@decohere/ci-tools 0.0.1-dev.112 → 0.0.1-dev.113

package/src/github/credential-nudge.mjs

@@ -1,15 +1,13 @@
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
+import { upsertIssue } from "../lib/github-issue.mjs";
 
-const LIST_ID = process.env.CLICKUP_LIST_ID ?? "901220171084";
-const API = "https://api.clickup.com/api/v2";
 const WARN_DAYS = 14;
 const MS_PER_DAY = 86_400_000;
-const CHORE_TYPE = 1004;
 const DEFAULT_REPO = "typesmiths/decohere";
 
 /**
- * One profile per credential. Date math, ClickUp upsert, and fail-closed live below.
+ * One profile per credential. Date math, GitHub issue upsert, and fail-closed live below.
  * `ghEnv` unset means repo secret / repo variable (not an Actions environment).
  *
  * @typedef {{
@@ -104,7 +102,7 @@ export function credentialProfile(id) {
 }
 
 /** @param {CredentialProfile} credential */
-export function taskName(credential, expiresYmd) {
+export function issueTitle(credential, expiresYmd) {
 	return `chore(security): rotate ${credential.secret} (expires ${expiresYmd})`;
 }
 
@@ -115,7 +113,7 @@ export function rotationCommands(credential, nextExpiresYmd, repo = resolveRepo(
 	return [
 		credential.mint,
 		"",
-		"Then from a trusted machine (do not paste the token into Actions or this task):",
+		"Then from a trusted machine (do not paste the token into Actions or this issue):",
 		"",
 		"```bash",
 		`gh secret set ${credential.secret} ${flags}--repo ${repo}`,
@@ -123,7 +121,7 @@ export function rotationCommands(credential, nextExpiresYmd, repo = resolveRepo(
 		"```",
 		"",
 		`Revoke the old token: ${credential.revokeUrl}`,
-		"Mark this task complete, then retry Publish:",
+		"Close this issue, then retry Publish:",
 		"",
 		"```bash",
 		`gh run list --repo ${repo} --workflow Publish --limit 5`,
@@ -169,53 +167,6 @@ export function buildDescription(credential, options) {
 		.join("\n");
 }
 
-async function clickup(method, path, body) {
-	const key = process.env.CLICKUP_API_KEY;
-	if (key == null || key.length === 0) {
-		throw new Error("Missing CLICKUP_API_KEY");
-	}
-	const response = await fetch(`${API}${path}`, {
-		method,
-		headers: {
-			Authorization: key,
-			"Content-Type": "application/json",
-		},
-		body: body == null ? undefined : JSON.stringify(body),
-	});
-	const text = await response.text();
-	if (!response.ok) {
-		throw new Error(
-			`ClickUp ${method} ${path} failed (${response.status}): ${text.slice(0, 500)}`,
-		);
-	}
-	return text.length === 0 ? undefined : JSON.parse(text);
-}
-
-async function findTaskByName(name) {
-	for (let page = 0; page < 10; page += 1) {
-		const qs = new URLSearchParams({
-			include_closed: "true",
-			subtasks: "false",
-			page: String(page),
-		});
-		const data = await clickup("GET", `/list/${LIST_ID}/task?${qs}`);
-		const tasks = Array.isArray(data) ? data : (data?.tasks ?? []);
-		const match = tasks.find((task) => task.name === name);
-		if (match) {
-			return match;
-		}
-		if (tasks.length < 100) {
-			break;
-		}
-	}
-	return null;
-}
-
-async function firstOpenStatus() {
-	const list = await clickup("GET", `/list/${LIST_ID}`);
-	return (list.statuses ?? []).find((status) => status.type === "open")?.status;
-}
-
 function runUrl() {
 	if (
 		process.env.GITHUB_SERVER_URL &&
@@ -228,51 +179,21 @@ function runUrl() {
 }
 
 /** @param {CredentialProfile} credential */
-export async function upsertRotationTask(credential, options) {
+export function upsertRotationIssue(credential, options, upsert = upsertIssue) {
 	const { expiresYmd, kind, daysLeft, rejected } = options;
-	const name = taskName(credential, expiresYmd ?? "unknown");
-	const existing = await findTaskByName(name);
-	const dueMs = parseExpiresAt(expiresYmd);
-	const payload = {
-		name,
-		markdown_description: buildDescription(credential, {
+	return upsert({
+		title: issueTitle(credential, expiresYmd ?? "unknown"),
+		body: buildDescription(credential, {
 			kind,
 			expiresYmd,
 			daysLeft,
 			rejected,
 			runUrl: runUrl(),
 		}),
-		custom_item_id: CHORE_TYPE,
-		priority: rejected || kind === "expired" ? 1 : 2,
-		due_date: dueMs == null ? undefined : dueMs,
-		due_date_time: false,
-	};
-	const assignee = process.env.CLICKUP_ASSIGNEE_ID?.trim();
-	if (assignee) {
-		payload.assignees = [Number(assignee)];
-	}
-
-	if (existing) {
-		const update = {
-			markdown_description: payload.markdown_description,
-			priority: payload.priority,
-			due_date: payload.due_date,
-			due_date_time: false,
-		};
-		if (existing.closed || existing.status?.type === "closed") {
-			const status = await firstOpenStatus();
-			if (status) {
-				update.status = status;
-			}
-		}
-		await clickup("PUT", `/task/${existing.id}`, update);
-		return { id: existing.id, url: existing.url, created: false };
-	}
-	const created = await clickup("POST", `/list/${LIST_ID}/task`, payload);
-	return { id: created.id, url: created.url, created: true };
+	});
 }
 
-export async function runNudge(env = process.env) {
+export async function runNudge(env = process.env, upsert = upsertIssue) {
 	const credential = credentialProfile(String(env.NUDGE_CREDENTIAL ?? "").trim());
 	const rejected = env.NUDGE_REJECTED === "1";
 	const expiresYmd = String(env[credential.expiresVar] ?? "").trim();
@@ -290,14 +211,18 @@ export async function runNudge(env = process.env) {
 	}
 
 	if (rejected || assessment.kind === "warn" || assessment.kind === "expired") {
-		const result = await upsertRotationTask(credential, {
-			expiresYmd: expiresYmd || "unknown",
-			kind: assessment.kind,
-			daysLeft: assessment.daysLeft,
-			rejected,
-		});
+		const result = upsertRotationIssue(
+			credential,
+			{
+				expiresYmd: expiresYmd || "unknown",
+				kind: assessment.kind,
+				daysLeft: assessment.daysLeft,
+				rejected,
+			},
+			upsert,
+		);
 		process.stdout.write(
-			`${result.created ? "Created" : "Updated"} ClickUp ${result.id} ${result.url ?? ""}\n`,
+			`${result.created ? "Opened" : "Updated"} issue #${result.number} ${result.url}\n`,
 		);
 	}
 

package/src/github/oidc-bootstrap-nudge.mjs

@@ -1,22 +1,15 @@
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
+import { upsertIssue } from "../lib/github-issue.mjs";
 import { listPublishablePackages } from "./publish-verify.mjs";
 
-const LIST_ID = process.env.CLICKUP_LIST_ID ?? "901220171084";
-const API = "https://api.clickup.com/api/v2";
 const GITHUB_API = process.env.GITHUB_API_URL ?? "https://api.github.com";
-const DEPLOYMENT_TYPE = 1005;
-const TASK_NAME = "deploy(publish): OIDC bootstrap unpublished packages";
-const LEGACY_TASK_NAMES = ["chore(publish): OIDC bootstrap unpublished packages"];
+const ISSUE_TITLE = "deploy(publish): OIDC bootstrap unpublished packages";
 const BOOTSTRAP_ENV = "npm-oidc-bootstrap";
 const DEFAULT_REPO = "typesmiths/decohere";
 
-export function taskName() {
-	return TASK_NAME;
-}
-
-export function bootstrapTaskNames() {
-	return [TASK_NAME, ...LEGACY_TASK_NAMES];
+export function issueTitle() {
+	return ISSUE_TITLE;
 }
 
 /** @param {string | undefined} raw */
@@ -27,14 +20,6 @@ export function parseUnpublished(raw) {
 		.filter(Boolean);
 }
 
-/** @param {string | undefined} raw */
-export function parseAssigneeIds(raw) {
-	return String(raw ?? "")
-		.split(/[,\s]+/)
-		.map((id) => Number(id.trim()))
-		.filter((id) => Number.isInteger(id) && id > 0);
-}
-
 /**
  * @param {string | undefined} version
  */
@@ -82,29 +67,6 @@ export function extractGitHubReviewerLogins(environment) {
 	return [...new Set(logins)];
 }
 
-/**
- * @param {string[]} logins
- * @param {{ id?: number, username?: string, email?: string }[]} members
- */
-export function mapLoginsToClickUpIds(logins, members) {
-	const ids = new Set();
-	for (const login of logins) {
-		const key = login.toLowerCase();
-		for (const member of members) {
-			const username = String(member.username ?? "").toLowerCase();
-			const email = String(member.email ?? "").toLowerCase();
-			const local = email.split("@")[0] ?? "";
-			if (username === key || local === key || email === key) {
-				const id = Number(member.id);
-				if (Number.isInteger(id) && id > 0) {
-					ids.add(id);
-				}
-			}
-		}
-	}
-	return [...ids];
-}
-
 /**
  * @param {{
  *   unpublished: string[],
@@ -156,54 +118,6 @@ export function buildDescription(options) {
 		.join("\n");
 }
 
-async function clickup(method, path, body) {
-	const key = process.env.CLICKUP_API_KEY;
-	if (key == null || key.length === 0) {
-		throw new Error("Missing CLICKUP_API_KEY");
-	}
-	const response = await fetch(`${API}${path}`, {
-		method,
-		headers: {
-			Authorization: key,
-			"Content-Type": "application/json",
-		},
-		body: body == null ? undefined : JSON.stringify(body),
-	});
-	const text = await response.text();
-	if (!response.ok) {
-		throw new Error(
-			`ClickUp ${method} ${path} failed (${response.status}): ${text.slice(0, 500)}`,
-		);
-	}
-	return text.length === 0 ? undefined : JSON.parse(text);
-}
-
-async function findTaskByName(names) {
-	const wanted = new Set(Array.isArray(names) ? names : [names]);
-	for (let page = 0; page < 10; page += 1) {
-		const qs = new URLSearchParams({
-			include_closed: "true",
-			subtasks: "false",
-			page: String(page),
-		});
-		const data = await clickup("GET", `/list/${LIST_ID}/task?${qs}`);
-		const tasks = Array.isArray(data) ? data : (data?.tasks ?? []);
-		const match = tasks.find((task) => wanted.has(task.name));
-		if (match) {
-			return match;
-		}
-		if (tasks.length < 100) {
-			break;
-		}
-	}
-	return null;
-}
-
-async function firstOpenStatus() {
-	const list = await clickup("GET", `/list/${LIST_ID}`);
-	return (list.statuses ?? []).find((status) => status.type === "open")?.status;
-}
-
 function runUrl() {
 	if (
 		process.env.GITHUB_SERVER_URL &&
@@ -238,124 +152,52 @@ export async function githubEnvironmentReviewerLogins(options = {}) {
 	);
 	if (!response.ok) {
 		process.stderr.write(
-			`Could not list ${environment} reviewers (${response.status}); assigning from CLICKUP_ASSIGNEE_ID only\n`,
+			`Could not list ${environment} reviewers (${response.status}); the issue will have no assignees\n`,
 		);
 		return [];
 	}
 	return extractGitHubReviewerLogins(await response.json());
 }
 
-export async function clickupWorkspaceMembers() {
-	const data = await clickup("GET", "/team");
-	const teams = Array.isArray(data?.teams) ? data.teams : [];
-	const members = [];
-	for (const team of teams) {
-		for (const entry of team.members ?? []) {
-			const user = entry?.user ?? entry;
-			if (user?.id) {
-				members.push({
-					id: Number(user.id),
-					username: user.username,
-					email: user.email,
-				});
-			}
-		}
-	}
-	return members;
-}
-
-/**
- * @param {{ unpublished: string[], packages: { name: string, dir: string, version?: string }[], assigneeIds: number[], repo?: string, runUrl?: string, channel?: string }} options
- */
-export async function upsertBootstrapTask(options) {
-	const name = taskName();
-	const existing = await findTaskByName(bootstrapTaskNames());
-	const markdown = buildDescription(options);
-	const payload = {
-		name,
-		markdown_description: markdown,
-		custom_item_id: DEPLOYMENT_TYPE,
-		priority: 1,
-	};
-	if (options.assigneeIds.length > 0 && !existing) {
-		payload.assignees = options.assigneeIds;
-	}
-
-	if (existing) {
-		const update = {
-			name,
-			markdown_description: markdown,
-			custom_item_id: DEPLOYMENT_TYPE,
-			priority: 1,
-		};
-		if (existing.closed || existing.status?.type === "closed") {
-			const status = await firstOpenStatus();
-			if (status) {
-				update.status = status;
-			}
-		}
-		if (options.assigneeIds.length > 0) {
-			update.assignees = { add: options.assigneeIds };
-		}
-		await clickup("PUT", `/task/${existing.id}`, update);
-		return { id: existing.id, url: existing.url, created: false };
-	}
-	const created = await clickup("POST", `/list/${LIST_ID}/task`, payload);
-	return { id: created.id, url: created.url, created: true };
-}
-
 export async function runNudge(env = process.env, io = {}) {
 	const unpublished = parseUnpublished(env.UNPUBLISHED);
 	if (unpublished.length === 0) {
-		process.stdout.write("No unpublished package names; skipping ClickUp bootstrap task\n");
+		process.stdout.write("No unpublished package names; skipping OIDC bootstrap issue\n");
 		return 0;
 	}
 
 	const root = io.root ?? process.cwd();
 	const packages = (io.listPackages ?? listPublishablePackages)(root);
-	const logins = await (io.githubReviewers ?? githubEnvironmentReviewerLogins)({
+	const assignees = await (io.githubReviewers ?? githubEnvironmentReviewerLogins)({
 		token: env.GITHUB_TOKEN ?? env.GH_TOKEN,
 		repo: env.GITHUB_REPOSITORY,
 	});
-	const members = await (io.clickupMembers ?? clickupWorkspaceMembers)();
-	const assigneeIds = [
-		...new Set([
-			...mapLoginsToClickUpIds(logins, members),
-			...parseAssigneeIds(env.CLICKUP_ASSIGNEE_ID),
-		]),
-	];
-
-	if (logins.length > 0 && mapLoginsToClickUpIds(logins, members).length === 0) {
-		process.stderr.write(
-			`GitHub ${BOOTSTRAP_ENV} reviewers (${logins.join(", ")}) did not match a ClickUp member (login ↔ username or email local-part)\n`,
-		);
-	}
-
-	const result = await (io.upsert ?? upsertBootstrapTask)({
-		unpublished,
-		packages,
-		assigneeIds,
-		repo: env.GITHUB_REPOSITORY || DEFAULT_REPO,
-		runUrl: io.runUrl ?? runUrl(),
-		channel: env.PUBLISH_CHANNEL || env.CHANNEL || "dev",
+	const repo = env.GITHUB_REPOSITORY || DEFAULT_REPO;
+
+	const result = (io.upsert ?? upsertIssue)({
+		title: issueTitle(),
+		body: buildDescription({
+			unpublished,
+			packages,
+			repo,
+			runUrl: io.runUrl ?? runUrl(),
+			channel: env.PUBLISH_CHANNEL || env.CHANNEL || "dev",
+		}),
+		assignees,
 	});
-	const url = result.url ?? "";
 	process.stdout.write(
-		`${result.created ? "Created" : "Updated"} ClickUp ${result.id} ${url}\n`,
+		`${result.created ? "Opened" : "Updated"} issue #${result.number} ${result.url}\n`,
 	);
-	if (assigneeIds.length > 0) {
-		process.stdout.write(`Assigned ClickUp users ${assigneeIds.join(", ")}\n`);
+	if (assignees.length > 0) {
+		process.stdout.write(`Assigned ${assignees.join(", ")}\n`);
 	} else {
 		process.stdout.write(
-			"No ClickUp assignees (add required reviewers on npm-oidc-bootstrap, or set vars.CLICKUP_ASSIGNEE_ID)\n",
+			`No assignees (add required reviewers on the ${BOOTSTRAP_ENV} environment)\n`,
 		);
 	}
 	if (env.GITHUB_OUTPUT) {
 		const { appendFileSync } = await import("node:fs");
-		appendFileSync(env.GITHUB_OUTPUT, `task_url=${url}\n`);
-	}
-	if (!url) {
-		throw new Error("ClickUp bootstrap task has no URL");
+		appendFileSync(env.GITHUB_OUTPUT, `issue_url=${result.url}\n`);
 	}
 	return 0;
 }

package/src/lib/github-issue.mjs

@@ -0,0 +1,73 @@
+/**
+ * One GitHub issue per subject, found again by its exact title and updated in place: CI files
+ * a reminder once and keeps it current instead of opening a new issue every run. Needs `gh` and
+ * GH_TOKEN (or GITHUB_TOKEN) with issues: write.
+ */
+
+import { spawnSync } from "node:child_process";
+
+/**
+ * @param {string[]} args
+ * @param {string} [input]
+ */
+export function gh(args, input) {
+	const result = spawnSync("gh", args, { encoding: "utf8", input, env: process.env });
+	if (result.status !== 0) {
+		throw new Error(result.stderr || result.stdout || `gh ${args.join(" ")} failed`);
+	}
+	return result.stdout;
+}
+
+/**
+ * The issue titled exactly `title`, preferring an open one over a closed one.
+ *
+ * @param {{ number: number, title: string, state: string, url: string }[]} issues
+ * @param {string} title
+ */
+export function pickIssue(issues, title) {
+	const matches = issues.filter((issue) => issue.title === title);
+	return matches.find((issue) => issue.state === "OPEN") ?? matches[0] ?? null;
+}
+
+/**
+ * @param {{ title: string, body: string, assignees?: string[], repo?: string }} options
+ * @param {typeof gh} [run]
+ * @returns {{ number: number, url: string, created: boolean }}
+ */
+export function upsertIssue(options, run = gh) {
+	const { title, body, assignees = [] } = options;
+	const repo = options.repo ? ["--repo", options.repo] : [];
+	const issues = JSON.parse(
+		run([
+			"issue",
+			"list",
+			...repo,
+			"--state",
+			"all",
+			"--limit",
+			"200",
+			"--search",
+			`${title} in:title`,
+			"--json",
+			"number,title,state,url",
+		]),
+	);
+	const assign = assignees.flatMap((login) => ["--add-assignee", login]);
+	const existing = pickIssue(issues, title);
+	if (existing != null) {
+		if (existing.state !== "OPEN") {
+			run(["issue", "reopen", String(existing.number), ...repo]);
+		}
+		run(
+			["issue", "edit", String(existing.number), ...repo, "--body-file", "-", ...assign],
+			body,
+		);
+		return { number: existing.number, url: existing.url, created: false };
+	}
+	const url = run(
+		["issue", "create", ...repo, "--title", title, "--body-file", "-", ...assign],
+		body,
+	).trim();
+	const number = Number(url.split("/").pop());
+	return { number, url, created: true };
+}

package/src/pages/bench-page.mjs

@@ -4,7 +4,7 @@
  * page needs no script and no third-party chart library.
  */
 
-import { REGRESSION } from "../bench/history.mjs";
+import { REGRESSION, STALE_AFTER_DAYS } from "../bench/history.mjs";
 
 const GROUPS = [
 	{ prefix: "flux.serve.", title: "flux serve (real process)" },
@@ -49,10 +49,20 @@ function machineName(context) {
 	return `${context.benchEnv ?? "unknown"} · ${context.cpu.model} × ${context.cpu.count}`;
 }
 
-/** Contexts with at least one run, most recently run first. */
+/**
+ * Contexts with a run within STALE_AFTER_DAYS of the newest run anywhere, most recently run first:
+ * CI runner types come and go, and one that stopped appearing would otherwise keep a line (#667).
+ */
 function activeContexts(history) {
+	const newest = Math.max(
+		...Object.values(history.contexts ?? {})
+			.filter((entry) => entry.runs.length > 0)
+			.map((entry) => new Date(entry.runs[0].date).getTime()),
+	);
+	const cutoff = newest - STALE_AFTER_DAYS * 24 * 60 * 60 * 1000;
 	return Object.entries(history.contexts ?? {})
 		.filter(([, entry]) => entry.runs.length > 0)
+		.filter(([, entry]) => new Date(entry.runs[0].date).getTime() >= cutoff)
 		.sort((a, b) => new Date(b[1].runs[0].date) - new Date(a[1].runs[0].date))
 		.map(([id, entry], index) => ({
 			id,
@@ -232,7 +242,7 @@ export function buildBenchmarkHtml(
 						)
 						.join("\n");
 					return `<section class="machines"><h2>Machines</h2><ul>${legend}</ul>
-<p class="note">Each line is one machine type; runs are only compared on the same one. Shared CI runners are noisy, so read the trend, not a single point. Hover a point for its date, commit and p90. A benchmark more than ${Math.round(REGRESSION.threshold * 100)}% slower than its baseline on ${REGRESSION.confirmRuns} nights running gets an issue: <a href="${escapeHtml(`${repoUrl}/issues?q=is%3Aissue+is%3Aopen+%22perf(bench)%22`)}">open benchmark issues</a>.</p></section>
+<p class="note">Each line is one machine type; runs are only compared on the same one. Shared CI runners are noisy, so read the trend, not a single point. Hover a point for its date, commit and p90. Each night also benchmarks the previous nightly's commit on the same runner, alternating ${REGRESSION.rounds} rounds each; a benchmark more than ${Math.round(REGRESSION.threshold * 100)}% slower in every round gets an issue: <a href="${escapeHtml(`${repoUrl}/issues?q=is%3Aissue+is%3Aopen+%22perf(bench)%22`)}">open benchmark issues</a>.</p></section>
 ${sections}
 <section><h2>Latest run</h2>${latestTable(contexts, labels, repoUrl)}</section>`;
 				})();

package/tests/bench/history.test.mjs

@@ -4,7 +4,9 @@ import {
 	assertValid,
 	compare,
 	contextId,
-	findRegressions,
+	compareRounds,
+	latestRun,
+	pruneStale,
 	formatComparison,
 	fromVitest,
 	getContext,
@@ -206,46 +208,72 @@ describe("compare / formatComparison", () => {
 	});
 });
 
-describe("findRegressions", () => {
-	// Newest first, like the history: one run per night with this median for "a".
-	const nights = (...medians) =>
-		medians.map((median, index) => ({
-			date: `2026-10-${String(30 - index).padStart(2, "0")}T03:17:00Z`,
-			sha: `sha${30 - index}`,
-			results: [result("a", median)],
-		}));
-
-	it("flags a benchmark over the threshold on the last two nights, against the runs before", () => {
-		const [regression] = findRegressions(nights(130, 125, 100, 101, 99, 100, 102));
+describe("compareRounds", () => {
+	const round = (...medians) => medians.map((median, index) => result(`b${index}`, median));
+
+	it("flags a benchmark slower on head than base in every round, with both rounds' numbers", () => {
+		const [regression] = compareRounds([round(130, 50)], [round(100, 50)], {
+			threshold: 0.2,
+			rounds: 1,
+		});
 		expect(regression).toMatchObject({
-			id: "a",
-			baseline: 100,
-			recent: [
-				{ sha: "sha30", median: 130 },
-				{ sha: "sha29", median: 125 },
-			],
-			lastGood: { sha: "sha28" },
+			id: "b0",
+			base: 100,
+			head: 130,
+			rounds: [{ base: 100, head: 130 }],
 		});
 		expect(regression.percent).toBeCloseTo(30);
 	});
 
-	it("ignores one slow night, which is as likely the runner as the code", () => {
-		expect(findRegressions(nights(150, 100, 100, 101, 99, 100))).toEqual([]);
+	it("needs every round slower: one slow round is as likely the runner as the code", () => {
+		expect(compareRounds([round(130), round(105)], [round(100), round(100)])).toEqual([]);
+		expect(compareRounds([round(130), round(126)], [round(100), round(100)])).toHaveLength(1);
 	});
 
 	it("ignores slowdowns within the threshold", () => {
-		expect(findRegressions(nights(115, 118, 100, 100, 100))).toEqual([]);
+		expect(compareRounds([round(115), round(118)], [round(100), round(100)])).toEqual([]);
+	});
+
+	it("skips benchmarks only one side has, and compares nothing without enough rounds", () => {
+		const head = [
+			[result("new", 500), result("old", 100)],
+			[result("new", 500), result("old", 100)],
+		];
+		const base = [[result("old", 100)], [result("old", 100)]];
+		expect(compareRounds(head, base)).toEqual([]);
+		expect(compareRounds([round(200)], [round(100)])).toEqual([]);
+	});
+});
+
+describe("pruneStale / latestRun", () => {
+	const at = (date, sha) => ({ date, sha, results: [] });
+	const history = {
+		version: 2,
+		contexts: {
+			old: { context: ctx, runs: [at("2026-08-12T03:17:00Z", "aaa")] },
+			recent: {
+				context: ctx,
+				runs: [at("2026-10-20T03:17:00Z", "ccc"), at("2026-10-19T03:17:00Z", "bbb")],
+			},
+		},
+	};
+
+	it("drops machine types with no run in the last 30 days", () => {
+		expect(
+			Object.keys(pruneStale(history, new Date("2026-10-21T00:00:00Z")).contexts),
+		).toEqual(["recent"]);
+		expect(
+			Object.keys(pruneStale(history, new Date("2026-09-01T00:00:00Z")).contexts),
+		).toEqual(["old", "recent"]);
 	});
 
-	it("waits for enough history to have a baseline", () => {
-		expect(findRegressions(nights(200, 200, 100, 100))).toEqual([]);
-		expect(findRegressions(nights(200))).toEqual([]);
+	it("prunes when a run is appended", () => {
+		const next = appendRun(history, ctx, at("2026-10-21T03:17:00Z", "ddd"));
+		expect(Object.keys(next.contexts)).not.toContain("old");
 	});
 
-	it("uses only the baselineRuns runs before the slow ones", () => {
-		// Old runs at 300 would hide the regression if they were in the baseline.
-		const runs = nights(130, 130, 100, 100, 100, 300, 300, 300, 300, 300);
-		const options = { threshold: 0.2, confirmRuns: 2, baselineRuns: 3, minBaseline: 3 };
-		expect(findRegressions(runs, options).map((r) => r.baseline)).toEqual([100]);
+	it("finds the newest run on any machine: the commit the previous nightly measured", () => {
+		expect(latestRun(history)?.sha).toBe("ccc");
+		expect(latestRun({ version: 2, contexts: {} })).toBeUndefined();
 	});
 });