@storyshelf/core 0.6.1 → 0.7.0

package/dist/config.mjs

@@ -1,6 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { DEFAULT_SCRATCH_DIR, resolveShelfOptions } from "./options.mjs";
+import { ALLOW_SERVERLESS_ENV, assertServerless, isServerlessHost } from "./serverless.mjs";
 import { z } from "zod";
 //#region src/config.ts
 /** Default cap for a single Storybook zip upload (1 GiB). */
@@ -48,7 +50,7 @@ const adapterSnapshotSchema = z.object({
 		"storage",
 		"capture-runner",
 		"capture-queue",
-		"git-host",
+		"design",
 		"notifier"
 	])
 });
@@ -62,6 +64,7 @@ const authUiConfigSchema = z.object({
 	helpText: z.string().optional(),
 	footerText: z.string().optional()
 });
+/** Zod schema validating `notifications.config`. */
 const notificationsConfigSchema = z.object({
 	fromEmail: z.string().min(1).optional(),
 	fromName: z.string().min(1).optional(),
@@ -76,17 +79,17 @@ const shelfConfigSchema = z.object({
 	adminToken: z.string().min(1).optional(),
 	publishedBaseDomain: z.string().optional(),
 	publicBaseUrl: z.string().url().optional(),
-	captureConcurrency: z.number().int().positive().optional(),
 	scratchDir: z.string().optional(),
 	purgeTtlDays: z.number().int().positive().optional(),
 	branchTtlDays: z.number().int().positive().nullable().optional(),
 	branchGcIntervalMs: z.number().int().positive().optional(),
 	maxUploadBytes: z.number().int().positive().optional(),
 	serverTiming: z.boolean().optional(),
-	maxInlineUnzipSize: z.number().int().positive().optional(),
+	maxInlineUnzipSize: z.number().int().min(0).optional(),
+	maxZipEntries: z.number().int().positive().optional(),
+	maxUnzippedBytes: z.number().int().positive().optional(),
 	viewports: z.array(viewportSchema).min(1, "at least one viewport required").optional(),
-	adapters: z.record(z.string(), adapterSnapshotSchema).optional(),
-	notifications: notificationsConfigSchema.optional()
+	adapters: z.record(z.string(), adapterSnapshotSchema).optional()
 }).strict().superRefine((config, ctx) => {
 	if (config.previousSecret !== void 0 && config.secret === void 0) ctx.addIssue({
 		code: "custom",
@@ -137,6 +140,6 @@ function validateUiConfig(config) {
 	return result.data;
 }
 //#endregion
-export { DEFAULT_MAX_UPLOAD_BYTES, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig };
+export { ALLOW_SERVERLESS_ENV, DEFAULT_MAX_UPLOAD_BYTES, DEFAULT_SCRATCH_DIR, assertServerless, isServerlessHost, notificationsConfigSchema, resolveShelfOptions, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig };
 
 //# sourceMappingURL=config.mjs.map

package/dist/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { Logger } from \"pino\";\nimport { z } from \"zod\";\nimport type { CaptureQueue } from \"./adapters/capture-queue.ts\";\nimport type { CaptureRunner } from \"./adapters/capture-runner.ts\";\nimport type { DatabaseAdapter } from \"./adapters/database.ts\";\nimport type { EmailSender } from \"./adapters/email-sender.ts\";\nimport type { GitHostProvider } from \"./adapters/git-host/index.ts\";\nimport type { AdapterCategory } from \"./adapters/metadata.ts\";\nimport type { NotifierProvider } from \"./adapters/notifier/provider.ts\";\nimport type { StorageAdapter } from \"./adapters/storage.ts\";\nimport type { Auth } from \"./auth.ts\";\n\n/** Brand color theme for the server-rendered UI. */\nexport interface BrandTheme {\n  accent: string;\n  accentContrast?: string;\n  ring?: string;\n  surface: { base: string; card: string; muted?: string; subtle?: string };\n  text: { primary: string; secondary: string; muted?: string };\n  border: string;\n  borderSubtle?: string;\n  status: { approved: string; new: string; rejected: string };\n  sidebarBg?: string;\n  topbarBg?: string;\n  radius?: string;\n  radiusSm?: string;\n  shadow?: string;\n}\n\n/** Text overrides for the auth (login) UI. */\nexport interface AuthUiConfig {\n  /** Page title, default \"Sign in\". */\n  title?: string;\n  /** Optional subtitle under the title. */\n  subtitle?: string;\n  /** Password field label, default \"Password\". */\n  passwordLabel?: string;\n  /** Password field placeholder. */\n  passwordPlaceholder?: string;\n  /** Submit button label, default \"Sign in\". */\n  submitLabel?: string;\n  /**\n   * Template for SSO buttons, default \"Sign in with {label}\".\n   * Must contain \"{label}\" which is replaced with the provider label.\n   */\n  ssoLabelTemplate?: string;\n  /** Help text shown under the form. */\n  helpText?: string;\n  /** Footer text shown at the bottom of the card. */\n  footerText?: string;\n}\n\n/** Branding overrides for the server-rendered UI. */\nexport interface UIConfig {\n  name?: string;\n  logo?: string;\n  /**\n   * @deprecated Ignored. The favicon is the product's own mark, served by the\n   * app itself; set `logo` to rebrand the sidebar instead.\n   */\n  favicon?: string;\n  lightTheme?: BrandTheme;\n  darkTheme?: BrandTheme;\n  auth?: AuthUiConfig;\n}\n\n/** Default cap for a single Storybook zip upload (1 GiB). */\nexport const DEFAULT_MAX_UPLOAD_BYTES = 1024 * 1024 * 1024;\n\n/** A viewport in which stories are captured. */\nexport interface ShelfViewport {\n  name: string;\n  width: number;\n  height: number;\n}\n\n/** Metadata snapshot of a configured adapter. */\nexport interface AdapterSnapshot {\n  name: string;\n  version: string;\n  description?: string;\n  kind: string;\n  category: AdapterCategory;\n}\n\n/** Site-wide notification defaults (brand + sender identity for admin alerts). */\nexport interface NotificationsConfig {\n  fromEmail?: string;\n  fromName?: string;\n  footerText?: string;\n  slackUsername?: string;\n}\n/** Shelf-level configuration (validated by {@link shelfConfigSchema}). */\nexport interface ShelfConfig {\n  secret?: string;\n  /**\n   * The secret `secret` replaced. Used only to decrypt stored credentials\n   * (webhook, git-token, and notification secrets) written before a rotation;\n   * new writes always use `secret`. Remove once credentials are re-encrypted.\n   */\n  previousSecret?: string;\n  /**\n   * Re-encrypt credentials still under `previousSecret` at boot. Default false:\n   * site admins can run it from the System page instead. No effect without\n   * `previousSecret`.\n   */\n  migrateCredentialsOnBoot?: boolean;\n  /**\n   * Bootstrap site-admin bearer token (`STORYSHELF_ADMIN_TOKEN`/`ADMIN_TOKEN`).\n   * Grants site-admin API access when no admin user exists yet; never\n   * mint sessions from it. Distinct from `secret` (session signing).\n   */\n  adminToken?: string;\n  publishedBaseDomain?: string;\n  /**\n   * Public base URL of this deployment (e.g. `https://shelf.example.com`).\n   * Used as the issuer in the `/.well-known/openid-configuration` relying-party\n   * helper document; falls back to the request origin when unset.\n   */\n  publicBaseUrl?: string;\n  captureConcurrency?: number;\n  scratchDir?: string;\n  purgeTtlDays?: number;\n  /** Branch baseline TTL, days; null disables branch GC (default 30). */\n  branchTtlDays?: number | null;\n  /** Branch GC interval, ms; daily sweep via interval clock (default 86_400_000). */\n  branchGcIntervalMs?: number;\n  maxUploadBytes?: number;\n  /**\n   * Emit `Server-Timing` response headers (total + db/storage roll-ups).\n   * Opt-in, off by default — some deployments prefer no timing headers.\n   */\n  serverTiming?: boolean;\n  /**\n   * Max zip size (bytes) eligible for inline statics extraction at upload.\n   * Unset (or 0) disables inline extraction — statics land via capture.\n   */\n  maxInlineUnzipSize?: number;\n  viewports?: ShelfViewport[];\n  adapters?: Record<string, AdapterSnapshot>;\n  notifications?: NotificationsConfig;\n}\n\nconst viewportSchema: z.ZodType<ShelfViewport> = z.object({\n  name: z.string().min(1),\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n});\n\nconst brandThemeSchema: z.ZodType<BrandTheme> = z.object({\n  accent: z.string(),\n  accentContrast: z.string().optional(),\n  ring: z.string().optional(),\n  surface: z.object({\n    base: z.string(),\n    card: z.string(),\n    muted: z.string().optional(),\n    subtle: z.string().optional(),\n  }),\n  text: z.object({ primary: z.string(), secondary: z.string(), muted: z.string().optional() }),\n  border: z.string(),\n  borderSubtle: z.string().optional(),\n  status: z.object({ approved: z.string(), new: z.string(), rejected: z.string() }),\n  sidebarBg: z.string().optional(),\n  topbarBg: z.string().optional(),\n  radius: z.string().optional(),\n  radiusSm: z.string().optional(),\n  shadow: z.string().optional(),\n});\n\nconst adapterSnapshotSchema: z.ZodType<AdapterSnapshot> = z.object({\n  name: z.string(),\n  version: z.string(),\n  description: z.string().optional(),\n  kind: z.string(),\n  category: z.enum([\n    \"database\",\n    \"storage\",\n    \"capture-runner\",\n    \"capture-queue\",\n    \"git-host\",\n    \"notifier\",\n  ]),\n});\n\nconst authUiConfigSchema: z.ZodType<AuthUiConfig> = z.object({\n  title: z.string().min(1).optional(),\n  subtitle: z.string().optional(),\n  passwordLabel: z.string().min(1).optional(),\n  passwordPlaceholder: z.string().optional(),\n  submitLabel: z.string().min(1).optional(),\n  ssoLabelTemplate: z.string().min(1).optional(),\n  helpText: z.string().optional(),\n  footerText: z.string().optional(),\n});\n\nconst notificationsConfigSchema: z.ZodType<NotificationsConfig> = z.object({\n  fromEmail: z.string().min(1).optional(),\n  fromName: z.string().min(1).optional(),\n  footerText: z.string().min(1).optional(),\n  slackUsername: z.string().min(1).optional(),\n});\n\n/** Zod schema validating the shelf-level configuration. */\nexport const shelfConfigSchema: z.ZodType<ShelfConfig> = z\n  .object({\n    secret: z.string().min(1).optional(),\n    previousSecret: z.string().min(1).optional(),\n    migrateCredentialsOnBoot: z.boolean().optional(),\n    adminToken: z.string().min(1).optional(),\n    publishedBaseDomain: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    publicBaseUrl: z.string().url().optional(),\n    captureConcurrency: z.number().int().positive().optional(),\n    scratchDir: z.string().optional(),\n    purgeTtlDays: z.number().int().positive().optional(),\n    branchTtlDays: z.number().int().positive().nullable().optional(),\n    branchGcIntervalMs: z.number().int().positive().optional(),\n    maxUploadBytes: z.number().int().positive().optional(),\n    serverTiming: z.boolean().optional(),\n    maxInlineUnzipSize: z.number().int().positive().optional(),\n    viewports: z.array(viewportSchema).min(1, \"at least one viewport required\").optional(),\n    adapters: z.record(z.string(), adapterSnapshotSchema).optional(),\n    notifications: notificationsConfigSchema.optional(),\n  })\n  .strict()\n  .superRefine((config, ctx) => {\n    if (config.previousSecret !== undefined && config.secret === undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret requires secret\",\n      });\n    }\n    if (config.previousSecret !== undefined && config.previousSecret === config.secret) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret must differ from secret\",\n      });\n    }\n  });\n\n/** Zod schema validating the UI branding configuration. */\nexport const uiConfigSchema: z.ZodType<UIConfig> = z\n  .object({\n    name: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    logo: z.string().url().optional(),\n    // Accepted but ignored (see UIConfig.favicon) so existing configs keep\n    // validating under .strict().\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    favicon: z.string().url().optional(),\n    lightTheme: brandThemeSchema.optional(),\n    darkTheme: brandThemeSchema.optional(),\n    auth: authUiConfigSchema.optional(),\n  })\n  .strict();\n\n/**\n * Parse and validate a raw shelf-level configuration object.\n *\n * @param config - Unvalidated configuration record.\n * @returns The validated shelf configuration.\n */\nexport function validateConfig(config: Record<string, unknown>): ShelfConfig {\n  const result = shelfConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid ShelfConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Parse and validate a raw UI branding configuration object.\n *\n * @param config - Unvalidated UI configuration record.\n * @returns The validated UI configuration.\n */\nexport function validateUiConfig(config: Record<string, unknown>): UIConfig {\n  const result = uiConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid UIConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/** Adapter and configuration options for creating the shelf router. */\nexport interface ShelfOptions {\n  database: DatabaseAdapter;\n  storage: StorageAdapter;\n  captureRunner?: CaptureRunner;\n  captureQueue?: CaptureQueue;\n  auth?: Auth;\n  gitHosts?: GitHostProvider[];\n  notifiers?: NotifierProvider[];\n  emailSender?: EmailSender;\n  logger?: Logger;\n  ui?: UIConfig;\n  config?: ShelfConfig;\n  /**\n   * Externally-managed observability SDK handle (e.g. from\n   * `initObservabilityFromEnv`). Structural — core never imports the\n   * observability package. Flushed on `app.lifecycle.teardown()`.\n   */\n  observability?: ObservabilityHandle;\n}\n\n/**\n * Shutdown hook for an externally-managed observability SDK.\n * Structural so core stays dependency-free.\n */\nexport interface ObservabilityHandle {\n  /** Flush exporters and release SDK resources. Must be idempotent. */\n  shutdown(): Promise<void>;\n}\n"],"mappings":";;;;;;AAmEA,MAAa,2BAA2B;AA4ExC,MAAM,iBAA2C,EAAE,OAAO;CACxD,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACjC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;AACpC,CAAC;AAED,MAAM,mBAA0C,EAAE,OAAO;CACvD,QAAQ,EAAE,OAAO;CACjB,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAAS,EAAE,OAAO;EAChB,MAAM,EAAE,OAAO;EACf,MAAM,EAAE,OAAO;EACf,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,CAAC;CACD,MAAM,EAAE,OAAO;EAAE,SAAS,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAAE,CAAC;CAC3F,QAAQ,EAAE,OAAO;CACjB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,QAAQ,EAAE,OAAO;EAAE,UAAU,EAAE,OAAO;EAAG,KAAK,EAAE,OAAO;EAAG,UAAU,EAAE,OAAO;CAAE,CAAC;CAChF,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAED,MAAM,wBAAoD,EAAE,OAAO;CACjE,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,MAAM,EAAE,OAAO;CACf,UAAU,EAAE,KAAK;EACf;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH,CAAC;AAED,MAAM,qBAA8C,EAAE,OAAO;CAC3D,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAClC,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC1C,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CACzC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC7C,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;AAED,MAAM,4BAA4D,EAAE,OAAO;CACzE,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACtC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAC5C,CAAC;;AAGD,MAAa,oBAA4C,EACtD,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACnC,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC3C,0BAA0B,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC/C,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CAEzC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACzC,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzD,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACnD,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC/D,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzD,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACrD,cAAc,EAAE,QAAQ,CAAC,CAAC,SAAS;CACnC,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzD,WAAW,EAAE,MAAM,cAAc,CAAC,CAAC,IAAI,GAAG,gCAAgC,CAAC,CAAC,SAAS;CACrF,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,qBAAqB,CAAC,CAAC,SAAS;CAC/D,eAAe,0BAA0B,SAAS;AACpD,CAAC,CAAC,CACD,OAAO,CAAC,CACR,aAAa,QAAQ,QAAQ;CAC5B,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,WAAW,KAAA,GAC3D,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;CAEH,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,mBAAmB,OAAO,QAC1E,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;AAEL,CAAC;;AAGH,MAAa,iBAAsC,EAChD,OAAO;CACN,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAE1B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAIhC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACnC,YAAY,iBAAiB,SAAS;CACtC,WAAW,iBAAiB,SAAS;CACrC,MAAM,mBAAmB,SAAS;AACpC,CAAC,CAAC,CACD,OAAO;;;;;;;AAQV,SAAgB,eAAe,QAA8C;CAC3E,MAAM,SAAS,kBAAkB,UAAU,MAAM;CACjD,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,wBAAwB,QAAQ;CAClD;CACA,OAAO,OAAO;AAChB;;;;;;;AAQA,SAAgB,iBAAiB,QAA2C;CAC1E,MAAM,SAAS,eAAe,UAAU,MAAM;CAC9C,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,qBAAqB,QAAQ;CAC/C;CACA,OAAO,OAAO;AAChB"}
+{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { Logger } from \"pino\";\nimport { z } from \"zod\";\nimport type { CaptureRunner } from \"./adapters/capture-runner.ts\";\nimport type { DatabaseAdapter } from \"./adapters/database.ts\";\nimport type { DesignProvider } from \"./adapters/design.ts\";\nimport type { EmailSender } from \"./adapters/email-sender.ts\";\nimport type { AdapterCategory } from \"./adapters/metadata.ts\";\nimport type { NotifierProvider } from \"./adapters/notifier/provider.ts\";\nimport type { StorageAdapter } from \"./adapters/storage.ts\";\nimport type { Ai } from \"./ai.ts\";\nimport type { Auth } from \"./auth.ts\";\n\n/** Brand color theme for the server-rendered UI. */\nexport interface BrandTheme {\n  accent: string;\n  accentContrast?: string;\n  ring?: string;\n  surface: { base: string; card: string; muted?: string; subtle?: string };\n  text: { primary: string; secondary: string; muted?: string };\n  border: string;\n  borderSubtle?: string;\n  status: { approved: string; new: string; rejected: string };\n  sidebarBg?: string;\n  topbarBg?: string;\n  radius?: string;\n  radiusSm?: string;\n  shadow?: string;\n}\n\n/** Text overrides for the auth (login) UI. */\nexport interface AuthUiConfig {\n  /** Page title, default \"Sign in\". */\n  title?: string;\n  /** Optional subtitle under the title. */\n  subtitle?: string;\n  /** Password field label, default \"Password\". */\n  passwordLabel?: string;\n  /** Password field placeholder. */\n  passwordPlaceholder?: string;\n  /** Submit button label, default \"Sign in\". */\n  submitLabel?: string;\n  /**\n   * Template for SSO buttons, default \"Sign in with {label}\".\n   * Must contain \"{label}\" which is replaced with the provider label.\n   */\n  ssoLabelTemplate?: string;\n  /** Help text shown under the form. */\n  helpText?: string;\n  /** Footer text shown at the bottom of the card. */\n  footerText?: string;\n}\n\n/** Branding overrides for the server-rendered UI. */\nexport interface UIConfig {\n  name?: string;\n  logo?: string;\n  /**\n   * @deprecated Ignored. The favicon is the product's own mark, served by the\n   * app itself; set `logo` to rebrand the sidebar instead.\n   */\n  favicon?: string;\n  lightTheme?: BrandTheme;\n  darkTheme?: BrandTheme;\n  auth?: AuthUiConfig;\n}\n\n/** Default cap for a single Storybook zip upload (1 GiB). */\nexport const DEFAULT_MAX_UPLOAD_BYTES = 1024 * 1024 * 1024;\n\n/** A viewport in which stories are captured. */\nexport interface ShelfViewport {\n  name: string;\n  width: number;\n  height: number;\n}\n\n/** Metadata snapshot of a configured adapter. */\nexport interface AdapterSnapshot {\n  name: string;\n  version: string;\n  description?: string;\n  kind: string;\n  category: AdapterCategory;\n}\n\n/** Site-wide notification defaults (brand + sender identity for admin alerts). */\nexport interface NotificationsConfig {\n  fromEmail?: string;\n  fromName?: string;\n  footerText?: string;\n  slackUsername?: string;\n}\n/** Shelf-level configuration (validated by {@link shelfConfigSchema}). */\nexport interface ShelfConfig {\n  secret?: string;\n  /**\n   * The secret `secret` replaced. Used only to decrypt stored credentials\n   * (webhook, git-token, and notification secrets) written before a rotation;\n   * new writes always use `secret`. Remove once credentials are re-encrypted.\n   */\n  previousSecret?: string;\n  /**\n   * Re-encrypt credentials still under `previousSecret` at boot. Default false:\n   * site admins can run it from the System page instead. No effect without\n   * `previousSecret`.\n   */\n  migrateCredentialsOnBoot?: boolean;\n  /**\n   * Bootstrap site-admin bearer token (`STORYSHELF_ADMIN_TOKEN`/`ADMIN_TOKEN`).\n   * Grants site-admin API access when no admin user exists yet; never\n   * mint sessions from it. Distinct from `secret` (session signing).\n   */\n  adminToken?: string;\n  publishedBaseDomain?: string;\n  /**\n   * Public base URL of this deployment (e.g. `https://shelf.example.com`).\n   * Used as the issuer in the `/.well-known/openid-configuration` relying-party\n   * helper document; falls back to the request origin when unset.\n   */\n  publicBaseUrl?: string;\n  /**\n   * Working directory for capture and inline statics extraction. Defaults to\n   * `<os.tmpdir()>/storyshelf`; publishing and capture extract there.\n   */\n  scratchDir?: string;\n  purgeTtlDays?: number;\n  /** Branch baseline TTL, days; null disables branch GC (default 30). */\n  branchTtlDays?: number | null;\n  /** Branch GC interval, ms; daily sweep via interval clock (default 86_400_000). */\n  branchGcIntervalMs?: number;\n  maxUploadBytes?: number;\n  /**\n   * Emit `Server-Timing` response headers (total + db/storage roll-ups).\n   * Opt-in, off by default — some deployments prefer no timing headers.\n   */\n  serverTiming?: boolean;\n  /**\n   * Largest zip (bytes) extracted inline in the upload request; a larger zip is published by a\n   * `publish` job (or refused with 413 on a host that runs no consumer). The count is taken\n   * while the upload streams, never from `Content-Length`. Default 50 MB; `0` sends every zip to\n   * a `publish` job.\n   */\n  maxInlineUnzipSize?: number;\n  /** Most entries an uploaded Storybook zip may hold (default 50 000); more fails the publish. */\n  maxZipEntries?: number;\n  /**\n   * Most uncompressed bytes an uploaded Storybook zip may expand to (default 2 GiB), counted while\n   * extracting; more fails the publish. The compressed size is no bound on its own.\n   */\n  maxUnzippedBytes?: number;\n  viewports?: ShelfViewport[];\n  adapters?: Record<string, AdapterSnapshot>;\n}\n\nconst viewportSchema: z.ZodType<ShelfViewport> = z.object({\n  name: z.string().min(1),\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n});\n\nconst brandThemeSchema: z.ZodType<BrandTheme> = z.object({\n  accent: z.string(),\n  accentContrast: z.string().optional(),\n  ring: z.string().optional(),\n  surface: z.object({\n    base: z.string(),\n    card: z.string(),\n    muted: z.string().optional(),\n    subtle: z.string().optional(),\n  }),\n  text: z.object({ primary: z.string(), secondary: z.string(), muted: z.string().optional() }),\n  border: z.string(),\n  borderSubtle: z.string().optional(),\n  status: z.object({ approved: z.string(), new: z.string(), rejected: z.string() }),\n  sidebarBg: z.string().optional(),\n  topbarBg: z.string().optional(),\n  radius: z.string().optional(),\n  radiusSm: z.string().optional(),\n  shadow: z.string().optional(),\n});\n\nconst adapterSnapshotSchema: z.ZodType<AdapterSnapshot> = z.object({\n  name: z.string(),\n  version: z.string(),\n  description: z.string().optional(),\n  kind: z.string(),\n  category: z.enum([\n    \"database\",\n    \"storage\",\n    \"capture-runner\",\n    \"capture-queue\",\n    \"design\",\n    \"notifier\",\n  ]),\n});\n\nconst authUiConfigSchema: z.ZodType<AuthUiConfig> = z.object({\n  title: z.string().min(1).optional(),\n  subtitle: z.string().optional(),\n  passwordLabel: z.string().min(1).optional(),\n  passwordPlaceholder: z.string().optional(),\n  submitLabel: z.string().min(1).optional(),\n  ssoLabelTemplate: z.string().min(1).optional(),\n  helpText: z.string().optional(),\n  footerText: z.string().optional(),\n});\n\n/** Zod schema validating `notifications.config`. */\nexport const notificationsConfigSchema: z.ZodType<NotificationsConfig> = z.object({\n  fromEmail: z.string().min(1).optional(),\n  fromName: z.string().min(1).optional(),\n  footerText: z.string().min(1).optional(),\n  slackUsername: z.string().min(1).optional(),\n});\n\n/** Zod schema validating the shelf-level configuration. */\nexport const shelfConfigSchema: z.ZodType<ShelfConfig> = z\n  .object({\n    secret: z.string().min(1).optional(),\n    previousSecret: z.string().min(1).optional(),\n    migrateCredentialsOnBoot: z.boolean().optional(),\n    adminToken: z.string().min(1).optional(),\n    publishedBaseDomain: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    publicBaseUrl: z.string().url().optional(),\n    scratchDir: z.string().optional(),\n    purgeTtlDays: z.number().int().positive().optional(),\n    branchTtlDays: z.number().int().positive().nullable().optional(),\n    branchGcIntervalMs: z.number().int().positive().optional(),\n    maxUploadBytes: z.number().int().positive().optional(),\n    serverTiming: z.boolean().optional(),\n    maxInlineUnzipSize: z.number().int().min(0).optional(),\n    maxZipEntries: z.number().int().positive().optional(),\n    maxUnzippedBytes: z.number().int().positive().optional(),\n    viewports: z.array(viewportSchema).min(1, \"at least one viewport required\").optional(),\n    adapters: z.record(z.string(), adapterSnapshotSchema).optional(),\n  })\n  .strict()\n  .superRefine((config, ctx) => {\n    if (config.previousSecret !== undefined && config.secret === undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret requires secret\",\n      });\n    }\n    if (config.previousSecret !== undefined && config.previousSecret === config.secret) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret must differ from secret\",\n      });\n    }\n  });\n\n/** Zod schema validating the UI branding configuration. */\nexport const uiConfigSchema: z.ZodType<UIConfig> = z\n  .object({\n    name: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    logo: z.string().url().optional(),\n    // Accepted but ignored (see UIConfig.favicon) so existing configs keep\n    // validating under .strict().\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    favicon: z.string().url().optional(),\n    lightTheme: brandThemeSchema.optional(),\n    darkTheme: brandThemeSchema.optional(),\n    auth: authUiConfigSchema.optional(),\n  })\n  .strict();\n\n/**\n * Parse and validate a raw shelf-level configuration object.\n *\n * @param config - Unvalidated configuration record.\n * @returns The validated shelf configuration.\n */\nexport function validateConfig(config: Record<string, unknown>): ShelfConfig {\n  const result = shelfConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid ShelfConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Parse and validate a raw UI branding configuration object.\n *\n * @param config - Unvalidated UI configuration record.\n * @returns The validated UI configuration.\n */\nexport function validateUiConfig(config: Record<string, unknown>): UIConfig {\n  const result = uiConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid UIConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/** Testing options: what renders, how many run at once, and how screenshots are compared. */\nexport interface ShelfTestingOptions {\n  /** Pure renderer. Required: `testing` without a `runner` throws. */\n  runner: CaptureRunner;\n  /** Jobs this instance runs at once; auto-sized from CPU and memory when unset. */\n  concurrency?: number;\n  /**\n   * Retries after a first failed attempt before a capture job fails for good (default 2: three\n   * attempts). One limit covers failed attempts, lost leases and forked-child crashes.\n   */\n  retries?: number;\n  /**\n   * Lease of a job of the database queue, in seconds (default 300: 5 minutes). A running job\n   * renews it on a heartbeat (every `min(30 s, lease / 3)`) and on progress, so a stage that prints\n   * nothing is not redelivered while its process lives; a crashed holder's job is claimed by\n   * another instance once the lease runs out, so a shorter lease recovers crashes sooner.\n   */\n  leaseSeconds?: number;\n  /**\n   * Module run in a forked capture child (it calls `runCaptureChild` from `@storyshelf/core/capture`).\n   * The app consumes the queue and pushes each job to the child over IPC. Needs `runner`, which\n   * serves as the in-process fallback.\n   */\n  workerEntry?: string;\n  /**\n   * Split a big build across the queue: captures (story x viewport x engine) per shard. A build of\n   * up to twice this size still renders in one piece. Unset keeps every build in one job. Needs\n   * `runner`. With `workerEntry` the forked child plans and renders shards and puts them on the\n   * database queue itself.\n   */\n  shardSize?: number;\n  /**\n   * Requests per minute one client IP may make to the signed Storybook URL route, `/_s/<token>/*`\n   * (ADR 0007, decision 5). Default 6000, enough for a render fetching thousands of assets from one\n   * farm IP; a larger farm behind one address raises it. Over the limit the route answers `429`\n   * before it looks at the token, so the answer says nothing about a token's validity.\n   */\n  storybookUrlRateLimit?: number;\n  /**\n   * Where captures run. `auto` (default) forks when `workerEntry` is set and the host can afford\n   * a second process; `in-process` never forks; `fork` forks regardless of the host and fails at\n   * boot if it cannot.\n   */\n  mode?: \"auto\" | \"in-process\" | \"fork\";\n  /** Screenshot comparison, shared by capture and the re-diff endpoint. */\n  compare?: ShelfCompareOptions;\n  /** Image library selection; see {@link ShelfImagesOptions}. */\n  images?: ShelfImagesOptions;\n  /**\n   * Clock and timers of the database job queue. Tests inject a manual clock so lease and poll\n   * transitions do not depend on wall time; production leaves it unset (`Date.now` and the global\n   * timers).\n   */\n  queueClock?: {\n    now: () => number;\n    timers: {\n      setTimeout(callback: () => void, ms: number): unknown;\n      clearTimeout(handle: unknown): void;\n    };\n  };\n}\n\n/** Notification options: who can deliver, over which transport, with what branding. */\nexport interface ShelfNotificationsOptions {\n  /** Provider adapters (Slack, Teams, email, ...); a channel's `provider` must name one of these. */\n  notifiers?: NotifierProvider[];\n  /** Email transport. Listed here so its setup/teardown/validation hooks run with the app's. */\n  emailSender?: EmailSender;\n  /** Site-wide brand and sender settings for outgoing notifications. */\n  config?: NotificationsConfig;\n}\n\n/** Comparison options. */\nexport interface ShelfCompareOptions {\n  /**\n   * Worker threads for pixel diffs: default CPU count minus one (min 1), `0` diffs on the main\n   * thread. Takes precedence over `STORYSHELF_DIFF_WORKERS`.\n   */\n  threads?: number;\n}\n\n/** Image-handling options: which library decodes, encodes and resizes the PNGs. */\nexport interface ShelfImagesOptions {\n  /**\n   * Image library for diffs, diff overlays and AI thumbnails: `\"pngjs\"` (default, pure JavaScript,\n   * runs anywhere) or `\"sharp\"` (native, several times faster on large PNGs; needs the optional\n   * `sharp` package installed). Falls back to `STORYSHELF_IMAGE_ENGINE`. The pixel comparison is\n   * pixelmatch either way, so verdicts match.\n   */\n  engine?: \"pngjs\" | \"sharp\";\n}\n\n/** Adapter and configuration options for creating the shelf router. */\nexport interface ShelfOptions {\n  database: DatabaseAdapter;\n  storage: StorageAdapter;\n  /**\n   * Testing (render + diff in the background). Absent means Storybook hosting only: no renderer,\n   * no queue, and the tuning below is unreachable rather than silently ignored.\n   */\n  testing?: ShelfTestingOptions;\n  auth?: Auth;\n  /** AI insights surface (ADR 0016). Set ⇒ AI on site-wide; absent ⇒ off. */\n  ai?: Ai;\n  /** Design-tool providers (Figma, …) that resolve links, metadata and previews. */\n  design?: DesignProvider[];\n  /** Notification subsystem: providers, the email transport, and shared brand/sender settings. */\n  notifications?: ShelfNotificationsOptions;\n  logger?: Logger;\n  ui?: UIConfig;\n  config?: ShelfConfig;\n  /**\n   * Externally-managed observability SDK handle (e.g. from\n   * `initObservabilityFromEnv`). Structural — core never imports the\n   * observability package. Flushed on `app.lifecycle.teardown()`.\n   */\n  observability?: ObservabilityHandle;\n}\n\n/**\n * Shutdown hook for an externally-managed observability SDK.\n * Structural so core stays dependency-free.\n */\nexport interface ObservabilityHandle {\n  /** Flush exporters and release SDK resources. Must be idempotent. */\n  shutdown(): Promise<void>;\n}\nexport { DEFAULT_SCRATCH_DIR, resolveShelfOptions } from \"./options.ts\";\nexport { ALLOW_SERVERLESS_ENV, assertServerless, isServerlessHost } from \"./serverless.ts\";\n"],"mappings":";;;;;;;;AAmEA,MAAa,2BAA2B;AAuFxC,MAAM,iBAA2C,EAAE,OAAO;CACxD,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACjC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;AACpC,CAAC;AAED,MAAM,mBAA0C,EAAE,OAAO;CACvD,QAAQ,EAAE,OAAO;CACjB,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAAS,EAAE,OAAO;EAChB,MAAM,EAAE,OAAO;EACf,MAAM,EAAE,OAAO;EACf,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,CAAC;CACD,MAAM,EAAE,OAAO;EAAE,SAAS,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAAE,CAAC;CAC3F,QAAQ,EAAE,OAAO;CACjB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,QAAQ,EAAE,OAAO;EAAE,UAAU,EAAE,OAAO;EAAG,KAAK,EAAE,OAAO;EAAG,UAAU,EAAE,OAAO;CAAE,CAAC;CAChF,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAED,MAAM,wBAAoD,EAAE,OAAO;CACjE,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,MAAM,EAAE,OAAO;CACf,UAAU,EAAE,KAAK;EACf;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH,CAAC;AAED,MAAM,qBAA8C,EAAE,OAAO;CAC3D,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAClC,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC1C,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CACzC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC7C,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;;AAGD,MAAa,4BAA4D,EAAE,OAAO;CAChF,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACtC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAC5C,CAAC;;AAGD,MAAa,oBAA4C,EACtD,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACnC,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC3C,0BAA0B,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC/C,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CAEzC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACzC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACnD,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC/D,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzD,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACrD,cAAc,EAAE,QAAQ,CAAC,CAAC,SAAS;CACnC,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrD,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpD,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACvD,WAAW,EAAE,MAAM,cAAc,CAAC,CAAC,IAAI,GAAG,gCAAgC,CAAC,CAAC,SAAS;CACrF,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,qBAAqB,CAAC,CAAC,SAAS;AACjE,CAAC,CAAC,CACD,OAAO,CAAC,CACR,aAAa,QAAQ,QAAQ;CAC5B,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,WAAW,KAAA,GAC3D,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;CAEH,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,mBAAmB,OAAO,QAC1E,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;AAEL,CAAC;;AAGH,MAAa,iBAAsC,EAChD,OAAO;CACN,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAE1B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAIhC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACnC,YAAY,iBAAiB,SAAS;CACtC,WAAW,iBAAiB,SAAS;CACrC,MAAM,mBAAmB,SAAS;AACpC,CAAC,CAAC,CACD,OAAO;;;;;;;AAQV,SAAgB,eAAe,QAA8C;CAC3E,MAAM,SAAS,kBAAkB,UAAU,MAAM;CACjD,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,wBAAwB,QAAQ;CAClD;CACA,OAAO,OAAO;AAChB;;;;;;;AAQA,SAAgB,iBAAiB,QAA2C;CAC1E,MAAM,SAAS,eAAe,UAAU,MAAM;CAC9C,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,qBAAqB,QAAQ;CAC/C;CACA,OAAO,OAAO;AAChB"}

package/dist/diff.d.mts

@@ -1,5 +1,11 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-import { DEFAULT_DIFF_OPTIONS, DiffOptions, DiffResult } from "./diff/options.mjs";
-import { diffImages } from "./diff/engine.mjs";
-export { DEFAULT_DIFF_OPTIONS, type DiffOptions, type DiffResult, diffImages };
+import { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, DiffOptions, DiffResult, IMAGE_ENGINE_ENV, ImageEngine, configureImages, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine } from "@storyshelf/image";
+//#region src/diff/index.d.ts
+/** @deprecated Use `configureImages`, which also takes the image engine. */
+declare function configureDiffPool(options: {
+  threads?: number;
+}): void;
+//#endregion
+export { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, type DiffOptions, type DiffResult, IMAGE_ENGINE_ENV, type ImageEngine, configureDiffPool, configureImages, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine };
+//# sourceMappingURL=diff.d.mts.map

package/dist/diff.mjs

@@ -1,6 +1,19 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { diffImages } from "./diff/engine.mjs";
-import { DEFAULT_DIFF_OPTIONS } from "./diff/options.mjs";
-export { DEFAULT_DIFF_OPTIONS, diffImages };
+import { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, IMAGE_ENGINE_ENV, configureImages, configureImages as configureImages$1, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine } from "@storyshelf/image";
+//#region src/diff/index.ts
+/**
+* Pixel diff engine (re-exported from `@storyshelf/image`, which owns the codecs and worker pool).
+*
+* `diffImages` compares a baseline buffer against a current screenshot; `diffImagesAsync` does
+* the same on a worker-thread pool; `DiffOptions` tunes thresholds (also settable per-project).
+*/
+/** @deprecated Use `configureImages`, which also takes the image engine. */
+function configureDiffPool(options) {
+	configureImages$1(options);
+}
+//#endregion
+export { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, IMAGE_ENGINE_ENV, configureDiffPool, configureImages, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine };
+
+//# sourceMappingURL=diff.mjs.map

package/dist/diff.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.mjs","names":[],"sources":["../src/diff/index.ts"],"sourcesContent":["/**\n * Pixel diff engine (re-exported from `@storyshelf/image`, which owns the codecs and worker pool).\n *\n * `diffImages` compares a baseline buffer against a current screenshot; `diffImagesAsync` does\n * the same on a worker-thread pool; `DiffOptions` tunes thresholds (also settable per-project).\n */\nimport { configureImages } from \"@storyshelf/image\";\n\nexport {\n  configureImages,\n  DEFAULT_DIFF_OPTIONS,\n  DIFF_WORKERS_ENV,\n  diffImages,\n  diffImagesAsync,\n  type DiffOptions,\n  type DiffResult,\n  IMAGE_ENGINE_ENV,\n  type ImageEngine,\n  shutdownDiffPool,\n  verifyImageEngine,\n} from \"@storyshelf/image\";\n\n/** @deprecated Use `configureImages`, which also takes the image engine. */\nexport function configureDiffPool(options: { threads?: number }): void {\n  configureImages(options);\n}\n"],"mappings":";;;;;;;;;;;;AAuBA,SAAgB,kBAAkB,SAAqC;CACrE,kBAAgB,OAAO;AACzB"}

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
+import { Logger, LoggerOptions, PinoTransport, createShelfLogger } from "./logger.mjs";
 import { BUILD_STATUSES, BuildStatus, ProjectRole, SNAPSHOT_STATUSES, SiteRole, SnapshotStatus, TERMINAL_BUILD_STATUSES } from "./types.mjs";
 import { AdapterSnapshot, BrandTheme, DEFAULT_MAX_UPLOAD_BYTES, ShelfConfig, ShelfOptions, ShelfViewport, UIConfig, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig } from "./config.mjs";
-import { Logger, LoggerOptions, PinoTransport, createShelfLogger } from "./logger.mjs";
 import { BrandPack, brandPack, brandPacks } from "./brand-packs.mjs";
 export { type AdapterSnapshot, BUILD_STATUSES, type BrandPack, type BrandTheme, type BuildStatus, DEFAULT_MAX_UPLOAD_BYTES, type Logger, type LoggerOptions, type PinoTransport, type ProjectRole, SNAPSHOT_STATUSES, type ShelfConfig, type ShelfOptions, type ShelfViewport, type SiteRole, type SnapshotStatus, TERMINAL_BUILD_STATUSES, type UIConfig, brandPack, brandPacks, createShelfLogger, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig };

package/dist/insights/budget.d.mts

@@ -0,0 +1,20 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { AiBudget } from "../ai.mjs";
+//#region src/insights/budget.d.ts
+/** Alert thresholds as percentages of the daily cap. */
+declare const BUDGET_THRESHOLDS: readonly [50, 75, 90, 100];
+/** UTC day key (`YYYY-MM-DD`). */
+declare function utcDay(date: Date): string;
+/** Start of the UTC day containing `date`, as an ISO string. */
+declare function utcDayStart(date: Date): string;
+/** Tokens counted toward the budget for one call (vision weighting applies). */
+declare function countedTokens(usage: {
+  inputTokens: number;
+  outputTokens: number;
+}, images: number, budget: Pick<AiBudget, "visionWeight">): number;
+/** Thresholds crossed when moving from `before` to `after` tokens of `cap`. */
+declare function crossedThresholds(before: number, after: number, cap: number): number[];
+//#endregion
+export { BUDGET_THRESHOLDS, countedTokens, crossedThresholds, utcDay, utcDayStart };
+//# sourceMappingURL=budget.d.mts.map

package/dist/insights/budget.mjs

@@ -0,0 +1,33 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/insights/budget.ts
+/** Alert thresholds as percentages of the daily cap. */
+const BUDGET_THRESHOLDS = [
+	50,
+	75,
+	90,
+	100
+];
+/** UTC day key (`YYYY-MM-DD`). */
+function utcDay(date) {
+	return date.toISOString().slice(0, 10);
+}
+/** Start of the UTC day containing `date`, as an ISO string. */
+function utcDayStart(date) {
+	return `${utcDay(date)}T00:00:00.000Z`;
+}
+/** Tokens counted toward the budget for one call (vision weighting applies). */
+function countedTokens(usage, images, budget) {
+	const raw = usage.inputTokens + usage.outputTokens;
+	return images > 0 ? Math.ceil(raw * budget.visionWeight) : raw;
+}
+/** Thresholds crossed when moving from `before` to `after` tokens of `cap`. */
+function crossedThresholds(before, after, cap) {
+	if (cap <= 0) return [];
+	return BUDGET_THRESHOLDS.filter((t) => before < cap * t / 100 && after >= cap * t / 100);
+}
+//#endregion
+export { BUDGET_THRESHOLDS, countedTokens, crossedThresholds, utcDay, utcDayStart };
+
+//# sourceMappingURL=budget.mjs.map

package/dist/insights/budget.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.mjs","names":[],"sources":["../../src/insights/budget.ts"],"sourcesContent":["/** Pure budget arithmetic (thresholds, UTC day windows, weighted counting). */\nimport type { AiBudget } from \"../ai.ts\";\n\n/** Alert thresholds as percentages of the daily cap. */\nexport const BUDGET_THRESHOLDS = [50, 75, 90, 100] as const;\n\n/** UTC day key (`YYYY-MM-DD`). */\nexport function utcDay(date: Date): string {\n  return date.toISOString().slice(0, 10);\n}\n\n/** Start of the UTC day containing `date`, as an ISO string. */\nexport function utcDayStart(date: Date): string {\n  return `${utcDay(date)}T00:00:00.000Z`;\n}\n\n/** Tokens counted toward the budget for one call (vision weighting applies). */\nexport function countedTokens(\n  usage: { inputTokens: number; outputTokens: number },\n  images: number,\n  budget: Pick<AiBudget, \"visionWeight\">,\n): number {\n  const raw = usage.inputTokens + usage.outputTokens;\n  return images > 0 ? Math.ceil(raw * budget.visionWeight) : raw;\n}\n\n/** Thresholds crossed when moving from `before` to `after` tokens of `cap`. */\nexport function crossedThresholds(before: number, after: number, cap: number): number[] {\n  if (cap <= 0) {\n    return [];\n  }\n  return BUDGET_THRESHOLDS.filter((t) => before < (cap * t) / 100 && after >= (cap * t) / 100);\n}\n"],"mappings":";;;;;AAIA,MAAa,oBAAoB;CAAC;CAAI;CAAI;CAAI;AAAG;;AAGjD,SAAgB,OAAO,MAAoB;CACzC,OAAO,KAAK,YAAY,CAAC,CAAC,MAAM,GAAG,EAAE;AACvC;;AAGA,SAAgB,YAAY,MAAoB;CAC9C,OAAO,GAAG,OAAO,IAAI,EAAE;AACzB;;AAGA,SAAgB,cACd,OACA,QACA,QACQ;CACR,MAAM,MAAM,MAAM,cAAc,MAAM;CACtC,OAAO,SAAS,IAAI,KAAK,KAAK,MAAM,OAAO,YAAY,IAAI;AAC7D;;AAGA,SAAgB,kBAAkB,QAAgB,OAAe,KAAuB;CACtF,IAAI,OAAO,GACT,OAAO,CAAC;CAEV,OAAO,kBAAkB,QAAQ,MAAM,SAAU,MAAM,IAAK,OAAO,SAAU,MAAM,IAAK,GAAG;AAC7F"}

package/dist/insights/envelope.d.mts

@@ -0,0 +1,59 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { z } from "zod";
+//#region src/insights/envelope.d.ts
+/** Build triage envelope. */
+declare const triageEnvelopeSchema: z.ZodObject<{
+  verdict: z.ZodEnum<{
+    "likely-intended": "likely-intended";
+    "likely-regression": "likely-regression";
+    "needs-review": "needs-review";
+  }>;
+  summary: z.ZodString;
+  items: z.ZodArray<z.ZodObject<{
+    snapshotKey: z.ZodString;
+    note: z.ZodString;
+    severity: z.ZodEnum<{
+      high: "high";
+      info: "info";
+      low: "low";
+      medium: "medium";
+    }>;
+  }, z.core.$strip>>;
+  confidence: z.ZodEnum<{
+    high: "high";
+    low: "low";
+    medium: "medium";
+  }>;
+}, z.core.$strip>;
+/** Project-health digest envelope. */
+declare const healthEnvelopeSchema: z.ZodObject<{
+  verdict: z.ZodEnum<{
+    healthy: "healthy";
+    unhealthy: "unhealthy";
+    watch: "watch";
+  }>;
+  summary: z.ZodString;
+  score: z.ZodNumber;
+  trends: z.ZodArray<z.ZodObject<{
+    label: z.ZodString;
+    note: z.ZodString;
+    direction: z.ZodEnum<{
+      down: "down";
+      flat: "flat";
+      up: "up";
+    }>;
+  }, z.core.$strip>>;
+  confidence: z.ZodEnum<{
+    high: "high";
+    low: "low";
+    medium: "medium";
+  }>;
+}, z.core.$strip>;
+/** A parsed triage result. */
+type TriageEnvelope = z.infer<typeof triageEnvelopeSchema>;
+/** A parsed health result. */
+type HealthEnvelope = z.infer<typeof healthEnvelopeSchema>;
+//#endregion
+export { HealthEnvelope, TriageEnvelope, healthEnvelopeSchema, triageEnvelopeSchema };
+//# sourceMappingURL=envelope.d.mts.map

package/dist/insights/envelope.mjs

@@ -0,0 +1,60 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { z } from "zod";
+//#region src/insights/envelope.ts
+/** Result envelopes the model must produce (validated; stored as opaque JSON text). */
+const severitySchema = z.enum([
+	"info",
+	"low",
+	"medium",
+	"high"
+]);
+const confidenceSchema = z.enum([
+	"low",
+	"medium",
+	"high"
+]);
+/** Verdicts for a build triage (advisory only; never approves or waives). */
+const TRIAGE_VERDICTS = [
+	"likely-intended",
+	"needs-review",
+	"likely-regression"
+];
+/** Verdicts for a project-health digest. */
+const HEALTH_VERDICTS = [
+	"healthy",
+	"watch",
+	"unhealthy"
+];
+/** Build triage envelope. */
+const triageEnvelopeSchema = z.object({
+	verdict: z.enum(TRIAGE_VERDICTS),
+	summary: z.string().max(1200),
+	items: z.array(z.object({
+		snapshotKey: z.string().max(200),
+		note: z.string().max(400),
+		severity: severitySchema
+	})).max(50),
+	confidence: confidenceSchema
+});
+/** Project-health digest envelope. */
+const healthEnvelopeSchema = z.object({
+	verdict: z.enum(HEALTH_VERDICTS),
+	summary: z.string().max(1200),
+	score: z.number().min(0).max(100),
+	trends: z.array(z.object({
+		label: z.string().max(80),
+		note: z.string().max(300),
+		direction: z.enum([
+			"up",
+			"down",
+			"flat"
+		])
+	})).max(10),
+	confidence: confidenceSchema
+});
+//#endregion
+export { HEALTH_VERDICTS, TRIAGE_VERDICTS, healthEnvelopeSchema, triageEnvelopeSchema };
+
+//# sourceMappingURL=envelope.mjs.map

package/dist/insights/envelope.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.mjs","names":[],"sources":["../../src/insights/envelope.ts"],"sourcesContent":["/** Result envelopes the model must produce (validated; stored as opaque JSON text). */\nimport { z } from \"zod\";\n\nconst severitySchema = z.enum([\"info\", \"low\", \"medium\", \"high\"]);\nconst confidenceSchema = z.enum([\"low\", \"medium\", \"high\"]);\n\n/** Verdicts for a build triage (advisory only; never approves or waives). */\nexport const TRIAGE_VERDICTS = [\"likely-intended\", \"needs-review\", \"likely-regression\"] as const;\n\n/** Verdicts for a project-health digest. */\nexport const HEALTH_VERDICTS = [\"healthy\", \"watch\", \"unhealthy\"] as const;\n\n/** Build triage envelope. */\nexport const triageEnvelopeSchema = z.object({\n  verdict: z.enum(TRIAGE_VERDICTS),\n  summary: z.string().max(1200),\n  items: z\n    .array(\n      z.object({\n        snapshotKey: z.string().max(200),\n        note: z.string().max(400),\n        severity: severitySchema,\n      }),\n    )\n    .max(50),\n  confidence: confidenceSchema,\n});\n\n/** Project-health digest envelope. */\nexport const healthEnvelopeSchema = z.object({\n  verdict: z.enum(HEALTH_VERDICTS),\n  summary: z.string().max(1200),\n  score: z.number().min(0).max(100),\n  trends: z\n    .array(\n      z.object({\n        label: z.string().max(80),\n        note: z.string().max(300),\n        direction: z.enum([\"up\", \"down\", \"flat\"]),\n      }),\n    )\n    .max(10),\n  confidence: confidenceSchema,\n});\n\n/** A parsed triage result. */\nexport type TriageEnvelope = z.infer<typeof triageEnvelopeSchema>;\n/** A parsed health result. */\nexport type HealthEnvelope = z.infer<typeof healthEnvelopeSchema>;\n"],"mappings":";;;;;;AAGA,MAAM,iBAAiB,EAAE,KAAK;CAAC;CAAQ;CAAO;CAAU;AAAM,CAAC;AAC/D,MAAM,mBAAmB,EAAE,KAAK;CAAC;CAAO;CAAU;AAAM,CAAC;;AAGzD,MAAa,kBAAkB;CAAC;CAAmB;CAAgB;AAAmB;;AAGtF,MAAa,kBAAkB;CAAC;CAAW;CAAS;AAAW;;AAG/D,MAAa,uBAAuB,EAAE,OAAO;CAC3C,SAAS,EAAE,KAAK,eAAe;CAC/B,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI;CAC5B,OAAO,EACJ,MACC,EAAE,OAAO;EACP,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG;EAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG;EACxB,UAAU;CACZ,CAAC,CACH,CAAC,CACA,IAAI,EAAE;CACT,YAAY;AACd,CAAC;;AAGD,MAAa,uBAAuB,EAAE,OAAO;CAC3C,SAAS,EAAE,KAAK,eAAe;CAC/B,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI;CAC5B,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAChC,QAAQ,EACL,MACC,EAAE,OAAO;EACP,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE;EACxB,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG;EACxB,WAAW,EAAE,KAAK;GAAC;GAAM;GAAQ;EAAM,CAAC;CAC1C,CAAC,CACH,CAAC,CACA,IAAI,EAAE;CACT,YAAY;AACd,CAAC"}

package/dist/insights/evidence-health.d.mts

@@ -0,0 +1,32 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { EvidenceLimits } from "./limits.mjs";
+import { BuiltEvidence } from "./evidence.mjs";
+//#region src/insights/evidence-health.d.ts
+/** One build in the window, summarized. */
+interface BuildSummary {
+  createdAt: string;
+  gitBranch: string;
+  status: string;
+  snapshotCount: number;
+  changedCount: number;
+  approvedCount: number;
+  rejectedCount: number;
+}
+/** Input for the health digest (all pre-loaded). */
+interface HealthEvidenceInput {
+  projectName: string;
+  window: string;
+  builds: BuildSummary[];
+  /** Stories that changed most often in the window. */
+  churnyStories: {
+    key: string;
+    changedBuilds: number;
+  }[];
+  limits?: Partial<EvidenceLimits>;
+}
+/** Assemble health evidence deterministically. */
+declare function buildHealthEvidence(input: HealthEvidenceInput): BuiltEvidence;
+//#endregion
+export { BuildSummary, HealthEvidenceInput, buildHealthEvidence };
+//# sourceMappingURL=evidence-health.d.mts.map

package/dist/insights/evidence-health.mjs

@@ -0,0 +1,28 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { resolveLimits } from "./limits.mjs";
+import { capBytes, field } from "./text.mjs";
+//#region src/insights/evidence-health.ts
+/** Assemble health evidence deterministically. */
+function buildHealthEvidence(input) {
+	const limits = resolveLimits(input.limits);
+	const builds = input.builds.toSorted((a, b) => a.createdAt.localeCompare(b.createdAt));
+	const lines = [
+		"<evidence>",
+		`PROJECT ${field(input.projectName)} WINDOW ${field(input.window, 20)} BUILDS ${builds.length}`,
+		...builds.slice(-limits.maxSnapshots).map((b) => `BUILD day=${b.createdAt.slice(0, 10)} branch=${field(b.gitBranch, 80)} status=${field(b.status, 30)} total=${b.snapshotCount} changed=${b.changedCount} approved=${b.approvedCount} rejected=${b.rejectedCount}`),
+		...input.churnyStories.slice(0, 20).map((s) => `CHURN key=${field(s.key)} changedBuilds=${s.changedBuilds}`),
+		"</evidence>"
+	];
+	return {
+		text: capBytes(lines, limits.maxTextBytes),
+		images: [],
+		listed: builds.length,
+		omitted: 0
+	};
+}
+//#endregion
+export { buildHealthEvidence };
+
+//# sourceMappingURL=evidence-health.mjs.map

package/dist/insights/evidence-health.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-health.mjs","names":[],"sources":["../../src/insights/evidence-health.ts"],"sourcesContent":["/** Project-health evidence: build-level aggregates only (no screenshots). */\nimport type { BuiltEvidence } from \"./evidence.ts\";\nimport { type EvidenceLimits, resolveLimits } from \"./limits.ts\";\nimport { capBytes, field } from \"./text.ts\";\n\n/** One build in the window, summarized. */\nexport interface BuildSummary {\n  createdAt: string;\n  gitBranch: string;\n  status: string;\n  snapshotCount: number;\n  changedCount: number;\n  approvedCount: number;\n  rejectedCount: number;\n}\n\n/** Input for the health digest (all pre-loaded). */\nexport interface HealthEvidenceInput {\n  projectName: string;\n  window: string;\n  builds: BuildSummary[];\n  /** Stories that changed most often in the window. */\n  churnyStories: { key: string; changedBuilds: number }[];\n  limits?: Partial<EvidenceLimits>;\n}\n\n/** Assemble health evidence deterministically. */\nexport function buildHealthEvidence(input: HealthEvidenceInput): BuiltEvidence {\n  const limits: EvidenceLimits = resolveLimits(input.limits);\n  const builds = input.builds.toSorted((a, b) => a.createdAt.localeCompare(b.createdAt));\n  const lines = [\n    \"<evidence>\",\n    `PROJECT ${field(input.projectName)} WINDOW ${field(input.window, 20)} BUILDS ${builds.length}`,\n    ...builds\n      .slice(-limits.maxSnapshots)\n      .map(\n        (b) =>\n          `BUILD day=${b.createdAt.slice(0, 10)} branch=${field(b.gitBranch, 80)} status=${field(b.status, 30)} total=${b.snapshotCount} changed=${b.changedCount} approved=${b.approvedCount} rejected=${b.rejectedCount}`,\n      ),\n    ...input.churnyStories\n      .slice(0, 20)\n      .map((s) => `CHURN key=${field(s.key)} changedBuilds=${s.changedBuilds}`),\n    \"</evidence>\",\n  ];\n  return {\n    text: capBytes(lines, limits.maxTextBytes),\n    images: [],\n    listed: builds.length,\n    omitted: 0,\n  };\n}\n"],"mappings":";;;;;;;AA2BA,SAAgB,oBAAoB,OAA2C;CAC7E,MAAM,SAAyB,cAAc,MAAM,MAAM;CACzD,MAAM,SAAS,MAAM,OAAO,UAAU,GAAG,MAAM,EAAE,UAAU,cAAc,EAAE,SAAS,CAAC;CACrF,MAAM,QAAQ;EACZ;EACA,WAAW,MAAM,MAAM,WAAW,EAAE,UAAU,MAAM,MAAM,QAAQ,EAAE,EAAE,UAAU,OAAO;EACvF,GAAG,OACA,MAAM,CAAC,OAAO,YAAY,CAAC,CAC3B,KACE,MACC,aAAa,EAAE,UAAU,MAAM,GAAG,EAAE,EAAE,UAAU,MAAM,EAAE,WAAW,EAAE,EAAE,UAAU,MAAM,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,cAAc,WAAW,EAAE,aAAa,YAAY,EAAE,cAAc,YAAY,EAAE,eACtM;EACF,GAAG,MAAM,cACN,MAAM,GAAG,EAAE,CAAC,CACZ,KAAK,MAAM,aAAa,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,eAAe;EAC1E;CACF;CACA,OAAO;EACL,MAAM,SAAS,OAAO,OAAO,YAAY;EACzC,QAAQ,CAAC;EACT,QAAQ,OAAO;EACf,SAAS;CACX;AACF"}

package/dist/insights/evidence.d.mts

@@ -0,0 +1,55 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { EvidenceLimits } from "./limits.mjs";
+import { AiEvidence } from "../ai.mjs";
+//#region src/insights/evidence.d.ts
+/** One changed (or failed) snapshot as evidence. */
+interface SnapshotEvidence {
+  storyId: string;
+  title: string;
+  name: string;
+  viewport: string;
+  status: string;
+  diffRatio: number | null;
+  inherited: boolean;
+  /** Raw play/a11y/capture log text for this snapshot, if any. */
+  log?: string;
+  /** Screenshot PNG, loaded by the caller (only used for the top-ranked few). */
+  screenshot?: Uint8Array;
+}
+/** Everything the triage builder needs (all pre-loaded). */
+interface TriageEvidenceInput {
+  projectName: string;
+  build: {
+    gitBranch: string;
+    gitSha: string;
+    message: string | null;
+    status: string;
+    snapshotCount: number;
+    changedCount: number;
+    approvedCount: number;
+    rejectedCount: number;
+    changedFiles: string[];
+  };
+  snapshots: SnapshotEvidence[];
+  comments: {
+    author: string;
+    body: string;
+  }[];
+  limits?: Partial<EvidenceLimits>;
+}
+/** Evidence plus bookkeeping the caller needs for hashing and rows. */
+interface BuiltEvidence extends AiEvidence {
+  /** Snapshots listed individually / total changed. */
+  listed: number;
+  omitted: number;
+}
+/** Stable story key shown to the model and echoed back in `snapshotKey`. */
+declare function snapshotKey(s: Pick<SnapshotEvidence, "title" | "name" | "viewport">): string;
+/** Evidence ranking: failures first, then diff ratio, then key (deterministic). */
+declare function rankSnapshots(a: SnapshotEvidence, b: SnapshotEvidence): number;
+/** Assemble triage evidence deterministically (redacted, capped, ranked). */
+declare function buildTriageEvidence(input: TriageEvidenceInput): Promise<BuiltEvidence>;
+//#endregion
+export { BuiltEvidence, SnapshotEvidence, TriageEvidenceInput, buildTriageEvidence, rankSnapshots, snapshotKey };
+//# sourceMappingURL=evidence.d.mts.map

package/dist/insights/evidence.mjs

@@ -0,0 +1,64 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { resolveLimits } from "./limits.mjs";
+import { capBytes, field, headTail } from "./text.mjs";
+import { downscalePng } from "@storyshelf/image";
+//#region src/insights/evidence.ts
+/** Pure evidence builders: already-loaded inputs in, delimited text + images out. */
+/** Stable story key shown to the model and echoed back in `snapshotKey`. */
+function snapshotKey(s) {
+	return field(`${s.title}/${s.name}@${s.viewport}`, 200);
+}
+/** Evidence ranking: failures first, then diff ratio, then key (deterministic). */
+function rankSnapshots(a, b) {
+	return Number(b.status === "failed") - Number(a.status === "failed") || (b.diffRatio ?? 0) - (a.diffRatio ?? 0) || snapshotKey(a).localeCompare(snapshotKey(b));
+}
+function snapshotLines(s, limits) {
+	const ratio = s.diffRatio === null ? "n/a" : s.diffRatio.toFixed(4);
+	const lines = [`SNAPSHOT key=${snapshotKey(s)} status=${field(s.status, 30)} diffRatio=${ratio}`];
+	if (s.log) lines.push(`  LOG: ${headTail(s.log, limits.logHeadBytes, limits.logTailBytes)}`);
+	return lines;
+}
+/** Assemble triage evidence deterministically (redacted, capped, ranked). */
+async function buildTriageEvidence(input) {
+	const limits = resolveLimits(input.limits);
+	const changed = input.snapshots.filter((s) => !s.inherited).toSorted(rankSnapshots);
+	const listed = changed.slice(0, limits.maxSnapshots);
+	const b = input.build;
+	const lines = [
+		"<evidence>",
+		`PROJECT ${field(input.projectName)}`,
+		`BUILD branch=${field(b.gitBranch)} sha=${field(b.gitSha.slice(0, 12), 12)} status=${field(b.status, 30)}`,
+		`COUNTS total=${b.snapshotCount} changed=${b.changedCount} approved=${b.approvedCount} rejected=${b.rejectedCount}`,
+		`COMMIT ${field(b.message, 300)}`,
+		`CHANGED_FILES (${b.changedFiles.length}): ${b.changedFiles.slice(0, 40).map((f) => field(f, 120)).join(", ")}`,
+		...listed.flatMap((s) => snapshotLines(s, limits)),
+		`OMITTED_SNAPSHOTS ${changed.length - listed.length}`,
+		...input.comments.slice(0, 10).map((c) => `COMMENT ${field(c.author, 60)}: ${field(c.body, 300)}`),
+		"</evidence>"
+	];
+	const images = await triageImages(listed, limits);
+	return {
+		text: capBytes(lines, limits.maxTextBytes),
+		images,
+		listed: listed.length,
+		omitted: changed.length - listed.length
+	};
+}
+/** Downscaled screenshots of the listed snapshots, capped at `maxImages` (downscales only what is kept). */
+async function triageImages(listed, limits) {
+	const withScreenshots = listed.flatMap((item) => item.screenshot ? [{
+		item,
+		screenshot: item.screenshot
+	}] : []).slice(0, limits.maxImages);
+	return await Promise.all(withScreenshots.map(async ({ item, screenshot }) => ({
+		mediaType: "image/png",
+		data: await downscalePng(screenshot, limits.imageMaxEdge),
+		label: snapshotKey(item)
+	})));
+}
+//#endregion
+export { buildTriageEvidence, rankSnapshots, snapshotKey };
+
+//# sourceMappingURL=evidence.mjs.map

package/dist/insights/evidence.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.mjs","names":[],"sources":["../../src/insights/evidence.ts"],"sourcesContent":["/** Pure evidence builders: already-loaded inputs in, delimited text + images out. */\nimport { downscalePng } from \"@storyshelf/image\";\nimport type { AiEvidence } from \"../ai.ts\";\nimport { type EvidenceLimits, resolveLimits } from \"./limits.ts\";\nimport { capBytes, field, headTail } from \"./text.ts\";\n\n/** One changed (or failed) snapshot as evidence. */\nexport interface SnapshotEvidence {\n  storyId: string;\n  title: string;\n  name: string;\n  viewport: string;\n  status: string;\n  diffRatio: number | null;\n  inherited: boolean;\n  /** Raw play/a11y/capture log text for this snapshot, if any. */\n  log?: string;\n  /** Screenshot PNG, loaded by the caller (only used for the top-ranked few). */\n  screenshot?: Uint8Array;\n}\n\n/** Everything the triage builder needs (all pre-loaded). */\nexport interface TriageEvidenceInput {\n  projectName: string;\n  build: {\n    gitBranch: string;\n    gitSha: string;\n    message: string | null;\n    status: string;\n    snapshotCount: number;\n    changedCount: number;\n    approvedCount: number;\n    rejectedCount: number;\n    changedFiles: string[];\n  };\n  snapshots: SnapshotEvidence[];\n  comments: { author: string; body: string }[];\n  limits?: Partial<EvidenceLimits>;\n}\n\n/** Evidence plus bookkeeping the caller needs for hashing and rows. */\nexport interface BuiltEvidence extends AiEvidence {\n  /** Snapshots listed individually / total changed. */\n  listed: number;\n  omitted: number;\n}\n\n/** Stable story key shown to the model and echoed back in `snapshotKey`. */\nexport function snapshotKey(s: Pick<SnapshotEvidence, \"title\" | \"name\" | \"viewport\">): string {\n  return field(`${s.title}/${s.name}@${s.viewport}`, 200);\n}\n\n/** Evidence ranking: failures first, then diff ratio, then key (deterministic). */\nexport function rankSnapshots(a: SnapshotEvidence, b: SnapshotEvidence): number {\n  const failed = Number(b.status === \"failed\") - Number(a.status === \"failed\");\n  return (\n    failed ||\n    (b.diffRatio ?? 0) - (a.diffRatio ?? 0) ||\n    snapshotKey(a).localeCompare(snapshotKey(b))\n  );\n}\n\nfunction snapshotLines(s: SnapshotEvidence, limits: EvidenceLimits): string[] {\n  const ratio = s.diffRatio === null ? \"n/a\" : s.diffRatio.toFixed(4);\n  const lines = [`SNAPSHOT key=${snapshotKey(s)} status=${field(s.status, 30)} diffRatio=${ratio}`];\n  if (s.log) {\n    lines.push(`  LOG: ${headTail(s.log, limits.logHeadBytes, limits.logTailBytes)}`);\n  }\n  return lines;\n}\n\n/** Assemble triage evidence deterministically (redacted, capped, ranked). */\nexport async function buildTriageEvidence(input: TriageEvidenceInput): Promise<BuiltEvidence> {\n  const limits = resolveLimits(input.limits);\n  const changed = input.snapshots.filter((s) => !s.inherited).toSorted(rankSnapshots);\n  const listed = changed.slice(0, limits.maxSnapshots);\n  const b = input.build;\n  const lines = [\n    \"<evidence>\",\n    `PROJECT ${field(input.projectName)}`,\n    `BUILD branch=${field(b.gitBranch)} sha=${field(b.gitSha.slice(0, 12), 12)} status=${field(b.status, 30)}`,\n    `COUNTS total=${b.snapshotCount} changed=${b.changedCount} approved=${b.approvedCount} rejected=${b.rejectedCount}`,\n    `COMMIT ${field(b.message, 300)}`,\n    `CHANGED_FILES (${b.changedFiles.length}): ${b.changedFiles\n      .slice(0, 40)\n      .map((f) => field(f, 120))\n      .join(\", \")}`,\n    ...listed.flatMap((s) => snapshotLines(s, limits)),\n    `OMITTED_SNAPSHOTS ${changed.length - listed.length}`,\n    ...input.comments\n      .slice(0, 10)\n      .map((c) => `COMMENT ${field(c.author, 60)}: ${field(c.body, 300)}`),\n    \"</evidence>\",\n  ];\n  const images = await triageImages(listed, limits);\n  return {\n    text: capBytes(lines, limits.maxTextBytes),\n    images,\n    listed: listed.length,\n    omitted: changed.length - listed.length,\n  };\n}\n\n/** Downscaled screenshots of the listed snapshots, capped at `maxImages` (downscales only what is kept). */\nasync function triageImages(\n  listed: SnapshotEvidence[],\n  limits: { imageMaxEdge: number; maxImages: number },\n): Promise<AiEvidence[\"images\"]> {\n  const withScreenshots = listed\n    .flatMap((item) => (item.screenshot ? [{ item, screenshot: item.screenshot }] : []))\n    .slice(0, limits.maxImages);\n  return await Promise.all(\n    withScreenshots.map(async ({ item, screenshot }) => ({\n      mediaType: \"image/png\" as const,\n      data: await downscalePng(screenshot, limits.imageMaxEdge),\n      label: snapshotKey(item),\n    })),\n  );\n}\n"],"mappings":";;;;;;;;;AAgDA,SAAgB,YAAY,GAAkE;CAC5F,OAAO,MAAM,GAAG,EAAE,MAAM,GAAG,EAAE,KAAK,GAAG,EAAE,YAAY,GAAG;AACxD;;AAGA,SAAgB,cAAc,GAAqB,GAA6B;CAE9E,OADe,OAAO,EAAE,WAAW,QAAQ,IAAI,OAAO,EAAE,WAAW,QAAQ,MAGxE,EAAE,aAAa,MAAM,EAAE,aAAa,MACrC,YAAY,CAAC,CAAC,CAAC,cAAc,YAAY,CAAC,CAAC;AAE/C;AAEA,SAAS,cAAc,GAAqB,QAAkC;CAC5E,MAAM,QAAQ,EAAE,cAAc,OAAO,QAAQ,EAAE,UAAU,QAAQ,CAAC;CAClE,MAAM,QAAQ,CAAC,gBAAgB,YAAY,CAAC,EAAE,UAAU,MAAM,EAAE,QAAQ,EAAE,EAAE,aAAa,OAAO;CAChG,IAAI,EAAE,KACJ,MAAM,KAAK,UAAU,SAAS,EAAE,KAAK,OAAO,cAAc,OAAO,YAAY,GAAG;CAElF,OAAO;AACT;;AAGA,eAAsB,oBAAoB,OAAoD;CAC5F,MAAM,SAAS,cAAc,MAAM,MAAM;CACzC,MAAM,UAAU,MAAM,UAAU,QAAQ,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,SAAS,aAAa;CAClF,MAAM,SAAS,QAAQ,MAAM,GAAG,OAAO,YAAY;CACnD,MAAM,IAAI,MAAM;CAChB,MAAM,QAAQ;EACZ;EACA,WAAW,MAAM,MAAM,WAAW;EAClC,gBAAgB,MAAM,EAAE,SAAS,EAAE,OAAO,MAAM,EAAE,OAAO,MAAM,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,MAAM,EAAE,QAAQ,EAAE;EACvG,gBAAgB,EAAE,cAAc,WAAW,EAAE,aAAa,YAAY,EAAE,cAAc,YAAY,EAAE;EACpG,UAAU,MAAM,EAAE,SAAS,GAAG;EAC9B,kBAAkB,EAAE,aAAa,OAAO,KAAK,EAAE,aAC5C,MAAM,GAAG,EAAE,CAAC,CACZ,KAAK,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CACzB,KAAK,IAAI;EACZ,GAAG,OAAO,SAAS,MAAM,cAAc,GAAG,MAAM,CAAC;EACjD,qBAAqB,QAAQ,SAAS,OAAO;EAC7C,GAAG,MAAM,SACN,MAAM,GAAG,EAAE,CAAC,CACZ,KAAK,MAAM,WAAW,MAAM,EAAE,QAAQ,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,GAAG,GAAG;EACrE;CACF;CACA,MAAM,SAAS,MAAM,aAAa,QAAQ,MAAM;CAChD,OAAO;EACL,MAAM,SAAS,OAAO,OAAO,YAAY;EACzC;EACA,QAAQ,OAAO;EACf,SAAS,QAAQ,SAAS,OAAO;CACnC;AACF;;AAGA,eAAe,aACb,QACA,QAC+B;CAC/B,MAAM,kBAAkB,OACrB,SAAS,SAAU,KAAK,aAAa,CAAC;EAAE;EAAM,YAAY,KAAK;CAAW,CAAC,IAAI,CAAC,CAAE,CAAC,CACnF,MAAM,GAAG,OAAO,SAAS;CAC5B,OAAO,MAAM,QAAQ,IACnB,gBAAgB,IAAI,OAAO,EAAE,MAAM,kBAAkB;EACnD,WAAW;EACX,MAAM,MAAM,aAAa,YAAY,OAAO,YAAY;EACxD,OAAO,YAAY,IAAI;CACzB,EAAE,CACJ;AACF"}

package/dist/insights/hash.d.mts

@@ -0,0 +1,18 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+//#region src/insights/hash.d.ts
+/** Parts that define whether a cached insight is still valid. */
+interface InputHashParts {
+  evidenceText: string;
+  /** Image digests, in send order. */
+  imageDigests: string[];
+  promptVersion: string;
+  task: string;
+  profile: string;
+  model: string;
+}
+/** Hash the final assembled evidence plus prompt/task/profile/model. */
+declare function computeInputHash(parts: InputHashParts): string;
+//#endregion
+export { InputHashParts, computeInputHash };
+//# sourceMappingURL=hash.d.mts.map

package/dist/insights/hash.mjs

@@ -0,0 +1,21 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { sha256 } from "../utils/hash.mjs";
+//#region src/insights/hash.ts
+/** Cache key for an insight: identical evidence + prompt + model is a free hit. */
+/** Hash the final assembled evidence plus prompt/task/profile/model. */
+function computeInputHash(parts) {
+	return sha256(JSON.stringify([
+		parts.promptVersion,
+		parts.task,
+		parts.profile,
+		parts.model,
+		parts.imageDigests,
+		parts.evidenceText
+	]));
+}
+//#endregion
+export { computeInputHash };
+
+//# sourceMappingURL=hash.mjs.map