@storyshelf/core 0.6.2 → 0.8.0

package/dist/models/project-group-mapping.d.mts

@@ -4,15 +4,14 @@ import { DatabaseAdapter } from "../adapter/database.mjs";
 import { ProjectRole } from "../types.mjs";
 import { ProjectGroupMapping } from "../schema/project-group-mapping.mjs";
 import { Table } from "drizzle-orm";
-//#region src/models/project-group-mapping.d.ts
 /** Tables required by {@link ProjectGroupMappingModel}. */
 interface ProjectGroupMappingTables {
   projectGroupMappings: Table;
 }
 /** Data operations for identity-provider group mappings. */
 declare class ProjectGroupMappingModel {
-  private readonly db;
   private readonly tables;
+  private readonly db;
   /**
    * @param db - Database adapter.
    * @param tables - Table handles.
@@ -20,11 +19,15 @@ declare class ProjectGroupMappingModel {
   constructor(db: DatabaseAdapter, tables?: ProjectGroupMappingTables);
   /** List all group mappings for a project. */
   list(projectId: string): Promise<ProjectGroupMapping[]>;
+  /**
+   * Validate group-mapping input; returns an error message, or null when acceptable.
+   * Names match exactly: a wildcard would silently grant org-wide access.
+   */
+  static inputError(groupName: string | undefined, role: string | undefined): string | null;
   /** Create a group mapping for a project. */
   create(projectId: string, groupName: string, role: ProjectRole): Promise<ProjectGroupMapping>;
   /** Remove a group mapping by id within a project. */
   remove(projectId: string, id: string): Promise<void>;
 }
-//#endregion
 export { ProjectGroupMappingModel, ProjectGroupMappingTables };
 //# sourceMappingURL=project-group-mapping.d.mts.map

package/dist/models/project-group-mapping.mjs

@@ -1,14 +1,16 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { isProjectRole } from "../types.mjs";
 import { ulid } from "../utils/ulid.mjs";
-import { and, eq, getTableColumns } from "drizzle-orm";
-//#region src/models/project-group-mapping.ts
+import { col } from "./columns.mjs";
+import { and, eq } from "drizzle-orm";
+// src/models/project-group-mapping.ts
 /** Project group-to-role mappings for OIDC team sync. */
 /** Data operations for identity-provider group mappings. */
 var ProjectGroupMappingModel = class {
-	db;
 	tables;
+	db;
 	/**
 	* @param db - Database adapter.
 	* @param tables - Table handles.
@@ -19,7 +21,15 @@ var ProjectGroupMappingModel = class {
 	}
 	/** List all group mappings for a project. */
 	async list(projectId) {
-		return await this.db.list(this.tables.projectGroupMappings, { where: eq(getTableColumns(this.tables.projectGroupMappings)["projectId"], projectId) });
+		return await this.db.list(this.tables.projectGroupMappings, { where: eq(col(this.tables.projectGroupMappings, "projectId"), projectId) });
+	}
+	/**
+	* Validate group-mapping input; returns an error message, or null when acceptable.
+	* Names match exactly: a wildcard would silently grant org-wide access.
+	*/
+	static inputError(groupName, role) {
+		if (!groupName || !role || !isProjectRole(role)) return "Group and role are required";
+		return groupName.includes("*") ? "Group names match exactly; wildcards are not expanded. A broad pattern can silently grant org-wide access." : null;
 	}
 	/** Create a group mapping for a project. */
 	async create(projectId, groupName, role) {
@@ -34,13 +44,12 @@ var ProjectGroupMappingModel = class {
 	/** Remove a group mapping by id within a project. */
 	async remove(projectId, id) {
 		const rows = await this.db.list(this.tables.projectGroupMappings, {
-			where: and(eq(getTableColumns(this.tables.projectGroupMappings)["id"], id), eq(getTableColumns(this.tables.projectGroupMappings)["projectId"], projectId)),
+			where: and(eq(col(this.tables.projectGroupMappings, "id"), id), eq(col(this.tables.projectGroupMappings, "projectId"), projectId)),
 			limit: 1
 		});
 		if (rows[0]) await this.db.remove(this.tables.projectGroupMappings, rows[0].id);
 	}
 };
-//#endregion
 export { ProjectGroupMappingModel };
 
 //# sourceMappingURL=project-group-mapping.mjs.map

package/dist/models/project-group-mapping.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"project-group-mapping.mjs","names":[],"sources":["../../src/models/project-group-mapping.ts"],"sourcesContent":["/** Project group-to-role mappings for OIDC team sync. */\nimport { and, eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { ProjectGroupMapping } from \"../schema/project-group-mapping.ts\";\nimport type { ProjectRole } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link ProjectGroupMappingModel}. */\nexport interface ProjectGroupMappingTables {\n  projectGroupMappings: Table;\n}\n\n/** Data operations for identity-provider group mappings. */\nexport class ProjectGroupMappingModel {\n  private readonly tables: ProjectGroupMappingTables;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: ProjectGroupMappingTables,\n  ) {\n    this.tables = tables ?? { projectGroupMappings: db.tables.projectGroupMappings };\n  }\n\n  /** List all group mappings for a project. */\n  async list(projectId: string): Promise<ProjectGroupMapping[]> {\n    return (await this.db.list(this.tables.projectGroupMappings, {\n      where: eq(\n        getTableColumns(this.tables.projectGroupMappings)[\"projectId\"] as unknown as SQLWrapper,\n        projectId,\n      ),\n    })) as unknown as ProjectGroupMapping[];\n  }\n\n  /** Create a group mapping for a project. */\n  async create(\n    projectId: string,\n    groupName: string,\n    role: ProjectRole,\n  ): Promise<ProjectGroupMapping> {\n    return (await this.db.insert(this.tables.projectGroupMappings, {\n      id: ulid(),\n      projectId,\n      groupName,\n      role,\n      createdAt: new Date().toISOString(),\n    })) as unknown as ProjectGroupMapping;\n  }\n\n  /** Remove a group mapping by id within a project. */\n  async remove(projectId: string, id: string): Promise<void> {\n    const rows = (await this.db.list(this.tables.projectGroupMappings, {\n      where: and(\n        eq(getTableColumns(this.tables.projectGroupMappings)[\"id\"] as unknown as SQLWrapper, id),\n        eq(\n          getTableColumns(this.tables.projectGroupMappings)[\"projectId\"] as unknown as SQLWrapper,\n          projectId,\n        ),\n      ),\n      limit: 1,\n    })) as unknown as ProjectGroupMapping[];\n    if (rows[0]) {\n      await this.db.remove(this.tables.projectGroupMappings, rows[0].id);\n    }\n  }\n}\n"],"mappings":";;;;;;;;AAcA,IAAa,2BAAb,MAAsC;CAOjB;CANnB;;;;;CAKA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU,EAAE,sBAAsB,GAAG,OAAO,qBAAqB;CACjF;;CAGA,MAAM,KAAK,WAAmD;EAC5D,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,sBAAsB,EAC3D,OAAO,GACL,gBAAgB,KAAK,OAAO,oBAAoB,CAAC,CAAC,cAClD,SACF,EACF,CAAC;CACH;;CAGA,MAAM,OACJ,WACA,WACA,MAC8B;EAC9B,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,sBAAsB;GAC7D,IAAI,KAAK;GACT;GACA;GACA;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,OAAO,WAAmB,IAA2B;EACzD,MAAM,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,sBAAsB;GACjE,OAAO,IACL,GAAG,gBAAgB,KAAK,OAAO,oBAAoB,CAAC,CAAC,OAAgC,EAAE,GACvF,GACE,gBAAgB,KAAK,OAAO,oBAAoB,CAAC,CAAC,cAClD,SACF,CACF;GACA,OAAO;EACT,CAAC;EACD,IAAI,KAAK,IACP,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,sBAAsB,KAAK,EAAE,CAAC,EAAE;CAErE;AACF"}
+{"version":3,"file":"project-group-mapping.mjs","names":[],"sources":["../../src/models/project-group-mapping.ts"],"sourcesContent":["/** Project group-to-role mappings for OIDC team sync. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { ProjectGroupMapping } from \"../schema/project-group-mapping.ts\";\nimport { isProjectRole, type ProjectRole } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\nimport { col } from \"./columns.ts\";\n\n/** Tables required by {@link ProjectGroupMappingModel}. */\nexport interface ProjectGroupMappingTables {\n  projectGroupMappings: Table;\n}\n\n/** Data operations for identity-provider group mappings. */\nexport class ProjectGroupMappingModel {\n  private readonly tables: ProjectGroupMappingTables;\n  private readonly db: DatabaseAdapter;\n\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   */\n  constructor(db: DatabaseAdapter, tables?: ProjectGroupMappingTables) {\n    this.db = db;\n    this.tables = tables ?? { projectGroupMappings: db.tables.projectGroupMappings };\n  }\n\n  /** List all group mappings for a project. */\n  async list(projectId: string): Promise<ProjectGroupMapping[]> {\n    return (await this.db.list(this.tables.projectGroupMappings, {\n      where: eq(col(this.tables.projectGroupMappings, \"projectId\"), projectId),\n    })) as unknown as ProjectGroupMapping[];\n  }\n\n  /**\n   * Validate group-mapping input; returns an error message, or null when acceptable.\n   * Names match exactly: a wildcard would silently grant org-wide access.\n   */\n  static inputError(groupName: string | undefined, role: string | undefined): string | null {\n    if (!groupName || !role || !isProjectRole(role)) {\n      return \"Group and role are required\";\n    }\n    return groupName.includes(\"*\")\n      ? \"Group names match exactly; wildcards are not expanded. A broad pattern can silently grant org-wide access.\"\n      : null;\n  }\n\n  /** Create a group mapping for a project. */\n  async create(\n    projectId: string,\n    groupName: string,\n    role: ProjectRole,\n  ): Promise<ProjectGroupMapping> {\n    return (await this.db.insert(this.tables.projectGroupMappings, {\n      id: ulid(),\n      projectId,\n      groupName,\n      role,\n      createdAt: new Date().toISOString(),\n    })) as unknown as ProjectGroupMapping;\n  }\n\n  /** Remove a group mapping by id within a project. */\n  async remove(projectId: string, id: string): Promise<void> {\n    const rows = (await this.db.list(this.tables.projectGroupMappings, {\n      where: and(\n        eq(col(this.tables.projectGroupMappings, \"id\"), id),\n        eq(col(this.tables.projectGroupMappings, \"projectId\"), projectId),\n      ),\n      limit: 1,\n    })) as unknown as ProjectGroupMapping[];\n    if (rows[0]) {\n      await this.db.remove(this.tables.projectGroupMappings, rows[0].id);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAeA,IAAa,2BAAb,MAAsC;CACpC;CACA;;;;;CAMA,YAAY,IAAqB,QAAoC;EACnE,KAAK,KAAK;EACV,KAAK,SAAS,UAAU,EAAE,sBAAsB,GAAG,OAAO,qBAAqB;CACjF;;CAGA,MAAM,KAAK,WAAmD;EAC5D,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,sBAAsB,EAC3D,OAAO,GAAG,IAAI,KAAK,OAAO,sBAAsB,WAAW,GAAG,SAAS,EACzE,CAAC;CACH;;;;;CAMA,OAAO,WAAW,WAA+B,MAAyC;EACxF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,IAAI,GAC5C,OAAO;EAET,OAAO,UAAU,SAAS,GAAG,IACzB,+GACA;CACN;;CAGA,MAAM,OACJ,WACA,WACA,MAC8B;EAC9B,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,sBAAsB;GAC7D,IAAI,KAAK;GACT;GACA;GACA;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,OAAO,WAAmB,IAA2B;EACzD,MAAM,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,sBAAsB;GACjE,OAAO,IACL,GAAG,IAAI,KAAK,OAAO,sBAAsB,IAAI,GAAG,EAAE,GAClD,GAAG,IAAI,KAAK,OAAO,sBAAsB,WAAW,GAAG,SAAS,CAClE;GACA,OAAO;EACT,CAAC;EACD,IAAI,KAAK,IACP,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,sBAAsB,KAAK,EAAE,CAAC,EAAE;CAErE;AACF"}

package/dist/models/project.d.mts

@@ -3,15 +3,14 @@ import __tsdown_shims_url from 'node:url';
 import { DatabaseAdapter } from "../adapter/database.mjs";
 import { Project } from "../schema/project.mjs";
 import { Table } from "drizzle-orm";
-//#region src/models/project.d.ts
 /** Tables required by {@link ProjectModel}. */
 interface ProjectTables {
   projects: Table;
 }
 /** Data operations for project records. */
 declare class ProjectModel {
-  private readonly db;
   private readonly tables;
+  private readonly db;
   /**
    * @param db - Database adapter.
    * @param tables - Table handles (injected by the database adapter).
@@ -46,9 +45,16 @@ interface ProjectCreateInput {
   storybookMeta?: unknown;
   /** Run Storybook `play` functions during capture (opt-in; default false). */
   executePlay?: boolean;
+  /** Run axe accessibility checks during capture (column default true when omitted). */
+  runA11y?: boolean;
+  /** Run Storybook 10 `.test()` entries as interaction tests (column default false when omitted). */
+  runTests?: boolean;
   /** Per-story play timeout in milliseconds (column default applies when omitted). */
   playTimeoutMs?: number;
+  /** Review switch (column default true when omitted; ADR 0013, decision 1). */
+  reviewEnabled?: boolean;
+  /** Approvals a build needs with `testing` off (column default 1 when omitted). */
+  reviewApprovals?: number;
 }
-//#endregion
 export { ProjectCreateInput, ProjectModel, ProjectTables };
 //# sourceMappingURL=project.d.mts.map

package/dist/models/project.mjs

@@ -2,13 +2,14 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { slugify, ulid } from "../utils/ulid.mjs";
-import { eq, getTableColumns } from "drizzle-orm";
-//#region src/models/project.ts
+import { col } from "./columns.mjs";
+import { eq } from "drizzle-orm";
+// src/models/project.ts
 /** Project records and slug management. */
 /** Data operations for project records. */
 var ProjectModel = class {
-	db;
 	tables;
+	db;
 	/**
 	* @param db - Database adapter.
 	* @param tables - Table handles (injected by the database adapter).
@@ -34,7 +35,11 @@ var ProjectModel = class {
 			gitDefaultBranch: input.gitDefaultBranch ?? "main",
 			storybookMeta: input.storybookMeta ? JSON.stringify(input.storybookMeta) : null,
 			...input.executePlay === void 0 ? {} : { executePlay: input.executePlay },
+			...input.runA11y === void 0 ? {} : { runA11y: input.runA11y },
+			...input.runTests === void 0 ? {} : { runTests: input.runTests },
 			...input.playTimeoutMs === void 0 ? {} : { playTimeoutMs: input.playTimeoutMs },
+			...input.reviewEnabled === void 0 ? {} : { reviewEnabled: input.reviewEnabled },
+			...input.reviewApprovals === void 0 ? {} : { reviewApprovals: input.reviewApprovals },
 			createdAt: now,
 			updatedAt: now
 		});
@@ -46,7 +51,7 @@ var ProjectModel = class {
 	/** Fetch a project by its slug, or null if not found. */
 	async getBySlug(slug) {
 		return (await this.db.list(this.tables.projects, {
-			where: eq(getTableColumns(this.tables.projects)["slug"], slug),
+			where: eq(col(this.tables.projects, "slug"), slug),
 			limit: 1
 		}))[0] ?? null;
 	}
@@ -69,7 +74,7 @@ var ProjectModel = class {
 	}
 	async uniqueSlug(name) {
 		const base = slugify(name) || "project";
-		const existing = await this.db.list(this.tables.projects, { where: eq(getTableColumns(this.tables.projects)["slug"], base) });
+		const existing = await this.db.list(this.tables.projects, { where: eq(col(this.tables.projects, "slug"), base) });
 		if (existing.length === 0) return base;
 		const taken = new Set(existing.map((p) => p.slug));
 		let suffix = 2;
@@ -77,7 +82,6 @@ var ProjectModel = class {
 		return `${base}-${suffix}`;
 	}
 };
-//#endregion
 export { ProjectModel };
 
 //# sourceMappingURL=project.mjs.map

package/dist/models/project.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"project.mjs","names":[],"sources":["../../src/models/project.ts"],"sourcesContent":["/** Project records and slug management. */\nimport { eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { slugify, ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link ProjectModel}. */\nexport interface ProjectTables {\n  projects: Table;\n}\n\n/** Data operations for project records. */\nexport class ProjectModel {\n  private readonly tables: ProjectTables;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles (injected by the database adapter).\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: ProjectTables,\n  ) {\n    this.tables = tables ?? { projects: db.tables.projects };\n  }\n\n  /**\n   * Create a project with a unique slug.\n   *\n   * @param input - Project creation input.\n   * @returns The created project.\n   */\n  async create(input: ProjectCreateInput): Promise<Project> {\n    const now = new Date().toISOString();\n    const slug = await this.uniqueSlug(input.name);\n    return (await this.db.insert(this.tables.projects, {\n      id: ulid(),\n      name: input.name,\n      slug,\n      gitRepository: input.gitRepository,\n      gitDefaultBranch: input.gitDefaultBranch ?? \"main\",\n      storybookMeta: input.storybookMeta ? JSON.stringify(input.storybookMeta) : null,\n      ...(input.executePlay === undefined ? {} : { executePlay: input.executePlay }),\n      ...(input.playTimeoutMs === undefined ? {} : { playTimeoutMs: input.playTimeoutMs }),\n      createdAt: now,\n      updatedAt: now,\n    })) as unknown as Project;\n  }\n\n  /** Fetch a project by id, or null if not found. */\n  async get(id: string): Promise<Project | null> {\n    return (await this.db.get(this.tables.projects, id)) as unknown as Project | null;\n  }\n\n  /** Fetch a project by its slug, or null if not found. */\n  async getBySlug(slug: string): Promise<Project | null> {\n    const rows = (await this.db.list(this.tables.projects, {\n      where: eq(getTableColumns(this.tables.projects)[\"slug\"] as unknown as SQLWrapper, slug),\n      limit: 1,\n    })) as unknown as Project[];\n    return rows[0] ?? null;\n  }\n\n  /** List all projects. */\n  async list(): Promise<Project[]> {\n    return (await this.db.list(this.tables.projects)) as unknown as Project[];\n  }\n\n  /** Update mutable fields of a project. */\n  async update(\n    id: string,\n    patch: Partial<Omit<Project, \"storybookMeta\">> & {\n      storybookMeta?: unknown;\n    },\n  ): Promise<Project> {\n    const normalized: Partial<Project> & Record<string, unknown> = {\n      ...patch,\n    } as unknown as Partial<Project> & Record<string, unknown>;\n    if (\n      patch.storybookMeta !== undefined &&\n      patch.storybookMeta !== null &&\n      typeof patch.storybookMeta !== \"string\"\n    ) {\n      normalized.storybookMeta = JSON.stringify(patch.storybookMeta);\n    }\n    return (await this.db.update(this.tables.projects, id, {\n      ...normalized,\n      updatedAt: new Date().toISOString(),\n    })) as unknown as Project;\n  }\n\n  /** Delete a project by id. */\n  async remove(id: string): Promise<void> {\n    await this.db.remove(this.tables.projects, id);\n  }\n\n  private async uniqueSlug(name: string): Promise<string> {\n    const base = slugify(name) || \"project\";\n    const existing = (await this.db.list(this.tables.projects, {\n      where: eq(getTableColumns(this.tables.projects)[\"slug\"] as unknown as SQLWrapper, base),\n    })) as unknown as Project[];\n    if (existing.length === 0) {\n      return base;\n    }\n    const taken = new Set(existing.map((p) => p.slug));\n    let suffix = 2;\n    while (taken.has(`${base}-${suffix}`)) {\n      suffix += 1;\n    }\n    return `${base}-${suffix}`;\n  }\n}\n\n/** Input for creating a project. */\nexport interface ProjectCreateInput {\n  name: string;\n  gitRepository?: string;\n  gitDefaultBranch?: string;\n  storybookMeta?: unknown;\n  /** Run Storybook `play` functions during capture (opt-in; default false). */\n  executePlay?: boolean;\n  /** Per-story play timeout in milliseconds (column default applies when omitted). */\n  playTimeoutMs?: number;\n}\n"],"mappings":";;;;;;;;AAaA,IAAa,eAAb,MAA0B;CAOL;CANnB;;;;;CAKA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU,EAAE,UAAU,GAAG,OAAO,SAAS;CACzD;;;;;;;CAQA,MAAM,OAAO,OAA6C;EACxD,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,OAAO,MAAM,KAAK,WAAW,MAAM,IAAI;EAC7C,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU;GACjD,IAAI,KAAK;GACT,MAAM,MAAM;GACZ;GACA,eAAe,MAAM;GACrB,kBAAkB,MAAM,oBAAoB;GAC5C,eAAe,MAAM,gBAAgB,KAAK,UAAU,MAAM,aAAa,IAAI;GAC3E,GAAI,MAAM,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;GAC5E,GAAI,MAAM,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,MAAM,cAAc;GAClF,WAAW;GACX,WAAW;EACb,CAAC;CACH;;CAGA,MAAM,IAAI,IAAqC;EAC7C,OAAQ,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,UAAU,EAAE;CACpD;;CAGA,MAAM,UAAU,MAAuC;EAKrD,QAAO,MAJa,KAAK,GAAG,KAAK,KAAK,OAAO,UAAU;GACrD,OAAO,GAAG,gBAAgB,KAAK,OAAO,QAAQ,CAAC,CAAC,SAAkC,IAAI;GACtF,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,OAA2B;EAC/B,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,QAAQ;CACjD;;CAGA,MAAM,OACJ,IACA,OAGkB;EAClB,MAAM,aAAyD,EAC7D,GAAG,MACL;EACA,IACE,MAAM,kBAAkB,KAAA,KACxB,MAAM,kBAAkB,QACxB,OAAO,MAAM,kBAAkB,UAE/B,WAAW,gBAAgB,KAAK,UAAU,MAAM,aAAa;EAE/D,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU,IAAI;GACrD,GAAG;GACH,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,OAAO,IAA2B;EACtC,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU,EAAE;CAC/C;CAEA,MAAc,WAAW,MAA+B;EACtD,MAAM,OAAO,QAAQ,IAAI,KAAK;EAC9B,MAAM,WAAY,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,UAAU,EACzD,OAAO,GAAG,gBAAgB,KAAK,OAAO,QAAQ,CAAC,CAAC,SAAkC,IAAI,EACxF,CAAC;EACD,IAAI,SAAS,WAAW,GACtB,OAAO;EAET,MAAM,QAAQ,IAAI,IAAI,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;EACjD,IAAI,SAAS;EACb,OAAO,MAAM,IAAI,GAAG,KAAK,GAAG,QAAQ,GAClC,UAAU;EAEZ,OAAO,GAAG,KAAK,GAAG;CACpB;AACF"}
+{"version":3,"file":"project.mjs","names":[],"sources":["../../src/models/project.ts"],"sourcesContent":["/** Project records and slug management. */\nimport { eq } from \"drizzle-orm\";\nimport type { Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { slugify, ulid } from \"../utils/ulid.ts\";\nimport { col } from \"./columns.ts\";\n\n/** Tables required by {@link ProjectModel}. */\nexport interface ProjectTables {\n  projects: Table;\n}\n\n/** Data operations for project records. */\nexport class ProjectModel {\n  private readonly tables: ProjectTables;\n  private readonly db: DatabaseAdapter;\n\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles (injected by the database adapter).\n   */\n  constructor(db: DatabaseAdapter, tables?: ProjectTables) {\n    this.db = db;\n    this.tables = tables ?? { projects: db.tables.projects };\n  }\n\n  /**\n   * Create a project with a unique slug.\n   *\n   * @param input - Project creation input.\n   * @returns The created project.\n   */\n  async create(input: ProjectCreateInput): Promise<Project> {\n    const now = new Date().toISOString();\n    const slug = await this.uniqueSlug(input.name);\n    return (await this.db.insert(this.tables.projects, {\n      id: ulid(),\n      name: input.name,\n      slug,\n      gitRepository: input.gitRepository,\n      gitDefaultBranch: input.gitDefaultBranch ?? \"main\",\n      storybookMeta: input.storybookMeta ? JSON.stringify(input.storybookMeta) : null,\n      ...(input.executePlay === undefined ? {} : { executePlay: input.executePlay }),\n      ...(input.runA11y === undefined ? {} : { runA11y: input.runA11y }),\n      ...(input.runTests === undefined ? {} : { runTests: input.runTests }),\n      ...(input.playTimeoutMs === undefined ? {} : { playTimeoutMs: input.playTimeoutMs }),\n      ...(input.reviewEnabled === undefined ? {} : { reviewEnabled: input.reviewEnabled }),\n      ...(input.reviewApprovals === undefined ? {} : { reviewApprovals: input.reviewApprovals }),\n      createdAt: now,\n      updatedAt: now,\n    })) as unknown as Project;\n  }\n\n  /** Fetch a project by id, or null if not found. */\n  async get(id: string): Promise<Project | null> {\n    return (await this.db.get(this.tables.projects, id)) as unknown as Project | null;\n  }\n\n  /** Fetch a project by its slug, or null if not found. */\n  async getBySlug(slug: string): Promise<Project | null> {\n    const rows = (await this.db.list(this.tables.projects, {\n      where: eq(col(this.tables.projects, \"slug\"), slug),\n      limit: 1,\n    })) as unknown as Project[];\n    return rows[0] ?? null;\n  }\n\n  /** List all projects. */\n  async list(): Promise<Project[]> {\n    return (await this.db.list(this.tables.projects)) as unknown as Project[];\n  }\n\n  /** Update mutable fields of a project. */\n  async update(\n    id: string,\n    patch: Partial<Omit<Project, \"storybookMeta\">> & {\n      storybookMeta?: unknown;\n    },\n  ): Promise<Project> {\n    const normalized: Partial<Project> & Record<string, unknown> = {\n      ...patch,\n    } as unknown as Partial<Project> & Record<string, unknown>;\n    if (\n      patch.storybookMeta !== undefined &&\n      patch.storybookMeta !== null &&\n      typeof patch.storybookMeta !== \"string\"\n    ) {\n      normalized.storybookMeta = JSON.stringify(patch.storybookMeta);\n    }\n    return (await this.db.update(this.tables.projects, id, {\n      ...normalized,\n      updatedAt: new Date().toISOString(),\n    })) as unknown as Project;\n  }\n\n  /** Delete a project by id. */\n  async remove(id: string): Promise<void> {\n    await this.db.remove(this.tables.projects, id);\n  }\n\n  private async uniqueSlug(name: string): Promise<string> {\n    const base = slugify(name) || \"project\";\n    const existing = (await this.db.list(this.tables.projects, {\n      where: eq(col(this.tables.projects, \"slug\"), base),\n    })) as unknown as Project[];\n    if (existing.length === 0) {\n      return base;\n    }\n    const taken = new Set(existing.map((p) => p.slug));\n    let suffix = 2;\n    while (taken.has(`${base}-${suffix}`)) {\n      suffix += 1;\n    }\n    return `${base}-${suffix}`;\n  }\n}\n\n/** Input for creating a project. */\nexport interface ProjectCreateInput {\n  name: string;\n  gitRepository?: string;\n  gitDefaultBranch?: string;\n  storybookMeta?: unknown;\n  /** Run Storybook `play` functions during capture (opt-in; default false). */\n  executePlay?: boolean;\n  /** Run axe accessibility checks during capture (column default true when omitted). */\n  runA11y?: boolean;\n  /** Run Storybook 10 `.test()` entries as interaction tests (column default false when omitted). */\n  runTests?: boolean;\n  /** Per-story play timeout in milliseconds (column default applies when omitted). */\n  playTimeoutMs?: number;\n  /** Review switch (column default true when omitted; ADR 0013, decision 1). */\n  reviewEnabled?: boolean;\n  /** Approvals a build needs with `testing` off (column default 1 when omitted). */\n  reviewApprovals?: number;\n}\n"],"mappings":";;;;;;;;;AAcA,IAAa,eAAb,MAA0B;CACxB;CACA;;;;;CAMA,YAAY,IAAqB,QAAwB;EACvD,KAAK,KAAK;EACV,KAAK,SAAS,UAAU,EAAE,UAAU,GAAG,OAAO,SAAS;CACzD;;;;;;;CAQA,MAAM,OAAO,OAA6C;EACxD,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,OAAO,MAAM,KAAK,WAAW,MAAM,IAAI;EAC7C,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU;GACjD,IAAI,KAAK;GACT,MAAM,MAAM;GACZ;GACA,eAAe,MAAM;GACrB,kBAAkB,MAAM,oBAAoB;GAC5C,eAAe,MAAM,gBAAgB,KAAK,UAAU,MAAM,aAAa,IAAI;GAC3E,GAAI,MAAM,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa,MAAM,YAAY;GAC5E,GAAI,MAAM,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,MAAM,QAAQ;GAChE,GAAI,MAAM,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;GACnE,GAAI,MAAM,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,MAAM,cAAc;GAClF,GAAI,MAAM,kBAAkB,KAAA,IAAY,CAAC,IAAI,EAAE,eAAe,MAAM,cAAc;GAClF,GAAI,MAAM,oBAAoB,KAAA,IAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,gBAAgB;GACxF,WAAW;GACX,WAAW;EACb,CAAC;CACH;;CAGA,MAAM,IAAI,IAAqC;EAC7C,OAAQ,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,UAAU,EAAE;CACpD;;CAGA,MAAM,UAAU,MAAuC;EAKrD,QAAO,MAJa,KAAK,GAAG,KAAK,KAAK,OAAO,UAAU;GACrD,OAAO,GAAG,IAAI,KAAK,OAAO,UAAU,MAAM,GAAG,IAAI;GACjD,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,OAA2B;EAC/B,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,QAAQ;CACjD;;CAGA,MAAM,OACJ,IACA,OAGkB;EAClB,MAAM,aAAyD,EAC7D,GAAG,MACL;EACA,IACE,MAAM,kBAAkB,KAAA,KACxB,MAAM,kBAAkB,QACxB,OAAO,MAAM,kBAAkB,UAE/B,WAAW,gBAAgB,KAAK,UAAU,MAAM,aAAa;EAE/D,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU,IAAI;GACrD,GAAG;GACH,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,OAAO,IAA2B;EACtC,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU,EAAE;CAC/C;CAEA,MAAc,WAAW,MAA+B;EACtD,MAAM,OAAO,QAAQ,IAAI,KAAK;EAC9B,MAAM,WAAY,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,UAAU,EACzD,OAAO,GAAG,IAAI,KAAK,OAAO,UAAU,MAAM,GAAG,IAAI,EACnD,CAAC;EACD,IAAI,SAAS,WAAW,GACtB,OAAO;EAET,MAAM,QAAQ,IAAI,IAAI,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;EACjD,IAAI,SAAS;EACb,OAAO,MAAM,IAAI,GAAG,KAAK,GAAG,QAAQ,GAClC,UAAU;EAEZ,OAAO,GAAG,KAAK,GAAG;CACpB;AACF"}

package/dist/models/public-origin.d.mts

@@ -0,0 +1,61 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { ShelfConfig } from "../config.mjs";
+import { Env } from "../utils/public-origin.mjs";
+/** Key of the stored origin in `site_settings`. */
+declare const PUBLIC_ORIGIN_KEY = "public_origin";
+/** Where the resolved origin came from. */
+type PublicOriginSource = "config" | "platform" | "admin";
+/** An origin that may be used, and its provenance. */
+interface ResolvedPublicOrigin {
+  /** Base URL without a trailing slash. */
+  url: string;
+  source: PublicOriginSource;
+}
+/** The origin an admin's browser reported, as stored. */
+interface StoredPublicOrigin {
+  origin: string;
+  confirmed: boolean;
+}
+/** Resolves the public origin; reads the database at most once per `ttlMs`. */
+interface PublicOriginResolver {
+  /**
+   * The origin background code may use now, or `null` when nothing is confirmed: a configured or
+   * platform origin, or one an admin confirmed. A detected, unconfirmed origin never resolves.
+   */
+  resolve(): Promise<ResolvedPublicOrigin | null>;
+  /** Shorthand for `resolve()` when only the URL matters. */
+  url(): Promise<string | undefined>;
+  /**
+   * The origin for an interactive authentication route (OAuth redirect URI, OIDC helper): the
+   * resolved origin, else `requestOrigin`, the address the request itself came in on. Never use
+   * it for a link that outlives the request.
+   */
+  authOrigin(requestOrigin: string): Promise<string>;
+  /** The value the System page shows and edits; `null` when no browser reported one. */
+  stored(): Promise<StoredPublicOrigin | null>;
+  /**
+   * An admin's browser reported `origin`. First report wins: nothing is stored when a value already
+   * is, so a visit through another domain cannot replace a confirmed origin. Returns what is stored.
+   */
+  report(origin: string, userId?: string): Promise<StoredPublicOrigin>;
+  /** An admin confirmed or entered `origin`: it replaces whatever is stored. */
+  set(origin: string, userId?: string): Promise<StoredPublicOrigin>;
+  /** An admin dropped the stored origin. */
+  clear(): Promise<void>;
+}
+/** Inputs of {@link createPublicOriginResolver}. */
+interface PublicOriginOptions {
+  db: DatabaseAdapter;
+  /** Only `publicBaseUrl` is read. */
+  config?: Pick<ShelfConfig, "publicBaseUrl"> | undefined;
+  /** Environment to detect the platform from; `process.env` when absent. */
+  env?: Env | undefined;
+  /** How long a database read is reused (default 10 s). */
+  ttlMs?: number | undefined;
+}
+/** Build the resolver for one app instance. */
+declare function createPublicOriginResolver(options: PublicOriginOptions): PublicOriginResolver;
+export { PUBLIC_ORIGIN_KEY, PublicOriginOptions, PublicOriginResolver, PublicOriginSource, ResolvedPublicOrigin, StoredPublicOrigin, createPublicOriginResolver };
+//# sourceMappingURL=public-origin.d.mts.map

package/dist/models/public-origin.mjs

@@ -0,0 +1,113 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { detectPublicBaseUrl, normalizeOrigin } from "../utils/public-origin.mjs";
+import { SiteSettingsModel } from "./site-settings.mjs";
+// src/models/public-origin.ts
+/** Key of the stored origin in `site_settings`. */
+const PUBLIC_ORIGIN_KEY = "public_origin";
+/** Build the resolver for one app instance. */
+function createPublicOriginResolver(options) {
+	const store = createStoredOrigin(new SiteSettingsModel(options.db), options.ttlMs ?? 1e4);
+	const resolver = {
+		async resolve() {
+			const configured = configuredBase(options.config?.publicBaseUrl);
+			if (configured !== void 0) return {
+				url: configured,
+				source: "config"
+			};
+			const platform = detectPublicBaseUrl(options.env ?? process.env);
+			if (platform !== void 0) return {
+				url: platform,
+				source: "platform"
+			};
+			const stored = await store.read();
+			return stored?.confirmed === true ? {
+				url: stored.origin,
+				source: "admin"
+			} : null;
+		},
+		async url() {
+			return (await resolver.resolve())?.url;
+		},
+		async authOrigin(requestOrigin) {
+			return await resolver.url() ?? requestOrigin;
+		},
+		stored: async () => await store.read(),
+		report: async (origin, userId) => await store.report(origin, userId),
+		set: async (origin, userId) => await store.write(origin, true, userId),
+		clear: async () => {
+			await store.clear();
+		}
+	};
+	return resolver;
+}
+/** The stored origin behind a small read cache, shared by every method of one resolver. */
+function createStoredOrigin(settings, ttlMs) {
+	let cache;
+	const remember = (value) => {
+		cache = {
+			at: Date.now(),
+			value
+		};
+	};
+	const write = async (origin, confirmed, userId) => {
+		const value = {
+			origin: requireOrigin(origin),
+			confirmed
+		};
+		await settings.set(PUBLIC_ORIGIN_KEY, JSON.stringify(value), userId);
+		remember(value);
+		return value;
+	};
+	return {
+		async read() {
+			if (cache !== void 0 && Date.now() - cache.at < ttlMs) return cache.value;
+			const value = parseStored(await settings.get(PUBLIC_ORIGIN_KEY));
+			remember(value);
+			return value;
+		},
+		write,
+		async report(origin, userId) {
+			const existing = parseStored(await settings.get(PUBLIC_ORIGIN_KEY));
+			remember(existing);
+			return existing ?? await write(origin, false, userId);
+		},
+		async clear() {
+			await settings.remove(PUBLIC_ORIGIN_KEY);
+			remember(null);
+		}
+	};
+}
+/** `publicBaseUrl` as a base URL: trailing slashes dropped, a path prefix kept. */
+function configuredBase(value) {
+	const trimmed = value?.trim().replace(/\/+$/u, "");
+	return trimmed === "" ? void 0 : trimmed;
+}
+/** `origin` as an origin; throws unless it is an http(s) origin with no path, query or fragment. */
+function requireOrigin(origin) {
+	const normalized = normalizeOrigin(origin);
+	const url = normalized === void 0 ? void 0 : new URL(withScheme(origin));
+	if (normalized === void 0 || url?.pathname !== "/" || url.search || url.hash) throw new Error("The public origin must be an http(s) origin such as https://shelf.example.com");
+	return normalized;
+}
+function withScheme(value) {
+	const text = value.trim();
+	return /^[a-z][a-z\d+.-]*:\/\//iu.test(text) ? text : `https://${text}`;
+}
+function parseStored(raw) {
+	if (raw === null) return null;
+	try {
+		const parsed = JSON.parse(raw);
+		const origin = normalizeOrigin(parsed.origin);
+		return origin === void 0 ? null : {
+			origin,
+			confirmed: parsed.confirmed === true
+		};
+	} catch {
+		return null;
+	}
+}
+export { PUBLIC_ORIGIN_KEY, createPublicOriginResolver };
+
+//# sourceMappingURL=public-origin.mjs.map

package/dist/models/public-origin.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-origin.mjs","names":[],"sources":["../../src/models/public-origin.ts"],"sourcesContent":["/**\n * The deployment's public origin (ADR 0007, decision 6): one resolver for anything that needs an\n * absolute URL in the background (commit-status links, email links, signed Storybook URLs).\n * It tries `config.publicBaseUrl`, then the platform's own address from the environment, then the\n * origin an admin's browser reported and an admin confirmed. A reported origin nobody confirmed is\n * only a suggestion: `resolve()` and `url()` do not return it, so no link, notification or signed\n * URL is built on it. The `Host` of a request is never used for those: a background job has none,\n * and it can be forged to plant links in emails and commit statuses.\n *\n * The one exception is authentication (OAuth redirect URIs, the OIDC helper): those routes are\n * interactive and request-bound, so {@link PublicOriginResolver.authOrigin} may answer with the\n * request's own origin when no origin is confirmed.\n */\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { ShelfConfig } from \"../config.ts\";\nimport { detectPublicBaseUrl, normalizeOrigin, type Env } from \"../utils/public-origin.ts\";\nimport { SiteSettingsModel } from \"./site-settings.ts\";\n\n/** Key of the stored origin in `site_settings`. */\nexport const PUBLIC_ORIGIN_KEY = \"public_origin\";\n\n/** Where the resolved origin came from. */\nexport type PublicOriginSource = \"config\" | \"platform\" | \"admin\";\n\n/** An origin that may be used, and its provenance. */\nexport interface ResolvedPublicOrigin {\n  /** Base URL without a trailing slash. */\n  url: string;\n  source: PublicOriginSource;\n}\n\n/** The origin an admin's browser reported, as stored. */\nexport interface StoredPublicOrigin {\n  origin: string;\n  confirmed: boolean;\n}\n\n/** Resolves the public origin; reads the database at most once per `ttlMs`. */\nexport interface PublicOriginResolver {\n  /**\n   * The origin background code may use now, or `null` when nothing is confirmed: a configured or\n   * platform origin, or one an admin confirmed. A detected, unconfirmed origin never resolves.\n   */\n  resolve(): Promise<ResolvedPublicOrigin | null>;\n  /** Shorthand for `resolve()` when only the URL matters. */\n  url(): Promise<string | undefined>;\n  /**\n   * The origin for an interactive authentication route (OAuth redirect URI, OIDC helper): the\n   * resolved origin, else `requestOrigin`, the address the request itself came in on. Never use\n   * it for a link that outlives the request.\n   */\n  authOrigin(requestOrigin: string): Promise<string>;\n  /** The value the System page shows and edits; `null` when no browser reported one. */\n  stored(): Promise<StoredPublicOrigin | null>;\n  /**\n   * An admin's browser reported `origin`. First report wins: nothing is stored when a value already\n   * is, so a visit through another domain cannot replace a confirmed origin. Returns what is stored.\n   */\n  report(origin: string, userId?: string): Promise<StoredPublicOrigin>;\n  /** An admin confirmed or entered `origin`: it replaces whatever is stored. */\n  set(origin: string, userId?: string): Promise<StoredPublicOrigin>;\n  /** An admin dropped the stored origin. */\n  clear(): Promise<void>;\n}\n\n/** Inputs of {@link createPublicOriginResolver}. */\nexport interface PublicOriginOptions {\n  db: DatabaseAdapter;\n  /** Only `publicBaseUrl` is read. */\n  config?: Pick<ShelfConfig, \"publicBaseUrl\"> | undefined;\n  /** Environment to detect the platform from; `process.env` when absent. */\n  env?: Env | undefined;\n  /** How long a database read is reused (default 10 s). */\n  ttlMs?: number | undefined;\n}\n\n/** Build the resolver for one app instance. */\nexport function createPublicOriginResolver(options: PublicOriginOptions): PublicOriginResolver {\n  const store = createStoredOrigin(new SiteSettingsModel(options.db), options.ttlMs ?? 10_000);\n  const resolver: PublicOriginResolver = {\n    async resolve() {\n      const configured = configuredBase(options.config?.publicBaseUrl);\n      if (configured !== undefined) {\n        return { url: configured, source: \"config\" };\n      }\n      const platform = detectPublicBaseUrl(options.env ?? process.env);\n      if (platform !== undefined) {\n        return { url: platform, source: \"platform\" };\n      }\n      const stored = await store.read();\n      return stored?.confirmed === true ? { url: stored.origin, source: \"admin\" } : null;\n    },\n    async url() {\n      return (await resolver.resolve())?.url;\n    },\n    async authOrigin(requestOrigin) {\n      return (await resolver.url()) ?? requestOrigin;\n    },\n    stored: async () => await store.read(),\n    report: async (origin, userId) => await store.report(origin, userId),\n    set: async (origin, userId) => await store.write(origin, true, userId),\n    clear: async () => {\n      await store.clear();\n    },\n  };\n  return resolver;\n}\n\n/** The stored origin behind a small read cache, shared by every method of one resolver. */\nfunction createStoredOrigin(\n  settings: SiteSettingsModel,\n  ttlMs: number,\n): Pick<PublicOriginResolver, \"report\" | \"clear\"> & {\n  read(): Promise<StoredPublicOrigin | null>;\n  write(origin: string, confirmed: boolean, userId?: string): Promise<StoredPublicOrigin>;\n} {\n  let cache: { at: number; value: StoredPublicOrigin | null } | undefined;\n  const remember = (value: StoredPublicOrigin | null): void => {\n    cache = { at: Date.now(), value };\n  };\n  const write = async (\n    origin: string,\n    confirmed: boolean,\n    userId?: string,\n  ): Promise<StoredPublicOrigin> => {\n    const value: StoredPublicOrigin = { origin: requireOrigin(origin), confirmed };\n    await settings.set(PUBLIC_ORIGIN_KEY, JSON.stringify(value), userId);\n    remember(value);\n    return value;\n  };\n  return {\n    async read() {\n      if (cache !== undefined && Date.now() - cache.at < ttlMs) {\n        return cache.value;\n      }\n      const value = parseStored(await settings.get(PUBLIC_ORIGIN_KEY));\n      remember(value);\n      return value;\n    },\n    write,\n    async report(origin, userId) {\n      const existing = parseStored(await settings.get(PUBLIC_ORIGIN_KEY));\n      remember(existing);\n      return existing ?? (await write(origin, false, userId));\n    },\n    async clear() {\n      await settings.remove(PUBLIC_ORIGIN_KEY);\n      remember(null);\n    },\n  };\n}\n\n/** `publicBaseUrl` as a base URL: trailing slashes dropped, a path prefix kept. */\nfunction configuredBase(value: string | undefined): string | undefined {\n  const trimmed = value?.trim().replace(/\\/+$/u, \"\");\n  return trimmed === \"\" ? undefined : trimmed;\n}\n\n/** `origin` as an origin; throws unless it is an http(s) origin with no path, query or fragment. */\nfunction requireOrigin(origin: string): string {\n  const normalized = normalizeOrigin(origin);\n  const url = normalized === undefined ? undefined : new URL(withScheme(origin));\n  if (normalized === undefined || url?.pathname !== \"/\" || url.search || url.hash) {\n    throw new Error(\n      \"The public origin must be an http(s) origin such as https://shelf.example.com\",\n    );\n  }\n  return normalized;\n}\n\nfunction withScheme(value: string): string {\n  const text = value.trim();\n  return /^[a-z][a-z\\d+.-]*:\\/\\//iu.test(text) ? text : `https://${text}`;\n}\n\nfunction parseStored(raw: string | null): StoredPublicOrigin | null {\n  if (raw === null) {\n    return null;\n  }\n  try {\n    const parsed = JSON.parse(raw) as Partial<StoredPublicOrigin>;\n    const origin = normalizeOrigin(parsed.origin);\n    return origin === undefined ? null : { origin, confirmed: parsed.confirmed === true };\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAmBA,MAAa,oBAAoB;;AA0DjC,SAAgB,2BAA2B,SAAoD;CAC7F,MAAM,QAAQ,mBAAmB,IAAI,kBAAkB,QAAQ,EAAE,GAAG,QAAQ,SAAS,GAAM;CAC3F,MAAM,WAAiC;EACrC,MAAM,UAAU;GACd,MAAM,aAAa,eAAe,QAAQ,QAAQ,aAAa;GAC/D,IAAI,eAAe,KAAA,GACjB,OAAO;IAAE,KAAK;IAAY,QAAQ;GAAS;GAE7C,MAAM,WAAW,oBAAoB,QAAQ,OAAO,QAAQ,GAAG;GAC/D,IAAI,aAAa,KAAA,GACf,OAAO;IAAE,KAAK;IAAU,QAAQ;GAAW;GAE7C,MAAM,SAAS,MAAM,MAAM,KAAK;GAChC,OAAO,QAAQ,cAAc,OAAO;IAAE,KAAK,OAAO;IAAQ,QAAQ;GAAQ,IAAI;EAChF;EACA,MAAM,MAAM;GACV,QAAQ,MAAM,SAAS,QAAQ,EAAA,EAAI;EACrC;EACA,MAAM,WAAW,eAAe;GAC9B,OAAQ,MAAM,SAAS,IAAI,KAAM;EACnC;EACA,QAAQ,YAAY,MAAM,MAAM,KAAK;EACrC,QAAQ,OAAO,QAAQ,WAAW,MAAM,MAAM,OAAO,QAAQ,MAAM;EACnE,KAAK,OAAO,QAAQ,WAAW,MAAM,MAAM,MAAM,QAAQ,MAAM,MAAM;EACrE,OAAO,YAAY;GACjB,MAAM,MAAM,MAAM;EACpB;CACF;CACA,OAAO;AACT;;AAGA,SAAS,mBACP,UACA,OAIA;CACA,IAAI;CACJ,MAAM,YAAY,UAA2C;EAC3D,QAAQ;GAAE,IAAI,KAAK,IAAI;GAAG;EAAM;CAClC;CACA,MAAM,QAAQ,OACZ,QACA,WACA,WACgC;EAChC,MAAM,QAA4B;GAAE,QAAQ,cAAc,MAAM;GAAG;EAAU;EAC7E,MAAM,SAAS,IAAI,mBAAmB,KAAK,UAAU,KAAK,GAAG,MAAM;EACnE,SAAS,KAAK;EACd,OAAO;CACT;CACA,OAAO;EACL,MAAM,OAAO;GACX,IAAI,UAAU,KAAA,KAAa,KAAK,IAAI,IAAI,MAAM,KAAK,OACjD,OAAO,MAAM;GAEf,MAAM,QAAQ,YAAY,MAAM,SAAS,IAAI,iBAAiB,CAAC;GAC/D,SAAS,KAAK;GACd,OAAO;EACT;EACA;EACA,MAAM,OAAO,QAAQ,QAAQ;GAC3B,MAAM,WAAW,YAAY,MAAM,SAAS,IAAI,iBAAiB,CAAC;GAClE,SAAS,QAAQ;GACjB,OAAO,YAAa,MAAM,MAAM,QAAQ,OAAO,MAAM;EACvD;EACA,MAAM,QAAQ;GACZ,MAAM,SAAS,OAAO,iBAAiB;GACvC,SAAS,IAAI;EACf;CACF;AACF;;AAGA,SAAS,eAAe,OAA+C;CACrE,MAAM,UAAU,OAAO,KAAK,CAAC,CAAC,QAAQ,SAAS,EAAE;CACjD,OAAO,YAAY,KAAK,KAAA,IAAY;AACtC;;AAGA,SAAS,cAAc,QAAwB;CAC7C,MAAM,aAAa,gBAAgB,MAAM;CACzC,MAAM,MAAM,eAAe,KAAA,IAAY,KAAA,IAAY,IAAI,IAAI,WAAW,MAAM,CAAC;CAC7E,IAAI,eAAe,KAAA,KAAa,KAAK,aAAa,OAAO,IAAI,UAAU,IAAI,MACzE,MAAM,IAAI,MACR,+EACF;CAEF,OAAO;AACT;AAEA,SAAS,WAAW,OAAuB;CACzC,MAAM,OAAO,MAAM,KAAK;CACxB,OAAO,2BAA2B,KAAK,IAAI,IAAI,OAAO,WAAW;AACnE;AAEA,SAAS,YAAY,KAA+C;CAClE,IAAI,QAAQ,MACV,OAAO;CAET,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,GAAG;EAC7B,MAAM,SAAS,gBAAgB,OAAO,MAAM;EAC5C,OAAO,WAAW,KAAA,IAAY,OAAO;GAAE;GAAQ,WAAW,OAAO,cAAc;EAAK;CACtF,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/models/review-switch-off.d.mts

@@ -0,0 +1,12 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { Build } from "../schema/build.mjs";
+/**
+ * Accept the project's `pending` builds that have no capture attempts and no snapshots; resolves
+ * to the builds it accepted. Builds a capture touched keep their status (snapshot approval decides
+ * them), and a second run finds nothing left to do. No approval event is raised.
+ */
+declare function acceptPendingWithoutWork(db: DatabaseAdapter, projectId: string): Promise<Build[]>;
+export { acceptPendingWithoutWork };
+//# sourceMappingURL=review-switch-off.d.mts.map

package/dist/models/review-switch-off.mjs

@@ -0,0 +1,25 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { CaptureAttemptModel } from "./capture-attempt.mjs";
+import { BuildModel } from "./build.mjs";
+import { SnapshotModel } from "./snapshot.mjs";
+// src/models/review-switch-off.ts
+/**
+* Accept the project's `pending` builds that have no capture attempts and no snapshots; resolves
+* to the builds it accepted. Builds a capture touched keep their status (snapshot approval decides
+* them), and a second run finds nothing left to do. No approval event is raised.
+*/
+async function acceptPendingWithoutWork(db, projectId) {
+	const builds = new BuildModel(db);
+	const pending = await builds.list(projectId, { status: "pending" });
+	const idle = await Promise.all(pending.map(async (build) => await hasWork(db, build.id) ? null : build));
+	return await Promise.all(idle.flatMap((build) => build === null ? [] : [builds.setStatus(build.id, "approved")]));
+}
+async function hasWork(db, buildId) {
+	const [attempts, snapshots] = await Promise.all([new CaptureAttemptModel(db).listByBuild(buildId), new SnapshotModel(db).listByBuild(buildId)]);
+	return attempts.length > 0 || snapshots.length > 0;
+}
+export { acceptPendingWithoutWork };
+
+//# sourceMappingURL=review-switch-off.mjs.map

package/dist/models/review-switch-off.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-switch-off.mjs","names":[],"sources":["../../src/models/review-switch-off.ts"],"sourcesContent":["/**\n * The switch-off pass (ADR 0013, decision 1): when a project turns review off, the builds it left\n * `pending` that no capture ever worked on are accepted in one pass, so the project does not keep\n * a queue nobody will clear.\n */\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport { BuildModel } from \"./build.ts\";\nimport { CaptureAttemptModel } from \"./capture-attempt.ts\";\nimport { SnapshotModel } from \"./snapshot.ts\";\n\n/**\n * Accept the project's `pending` builds that have no capture attempts and no snapshots; resolves\n * to the builds it accepted. Builds a capture touched keep their status (snapshot approval decides\n * them), and a second run finds nothing left to do. No approval event is raised.\n */\nexport async function acceptPendingWithoutWork(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<Build[]> {\n  const builds = new BuildModel(db);\n  const pending = await builds.list(projectId, { status: \"pending\" });\n  const idle = await Promise.all(\n    pending.map(async (build) => ((await hasWork(db, build.id)) ? null : build)),\n  );\n  return await Promise.all(\n    idle.flatMap((build) => (build === null ? [] : [builds.setStatus(build.id, \"approved\")])),\n  );\n}\n\nasync function hasWork(db: DatabaseAdapter, buildId: string): Promise<boolean> {\n  const [attempts, snapshots] = await Promise.all([\n    new CaptureAttemptModel(db).listByBuild(buildId),\n    new SnapshotModel(db).listByBuild(buildId),\n  ]);\n  return attempts.length > 0 || snapshots.length > 0;\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,eAAsB,yBACpB,IACA,WACkB;CAClB,MAAM,SAAS,IAAI,WAAW,EAAE;CAChC,MAAM,UAAU,MAAM,OAAO,KAAK,WAAW,EAAE,QAAQ,UAAU,CAAC;CAClE,MAAM,OAAO,MAAM,QAAQ,IACzB,QAAQ,IAAI,OAAO,UAAY,MAAM,QAAQ,IAAI,MAAM,EAAE,IAAK,OAAO,KAAM,CAC7E;CACA,OAAO,MAAM,QAAQ,IACnB,KAAK,SAAS,UAAW,UAAU,OAAO,CAAC,IAAI,CAAC,OAAO,UAAU,MAAM,IAAI,UAAU,CAAC,CAAE,CAC1F;AACF;AAEA,eAAe,QAAQ,IAAqB,SAAmC;CAC7E,MAAM,CAAC,UAAU,aAAa,MAAM,QAAQ,IAAI,CAC9C,IAAI,oBAAoB,EAAE,CAAC,CAAC,YAAY,OAAO,GAC/C,IAAI,cAAc,EAAE,CAAC,CAAC,YAAY,OAAO,CAC3C,CAAC;CACD,OAAO,SAAS,SAAS,KAAK,UAAU,SAAS;AACnD"}

package/dist/models/site-settings.d.mts

@@ -0,0 +1,21 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { Table } from "drizzle-orm";
+/** Tables required by {@link SiteSettingsModel}. */
+interface SiteSettingsTables {
+  siteSettings: Table;
+}
+/** Data operations for `site_settings`, keyed by setting name. */
+declare class SiteSettingsModel {
+  #private;
+  constructor(db: DatabaseAdapter, tables?: SiteSettingsTables);
+  /** The setting's value, or `null` when it was never written. */
+  get(key: string): Promise<string | null>;
+  /** Write the setting, replacing any value; `updatedBy` names the person behind it. */
+  set(key: string, value: string, updatedBy?: string): Promise<void>;
+  /** Delete the setting; a no-op when it is absent. */
+  remove(key: string): Promise<void>;
+}
+export { SiteSettingsModel, SiteSettingsTables };
+//# sourceMappingURL=site-settings.d.mts.map

package/dist/models/site-settings.mjs

@@ -0,0 +1,47 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+// src/models/site-settings.ts
+/** Data operations for `site_settings`, keyed by setting name. */
+var SiteSettingsModel = class {
+	#db;
+	#table;
+	constructor(db, tables) {
+		this.#db = db;
+		this.#table = (tables ?? { siteSettings: db.tables.siteSettings }).siteSettings;
+	}
+	/** The setting's value, or `null` when it was never written. */
+	async get(key) {
+		return (await this.#db.get(this.#table, key))?.value ?? null;
+	}
+	/** Write the setting, replacing any value; `updatedBy` names the person behind it. */
+	async set(key, value, updatedBy) {
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const fields = {
+			value,
+			updatedBy: updatedBy ?? null,
+			updatedAt: now
+		};
+		if (await this.#db.get(this.#table, key) !== null) {
+			await this.#db.update(this.#table, key, fields);
+			return;
+		}
+		try {
+			await this.#db.insert(this.#table, {
+				id: key,
+				createdAt: now,
+				...fields
+			});
+		} catch (error) {
+			if (await this.#db.get(this.#table, key) === null) throw error;
+			await this.#db.update(this.#table, key, fields);
+		}
+	}
+	/** Delete the setting; a no-op when it is absent. */
+	async remove(key) {
+		await this.#db.remove(this.#table, key);
+	}
+};
+export { SiteSettingsModel };
+
+//# sourceMappingURL=site-settings.mjs.map

package/dist/models/site-settings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-settings.mjs","names":[],"sources":["../../src/models/site-settings.ts"],"sourcesContent":["/** Site-wide key-value settings (`site_settings`): what the app learns while running. */\nimport type { Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { SiteSetting } from \"../schema/site-setting.ts\";\n\n/** Tables required by {@link SiteSettingsModel}. */\nexport interface SiteSettingsTables {\n  siteSettings: Table;\n}\n\n/** Data operations for `site_settings`, keyed by setting name. */\nexport class SiteSettingsModel {\n  readonly #db: DatabaseAdapter;\n  readonly #table: Table;\n\n  constructor(db: DatabaseAdapter, tables?: SiteSettingsTables) {\n    this.#db = db;\n    this.#table = (tables ?? { siteSettings: db.tables.siteSettings }).siteSettings;\n  }\n\n  /** The setting's value, or `null` when it was never written. */\n  async get(key: string): Promise<string | null> {\n    const row = (await this.#db.get(this.#table, key)) as SiteSetting | null;\n    return row?.value ?? null;\n  }\n\n  /** Write the setting, replacing any value; `updatedBy` names the person behind it. */\n  async set(key: string, value: string, updatedBy?: string): Promise<void> {\n    const now = new Date().toISOString();\n    const fields = { value, updatedBy: updatedBy ?? null, updatedAt: now };\n    if ((await this.#db.get(this.#table, key)) !== null) {\n      await this.#db.update(this.#table, key, fields);\n      return;\n    }\n    try {\n      await this.#db.insert(this.#table, { id: key, createdAt: now, ...fields });\n    } catch (error) {\n      // Another instance wrote the key first: this write still wins, as a later one.\n      if ((await this.#db.get(this.#table, key)) === null) {\n        throw error;\n      }\n      await this.#db.update(this.#table, key, fields);\n    }\n  }\n\n  /** Delete the setting; a no-op when it is absent. */\n  async remove(key: string): Promise<void> {\n    await this.#db.remove(this.#table, key);\n  }\n}\n"],"mappings":";;;;;AAWA,IAAa,oBAAb,MAA+B;CAC7B;CACA;CAEA,YAAY,IAAqB,QAA6B;EAC5D,KAAK,MAAM;EACX,KAAK,UAAU,UAAU,EAAE,cAAc,GAAG,OAAO,aAAa,EAAA,CAAG;CACrE;;CAGA,MAAM,IAAI,KAAqC;EAE7C,QAAO,MADY,KAAK,IAAI,IAAI,KAAK,QAAQ,GAAG,EAAA,EACpC,SAAS;CACvB;;CAGA,MAAM,IAAI,KAAa,OAAe,WAAmC;EACvE,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,SAAS;GAAE;GAAO,WAAW,aAAa;GAAM,WAAW;EAAI;EACrE,IAAK,MAAM,KAAK,IAAI,IAAI,KAAK,QAAQ,GAAG,MAAO,MAAM;GACnD,MAAM,KAAK,IAAI,OAAO,KAAK,QAAQ,KAAK,MAAM;GAC9C;EACF;EACA,IAAI;GACF,MAAM,KAAK,IAAI,OAAO,KAAK,QAAQ;IAAE,IAAI;IAAK,WAAW;IAAK,GAAG;GAAO,CAAC;EAC3E,SAAS,OAAO;GAEd,IAAK,MAAM,KAAK,IAAI,IAAI,KAAK,QAAQ,GAAG,MAAO,MAC7C,MAAM;GAER,MAAM,KAAK,IAAI,OAAO,KAAK,QAAQ,KAAK,MAAM;EAChD;CACF;;CAGA,MAAM,OAAO,KAA4B;EACvC,MAAM,KAAK,IAAI,OAAO,KAAK,QAAQ,GAAG;CACxC;AACF"}

package/dist/models/snapshot.d.mts

@@ -4,15 +4,15 @@ import { DatabaseAdapter } from "../adapter/database.mjs";
 import { SnapshotStatus } from "../types.mjs";
 import { Snapshot } from "../schema/snapshot.mjs";
 import { Table } from "drizzle-orm";
-//#region src/models/snapshot.d.ts
 /** Tables required by {@link SnapshotModel}. */
 interface SnapshotTables {
   snapshots: Table;
 }
 /** Data operations for snapshot records. */
 declare class SnapshotModel {
-  private readonly db;
+  #private;
   private readonly tables;
+  private readonly db;
   /**
    * @param db - Database adapter.
    * @param tables - Table handles.
@@ -27,8 +27,30 @@ declare class SnapshotModel {
    * @returns The created snapshot.
    */
   create(projectId: string, buildId: string, input: SnapshotCreateInput): Promise<Snapshot>;
+  /**
+   * Delete the rendered snapshots a shard is about to write again: rows of `(story, engine)` pairs
+   * in `work`, so a rerun starts from a clean slate instead of colliding with rows an earlier,
+   * interrupted run left behind. Inherited rows are kept: the plan wrote them, for engines or
+   * viewports this shard does not render.
+   */
+  removeRendered(buildId: string, work: readonly {
+    browser: string;
+    storyIds: ReadonlySet<string>;
+  }[]): Promise<number>;
+  /** Delete every snapshot of a build: a new plan of it starts clean. */
+  removeForBuild(buildId: string): Promise<number>;
+  /**
+   * Milliseconds each story cost on one build, summed over its viewports and engines. Stories the
+   * renderer did not time are left out, so an empty map means this build carries no timings.
+   */
+  durationsByStory(buildId: string): Promise<Map<string, number>>;
   /** List all snapshots belonging to a build. */
   listByBuild(buildId: string): Promise<Snapshot[]>;
+  /**
+   * Every snapshot of a story file across the project's builds. Index paths are
+   * stored raw (`./src/A.stories.tsx`), so both spellings of `importPath` match.
+   */
+  listByImportPath(projectId: string, importPath: string): Promise<Snapshot[]>;
   /** Fetch a snapshot by id, or null if not found. */
   get(id: string): Promise<Snapshot | null>;
   /** Update mutable fields of a snapshot. */
@@ -44,15 +66,29 @@ interface SnapshotCreateInput {
   storyName: string;
   storyTitle: string;
   storyImportPath?: string;
+  /** Figma URL declared by the story (`parameters.design` / `storyshelf.figma`). */
+  designUrl?: string | null;
   viewportName: string;
   viewportWidth: number;
   viewportHeight: number;
   screenshotPath: string;
   infraHash?: string | null;
+  /** JSON `EnvironmentChange` when accepted as an environment migration. */
+  envChange?: string | null;
   inherited?: boolean;
+  sourceBuildId?: string | null;
+  comparisonImagePath?: string | null;
+  comparisonMetadata?: string | null;
   baselineId?: string | null;
   baselineVersion?: string | null;
+  /** Resolved mode definition as JSON (display/capture only). */
+  mode?: string | null;
+  /** Engine the screenshot was captured with (default chromium). */
+  browser?: string;
+  /** Milliseconds the renderer spent on this capture, when it reported any. */
+  durationMs?: number | null;
+  /** JSON array of axe violation texts found on this capture; null when none. */
+  a11yViolations?: string | null;
 }
-//#endregion
 export { SnapshotCreateInput, SnapshotModel, SnapshotTables };
 //# sourceMappingURL=snapshot.d.mts.map