry.autodrain();\n    return;\n  }\n  writeEntry(root, entry, writes);\n}\n\n/** Stream one zip entry to disk, tracking the write for later aggregation. */\nfunction writeEntry(root: string, entry: Entry, writes: Promise<void>[]): void {\n  const target = join(root, entry.path);\n  const done = (async (): Promise<void> => {\n    await mkdir(dirname(target), { recursive: true });\n    await pipeline(entry, createWriteStream(target));\n  })();\n  writes.push(done);\n  done.catch(() => {}); // Intentionally empty — aggregated via allSettled by the caller\n}\n\n/** Run the unzipper parser, resolving with the first parse error (or null). */\n// oxlint-disable-next-line typescript/promise-function-async -- executor-style promise wrapper around events\nfunction runParser(\n  root: string,\n  source: import(\"node:stream\").Readable,\n  writes: Promise<void>[],\n): Promise<unknown> {\n  return new Promise((settle) => {\n    const parser = Parse();\n    const fail = (error: unknown): void => {\n      source.destroy();\n      settle(error);\n    };\n    parser.on(\"entry\", (entry: Entry) => {\n      handleEntry(root, entry, writes, fail);\n    });\n    parser.on(\"error\", fail);\n    parser.on(\"close\", () => {\n      settle(null);\n    });\n    source.on(\"error\", fail);\n    source.pipe(parser);\n  });\n}\n\nasync function walkFiles(dir: string): Promise<string[]> {\n  const entries = await readdir(dir, { withFileTypes: true });\n  const nested = await Promise.all(\n    entries.map(async (entry) => {\n      const full = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        return await walkFiles(full);\n      }\n      return [full];\n    }),\n  );\n  return nested.flat();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,eAAsB,0BACpB,SACA,YACA,WACA,SACiB;CACjB,MAAM,YAAY,KAAK,YAAY,WAAW,UAAU,SAAS,WAAW;CAC5E,MAAM,OAAO,MAAM,iBAAiB,SAAS;CAC7C,MAAM,SAAS,MAAM,QAAQ,WAAW,iBAAiB,WAAW,OAAO,CAAC;CAC5E,MAAM,SAA0B,CAAC;CACjC,MAAM,aAAa,MAAM,UAAU,MAAM,QAAQ,MAAM;CACvD,IAAI,YACF,MAAM;CAER,MAAM,YAAY,MAAM;CACxB,OAAO;AACT;;AAGA,eAAe,iBAAiB,WAAoC;CAClE,MAAM,GAAG,WAAW;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CACpD,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,OAAO,QAAQ,SAAS;AAC1B;;AAGA,eAAe,YAAY,QAAwC;CAEjE,MAAM,cAAa,MADI,QAAQ,WAAW,MAAM,EAAA,CACpB,MACzB,YAA8C,QAAQ,WAAW,UACpE;CACA,IAAI,YACF,MAAM,WAAW;AAErB;;;;;;;;;;;;;;AAeA,eAAsB,wBACpB,SACA,WACA,WACA,SACA,IACe;CACf,MAAM,OAAO,QAAQ,SAAS;CAC9B,MAAM,oBAAoB,aAAa,WAAW,OAAO;CACzD,MAAM,QAAQ,MAAM,UAAU,IAAI;CAClC,MAAM,WAAmC,CAAC;CAC1C,MAAM,QAAQ,IACZ,MAAM,IAAI,OAAO,SAAS;EACxB,MAAM,MAAM,SAAS,MAAM,IAAI;EAC/B,MAAM,SAAS,MAAM,SAAS,IAAI;EAClC,MAAM,OAAO,MAAM,WAAW,MAAM;EACpC,MAAM,cAAc,WAAW;EAC/B,SAAS,OAAO;EAEhB,IAAI,CAAE,MAAM,QAAQ,OAAO,WAAW,GACpC,MAAM,QAAQ,MAAM,aAAa,MAAM;EAIzC,MAAM,QAAQ,MAAM,GAAG,kBAAkB,GAAG,OAAO,MAAM;EACzD,IAAI,IACF,MAAM,iBAAiB,IAAI,IAAI;CAEnC,CAAC,CACH;CACA,MAAM,QAAQ,MAAM,GAAG,kBAAkB,iBAAiB,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC,CAAC;AACjG;AAEA,eAAe,WAAW,QAAiC;CACzD,MAAM,EAAE,eAAe,MAAM,OAAO;CACpC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO,KAAK;AACzD;AAEA,eAAe,iBAAiB,IAAqB,MAA6B;CAChF,IAAI;EACF,MAAM,cAAc,GAAG,OAAO;EAC9B,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAY,MAAM,GAAG,IAAI,aAAa,IAAI;EAChD,IAAI,UACF,MAAM,GAAG,OAAO,aAAa,MAAM;GACjC,UAAU,SAAS,WAAW;GAC9B,YAAY;EACd,CAAC;OAED,MAAM,GAAG,OAAO,aAAa;GAAE;GAAM,UAAU;GAAG,YAAY;GAAK,WAAW;EAAI,CAAC;CAEvF,QAAQ,CAER;AACF;AAEA,SAAS,cAAc,MAAc,WAA4B;CAC/D,MAAM,YAAY,QAAQ,KAAK,MAAM,SAAS,CAAC;CAC/C,OAAO,cAAc,QAAQ,CAAC,UAAU,WAAW,OAAO,GAAG;AAC/D;;AAGA,SAAS,YACP,MACA,OACA,QACA,MACM;CACN,IAAI,cAAc,MAAM,MAAM,IAAI,GAAG;EACnC,MAAM,UAAU;EAChB,qBAAK,IAAI,MAAM,iDAAiD,MAAM,MAAM,CAAC;EAC7E;CACF;CACA,IAAI,MAAM,SAAS,aAAa;EAC9B,MAAM,UAAU;EAChB;CACF;CACA,WAAW,MAAM,OAAO,MAAM;AAChC;;AAGA,SAAS,WAAW,MAAc,OAAc,QAA+B;CAC7E,MAAM,SAAS,KAAK,MAAM,MAAM,IAAI;CACpC,MAAM,QAAQ,YAA2B;EACvC,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;EAChD,MAAM,SAAS,OAAO,kBAAkB,MAAM,CAAC;CACjD,EAAA,CAAG;CACH,OAAO,KAAK,IAAI;CAChB,KAAK,YAAY,CAAC,CAAC;AACrB;;AAIA,SAAS,UACP,MACA,QACA,QACkB;CAClB,OAAO,IAAI,SAAS,WAAW;EAC7B,MAAM,SAAS,MAAM;EACrB,MAAM,QAAQ,UAAyB;GACrC,OAAO,QAAQ;GACf,OAAO,KAAK;EACd;EACA,OAAO,GAAG,UAAU,UAAiB;GACnC,YAAY,MAAM,OAAO,QAAQ,IAAI;EACvC,CAAC;EACD,OAAO,GAAG,SAAS,IAAI;EACvB,OAAO,GAAG,eAAe;GACvB,OAAO,IAAI;EACb,CAAC;EACD,OAAO,GAAG,SAAS,IAAI;EACvB,OAAO,KAAK,MAAM;CACpB,CAAC;AACH;AAEA,eAAe,UAAU,KAAgC;CACvD,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;CAU1D,QAAO,MATc,QAAQ,IAC3B,QAAQ,IAAI,OAAO,UAAU;EAC3B,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;EACjC,IAAI,MAAM,YAAY,GACpB,OAAO,MAAM,UAAU,IAAI;EAE7B,OAAO,CAAC,IAAI;CACd,CAAC,CACH,EAAA,CACc,KAAK;AACrB"}
+{"version":3,"file":"statics.mjs","names":[],"sources":["../../src/capture/statics.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { mkdir, readdir, readFile, rm } from \"node:fs/promises\";\nimport { join, relative, resolve } from \"node:path\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { StorageAdapter } from \"../adapters/storage.ts\";\nimport { mapLimit } from \"../utils/map-limit.ts\";\nimport { storybookDir, storybookZipPath } from \"../utils/paths.ts\";\nimport { extractZipStream } from \"./publish/extract.ts\";\nimport {\n  DEFAULT_MAX_UNZIPPED_BYTES,\n  DEFAULT_MAX_ZIP_ENTRIES,\n  type ExtractionLimits,\n} from \"./publish/limits.ts\";\nimport { jobScratchDir, shardScratchDir } from \"./scratch.ts\";\n\n/**\n * Shared Storybook statics handling: unzip a stored build into a scratch\n * directory and persist the extracted files back to storage. Used by the\n * capture orchestrator and by the upload path for opt-in inline extraction\n * (`maxInlineUnzipSize`); both write identical keys, so either may run first.\n */\n\nconst DEFAULT_EXTRACTION_LIMITS: ExtractionLimits = {\n  maxEntries: DEFAULT_MAX_ZIP_ENTRIES,\n  maxBytes: DEFAULT_MAX_UNZIPPED_BYTES,\n};\n\n/**\n * Extract a build's stored zip into a dedicated scratch directory. The caller removes it when\n * done (`removeJobScratch`).\n *\n * @param storage - Storage holding the uploaded zip.\n * @param scratchDir - Root under which per-build scratch dirs are created.\n * @param projectId - Owning project id.\n * @param buildId - Build whose zip to extract.\n * @param shardId - Shard extracting it; gives the shard a directory of its own.\n * @param limits - Entry and uncompressed-byte caps (safe defaults when omitted).\n * @returns The extracted Storybook directory.\n * @throws {ZipLimitError} When the archive breaks a cap or escapes the target directory.\n */\nexport async function extractStorybookToScratch(\n  storage: StorageAdapter,\n  scratchDir: string,\n  projectId: string,\n  buildId: string,\n  shardId?: string,\n  limits: ExtractionLimits = DEFAULT_EXTRACTION_LIMITS,\n): Promise<string> {\n  const base = shardId\n    ? shardScratchDir(scratchDir, projectId, buildId, shardId)\n    : jobScratchDir(scratchDir, projectId, buildId);\n  const targetDir = join(base, \"storybook\");\n  const root = await prepareTargetDir(targetDir);\n  const source = await storage.readStream(storybookZipPath(projectId, buildId));\n  await extractZipStream(source, root, limits);\n  return targetDir;\n}\n\n/** Reset a scratch target directory, returning its resolved root. */\nasync function prepareTargetDir(targetDir: string): Promise<string> {\n  await rm(targetDir, { recursive: true, force: true });\n  await mkdir(targetDir, { recursive: true });\n  return resolve(targetDir);\n}\n\n/**\n * Persist an extracted Storybook directory to storage for published serving.\n *\n * Uses content-addressed deduplication: each file is hashed and stored once\n * under `content/<hash>`, with a per-build manifest at\n * `${projectId}/builds/${buildId}/storybook/manifest.json`.\n *\n * @param storage - Destination storage adapter.\n * @param sourceDir - Extracted Storybook directory.\n * @param projectId - Owning project id.\n * @param buildId - Build the files belong to.\n * @param db - Optional database for content ref tracking (enables GC).\n */\nexport async function persistStorybookStatics(\n  storage: StorageAdapter,\n  sourceDir: string,\n  projectId: string,\n  buildId: string,\n  db?: DatabaseAdapter,\n): Promise<void> {\n  const root = resolve(sourceDir);\n  const destinationPrefix = storybookDir(projectId, buildId);\n  const files = await walkFiles(root);\n  const manifest: Record<string, string> = {};\n  // Bounded: a large Storybook has thousands of files, and buffering them all\n  // at once exhausts memory on small hosts. Each file is read fully before any\n  // write: the scratch dir is often the storage root, so the per-build path\n  // below can be the very file being read (a streamed write would truncate it).\n  await mapLimit(files, STATICS_CONCURRENCY, async (file) => {\n    const rel = relative(root, file);\n    const buffer = await readFile(file);\n    const hash = createHash(\"sha256\").update(buffer).digest(\"hex\");\n    manifest[rel] = hash;\n    // Only write if not already exists (dedup)\n    if (!(await storage.exists(`content/${hash}`))) {\n      await storage.write(`content/${hash}`, buffer);\n    }\n    // Also write to legacy per-build path for backward compat (can be removed after migration)\n    // and maintain content_refs for GC\n    await storage.write(`${destinationPrefix}/${rel}`, buffer);\n    if (db) {\n      await upsertContentRef(db, hash);\n    }\n  });\n  await storage.write(`${destinationPrefix}/manifest.json`, Buffer.from(JSON.stringify(manifest)));\n}\n\n/** Files persisted at once; bounds how many file buffers are in memory together. */\nconst STATICS_CONCURRENCY = 8;\n\nasync function upsertContentRef(db: DatabaseAdapter, hash: string): Promise<void> {\n  try {\n    const contentRefs = db.tables.contentRefs;\n    const now = new Date().toISOString();\n    const existing = (await db.get(contentRefs, hash)) as unknown as { refCount: number } | null;\n    if (existing) {\n      await db.update(contentRefs, hash, {\n        refCount: existing.refCount + 1,\n        lastSeenAt: now,\n      });\n    } else {\n      await db.insert(contentRefs, { hash, refCount: 1, lastSeenAt: now, createdAt: now });\n    }\n  } catch {\n    // content_refs table may not exist yet (old DB) — ignore\n  }\n}\n\nasync function walkFiles(dir: string): Promise<string[]> {\n  const entries = await readdir(dir, { withFileTypes: true });\n  const nested = await Promise.all(\n    entries.map(async (entry) => {\n      const full = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        return await walkFiles(full);\n      }\n      return [full];\n    }),\n  );\n  return nested.flat();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAsBA,MAAM,4BAA8C;CAClD,YAAY;CACZ,UAAU;AACZ;;;;;;;;;;;;;;AAeA,eAAsB,0BACpB,SACA,YACA,WACA,SACA,SACA,SAA2B,2BACV;CACjB,MAAM,OAAO,UACT,gBAAgB,YAAY,WAAW,SAAS,OAAO,IACvD,cAAc,YAAY,WAAW,OAAO;CAChD,MAAM,YAAY,KAAK,MAAM,WAAW;CACxC,MAAM,OAAO,MAAM,iBAAiB,SAAS;CAC7C,MAAM,SAAS,MAAM,QAAQ,WAAW,iBAAiB,WAAW,OAAO,CAAC;CAC5E,MAAM,iBAAiB,QAAQ,MAAM,MAAM;CAC3C,OAAO;AACT;;AAGA,eAAe,iBAAiB,WAAoC;CAClE,MAAM,GAAG,WAAW;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CACpD,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,OAAO,QAAQ,SAAS;AAC1B;;;;;;;;;;;;;;AAeA,eAAsB,wBACpB,SACA,WACA,WACA,SACA,IACe;CACf,MAAM,OAAO,QAAQ,SAAS;CAC9B,MAAM,oBAAoB,aAAa,WAAW,OAAO;CACzD,MAAM,QAAQ,MAAM,UAAU,IAAI;CAClC,MAAM,WAAmC,CAAC;CAK1C,MAAM,SAAS,OAAO,qBAAqB,OAAO,SAAS;EACzD,MAAM,MAAM,SAAS,MAAM,IAAI;EAC/B,MAAM,SAAS,MAAM,SAAS,IAAI;EAClC,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO,KAAK;EAC7D,SAAS,OAAO;EAEhB,IAAI,CAAE,MAAM,QAAQ,OAAO,WAAW,MAAM,GAC1C,MAAM,QAAQ,MAAM,WAAW,QAAQ,MAAM;EAI/C,MAAM,QAAQ,MAAM,GAAG,kBAAkB,GAAG,OAAO,MAAM;EACzD,IAAI,IACF,MAAM,iBAAiB,IAAI,IAAI;CAEnC,CAAC;CACD,MAAM,QAAQ,MAAM,GAAG,kBAAkB,iBAAiB,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC,CAAC;AACjG;;AAGA,MAAM,sBAAsB;AAE5B,eAAe,iBAAiB,IAAqB,MAA6B;CAChF,IAAI;EACF,MAAM,cAAc,GAAG,OAAO;EAC9B,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAY,MAAM,GAAG,IAAI,aAAa,IAAI;EAChD,IAAI,UACF,MAAM,GAAG,OAAO,aAAa,MAAM;GACjC,UAAU,SAAS,WAAW;GAC9B,YAAY;EACd,CAAC;OAED,MAAM,GAAG,OAAO,aAAa;GAAE;GAAM,UAAU;GAAG,YAAY;GAAK,WAAW;EAAI,CAAC;CAEvF,QAAQ,CAER;AACF;AAEA,eAAe,UAAU,KAAgC;CACvD,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;CAU1D,QAAO,MATc,QAAQ,IAC3B,QAAQ,IAAI,OAAO,UAAU;EAC3B,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;EACjC,IAAI,MAAM,YAAY,GACpB,OAAO,MAAM,UAAU,IAAI;EAE7B,OAAO,CAAC,IAAI;CACd,CAAC,CACH,EAAA,CACc,KAAK;AACrB"}

package/dist/capture/storybook-urls.d.mts

@@ -0,0 +1,38 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { CaptureTarget } from "../adapters/capture-target.mjs";
+import { CaptureRunner } from "../adapter/capture-runner.mjs";
+import { SecretInput } from "../utils/encrypt.mjs";
+import { Build } from "../schema/build.mjs";
+import { Project } from "../schema/project.mjs";
+/** What a pass tells the source: how long it may run, which sizes the token's lifetime. */
+interface StorybookUrlPass {
+  /** The render budget of the pass in ms (`renderBudgetMs`); unset when the pass has none. */
+  budgetMs?: number | undefined;
+}
+/** Gives the URL a target's browser opens, or `undefined` when it needs none (or none can be made). */
+type StorybookUrlSource = ((target: CaptureTarget, pass?: StorybookUrlPass) => Promise<string | undefined>) & {
+  /**
+   * The lifetime in seconds a token minted for a pass of this budget gets (the project's override
+   * or the derived, capped one). A pass that outlasts it is rendered in slices, each with a fresh
+   * token (`renderInSlices`). `undefined` for a target that needs no signed URL (it is never
+   * sliced), and absent on a source that has no such limit.
+   */
+  ttlSeconds?: (target: CaptureTarget, budgetMs: number) => number | undefined;
+};
+/** What minting needs of a capture job. */
+interface StorybookUrlOptions {
+  runner: Pick<CaptureRunner, "metadata">;
+  secret?: SecretInput;
+  publicOrigin?: (() => Promise<string | undefined>) | undefined;
+}
+/**
+ * A source of signed URLs for one build. Every call mints a fresh token, so a shard that waited in
+ * the queue or a retried pass is never handed a token minted before it started.
+ */
+declare function storybookUrlSource(options: StorybookUrlOptions, subject: {
+  build: Pick<Build, "id" | "projectId">;
+  project: Pick<Project, "storybookUrlTtlSeconds">;
+}): StorybookUrlSource;
+export { StorybookUrlOptions, StorybookUrlPass, StorybookUrlSource, storybookUrlSource };
+//# sourceMappingURL=storybook-urls.d.mts.map

package/dist/capture/storybook-urls.mjs

@@ -0,0 +1,41 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { signStorybookToken, storybookTokenPath, storybookUrlTtl } from "../utils/storybook-token.mjs";
+// src/capture/storybook-urls.ts
+/**
+* A source of signed URLs for one build. Every call mints a fresh token, so a shard that waited in
+* the queue or a retried pass is never handed a token minted before it started.
+*/
+function storybookUrlSource(options, subject) {
+	const source = async (target, pass = {}) => {
+		const origin = needsUrl(options.runner, target) ? await options.publicOrigin?.() : void 0;
+		return origin !== void 0 && options.secret ? `${origin}${mint(options.secret, subject, pass)}` : void 0;
+	};
+	source.ttlSeconds = (target, budgetMs) => needsUrl(options.runner, target) ? storybookUrlTtl({
+		override: subject.project.storybookUrlTtlSeconds,
+		budgetMs
+	}) : void 0;
+	return source;
+}
+/** The path of a fresh token for one pass of the build. */
+function mint(secret, subject, pass) {
+	const ttlSeconds = storybookUrlTtl({
+		override: subject.project.storybookUrlTtlSeconds,
+		budgetMs: pass.budgetMs ?? 0
+	});
+	const { id: buildId, projectId } = subject.build;
+	return storybookTokenPath(signStorybookToken({
+		secret,
+		projectId,
+		buildId,
+		ttlSeconds,
+		purpose: "capture"
+	}));
+}
+function needsUrl(runner, target) {
+	return runner.metadata.targets?.some((t) => t.target === target && t.reach === "url") ?? false;
+}
+export { storybookUrlSource };
+
+//# sourceMappingURL=storybook-urls.mjs.map

package/dist/capture/storybook-urls.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"storybook-urls.mjs","names":[],"sources":["../../src/capture/storybook-urls.ts"],"sourcesContent":["/**\n * The signed Storybook URL of a render (ADR 0007, decision 5): minted at the moment a pass starts,\n * only for a target whose browser cannot reach this host (`reach: \"url\"`). The URL is the build's\n * Storybook root, `<publicOrigin>/_s/<token>/`; it carries the token and is never logged. Its\n * lifetime comes from the pass's render budget unless the project sets one (`storybookUrlTtl`).\n * Every token minted here carries the signed `capture` purpose, the only claim that lets the\n * server opt a response into browser-private caching.\n */\nimport type { CaptureRunner, CaptureTarget } from \"../adapters/capture-runner.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport type { SecretInput } from \"../utils/encrypt.ts\";\nimport {\n  signStorybookToken,\n  storybookTokenPath,\n  storybookUrlTtl,\n} from \"../utils/storybook-token.ts\";\n\n/** What a pass tells the source: how long it may run, which sizes the token's lifetime. */\nexport interface StorybookUrlPass {\n  /** The render budget of the pass in ms (`renderBudgetMs`); unset when the pass has none. */\n  budgetMs?: number | undefined;\n}\n\n/** Gives the URL a target's browser opens, or `undefined` when it needs none (or none can be made). */\nexport type StorybookUrlSource = ((\n  target: CaptureTarget,\n  pass?: StorybookUrlPass,\n) => Promise<string | undefined>) & {\n  /**\n   * The lifetime in seconds a token minted for a pass of this budget gets (the project's override\n   * or the derived, capped one). A pass that outlasts it is rendered in slices, each with a fresh\n   * token (`renderInSlices`). `undefined` for a target that needs no signed URL (it is never\n   * sliced), and absent on a source that has no such limit.\n   */\n  ttlSeconds?: (target: CaptureTarget, budgetMs: number) => number | undefined;\n};\n\n/** What minting needs of a capture job. */\nexport interface StorybookUrlOptions {\n  runner: Pick<CaptureRunner, \"metadata\">;\n  secret?: SecretInput;\n  publicOrigin?: (() => Promise<string | undefined>) | undefined;\n}\n\n/**\n * A source of signed URLs for one build. Every call mints a fresh token, so a shard that waited in\n * the queue or a retried pass is never handed a token minted before it started.\n */\nexport function storybookUrlSource(\n  options: StorybookUrlOptions,\n  subject: {\n    build: Pick<Build, \"id\" | \"projectId\">;\n    project: Pick<Project, \"storybookUrlTtlSeconds\">;\n  },\n): StorybookUrlSource {\n  const source: StorybookUrlSource = async (target, pass = {}) => {\n    const origin = needsUrl(options.runner, target) ? await options.publicOrigin?.() : undefined;\n    return origin !== undefined && options.secret\n      ? `${origin}${mint(options.secret, subject, pass)}`\n      : undefined;\n  };\n  source.ttlSeconds = (target, budgetMs): number | undefined =>\n    needsUrl(options.runner, target)\n      ? storybookUrlTtl({ override: subject.project.storybookUrlTtlSeconds, budgetMs })\n      : undefined;\n  return source;\n}\n\n/** The path of a fresh token for one pass of the build. */\nfunction mint(\n  secret: SecretInput,\n  subject: Parameters<typeof storybookUrlSource>[1],\n  pass: StorybookUrlPass,\n): string {\n  const ttlSeconds = storybookUrlTtl({\n    override: subject.project.storybookUrlTtlSeconds,\n    budgetMs: pass.budgetMs ?? 0,\n  });\n  const { id: buildId, projectId } = subject.build;\n  return storybookTokenPath(\n    signStorybookToken({ secret, projectId, buildId, ttlSeconds, purpose: \"capture\" }),\n  );\n}\n\nfunction needsUrl(runner: Pick<CaptureRunner, \"metadata\">, target: CaptureTarget): boolean {\n  return runner.metadata.targets?.some((t) => t.target === target && t.reach === \"url\") ?? false;\n}\n"],"mappings":";;;;;;;;;AAiDA,SAAgB,mBACd,SACA,SAIoB;CACpB,MAAM,SAA6B,OAAO,QAAQ,OAAO,CAAC,MAAM;EAC9D,MAAM,SAAS,SAAS,QAAQ,QAAQ,MAAM,IAAI,MAAM,QAAQ,eAAe,IAAI,KAAA;EACnF,OAAO,WAAW,KAAA,KAAa,QAAQ,SACnC,GAAG,SAAS,KAAK,QAAQ,QAAQ,SAAS,IAAI,MAC9C,KAAA;CACN;CACA,OAAO,cAAc,QAAQ,aAC3B,SAAS,QAAQ,QAAQ,MAAM,IAC3B,gBAAgB;EAAE,UAAU,QAAQ,QAAQ;EAAwB;CAAS,CAAC,IAC9E,KAAA;CACN,OAAO;AACT;;AAGA,SAAS,KACP,QACA,SACA,MACQ;CACR,MAAM,aAAa,gBAAgB;EACjC,UAAU,QAAQ,QAAQ;EAC1B,UAAU,KAAK,YAAY;CAC7B,CAAC;CACD,MAAM,EAAE,IAAI,SAAS,cAAc,QAAQ;CAC3C,OAAO,mBACL,mBAAmB;EAAE;EAAQ;EAAW;EAAS;EAAY,SAAS;CAAU,CAAC,CACnF;AACF;AAEA,SAAS,SAAS,QAAyC,QAAgC;CACzF,OAAO,OAAO,SAAS,SAAS,MAAM,MAAM,EAAE,WAAW,UAAU,EAAE,UAAU,KAAK,KAAK;AAC3F"}