@storyshelf/app 0.7.0 → 0.8.0

package/dist/lifecycle.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.mjs","names":[],"sources":["../src/lifecycle.ts"],"sourcesContent":["import type { AdapterSetupContext } from \"@storyshelf/core/adapter/metadata\";\nimport {\n  AdapterLifecycleError,\n  bindAdapterLoggers,\n  adapterSourcesOf,\n  collectSetups,\n  collectTeardowns,\n  runAdapterSetups,\n  runAdapterTeardowns,\n  validateBootAssembly,\n} from \"@storyshelf/core/adapter/setup\";\nimport type { AdapterSetupResult } from \"@storyshelf/core/adapter/setup\";\nimport type { CaptureConsumer } from \"@storyshelf/core/capture\";\nimport type { ShelfOptions } from \"@storyshelf/core/config\";\nimport { shutdownDiffPool, verifyImageEngine } from \"@storyshelf/core/diff\";\nimport type { Logger } from \"@storyshelf/core/logger\";\nimport { purgeAiData } from \"@storyshelf/core/retention\";\nimport { sanitizeErrorText } from \"@storyshelf/core/utils\";\nimport type { ShelfRouter, ShelfLifecycle } from \"./app-types.ts\";\nimport { settleInsightJobs } from \"./insights/job.ts\";\nimport { startBranchGcTimer } from \"./retention-timer.ts\";\nimport type { ServerRuntime } from \"./runtime.ts\";\n\n/** Mutable setup-settlement cell shared by the gate, health, and `setup()`. */\nexport interface LifecycleCell {\n  ready: Promise<AdapterSetupResult>;\n  settled: AdapterSetupResult | null;\n  /** Fire-and-forget boot tasks (recovery, credential check) that teardown must outwait. */\n  background?: Promise<unknown>[];\n  /** Override of {@link BACKGROUND_DRAIN_MS} (tests). */\n  drainMs?: number;\n  /** The job consumer (null on hosts that run none); started once adapters are ready, drained by `teardown()`. */\n  consumer?: CaptureConsumer | null;\n  /** The running consumer session, settled once it was stopped and drained. */\n  consumerRun?: Promise<void>;\n  /** Teardown ran: the consumer stays stopped (a late \"adapters are ready\" must not restart it). */\n  consumerStopped?: boolean;\n}\n\n/** Longest teardown waits for background boot tasks before closing adapters anyway. */\nconst BACKGROUND_DRAIN_MS = 5000;\n\n/** Register a boot task so `teardown()` does not close adapters underneath it. */\nexport function trackBackground(cell: LifecycleCell, task: Promise<unknown>): void {\n  (cell.background ??= []).push(task);\n}\n\n/** Start the job consumer once adapters are set up; a no-op when none exists or it runs. */\nexport function startConsumer(cell: LifecycleCell, logger: Logger): void {\n  const consumer = cell.consumer;\n  if (!consumer || consumer.isRunning() || cell.consumerStopped) {\n    return;\n  }\n  cell.consumerRun = consumer.start().catch((error: unknown) => {\n    logger.error({ err: error }, \"job consumer stopped\");\n  });\n}\n\n/** Stop polling and wait for the jobs in flight to finish (the SIGTERM drain). */\nasync function stopConsumer(cell: LifecycleCell): Promise<void> {\n  cell.consumerStopped = true;\n  await cell.consumer?.stop();\n  await cell.consumerRun;\n}\n\n/** Wait for tracked boot tasks, bounded so a hung task can never block shutdown. */\nasync function drainBackground(cell: LifecycleCell): Promise<void> {\n  const pending = Promise.allSettled(cell.background ?? []);\n  let timer: NodeJS.Timeout | undefined;\n  const timeout = new Promise<void>((resolve) => {\n    timer = setTimeout(resolve, cell.drainMs ?? BACKGROUND_DRAIN_MS);\n    timer.unref();\n  });\n  await Promise.race([pending, timeout]);\n  clearTimeout(timer);\n}\n\nfunction trackSettlement(cell: LifecycleCell, promise: Promise<AdapterSetupResult>): void {\n  promise.then(\n    (result) => {\n      cell.settled = result;\n    },\n    () => {\n      cell.settled = { ok: false, failures: [] };\n    },\n  );\n}\n\n/** First failing boot check (assembly, auth, AI), or null when all pass. */\nasync function firstBootFailure(\n  options: ShelfOptions,\n  logger: Logger,\n): Promise<AdapterSetupResult | null> {\n  const invalid = validateBootAssembly(adapterSourcesOf(options));\n  if (invalid.length > 0) {\n    logger.error({ failures: invalid }, \"adapter validation failed\");\n    return { ok: false, failures: invalid };\n  }\n  for (const [label, run] of [\n    [\"auth\", runAuthSetup],\n    [\"ai\", runAiSetup],\n    [\"images\", runImagesSetup],\n  ] as const) {\n    // eslint-disable-next-line no-await-in-loop -- boot checks run in order and stop at the first failure\n    const failed = await run(options);\n    if (failed) {\n      logger.error({ failures: failed.failures }, `${label} setup failed`);\n      return failed;\n    }\n  }\n  return null;\n}\n\n/** Kick the eager background setup run (resolves; never rejects). */\nfunction kickSetup(\n  options: ShelfOptions,\n  ctx: AdapterSetupContext,\n  logger: Logger,\n  cell: LifecycleCell,\n): void {\n  // Auth is not an adapter: its one-shot boot validation runs first, then\n  // the adapter setups. A failing secret check fails readiness, like others.\n  cell.ready = (async (): Promise<AdapterSetupResult> => {\n    const failed = await firstBootFailure(options, logger);\n    return (\n      failed ?? (await runAdapterSetups(collectSetups(adapterSourcesOf(options)), ctx, logger))\n    );\n  })();\n  trackSettlement(cell, cell.ready);\n}\n\n/** Login method count, or null when the engine throws during introspection. */\nfunction loginMethodCount(auth: NonNullable<ShelfOptions[\"auth\"]>): number | null {\n  try {\n    return auth.loginMethods().length;\n  } catch {\n    return null;\n  }\n}\n\n/** Log which auth mode the server boots with (open servers stay visible). */\nfunction logAuthMode(options: ShelfOptions, logger: Logger): void {\n  if (!options.auth) {\n    logger.info(\"auth disabled (local default; every route is open)\");\n    return;\n  }\n  const methods = loginMethodCount(options.auth);\n  if (methods === null) {\n    logger.warn(\"auth loginMethods() threw during boot logging\");\n    return;\n  }\n  logger.info({ loginMethods: methods }, \"auth enabled\");\n}\n\n/** Kick eager setup and attach the `app.lifecycle` namespace (single run). */\nexport function attachLifecycle(\n  app: ShelfRouter,\n  options: ShelfOptions,\n  runtime: ServerRuntime,\n  cell: LifecycleCell,\n): void {\n  const setupCtx: AdapterSetupContext = { config: runtime.config, logger: runtime.logger };\n  bindAdapterLoggers(options, runtime.logger);\n  options.ai?.setLogger?.(runtime.logger.child({ component: \"ai\" }));\n  logAuthMode(options, runtime.logger);\n  kickSetup(options, setupCtx, runtime.logger, cell);\n  const timer = startBranchGcInterval(options, runtime);\n  Object.assign(app, {\n    lifecycle: createLifecycle(options, setupCtx, runtime.logger, cell, timer),\n  });\n}\n\nfunction startBranchGcInterval(\n  options: ShelfOptions,\n  runtime: ServerRuntime,\n): { stop(): void } | null {\n  return startBranchGcTimer(options.database, options.storage, runtime.config, runtime.logger);\n}\n\n/** Run auth boot validation, returning a failure result instead of throwing. */\nasync function runAuthSetup(options: ShelfOptions): Promise<AdapterSetupResult | null> {\n  try {\n    await options.auth?.setup?.();\n    return null;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      ok: false,\n      failures: [\n        { category: \"auth\", kind: \"auth\", name: \"auth\", error: sanitizeErrorText(message, 500) },\n      ],\n    };\n  }\n}\n/** Run AI boot checks and the stale-run sweep; failure fails readiness like auth. */\nasync function runAiSetup(options: ShelfOptions): Promise<AdapterSetupResult | null> {\n  if (!options.ai) {\n    return null;\n  }\n  try {\n    await options.ai.setup();\n    await purgeAiData(options.database);\n    return null;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      ok: false,\n      failures: [\n        { category: \"ai\", kind: \"ai\", name: \"ai\", error: sanitizeErrorText(message, 500) },\n      ],\n    };\n  }\n}\n/** Load the configured image engine now, so a missing `sharp` fails readiness instead of the first diff. */\nasync function runImagesSetup(): Promise<AdapterSetupResult | null> {\n  try {\n    await verifyImageEngine();\n    return null;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      ok: false,\n      failures: [\n        {\n          category: \"images\",\n          kind: \"images\",\n          name: \"images\",\n          error: sanitizeErrorText(message, 500),\n        },\n      ],\n    };\n  }\n}\n/** Validation failure settled on the cell — null when the assembly is sound. */\nfunction invalidSources(options: ShelfOptions, cell: LifecycleCell): AdapterSetupResult | null {\n  const invalid = validateBootAssembly(adapterSourcesOf(options));\n  if (invalid.length === 0) {\n    return null;\n  }\n  const result: AdapterSetupResult = { ok: false, failures: invalid };\n  cell.ready = Promise.resolve(result);\n  cell.settled = result;\n  return result;\n}\n/** Build the `app.lifecycle` namespace closing over one settlement cell. */\nfunction createLifecycle(\n  options: ShelfOptions,\n  ctx: AdapterSetupContext,\n  logger: Logger,\n  cell: LifecycleCell,\n  timer: { stop(): void } | null = null,\n): ShelfLifecycle {\n  return {\n    get ready() {\n      return cell.ready;\n    },\n    logger,\n    setup: async () => {\n      const blocked = invalidSources(options, cell);\n      if (blocked) {\n        throw new AdapterLifecycleError(\"setup\", blocked.failures);\n      }\n      const result = await runAdapterSetups(collectSetups(adapterSourcesOf(options)), ctx, logger);\n      cell.ready = Promise.resolve(result);\n      cell.settled = result;\n      if (!result.ok) {\n        throw new AdapterLifecycleError(\"setup\", result.failures);\n      }\n      cell.consumerStopped = false;\n      startConsumer(cell, logger);\n    },\n    teardown: async () => {\n      timer?.stop();\n      await stopConsumer(cell);\n      await drainBackground(cell);\n      await settleInsightJobs();\n      await options.ai?.teardown();\n      await shutdownDiffPool();\n      const result = await runAdapterTeardowns(\n        collectTeardowns(adapterSourcesOf(options)),\n        ctx,\n        logger,\n      );\n      await options.observability?.shutdown().catch((error: unknown) => {\n        logger.error({ err: error }, \"observability shutdown failed\");\n      });\n      if (!result.ok) {\n        throw new AdapterLifecycleError(\"teardown\", result.failures);\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAwCA,MAAM,sBAAsB;;AAG5B,SAAgB,gBAAgB,MAAqB,MAA8B;CACjF,CAAC,KAAK,eAAe,CAAC,EAAA,CAAG,KAAK,IAAI;AACpC;;AAGA,SAAgB,cAAc,MAAqB,QAAsB;CACvE,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,YAAY,SAAS,UAAU,KAAK,KAAK,iBAC5C;CAEF,KAAK,cAAc,SAAS,MAAM,CAAC,CAAC,OAAO,UAAmB;EAC5D,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,sBAAsB;CACrD,CAAC;AACH;;AAGA,eAAe,aAAa,MAAoC;CAC9D,KAAK,kBAAkB;CACvB,MAAM,KAAK,UAAU,KAAK;CAC1B,MAAM,KAAK;AACb;;AAGA,eAAe,gBAAgB,MAAoC;CACjE,MAAM,UAAU,QAAQ,WAAW,KAAK,cAAc,CAAC,CAAC;CACxD,IAAI;CACJ,MAAM,UAAU,IAAI,SAAe,YAAY;EAC7C,QAAQ,WAAW,SAAS,KAAK,WAAW,mBAAmB;EAC/D,MAAM,MAAM;CACd,CAAC;CACD,MAAM,QAAQ,KAAK,CAAC,SAAS,OAAO,CAAC;CACrC,aAAa,KAAK;AACpB;AAEA,SAAS,gBAAgB,MAAqB,SAA4C;CACxF,QAAQ,MACL,WAAW;EACV,KAAK,UAAU;CACjB,SACM;EACJ,KAAK,UAAU;GAAE,IAAI;GAAO,UAAU,CAAC;EAAE;CAC3C,CACF;AACF;;AAGA,eAAe,iBACb,SACA,QACoC;CACpC,MAAM,UAAU,qBAAqB,iBAAiB,OAAO,CAAC;CAC9D,IAAI,QAAQ,SAAS,GAAG;EACtB,OAAO,MAAM,EAAE,UAAU,QAAQ,GAAG,2BAA2B;EAC/D,OAAO;GAAE,IAAI;GAAO,UAAU;EAAQ;CACxC;CACA,KAAK,MAAM,CAAC,OAAO,QAAQ;EACzB,CAAC,QAAQ,YAAY;EACrB,CAAC,MAAM,UAAU;EACjB,CAAC,UAAU,cAAc;CAC3B,GAAY;EAEV,MAAM,SAAS,MAAM,IAAI,OAAO;EAChC,IAAI,QAAQ;GACV,OAAO,MAAM,EAAE,UAAU,OAAO,SAAS,GAAG,GAAG,MAAM,cAAc;GACnE,OAAO;EACT;CACF;CACA,OAAO;AACT;;AAGA,SAAS,UACP,SACA,KACA,QACA,MACM;CAGN,KAAK,SAAS,YAAyC;EAErD,OACE,MAFmB,iBAAiB,SAAS,MAAM,KAExC,MAAM,iBAAiB,cAAc,iBAAiB,OAAO,CAAC,GAAG,KAAK,MAAM;CAE3F,EAAA,CAAG;CACH,gBAAgB,MAAM,KAAK,KAAK;AAClC;;AAGA,SAAS,iBAAiB,MAAwD;CAChF,IAAI;EACF,OAAO,KAAK,aAAa,CAAC,CAAC;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,YAAY,SAAuB,QAAsB;CAChE,IAAI,CAAC,QAAQ,MAAM;EACjB,OAAO,KAAK,oDAAoD;EAChE;CACF;CACA,MAAM,UAAU,iBAAiB,QAAQ,IAAI;CAC7C,IAAI,YAAY,MAAM;EACpB,OAAO,KAAK,+CAA+C;EAC3D;CACF;CACA,OAAO,KAAK,EAAE,cAAc,QAAQ,GAAG,cAAc;AACvD;;AAGA,SAAgB,gBACd,KACA,SACA,SACA,MACM;CACN,MAAM,WAAgC;EAAE,QAAQ,QAAQ;EAAQ,QAAQ,QAAQ;CAAO;CACvF,mBAAmB,SAAS,QAAQ,MAAM;CAC1C,QAAQ,IAAI,YAAY,QAAQ,OAAO,MAAM,EAAE,WAAW,KAAK,CAAC,CAAC;CACjE,YAAY,SAAS,QAAQ,MAAM;CACnC,UAAU,SAAS,UAAU,QAAQ,QAAQ,IAAI;CACjD,MAAM,QAAQ,sBAAsB,SAAS,OAAO;CACpD,OAAO,OAAO,KAAK,EACjB,WAAW,gBAAgB,SAAS,UAAU,QAAQ,QAAQ,MAAM,KAAK,EAC3E,CAAC;AACH;AAEA,SAAS,sBACP,SACA,SACyB;CACzB,OAAO,mBAAmB,QAAQ,UAAU,QAAQ,SAAS,QAAQ,QAAQ,QAAQ,MAAM;AAC7F;;AAGA,eAAe,aAAa,SAA2D;CACrF,IAAI;EACF,MAAM,QAAQ,MAAM,QAAQ;EAC5B,OAAO;CACT,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO;GACL,IAAI;GACJ,UAAU,CACR;IAAE,UAAU;IAAQ,MAAM;IAAQ,MAAM;IAAQ,OAAO,kBAAkB,SAAS,GAAG;GAAE,CACzF;EACF;CACF;AACF;;AAEA,eAAe,WAAW,SAA2D;CACnF,IAAI,CAAC,QAAQ,IACX,OAAO;CAET,IAAI;EACF,MAAM,QAAQ,GAAG,MAAM;EACvB,MAAM,YAAY,QAAQ,QAAQ;EAClC,OAAO;CACT,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO;GACL,IAAI;GACJ,UAAU,CACR;IAAE,UAAU;IAAM,MAAM;IAAM,MAAM;IAAM,OAAO,kBAAkB,SAAS,GAAG;GAAE,CACnF;EACF;CACF;AACF;;AAEA,eAAe,iBAAqD;CAClE,IAAI;EACF,MAAM,kBAAkB;EACxB,OAAO;CACT,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO;GACL,IAAI;GACJ,UAAU,CACR;IACE,UAAU;IACV,MAAM;IACN,MAAM;IACN,OAAO,kBAAkB,SAAS,GAAG;GACvC,CACF;EACF;CACF;AACF;;AAEA,SAAS,eAAe,SAAuB,MAAgD;CAC7F,MAAM,UAAU,qBAAqB,iBAAiB,OAAO,CAAC;CAC9D,IAAI,QAAQ,WAAW,GACrB,OAAO;CAET,MAAM,SAA6B;EAAE,IAAI;EAAO,UAAU;CAAQ;CAClE,KAAK,QAAQ,QAAQ,QAAQ,MAAM;CACnC,KAAK,UAAU;CACf,OAAO;AACT;;AAEA,SAAS,gBACP,SACA,KACA,QACA,MACA,QAAiC,MACjB;CAChB,OAAO;EACL,IAAI,QAAQ;GACV,OAAO,KAAK;EACd;EACA;EACA,OAAO,YAAY;GACjB,MAAM,UAAU,eAAe,SAAS,IAAI;GAC5C,IAAI,SACF,MAAM,IAAI,sBAAsB,SAAS,QAAQ,QAAQ;GAE3D,MAAM,SAAS,MAAM,iBAAiB,cAAc,iBAAiB,OAAO,CAAC,GAAG,KAAK,MAAM;GAC3F,KAAK,QAAQ,QAAQ,QAAQ,MAAM;GACnC,KAAK,UAAU;GACf,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,sBAAsB,SAAS,OAAO,QAAQ;GAE1D,KAAK,kBAAkB;GACvB,cAAc,MAAM,MAAM;EAC5B;EACA,UAAU,YAAY;GACpB,OAAO,KAAK;GACZ,MAAM,aAAa,IAAI;GACvB,MAAM,gBAAgB,IAAI;GAC1B,MAAM,kBAAkB;GACxB,MAAM,QAAQ,IAAI,SAAS;GAC3B,MAAM,iBAAiB;GACvB,MAAM,SAAS,MAAM,oBACnB,iBAAiB,iBAAiB,OAAO,CAAC,GAC1C,KACA,MACF;GACA,MAAM,QAAQ,eAAe,SAAS,CAAC,CAAC,OAAO,UAAmB;IAChE,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,+BAA+B;GAC9D,CAAC;GACD,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,sBAAsB,YAAY,OAAO,QAAQ;EAE/D;CACF;AACF"}
+{"version":3,"file":"lifecycle.mjs","names":[],"sources":["../src/lifecycle.ts"],"sourcesContent":["import type { AdapterSetupContext } from \"@storyshelf/core/adapter/metadata\";\nimport {\n  AdapterLifecycleError,\n  bindAdapterLoggers,\n  adapterSourcesOf,\n  collectSetups,\n  collectTeardowns,\n  runAdapterSetups,\n  runAdapterTeardowns,\n  validateBootAssembly,\n} from \"@storyshelf/core/adapter/setup\";\nimport type { AdapterSetupResult } from \"@storyshelf/core/adapter/setup\";\nimport type { CaptureConsumer } from \"@storyshelf/core/capture\";\nimport type { ShelfOptions } from \"@storyshelf/core/config\";\nimport { shutdownDiffPool, verifyImageEngine } from \"@storyshelf/core/diff\";\nimport type { Logger } from \"@storyshelf/core/logger\";\nimport { purgeAiData } from \"@storyshelf/core/retention\";\nimport { sanitizeErrorText } from \"@storyshelf/core/utils\";\nimport type { ShelfRouter, ShelfLifecycle } from \"./app-types.ts\";\nimport { settleInsightJobs } from \"./insights/job.ts\";\nimport { startBranchGcTimer } from \"./retention-timer.ts\";\nimport type { ServerRuntime } from \"./runtime.ts\";\n\n/** Mutable setup-settlement cell shared by the gate, health, and `setup()`. */\nexport interface LifecycleCell {\n  ready: Promise<AdapterSetupResult>;\n  settled: AdapterSetupResult | null;\n  /** Fire-and-forget boot tasks (recovery, credential check) that teardown must outwait. */\n  background?: Promise<unknown>[];\n  /** Override of {@link BACKGROUND_DRAIN_MS} (tests). */\n  drainMs?: number;\n  /** The job consumer (null on hosts that run none); started once adapters are ready, drained by `teardown()`. */\n  consumer?: CaptureConsumer | null;\n  /** The running consumer session, settled once it was stopped and drained. */\n  consumerRun?: Promise<void>;\n  /** Teardown ran: the consumer stays stopped (a late \"adapters are ready\" must not restart it). */\n  consumerStopped?: boolean;\n}\n\n/** Longest teardown waits for background boot tasks before closing adapters anyway. */\nconst BACKGROUND_DRAIN_MS = 5000;\n\n/** Register a boot task so `teardown()` does not close adapters underneath it. */\nexport function trackBackground(cell: LifecycleCell, task: Promise<unknown>): void {\n  (cell.background ??= []).push(task);\n}\n\n/** Start the job consumer once adapters are set up; a no-op when none exists or it runs. */\nexport function startConsumer(cell: LifecycleCell, logger: Logger): void {\n  const consumer = cell.consumer;\n  if (!consumer || consumer.isRunning() || cell.consumerStopped) {\n    return;\n  }\n  cell.consumerRun = consumer.start().catch((error: unknown) => {\n    logger.error({ err: error }, \"job consumer stopped\");\n  });\n}\n\n/** Stop polling and wait for the jobs in flight to finish (the SIGTERM drain). */\nasync function stopConsumer(cell: LifecycleCell): Promise<void> {\n  cell.consumerStopped = true;\n  await cell.consumer?.stop();\n  await cell.consumerRun;\n}\n\n/** Wait for tracked boot tasks, bounded so a hung task can never block shutdown. */\nasync function drainBackground(cell: LifecycleCell): Promise<void> {\n  const pending = Promise.allSettled(cell.background ?? []);\n  let timer: NodeJS.Timeout | undefined;\n  const timeout = new Promise<void>((resolve) => {\n    timer = setTimeout(resolve, cell.drainMs ?? BACKGROUND_DRAIN_MS);\n    timer.unref();\n  });\n  await Promise.race([pending, timeout]);\n  clearTimeout(timer);\n}\n\nfunction trackSettlement(cell: LifecycleCell, promise: Promise<AdapterSetupResult>): void {\n  promise.then(\n    (result) => {\n      cell.settled = result;\n    },\n    () => {\n      cell.settled = { ok: false, failures: [] };\n    },\n  );\n}\n\n/** First failing boot check (assembly, auth, AI), or null when all pass. */\nasync function firstBootFailure(\n  options: ShelfOptions,\n  logger: Logger,\n): Promise<AdapterSetupResult | null> {\n  const invalid = validateBootAssembly(adapterSourcesOf(options));\n  if (invalid.length > 0) {\n    logger.error({ failures: invalid }, \"adapter validation failed\");\n    return { ok: false, failures: invalid };\n  }\n  for (const [label, run] of [\n    [\"auth\", runAuthSetup],\n    [\"ai\", runAiSetup],\n    [\"images\", runImagesSetup],\n  ] as const) {\n    // eslint-disable-next-line no-await-in-loop -- boot checks run in order and stop at the first failure\n    const failed = await run(options);\n    if (failed) {\n      logger.error({ failures: failed.failures }, `${label} setup failed`);\n      return failed;\n    }\n  }\n  return null;\n}\n\n/** Kick the eager background setup run (resolves; never rejects). */\nfunction kickSetup(\n  options: ShelfOptions,\n  ctx: AdapterSetupContext,\n  logger: Logger,\n  cell: LifecycleCell,\n): void {\n  // Auth is not an adapter: its one-shot boot validation runs first, then\n  // the adapter setups. A failing secret check fails readiness, like others.\n  cell.ready = (async (): Promise<AdapterSetupResult> => {\n    const failed = await firstBootFailure(options, logger);\n    return (\n      failed ?? (await runAdapterSetups(collectSetups(adapterSourcesOf(options)), ctx, logger))\n    );\n  })();\n  trackSettlement(cell, cell.ready);\n}\n\n/** Login method count, or null when the engine throws during introspection. */\nfunction loginMethodCount(auth: NonNullable<ShelfOptions[\"auth\"]>): number | null {\n  try {\n    return auth.loginMethods().length;\n  } catch {\n    return null;\n  }\n}\n\n/** Log which auth mode the server boots with (open servers stay visible). */\nfunction logAuthMode(options: ShelfOptions, logger: Logger): void {\n  if (!options.auth) {\n    logger.info(\"auth disabled (local default; every route is open)\");\n    return;\n  }\n  const methods = loginMethodCount(options.auth);\n  if (methods === null) {\n    logger.warn(\"auth loginMethods() threw during boot logging\");\n    return;\n  }\n  logger.info({ loginMethods: methods }, \"auth enabled\");\n}\n\n/** Kick eager setup and attach the `app.lifecycle` namespace (single run). */\nexport function attachLifecycle(\n  app: ShelfRouter,\n  options: ShelfOptions,\n  runtime: ServerRuntime,\n  cell: LifecycleCell,\n): void {\n  const setupCtx: AdapterSetupContext = { config: runtime.config, logger: runtime.logger };\n  bindAdapterLoggers(options, runtime.logger);\n  options.ai?.setLogger?.(runtime.logger.child({ component: \"ai\" }));\n  logAuthMode(options, runtime.logger);\n  kickSetup(options, setupCtx, runtime.logger, cell);\n  const timer = startBranchGcInterval(options, runtime);\n  Object.assign(app, {\n    lifecycle: createLifecycle(options, setupCtx, runtime.logger, cell, timer),\n  });\n}\n\nfunction startBranchGcInterval(\n  options: ShelfOptions,\n  runtime: ServerRuntime,\n): { stop(): void } | null {\n  return startBranchGcTimer(\n    options.database,\n    options.storage,\n    runtime.config,\n    runtime.logger,\n    Boolean(options.testing),\n  );\n}\n\n/** Run auth boot validation, returning a failure result instead of throwing. */\nasync function runAuthSetup(options: ShelfOptions): Promise<AdapterSetupResult | null> {\n  try {\n    await options.auth?.setup?.();\n    return null;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      ok: false,\n      failures: [\n        { category: \"auth\", kind: \"auth\", name: \"auth\", error: sanitizeErrorText(message, 500) },\n      ],\n    };\n  }\n}\n/** Run AI boot checks and the stale-run sweep; failure fails readiness like auth. */\nasync function runAiSetup(options: ShelfOptions): Promise<AdapterSetupResult | null> {\n  if (!options.ai) {\n    return null;\n  }\n  try {\n    await options.ai.setup();\n    await purgeAiData(options.database);\n    return null;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      ok: false,\n      failures: [\n        { category: \"ai\", kind: \"ai\", name: \"ai\", error: sanitizeErrorText(message, 500) },\n      ],\n    };\n  }\n}\n/** Load the configured image engine now, so a missing `sharp` fails readiness instead of the first diff. */\nasync function runImagesSetup(): Promise<AdapterSetupResult | null> {\n  try {\n    await verifyImageEngine();\n    return null;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      ok: false,\n      failures: [\n        {\n          category: \"images\",\n          kind: \"images\",\n          name: \"images\",\n          error: sanitizeErrorText(message, 500),\n        },\n      ],\n    };\n  }\n}\n/** Validation failure settled on the cell — null when the assembly is sound. */\nfunction invalidSources(options: ShelfOptions, cell: LifecycleCell): AdapterSetupResult | null {\n  const invalid = validateBootAssembly(adapterSourcesOf(options));\n  if (invalid.length === 0) {\n    return null;\n  }\n  const result: AdapterSetupResult = { ok: false, failures: invalid };\n  cell.ready = Promise.resolve(result);\n  cell.settled = result;\n  return result;\n}\n/** Build the `app.lifecycle` namespace closing over one settlement cell. */\nfunction createLifecycle(\n  options: ShelfOptions,\n  ctx: AdapterSetupContext,\n  logger: Logger,\n  cell: LifecycleCell,\n  timer: { stop(): void } | null = null,\n): ShelfLifecycle {\n  return {\n    get ready() {\n      return cell.ready;\n    },\n    logger,\n    setup: async () => {\n      const blocked = invalidSources(options, cell);\n      if (blocked) {\n        throw new AdapterLifecycleError(\"setup\", blocked.failures);\n      }\n      const result = await runAdapterSetups(collectSetups(adapterSourcesOf(options)), ctx, logger);\n      cell.ready = Promise.resolve(result);\n      cell.settled = result;\n      if (!result.ok) {\n        throw new AdapterLifecycleError(\"setup\", result.failures);\n      }\n      cell.consumerStopped = false;\n      startConsumer(cell, logger);\n    },\n    teardown: async () => {\n      timer?.stop();\n      await stopConsumer(cell);\n      await drainBackground(cell);\n      await settleInsightJobs();\n      await options.ai?.teardown();\n      await shutdownDiffPool();\n      const result = await runAdapterTeardowns(\n        collectTeardowns(adapterSourcesOf(options)),\n        ctx,\n        logger,\n      );\n      await options.observability?.shutdown().catch((error: unknown) => {\n        logger.error({ err: error }, \"observability shutdown failed\");\n      });\n      if (!result.ok) {\n        throw new AdapterLifecycleError(\"teardown\", result.failures);\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAwCA,MAAM,sBAAsB;;AAG5B,SAAgB,gBAAgB,MAAqB,MAA8B;CACjF,CAAC,KAAK,eAAe,CAAC,EAAA,CAAG,KAAK,IAAI;AACpC;;AAGA,SAAgB,cAAc,MAAqB,QAAsB;CACvE,MAAM,WAAW,KAAK;CACtB,IAAI,CAAC,YAAY,SAAS,UAAU,KAAK,KAAK,iBAC5C;CAEF,KAAK,cAAc,SAAS,MAAM,CAAC,CAAC,OAAO,UAAmB;EAC5D,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,sBAAsB;CACrD,CAAC;AACH;;AAGA,eAAe,aAAa,MAAoC;CAC9D,KAAK,kBAAkB;CACvB,MAAM,KAAK,UAAU,KAAK;CAC1B,MAAM,KAAK;AACb;;AAGA,eAAe,gBAAgB,MAAoC;CACjE,MAAM,UAAU,QAAQ,WAAW,KAAK,cAAc,CAAC,CAAC;CACxD,IAAI;CACJ,MAAM,UAAU,IAAI,SAAe,YAAY;EAC7C,QAAQ,WAAW,SAAS,KAAK,WAAW,mBAAmB;EAC/D,MAAM,MAAM;CACd,CAAC;CACD,MAAM,QAAQ,KAAK,CAAC,SAAS,OAAO,CAAC;CACrC,aAAa,KAAK;AACpB;AAEA,SAAS,gBAAgB,MAAqB,SAA4C;CACxF,QAAQ,MACL,WAAW;EACV,KAAK,UAAU;CACjB,SACM;EACJ,KAAK,UAAU;GAAE,IAAI;GAAO,UAAU,CAAC;EAAE;CAC3C,CACF;AACF;;AAGA,eAAe,iBACb,SACA,QACoC;CACpC,MAAM,UAAU,qBAAqB,iBAAiB,OAAO,CAAC;CAC9D,IAAI,QAAQ,SAAS,GAAG;EACtB,OAAO,MAAM,EAAE,UAAU,QAAQ,GAAG,2BAA2B;EAC/D,OAAO;GAAE,IAAI;GAAO,UAAU;EAAQ;CACxC;CACA,KAAK,MAAM,CAAC,OAAO,QAAQ;EACzB,CAAC,QAAQ,YAAY;EACrB,CAAC,MAAM,UAAU;EACjB,CAAC,UAAU,cAAc;CAC3B,GAAY;EAEV,MAAM,SAAS,MAAM,IAAI,OAAO;EAChC,IAAI,QAAQ;GACV,OAAO,MAAM,EAAE,UAAU,OAAO,SAAS,GAAG,GAAG,MAAM,cAAc;GACnE,OAAO;EACT;CACF;CACA,OAAO;AACT;;AAGA,SAAS,UACP,SACA,KACA,QACA,MACM;CAGN,KAAK,SAAS,YAAyC;EAErD,OACE,MAFmB,iBAAiB,SAAS,MAAM,KAExC,MAAM,iBAAiB,cAAc,iBAAiB,OAAO,CAAC,GAAG,KAAK,MAAM;CAE3F,EAAA,CAAG;CACH,gBAAgB,MAAM,KAAK,KAAK;AAClC;;AAGA,SAAS,iBAAiB,MAAwD;CAChF,IAAI;EACF,OAAO,KAAK,aAAa,CAAC,CAAC;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,YAAY,SAAuB,QAAsB;CAChE,IAAI,CAAC,QAAQ,MAAM;EACjB,OAAO,KAAK,oDAAoD;EAChE;CACF;CACA,MAAM,UAAU,iBAAiB,QAAQ,IAAI;CAC7C,IAAI,YAAY,MAAM;EACpB,OAAO,KAAK,+CAA+C;EAC3D;CACF;CACA,OAAO,KAAK,EAAE,cAAc,QAAQ,GAAG,cAAc;AACvD;;AAGA,SAAgB,gBACd,KACA,SACA,SACA,MACM;CACN,MAAM,WAAgC;EAAE,QAAQ,QAAQ;EAAQ,QAAQ,QAAQ;CAAO;CACvF,mBAAmB,SAAS,QAAQ,MAAM;CAC1C,QAAQ,IAAI,YAAY,QAAQ,OAAO,MAAM,EAAE,WAAW,KAAK,CAAC,CAAC;CACjE,YAAY,SAAS,QAAQ,MAAM;CACnC,UAAU,SAAS,UAAU,QAAQ,QAAQ,IAAI;CACjD,MAAM,QAAQ,sBAAsB,SAAS,OAAO;CACpD,OAAO,OAAO,KAAK,EACjB,WAAW,gBAAgB,SAAS,UAAU,QAAQ,QAAQ,MAAM,KAAK,EAC3E,CAAC;AACH;AAEA,SAAS,sBACP,SACA,SACyB;CACzB,OAAO,mBACL,QAAQ,UACR,QAAQ,SACR,QAAQ,QACR,QAAQ,QACR,QAAQ,QAAQ,OAAO,CACzB;AACF;;AAGA,eAAe,aAAa,SAA2D;CACrF,IAAI;EACF,MAAM,QAAQ,MAAM,QAAQ;EAC5B,OAAO;CACT,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO;GACL,IAAI;GACJ,UAAU,CACR;IAAE,UAAU;IAAQ,MAAM;IAAQ,MAAM;IAAQ,OAAO,kBAAkB,SAAS,GAAG;GAAE,CACzF;EACF;CACF;AACF;;AAEA,eAAe,WAAW,SAA2D;CACnF,IAAI,CAAC,QAAQ,IACX,OAAO;CAET,IAAI;EACF,MAAM,QAAQ,GAAG,MAAM;EACvB,MAAM,YAAY,QAAQ,QAAQ;EAClC,OAAO;CACT,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO;GACL,IAAI;GACJ,UAAU,CACR;IAAE,UAAU;IAAM,MAAM;IAAM,MAAM;IAAM,OAAO,kBAAkB,SAAS,GAAG;GAAE,CACnF;EACF;CACF;AACF;;AAEA,eAAe,iBAAqD;CAClE,IAAI;EACF,MAAM,kBAAkB;EACxB,OAAO;CACT,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO;GACL,IAAI;GACJ,UAAU,CACR;IACE,UAAU;IACV,MAAM;IACN,MAAM;IACN,OAAO,kBAAkB,SAAS,GAAG;GACvC,CACF;EACF;CACF;AACF;;AAEA,SAAS,eAAe,SAAuB,MAAgD;CAC7F,MAAM,UAAU,qBAAqB,iBAAiB,OAAO,CAAC;CAC9D,IAAI,QAAQ,WAAW,GACrB,OAAO;CAET,MAAM,SAA6B;EAAE,IAAI;EAAO,UAAU;CAAQ;CAClE,KAAK,QAAQ,QAAQ,QAAQ,MAAM;CACnC,KAAK,UAAU;CACf,OAAO;AACT;;AAEA,SAAS,gBACP,SACA,KACA,QACA,MACA,QAAiC,MACjB;CAChB,OAAO;EACL,IAAI,QAAQ;GACV,OAAO,KAAK;EACd;EACA;EACA,OAAO,YAAY;GACjB,MAAM,UAAU,eAAe,SAAS,IAAI;GAC5C,IAAI,SACF,MAAM,IAAI,sBAAsB,SAAS,QAAQ,QAAQ;GAE3D,MAAM,SAAS,MAAM,iBAAiB,cAAc,iBAAiB,OAAO,CAAC,GAAG,KAAK,MAAM;GAC3F,KAAK,QAAQ,QAAQ,QAAQ,MAAM;GACnC,KAAK,UAAU;GACf,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,sBAAsB,SAAS,OAAO,QAAQ;GAE1D,KAAK,kBAAkB;GACvB,cAAc,MAAM,MAAM;EAC5B;EACA,UAAU,YAAY;GACpB,OAAO,KAAK;GACZ,MAAM,aAAa,IAAI;GACvB,MAAM,gBAAgB,IAAI;GAC1B,MAAM,kBAAkB;GACxB,MAAM,QAAQ,IAAI,SAAS;GAC3B,MAAM,iBAAiB;GACvB,MAAM,SAAS,MAAM,oBACnB,iBAAiB,iBAAiB,OAAO,CAAC,GAC1C,KACA,MACF;GACA,MAAM,QAAQ,eAAe,SAAS,CAAC,CAAC,OAAO,UAAmB;IAChE,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,+BAA+B;GAC9D,CAAC;GACD,IAAI,CAAC,OAAO,IACV,MAAM,IAAI,sBAAsB,YAAY,OAAO,QAAQ;EAE/D;CACF;AACF"}

package/dist/middleware/auth-gate.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
 import { STORYBOOK_TOKEN_PREFIX } from "@storyshelf/core/utils";
-//#region src/middleware/auth-gate.ts
+// src/middleware/auth-gate.ts
 /** Resolve the request user from the auth adapter (null when auth is off or a token is used). */
 async function resolveRequestUser(c, auth) {
 	if (!auth) return null;
@@ -32,7 +32,6 @@ function authGate() {
 		return c.redirect("/auth/login", 302);
 	};
 }
-//#endregion
 export { authGate, resolveRequestUser };
 
 //# sourceMappingURL=auth-gate.mjs.map

package/dist/middleware/csrf.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { timingSafeEqualString } from "@storyshelf/core/utils";
 import { SESSION_COOKIE } from "@storyshelf/core/types";
 import { createHash, randomBytes } from "node:crypto";
-//#region src/middleware/csrf.ts
+// src/middleware/csrf.ts
 const DEFAULT_SESSION = "default";
 const FALLBACK_SECRET = randomBytes(32).toString("hex");
 /** Use the app secret when provided so tokens survive restarts and instances. */
@@ -69,7 +69,6 @@ function csrf(secret) {
 function getCsrfToken(secret, sessionId = DEFAULT_SESSION) {
 	return generateToken(resolveSecret(secret), sessionId);
 }
-//#endregion
 export { csrf, getCsrfToken, sessionIdFrom };
 
 //# sourceMappingURL=csrf.mjs.map

package/dist/middleware/rate-limit.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-//#region src/middleware/rate-limit.ts
+// src/middleware/rate-limit.ts
 /** Direct peer IP from server runtimes exposing the socket (unspoofable TCP source). */
 function peerIp(c) {
 	const env = c.env ?? {};
@@ -70,7 +70,6 @@ function createRateLimiter() {
 		};
 	};
 }
-//#endregion
 export { createRateLimiter, rateLimitKey };
 
 //# sourceMappingURL=rate-limit.mjs.map

package/dist/middleware/request-log.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { redactSecrets } from "@storyshelf/core/utils";
-//#region src/middleware/request-log.ts
+// src/middleware/request-log.ts
 /** Hono middleware logging request start/end with duration. */
 function requestLogging(logger) {
 	return async (c, next) => {
@@ -25,7 +25,6 @@ function requestLogging(logger) {
 		}, "request end");
 	};
 }
-//#endregion
 export { requestLogging };
 
 //# sourceMappingURL=request-log.mjs.map

package/dist/middleware/require-review.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { matchedRouteClass } from "./require-testing.mjs";
 import { resolveAuthorizedProject } from "../routers/helpers.mjs";
-//#region src/middleware/require-review.ts
+// src/middleware/require-review.ts
 /** Body of the 404 a `review` route answers for a project with review off. */
 const REVIEW_DISABLED_MESSAGE = "Review is off for this project.";
 /** Roles that may see a project's routes at all; the gate answers only to them. */
@@ -45,7 +45,6 @@ async function reviewIsOff(c) {
 		return false;
 	}
 }
-//#endregion
 export { REVIEW_DISABLED_MESSAGE, requireReview };
 
 //# sourceMappingURL=require-review.mjs.map

package/dist/middleware/require-testing.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { classOfRoute } from "../routes/classification.mjs";
 import { matchedRoutes } from "hono/route";
-//#region src/middleware/require-testing.ts
+// src/middleware/require-testing.ts
 /** Body of the 404 a `testing` route answers on a hosting-only instance. */
 const TESTING_DISABLED_MESSAGE = "Testing is not enabled on this instance.";
 /**
@@ -35,7 +35,6 @@ function matchedRouteClass(c) {
 function isTestingRoute(c) {
 	return matchedRouteClass(c) === "testing";
 }
-//#endregion
 export { TESTING_DISABLED_MESSAGE, matchedRouteClass, requireTesting };
 
 //# sourceMappingURL=require-testing.mjs.map

package/dist/middleware/server-timing.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { runWithTimings } from "@storyshelf/core/utils";
 import { setMetric, timing } from "hono/timing";
-//#region src/middleware/server-timing.ts
+// src/middleware/server-timing.ts
 /**
 * Opt-in `Server-Timing` response headers over Hono's timing middleware.
 *
@@ -33,7 +33,6 @@ function serverTiming(enabled) {
 		if (headers.length > 0) c.res.headers.append("Server-Timing", headers.join(","));
 	};
 }
-//#endregion
 export { serverTiming };
 
 //# sourceMappingURL=server-timing.mjs.map

package/dist/middleware/setup-gate.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { sanitizeErrorText } from "@storyshelf/core/utils";
-//#region src/middleware/setup-gate.ts
+// src/middleware/setup-gate.ts
 /** Failures safe to expose on the setup gate's 503 (redacted, no secrets). */
 function publicFailures(result) {
 	return result.failures.map((failure) => ({
@@ -31,7 +31,6 @@ function setupGate(getReady) {
 		await next();
 	};
 }
-//#endregion
 export { setupGate };
 
 //# sourceMappingURL=setup-gate.mjs.map

package/dist/middleware/store-scope.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { runWithStore } from "../store.mjs";
 import { sessionIdFrom } from "./csrf.mjs";
-//#region src/middleware/store-scope.ts
+// src/middleware/store-scope.ts
 /** Hono middleware running downstream handlers inside the request store. */
 function storeScope(deps) {
 	return async (c, next) => {
@@ -37,7 +37,6 @@ function storeScope(deps) {
 		});
 	};
 }
-//#endregion
 export { storeScope };
 
 //# sourceMappingURL=store-scope.mjs.map

package/dist/notifications-pause.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "./store.mjs";
-//#region src/notifications-pause.ts
+// src/notifications-pause.ts
 /** What the System page and the notification settings tell the viewer. */
 const NOTIFICATIONS_PAUSED_TEXT = "Notifications are paused until a public URL is set; set PUBLIC_BASE_URL or confirm the detected origin.";
 /** The origin notifications link to, or `undefined` while none is resolved. */
@@ -27,7 +27,6 @@ function warnPaused(logger, event) {
 function clearPaused(logger) {
 	warned.delete(logger);
 }
-//#endregion
 export { NOTIFICATIONS_PAUSED_TEXT, clearPaused, notificationOrigin, notificationsPaused, warnPaused };
 
 //# sourceMappingURL=notifications-pause.mjs.map

package/dist/notify.d.mts

@@ -3,16 +3,14 @@ import __tsdown_shims_url from 'node:url';
 import { ShelfConfig, UIConfig } from "@storyshelf/core/config";
 import "@storyshelf/core/models";
 import { NotifierProvider } from "@storyshelf/core/adapter/notifier";
-import { Logger } from "@storyshelf/core/logger";
 import { DatabaseAdapter } from "@storyshelf/core/adapter/database";
+import { Logger } from "@storyshelf/core/logger";
 import "@storyshelf/core/schema";
-//#region src/notify.d.ts
 /**
  * Host hook for the auth engine (`onAuthSystemEvent`): fans `sys:*` auth
  * events out to admin channels. Safe to call anywhere — outside a request
  * scope (e.g. boot) it resolves to a no-op instead of throwing.
  */
 declare function createAuthSystemHook(): (event: "sys:user-created" | "sys:invite-issued", data: Record<string, unknown>) => Promise<void>;
-//#endregion
 export { createAuthSystemHook };
 //# sourceMappingURL=notify.d.mts.map

package/dist/notify.mjs

@@ -6,7 +6,7 @@ import { getStore } from "./store.mjs";
 import { clearPaused, notificationOrigin, warnPaused } from "./notifications-pause.mjs";
 import { MemberModel, NotificationChannelModel, NotificationSubscriptionModel, UserModel } from "@storyshelf/core/models";
 import { emitNotifications, emitSystemNotification } from "@storyshelf/core/adapter/notifier";
-//#region src/notify.ts
+// src/notify.ts
 /** Absolute review URL for a project page under the resolved public origin. */
 function reviewUrlFor(origin, slug, suffix) {
 	return `${origin}/projects/${slug}${suffix}`;
@@ -174,7 +174,6 @@ function createAuthSystemHook() {
 function now() {
 	return (/* @__PURE__ */ new Date()).toISOString();
 }
-//#endregion
 export { createAuthSystemHook, notifyProject, notifyProjectWith, notifySystem, notifySystemWith };
 
 //# sourceMappingURL=notify.mjs.map

package/dist/pages/a11y-violations.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { Alert, Badge, Meta } from "../ui/feedback.mjs";
 import { jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/a11y-violations.tsx
+// src/pages/a11y-violations.tsx
 /** The axe violation texts stored on a snapshot (`rule (impact): help [selector] n node(s)`); empty when none. */
 function a11yViolationsOf(snapshot) {
 	if (!snapshot.a11yViolations) return [];
@@ -110,7 +110,6 @@ function A11yViolationsDetails(props) {
 		]
 	}) }), violations.map((text) => /* @__PURE__ */ jsx(Meta, { children: /* @__PURE__ */ jsx("code", { children: text }) }, text))] });
 }
-//#endregion
 export { A11yViolationsDetails, A11yViolationsNotice, a11yCarrierOf, a11yCountOf, a11yFindingsOf, a11ySummaryNote, a11ySummaryOf, a11yUnavailableNote, a11yUnavailableReasonOf, a11yViolationsOf, isAxeUnavailable };
 
 //# sourceMappingURL=a11y-violations.mjs.map

package/dist/pages/admin-ai.mjs

@@ -6,7 +6,7 @@ import { Card, PageHeader, SectionTitle } from "../ui/layout.mjs";
 import { Table } from "../ui/table.mjs";
 import { DocumentLayout } from "../ui/document.mjs";
 import { Fragment, jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/admin-ai.tsx
+// src/pages/admin-ai.tsx
 function DaysTable(props) {
 	return /* @__PURE__ */ jsx(Table, {
 		dense: true,
@@ -72,7 +72,6 @@ function renderAdminAiPage(report) {
 		]
 	});
 }
-//#endregion
 export { renderAdminAiPage };
 
 //# sourceMappingURL=admin-ai.mjs.map

package/dist/pages/admin-system-origin.mjs

@@ -8,7 +8,7 @@ import { Card, SectionTitle } from "../ui/layout.mjs";
 import { HStack } from "../ui/stacks.mjs";
 import { csrfField } from "../ui/csrf-field.mjs";
 import { Fragment, jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/admin-system-origin.tsx
+// src/pages/admin-system-origin.tsx
 const SOURCE_LABELS = {
 	config: "configured (PUBLIC_BASE_URL)",
 	platform: "detected from the hosting platform",
@@ -17,7 +17,7 @@ const SOURCE_LABELS = {
 /** Where absolute links in emails, commit statuses and signed Storybook URLs point (ADR 0007). */
 function PublicOriginCard(props) {
 	const { resolved, stored, learns } = props.origin;
-	const reports = learns && (resolved === null || resolved.source === "admin");
+	const fixed = resolved !== null && resolved.source !== "admin";
 	return /* @__PURE__ */ jsxs(Card, { children: [
 		/* @__PURE__ */ jsx(SectionTitle, { children: "Public origin" }),
 		/* @__PURE__ */ jsxs(Meta, { children: [
@@ -30,11 +30,17 @@ function PublicOriginCard(props) {
 			learns,
 			stored
 		}) : /* @__PURE__ */ jsx(Resolved, { resolved }),
-		reports ? /* @__PURE__ */ jsx("div", { "data-report-origin": "/admin/public-origin/report" }) : null,
-		learns && stored !== null ? /* @__PURE__ */ jsx(StoredForm, { stored }) : null,
-		learns && stored === null ? /* @__PURE__ */ jsx(EnterForm, {}) : null
+		learns && !fixed ? /* @__PURE__ */ jsx("div", { "data-report-origin": "/admin/public-origin/report" }) : null,
+		fixed ? null : /* @__PURE__ */ jsx(OriginForms, {
+			learns,
+			stored
+		})
 	] });
 }
+function OriginForms(props) {
+	if (!props.learns) return /* @__PURE__ */ jsx(Fragment, {});
+	return props.stored === null ? /* @__PURE__ */ jsx(EnterForm, {}) : /* @__PURE__ */ jsx(StoredForm, { stored: props.stored });
+}
 function NothingResolved(props) {
 	if (props.stored !== null && !props.stored.confirmed) return /* @__PURE__ */ jsxs(Alert, {
 		tone: "warning",
@@ -53,10 +59,14 @@ function NothingResolved(props) {
 }
 function Resolved(props) {
 	const { resolved } = props;
-	return /* @__PURE__ */ jsxs(HStack, { children: [/* @__PURE__ */ jsx("code", { children: resolved.url }), /* @__PURE__ */ jsx(Badge, {
-		tone: "success",
-		children: SOURCE_LABELS[resolved.source]
-	})] });
+	return /* @__PURE__ */ jsxs(HStack, { children: [
+		/* @__PURE__ */ jsx("code", { children: resolved.url }),
+		/* @__PURE__ */ jsx(Badge, {
+			tone: "success",
+			children: SOURCE_LABELS[resolved.source]
+		}),
+		resolved.source === "admin" ? null : /* @__PURE__ */ jsx(Meta, { children: "Nothing to confirm." })
+	] });
 }
 /** Confirm the detected origin, replace it, or drop it. */
 function StoredForm(props) {
@@ -117,7 +127,6 @@ function EnterForm() {
 		]
 	});
 }
-//#endregion
 export { PublicOriginCard };
 
 //# sourceMappingURL=admin-system-origin.mjs.map

package/dist/pages/admin-system-origin.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin-system-origin.mjs","names":[],"sources":["../../src/pages/admin-system-origin.tsx"],"sourcesContent":["import type { ResolvedPublicOrigin, StoredPublicOrigin } from \"@storyshelf/core/models\";\nimport type { HtmlEscapedString } from \"hono/utils/html\";\nimport {\n  Alert,\n  Badge,\n  Button,\n  Card,\n  Field,\n  FormActions,\n  HStack,\n  Meta,\n  SectionTitle,\n} from \"../ui/components.tsx\";\nimport { csrfField } from \"../ui/csrf-field.tsx\";\n\n/* eslint-disable promise-function-async -- Hono JSX components return HtmlEscapedString | Promise<HtmlEscapedString> */\n\n/** What the System page knows about the public origin. */\nexport interface PublicOriginView {\n  /** What background jobs use now (configured, platform or confirmed); `null` when nothing is confirmed. */\n  resolved: ResolvedPublicOrigin | null;\n  /** The origin an admin's browser reported; `null` when none did. */\n  stored: StoredPublicOrigin | null;\n  /** Whether this deployment can learn an origin from an admin's browser (authentication is on). */\n  learns: boolean;\n}\n\nconst SOURCE_LABELS = {\n  config: \"configured (PUBLIC_BASE_URL)\",\n  platform: \"detected from the hosting platform\",\n  admin: \"confirmed by an admin\",\n} as const;\n\n/** Where absolute links in emails, commit statuses and signed Storybook URLs point (ADR 0007). */\nexport function PublicOriginCard(props: {\n  origin: PublicOriginView;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { resolved, stored, learns } = props.origin;\n  // A configured or platform origin outranks what a browser reports, so there is nothing to learn.\n  const reports = learns && (resolved === null || resolved.source === \"admin\");\n  return (\n    <Card>\n      <SectionTitle>Public origin</SectionTitle>\n      <Meta>\n        The address links in emails, commit statuses and signed Storybook URLs use. It comes from{\" \"}\n        <code>PUBLIC_BASE_URL</code>, then the hosting platform, then an address an admin confirmed\n        here. An address detected from a browser is used for none of these until it is confirmed;\n        sign-in (OAuth redirects) may use the address of the request itself.\n      </Meta>\n      {resolved === null ? (\n        <NothingResolved learns={learns} stored={stored} />\n      ) : (\n        <Resolved resolved={resolved} />\n      )}\n      {reports ? <div data-report-origin=\"/admin/public-origin/report\" /> : null}\n      {learns && stored !== null ? <StoredForm stored={stored} /> : null}\n      {learns && stored === null ? <EnterForm /> : null}\n    </Card>\n  );\n}\n\nfunction NothingResolved(props: {\n  learns: boolean;\n  stored: StoredPublicOrigin | null;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  if (props.stored !== null && !props.stored.confirmed) {\n    return (\n      <Alert tone=\"warning\" title=\"Public origin detected, not confirmed\">\n        <code>{props.stored.origin}</code> was detected from your browser. Confirm it to enable\n        notifications and signed Storybook URLs: until then no commit status or email is sent, and\n        browsers that reach the Storybook by URL stay unavailable.\n      </Alert>\n    );\n  }\n  return (\n    <Alert tone=\"warning\" title=\"No public origin is known\">\n      Notifications are paused, and browsers that reach the Storybook by URL stay unavailable.{\" \"}\n      {props.learns\n        ? \"Reload this page: it reports the address you opened it with, for you to confirm.\"\n        : \"Set PUBLIC_BASE_URL, or turn authentication on so an admin's browser can report it.\"}\n    </Alert>\n  );\n}\n\nfunction Resolved(props: {\n  resolved: ResolvedPublicOrigin;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { resolved } = props;\n  return (\n    <HStack>\n      <code>{resolved.url}</code>\n      <Badge tone=\"success\">{SOURCE_LABELS[resolved.source]}</Badge>\n    </HStack>\n  );\n}\n\n/** Confirm the detected origin, replace it, or drop it. */\nfunction StoredForm(props: {\n  stored: StoredPublicOrigin;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { stored } = props;\n  return (\n    <>\n      <form\n        method=\"post\"\n        action=\"/admin/public-origin\"\n        hx-post=\"/admin/public-origin\"\n        hx-target=\"body\"\n      >\n        {csrfField()}\n        <Field\n          label=\"Stored origin\"\n          name=\"origin\"\n          value={stored.origin}\n          hint={\n            stored.confirmed\n              ? \"Confirmed. Change it if this is not the address people use.\"\n              : \"Detected from your browser. Confirm it, or enter the address people use.\"\n          }\n        />\n        <FormActions>\n          <Button type=\"submit\" variant=\"secondary\" size=\"sm\">\n            {stored.confirmed ? \"Save\" : \"Confirm\"}\n          </Button>\n        </FormActions>\n      </form>\n      <form\n        method=\"post\"\n        action=\"/admin/public-origin/clear\"\n        hx-post=\"/admin/public-origin/clear\"\n        hx-target=\"body\"\n      >\n        {csrfField()}\n        <Button type=\"submit\" variant=\"secondary\" size=\"sm\">\n          Forget stored origin\n        </Button>\n      </form>\n    </>\n  );\n}\n\n/** Enter an origin by hand when none was reported. */\nfunction EnterForm(): HtmlEscapedString | Promise<HtmlEscapedString> {\n  return (\n    <form\n      method=\"post\"\n      action=\"/admin/public-origin\"\n      hx-post=\"/admin/public-origin\"\n      hx-target=\"body\"\n    >\n      {csrfField()}\n      <Field label=\"Origin\" name=\"origin\" placeholder=\"https://shelf.example.com\" />\n      <FormActions>\n        <Button type=\"submit\" variant=\"secondary\" size=\"sm\">\n          Save\n        </Button>\n      </FormActions>\n    </form>\n  );\n}\n"],"mappings":";;;;;;;;;;;AA2BA,MAAM,gBAAgB;CACpB,QAAQ;CACR,UAAU;CACV,OAAO;AACT;;AAGA,SAAgB,iBAAiB,OAEkB;CACjD,MAAM,EAAE,UAAU,QAAQ,WAAW,MAAM;CAE3C,MAAM,UAAU,WAAW,aAAa,QAAQ,SAAS,WAAW;CACpE,OACE,qBAAC,MAAD,EAAA,UAAA;EACE,oBAAC,cAAD,EAAA,UAAc,gBAA2B,CAAA;EACzC,qBAAC,MAAD,EAAA,UAAA;GAAM;GACsF;GAC1F,oBAAC,QAAD,EAAA,UAAM,kBAAqB,CAAA;GAAC;EAGxB,EAAA,CAAA;EACL,aAAa,OACZ,oBAAC,iBAAD;GAAyB;GAAgB;EAAS,CAAA,IAElD,oBAAC,UAAD,EAAoB,SAAW,CAAA;EAEhC,UAAU,oBAAC,OAAD,EAAK,sBAAmB,8BAA+B,CAAA,IAAI;EACrE,UAAU,WAAW,OAAO,oBAAC,YAAD,EAAoB,OAAS,CAAA,IAAI;EAC7D,UAAU,WAAW,OAAO,oBAAC,WAAD,CAAY,CAAA,IAAI;CACzC,EAAA,CAAA;AAEV;AAEA,SAAS,gBAAgB,OAG0B;CACjD,IAAI,MAAM,WAAW,QAAQ,CAAC,MAAM,OAAO,WACzC,OACE,qBAAC,OAAD;EAAO,MAAK;EAAU,OAAM;EAA5B,UAAA,CACE,oBAAC,QAAD,EAAA,UAAO,MAAM,OAAO,OAAa,CAAA,GAAC,6MAG7B;;CAGX,OACE,qBAAC,OAAD;EAAO,MAAK;EAAU,OAAM;EAA5B,UAAA;GAAwD;GACmC;GACxF,MAAM,SACH,qFACA;EACC;;AAEX;AAEA,SAAS,SAAS,OAEiC;CACjD,MAAM,EAAE,aAAa;CACrB,OACE,qBAAC,QAAD,EAAA,UAAA,CACE,oBAAC,QAAD,EAAA,UAAO,SAAS,IAAU,CAAA,GAC1B,oBAAC,OAAD;EAAO,MAAK;EAAW,UAAA,cAAc,SAAS;CAAe,CAAA,CACvD,EAAA,CAAA;AAEZ;;AAGA,SAAS,WAAW,OAE+B;CACjD,MAAM,EAAE,WAAW;CACnB,OACE,qBAAA,UAAA,EAAA,UAAA,CACE,qBAAC,QAAD;EACE,QAAO;EACP,QAAO;EACP,WAAQ;EACR,aAAU;EAJZ,UAAA;GAMG,UAAU;GACX,oBAAC,OAAD;IACE,OAAM;IACN,MAAK;IACL,OAAO,OAAO;IACd,MACE,OAAO,YACH,gEACA;GAEP,CAAA;GACD,oBAAC,aAAD,EAAA,UACE,oBAAC,QAAD;IAAQ,MAAK;IAAS,SAAQ;IAAY,MAAK;IAC5C,UAAA,OAAO,YAAY,SAAS;GACvB,CAAA,EACG,CAAA;EACT;CACN,CAAA,GAAA,qBAAC,QAAD;EACE,QAAO;EACP,QAAO;EACP,WAAQ;EACR,aAAU;EAJZ,UAAA,CAMG,UAAU,GACX,oBAAC,QAAD;GAAQ,MAAK;GAAS,SAAQ;GAAY,MAAK;GAAK,UAAA;EAE5C,CAAA,CACJ;CACN,CAAA,CAAA,EAAA,CAAA;AAEN;;AAGA,SAAS,YAA4D;CACnE,OACE,qBAAC,QAAD;EACE,QAAO;EACP,QAAO;EACP,WAAQ;EACR,aAAU;EAJZ,UAAA;GAMG,UAAU;GACX,oBAAC,OAAD;IAAO,OAAM;IAAS,MAAK;IAAS,aAAY;GAA6B,CAAA;GAC7E,oBAAC,aAAD,EAAA,UACE,oBAAC,QAAD;IAAQ,MAAK;IAAS,SAAQ;IAAY,MAAK;IAAK,UAAA;GAE5C,CAAA,EACG,CAAA;EACT;;AAEV"}
+{"version":3,"file":"admin-system-origin.mjs","names":[],"sources":["../../src/pages/admin-system-origin.tsx"],"sourcesContent":["import type { ResolvedPublicOrigin, StoredPublicOrigin } from \"@storyshelf/core/models\";\nimport type { HtmlEscapedString } from \"hono/utils/html\";\nimport {\n  Alert,\n  Badge,\n  Button,\n  Card,\n  Field,\n  FormActions,\n  HStack,\n  Meta,\n  SectionTitle,\n} from \"../ui/components.tsx\";\nimport { csrfField } from \"../ui/csrf-field.tsx\";\n\n/* eslint-disable promise-function-async -- Hono JSX components return HtmlEscapedString | Promise<HtmlEscapedString> */\n\n/** What the System page knows about the public origin. */\nexport interface PublicOriginView {\n  /** What background jobs use now (configured, platform or confirmed); `null` when nothing is confirmed. */\n  resolved: ResolvedPublicOrigin | null;\n  /** The origin an admin's browser reported; `null` when none did. */\n  stored: StoredPublicOrigin | null;\n  /** Whether this deployment can learn an origin from an admin's browser (authentication is on). */\n  learns: boolean;\n}\n\nconst SOURCE_LABELS = {\n  config: \"configured (PUBLIC_BASE_URL)\",\n  platform: \"detected from the hosting platform\",\n  admin: \"confirmed by an admin\",\n} as const;\n\n/** Where absolute links in emails, commit statuses and signed Storybook URLs point (ADR 0007). */\nexport function PublicOriginCard(props: {\n  origin: PublicOriginView;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { resolved, stored, learns } = props.origin;\n  // A configured or platform origin outranks what a browser reports: there is nothing to learn or\n  // to confirm, so neither the beacon nor the forms are offered (#315).\n  const fixed = resolved !== null && resolved.source !== \"admin\";\n  const reports = learns && !fixed;\n  return (\n    <Card>\n      <SectionTitle>Public origin</SectionTitle>\n      <Meta>\n        The address links in emails, commit statuses and signed Storybook URLs use. It comes from{\" \"}\n        <code>PUBLIC_BASE_URL</code>, then the hosting platform, then an address an admin confirmed\n        here. An address detected from a browser is used for none of these until it is confirmed;\n        sign-in (OAuth redirects) may use the address of the request itself.\n      </Meta>\n      {resolved === null ? (\n        <NothingResolved learns={learns} stored={stored} />\n      ) : (\n        <Resolved resolved={resolved} />\n      )}\n      {reports ? <div data-report-origin=\"/admin/public-origin/report\" /> : null}\n      {fixed ? null : <OriginForms learns={learns} stored={stored} />}\n    </Card>\n  );\n}\n\nfunction OriginForms(props: {\n  learns: boolean;\n  stored: StoredPublicOrigin | null;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  if (!props.learns) {\n    return <></>;\n  }\n  return props.stored === null ? <EnterForm /> : <StoredForm stored={props.stored} />;\n}\n\nfunction NothingResolved(props: {\n  learns: boolean;\n  stored: StoredPublicOrigin | null;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  if (props.stored !== null && !props.stored.confirmed) {\n    return (\n      <Alert tone=\"warning\" title=\"Public origin detected, not confirmed\">\n        <code>{props.stored.origin}</code> was detected from your browser. Confirm it to enable\n        notifications and signed Storybook URLs: until then no commit status or email is sent, and\n        browsers that reach the Storybook by URL stay unavailable.\n      </Alert>\n    );\n  }\n  return (\n    <Alert tone=\"warning\" title=\"No public origin is known\">\n      Notifications are paused, and browsers that reach the Storybook by URL stay unavailable.{\" \"}\n      {props.learns\n        ? \"Reload this page: it reports the address you opened it with, for you to confirm.\"\n        : \"Set PUBLIC_BASE_URL, or turn authentication on so an admin's browser can report it.\"}\n    </Alert>\n  );\n}\n\nfunction Resolved(props: {\n  resolved: ResolvedPublicOrigin;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { resolved } = props;\n  return (\n    <HStack>\n      <code>{resolved.url}</code>\n      <Badge tone=\"success\">{SOURCE_LABELS[resolved.source]}</Badge>\n      {resolved.source === \"admin\" ? null : <Meta>Nothing to confirm.</Meta>}\n    </HStack>\n  );\n}\n\n/** Confirm the detected origin, replace it, or drop it. */\nfunction StoredForm(props: {\n  stored: StoredPublicOrigin;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { stored } = props;\n  return (\n    <>\n      <form\n        method=\"post\"\n        action=\"/admin/public-origin\"\n        hx-post=\"/admin/public-origin\"\n        hx-target=\"body\"\n      >\n        {csrfField()}\n        <Field\n          label=\"Stored origin\"\n          name=\"origin\"\n          value={stored.origin}\n          hint={\n            stored.confirmed\n              ? \"Confirmed. Change it if this is not the address people use.\"\n              : \"Detected from your browser. Confirm it, or enter the address people use.\"\n          }\n        />\n        <FormActions>\n          <Button type=\"submit\" variant=\"secondary\" size=\"sm\">\n            {stored.confirmed ? \"Save\" : \"Confirm\"}\n          </Button>\n        </FormActions>\n      </form>\n      <form\n        method=\"post\"\n        action=\"/admin/public-origin/clear\"\n        hx-post=\"/admin/public-origin/clear\"\n        hx-target=\"body\"\n      >\n        {csrfField()}\n        <Button type=\"submit\" variant=\"secondary\" size=\"sm\">\n          Forget stored origin\n        </Button>\n      </form>\n    </>\n  );\n}\n\n/** Enter an origin by hand when none was reported. */\nfunction EnterForm(): HtmlEscapedString | Promise<HtmlEscapedString> {\n  return (\n    <form\n      method=\"post\"\n      action=\"/admin/public-origin\"\n      hx-post=\"/admin/public-origin\"\n      hx-target=\"body\"\n    >\n      {csrfField()}\n      <Field label=\"Origin\" name=\"origin\" placeholder=\"https://shelf.example.com\" />\n      <FormActions>\n        <Button type=\"submit\" variant=\"secondary\" size=\"sm\">\n          Save\n        </Button>\n      </FormActions>\n    </form>\n  );\n}\n"],"mappings":";;;;;;;;;;;AA2BA,MAAM,gBAAgB;CACpB,QAAQ;CACR,UAAU;CACV,OAAO;AACT;;AAGA,SAAgB,iBAAiB,OAEkB;CACjD,MAAM,EAAE,UAAU,QAAQ,WAAW,MAAM;CAG3C,MAAM,QAAQ,aAAa,QAAQ,SAAS,WAAW;CAEvD,OACE,qBAAC,MAAD,EAAA,UAAA;EACE,oBAAC,cAAD,EAAA,UAAc,gBAA2B,CAAA;EACzC,qBAAC,MAAD,EAAA,UAAA;GAAM;GACsF;GAC1F,oBAAC,QAAD,EAAA,UAAM,kBAAqB,CAAA;GAAC;EAGxB,EAAA,CAAA;EACL,aAAa,OACZ,oBAAC,iBAAD;GAAyB;GAAgB;EAAS,CAAA,IAElD,oBAAC,UAAD,EAAoB,SAAW,CAAA;EAbrB,UAAU,CAAC,QAeZ,oBAAC,OAAD,EAAK,sBAAmB,8BAA+B,CAAA,IAAI;EACrE,QAAQ,OAAO,oBAAC,aAAD;GAAqB;GAAgB;EAAS,CAAA;CAC1D,EAAA,CAAA;AAEV;AAEA,SAAS,YAAY,OAG8B;CACjD,IAAI,CAAC,MAAM,QACT,OAAO,oBAAA,UAAA,CAAI,CAAA;CAEb,OAAO,MAAM,WAAW,OAAO,oBAAC,WAAD,CAAY,CAAA,IAAI,oBAAC,YAAD,EAAY,QAAQ,MAAM,OAAS,CAAA;AACpF;AAEA,SAAS,gBAAgB,OAG0B;CACjD,IAAI,MAAM,WAAW,QAAQ,CAAC,MAAM,OAAO,WACzC,OACE,qBAAC,OAAD;EAAO,MAAK;EAAU,OAAM;EAA5B,UAAA,CACE,oBAAC,QAAD,EAAA,UAAO,MAAM,OAAO,OAAa,CAAA,GAAC,6MAG7B;;CAGX,OACE,qBAAC,OAAD;EAAO,MAAK;EAAU,OAAM;EAA5B,UAAA;GAAwD;GACmC;GACxF,MAAM,SACH,qFACA;EACC;;AAEX;AAEA,SAAS,SAAS,OAEiC;CACjD,MAAM,EAAE,aAAa;CACrB,OACE,qBAAC,QAAD,EAAA,UAAA;EACE,oBAAC,QAAD,EAAA,UAAO,SAAS,IAAU,CAAA;EAC1B,oBAAC,OAAD;GAAO,MAAK;GAAW,UAAA,cAAc,SAAS;EAAe,CAAA;EAC5D,SAAS,WAAW,UAAU,OAAO,oBAAC,MAAD,EAAA,UAAM,sBAAyB,CAAA;CAC/D,EAAA,CAAA;AAEZ;;AAGA,SAAS,WAAW,OAE+B;CACjD,MAAM,EAAE,WAAW;CACnB,OACE,qBAAA,UAAA,EAAA,UAAA,CACE,qBAAC,QAAD;EACE,QAAO;EACP,QAAO;EACP,WAAQ;EACR,aAAU;EAJZ,UAAA;GAMG,UAAU;GACX,oBAAC,OAAD;IACE,OAAM;IACN,MAAK;IACL,OAAO,OAAO;IACd,MACE,OAAO,YACH,gEACA;GAEP,CAAA;GACD,oBAAC,aAAD,EAAA,UACE,oBAAC,QAAD;IAAQ,MAAK;IAAS,SAAQ;IAAY,MAAK;IAC5C,UAAA,OAAO,YAAY,SAAS;GACvB,CAAA,EACG,CAAA;EACT;CACN,CAAA,GAAA,qBAAC,QAAD;EACE,QAAO;EACP,QAAO;EACP,WAAQ;EACR,aAAU;EAJZ,UAAA,CAMG,UAAU,GACX,oBAAC,QAAD;GAAQ,MAAK;GAAS,SAAQ;GAAY,MAAK;GAAK,UAAA;EAE5C,CAAA,CACJ;CACN,CAAA,CAAA,EAAA,CAAA;AAEN;;AAGA,SAAS,YAA4D;CACnE,OACE,qBAAC,QAAD;EACE,QAAO;EACP,QAAO;EACP,WAAQ;EACR,aAAU;EAJZ,UAAA;GAMG,UAAU;GACX,oBAAC,OAAD;IAAO,OAAM;IAAS,MAAK;IAAS,aAAY;GAA6B,CAAA;GAC7E,oBAAC,aAAD,EAAA,UACE,oBAAC,QAAD;IAAQ,MAAK;IAAS,SAAQ;IAAY,MAAK;IAAK,UAAA;GAE5C,CAAA,EACG,CAAA;EACT;;AAEV"}

package/dist/pages/admin-system-targets.mjs

@@ -7,7 +7,7 @@ import { Table } from "../ui/table.mjs";
 import { targetLabel } from "../targets.mjs";
 import { jsx, jsxs } from "hono/jsx/jsx-runtime";
 import { unavailableReason } from "@storyshelf/core/adapter/capture-runner";
-//#region src/pages/admin-system-targets.tsx
+// src/pages/admin-system-targets.tsx
 /** The browsers the capture runner offers and whether each can render now (ADR 0007, decision 7). */
 function CaptureTargetsCard(props) {
 	const { targets } = props;
@@ -47,7 +47,6 @@ function CaptureTargetsCard(props) {
 		}) })] }) })
 	] });
 }
-//#endregion
 export { CaptureTargetsCard };
 
 //# sourceMappingURL=admin-system-targets.mjs.map

package/dist/pages/admin-system.mjs

@@ -12,7 +12,7 @@ import { PublicOriginCard } from "./admin-system-origin.mjs";
 import { CaptureTargetsCard } from "./admin-system-targets.mjs";
 import { NotificationsPausedNotice } from "./notifications-paused.mjs";
 import { Fragment, jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/admin-system.tsx
+// src/pages/admin-system.tsx
 function healthTone(state) {
 	if (state === "ok") return "success";
 	if (state === "starting") return "info";
@@ -287,7 +287,6 @@ function renderAdminSystemPage(data) {
 		]
 	});
 }
-//#endregion
 export { renderAdminSystemPage };
 
 //# sourceMappingURL=admin-system.mjs.map

package/dist/pages/build-detail.mjs

@@ -26,7 +26,7 @@ import { BuildModel, CaptureAttemptModel, CaptureLogModel, LabelModel, ProjectMo
 import { CANCELLABLE_BUILD_STATUSES } from "@storyshelf/core/types";
 import { Fragment, jsx, jsxs } from "hono/jsx/jsx-runtime";
 import { createUrlBuilder } from "@storyshelf/core/urls";
-//#region src/pages/build-detail.tsx
+// src/pages/build-detail.tsx
 /** Map a capture log level to its badge tone. */
 function logTone(level) {
 	if (level === "error") return "danger";
@@ -414,7 +414,6 @@ async function renderBuildDetailPage(buildId, usageByStory = /* @__PURE__ */ new
 		]
 	});
 }
-//#endregion
 export { renderBuildDetailPage };
 
 //# sourceMappingURL=build-detail.mjs.map

package/dist/pages/build-diff-actions.mjs

@@ -7,7 +7,7 @@ import { Kbd } from "../ui/kbd.mjs";
 import { groupOf, neighbours, snapshotPageUrl } from "./build-diff-model.mjs";
 import { actionBar, actionGroup, actionHints, actionPosition } from "../ui/styles/review-layout.mjs";
 import { jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/build-diff-actions.tsx
+// src/pages/build-diff-actions.tsx
 function apiBase(project, build) {
 	return `/api/v1/projects/${project.slug}/builds/${build.id}`;
 }
@@ -210,7 +210,6 @@ function DiffActionBar(props) {
 		]
 	});
 }
-//#endregion
 export { DiffActionBar };
 
 //# sourceMappingURL=build-diff-actions.mjs.map

package/dist/pages/build-diff-comments.mjs

@@ -9,7 +9,7 @@ import { VStack } from "../ui/stacks.mjs";
 import { csrfField } from "../ui/csrf-field.mjs";
 import { reviewComment, reviewCommentActions, reviewCommentBody, reviewCommentHead } from "../ui/styles/review.mjs";
 import { jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/build-diff-comments.tsx
+// src/pages/build-diff-comments.tsx
 /** One comment with an optional resolve action. */
 function CommentCard(props) {
 	const { project, build, comment, canReview, anchor } = props;
@@ -100,7 +100,6 @@ function DiffComments(props) {
 		})
 	] });
 }
-//#endregion
 export { CommentCard, DiffComments };
 
 //# sourceMappingURL=build-diff-comments.mjs.map

package/dist/pages/build-diff-default.mjs

@@ -0,0 +1,53 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { css } from "../ui/css.mjs";
+import { HStack } from "../ui/stacks.mjs";
+import { snapshotImageUrl } from "./build-diff-model.mjs";
+import { jsx, jsxs } from "hono/jsx/jsx-runtime";
+// src/pages/build-diff-default.tsx
+const comparisonImage = css`
+  /* default-comparison-image */
+  max-width: 100%;
+`;
+function DefaultComparisonView(props) {
+	const { project, build, snapshot, comparison } = props;
+	const params = new URLSearchParams({
+		reference: "default",
+		id: comparison.id,
+		version: comparison.version
+	});
+	const baseline = `${snapshotImageUrl(project, build, snapshot, "baseline")}?${params}`;
+	return /* @__PURE__ */ jsxs("details", { children: [
+		/* @__PURE__ */ jsxs("summary", { children: [
+			"Compare with current default branch (",
+			comparison.branch,
+			")"
+		] }),
+		/* @__PURE__ */ jsxs("p", { children: [
+			"This is a secondary comparison. Approval still uses the primary comparison above. Default baseline updated ",
+			comparison.version,
+			"."
+		] }),
+		/* @__PURE__ */ jsx("p", { children: comparison.environment === "different" ? "Recorded environment fingerprints differ; some components may be unknown and differences may be environmental." : comparison.environment === "unknown" ? "Capture environment information is unavailable." : "Recorded capture environment fingerprints match; some components may be unknown." }),
+		comparison.available ? /* @__PURE__ */ jsxs(HStack, {
+			align: "start",
+			children: [/* @__PURE__ */ jsx(BaselineImage, { src: baseline }), /* @__PURE__ */ jsxs("figure", { children: [/* @__PURE__ */ jsx("figcaption", { children: "This build" }), /* @__PURE__ */ jsx("img", {
+				src: snapshotImageUrl(project, build, snapshot, "image"),
+				alt: "This build's screenshot",
+				class: comparisonImage
+			})] })]
+		}) : /* @__PURE__ */ jsx("p", { children: "The current default-branch baseline image is unavailable." })
+	] });
+}
+function BaselineImage(props) {
+	return /* @__PURE__ */ jsxs("figure", { children: [/* @__PURE__ */ jsx("figcaption", { children: "Current default-branch baseline" }), /* @__PURE__ */ jsx("img", {
+		src: props.src,
+		alt: "Current default-branch baseline",
+		loading: "lazy",
+		class: comparisonImage
+	})] });
+}
+export { DefaultComparisonView };
+
+//# sourceMappingURL=build-diff-default.mjs.map

package/dist/pages/build-diff-default.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-diff-default.mjs","names":[],"sources":["../../src/pages/build-diff-default.tsx"],"sourcesContent":["import type { Build, Project, Snapshot } from \"@storyshelf/core/schema\";\nimport type { HtmlEscapedString } from \"hono/utils/html\";\nimport type { DefaultComparison } from \"../routers/baseline-reference.ts\";\nimport { HStack } from \"../ui/components.tsx\";\nimport { css } from \"../ui/css.ts\";\nimport { snapshotImageUrl } from \"./build-diff-model.ts\";\n\nconst comparisonImage = css`\n  /* default-comparison-image */\n  max-width: 100%;\n`;\n\n/* eslint-disable promise-function-async -- Hono JSX components may return HTML or a promise */\nexport function DefaultComparisonView(props: {\n  project: Project;\n  build: Build;\n  snapshot: Snapshot;\n  comparison: DefaultComparison;\n}): HtmlEscapedString | Promise<HtmlEscapedString> {\n  const { project, build, snapshot, comparison } = props;\n  const params = new URLSearchParams({\n    reference: \"default\",\n    id: comparison.id,\n    version: comparison.version,\n  });\n  const baseline = `${snapshotImageUrl(project, build, snapshot, \"baseline\")}?${params}`;\n  return (\n    <details>\n      <summary>Compare with current default branch ({comparison.branch})</summary>\n      <p>\n        This is a secondary comparison. Approval still uses the primary comparison above. Default\n        baseline updated {comparison.version}.\n      </p>\n      <p>\n        {comparison.environment === \"different\"\n          ? \"Recorded environment fingerprints differ; some components may be unknown and differences may be environmental.\"\n          : comparison.environment === \"unknown\"\n            ? \"Capture environment information is unavailable.\"\n            : \"Recorded capture environment fingerprints match; some components may be unknown.\"}\n      </p>\n      {comparison.available ? (\n        <HStack align=\"start\">\n          <BaselineImage src={baseline} />\n          <figure>\n            <figcaption>This build</figcaption>\n            <img\n              src={snapshotImageUrl(project, build, snapshot, \"image\")}\n              alt=\"This build's screenshot\"\n              class={comparisonImage}\n            />\n          </figure>\n        </HStack>\n      ) : (\n        <p>The current default-branch baseline image is unavailable.</p>\n      )}\n    </details>\n  );\n}\n\nfunction BaselineImage(props: { src: string }): HtmlEscapedString | Promise<HtmlEscapedString> {\n  return (\n    <figure>\n      <figcaption>Current default-branch baseline</figcaption>\n      <img\n        src={props.src}\n        alt=\"Current default-branch baseline\"\n        loading=\"lazy\"\n        class={comparisonImage}\n      />\n    </figure>\n  );\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,kBAAkB,GAAG;;;;AAM3B,SAAgB,sBAAsB,OAKa;CACjD,MAAM,EAAE,SAAS,OAAO,UAAU,eAAe;CACjD,MAAM,SAAS,IAAI,gBAAgB;EACjC,WAAW;EACX,IAAI,WAAW;EACf,SAAS,WAAW;CACtB,CAAC;CACD,MAAM,WAAW,GAAG,iBAAiB,SAAS,OAAO,UAAU,UAAU,EAAE,GAAG;CAC9E,OACE,qBAAC,WAAD,EAAA,UAAA;EACE,qBAAC,WAAD,EAAA,UAAA;GAAS;GAAsC,WAAW;GAAO;EAAU,EAAA,CAAA;EAC3E,qBAAC,KAAD,EAAA,UAAA;GAAG;GAEiB,WAAW;GAAQ;EACpC,EAAA,CAAA;EACH,oBAAC,KAAD,EAAA,UACG,WAAW,gBAAgB,cACxB,mHACA,WAAW,gBAAgB,YACzB,oDACA,mFACL,CAAA;EACF,WAAW,YACV,qBAAC,QAAD;GAAQ,OAAM;GAAd,UAAA,CACE,oBAAC,eAAD,EAAe,KAAK,SAAW,CAAA,GAC/B,qBAAC,UAAD,EAAA,UAAA,CACE,oBAAC,cAAD,EAAA,UAAY,aAAsB,CAAA,GAClC,oBAAC,OAAD;IACE,KAAK,iBAAiB,SAAS,OAAO,UAAU,OAAO;IACvD,KAAI;IACJ,OAAO;GACR,CAAA,CACK,EAAA,CAAA,CACF;EAER,CAAA,IAAA,oBAAC,KAAD,EAAA,UAAG,4DAA4D,CAAA;CAE1D,EAAA,CAAA;AAEb;AAEA,SAAS,cAAc,OAAwE;CAC7F,OACE,qBAAC,UAAD,EAAA,UAAA,CACE,oBAAC,cAAD,EAAA,UAAY,kCAA2C,CAAA,GACvD,oBAAC,OAAD;EACE,KAAK,MAAM;EACX,KAAI;EACJ,SAAQ;EACR,OAAO;CACR,CAAA,CACK,EAAA,CAAA;AAEZ"}

package/dist/pages/build-diff-environment.mjs

@@ -5,7 +5,7 @@ import { Alert } from "../ui/feedback.mjs";
 import { StaleBaselineNotice } from "./build-diff-stale.mjs";
 import { environmentChangeOf, labelOf, summariseEnvironmentChanges } from "./environment-change.mjs";
 import { Fragment, jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/build-diff-environment.tsx
+// src/pages/build-diff-environment.tsx
 /**
 * Build-level note: some snapshots were captured in a different environment than their baseline.
 * The default branch migrates them without a diff; a feature branch still diffs them (ADR 0005).
@@ -76,7 +76,6 @@ function ReviewNotices(props) {
 		migrated: build.isDefault
 	})] });
 }
-//#endregion
 export { EnvironmentChangeNotice, EnvironmentChangeSnapshotNotice, ReviewNotices };
 
 //# sourceMappingURL=build-diff-environment.mjs.map

package/dist/pages/build-diff-header.mjs

@@ -9,7 +9,7 @@ import { a11ySummaryOf, a11yUnavailableNote } from "./a11y-violations.mjs";
 import { reviewProgress } from "./build-diff-model.mjs";
 import { headerActions, headerMain, headerMeta, headerProgress, headerSide, headerTitle, reviewHeader } from "../ui/styles/review-layout.mjs";
 import { Fragment, jsx, jsxs } from "hono/jsx/jsx-runtime";
-//#region src/pages/build-diff-header.tsx
+// src/pages/build-diff-header.tsx
 /** Approve-all / reject-all bulk actions (each asks for confirmation). */
 function BulkActions({ project, build, pendingCount }) {
 	const base = `/api/v1/projects/${project.slug}/builds/${build.id}`;
@@ -129,7 +129,6 @@ function DiffHeader(props) {
 		})]
 	});
 }
-//#endregion
 export { DiffHeader };
 
 //# sourceMappingURL=build-diff-header.mjs.map