@storyshelf/core 0.3.1 → 0.5.3

package/dist/capture/dispatch.mjs

@@ -2,14 +2,65 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { BuildModel } from "../models/build.mjs";
+import { CaptureAttemptModel, emitAttemptLog } from "../models/capture-attempt.mjs";
 import { ProjectModel } from "../models/project.mjs";
 import { executeCaptureJob } from "./orchestrator.mjs";
-import { hasApprovedBuildForSha, isAlreadyMerged } from "./skip-checks.mjs";
 import { postStatusesForBuild } from "./status-fanout.mjs";
+import { CaptureLogModel } from "../models/capture-log.mjs";
+import { hasApprovedBuildForSha, isAlreadyMerged } from "./skip-checks.mjs";
 //#region src/capture/dispatch.ts
+/** Build the queue's job runner: post pending, apply skip rules, capture, report. */
+function createDispatchJob(deps) {
+	return async (job) => {
+		const target = await loadJobTarget(deps, job);
+		if (!target) return;
+		const pendingUrl = `/projects/${target.project.slug}/builds/${job.buildId}`;
+		await postPending(deps, target.project, pendingUrl, target.build.gitSha);
+		const { attempt, recordLog } = await beginAttempt(deps, target.project, target.build, job.reqId);
+		const ctx = {
+			deps,
+			build: target.build,
+			project: target.project,
+			pendingUrl,
+			attempt,
+			recordLog
+		};
+		if (await maybeSkipMerged(ctx) || await maybeSkipDuplicate(ctx)) return;
+		await runAndReport(ctx, job);
+	};
+}
+/** Open a new attempt row for this run and return its log recorder. */
+async function beginAttempt(deps, project, build, reqId) {
+	const attempts = new CaptureAttemptModel(deps.db, deps.tables);
+	const logs = new CaptureLogModel(deps.db, deps.tables);
+	const attempt = await attempts.startAttempt(project.id, build.id, reqId);
+	const recordLog = async (level, message, fields) => {
+		await logs.append(project.id, build.id, attempt.id, level, message, fields);
+	};
+	await emitAttemptLog(recordLog, deps.logger, "info", "capture queued", {
+		buildId: build.id,
+		attemptNo: attempt.attemptNo
+	});
+	return {
+		attempt,
+		recordLog
+	};
+}
+/** Close the attempt row with its terminal status, counts, and error. */
+async function finishAttempt(ctx, status, error, counts) {
+	const { deps, attempt } = ctx;
+	await new CaptureAttemptModel(deps.db, deps.tables).markFinished(attempt.id, status, error, counts);
+	await emitAttemptLog(ctx.recordLog, deps.logger, status === "failed" ? "error" : "info", `capture ${status}`, { attemptNo: attempt.attemptNo });
+}
+/** Full error text for an attempt row (message plus stack when available). */
+function errorText(reason) {
+	if (reason instanceof Error) return reason.stack ?? reason.message;
+	return String(reason);
+}
 async function postPending(deps, project, url, sha) {
 	await postStatusesForBuild({
 		db: deps.db,
+		tables: deps.tables,
 		project,
 		sha,
 		status: "pending",
@@ -24,6 +75,7 @@ async function postPending(deps, project, url, sha) {
 async function postTerminal(deps, project, url, sha, status) {
 	await postStatusesForBuild({
 		db: deps.db,
+		tables: deps.tables,
 		project,
 		sha,
 		status,
@@ -42,7 +94,12 @@ async function approveWithoutCapture(ctx, reason) {
 		sha: build.gitSha,
 		branch: build.gitBranch
 	}, reason);
-	await new BuildModel(deps.db).setStatus(build.id, "approved").catch(() => {});
+	await emitAttemptLog(ctx.recordLog, deps.logger, "info", reason, {
+		sha: build.gitSha,
+		branch: build.gitBranch
+	});
+	await finishAttempt(ctx, "completed");
+	await new BuildModel(deps.db, deps.tables).setStatus(build.id, "approved").catch(() => {});
 	await postTerminal(deps, project, pendingUrl, build.gitSha, "success").catch(() => {});
 }
 async function maybeSkipMerged(ctx) {
@@ -54,6 +111,7 @@ async function maybeSkipMerged(ctx) {
 		branch: build.gitBranch,
 		secret: deps.secret,
 		db: deps.db,
+		tables: deps.tables,
 		projectId: project.id,
 		logger: deps.logger
 	}).catch(() => false)) {
@@ -64,7 +122,7 @@ async function maybeSkipMerged(ctx) {
 }
 async function maybeSkipDuplicate(ctx) {
 	const { deps, build, project } = ctx;
-	if (await hasApprovedBuildForSha(deps.db, project.id, build.gitSha, build.id)) {
+	if (await hasApprovedBuildForSha(deps.db, deps.tables, project.id, build.gitSha, build.id)) {
 		await approveWithoutCapture(ctx, "skipping capture — duplicate sha already approved");
 		return true;
 	}
@@ -79,24 +137,38 @@ function terminalState(status) {
 /** Post the terminal status for a finished capture. */
 async function reportTerminalStatus(ctx, buildId) {
 	const { deps, build, project, pendingUrl } = ctx;
-	const terminal = terminalState((await new BuildModel(deps.db).get(buildId))?.status);
+	const terminal = terminalState((await new BuildModel(deps.db, deps.tables).get(buildId))?.status);
 	if (terminal) await postTerminal(deps, project, pendingUrl, build.gitSha, terminal);
 }
 async function runAndReport(ctx, job) {
-	const { deps, build, project, pendingUrl } = ctx;
+	const { deps, build } = ctx;
+	await new CaptureAttemptModel(deps.db, deps.tables).markRunning(ctx.attempt.id);
+	await emitAttemptLog(ctx.recordLog, deps.logger, "info", "capture started", {
+		buildId: build.id,
+		attemptNo: ctx.attempt.attemptNo
+	});
 	try {
-		await executeCaptureJob({
+		await finishAttempt(ctx, "completed", void 0, await executeCaptureJob({
 			buildId: job.buildId,
-			reqId: job.reqId
-		}, deps.jobOptions);
+			reqId: job.reqId,
+			traceparent: job.traceparent,
+			attempt: {
+				id: ctx.attempt.id,
+				attemptNo: ctx.attempt.attemptNo,
+				projectId: ctx.project.id
+			},
+			recordLog: ctx.recordLog
+		}, deps.jobOptions));
 		await reportTerminalStatus(ctx, job.buildId);
 	} catch (error) {
+		await finishAttempt(ctx, "failed", errorText(error));
 		await postStatusesForBuild({
 			db: deps.db,
-			project,
+			tables: deps.tables,
+			project: ctx.project,
 			sha: build.gitSha,
 			status: "failure",
-			url: pendingUrl,
+			url: ctx.pendingUrl,
 			providers: deps.gitHosts,
 			secret: deps.secret,
 			logger: deps.logger
@@ -106,19 +178,21 @@ async function runAndReport(ctx, job) {
 }
 /** Load the build + project for a job, running orphan jobs directly. */
 async function loadJobTarget(deps, job) {
-	const build = await new BuildModel(deps.db).get(job.buildId);
+	const build = await new BuildModel(deps.db, deps.tables).get(job.buildId);
 	if (!build) {
 		await executeCaptureJob({
 			buildId: job.buildId,
-			reqId: job.reqId
+			reqId: job.reqId,
+			traceparent: job.traceparent
 		}, deps.jobOptions);
 		return null;
 	}
-	const project = await new ProjectModel(deps.db).get(build.projectId);
+	const project = await new ProjectModel(deps.db, deps.tables).get(build.projectId);
 	if (!project) {
 		await executeCaptureJob({
 			buildId: job.buildId,
-			reqId: job.reqId
+			reqId: job.reqId,
+			traceparent: job.traceparent
 		}, deps.jobOptions);
 		return null;
 	}
@@ -127,23 +201,6 @@ async function loadJobTarget(deps, job) {
 		project
 	};
 }
-/** Build the queue's job runner: post pending, apply skip rules, capture, report. */
-function createDispatchJob(deps) {
-	return async (job) => {
-		const target = await loadJobTarget(deps, job);
-		if (!target) return;
-		const pendingUrl = `/projects/${target.project.slug}/builds/${job.buildId}`;
-		await postPending(deps, target.project, pendingUrl, target.build.gitSha);
-		const ctx = {
-			deps,
-			build: target.build,
-			project: target.project,
-			pendingUrl
-		};
-		if (await maybeSkipMerged(ctx) || await maybeSkipDuplicate(ctx)) return;
-		await runAndReport(ctx, job);
-	};
-}
 //#endregion
 export { createDispatchJob };
 

package/dist/capture/dispatch.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.mjs","names":[],"sources":["../../src/capture/dispatch.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { Logger } from \"../logger.ts\";\nimport { BuildModel } from \"../models/build.ts\";\nimport { ProjectModel } from \"../models/project.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport { executeCaptureJob, type CaptureJobOptions } from \"./orchestrator.ts\";\nimport { hasApprovedBuildForSha, isAlreadyMerged } from \"./skip-checks.ts\";\nimport { postStatusesForBuild } from \"./status-fanout.ts\";\n\n/** Dependencies for building the capture queue's job runner. */\nexport interface DispatchDeps {\n  db: DatabaseAdapter;\n  jobOptions: CaptureJobOptions;\n  gitHosts: GitHostProvider[];\n  secret: string | undefined;\n  logger: Logger;\n}\n\n/** A queued capture job. */\nexport interface CaptureDispatchJob {\n  buildId: string;\n  reqId?: string;\n}\n\ninterface JobContext {\n  deps: DispatchDeps;\n  build: Build;\n  project: Project;\n  pendingUrl: string;\n}\n\nasync function postPending(\n  deps: DispatchDeps,\n  project: Project,\n  url: string,\n  sha: string,\n): Promise<void> {\n  await postStatusesForBuild({\n    db: deps.db,\n    project,\n    sha,\n    status: \"pending\",\n    url,\n    providers: deps.gitHosts,\n    secret: deps.secret,\n    logger: deps.logger,\n  }).catch((error: unknown) => {\n    deps.logger.error({ err: error }, \"failed to post pending status\");\n  });\n}\n\nasync function postTerminal(\n  deps: DispatchDeps,\n  project: Project,\n  url: string,\n  sha: string,\n  status: \"success\" | \"failure\",\n): Promise<void> {\n  await postStatusesForBuild({\n    db: deps.db,\n    project,\n    sha,\n    status,\n    url,\n    providers: deps.gitHosts,\n    secret: deps.secret,\n    logger: deps.logger,\n  }).catch((error: unknown) => {\n    deps.logger.error({ err: error }, \"failed to post terminal status\");\n  });\n}\n\nasync function approveWithoutCapture(ctx: JobContext, reason: string): Promise<void> {\n  const { deps, build, project, pendingUrl } = ctx;\n  deps.logger.info({ buildId: build.id, sha: build.gitSha, branch: build.gitBranch }, reason);\n  await new BuildModel(deps.db).setStatus(build.id, \"approved\").catch(() => {}); // Intentionally empty — fire-and-forget\n  await postTerminal(deps, project, pendingUrl, build.gitSha, \"success\").catch(() => {}); // Intentionally empty — fire-and-forget\n}\n\nasync function maybeSkipMerged(ctx: JobContext): Promise<boolean> {\n  const { deps, build, project } = ctx;\n  if (build.isDefault) {\n    return false;\n  }\n  const merged = await isAlreadyMerged({\n    providers: deps.gitHosts,\n    sha: build.gitSha,\n    branch: build.gitBranch,\n    secret: deps.secret,\n    db: deps.db,\n    projectId: project.id,\n    logger: deps.logger,\n  }).catch(() => false);\n  if (merged) {\n    await approveWithoutCapture(ctx, \"skipping capture — already merged\");\n    return true;\n  }\n  return false;\n}\n\nasync function maybeSkipDuplicate(ctx: JobContext): Promise<boolean> {\n  const { deps, build, project } = ctx;\n  const dup = await hasApprovedBuildForSha(deps.db, project.id, build.gitSha, build.id);\n  if (dup) {\n    await approveWithoutCapture(ctx, \"skipping capture — duplicate sha already approved\");\n    return true;\n  }\n  return false;\n}\n\n/** Map a terminal build status to its check-run state. */\nfunction terminalState(status: string | undefined): \"success\" | \"failure\" | null {\n  if (status === \"approved\") {\n    return \"success\";\n  }\n  if (status === \"rejected\" || status === \"failed\") {\n    return \"failure\";\n  }\n  return null;\n}\n\n/** Post the terminal status for a finished capture. */\nasync function reportTerminalStatus(ctx: JobContext, buildId: string): Promise<void> {\n  const { deps, build, project, pendingUrl } = ctx;\n  const updated = await new BuildModel(deps.db).get(buildId);\n  const terminal = terminalState(updated?.status);\n  if (terminal) {\n    await postTerminal(deps, project, pendingUrl, build.gitSha, terminal);\n  }\n}\n\nasync function runAndReport(ctx: JobContext, job: CaptureDispatchJob): Promise<void> {\n  const { deps, build, project, pendingUrl } = ctx;\n  try {\n    await executeCaptureJob({ buildId: job.buildId, reqId: job.reqId }, deps.jobOptions);\n    await reportTerminalStatus(ctx, job.buildId);\n  } catch (error: unknown) {\n    await postStatusesForBuild({\n      db: deps.db,\n      project,\n      sha: build.gitSha,\n      status: \"failure\",\n      url: pendingUrl,\n      providers: deps.gitHosts,\n      secret: deps.secret,\n      logger: deps.logger,\n    }).catch(() => {\n      // Ignore: status post failure already logged\n    });\n    throw error;\n  }\n}\n\n/** Load the build + project for a job, running orphan jobs directly. */\nasync function loadJobTarget(\n  deps: DispatchDeps,\n  job: CaptureDispatchJob,\n): Promise<{ build: Build; project: Project } | null> {\n  const builds = new BuildModel(deps.db);\n  const build = await builds.get(job.buildId);\n  if (!build) {\n    await executeCaptureJob({ buildId: job.buildId, reqId: job.reqId }, deps.jobOptions);\n    return null;\n  }\n  const project = await new ProjectModel(deps.db).get(build.projectId);\n  if (!project) {\n    await executeCaptureJob({ buildId: job.buildId, reqId: job.reqId }, deps.jobOptions);\n    return null;\n  }\n  return { build, project };\n}\n\n/** Build the queue's job runner: post pending, apply skip rules, capture, report. */\nexport function createDispatchJob(deps: DispatchDeps): (job: CaptureDispatchJob) => Promise<void> {\n  return async (job: CaptureDispatchJob): Promise<void> => {\n    const target = await loadJobTarget(deps, job);\n    if (!target) {\n      return;\n    }\n    const pendingUrl = `/projects/${target.project.slug}/builds/${job.buildId}`;\n    await postPending(deps, target.project, pendingUrl, target.build.gitSha);\n    const ctx: JobContext = { deps, build: target.build, project: target.project, pendingUrl };\n    if ((await maybeSkipMerged(ctx)) || (await maybeSkipDuplicate(ctx))) {\n      return;\n    }\n    await runAndReport(ctx, job);\n  };\n}\n"],"mappings":";;;;;;;;;AAiCA,eAAe,YACb,MACA,SACA,KACA,KACe;CACf,MAAM,qBAAqB;EACzB,IAAI,KAAK;EACT;EACA;EACA,QAAQ;EACR;EACA,WAAW,KAAK;EAChB,QAAQ,KAAK;EACb,QAAQ,KAAK;CACf,CAAC,CAAC,CAAC,OAAO,UAAmB;EAC3B,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,+BAA+B;CACnE,CAAC;AACH;AAEA,eAAe,aACb,MACA,SACA,KACA,KACA,QACe;CACf,MAAM,qBAAqB;EACzB,IAAI,KAAK;EACT;EACA;EACA;EACA;EACA,WAAW,KAAK;EAChB,QAAQ,KAAK;EACb,QAAQ,KAAK;CACf,CAAC,CAAC,CAAC,OAAO,UAAmB;EAC3B,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,gCAAgC;CACpE,CAAC;AACH;AAEA,eAAe,sBAAsB,KAAiB,QAA+B;CACnF,MAAM,EAAE,MAAM,OAAO,SAAS,eAAe;CAC7C,KAAK,OAAO,KAAK;EAAE,SAAS,MAAM;EAAI,KAAK,MAAM;EAAQ,QAAQ,MAAM;CAAU,GAAG,MAAM;CAC1F,MAAM,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,UAAU,MAAM,IAAI,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC;CAC5E,MAAM,aAAa,MAAM,SAAS,YAAY,MAAM,QAAQ,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC;AACvF;AAEA,eAAe,gBAAgB,KAAmC;CAChE,MAAM,EAAE,MAAM,OAAO,YAAY;CACjC,IAAI,MAAM,WACR,OAAO;CAWT,IAAI,MATiB,gBAAgB;EACnC,WAAW,KAAK;EAChB,KAAK,MAAM;EACX,QAAQ,MAAM;EACd,QAAQ,KAAK;EACb,IAAI,KAAK;EACT,WAAW,QAAQ;EACnB,QAAQ,KAAK;CACf,CAAC,CAAC,CAAC,YAAY,KAAK,GACR;EACV,MAAM,sBAAsB,KAAK,mCAAmC;EACpE,OAAO;CACT;CACA,OAAO;AACT;AAEA,eAAe,mBAAmB,KAAmC;CACnE,MAAM,EAAE,MAAM,OAAO,YAAY;CAEjC,IAAI,MADc,uBAAuB,KAAK,IAAI,QAAQ,IAAI,MAAM,QAAQ,MAAM,EAAE,GAC3E;EACP,MAAM,sBAAsB,KAAK,mDAAmD;EACpF,OAAO;CACT;CACA,OAAO;AACT;;AAGA,SAAS,cAAc,QAA0D;CAC/E,IAAI,WAAW,YACb,OAAO;CAET,IAAI,WAAW,cAAc,WAAW,UACtC,OAAO;CAET,OAAO;AACT;;AAGA,eAAe,qBAAqB,KAAiB,SAAgC;CACnF,MAAM,EAAE,MAAM,OAAO,SAAS,eAAe;CAE7C,MAAM,WAAW,eAAc,MADT,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,IAAI,OAAO,EAAA,EACjB,MAAM;CAC9C,IAAI,UACF,MAAM,aAAa,MAAM,SAAS,YAAY,MAAM,QAAQ,QAAQ;AAExE;AAEA,eAAe,aAAa,KAAiB,KAAwC;CACnF,MAAM,EAAE,MAAM,OAAO,SAAS,eAAe;CAC7C,IAAI;EACF,MAAM,kBAAkB;GAAE,SAAS,IAAI;GAAS,OAAO,IAAI;EAAM,GAAG,KAAK,UAAU;EACnF,MAAM,qBAAqB,KAAK,IAAI,OAAO;CAC7C,SAAS,OAAgB;EACvB,MAAM,qBAAqB;GACzB,IAAI,KAAK;GACT;GACA,KAAK,MAAM;GACX,QAAQ;GACR,KAAK;GACL,WAAW,KAAK;GAChB,QAAQ,KAAK;GACb,QAAQ,KAAK;EACf,CAAC,CAAC,CAAC,YAAY,CAEf,CAAC;EACD,MAAM;CACR;AACF;;AAGA,eAAe,cACb,MACA,KACoD;CAEpD,MAAM,QAAQ,MAAM,IADD,WAAW,KAAK,EACV,CAAC,CAAC,IAAI,IAAI,OAAO;CAC1C,IAAI,CAAC,OAAO;EACV,MAAM,kBAAkB;GAAE,SAAS,IAAI;GAAS,OAAO,IAAI;EAAM,GAAG,KAAK,UAAU;EACnF,OAAO;CACT;CACA,MAAM,UAAU,MAAM,IAAI,aAAa,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,SAAS;CACnE,IAAI,CAAC,SAAS;EACZ,MAAM,kBAAkB;GAAE,SAAS,IAAI;GAAS,OAAO,IAAI;EAAM,GAAG,KAAK,UAAU;EACnF,OAAO;CACT;CACA,OAAO;EAAE;EAAO;CAAQ;AAC1B;;AAGA,SAAgB,kBAAkB,MAAgE;CAChG,OAAO,OAAO,QAA2C;EACvD,MAAM,SAAS,MAAM,cAAc,MAAM,GAAG;EAC5C,IAAI,CAAC,QACH;EAEF,MAAM,aAAa,aAAa,OAAO,QAAQ,KAAK,UAAU,IAAI;EAClE,MAAM,YAAY,MAAM,OAAO,SAAS,YAAY,OAAO,MAAM,MAAM;EACvE,MAAM,MAAkB;GAAE;GAAM,OAAO,OAAO;GAAO,SAAS,OAAO;GAAS;EAAW;EACzF,IAAK,MAAM,gBAAgB,GAAG,KAAO,MAAM,mBAAmB,GAAG,GAC/D;EAEF,MAAM,aAAa,KAAK,GAAG;CAC7B;AACF"}
+{"version":3,"file":"dispatch.mjs","names":[],"sources":["../../src/capture/dispatch.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { GitHostProvider } from \"../adapters/git-host/index.ts\";\nimport type { Logger } from \"../logger.ts\";\nimport { BuildModel, type BuildTables } from \"../models/build.ts\";\nimport {\n  CaptureAttemptModel,\n  emitAttemptLog,\n  type AttemptLogRecorder,\n  type CaptureAttemptTables,\n} from \"../models/capture-attempt.ts\";\nimport { CaptureLogModel, type CaptureLogTables } from \"../models/capture-log.ts\";\nimport { ProjectModel, type ProjectTables } from \"../models/project.ts\";\nimport type { StatusConfigTables } from \"../models/status-config.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { CaptureAttempt } from \"../schema/capture-attempt.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport type { SecretInput } from \"../utils/encrypt.ts\";\nimport { executeCaptureJob, type CaptureJobOptions } from \"./orchestrator.ts\";\nimport { hasApprovedBuildForSha, isAlreadyMerged } from \"./skip-checks.ts\";\nimport { postStatusesForBuild } from \"./status-fanout.ts\";\n\n/** Build the queue's job runner: post pending, apply skip rules, capture, report. */\nexport function createDispatchJob(deps: DispatchDeps): (job: CaptureDispatchJob) => Promise<void> {\n  return async (job: CaptureDispatchJob): Promise<void> => {\n    const target = await loadJobTarget(deps, job);\n    if (!target) {\n      return;\n    }\n    const pendingUrl = `/projects/${target.project.slug}/builds/${job.buildId}`;\n    await postPending(deps, target.project, pendingUrl, target.build.gitSha);\n    const { attempt, recordLog } = await beginAttempt(\n      deps,\n      target.project,\n      target.build,\n      job.reqId,\n    );\n    const ctx: JobContext = {\n      deps,\n      build: target.build,\n      project: target.project,\n      pendingUrl,\n      attempt,\n      recordLog,\n    };\n    if ((await maybeSkipMerged(ctx)) || (await maybeSkipDuplicate(ctx))) {\n      return;\n    }\n    await runAndReport(ctx, job);\n  };\n}\n\n/** Table handles required by dispatch. */\nexport type DispatchTables = BuildTables &\n  ProjectTables &\n  StatusConfigTables &\n  CaptureAttemptTables &\n  CaptureLogTables;\n\n/** Dependencies for building the capture queue's job runner. */\nexport interface DispatchDeps {\n  db: DatabaseAdapter;\n  tables: DispatchTables;\n  jobOptions: CaptureJobOptions;\n  gitHosts: GitHostProvider[];\n  secret: SecretInput;\n  logger: Logger;\n}\n\n/** A queued capture job. */\nexport interface CaptureDispatchJob {\n  buildId: string;\n  reqId?: string;\n  /** W3C `traceparent` continuing the enqueueing request's trace. */\n  traceparent?: string;\n}\n\ninterface JobContext {\n  deps: DispatchDeps;\n  build: Build;\n  project: Project;\n  pendingUrl: string;\n  attempt: CaptureAttempt;\n  recordLog: AttemptLogRecorder;\n}\n\n/** Open a new attempt row for this run and return its log recorder. */\nasync function beginAttempt(\n  deps: DispatchDeps,\n  project: Project,\n  build: Build,\n  reqId: string | undefined,\n): Promise<{ attempt: CaptureAttempt; recordLog: AttemptLogRecorder }> {\n  const attempts = new CaptureAttemptModel(deps.db, deps.tables);\n  const logs = new CaptureLogModel(deps.db, deps.tables);\n  const attempt = await attempts.startAttempt(project.id, build.id, reqId);\n  const recordLog: AttemptLogRecorder = async (level, message, fields) => {\n    await logs.append(project.id, build.id, attempt.id, level, message, fields);\n  };\n  await emitAttemptLog(recordLog, deps.logger, \"info\", \"capture queued\", {\n    buildId: build.id,\n    attemptNo: attempt.attemptNo,\n  });\n  return { attempt, recordLog };\n}\n\n/** Close the attempt row with its terminal status, counts, and error. */\nasync function finishAttempt(\n  ctx: JobContext,\n  status: \"completed\" | \"failed\" | \"cancelled\",\n  error?: string,\n  counts?: { storyCount: number; failedCount: number },\n): Promise<void> {\n  const { deps, attempt } = ctx;\n  await new CaptureAttemptModel(deps.db, deps.tables).markFinished(\n    attempt.id,\n    status,\n    error,\n    counts,\n  );\n  await emitAttemptLog(\n    ctx.recordLog,\n    deps.logger,\n    status === \"failed\" ? \"error\" : \"info\",\n    `capture ${status}`,\n    { attemptNo: attempt.attemptNo },\n  );\n}\n\n/** Full error text for an attempt row (message plus stack when available). */\nfunction errorText(reason: unknown): string {\n  if (reason instanceof Error) {\n    return reason.stack ?? reason.message;\n  }\n  return String(reason);\n}\n\nasync function postPending(\n  deps: DispatchDeps,\n  project: Project,\n  url: string,\n  sha: string,\n): Promise<void> {\n  await postStatusesForBuild({\n    db: deps.db,\n    tables: deps.tables,\n    project,\n    sha,\n    status: \"pending\",\n    url,\n    providers: deps.gitHosts,\n    secret: deps.secret,\n    logger: deps.logger,\n  }).catch((error: unknown) => {\n    deps.logger.error({ err: error }, \"failed to post pending status\");\n  });\n}\n\nasync function postTerminal(\n  deps: DispatchDeps,\n  project: Project,\n  url: string,\n  sha: string,\n  status: \"success\" | \"failure\",\n): Promise<void> {\n  await postStatusesForBuild({\n    db: deps.db,\n    tables: deps.tables,\n    project,\n    sha,\n    status,\n    url,\n    providers: deps.gitHosts,\n    secret: deps.secret,\n    logger: deps.logger,\n  }).catch((error: unknown) => {\n    deps.logger.error({ err: error }, \"failed to post terminal status\");\n  });\n}\n\nasync function approveWithoutCapture(ctx: JobContext, reason: string): Promise<void> {\n  const { deps, build, project, pendingUrl } = ctx;\n  deps.logger.info({ buildId: build.id, sha: build.gitSha, branch: build.gitBranch }, reason);\n  await emitAttemptLog(ctx.recordLog, deps.logger, \"info\", reason, {\n    sha: build.gitSha,\n    branch: build.gitBranch,\n  });\n  await finishAttempt(ctx, \"completed\");\n  await new BuildModel(deps.db, deps.tables).setStatus(build.id, \"approved\").catch(() => {}); // Intentionally empty — fire-and-forget\n  await postTerminal(deps, project, pendingUrl, build.gitSha, \"success\").catch(() => {}); // Intentionally empty — fire-and-forget\n}\n\nasync function maybeSkipMerged(ctx: JobContext): Promise<boolean> {\n  const { deps, build, project } = ctx;\n  if (build.isDefault) {\n    return false;\n  }\n  const merged = await isAlreadyMerged({\n    providers: deps.gitHosts,\n    sha: build.gitSha,\n    branch: build.gitBranch,\n    secret: deps.secret,\n    db: deps.db,\n    tables: deps.tables,\n    projectId: project.id,\n    logger: deps.logger,\n  }).catch(() => false);\n  if (merged) {\n    await approveWithoutCapture(ctx, \"skipping capture — already merged\");\n    return true;\n  }\n  return false;\n}\n\nasync function maybeSkipDuplicate(ctx: JobContext): Promise<boolean> {\n  const { deps, build, project } = ctx;\n  const dup = await hasApprovedBuildForSha(\n    deps.db,\n    deps.tables,\n    project.id,\n    build.gitSha,\n    build.id,\n  );\n  if (dup) {\n    await approveWithoutCapture(ctx, \"skipping capture — duplicate sha already approved\");\n    return true;\n  }\n  return false;\n}\n\n/** Map a terminal build status to its check-run state. */\nfunction terminalState(status: string | undefined): \"success\" | \"failure\" | null {\n  if (status === \"approved\") {\n    return \"success\";\n  }\n  if (status === \"rejected\" || status === \"failed\") {\n    return \"failure\";\n  }\n  return null;\n}\n\n/** Post the terminal status for a finished capture. */\nasync function reportTerminalStatus(ctx: JobContext, buildId: string): Promise<void> {\n  const { deps, build, project, pendingUrl } = ctx;\n  const updated = await new BuildModel(deps.db, deps.tables).get(buildId);\n  const terminal = terminalState(updated?.status);\n  if (terminal) {\n    await postTerminal(deps, project, pendingUrl, build.gitSha, terminal);\n  }\n}\n\nasync function runAndReport(ctx: JobContext, job: CaptureDispatchJob): Promise<void> {\n  const { deps, build } = ctx;\n  await new CaptureAttemptModel(deps.db, deps.tables).markRunning(ctx.attempt.id);\n  await emitAttemptLog(ctx.recordLog, deps.logger, \"info\", \"capture started\", {\n    buildId: build.id,\n    attemptNo: ctx.attempt.attemptNo,\n  });\n  try {\n    const summary = await executeCaptureJob(\n      {\n        buildId: job.buildId,\n        reqId: job.reqId,\n        traceparent: job.traceparent,\n        attempt: {\n          id: ctx.attempt.id,\n          attemptNo: ctx.attempt.attemptNo,\n          projectId: ctx.project.id,\n        },\n        recordLog: ctx.recordLog,\n      },\n      deps.jobOptions,\n    );\n    await finishAttempt(ctx, \"completed\", undefined, summary);\n    await reportTerminalStatus(ctx, job.buildId);\n  } catch (error: unknown) {\n    await finishAttempt(ctx, \"failed\", errorText(error));\n    await postStatusesForBuild({\n      db: deps.db,\n      tables: deps.tables,\n      project: ctx.project,\n      sha: build.gitSha,\n      status: \"failure\",\n      url: ctx.pendingUrl,\n      providers: deps.gitHosts,\n      secret: deps.secret,\n      logger: deps.logger,\n    }).catch(() => {\n      // Ignore: status post failure already logged\n    });\n    throw error;\n  }\n}\n\n/** Load the build + project for a job, running orphan jobs directly. */\nasync function loadJobTarget(\n  deps: DispatchDeps,\n  job: CaptureDispatchJob,\n): Promise<{ build: Build; project: Project } | null> {\n  const builds = new BuildModel(deps.db, deps.tables);\n  const build = await builds.get(job.buildId);\n  if (!build) {\n    await executeCaptureJob(\n      { buildId: job.buildId, reqId: job.reqId, traceparent: job.traceparent },\n      deps.jobOptions,\n    );\n    return null;\n  }\n  const project = await new ProjectModel(deps.db, deps.tables).get(build.projectId);\n  if (!project) {\n    await executeCaptureJob(\n      { buildId: job.buildId, reqId: job.reqId, traceparent: job.traceparent },\n      deps.jobOptions,\n    );\n    return null;\n  }\n  return { build, project };\n}\n"],"mappings":";;;;;;;;;;;;AAsBA,SAAgB,kBAAkB,MAAgE;CAChG,OAAO,OAAO,QAA2C;EACvD,MAAM,SAAS,MAAM,cAAc,MAAM,GAAG;EAC5C,IAAI,CAAC,QACH;EAEF,MAAM,aAAa,aAAa,OAAO,QAAQ,KAAK,UAAU,IAAI;EAClE,MAAM,YAAY,MAAM,OAAO,SAAS,YAAY,OAAO,MAAM,MAAM;EACvE,MAAM,EAAE,SAAS,cAAc,MAAM,aACnC,MACA,OAAO,SACP,OAAO,OACP,IAAI,KACN;EACA,MAAM,MAAkB;GACtB;GACA,OAAO,OAAO;GACd,SAAS,OAAO;GAChB;GACA;GACA;EACF;EACA,IAAK,MAAM,gBAAgB,GAAG,KAAO,MAAM,mBAAmB,GAAG,GAC/D;EAEF,MAAM,aAAa,KAAK,GAAG;CAC7B;AACF;;AAqCA,eAAe,aACb,MACA,SACA,OACA,OACqE;CACrE,MAAM,WAAW,IAAI,oBAAoB,KAAK,IAAI,KAAK,MAAM;CAC7D,MAAM,OAAO,IAAI,gBAAgB,KAAK,IAAI,KAAK,MAAM;CACrD,MAAM,UAAU,MAAM,SAAS,aAAa,QAAQ,IAAI,MAAM,IAAI,KAAK;CACvE,MAAM,YAAgC,OAAO,OAAO,SAAS,WAAW;EACtE,MAAM,KAAK,OAAO,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,OAAO,SAAS,MAAM;CAC5E;CACA,MAAM,eAAe,WAAW,KAAK,QAAQ,QAAQ,kBAAkB;EACrE,SAAS,MAAM;EACf,WAAW,QAAQ;CACrB,CAAC;CACD,OAAO;EAAE;EAAS;CAAU;AAC9B;;AAGA,eAAe,cACb,KACA,QACA,OACA,QACe;CACf,MAAM,EAAE,MAAM,YAAY;CAC1B,MAAM,IAAI,oBAAoB,KAAK,IAAI,KAAK,MAAM,CAAC,CAAC,aAClD,QAAQ,IACR,QACA,OACA,MACF;CACA,MAAM,eACJ,IAAI,WACJ,KAAK,QACL,WAAW,WAAW,UAAU,QAChC,WAAW,UACX,EAAE,WAAW,QAAQ,UAAU,CACjC;AACF;;AAGA,SAAS,UAAU,QAAyB;CAC1C,IAAI,kBAAkB,OACpB,OAAO,OAAO,SAAS,OAAO;CAEhC,OAAO,OAAO,MAAM;AACtB;AAEA,eAAe,YACb,MACA,SACA,KACA,KACe;CACf,MAAM,qBAAqB;EACzB,IAAI,KAAK;EACT,QAAQ,KAAK;EACb;EACA;EACA,QAAQ;EACR;EACA,WAAW,KAAK;EAChB,QAAQ,KAAK;EACb,QAAQ,KAAK;CACf,CAAC,CAAC,CAAC,OAAO,UAAmB;EAC3B,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,+BAA+B;CACnE,CAAC;AACH;AAEA,eAAe,aACb,MACA,SACA,KACA,KACA,QACe;CACf,MAAM,qBAAqB;EACzB,IAAI,KAAK;EACT,QAAQ,KAAK;EACb;EACA;EACA;EACA;EACA,WAAW,KAAK;EAChB,QAAQ,KAAK;EACb,QAAQ,KAAK;CACf,CAAC,CAAC,CAAC,OAAO,UAAmB;EAC3B,KAAK,OAAO,MAAM,EAAE,KAAK,MAAM,GAAG,gCAAgC;CACpE,CAAC;AACH;AAEA,eAAe,sBAAsB,KAAiB,QAA+B;CACnF,MAAM,EAAE,MAAM,OAAO,SAAS,eAAe;CAC7C,KAAK,OAAO,KAAK;EAAE,SAAS,MAAM;EAAI,KAAK,MAAM;EAAQ,QAAQ,MAAM;CAAU,GAAG,MAAM;CAC1F,MAAM,eAAe,IAAI,WAAW,KAAK,QAAQ,QAAQ,QAAQ;EAC/D,KAAK,MAAM;EACX,QAAQ,MAAM;CAChB,CAAC;CACD,MAAM,cAAc,KAAK,WAAW;CACpC,MAAM,IAAI,WAAW,KAAK,IAAI,KAAK,MAAM,CAAC,CAAC,UAAU,MAAM,IAAI,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC;CACzF,MAAM,aAAa,MAAM,SAAS,YAAY,MAAM,QAAQ,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC;AACvF;AAEA,eAAe,gBAAgB,KAAmC;CAChE,MAAM,EAAE,MAAM,OAAO,YAAY;CACjC,IAAI,MAAM,WACR,OAAO;CAYT,IAAI,MAViB,gBAAgB;EACnC,WAAW,KAAK;EAChB,KAAK,MAAM;EACX,QAAQ,MAAM;EACd,QAAQ,KAAK;EACb,IAAI,KAAK;EACT,QAAQ,KAAK;EACb,WAAW,QAAQ;EACnB,QAAQ,KAAK;CACf,CAAC,CAAC,CAAC,YAAY,KAAK,GACR;EACV,MAAM,sBAAsB,KAAK,mCAAmC;EACpE,OAAO;CACT;CACA,OAAO;AACT;AAEA,eAAe,mBAAmB,KAAmC;CACnE,MAAM,EAAE,MAAM,OAAO,YAAY;CAQjC,IAAI,MAPc,uBAChB,KAAK,IACL,KAAK,QACL,QAAQ,IACR,MAAM,QACN,MAAM,EACR,GACS;EACP,MAAM,sBAAsB,KAAK,mDAAmD;EACpF,OAAO;CACT;CACA,OAAO;AACT;;AAGA,SAAS,cAAc,QAA0D;CAC/E,IAAI,WAAW,YACb,OAAO;CAET,IAAI,WAAW,cAAc,WAAW,UACtC,OAAO;CAET,OAAO;AACT;;AAGA,eAAe,qBAAqB,KAAiB,SAAgC;CACnF,MAAM,EAAE,MAAM,OAAO,SAAS,eAAe;CAE7C,MAAM,WAAW,eAAc,MADT,IAAI,WAAW,KAAK,IAAI,KAAK,MAAM,CAAC,CAAC,IAAI,OAAO,EAAA,EAC9B,MAAM;CAC9C,IAAI,UACF,MAAM,aAAa,MAAM,SAAS,YAAY,MAAM,QAAQ,QAAQ;AAExE;AAEA,eAAe,aAAa,KAAiB,KAAwC;CACnF,MAAM,EAAE,MAAM,UAAU;CACxB,MAAM,IAAI,oBAAoB,KAAK,IAAI,KAAK,MAAM,CAAC,CAAC,YAAY,IAAI,QAAQ,EAAE;CAC9E,MAAM,eAAe,IAAI,WAAW,KAAK,QAAQ,QAAQ,mBAAmB;EAC1E,SAAS,MAAM;EACf,WAAW,IAAI,QAAQ;CACzB,CAAC;CACD,IAAI;EAeF,MAAM,cAAc,KAAK,aAAa,KAAA,GAAW,MAd3B,kBACpB;GACE,SAAS,IAAI;GACb,OAAO,IAAI;GACX,aAAa,IAAI;GACjB,SAAS;IACP,IAAI,IAAI,QAAQ;IAChB,WAAW,IAAI,QAAQ;IACvB,WAAW,IAAI,QAAQ;GACzB;GACA,WAAW,IAAI;EACjB,GACA,KAAK,UACP,CACwD;EACxD,MAAM,qBAAqB,KAAK,IAAI,OAAO;CAC7C,SAAS,OAAgB;EACvB,MAAM,cAAc,KAAK,UAAU,UAAU,KAAK,CAAC;EACnD,MAAM,qBAAqB;GACzB,IAAI,KAAK;GACT,QAAQ,KAAK;GACb,SAAS,IAAI;GACb,KAAK,MAAM;GACX,QAAQ;GACR,KAAK,IAAI;GACT,WAAW,KAAK;GAChB,QAAQ,KAAK;GACb,QAAQ,KAAK;EACf,CAAC,CAAC,CAAC,YAAY,CAEf,CAAC;EACD,MAAM;CACR;AACF;;AAGA,eAAe,cACb,MACA,KACoD;CAEpD,MAAM,QAAQ,MAAM,IADD,WAAW,KAAK,IAAI,KAAK,MACnB,CAAC,CAAC,IAAI,IAAI,OAAO;CAC1C,IAAI,CAAC,OAAO;EACV,MAAM,kBACJ;GAAE,SAAS,IAAI;GAAS,OAAO,IAAI;GAAO,aAAa,IAAI;EAAY,GACvE,KAAK,UACP;EACA,OAAO;CACT;CACA,MAAM,UAAU,MAAM,IAAI,aAAa,KAAK,IAAI,KAAK,MAAM,CAAC,CAAC,IAAI,MAAM,SAAS;CAChF,IAAI,CAAC,SAAS;EACZ,MAAM,kBACJ;GAAE,SAAS,IAAI;GAAS,OAAO,IAAI;GAAO,aAAa,IAAI;EAAY,GACvE,KAAK,UACP;EACA,OAAO;CACT;CACA,OAAO;EAAE;EAAO;CAAQ;AAC1B"}

package/dist/capture/guards.mjs

@@ -0,0 +1,31 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/capture/guards.ts
+/**
+* Capture output guards: a third-party runner returning garbage (or
+* gigabytes) must fail here, before bytes reach storage or baselines.
+*/
+/** Largest screenshot buffer the pipeline accepts (25 MiB). */
+const MAX_SCREENSHOT_BYTES = 26214400;
+/** PNG magic bytes every screenshot must start with. */
+const PNG_MAGIC = [
+	137,
+	80,
+	78,
+	71,
+	13,
+	10,
+	26,
+	10
+];
+/** Throw when a runner-produced screenshot is unusable or unsafe to store. */
+function assertScreenshotBuffer(buffer) {
+	if (buffer.length === 0) throw new Error("Screenshot is empty");
+	if (buffer.length > 26214400) throw new Error(`Screenshot exceeds ${MAX_SCREENSHOT_BYTES} bytes`);
+	if (!PNG_MAGIC.every((byte, index) => buffer[index] === byte)) throw new Error("Screenshot is not a PNG");
+}
+//#endregion
+export { MAX_SCREENSHOT_BYTES, assertScreenshotBuffer };
+
+//# sourceMappingURL=guards.mjs.map

package/dist/capture/guards.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.mjs","names":[],"sources":["../../src/capture/guards.ts"],"sourcesContent":["/**\n * Capture output guards: a third-party runner returning garbage (or\n * gigabytes) must fail here, before bytes reach storage or baselines.\n */\n\n/** Largest screenshot buffer the pipeline accepts (25 MiB). */\nexport const MAX_SCREENSHOT_BYTES = 25 * 1024 * 1024;\n\n/** PNG magic bytes every screenshot must start with. */\nconst PNG_MAGIC = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];\n\n/** Throw when a runner-produced screenshot is unusable or unsafe to store. */\nexport function assertScreenshotBuffer(buffer: Buffer): void {\n  if (buffer.length === 0) {\n    throw new Error(\"Screenshot is empty\");\n  }\n  if (buffer.length > MAX_SCREENSHOT_BYTES) {\n    throw new Error(`Screenshot exceeds ${MAX_SCREENSHOT_BYTES} bytes`);\n  }\n  const magic = PNG_MAGIC.every((byte, index) => buffer[index] === byte);\n  if (!magic) {\n    throw new Error(\"Screenshot is not a PNG\");\n  }\n}\n"],"mappings":";;;;;;;;;AAMA,MAAa,uBAAuB;;AAGpC,MAAM,YAAY;CAAC;CAAM;CAAM;CAAM;CAAM;CAAM;CAAM;CAAM;AAAI;;AAGjE,SAAgB,uBAAuB,QAAsB;CAC3D,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,MAAM,qBAAqB;CAEvC,IAAI,OAAO,SAAA,UACT,MAAM,IAAI,MAAM,sBAAsB,qBAAqB,OAAO;CAGpE,IAAI,CADU,UAAU,OAAO,MAAM,UAAU,OAAO,WAAW,IACxD,GACP,MAAM,IAAI,MAAM,yBAAyB;AAE7C"}

package/dist/capture/orchestrator.d.mts

@@ -4,29 +4,64 @@ import { Viewport } from "./adapter.mjs";
 import { CaptureRunner } from "../adapter/capture-runner.mjs";
 import { DatabaseAdapter } from "../adapter/database.mjs";
 import { StorageAdapter } from "../adapter/storage.mjs";
+import { SecretInput } from "../utils/encrypt.mjs";
+import { BuildTables } from "../models/build.mjs";
+import { AttemptLogRecorder, CaptureAttemptTables } from "../models/capture-attempt.mjs";
+import { CaptureLogTables } from "../models/capture-log.mjs";
+import { ProjectTables } from "../models/project.mjs";
+import { PipelineTables } from "./pipeline.mjs";
 import { Logger } from "pino";
 //#region src/capture/orchestrator.d.ts
+/** Table handles required by the orchestrator. */
+type OrchestratorTables = BuildTables & ProjectTables & PipelineTables & CaptureAttemptTables & CaptureLogTables;
 /** Inputs for running a capture job against a Storybook build. */
 interface CaptureJobOptions {
   db: DatabaseAdapter;
+  tables: OrchestratorTables;
   storage: StorageAdapter;
   runner: CaptureRunner;
   scratchDir: string;
   viewports?: Viewport[];
   logger?: Logger;
   /** Server secret for decrypting webhook secrets at send time. */
-  secret?: string | undefined;
+  secret?: SecretInput;
+  /** Render budget override (tests use a short fuse). */
+  renderTimeoutMs?: number | undefined;
+}
+/** Pointer to the attempt row owning this run's log history. */
+interface CaptureAttemptRef {
+  id: string;
+  attemptNo: number;
+  projectId: string;
+}
+/** Inputs for running a capture job against a Storybook build. */
+interface CaptureJobInput {
+  buildId: string;
+  reqId?: string;
+  /**
+   * W3C `traceparent` from the enqueueing request or queue payload.
+   * Continues the inbound trace instead of starting a root span.
+   */
+  traceparent?: string;
+  /** Attempt row owning this run; when omitted no per-attempt logs are stored. */
+  attempt?: CaptureAttemptRef;
+  /** Recorder mirroring phase logs into the attempt's log history. */
+  recordLog?: AttemptLogRecorder;
 }
 /**
  * Run the full capture for a build: extract, render, persist, and finalize.
  *
+ * The run executes inside a `capture.job` span (continuing `input.traceparent`
+ * when present) with one child span per pipeline phase.
+ *
  * @param input - Build id plus the originating request id.
  * @param options - Adapters, scratch dir, viewports, and logger.
+ * @returns Story and blocking-failure counts for the attempt row.
  */
-declare function executeCaptureJob(input: {
-  buildId: string;
-  reqId?: string;
-}, options: CaptureJobOptions): Promise<void>;
+declare function executeCaptureJob(input: CaptureJobInput, options: CaptureJobOptions): Promise<{
+  storyCount: number;
+  failedCount: number;
+}>;
 //#endregion
-export { CaptureJobOptions, executeCaptureJob };
+export { CaptureAttemptRef, CaptureJobInput, CaptureJobOptions, OrchestratorTables, executeCaptureJob };
 //# sourceMappingURL=orchestrator.d.mts.map

package/dist/capture/orchestrator.mjs

@@ -1,90 +1,213 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { DEFAULT_VIEWPORTS, isDisabledStory, isFlakyStory } from "./adapter.mjs";
 import { BuildModel } from "../models/build.mjs";
+import { emitAttemptLog } from "../models/capture-attempt.mjs";
 import { ProjectModel } from "../models/project.mjs";
-import { DEFAULT_VIEWPORTS, isDisabledStory, isFlakyStory } from "./adapter.mjs";
+import { parentContext, withSpan } from "../tracing.mjs";
+import { roundedTimings, runWithTimings, timed } from "../utils/timing.mjs";
+import { StorybookAdapter } from "./storybook.mjs";
+import { partitionAffectedStories } from "./affected.mjs";
+import { resolveViewports } from "./sizing.mjs";
 import { persistCapture } from "./pipeline.mjs";
 import { extractStorybookToScratch, persistStorybookStatics } from "./statics.mjs";
-import { StorybookAdapter } from "./storybook.mjs";
 //#region src/capture/orchestrator.ts
+/** Default budget for one render call before the orchestrator cancels it. */
+const RENDER_TIMEOUT_MS = 9e5;
+/** Failure error text cap (persisted rows and logs stay bounded). */
+const FAILURE_ERROR_MAX = 500;
+/** Cap failure error text so one chatty runner cannot flood rows and logs. */
+function capFailures(result) {
+	return {
+		captures: result.captures,
+		failures: result.failures.map((failure) => ({
+			...failure,
+			error: failure.error.length > FAILURE_ERROR_MAX ? failure.error.slice(0, FAILURE_ERROR_MAX) : failure.error
+		}))
+	};
+}
+/** Render with a timeout; cancels the runner when the budget expires. */
+async function renderWithTimeout(runner, request, timeoutMs) {
+	let timedOut = false;
+	let timer;
+	const timeout = new Promise((_, reject) => {
+		timer = setTimeout(() => {
+			timedOut = true;
+			reject(/* @__PURE__ */ new Error(`Render timed out after ${timeoutMs}ms`));
+		}, timeoutMs);
+	});
+	timer?.unref?.();
+	try {
+		return capFailures(await Promise.race([runner.render(request), timeout]));
+	} catch (error) {
+		if (timedOut) await runner.cancel(request.buildId).catch(() => {});
+		throw error;
+	} finally {
+		clearTimeout(timer);
+	}
+}
 /**
 * Run the full capture for a build: extract, render, persist, and finalize.
 *
+* The run executes inside a `capture.job` span (continuing `input.traceparent`
+* when present) with one child span per pipeline phase.
+*
 * @param input - Build id plus the originating request id.
 * @param options - Adapters, scratch dir, viewports, and logger.
+* @returns Story and blocking-failure counts for the attempt row.
 */
 async function executeCaptureJob(input, options) {
-	const builds = new BuildModel(options.db);
+	const builds = new BuildModel(options.db, options.tables);
 	const { build, project } = await loadTarget(options, input.buildId);
+	return await withSpan("capture.job", async () => {
+		const { result, timings } = await runWithTimings(async () => await runCapturePhases(input, options, builds, build, project));
+		options.logger?.child({
+			buildId: build.id,
+			...input.reqId ? { reqId: input.reqId } : {}
+		})?.info({ timings: roundedTimings(timings) }, "capture timings");
+		return result;
+	}, {
+		"storyshelf.build_id": build.id,
+		...input.reqId ? { "storyshelf.req_id": input.reqId } : {},
+		...input.attempt ? { "storyshelf.attempt_no": input.attempt.attemptNo } : {}
+	}, parentContext(input.traceparent));
+}
+/** Execute the phase pipeline inside the `capture.job` span. */
+async function runCapturePhases(input, options, builds, build, project) {
 	const logger = options.logger?.child({
 		buildId: input.buildId,
-		reqId: input.reqId
+		reqId: input.reqId,
+		...input.attempt ? { attemptNo: input.attempt.attemptNo } : {}
 	});
 	await builds.setStatus(build.id, "capturing");
 	const startTime = performance.now();
 	let extractedDir;
 	try {
 		const extractStart = performance.now();
-		extractedDir = await extractStorybookToScratch(options.storage, options.scratchDir, project.id, build.id);
+		extractedDir = await timed("capture.extract", async () => await withSpan("capture.extract", async () => {
+			return await extractStorybookToScratch(options.storage, options.scratchDir, project.id, build.id);
+		}));
 		const extractDuration = performance.now() - extractStart;
 		logger?.info({ durationMs: Math.round(extractDuration) }, "storybook extracted");
+		await emitAttemptLog(input.recordLog, logger, "info", "storybook extracted", { durationMs: Math.round(extractDuration) });
+		const storybookDir = extractedDir;
 		const staticsStart = performance.now();
-		await persistStorybookStatics(options.storage, extractedDir, project.id, build.id);
+		await timed("capture.persist-statics", async () => await withSpan("capture.persist-statics", async () => {
+			await persistStorybookStatics(options.storage, storybookDir, project.id, build.id);
+		}));
 		logger?.info({ durationMs: Math.round(performance.now() - staticsStart) }, "storybook statics persisted");
+		await emitAttemptLog(input.recordLog, logger, "info", "storybook statics persisted", { durationMs: Math.round(performance.now() - staticsStart) });
 		const stories = (await new StorybookAdapter().discover(extractedDir)).filter((s) => !isDisabledStory(s));
-		const viewports = options.viewports ?? DEFAULT_VIEWPORTS;
-		const renderStart = performance.now();
-		const result = await options.runner.render({
-			buildId: build.id,
-			storybookDir: extractedDir,
+		const rawViewports = project.viewports;
+		const viewports = resolveViewports(rawViewports, DEFAULT_VIEWPORTS, options.viewports);
+		const browser = project.browser;
+		const partition = await partitionAffectedStories({
+			db: options.db,
+			tables: options.tables,
+			projectId: project.id,
+			branch: build.gitBranch,
+			defaultBranch: project.gitDefaultBranch,
 			stories,
 			viewports,
-			logger,
-			executePlay: project.executePlay ?? false,
-			playTimeoutMs: project.playTimeoutMs ?? 1e4
+			affectedPaths: affectedPathsFor(build)
 		});
+		logger?.info({
+			rendered: partition.render.length,
+			inherited: partition.inherited.length,
+			total: stories.length
+		}, "affected capture partitioned");
+		await emitAttemptLog(input.recordLog, logger, "info", "affected capture partitioned", {
+			rendered: partition.render.length,
+			inherited: partition.inherited.length,
+			total: stories.length
+		});
+		const renderStart = performance.now();
+		const renderTimeoutMs = options.renderTimeoutMs ?? 9e5;
+		const result = await timed("capture.render", async () => await withSpan("capture.render", async () => {
+			if (partition.render.length === 0) return {
+				captures: [],
+				failures: []
+			};
+			return await renderWithTimeout(options.runner, {
+				buildId: build.id,
+				storybookDir,
+				stories: partition.render,
+				viewports,
+				logger,
+				executePlay: project.executePlay ?? false,
+				playTimeoutMs: project.playTimeoutMs ?? 1e4,
+				runA11y: project.runA11y ?? false,
+				browser: browser ?? "chromium"
+			}, renderTimeoutMs);
+		}, { "storyshelf.render_count": partition.render.length }));
 		const renderDuration = performance.now() - renderStart;
 		logger?.info({
 			durationMs: Math.round(renderDuration),
 			storyCount: stories.length
 		}, "stories rendered");
+		await emitAttemptLog(input.recordLog, logger, "info", "stories rendered", {
+			durationMs: Math.round(renderDuration),
+			storyCount: stories.length
+		});
 		const flakyStoryIds = new Set(stories.filter((s) => isFlakyStory(s)).map((s) => s.id));
 		const blockingFailed = /* @__PURE__ */ new Set();
 		const flakyFailed = /* @__PURE__ */ new Set();
-		for (const f of result.failures) if (flakyStoryIds.has(f.storyId)) flakyFailed.add(f.storyId);
+		const a11yFailed = /* @__PURE__ */ new Set();
+		for (const f of result.failures) if (f.error.startsWith("a11y:")) a11yFailed.add(f.storyId);
+		else if (flakyStoryIds.has(f.storyId)) flakyFailed.add(f.storyId);
 		else blockingFailed.add(f.storyId);
 		const persistStart = performance.now();
-		await persistCapture({
-			db: options.db,
-			storage: options.storage,
-			project,
-			build,
-			viewports,
-			captures: result.captures,
-			logger,
-			secret: options.secret
-		}, blockingFailed, flakyFailed);
+		await timed("capture.persist", async () => await withSpan("capture.persist", async () => {
+			await persistCapture({
+				db: options.db,
+				tables: options.tables,
+				storage: options.storage,
+				project,
+				build,
+				viewports,
+				captures: result.captures,
+				inherited: partition.inherited,
+				logger,
+				recordLog: input.recordLog,
+				secret: options.secret
+			}, blockingFailed, flakyFailed, a11yFailed);
+		}));
 		const persistDuration = performance.now() - persistStart;
 		logger?.info({ durationMs: Math.round(persistDuration) }, "capture persisted");
+		await emitAttemptLog(input.recordLog, logger, "info", "capture persisted", { durationMs: Math.round(persistDuration) });
 		const totalDuration = performance.now() - startTime;
 		logger?.info({ durationMs: Math.round(totalDuration) }, "capture completed");
+		await emitAttemptLog(input.recordLog, logger, "info", "capture completed", { durationMs: Math.round(totalDuration) });
+		return {
+			storyCount: stories.length,
+			failedCount: blockingFailed.size
+		};
 	} catch (error) {
 		const totalDuration = performance.now() - startTime;
 		logger?.error({
 			durationMs: Math.round(totalDuration),
 			err: error
 		}, "capture failed");
+		await emitAttemptLog(input.recordLog, logger, "error", "capture failed", { durationMs: Math.round(totalDuration) });
 		await builds.setStatus(build.id, "failed").catch((markError) => {
 			logger?.error({ err: markError }, "failed to mark build failed after capture error");
 		});
 		throw error;
 	}
 }
+/**
+* Resolve the affected import paths for a build, or `null` for full capture
+* (affected capture disabled, or no computation was posted).
+*/
+function affectedPathsFor(build) {
+	if (!build.affectedOnly) return null;
+	return BuildModel.affectedPaths(build);
+}
 async function loadTarget(options, buildId) {
-	const build = await new BuildModel(options.db).get(buildId);
+	const build = await new BuildModel(options.db, options.tables).get(buildId);
 	if (!build) throw new Error(`Build not found: ${buildId}`);
-	const project = await new ProjectModel(options.db).get(build.projectId);
+	const project = await new ProjectModel(options.db, options.tables).get(build.projectId);
 	if (!project) throw new Error(`Project not found: ${build.projectId}`);
 	return {
 		build,
@@ -92,6 +215,6 @@ async function loadTarget(options, buildId) {
 	};
 }
 //#endregion
-export { executeCaptureJob };
+export { RENDER_TIMEOUT_MS, executeCaptureJob };
 
 //# sourceMappingURL=orchestrator.mjs.map