@storyshelf/core 0.6.2 → 0.7.0

package/dist/adapters/validate.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validate.mjs","names":[],"sources":["../../src/adapters/validate.ts"],"sourcesContent":["/**\n * Boot-time adapter validation: fail fast on third-party adapters that\n * cannot satisfy their slot contract.\n *\n * Types alone cannot stop a bad adapter — this module checks shape at\n * runtime before any I/O runs. `createShelfApp` throws synchronously;\n * the lifecycle runner returns failures without executing hooks.\n */\nimport { z } from \"zod\";\nimport type { Auth } from \"../auth.ts\";\nimport { REQUIRED_TABLE_KEYS } from \"./database.ts\";\nimport type { AdapterSetupFailure, AdapterSetupSources } from \"./setup.ts\";\n\nconst metadataSchema = z.object({\n  name: z.string().min(1),\n  version: z.string().min(1),\n  kind: z.string().min(1),\n  category: z.string().min(1),\n});\n\nconst DATABASE_METHODS = [\"insert\", \"update\", \"get\", \"remove\", \"list\", \"count\", \"all\"];\n\nconst STORAGE_METHODS = [\"read\", \"write\", \"delete\", \"exists\", \"list\", \"writeStream\", \"readStream\"];\n\nconst RUNNER_METHODS = [\"render\", \"cancel\"];\n\nconst QUEUE_METHODS = [\"enqueue\", \"status\", \"active\", \"recent\"];\n\n/** Unknown value narrowed to a property bag for shape checks. */\nfunction asRecord(value: unknown): Record<string, unknown> | null {\n  return typeof value === \"object\" && value !== null ? (value as Record<string, unknown>) : null;\n}\n\n/** String field of a record, or null when absent/non-string. */\nfunction stringField(record: Record<string, unknown> | null, key: string): string | null {\n  const value = record?.[key];\n  return typeof value === \"string\" ? value : null;\n}\n\n/** Reasons the adapter identity fails for the expected slot. */\nfunction metadataReasons(adapter: Record<string, unknown>, expected: string): string[] {\n  const parsed = metadataSchema.safeParse(adapter[\"metadata\"]);\n  if (!parsed.success) {\n    return [`invalid metadata: ${parsed.error.issues.map((i) => i.path.join(\".\")).join(\",\")}`];\n  }\n  const category = (parsed.data as { category: string }).category;\n  return category === expected ? [] : [`category \"${category}\" does not match slot \"${expected}\"`];\n}\n\n/** Reasons the optional lifecycle violates the all-or-nothing rule. */\nfunction lifecycleReasons(adapter: Record<string, unknown>): string[] {\n  const lifecycle = adapter[\"lifecycle\"];\n  if (lifecycle === undefined) {\n    return [];\n  }\n  const hooks = asRecord(lifecycle);\n  if (!hooks) {\n    return [\"lifecycle must be an object with setup/teardown/health\"];\n  }\n  const missing = [\"setup\", \"teardown\", \"health\"].filter(\n    (hook) => typeof hooks[hook] !== \"function\",\n  );\n  return missing.length > 0 ? [`partial lifecycle (missing: ${missing.join(\",\")})`] : [];\n}\n\n/** Reasons the adapter lacks required slot methods. */\nfunction methodReasons(adapter: Record<string, unknown>, methods: string[]): string[] {\n  const missing = methods.filter((method) => typeof adapter[method] !== \"function\");\n  return missing.length > 0 ? [`missing methods: ${missing.join(\",\")}`] : [];\n}\n\n/** Reasons a database adapter lacks its table map. */\nfunction tableReasons(adapter: Record<string, unknown>): string[] {\n  const tables = asRecord(adapter[\"tables\"]);\n  if (!tables) {\n    return [\"missing tables map\"];\n  }\n  const missing = REQUIRED_TABLE_KEYS.filter((table) => tables[table] === undefined);\n  return missing.length > 0 ? [`missing tables: ${missing.join(\",\")}`] : [];\n}\n\n/** Reasons a queue adapter has a partial poll extension. */\nfunction queuePollReasons(record: Record<string, unknown>): string[] {\n  const present = [\"poll\", \"ack\", \"nack\"].filter((method) => record[method] !== undefined);\n  if (present.length === 0 || present.length === 3) {\n    const mistyped = [\"poll\", \"ack\", \"nack\"].filter(\n      (method) => record[method] !== undefined && typeof record[method] !== \"function\",\n    );\n    return mistyped.map((method) => `queue poll extension \"${method}\" must be a function`);\n  }\n  return [`partial poll extension (present: ${present.join(\",\")}; need poll+ack+nack)`];\n}\n\n/** Whether a metadata schema looks like a zod schema (has parse). */\nfunction hasSchemaParse(provider: unknown): boolean {\n  const schema = asRecord(asRecord(provider)?.[\"metadata\"])?.[\"schema\"];\n  return typeof (schema as { parse?: unknown } | undefined)?.parse === \"function\";\n}\n\n/** Reasons a notifier provider lacks its descriptor shape. */\nfunction notifierReasons(provider: unknown): string[] {\n  const record = asRecord(provider);\n  if (!record) {\n    return [\"notifier provider must be an object\"];\n  }\n  const reasons = metadataReasons(record, \"notifier\");\n  if (typeof record[\"create\"] !== \"function\") {\n    reasons.push(\"missing methods: create\");\n  }\n  if (!hasSchemaParse(provider)) {\n    reasons.push(\"metadata.schema must be a zod schema\");\n  }\n  return reasons;\n}\n\n/** Reasons an email sender lacks its transport shape. */\nfunction emailSenderReasons(sender: unknown): string[] {\n  const record = asRecord(sender);\n  if (!record) {\n    return [\"email sender must be an object\"];\n  }\n  const reasons = metadataReasons(record, \"notifier\");\n  if (typeof record[\"send\"] !== \"function\") {\n    reasons.push(\"missing methods: send\");\n  }\n  return reasons;\n}\n\n/** Reasons a git provider lacks its descriptor shape. */\nfunction gitReasons(provider: unknown): string[] {\n  const record = asRecord(provider);\n  if (!record) {\n    return [\"git provider must be an object\"];\n  }\n  const reasons = metadataReasons(record, \"git-host\");\n  if (typeof record[\"create\"] !== \"function\") {\n    reasons.push(\"missing methods: create\");\n  }\n  if (!hasSchemaParse(provider)) {\n    reasons.push(\"metadata.schema must be a zod schema\");\n  }\n  return reasons;\n}\n\n/** Required methods for a slot category. */\nfunction slotMethods(category: string): string[] {\n  if (category === \"database\") {\n    return DATABASE_METHODS;\n  }\n  if (category === \"storage\") {\n    return STORAGE_METHODS;\n  }\n  if (category === \"capture-runner\") {\n    return RUNNER_METHODS;\n  }\n  return QUEUE_METHODS;\n}\n\n/** Extra per-slot reasons (table map for databases, poll rule for queues). */\nfunction slotExtraReasons(record: Record<string, unknown>, category: string): string[] {\n  if (category === \"database\") {\n    return tableReasons(record);\n  }\n  return category === \"capture-queue\" ? queuePollReasons(record) : [];\n}\n\n/**\n * Validate one adapter against its slot. Returns human-readable reasons\n * (empty when valid). Never throws — callers decide fail-fast vs collect.\n */\nexport function validateAdapter(\n  adapter: unknown,\n  expectedCategory: string,\n  slot: string,\n): string[] {\n  const record = asRecord(adapter);\n  if (!record) {\n    return [`${slot} adapter must be an object`];\n  }\n  const reasons = metadataReasons(record, expectedCategory).map((r) => `${slot}: ${r}`);\n  const extra = [\n    ...lifecycleReasons(record),\n    ...methodReasons(record, slotMethods(expectedCategory)),\n    ...slotExtraReasons(record, expectedCategory),\n  ];\n  for (const reason of extra) {\n    reasons.push(`${slot}: ${reason}`);\n  }\n  return reasons;\n}\n\n/** Auth surface methods every engine must expose. */\nconst AUTH_METHODS = [\n  \"handler\",\n  \"loginMethods\",\n  \"setup\",\n  \"issueInvite\",\n  \"verifyInvite\",\n  \"acceptInvite\",\n  \"passkeysEnabled\",\n  \"listSessions\",\n  \"listPasskeys\",\n  \"hasPassword\",\n  \"setDisabled\",\n  \"check\",\n  \"createSession\",\n  \"destroySession\",\n];\n\n/** Reasons a method-id list is unusable (blank or duplicate ids). */\nfunction methodIdReasons(ids: string[]): string[] {\n  const reasons: string[] = [];\n  if (ids.some((id) => id.length === 0)) {\n    reasons.push(\"login method with blank id\");\n  }\n  if (new Set(ids).size !== ids.length) {\n    reasons.push(\"duplicate login method ids\");\n  }\n  return reasons;\n}\n\n/** Reasons login method descriptors are unusable (duplicate/blank ids). */\nfunction loginMethodReasons(auth: Auth): string[] {\n  let ids: string[];\n  try {\n    ids = auth.loginMethods().map((method) => method.id);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return [`loginMethods() threw: ${message}`];\n  }\n  return methodIdReasons(ids);\n}\n\n/**\n * Validate the auth engine shape (auth is optional — undefined is valid).\n * Returns human-readable reasons, empty when sound.\n */\nexport function validateAuth(auth?: unknown): string[] {\n  if (auth === undefined) {\n    return [];\n  }\n  const record = asRecord(auth);\n  if (!record) {\n    return [\"auth must be an object\"];\n  }\n  const reasons = methodReasons(record, AUTH_METHODS).map((reason) => `auth: ${reason}`);\n  if (reasons.length === 0) {\n    for (const reason of loginMethodReasons(auth as Auth)) {\n      reasons.push(`auth: ${reason}`);\n    }\n  }\n  return reasons;\n}\n\n/** Failure entry for an invalid auth engine. */\nfunction checkAuth(auth: unknown): AdapterSetupFailure[] {\n  const reasons = validateAuth(auth);\n  if (reasons.length === 0) {\n    return [];\n  }\n  return [{ category: \"auth\", kind: \"auth\", name: \"auth\", error: reasons.join(\"; \") }];\n}\n\n/** One slot check for source validation. */\ninterface SlotCheck {\n  adapter: unknown;\n  category: string;\n  slot: string;\n}\n\n/** Descriptor check for provider lists (git hosts, notifiers). */\ninterface ProviderCheck {\n  provider: unknown;\n  index: number;\n  kinds: \"git\" | \"notifier\";\n}\n\n/** Failures for git-host or notifier provider lists. */\nfunction checkProviders(checks: ProviderCheck[]): AdapterSetupFailure[] {\n  const failures: AdapterSetupFailure[] = [];\n  for (const check of checks) {\n    const reasons =\n      check.kinds === \"git\" ? gitReasons(check.provider) : notifierReasons(check.provider);\n    if (reasons.length === 0) {\n      continue;\n    }\n    const slot = check.kinds === \"git\" ? `gitHosts[${check.index}]` : `notifiers[${check.index}]`;\n    const category = check.kinds === \"git\" ? \"git-host\" : \"notifier\";\n    const metadata = asRecord(asRecord(check.provider)?.[\"metadata\"]);\n    failures.push({\n      category,\n      kind: stringField(metadata, \"kind\") ?? \"unknown\",\n      name: stringField(metadata, \"name\") ?? slot,\n      error: reasons.map((reason) => `${slot}: ${reason}`).join(\"; \"),\n    });\n  }\n  return failures;\n}\n\n/** Failure for the email sender slot. */\nfunction checkEmailSender(sender: unknown): AdapterSetupFailure[] {\n  if (sender === undefined) {\n    return [];\n  }\n  const reasons = emailSenderReasons(sender);\n  if (reasons.length === 0) {\n    return [];\n  }\n  const metadata = asRecord(asRecord(sender)?.[\"metadata\"]);\n  return [\n    {\n      category: \"notifier\",\n      kind: stringField(metadata, \"kind\") ?? \"unknown\",\n      name: stringField(metadata, \"name\") ?? \"emailSender\",\n      error: reasons.map((reason) => `emailSender: ${reason}`).join(\"; \"),\n    },\n  ];\n}\n\n/** Failures for the core database/storage/runner/queue slots. */\nfunction checkSlots(checks: SlotCheck[]): AdapterSetupFailure[] {\n  const failures: AdapterSetupFailure[] = [];\n  for (const check of checks) {\n    const reasons = validateAdapter(check.adapter, check.category, check.slot);\n    if (reasons.length === 0) {\n      continue;\n    }\n    const metadata = asRecord(asRecord(check.adapter)?.[\"metadata\"]);\n    failures.push({\n      category: check.category,\n      kind: stringField(metadata, \"kind\") ?? \"unknown\",\n      name: stringField(metadata, \"name\") ?? check.slot,\n      error: reasons.join(\"; \"),\n    });\n  }\n  return failures;\n}\n\n/**\n * Validate every adapter in the boot sources. Returns per-adapter failures\n * (empty when the whole assembly is sound).\n */\nexport function validateAdapterSources(sources: AdapterSetupSources): AdapterSetupFailure[] {\n  const checks: SlotCheck[] = [\n    { adapter: sources.database, category: \"database\", slot: \"database\" },\n    { adapter: sources.storage, category: \"storage\", slot: \"storage\" },\n  ];\n  if (sources.captureRunner !== undefined) {\n    checks.push({\n      adapter: sources.captureRunner,\n      category: \"capture-runner\",\n      slot: \"captureRunner\",\n    });\n  }\n  if (sources.captureQueue !== undefined) {\n    checks.push({ adapter: sources.captureQueue, category: \"capture-queue\", slot: \"captureQueue\" });\n  }\n  const providers: ProviderCheck[] = [\n    ...(sources.gitHosts ?? []).map((provider, index) => ({\n      provider,\n      index,\n      kinds: \"git\" as const,\n    })),\n    ...(sources.notifiers ?? []).map((provider, index) => ({\n      provider,\n      index,\n      kinds: \"notifier\" as const,\n    })),\n  ];\n  return [\n    ...checkSlots(checks),\n    ...checkProviders(providers),\n    ...checkEmailSender(sources.emailSender),\n  ];\n}\n\n/**\n * Validate a full boot assembly: adapters plus the optional auth engine.\n * App assembly calls this — `ShelfOptions` carries `auth` alongside the\n * adapter slots, and an invalid engine fails boot like any adapter.\n */\nexport function validateBootAssembly(\n  sources: AdapterSetupSources & { auth?: unknown },\n): AdapterSetupFailure[] {\n  return [...validateAdapterSources(sources), ...checkAuth(sources.auth)];\n}\n"],"mappings":";;;;;;;;;;;;;;AAaA,MAAM,iBAAiB,EAAE,OAAO;CAC9B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACzB,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AAC5B,CAAC;AAED,MAAM,mBAAmB;CAAC;CAAU;CAAU;CAAO;CAAU;CAAQ;CAAS;AAAK;AAErF,MAAM,kBAAkB;CAAC;CAAQ;CAAS;CAAU;CAAU;CAAQ;CAAe;AAAY;AAEjG,MAAM,iBAAiB,CAAC,UAAU,QAAQ;AAE1C,MAAM,gBAAgB;CAAC;CAAW;CAAU;CAAU;AAAQ;;AAG9D,SAAS,SAAS,OAAgD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC;AAC5F;;AAGA,SAAS,YAAY,QAAwC,KAA4B;CACvF,MAAM,QAAQ,SAAS;CACvB,OAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;;AAGA,SAAS,gBAAgB,SAAkC,UAA4B;CACrF,MAAM,SAAS,eAAe,UAAU,QAAQ,WAAW;CAC3D,IAAI,CAAC,OAAO,SACV,OAAO,CAAC,qBAAqB,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG;CAE3F,MAAM,WAAY,OAAO,KAA8B;CACvD,OAAO,aAAa,WAAW,CAAC,IAAI,CAAC,aAAa,SAAS,yBAAyB,SAAS,EAAE;AACjG;;AAGA,SAAS,iBAAiB,SAA4C;CACpE,MAAM,YAAY,QAAQ;CAC1B,IAAI,cAAc,KAAA,GAChB,OAAO,CAAC;CAEV,MAAM,QAAQ,SAAS,SAAS;CAChC,IAAI,CAAC,OACH,OAAO,CAAC,wDAAwD;CAElE,MAAM,UAAU;EAAC;EAAS;EAAY;CAAQ,CAAC,CAAC,QAC7C,SAAS,OAAO,MAAM,UAAU,UACnC;CACA,OAAO,QAAQ,SAAS,IAAI,CAAC,+BAA+B,QAAQ,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC;AACvF;;AAGA,SAAS,cAAc,SAAkC,SAA6B;CACpF,MAAM,UAAU,QAAQ,QAAQ,WAAW,OAAO,QAAQ,YAAY,UAAU;CAChF,OAAO,QAAQ,SAAS,IAAI,CAAC,oBAAoB,QAAQ,KAAK,GAAG,GAAG,IAAI,CAAC;AAC3E;;AAGA,SAAS,aAAa,SAA4C;CAChE,MAAM,SAAS,SAAS,QAAQ,SAAS;CACzC,IAAI,CAAC,QACH,OAAO,CAAC,oBAAoB;CAE9B,MAAM,UAAU,oBAAoB,QAAQ,UAAU,OAAO,WAAW,KAAA,CAAS;CACjF,OAAO,QAAQ,SAAS,IAAI,CAAC,mBAAmB,QAAQ,KAAK,GAAG,GAAG,IAAI,CAAC;AAC1E;;AAGA,SAAS,iBAAiB,QAA2C;CACnE,MAAM,UAAU;EAAC;EAAQ;EAAO;CAAM,CAAC,CAAC,QAAQ,WAAW,OAAO,YAAY,KAAA,CAAS;CACvF,IAAI,QAAQ,WAAW,KAAK,QAAQ,WAAW,GAI7C,OAHiB;EAAC;EAAQ;EAAO;CAAM,CAAC,CAAC,QACtC,WAAW,OAAO,YAAY,KAAA,KAAa,OAAO,OAAO,YAAY,UAE1D,CAAC,CAAC,KAAK,WAAW,yBAAyB,OAAO,qBAAqB;CAEvF,OAAO,CAAC,oCAAoC,QAAQ,KAAK,GAAG,EAAE,sBAAsB;AACtF;;AAGA,SAAS,eAAe,UAA4B;CAElD,OAAO,QADQ,SAAS,SAAS,QAAQ,CAAC,GAAG,WAAW,CAAC,GAAG,UAAA,EACD,UAAU;AACvE;;AAGA,SAAS,gBAAgB,UAA6B;CACpD,MAAM,SAAS,SAAS,QAAQ;CAChC,IAAI,CAAC,QACH,OAAO,CAAC,qCAAqC;CAE/C,MAAM,UAAU,gBAAgB,QAAQ,UAAU;CAClD,IAAI,OAAO,OAAO,cAAc,YAC9B,QAAQ,KAAK,yBAAyB;CAExC,IAAI,CAAC,eAAe,QAAQ,GAC1B,QAAQ,KAAK,sCAAsC;CAErD,OAAO;AACT;;AAGA,SAAS,mBAAmB,QAA2B;CACrD,MAAM,SAAS,SAAS,MAAM;CAC9B,IAAI,CAAC,QACH,OAAO,CAAC,gCAAgC;CAE1C,MAAM,UAAU,gBAAgB,QAAQ,UAAU;CAClD,IAAI,OAAO,OAAO,YAAY,YAC5B,QAAQ,KAAK,uBAAuB;CAEtC,OAAO;AACT;;AAGA,SAAS,WAAW,UAA6B;CAC/C,MAAM,SAAS,SAAS,QAAQ;CAChC,IAAI,CAAC,QACH,OAAO,CAAC,gCAAgC;CAE1C,MAAM,UAAU,gBAAgB,QAAQ,UAAU;CAClD,IAAI,OAAO,OAAO,cAAc,YAC9B,QAAQ,KAAK,yBAAyB;CAExC,IAAI,CAAC,eAAe,QAAQ,GAC1B,QAAQ,KAAK,sCAAsC;CAErD,OAAO;AACT;;AAGA,SAAS,YAAY,UAA4B;CAC/C,IAAI,aAAa,YACf,OAAO;CAET,IAAI,aAAa,WACf,OAAO;CAET,IAAI,aAAa,kBACf,OAAO;CAET,OAAO;AACT;;AAGA,SAAS,iBAAiB,QAAiC,UAA4B;CACrF,IAAI,aAAa,YACf,OAAO,aAAa,MAAM;CAE5B,OAAO,aAAa,kBAAkB,iBAAiB,MAAM,IAAI,CAAC;AACpE;;;;;AAMA,SAAgB,gBACd,SACA,kBACA,MACU;CACV,MAAM,SAAS,SAAS,OAAO;CAC/B,IAAI,CAAC,QACH,OAAO,CAAC,GAAG,KAAK,2BAA2B;CAE7C,MAAM,UAAU,gBAAgB,QAAQ,gBAAgB,CAAC,CAAC,KAAK,MAAM,GAAG,KAAK,IAAI,GAAG;CACpF,MAAM,QAAQ;EACZ,GAAG,iBAAiB,MAAM;EAC1B,GAAG,cAAc,QAAQ,YAAY,gBAAgB,CAAC;EACtD,GAAG,iBAAiB,QAAQ,gBAAgB;CAC9C;CACA,KAAK,MAAM,UAAU,OACnB,QAAQ,KAAK,GAAG,KAAK,IAAI,QAAQ;CAEnC,OAAO;AACT;;AAGA,MAAM,eAAe;CACnB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,SAAS,gBAAgB,KAAyB;CAChD,MAAM,UAAoB,CAAC;CAC3B,IAAI,IAAI,MAAM,OAAO,GAAG,WAAW,CAAC,GAClC,QAAQ,KAAK,4BAA4B;CAE3C,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,IAAI,QAC5B,QAAQ,KAAK,4BAA4B;CAE3C,OAAO;AACT;;AAGA,SAAS,mBAAmB,MAAsB;CAChD,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,aAAa,CAAC,CAAC,KAAK,WAAW,OAAO,EAAE;CACrD,SAAS,OAAO;EAEd,OAAO,CAAC,yBADQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAC3B;CAC5C;CACA,OAAO,gBAAgB,GAAG;AAC5B;;;;;AAMA,SAAgB,aAAa,MAA0B;CACrD,IAAI,SAAS,KAAA,GACX,OAAO,CAAC;CAEV,MAAM,SAAS,SAAS,IAAI;CAC5B,IAAI,CAAC,QACH,OAAO,CAAC,wBAAwB;CAElC,MAAM,UAAU,cAAc,QAAQ,YAAY,CAAC,CAAC,KAAK,WAAW,SAAS,QAAQ;CACrF,IAAI,QAAQ,WAAW,GACrB,KAAK,MAAM,UAAU,mBAAmB,IAAY,GAClD,QAAQ,KAAK,SAAS,QAAQ;CAGlC,OAAO;AACT;;AAGA,SAAS,UAAU,MAAsC;CACvD,MAAM,UAAU,aAAa,IAAI;CACjC,IAAI,QAAQ,WAAW,GACrB,OAAO,CAAC;CAEV,OAAO,CAAC;EAAE,UAAU;EAAQ,MAAM;EAAQ,MAAM;EAAQ,OAAO,QAAQ,KAAK,IAAI;CAAE,CAAC;AACrF;;AAiBA,SAAS,eAAe,QAAgD;CACtE,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,UACJ,MAAM,UAAU,QAAQ,WAAW,MAAM,QAAQ,IAAI,gBAAgB,MAAM,QAAQ;EACrF,IAAI,QAAQ,WAAW,GACrB;EAEF,MAAM,OAAO,MAAM,UAAU,QAAQ,YAAY,MAAM,MAAM,KAAK,aAAa,MAAM,MAAM;EAC3F,MAAM,WAAW,MAAM,UAAU,QAAQ,aAAa;EACtD,MAAM,WAAW,SAAS,SAAS,MAAM,QAAQ,CAAC,GAAG,WAAW;EAChE,SAAS,KAAK;GACZ;GACA,MAAM,YAAY,UAAU,MAAM,KAAK;GACvC,MAAM,YAAY,UAAU,MAAM,KAAK;GACvC,OAAO,QAAQ,KAAK,WAAW,GAAG,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI;EAChE,CAAC;CACH;CACA,OAAO;AACT;;AAGA,SAAS,iBAAiB,QAAwC;CAChE,IAAI,WAAW,KAAA,GACb,OAAO,CAAC;CAEV,MAAM,UAAU,mBAAmB,MAAM;CACzC,IAAI,QAAQ,WAAW,GACrB,OAAO,CAAC;CAEV,MAAM,WAAW,SAAS,SAAS,MAAM,CAAC,GAAG,WAAW;CACxD,OAAO,CACL;EACE,UAAU;EACV,MAAM,YAAY,UAAU,MAAM,KAAK;EACvC,MAAM,YAAY,UAAU,MAAM,KAAK;EACvC,OAAO,QAAQ,KAAK,WAAW,gBAAgB,QAAQ,CAAC,CAAC,KAAK,IAAI;CACpE,CACF;AACF;;AAGA,SAAS,WAAW,QAA4C;CAC9D,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,UAAU,gBAAgB,MAAM,SAAS,MAAM,UAAU,MAAM,IAAI;EACzE,IAAI,QAAQ,WAAW,GACrB;EAEF,MAAM,WAAW,SAAS,SAAS,MAAM,OAAO,CAAC,GAAG,WAAW;EAC/D,SAAS,KAAK;GACZ,UAAU,MAAM;GAChB,MAAM,YAAY,UAAU,MAAM,KAAK;GACvC,MAAM,YAAY,UAAU,MAAM,KAAK,MAAM;GAC7C,OAAO,QAAQ,KAAK,IAAI;EAC1B,CAAC;CACH;CACA,OAAO;AACT;;;;;AAMA,SAAgB,uBAAuB,SAAqD;CAC1F,MAAM,SAAsB,CAC1B;EAAE,SAAS,QAAQ;EAAU,UAAU;EAAY,MAAM;CAAW,GACpE;EAAE,SAAS,QAAQ;EAAS,UAAU;EAAW,MAAM;CAAU,CACnE;CACA,IAAI,QAAQ,kBAAkB,KAAA,GAC5B,OAAO,KAAK;EACV,SAAS,QAAQ;EACjB,UAAU;EACV,MAAM;CACR,CAAC;CAEH,IAAI,QAAQ,iBAAiB,KAAA,GAC3B,OAAO,KAAK;EAAE,SAAS,QAAQ;EAAc,UAAU;EAAiB,MAAM;CAAe,CAAC;CAEhG,MAAM,YAA6B,CACjC,IAAI,QAAQ,YAAY,CAAC,EAAA,CAAG,KAAK,UAAU,WAAW;EACpD;EACA;EACA,OAAO;CACT,EAAE,GACF,IAAI,QAAQ,aAAa,CAAC,EAAA,CAAG,KAAK,UAAU,WAAW;EACrD;EACA;EACA,OAAO;CACT,EAAE,CACJ;CACA,OAAO;EACL,GAAG,WAAW,MAAM;EACpB,GAAG,eAAe,SAAS;EAC3B,GAAG,iBAAiB,QAAQ,WAAW;CACzC;AACF;;;;;;AAOA,SAAgB,qBACd,SACuB;CACvB,OAAO,CAAC,GAAG,uBAAuB,OAAO,GAAG,GAAG,UAAU,QAAQ,IAAI,CAAC;AACxE"}
+{"version":3,"file":"validate.mjs","names":[],"sources":["../../src/adapters/validate.ts"],"sourcesContent":["/**\n * Boot-time adapter validation: fail fast on third-party adapters that\n * cannot satisfy their slot contract.\n *\n * Types alone cannot stop a bad adapter — this module checks shape at\n * runtime before any I/O runs. `createShelfApp` throws synchronously;\n * the lifecycle runner returns failures without executing hooks.\n */\nimport { z } from \"zod\";\nimport type { Auth } from \"../auth.ts\";\nimport { REQUIRED_TABLE_KEYS } from \"./database.ts\";\nimport type { AdapterSetupFailure, AdapterSetupSources } from \"./setup.ts\";\n\nconst metadataSchema = z.object({\n  name: z.string().min(1),\n  version: z.string().min(1),\n  kind: z.string().min(1),\n  category: z.string().min(1),\n});\n\nconst DATABASE_METHODS = [\"insert\", \"update\", \"get\", \"remove\", \"list\", \"count\", \"all\"];\n\nconst STORAGE_METHODS = [\"read\", \"write\", \"delete\", \"exists\", \"list\", \"writeStream\", \"readStream\"];\n\nconst RUNNER_METHODS = [\"render\", \"cancel\"];\n\nconst QUEUE_METHODS = [\"enqueue\", \"status\", \"active\", \"recent\"];\n\n/** Unknown value narrowed to a property bag for shape checks. */\nfunction asRecord(value: unknown): Record<string, unknown> | null {\n  return typeof value === \"object\" && value !== null ? (value as Record<string, unknown>) : null;\n}\n\n/** String field of a record, or null when absent/non-string. */\nfunction stringField(record: Record<string, unknown> | null, key: string): string | null {\n  const value = record?.[key];\n  return typeof value === \"string\" ? value : null;\n}\n\n/** Reasons the adapter identity fails for the expected slot. */\nfunction metadataReasons(adapter: Record<string, unknown>, expected: string): string[] {\n  const parsed = metadataSchema.safeParse(adapter[\"metadata\"]);\n  if (!parsed.success) {\n    return [`invalid metadata: ${parsed.error.issues.map((i) => i.path.join(\".\")).join(\",\")}`];\n  }\n  const category = (parsed.data as { category: string }).category;\n  return category === expected ? [] : [`category \"${category}\" does not match slot \"${expected}\"`];\n}\n\n/** Reasons the optional lifecycle violates the all-or-nothing rule. */\nfunction lifecycleReasons(adapter: Record<string, unknown>): string[] {\n  const lifecycle = adapter[\"lifecycle\"];\n  if (lifecycle === undefined) {\n    return [];\n  }\n  const hooks = asRecord(lifecycle);\n  if (!hooks) {\n    return [\"lifecycle must be an object with setup/teardown/health\"];\n  }\n  const missing = [\"setup\", \"teardown\", \"health\"].filter(\n    (hook) => typeof hooks[hook] !== \"function\",\n  );\n  return missing.length > 0 ? [`partial lifecycle (missing: ${missing.join(\",\")})`] : [];\n}\n\n/** Reasons the adapter lacks required slot methods. */\nfunction methodReasons(adapter: Record<string, unknown>, methods: string[]): string[] {\n  const missing = methods.filter((method) => typeof adapter[method] !== \"function\");\n  return missing.length > 0 ? [`missing methods: ${missing.join(\",\")}`] : [];\n}\n\n/** Reasons a database adapter lacks its table map. */\nfunction tableReasons(adapter: Record<string, unknown>): string[] {\n  const tables = asRecord(adapter[\"tables\"]);\n  if (!tables) {\n    return [\"missing tables map\"];\n  }\n  const missing = REQUIRED_TABLE_KEYS.filter((table) => tables[table] === undefined);\n  return missing.length > 0 ? [`missing tables: ${missing.join(\",\")}`] : [];\n}\n\n/** Reasons a queue adapter has a partial poll extension. */\nfunction queuePollReasons(record: Record<string, unknown>): string[] {\n  const present = [\"poll\", \"ack\", \"nack\"].filter((method) => record[method] !== undefined);\n  if (present.length === 0 || present.length === 3) {\n    const mistyped = [\"poll\", \"ack\", \"nack\"].filter(\n      (method) => record[method] !== undefined && typeof record[method] !== \"function\",\n    );\n    return mistyped.map((method) => `queue poll extension \"${method}\" must be a function`);\n  }\n  return [`partial poll extension (present: ${present.join(\",\")}; need poll+ack+nack)`];\n}\n\n/** Whether a metadata schema looks like a zod schema (has parse). */\nfunction hasSchemaParse(provider: unknown): boolean {\n  const schema = asRecord(asRecord(provider)?.[\"metadata\"])?.[\"schema\"];\n  return typeof (schema as { parse?: unknown } | undefined)?.parse === \"function\";\n}\n\n/** Reasons a notifier provider lacks its descriptor shape. */\nfunction notifierReasons(provider: unknown): string[] {\n  const record = asRecord(provider);\n  if (!record) {\n    return [\"notifier provider must be an object\"];\n  }\n  const reasons = metadataReasons(record, \"notifier\");\n  if (typeof record[\"create\"] !== \"function\") {\n    reasons.push(\"missing methods: create\");\n  }\n  if (!hasSchemaParse(provider)) {\n    reasons.push(\"metadata.schema must be a zod schema\");\n  }\n  return reasons;\n}\n\n/** Reasons an email sender lacks its transport shape. */\nfunction emailSenderReasons(sender: unknown): string[] {\n  const record = asRecord(sender);\n  if (!record) {\n    return [\"email sender must be an object\"];\n  }\n  const reasons = metadataReasons(record, \"notifier\");\n  if (typeof record[\"send\"] !== \"function\") {\n    reasons.push(\"missing methods: send\");\n  }\n  return reasons;\n}\n\n/** Reasons a design provider lacks its descriptor shape. */\nfunction designReasons(provider: unknown): string[] {\n  const record = asRecord(provider);\n  if (!record) {\n    return [\"design provider must be an object\"];\n  }\n  const reasons = metadataReasons(record, \"design\");\n  const missing = [\"parseUrl\", \"create\"].filter((name) => typeof record[name] !== \"function\");\n  if (missing.length > 0) {\n    reasons.push(`missing methods: ${missing.join(\", \")}`);\n  }\n  return reasons;\n}\n\n/** Required methods for a slot category. */\nfunction slotMethods(category: string): string[] {\n  if (category === \"database\") {\n    return DATABASE_METHODS;\n  }\n  if (category === \"storage\") {\n    return STORAGE_METHODS;\n  }\n  if (category === \"capture-runner\") {\n    return RUNNER_METHODS;\n  }\n  return QUEUE_METHODS;\n}\n\n/** Extra per-slot reasons (table map for databases, poll rule for queues). */\nfunction slotExtraReasons(record: Record<string, unknown>, category: string): string[] {\n  if (category === \"database\") {\n    return tableReasons(record);\n  }\n  return category === \"capture-queue\" ? queuePollReasons(record) : [];\n}\n\n/**\n * Validate one adapter against its slot. Returns human-readable reasons\n * (empty when valid). Never throws — callers decide fail-fast vs collect.\n */\nexport function validateAdapter(\n  adapter: unknown,\n  expectedCategory: string,\n  slot: string,\n): string[] {\n  const record = asRecord(adapter);\n  if (!record) {\n    return [`${slot} adapter must be an object`];\n  }\n  const reasons = metadataReasons(record, expectedCategory).map((r) => `${slot}: ${r}`);\n  const extra = [\n    ...lifecycleReasons(record),\n    ...methodReasons(record, slotMethods(expectedCategory)),\n    ...slotExtraReasons(record, expectedCategory),\n  ];\n  for (const reason of extra) {\n    reasons.push(`${slot}: ${reason}`);\n  }\n  return reasons;\n}\n\n/** Auth surface methods every engine must expose. */\nconst AUTH_METHODS = [\n  \"handler\",\n  \"loginMethods\",\n  \"setup\",\n  \"issueInvite\",\n  \"verifyInvite\",\n  \"acceptInvite\",\n  \"passkeysEnabled\",\n  \"listSessions\",\n  \"listPasskeys\",\n  \"hasPassword\",\n  \"setDisabled\",\n  \"check\",\n  \"createSession\",\n  \"destroySession\",\n];\n\n/** Reasons a method-id list is unusable (blank or duplicate ids). */\nfunction methodIdReasons(ids: string[]): string[] {\n  const reasons: string[] = [];\n  if (ids.some((id) => id.length === 0)) {\n    reasons.push(\"login method with blank id\");\n  }\n  if (new Set(ids).size !== ids.length) {\n    reasons.push(\"duplicate login method ids\");\n  }\n  return reasons;\n}\n\n/** Reasons login method descriptors are unusable (duplicate/blank ids). */\nfunction loginMethodReasons(auth: Auth): string[] {\n  let ids: string[];\n  try {\n    ids = auth.loginMethods().map((method) => method.id);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return [`loginMethods() threw: ${message}`];\n  }\n  return methodIdReasons(ids);\n}\n\n/**\n * Validate the auth engine shape (auth is optional — undefined is valid).\n * Returns human-readable reasons, empty when sound.\n */\nexport function validateAuth(auth?: unknown): string[] {\n  if (auth === undefined) {\n    return [];\n  }\n  const record = asRecord(auth);\n  if (!record) {\n    return [\"auth must be an object\"];\n  }\n  const reasons = methodReasons(record, AUTH_METHODS).map((reason) => `auth: ${reason}`);\n  if (reasons.length === 0) {\n    for (const reason of loginMethodReasons(auth as Auth)) {\n      reasons.push(`auth: ${reason}`);\n    }\n  }\n  return reasons;\n}\n\n/** Failure entry for an invalid auth engine. */\nfunction checkAuth(auth: unknown): AdapterSetupFailure[] {\n  const reasons = validateAuth(auth);\n  if (reasons.length === 0) {\n    return [];\n  }\n  return [{ category: \"auth\", kind: \"auth\", name: \"auth\", error: reasons.join(\"; \") }];\n}\n\n/** One slot check for source validation. */\ninterface SlotCheck {\n  adapter: unknown;\n  category: string;\n  slot: string;\n}\n\n/** Descriptor check for provider lists (design providers, notifiers). */\ninterface ProviderCheck {\n  provider: unknown;\n  index: number;\n  kinds: \"design\" | \"notifier\";\n}\n\nconst PROVIDER_KINDS = {\n  design: { reasons: designReasons, list: \"design\", category: \"design\" },\n  notifier: { reasons: notifierReasons, list: \"notifiers\", category: \"notifier\" },\n} as const;\n\n/** Failures for design or notifier provider lists. */\nfunction checkProviders(checks: ProviderCheck[]): AdapterSetupFailure[] {\n  const failures: AdapterSetupFailure[] = [];\n  for (const check of checks) {\n    const kind = PROVIDER_KINDS[check.kinds];\n    const reasons = kind.reasons(check.provider);\n    if (reasons.length === 0) {\n      continue;\n    }\n    const slot = `${kind.list}[${check.index}]`;\n    const metadata = asRecord(asRecord(check.provider)?.[\"metadata\"]);\n    failures.push({\n      category: kind.category,\n      kind: stringField(metadata, \"kind\") ?? \"unknown\",\n      name: stringField(metadata, \"name\") ?? slot,\n      error: reasons.map((reason) => `${slot}: ${reason}`).join(\"; \"),\n    });\n  }\n  return failures;\n}\n\n/** Failure for the email sender slot. */\nfunction checkEmailSender(sender: unknown): AdapterSetupFailure[] {\n  if (sender === undefined) {\n    return [];\n  }\n  const reasons = emailSenderReasons(sender);\n  if (reasons.length === 0) {\n    return [];\n  }\n  const metadata = asRecord(asRecord(sender)?.[\"metadata\"]);\n  return [\n    {\n      category: \"notifier\",\n      kind: stringField(metadata, \"kind\") ?? \"unknown\",\n      name: stringField(metadata, \"name\") ?? \"emailSender\",\n      error: reasons.map((reason) => `emailSender: ${reason}`).join(\"; \"),\n    },\n  ];\n}\n\n/** Failures for the core database/storage/runner/queue slots. */\nfunction checkSlots(checks: SlotCheck[]): AdapterSetupFailure[] {\n  const failures: AdapterSetupFailure[] = [];\n  for (const check of checks) {\n    const reasons = validateAdapter(check.adapter, check.category, check.slot);\n    if (reasons.length === 0) {\n      continue;\n    }\n    const metadata = asRecord(asRecord(check.adapter)?.[\"metadata\"]);\n    failures.push({\n      category: check.category,\n      kind: stringField(metadata, \"kind\") ?? \"unknown\",\n      name: stringField(metadata, \"name\") ?? check.slot,\n      error: reasons.join(\"; \"),\n    });\n  }\n  return failures;\n}\n\n/**\n * Validate every adapter in the boot sources. Returns per-adapter failures\n * (empty when the whole assembly is sound).\n */\nexport function validateAdapterSources(sources: AdapterSetupSources): AdapterSetupFailure[] {\n  const checks: SlotCheck[] = [\n    { adapter: sources.database, category: \"database\", slot: \"database\" },\n    { adapter: sources.storage, category: \"storage\", slot: \"storage\" },\n  ];\n  if (sources.captureRunner !== undefined) {\n    checks.push({\n      adapter: sources.captureRunner,\n      category: \"capture-runner\",\n      slot: \"captureRunner\",\n    });\n  }\n  const providers: ProviderCheck[] = [\n    ...(sources.design ?? []).map((provider, index) => ({\n      provider,\n      index,\n      kinds: \"design\" as const,\n    })),\n    ...(sources.notifiers ?? []).map((provider, index) => ({\n      provider,\n      index,\n      kinds: \"notifier\" as const,\n    })),\n  ];\n  return [\n    ...checkSlots(checks),\n    ...checkProviders(providers),\n    ...checkEmailSender(sources.emailSender),\n  ];\n}\n\n/**\n * Validate a full boot assembly: adapters plus the optional auth engine.\n * App assembly calls this — `ShelfOptions` carries `auth` alongside the\n * adapter slots, and an invalid engine fails boot like any adapter.\n */\nexport function validateBootAssembly(\n  sources: AdapterSetupSources & { auth?: unknown },\n): AdapterSetupFailure[] {\n  return [...validateAdapterSources(sources), ...checkAuth(sources.auth)];\n}\n"],"mappings":";;;;;;;;;;;;;;AAaA,MAAM,iBAAiB,EAAE,OAAO;CAC9B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACzB,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AAC5B,CAAC;AAED,MAAM,mBAAmB;CAAC;CAAU;CAAU;CAAO;CAAU;CAAQ;CAAS;AAAK;AAErF,MAAM,kBAAkB;CAAC;CAAQ;CAAS;CAAU;CAAU;CAAQ;CAAe;AAAY;AAEjG,MAAM,iBAAiB,CAAC,UAAU,QAAQ;AAE1C,MAAM,gBAAgB;CAAC;CAAW;CAAU;CAAU;AAAQ;;AAG9D,SAAS,SAAS,OAAgD;CAChE,OAAO,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC;AAC5F;;AAGA,SAAS,YAAY,QAAwC,KAA4B;CACvF,MAAM,QAAQ,SAAS;CACvB,OAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;;AAGA,SAAS,gBAAgB,SAAkC,UAA4B;CACrF,MAAM,SAAS,eAAe,UAAU,QAAQ,WAAW;CAC3D,IAAI,CAAC,OAAO,SACV,OAAO,CAAC,qBAAqB,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG;CAE3F,MAAM,WAAY,OAAO,KAA8B;CACvD,OAAO,aAAa,WAAW,CAAC,IAAI,CAAC,aAAa,SAAS,yBAAyB,SAAS,EAAE;AACjG;;AAGA,SAAS,iBAAiB,SAA4C;CACpE,MAAM,YAAY,QAAQ;CAC1B,IAAI,cAAc,KAAA,GAChB,OAAO,CAAC;CAEV,MAAM,QAAQ,SAAS,SAAS;CAChC,IAAI,CAAC,OACH,OAAO,CAAC,wDAAwD;CAElE,MAAM,UAAU;EAAC;EAAS;EAAY;CAAQ,CAAC,CAAC,QAC7C,SAAS,OAAO,MAAM,UAAU,UACnC;CACA,OAAO,QAAQ,SAAS,IAAI,CAAC,+BAA+B,QAAQ,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC;AACvF;;AAGA,SAAS,cAAc,SAAkC,SAA6B;CACpF,MAAM,UAAU,QAAQ,QAAQ,WAAW,OAAO,QAAQ,YAAY,UAAU;CAChF,OAAO,QAAQ,SAAS,IAAI,CAAC,oBAAoB,QAAQ,KAAK,GAAG,GAAG,IAAI,CAAC;AAC3E;;AAGA,SAAS,aAAa,SAA4C;CAChE,MAAM,SAAS,SAAS,QAAQ,SAAS;CACzC,IAAI,CAAC,QACH,OAAO,CAAC,oBAAoB;CAE9B,MAAM,UAAU,oBAAoB,QAAQ,UAAU,OAAO,WAAW,KAAA,CAAS;CACjF,OAAO,QAAQ,SAAS,IAAI,CAAC,mBAAmB,QAAQ,KAAK,GAAG,GAAG,IAAI,CAAC;AAC1E;;AAGA,SAAS,iBAAiB,QAA2C;CACnE,MAAM,UAAU;EAAC;EAAQ;EAAO;CAAM,CAAC,CAAC,QAAQ,WAAW,OAAO,YAAY,KAAA,CAAS;CACvF,IAAI,QAAQ,WAAW,KAAK,QAAQ,WAAW,GAI7C,OAHiB;EAAC;EAAQ;EAAO;CAAM,CAAC,CAAC,QACtC,WAAW,OAAO,YAAY,KAAA,KAAa,OAAO,OAAO,YAAY,UAE1D,CAAC,CAAC,KAAK,WAAW,yBAAyB,OAAO,qBAAqB;CAEvF,OAAO,CAAC,oCAAoC,QAAQ,KAAK,GAAG,EAAE,sBAAsB;AACtF;;AAGA,SAAS,eAAe,UAA4B;CAElD,OAAO,QADQ,SAAS,SAAS,QAAQ,CAAC,GAAG,WAAW,CAAC,GAAG,UAAA,EACD,UAAU;AACvE;;AAGA,SAAS,gBAAgB,UAA6B;CACpD,MAAM,SAAS,SAAS,QAAQ;CAChC,IAAI,CAAC,QACH,OAAO,CAAC,qCAAqC;CAE/C,MAAM,UAAU,gBAAgB,QAAQ,UAAU;CAClD,IAAI,OAAO,OAAO,cAAc,YAC9B,QAAQ,KAAK,yBAAyB;CAExC,IAAI,CAAC,eAAe,QAAQ,GAC1B,QAAQ,KAAK,sCAAsC;CAErD,OAAO;AACT;;AAGA,SAAS,mBAAmB,QAA2B;CACrD,MAAM,SAAS,SAAS,MAAM;CAC9B,IAAI,CAAC,QACH,OAAO,CAAC,gCAAgC;CAE1C,MAAM,UAAU,gBAAgB,QAAQ,UAAU;CAClD,IAAI,OAAO,OAAO,YAAY,YAC5B,QAAQ,KAAK,uBAAuB;CAEtC,OAAO;AACT;;AAGA,SAAS,cAAc,UAA6B;CAClD,MAAM,SAAS,SAAS,QAAQ;CAChC,IAAI,CAAC,QACH,OAAO,CAAC,mCAAmC;CAE7C,MAAM,UAAU,gBAAgB,QAAQ,QAAQ;CAChD,MAAM,UAAU,CAAC,YAAY,QAAQ,CAAC,CAAC,QAAQ,SAAS,OAAO,OAAO,UAAU,UAAU;CAC1F,IAAI,QAAQ,SAAS,GACnB,QAAQ,KAAK,oBAAoB,QAAQ,KAAK,IAAI,GAAG;CAEvD,OAAO;AACT;;AAGA,SAAS,YAAY,UAA4B;CAC/C,IAAI,aAAa,YACf,OAAO;CAET,IAAI,aAAa,WACf,OAAO;CAET,IAAI,aAAa,kBACf,OAAO;CAET,OAAO;AACT;;AAGA,SAAS,iBAAiB,QAAiC,UAA4B;CACrF,IAAI,aAAa,YACf,OAAO,aAAa,MAAM;CAE5B,OAAO,aAAa,kBAAkB,iBAAiB,MAAM,IAAI,CAAC;AACpE;;;;;AAMA,SAAgB,gBACd,SACA,kBACA,MACU;CACV,MAAM,SAAS,SAAS,OAAO;CAC/B,IAAI,CAAC,QACH,OAAO,CAAC,GAAG,KAAK,2BAA2B;CAE7C,MAAM,UAAU,gBAAgB,QAAQ,gBAAgB,CAAC,CAAC,KAAK,MAAM,GAAG,KAAK,IAAI,GAAG;CACpF,MAAM,QAAQ;EACZ,GAAG,iBAAiB,MAAM;EAC1B,GAAG,cAAc,QAAQ,YAAY,gBAAgB,CAAC;EACtD,GAAG,iBAAiB,QAAQ,gBAAgB;CAC9C;CACA,KAAK,MAAM,UAAU,OACnB,QAAQ,KAAK,GAAG,KAAK,IAAI,QAAQ;CAEnC,OAAO;AACT;;AAGA,MAAM,eAAe;CACnB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,SAAS,gBAAgB,KAAyB;CAChD,MAAM,UAAoB,CAAC;CAC3B,IAAI,IAAI,MAAM,OAAO,GAAG,WAAW,CAAC,GAClC,QAAQ,KAAK,4BAA4B;CAE3C,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,SAAS,IAAI,QAC5B,QAAQ,KAAK,4BAA4B;CAE3C,OAAO;AACT;;AAGA,SAAS,mBAAmB,MAAsB;CAChD,IAAI;CACJ,IAAI;EACF,MAAM,KAAK,aAAa,CAAC,CAAC,KAAK,WAAW,OAAO,EAAE;CACrD,SAAS,OAAO;EAEd,OAAO,CAAC,yBADQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAC3B;CAC5C;CACA,OAAO,gBAAgB,GAAG;AAC5B;;;;;AAMA,SAAgB,aAAa,MAA0B;CACrD,IAAI,SAAS,KAAA,GACX,OAAO,CAAC;CAEV,MAAM,SAAS,SAAS,IAAI;CAC5B,IAAI,CAAC,QACH,OAAO,CAAC,wBAAwB;CAElC,MAAM,UAAU,cAAc,QAAQ,YAAY,CAAC,CAAC,KAAK,WAAW,SAAS,QAAQ;CACrF,IAAI,QAAQ,WAAW,GACrB,KAAK,MAAM,UAAU,mBAAmB,IAAY,GAClD,QAAQ,KAAK,SAAS,QAAQ;CAGlC,OAAO;AACT;;AAGA,SAAS,UAAU,MAAsC;CACvD,MAAM,UAAU,aAAa,IAAI;CACjC,IAAI,QAAQ,WAAW,GACrB,OAAO,CAAC;CAEV,OAAO,CAAC;EAAE,UAAU;EAAQ,MAAM;EAAQ,MAAM;EAAQ,OAAO,QAAQ,KAAK,IAAI;CAAE,CAAC;AACrF;AAgBA,MAAM,iBAAiB;CACrB,QAAQ;EAAE,SAAS;EAAe,MAAM;EAAU,UAAU;CAAS;CACrE,UAAU;EAAE,SAAS;EAAiB,MAAM;EAAa,UAAU;CAAW;AAChF;;AAGA,SAAS,eAAe,QAAgD;CACtE,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,OAAO,eAAe,MAAM;EAClC,MAAM,UAAU,KAAK,QAAQ,MAAM,QAAQ;EAC3C,IAAI,QAAQ,WAAW,GACrB;EAEF,MAAM,OAAO,GAAG,KAAK,KAAK,GAAG,MAAM,MAAM;EACzC,MAAM,WAAW,SAAS,SAAS,MAAM,QAAQ,CAAC,GAAG,WAAW;EAChE,SAAS,KAAK;GACZ,UAAU,KAAK;GACf,MAAM,YAAY,UAAU,MAAM,KAAK;GACvC,MAAM,YAAY,UAAU,MAAM,KAAK;GACvC,OAAO,QAAQ,KAAK,WAAW,GAAG,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,IAAI;EAChE,CAAC;CACH;CACA,OAAO;AACT;;AAGA,SAAS,iBAAiB,QAAwC;CAChE,IAAI,WAAW,KAAA,GACb,OAAO,CAAC;CAEV,MAAM,UAAU,mBAAmB,MAAM;CACzC,IAAI,QAAQ,WAAW,GACrB,OAAO,CAAC;CAEV,MAAM,WAAW,SAAS,SAAS,MAAM,CAAC,GAAG,WAAW;CACxD,OAAO,CACL;EACE,UAAU;EACV,MAAM,YAAY,UAAU,MAAM,KAAK;EACvC,MAAM,YAAY,UAAU,MAAM,KAAK;EACvC,OAAO,QAAQ,KAAK,WAAW,gBAAgB,QAAQ,CAAC,CAAC,KAAK,IAAI;CACpE,CACF;AACF;;AAGA,SAAS,WAAW,QAA4C;CAC9D,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,UAAU,gBAAgB,MAAM,SAAS,MAAM,UAAU,MAAM,IAAI;EACzE,IAAI,QAAQ,WAAW,GACrB;EAEF,MAAM,WAAW,SAAS,SAAS,MAAM,OAAO,CAAC,GAAG,WAAW;EAC/D,SAAS,KAAK;GACZ,UAAU,MAAM;GAChB,MAAM,YAAY,UAAU,MAAM,KAAK;GACvC,MAAM,YAAY,UAAU,MAAM,KAAK,MAAM;GAC7C,OAAO,QAAQ,KAAK,IAAI;EAC1B,CAAC;CACH;CACA,OAAO;AACT;;;;;AAMA,SAAgB,uBAAuB,SAAqD;CAC1F,MAAM,SAAsB,CAC1B;EAAE,SAAS,QAAQ;EAAU,UAAU;EAAY,MAAM;CAAW,GACpE;EAAE,SAAS,QAAQ;EAAS,UAAU;EAAW,MAAM;CAAU,CACnE;CACA,IAAI,QAAQ,kBAAkB,KAAA,GAC5B,OAAO,KAAK;EACV,SAAS,QAAQ;EACjB,UAAU;EACV,MAAM;CACR,CAAC;CAEH,MAAM,YAA6B,CACjC,IAAI,QAAQ,UAAU,CAAC,EAAA,CAAG,KAAK,UAAU,WAAW;EAClD;EACA;EACA,OAAO;CACT,EAAE,GACF,IAAI,QAAQ,aAAa,CAAC,EAAA,CAAG,KAAK,UAAU,WAAW;EACrD;EACA;EACA,OAAO;CACT,EAAE,CACJ;CACA,OAAO;EACL,GAAG,WAAW,MAAM;EACpB,GAAG,eAAe,SAAS;EAC3B,GAAG,iBAAiB,QAAQ,WAAW;CACzC;AACF;;;;;;AAOA,SAAgB,qBACd,SACuB;CACvB,OAAO,CAAC,GAAG,uBAAuB,OAAO,GAAG,GAAG,UAAU,QAAQ,IAAI,CAAC;AACxE"}

package/dist/ai.d.mts

@@ -0,0 +1,105 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { Logger } from "./logger.mjs";
+import { EvidenceLimits } from "./insights/limits.mjs";
+import { z } from "zod";
+//#region src/ai.d.ts
+/** Tasks the AI surface routes: build triage and project health. */
+type AiTask = "triage" | "health";
+/** One screenshot sent to a vision-capable model. */
+interface AiImage {
+  mediaType: "image/png";
+  data: Uint8Array;
+  /** Short caption (story, viewport) shown to the model before the image. */
+  label: string;
+}
+/** Evidence handed to the model: delimited text plus optional images. */
+interface AiEvidence {
+  text: string;
+  images: AiImage[];
+}
+/** Provider-reported (or estimated) token usage for one call. */
+interface AiUsageReport {
+  inputTokens: number;
+  outputTokens: number;
+  /** True when the backend reported nothing and a char/4 estimate was used. */
+  estimated: boolean;
+}
+/** Input for {@link Ai.summarize}. */
+interface AiSummarizeInput<T> {
+  task: AiTask;
+  /** Requested profile; falls back to the default profile with a warning. */
+  profile?: string;
+  system: string;
+  evidence: AiEvidence;
+  /** Result schema (the model output is validated against it). */
+  schema: z.ZodType<T>;
+  signal?: AbortSignal;
+}
+/** Result of one successful summarize call. */
+interface AiSummarizeResult<T> {
+  object: T;
+  usage: AiUsageReport;
+  profileRequested: string | null;
+  profileEffective: string;
+  model: string;
+  /** Number of images actually sent to the model. */
+  imagesSent: number;
+  /** True when images were dropped (no vision model, or provider rejected them). */
+  visionSkipped: boolean;
+  warnings: string[];
+}
+/** Instance-level budget options (all optional). */
+interface AiBudget {
+  /** Site-wide daily token cap (UTC day); undefined = no daily cap. */
+  dailyTokens?: number;
+  /** Multiplier applied to tokens counted for calls that sent images. */
+  visionWeight: number;
+  /** Per-project call cap per rolling hour. */
+  perProjectCallsPerHour: number;
+}
+/** Why a summarize call failed. */
+type AiErrorCode = "timeout" | "provider" | "schema" | "aborted" | "unknown";
+/** Failure from {@link Ai.summarize}; carries usage the provider still billed. */
+declare class AiError extends Error {
+  readonly code: AiErrorCode;
+  readonly usage?: AiUsageReport;
+  constructor(code: AiErrorCode, message: string, usage?: AiUsageReport, options?: {
+    cause?: unknown;
+  });
+}
+/** Health probe result. */
+interface AiHealth {
+  ok: boolean;
+  detail?: string;
+}
+/** The AI surface consumed by `ShelfOptions.ai`. */
+interface Ai {
+  /** Run one structured summarize call against a profile's model. */
+  summarize<T>(input: AiSummarizeInput<T>): Promise<AiSummarizeResult<T>>;
+  /** Configured profile names. */
+  profileNames(): string[];
+  /** The profile used when none (or an unknown one) is requested. */
+  defaultProfile(): string;
+  /** Whether the profile has an effective vision model for the task. */
+  hasVision(profile: string | undefined, task: AiTask): boolean;
+  /** Stable identifier of the model a call would use (for hashing/rows). */
+  modelId(profile: string | undefined, task: AiTask, withImages?: boolean): string;
+  /** Budget options (with defaults applied). */
+  budget(): AiBudget;
+  /** Evidence limit overrides configured on the instance. */
+  limits(): Partial<EvidenceLimits>;
+  /** Per-slot timeout in milliseconds. */
+  timeoutMs(profile: string | undefined, task: AiTask, withImages?: boolean): number;
+  /** Host-bound scoped logger. */
+  setLogger?(logger: Logger): void;
+  /** Free boot checks (spec version, wiring); never a billed call. */
+  setup(): Promise<void>;
+  /** Cheap liveness probe; never inference. */
+  health(): Promise<AiHealth>;
+  /** Release resources (unregisters nothing global). */
+  teardown(): Promise<void>;
+}
+//#endregion
+export { Ai, AiBudget, AiError, AiErrorCode, AiEvidence, AiHealth, AiImage, AiSummarizeInput, AiSummarizeResult, AiTask, AiUsageReport };
+//# sourceMappingURL=ai.d.mts.map

package/dist/ai.mjs

@@ -0,0 +1,19 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/ai.ts
+/** Failure from {@link Ai.summarize}; carries usage the provider still billed. */
+var AiError = class extends Error {
+	code;
+	usage;
+	constructor(code, message, usage, options) {
+		super(message, options);
+		this.code = code;
+		this.usage = usage;
+		this.name = "AiError";
+	}
+};
+//#endregion
+export { AiError };
+
+//# sourceMappingURL=ai.mjs.map

package/dist/ai.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.mjs","names":[],"sources":["../src/ai.ts"],"sourcesContent":["/**\n * AI singleton surface (not an adapter; see ADR 0016).\n *\n * Owned by core so `ShelfOptions.ai` needs no dependency edge into the\n * implementation package (`@storyshelf/ai` already depends on core). The\n * package implements and re-exports {@link Ai}.\n */\nimport type { z } from \"zod\";\nimport type { EvidenceLimits } from \"./insights/limits.ts\";\nimport type { Logger } from \"./logger.ts\";\n\n/** Tasks the AI surface routes: build triage and project health. */\nexport type AiTask = \"triage\" | \"health\";\n\n/** One screenshot sent to a vision-capable model. */\nexport interface AiImage {\n  mediaType: \"image/png\";\n  data: Uint8Array;\n  /** Short caption (story, viewport) shown to the model before the image. */\n  label: string;\n}\n\n/** Evidence handed to the model: delimited text plus optional images. */\nexport interface AiEvidence {\n  text: string;\n  images: AiImage[];\n}\n\n/** Provider-reported (or estimated) token usage for one call. */\nexport interface AiUsageReport {\n  inputTokens: number;\n  outputTokens: number;\n  /** True when the backend reported nothing and a char/4 estimate was used. */\n  estimated: boolean;\n}\n\n/** Input for {@link Ai.summarize}. */\nexport interface AiSummarizeInput<T> {\n  task: AiTask;\n  /** Requested profile; falls back to the default profile with a warning. */\n  profile?: string;\n  system: string;\n  evidence: AiEvidence;\n  /** Result schema (the model output is validated against it). */\n  schema: z.ZodType<T>;\n  signal?: AbortSignal;\n}\n\n/** Result of one successful summarize call. */\nexport interface AiSummarizeResult<T> {\n  object: T;\n  usage: AiUsageReport;\n  profileRequested: string | null;\n  profileEffective: string;\n  model: string;\n  /** Number of images actually sent to the model. */\n  imagesSent: number;\n  /** True when images were dropped (no vision model, or provider rejected them). */\n  visionSkipped: boolean;\n  warnings: string[];\n}\n\n/** Instance-level budget options (all optional). */\nexport interface AiBudget {\n  /** Site-wide daily token cap (UTC day); undefined = no daily cap. */\n  dailyTokens?: number;\n  /** Multiplier applied to tokens counted for calls that sent images. */\n  visionWeight: number;\n  /** Per-project call cap per rolling hour. */\n  perProjectCallsPerHour: number;\n}\n\n/** Why a summarize call failed. */\nexport type AiErrorCode = \"timeout\" | \"provider\" | \"schema\" | \"aborted\" | \"unknown\";\n\n/** Failure from {@link Ai.summarize}; carries usage the provider still billed. */\nexport class AiError extends Error {\n  readonly code: AiErrorCode;\n  readonly usage?: AiUsageReport;\n\n  constructor(\n    code: AiErrorCode,\n    message: string,\n    usage?: AiUsageReport,\n    options?: { cause?: unknown },\n  ) {\n    super(message, options);\n    this.code = code;\n    this.usage = usage;\n    this.name = \"AiError\";\n  }\n}\n\n/** Health probe result. */\nexport interface AiHealth {\n  ok: boolean;\n  detail?: string;\n}\n\n/** The AI surface consumed by `ShelfOptions.ai`. */\nexport interface Ai {\n  /** Run one structured summarize call against a profile's model. */\n  summarize<T>(input: AiSummarizeInput<T>): Promise<AiSummarizeResult<T>>;\n  /** Configured profile names. */\n  profileNames(): string[];\n  /** The profile used when none (or an unknown one) is requested. */\n  defaultProfile(): string;\n  /** Whether the profile has an effective vision model for the task. */\n  hasVision(profile: string | undefined, task: AiTask): boolean;\n  /** Stable identifier of the model a call would use (for hashing/rows). */\n  modelId(profile: string | undefined, task: AiTask, withImages?: boolean): string;\n  /** Budget options (with defaults applied). */\n  budget(): AiBudget;\n  /** Evidence limit overrides configured on the instance. */\n  limits(): Partial<EvidenceLimits>;\n  /** Per-slot timeout in milliseconds. */\n  timeoutMs(profile: string | undefined, task: AiTask, withImages?: boolean): number;\n  /** Host-bound scoped logger. */\n  setLogger?(logger: Logger): void;\n  /** Free boot checks (spec version, wiring); never a billed call. */\n  setup(): Promise<void>;\n  /** Cheap liveness probe; never inference. */\n  health(): Promise<AiHealth>;\n  /** Release resources (unregisters nothing global). */\n  teardown(): Promise<void>;\n}\n"],"mappings":";;;;;AA4EA,IAAa,UAAb,cAA6B,MAAM;CACjC;CACA;CAEA,YACE,MACA,SACA,OACA,SACA;EACA,MAAM,SAAS,OAAO;EACtB,KAAK,OAAO;EACZ,KAAK,QAAQ;EACb,KAAK,OAAO;CACd;AACF"}

package/dist/capture/a11y/axe-source.d.mts

@@ -0,0 +1,18 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+//#region src/capture/a11y/axe-source.d.ts
+/** Lazy, cached loader for the axe-core browser bundle. */
+/**
+ * Read `axe.min.js` (~550 KB) once per process, on first use. Lazy on purpose: servers that never run
+ * accessibility checks do not touch the file at boot. A failed read is not cached.
+ */
+declare function loadAxeSource(): Promise<string>;
+/**
+ * Wrap the axe source so evaluating it twice in one document is a no-op. Evaluate it as a string
+ * (CDP `Runtime.evaluate`: not bound by the page's CSP and works over remote browsers, since the
+ * source travels over the wire instead of a file path).
+ */
+declare function axeInjectionScript(source: string): string;
+//#endregion
+export { axeInjectionScript, loadAxeSource };
+//# sourceMappingURL=axe-source.d.mts.map

package/dist/capture/a11y/axe-source.mjs

@@ -0,0 +1,37 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { createRequire } from "node:module";
+import { readFile } from "node:fs/promises";
+//#region src/capture/a11y/axe-source.ts
+/** Lazy, cached loader for the axe-core browser bundle. */
+let cached;
+/**
+* Read `axe.min.js` (~550 KB) once per process, on first use. Lazy on purpose: servers that never run
+* accessibility checks do not touch the file at boot. A failed read is not cached.
+*/
+async function loadAxeSource() {
+	cached ??= readAxeSource();
+	try {
+		return await cached;
+	} catch (error) {
+		cached = void 0;
+		throw error;
+	}
+}
+/**
+* Wrap the axe source so evaluating it twice in one document is a no-op. Evaluate it as a string
+* (CDP `Runtime.evaluate`: not bound by the page's CSP and works over remote browsers, since the
+* source travels over the wire instead of a file path).
+*/
+function axeInjectionScript(source) {
+	return `(function(){if(typeof globalThis.axe!=="undefined")return;\n${source}\n})()`;
+}
+async function readAxeSource() {
+	const path = createRequire(import.meta.url).resolve("axe-core/axe.min.js");
+	return await readFile(path, "utf8");
+}
+//#endregion
+export { axeInjectionScript, loadAxeSource };
+
+//# sourceMappingURL=axe-source.mjs.map

package/dist/capture/a11y/axe-source.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"axe-source.mjs","names":[],"sources":["../../../src/capture/a11y/axe-source.ts"],"sourcesContent":["/** Lazy, cached loader for the axe-core browser bundle. */\n\nimport { readFile } from \"node:fs/promises\";\nimport { createRequire } from \"node:module\";\n\nlet cached: Promise<string> | undefined;\n\n/**\n * Read `axe.min.js` (~550 KB) once per process, on first use. Lazy on purpose: servers that never run\n * accessibility checks do not touch the file at boot. A failed read is not cached.\n */\nexport async function loadAxeSource(): Promise<string> {\n  cached ??= readAxeSource();\n  try {\n    return await cached;\n  } catch (error) {\n    cached = undefined;\n    throw error;\n  }\n}\n\n/**\n * Wrap the axe source so evaluating it twice in one document is a no-op. Evaluate it as a string\n * (CDP `Runtime.evaluate`: not bound by the page's CSP and works over remote browsers, since the\n * source travels over the wire instead of a file path).\n */\nexport function axeInjectionScript(source: string): string {\n  return `(function(){if(typeof globalThis.axe!==\"undefined\")return;\\n${source}\\n})()`;\n}\n\n/** Drop the cached source (tests). */\nexport function resetAxeSourceCache(): void {\n  cached = undefined;\n}\n\nasync function readAxeSource(): Promise<string> {\n  const path = createRequire(import.meta.url).resolve(\"axe-core/axe.min.js\");\n  return await readFile(path, \"utf8\");\n}\n"],"mappings":";;;;;;;AAKA,IAAI;;;;;AAMJ,eAAsB,gBAAiC;CACrD,WAAW,cAAc;CACzB,IAAI;EACF,OAAO,MAAM;CACf,SAAS,OAAO;EACd,SAAS,KAAA;EACT,MAAM;CACR;AACF;;;;;;AAOA,SAAgB,mBAAmB,QAAwB;CACzD,OAAO,+DAA+D,OAAO;AAC/E;AAOA,eAAe,gBAAiC;CAC9C,MAAM,OAAO,cAAc,YAAY,GAAG,CAAC,CAAC,QAAQ,qBAAqB;CACzE,OAAO,MAAM,SAAS,MAAM,MAAM;AACpC"}

package/dist/capture/a11y/in-page.d.mts

@@ -0,0 +1,27 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { SlimViolation } from "./map.mjs";
+import { A11yRunPlan } from "./options.mjs";
+//#region src/capture/a11y/in-page.d.ts
+/** What {@link inPageReadA11yParameters} found: the plain-data `parameters.a11y` and what was dropped. */
+interface A11yParametersRead {
+  params: unknown;
+  /** Function values (and items that held nothing else) left out because a page cannot hand them over. */
+  dropped: number;
+}
+/**
+ * Read the current story's `parameters.a11y` from the running Storybook preview as plain data.
+ * Functions (`config.rules[].matches`, custom checks) cannot cross into the runner, so they are
+ * dropped, and an object or array item that held nothing else goes with them (an emptied rule item
+ * would otherwise reset to axe's default). Returns undefined when there is no `a11y` parameter or it
+ * cannot be read at all (cyclic).
+ */
+declare function inPageReadA11yParameters(): A11yParametersRead | undefined;
+/**
+ * Run the injected axe over the plan's context and return only slim fields (id, impact, help, first
+ * target, node count). Throws when axe is not present in the page.
+ */
+declare function inPageRunAxe(plan: A11yRunPlan): Promise<SlimViolation[]>;
+//#endregion
+export { A11yParametersRead, inPageReadA11yParameters, inPageRunAxe };
+//# sourceMappingURL=in-page.d.mts.map

package/dist/capture/a11y/in-page.mjs

@@ -0,0 +1,60 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/capture/a11y/in-page.ts
+/**
+* Read the current story's `parameters.a11y` from the running Storybook preview as plain data.
+* Functions (`config.rules[].matches`, custom checks) cannot cross into the runner, so they are
+* dropped, and an object or array item that held nothing else goes with them (an emptied rule item
+* would otherwise reset to axe's default). Returns undefined when there is no `a11y` parameter or it
+* cannot be read at all (cyclic).
+*/
+function inPageReadA11yParameters() {
+	const a11y = globalThis.__STORYBOOK_PREVIEW__?.currentRender?.story?.parameters?.a11y;
+	if (a11y === void 0) return void 0;
+	const state = { dropped: 0 };
+	const DROP = Symbol("drop");
+	const clean = (value, depth) => {
+		if (depth > 32) throw new Error("too deep");
+		if (typeof value === "function" || typeof value === "symbol" || value === void 0) {
+			state.dropped += 1;
+			return DROP;
+		}
+		if (value === null || typeof value !== "object") return value;
+		const before = state.dropped;
+		const entries = Array.isArray(value) ? value.map((item, index) => [String(index), item]) : Object.entries(value);
+		const kept = entries.map(([key, item]) => [key, clean(item, depth + 1)]).filter(([, item]) => item !== DROP);
+		if (kept.length === 0 && entries.length > 0 && state.dropped > before) return DROP;
+		return Array.isArray(value) ? kept.map(([, item]) => item) : Object.fromEntries(kept);
+	};
+	try {
+		const params = clean(a11y, 0);
+		return params === DROP ? void 0 : {
+			params,
+			dropped: state.dropped
+		};
+	} catch {
+		return;
+	}
+}
+/**
+* Run the injected axe over the plan's context and return only slim fields (id, impact, help, first
+* target, node count). Throws when axe is not present in the page.
+*/
+async function inPageRunAxe(plan) {
+	const win = globalThis;
+	if (!win.axe) throw new Error("axe is not loaded in the page");
+	if (typeof plan.context === "string" && !win.document.querySelector(plan.context)) return [];
+	if (Object.keys(plan.config).length > 0) win.axe.configure(plan.config);
+	return (await win.axe.run(plan.context, plan.options)).violations.map((v) => ({
+		id: v.id,
+		impact: v.impact ?? null,
+		help: v.help,
+		target: (v.nodes[0]?.target ?? []).flat(Infinity).join(" "),
+		count: v.nodes.length
+	}));
+}
+//#endregion
+export { inPageReadA11yParameters, inPageRunAxe };
+
+//# sourceMappingURL=in-page.mjs.map

package/dist/capture/a11y/in-page.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-page.mjs","names":["win"],"sources":["../../../src/capture/a11y/in-page.ts"],"sourcesContent":["/**\n * Functions evaluated inside the story page. Playwright and Puppeteer serialise only a function's\n * source, so each must stay ONE self-contained function: no imports, helpers or module bindings\n * (`in-page.test.ts` rebuilds them from source in a bare scope to guard that).\n */\n\nimport type { SlimViolation } from \"./map.ts\";\nimport type { A11yRunPlan } from \"./options.ts\";\n\n/** What {@link inPageReadA11yParameters} found: the plain-data `parameters.a11y` and what was dropped. */\nexport interface A11yParametersRead {\n  params: unknown;\n  /** Function values (and items that held nothing else) left out because a page cannot hand them over. */\n  dropped: number;\n}\n\n/**\n * Read the current story's `parameters.a11y` from the running Storybook preview as plain data.\n * Functions (`config.rules[].matches`, custom checks) cannot cross into the runner, so they are\n * dropped, and an object or array item that held nothing else goes with them (an emptied rule item\n * would otherwise reset to axe's default). Returns undefined when there is no `a11y` parameter or it\n * cannot be read at all (cyclic).\n */\n// oxlint-disable-next-line eslint/max-statements -- must stay one self-contained function (see above)\nexport function inPageReadA11yParameters(): A11yParametersRead | undefined {\n  const win = globalThis as unknown as {\n    // oxlint-disable-next-line eslint/no-underscore-dangle -- Storybook global\n    __STORYBOOK_PREVIEW__?: {\n      currentRender?: { story?: { parameters?: { a11y?: unknown } } };\n    };\n  };\n  // oxlint-disable-next-line eslint/no-underscore-dangle -- Storybook global\n  const a11y = win.__STORYBOOK_PREVIEW__?.currentRender?.story?.parameters?.a11y;\n  if (a11y === undefined) return undefined;\n  const state = { dropped: 0 };\n  const DROP = Symbol(\"drop\");\n  const clean = (value: unknown, depth: number): unknown => {\n    if (depth > 32) throw new Error(\"too deep\");\n    if (typeof value === \"function\" || typeof value === \"symbol\" || value === undefined) {\n      state.dropped += 1;\n      return DROP;\n    }\n    if (value === null || typeof value !== \"object\") return value;\n    const before = state.dropped;\n    const entries: [string, unknown][] = Array.isArray(value)\n      ? value.map((item, index): [string, unknown] => [String(index), item])\n      : Object.entries(value);\n    const kept = entries\n      .map(([key, item]): [string, unknown] => [key, clean(item, depth + 1)])\n      .filter(([, item]) => item !== DROP);\n    if (kept.length === 0 && entries.length > 0 && state.dropped > before) return DROP;\n    return Array.isArray(value) ? kept.map(([, item]) => item) : Object.fromEntries(kept);\n  };\n  try {\n    const params = clean(a11y, 0);\n    return params === DROP ? undefined : { params, dropped: state.dropped };\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Run the injected axe over the plan's context and return only slim fields (id, impact, help, first\n * target, node count). Throws when axe is not present in the page.\n */\n// oxlint-disable-next-line eslint/max-statements, eslint/max-lines-per-function -- must stay one self-contained function (see above)\nexport async function inPageRunAxe(plan: A11yRunPlan): Promise<SlimViolation[]> {\n  const win = globalThis as unknown as {\n    axe?: {\n      configure: (config: unknown) => void;\n      run: (context: unknown, options: unknown) => Promise<{ violations: AxeViolation[] }>;\n    };\n    document: { querySelector: (selector: string) => unknown };\n  };\n  interface AxeViolation {\n    id: string;\n    impact?: string | null;\n    help: string;\n    nodes: { target: unknown[] }[];\n  }\n  if (!win.axe) throw new Error(\"axe is not loaded in the page\");\n  if (typeof plan.context === \"string\" && !win.document.querySelector(plan.context)) return [];\n  if (Object.keys(plan.config).length > 0) win.axe.configure(plan.config);\n  const results = await win.axe.run(plan.context, plan.options);\n  return results.violations.map((v) => ({\n    id: v.id,\n    impact: v.impact ?? null,\n    help: v.help,\n    target: (v.nodes[0]?.target ?? []).flat(Infinity).join(\" \"),\n    count: v.nodes.length,\n  }));\n}\n"],"mappings":";;;;;;;;;;;AAwBA,SAAgB,2BAA2D;CAQzE,MAAM,OAAOA,WAAI,uBAAuB,eAAe,OAAO,YAAY;CAC1E,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;CAC/B,MAAM,QAAQ,EAAE,SAAS,EAAE;CAC3B,MAAM,OAAO,OAAO,MAAM;CAC1B,MAAM,SAAS,OAAgB,UAA2B;EACxD,IAAI,QAAQ,IAAI,MAAM,IAAI,MAAM,UAAU;EAC1C,IAAI,OAAO,UAAU,cAAc,OAAO,UAAU,YAAY,UAAU,KAAA,GAAW;GACnF,MAAM,WAAW;GACjB,OAAO;EACT;EACA,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;EACxD,MAAM,SAAS,MAAM;EACrB,MAAM,UAA+B,MAAM,QAAQ,KAAK,IACpD,MAAM,KAAK,MAAM,UAA6B,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC,IACnE,OAAO,QAAQ,KAAK;EACxB,MAAM,OAAO,QACV,KAAK,CAAC,KAAK,UAA6B,CAAC,KAAK,MAAM,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,CACtE,QAAQ,GAAG,UAAU,SAAS,IAAI;EACrC,IAAI,KAAK,WAAW,KAAK,QAAQ,SAAS,KAAK,MAAM,UAAU,QAAQ,OAAO;EAC9E,OAAO,MAAM,QAAQ,KAAK,IAAI,KAAK,KAAK,GAAG,UAAU,IAAI,IAAI,OAAO,YAAY,IAAI;CACtF;CACA,IAAI;EACF,MAAM,SAAS,MAAM,MAAM,CAAC;EAC5B,OAAO,WAAW,OAAO,KAAA,IAAY;GAAE;GAAQ,SAAS,MAAM;EAAQ;CACxE,QAAQ;EACN;CACF;AACF;;;;;AAOA,eAAsB,aAAa,MAA6C;CAC9E,MAAM,MAAM;CAaZ,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,+BAA+B;CAC7D,IAAI,OAAO,KAAK,YAAY,YAAY,CAAC,IAAI,SAAS,cAAc,KAAK,OAAO,GAAG,OAAO,CAAC;CAC3F,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,SAAS,GAAG,IAAI,IAAI,UAAU,KAAK,MAAM;CAEtE,QAAO,MADe,IAAI,IAAI,IAAI,KAAK,SAAS,KAAK,OAAO,EAAA,CAC7C,WAAW,KAAK,OAAO;EACpC,IAAI,EAAE;EACN,QAAQ,EAAE,UAAU;EACpB,MAAM,EAAE;EACR,SAAS,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAA,CAAG,KAAK,QAAQ,CAAC,CAAC,KAAK,GAAG;EAC1D,OAAO,EAAE,MAAM;CACjB,EAAE;AACJ"}

package/dist/capture/a11y/map.d.mts

@@ -0,0 +1,24 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+//#region src/capture/a11y/map.d.ts
+/** Map slim in-page axe results to `a11y:` violation strings. */
+/** Most violations reported per snapshot; the rest collapse into "…and N more". */
+declare const MAX_REPORTED_VIOLATIONS = 10;
+/** The only per-violation fields that leave the page (raw axe nodes carry large html payloads). */
+interface SlimViolation {
+  id: string;
+  impact: string | null;
+  help: string;
+  /** Selector of the first affected node. */
+  target: string;
+  /** Number of affected nodes. */
+  count: number;
+}
+/**
+ * One string per violation: rule id, impact, help text, short target and node count, worst impact
+ * first. `;` is reserved (the pipeline joins annotations with it), so it never appears in a string.
+ */
+declare function mapAxeViolations(violations: readonly SlimViolation[]): string[];
+//#endregion
+export { MAX_REPORTED_VIOLATIONS, SlimViolation, mapAxeViolations };
+//# sourceMappingURL=map.d.mts.map

package/dist/capture/a11y/map.mjs

@@ -0,0 +1,48 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/capture/a11y/map.ts
+/** Map slim in-page axe results to `a11y:` violation strings. */
+/** Most violations reported per snapshot; the rest collapse into "…and N more". */
+const MAX_REPORTED_VIOLATIONS = 10;
+const MAX_SELECTOR_LENGTH = 60;
+const MAX_HELP_LENGTH = 90;
+const IMPACT_ORDER = [
+	"critical",
+	"serious",
+	"moderate",
+	"minor"
+];
+/**
+* One string per violation: rule id, impact, help text, short target and node count, worst impact
+* first. `;` is reserved (the pipeline joins annotations with it), so it never appears in a string.
+*/
+function mapAxeViolations(violations) {
+	const sorted = violations.toSorted(compareViolations);
+	const lines = sorted.slice(0, 10).map((violation) => formatViolation(violation));
+	const more = sorted.length - lines.length;
+	if (more > 0) lines.push(`…and ${more} more`);
+	return lines;
+}
+function formatViolation(v) {
+	const nodes = `${v.count} node${v.count === 1 ? "" : "s"}`;
+	const target = truncate(v.target, MAX_SELECTOR_LENGTH);
+	return clean(`${v.id} (${v.impact ?? "unknown"}): ${truncate(v.help, MAX_HELP_LENGTH)} [${target}] ${nodes}`);
+}
+function compareViolations(a, b) {
+	return rank(a.impact) - rank(b.impact) || a.id.localeCompare(b.id);
+}
+function rank(impact) {
+	const index = IMPACT_ORDER.indexOf(impact ?? "");
+	return index === -1 ? IMPACT_ORDER.length : index;
+}
+function truncate(text, max) {
+	return text.length > max ? `${text.slice(0, max - 1)}…` : text;
+}
+function clean(text) {
+	return text.replaceAll(/\s+/gu, " ").replaceAll(";", ",");
+}
+//#endregion
+export { MAX_REPORTED_VIOLATIONS, mapAxeViolations };
+
+//# sourceMappingURL=map.mjs.map

package/dist/capture/a11y/map.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"map.mjs","names":[],"sources":["../../../src/capture/a11y/map.ts"],"sourcesContent":["/** Map slim in-page axe results to `a11y:` violation strings. */\n\n/** Most violations reported per snapshot; the rest collapse into \"…and N more\". */\nexport const MAX_REPORTED_VIOLATIONS = 10;\nconst MAX_SELECTOR_LENGTH = 60;\nconst MAX_HELP_LENGTH = 90;\nconst IMPACT_ORDER = [\"critical\", \"serious\", \"moderate\", \"minor\"];\n\n/** The only per-violation fields that leave the page (raw axe nodes carry large html payloads). */\nexport interface SlimViolation {\n  id: string;\n  impact: string | null;\n  help: string;\n  /** Selector of the first affected node. */\n  target: string;\n  /** Number of affected nodes. */\n  count: number;\n}\n\n/**\n * One string per violation: rule id, impact, help text, short target and node count, worst impact\n * first. `;` is reserved (the pipeline joins annotations with it), so it never appears in a string.\n */\nexport function mapAxeViolations(violations: readonly SlimViolation[]): string[] {\n  const sorted = violations.toSorted(compareViolations);\n  const lines = sorted\n    .slice(0, MAX_REPORTED_VIOLATIONS)\n    .map((violation) => formatViolation(violation));\n  const more = sorted.length - lines.length;\n  if (more > 0) lines.push(`…and ${more} more`);\n  return lines;\n}\n\nfunction formatViolation(v: SlimViolation): string {\n  const nodes = `${v.count} node${v.count === 1 ? \"\" : \"s\"}`;\n  const target = truncate(v.target, MAX_SELECTOR_LENGTH);\n  return clean(\n    `${v.id} (${v.impact ?? \"unknown\"}): ${truncate(v.help, MAX_HELP_LENGTH)} [${target}] ${nodes}`,\n  );\n}\n\nfunction compareViolations(a: SlimViolation, b: SlimViolation): number {\n  return rank(a.impact) - rank(b.impact) || a.id.localeCompare(b.id);\n}\n\nfunction rank(impact: string | null): number {\n  const index = IMPACT_ORDER.indexOf(impact ?? \"\");\n  return index === -1 ? IMPACT_ORDER.length : index;\n}\n\nfunction truncate(text: string, max: number): string {\n  return text.length > max ? `${text.slice(0, max - 1)}…` : text;\n}\n\nfunction clean(text: string): string {\n  return text.replaceAll(/\\s+/gu, \" \").replaceAll(\";\", \",\");\n}\n"],"mappings":";;;;;;AAGA,MAAa,0BAA0B;AACvC,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AACxB,MAAM,eAAe;CAAC;CAAY;CAAW;CAAY;AAAO;;;;;AAiBhE,SAAgB,iBAAiB,YAAgD;CAC/E,MAAM,SAAS,WAAW,SAAS,iBAAiB;CACpD,MAAM,QAAQ,OACX,MAAM,GAAA,EAA0B,CAAC,CACjC,KAAK,cAAc,gBAAgB,SAAS,CAAC;CAChD,MAAM,OAAO,OAAO,SAAS,MAAM;CACnC,IAAI,OAAO,GAAG,MAAM,KAAK,QAAQ,KAAK,MAAM;CAC5C,OAAO;AACT;AAEA,SAAS,gBAAgB,GAA0B;CACjD,MAAM,QAAQ,GAAG,EAAE,MAAM,OAAO,EAAE,UAAU,IAAI,KAAK;CACrD,MAAM,SAAS,SAAS,EAAE,QAAQ,mBAAmB;CACrD,OAAO,MACL,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,UAAU,KAAK,SAAS,EAAE,MAAM,eAAe,EAAE,IAAI,OAAO,IAAI,OAC1F;AACF;AAEA,SAAS,kBAAkB,GAAkB,GAA0B;CACrE,OAAO,KAAK,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,KAAK,EAAE,GAAG,cAAc,EAAE,EAAE;AACnE;AAEA,SAAS,KAAK,QAA+B;CAC3C,MAAM,QAAQ,aAAa,QAAQ,UAAU,EAAE;CAC/C,OAAO,UAAU,KAAK,aAAa,SAAS;AAC9C;AAEA,SAAS,SAAS,MAAc,KAAqB;CACnD,OAAO,KAAK,SAAS,MAAM,GAAG,KAAK,MAAM,GAAG,MAAM,CAAC,EAAE,KAAK;AAC5D;AAEA,SAAS,MAAM,MAAsB;CACnC,OAAO,KAAK,WAAW,SAAS,GAAG,CAAC,CAAC,WAAW,KAAK,GAAG;AAC1D"}

package/dist/capture/a11y/options.d.mts

@@ -0,0 +1,23 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+//#region src/capture/a11y/options.d.ts
+/** Turn Storybook's `parameters.a11y` into an axe run plan. */
+/** The story root axe scans unless `parameters.a11y.element`/`context` says otherwise. */
+declare const A11Y_ROOT_SELECTOR = "#storybook-root";
+/** What to hand to `axe.configure` / `axe.run` in the page (JSON-serialisable). */
+interface A11yRunPlan {
+  /** Why the story is skipped (`disable`, `test: "off"`); undefined when axe should run. */
+  skip?: string;
+  config: Record<string, unknown>;
+  options: Record<string, unknown>;
+  context: unknown;
+}
+/**
+ * Resolve the run plan from the JSON-serialisable subset of `parameters.a11y` (functions cannot be
+ * read from the page). `disable: true` and `test: "off"` skip the story; `test: "todo" | "error"`
+ * still only annotate, results never fail a build.
+ */
+declare function resolveA11yRun(raw: unknown): A11yRunPlan;
+//#endregion
+export { A11Y_ROOT_SELECTOR, A11yRunPlan, resolveA11yRun };
+//# sourceMappingURL=options.d.mts.map

package/dist/capture/a11y/options.mjs

@@ -0,0 +1,75 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/capture/a11y/options.ts
+/** Turn Storybook's `parameters.a11y` into an axe run plan. */
+/** The story root axe scans unless `parameters.a11y.element`/`context` says otherwise. */
+const A11Y_ROOT_SELECTOR = "#storybook-root";
+/**
+* Rule tags scanned by default: WCAG A/AA plus axe's `best-practice` rules; `parameters.a11y.options.runOnly`
+* replaces them. The page-level best-practice rules (`region`, `landmark-one-main`,
+* `page-has-heading-one`) need the whole document in scope and so stay silent for the default
+* scan of `#storybook-root`; no rule is switched off by default (checked in a real browser).
+*/
+const DEFAULT_RUN_ONLY = {
+	type: "tag",
+	values: [
+		"wcag2a",
+		"wcag2aa",
+		"wcag21a",
+		"wcag21aa",
+		"wcag22aa",
+		"best-practice"
+	]
+};
+/**
+* Resolve the run plan from the JSON-serialisable subset of `parameters.a11y` (functions cannot be
+* read from the page). `disable: true` and `test: "off"` skip the story; `test: "todo" | "error"`
+* still only annotate, results never fail a build.
+*/
+function resolveA11yRun(raw) {
+	const params = asRecord(raw) ?? {};
+	const skip = skipReason(params);
+	const config = asRecord(params["config"]) ?? {};
+	const userOptions = asRecord(params["options"]);
+	const rules = {
+		...disabledByConfig(config),
+		...asRecord(userOptions?.["rules"])
+	};
+	const options = {
+		runOnly: DEFAULT_RUN_ONLY,
+		...userOptions,
+		rules
+	};
+	const context = params["element"] ?? params["context"] ?? "#storybook-root";
+	return {
+		...skip ? { skip } : {},
+		config,
+		options,
+		context
+	};
+}
+/**
+* `axe.configure({ rules: [{ id, enabled: false }] })` is ignored under a tag-based `runOnly`, so
+* mirror those switches into the run options where they are honoured.
+*/
+function disabledByConfig(config) {
+	const out = {};
+	const rules = Array.isArray(config["rules"]) ? config["rules"] : [];
+	for (const rule of rules) {
+		const entry = asRecord(rule);
+		if (entry?.["enabled"] === false && typeof entry["id"] === "string") out[entry["id"]] = { enabled: false };
+	}
+	return out;
+}
+function skipReason(params) {
+	if (params["disable"] === true) return "parameters.a11y.disable";
+	if (params["test"] === "off") return "parameters.a11y.test is \"off\"";
+}
+function asRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+//#endregion
+export { A11Y_ROOT_SELECTOR, resolveA11yRun };
+
+//# sourceMappingURL=options.mjs.map

package/dist/capture/a11y/options.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.mjs","names":[],"sources":["../../../src/capture/a11y/options.ts"],"sourcesContent":["/** Turn Storybook's `parameters.a11y` into an axe run plan. */\n\n/** The story root axe scans unless `parameters.a11y.element`/`context` says otherwise. */\nexport const A11Y_ROOT_SELECTOR = \"#storybook-root\";\n\n/**\n * Rule tags scanned by default: WCAG A/AA plus axe's `best-practice` rules; `parameters.a11y.options.runOnly`\n * replaces them. The page-level best-practice rules (`region`, `landmark-one-main`,\n * `page-has-heading-one`) need the whole document in scope and so stay silent for the default\n * scan of `#storybook-root`; no rule is switched off by default (checked in a real browser).\n */\nconst DEFAULT_RUN_ONLY = {\n  type: \"tag\",\n  values: [\"wcag2a\", \"wcag2aa\", \"wcag21a\", \"wcag21aa\", \"wcag22aa\", \"best-practice\"],\n};\n\n/** What to hand to `axe.configure` / `axe.run` in the page (JSON-serialisable). */\nexport interface A11yRunPlan {\n  /** Why the story is skipped (`disable`, `test: \"off\"`); undefined when axe should run. */\n  skip?: string;\n  config: Record<string, unknown>;\n  options: Record<string, unknown>;\n  context: unknown;\n}\n\n/**\n * Resolve the run plan from the JSON-serialisable subset of `parameters.a11y` (functions cannot be\n * read from the page). `disable: true` and `test: \"off\"` skip the story; `test: \"todo\" | \"error\"`\n * still only annotate, results never fail a build.\n */\nexport function resolveA11yRun(raw: unknown): A11yRunPlan {\n  const params = asRecord(raw) ?? {};\n  const skip = skipReason(params);\n  const config = asRecord(params[\"config\"]) ?? {};\n  const userOptions = asRecord(params[\"options\"]);\n  const rules = { ...disabledByConfig(config), ...asRecord(userOptions?.[\"rules\"]) };\n  const options = { runOnly: DEFAULT_RUN_ONLY, ...userOptions, rules };\n  const context = params[\"element\"] ?? params[\"context\"] ?? A11Y_ROOT_SELECTOR;\n  return { ...(skip ? { skip } : {}), config, options, context };\n}\n\n/**\n * `axe.configure({ rules: [{ id, enabled: false }] })` is ignored under a tag-based `runOnly`, so\n * mirror those switches into the run options where they are honoured.\n */\nfunction disabledByConfig(config: Record<string, unknown>): Record<string, { enabled: false }> {\n  const out: Record<string, { enabled: false }> = {};\n  const rules = Array.isArray(config[\"rules\"]) ? (config[\"rules\"] as unknown[]) : [];\n  for (const rule of rules) {\n    const entry = asRecord(rule);\n    if (entry?.[\"enabled\"] === false && typeof entry[\"id\"] === \"string\")\n      out[entry[\"id\"]] = { enabled: false };\n  }\n  return out;\n}\n\nfunction skipReason(params: Record<string, unknown>): string | undefined {\n  if (params[\"disable\"] === true) return \"parameters.a11y.disable\";\n  if (params[\"test\"] === \"off\") return 'parameters.a11y.test is \"off\"';\n  return undefined;\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | undefined {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n"],"mappings":";;;;;;AAGA,MAAa,qBAAqB;;;;;;;AAQlC,MAAM,mBAAmB;CACvB,MAAM;CACN,QAAQ;EAAC;EAAU;EAAW;EAAW;EAAY;EAAY;CAAe;AAClF;;;;;;AAgBA,SAAgB,eAAe,KAA2B;CACxD,MAAM,SAAS,SAAS,GAAG,KAAK,CAAC;CACjC,MAAM,OAAO,WAAW,MAAM;CAC9B,MAAM,SAAS,SAAS,OAAO,SAAS,KAAK,CAAC;CAC9C,MAAM,cAAc,SAAS,OAAO,UAAU;CAC9C,MAAM,QAAQ;EAAE,GAAG,iBAAiB,MAAM;EAAG,GAAG,SAAS,cAAc,QAAQ;CAAE;CACjF,MAAM,UAAU;EAAE,SAAS;EAAkB,GAAG;EAAa;CAAM;CACnE,MAAM,UAAU,OAAO,cAAc,OAAO,cAAA;CAC5C,OAAO;EAAE,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;EAAI;EAAQ;EAAS;CAAQ;AAC/D;;;;;AAMA,SAAS,iBAAiB,QAAqE;CAC7F,MAAM,MAA0C,CAAC;CACjD,MAAM,QAAQ,MAAM,QAAQ,OAAO,QAAQ,IAAK,OAAO,WAAyB,CAAC;CACjF,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,QAAQ,SAAS,IAAI;EAC3B,IAAI,QAAQ,eAAe,SAAS,OAAO,MAAM,UAAU,UACzD,IAAI,MAAM,SAAS,EAAE,SAAS,MAAM;CACxC;CACA,OAAO;AACT;AAEA,SAAS,WAAW,QAAqD;CACvE,IAAI,OAAO,eAAe,MAAM,OAAO;CACvC,IAAI,OAAO,YAAY,OAAO,OAAO;AAEvC;AAEA,SAAS,SAAS,OAAqD;CACrE,OAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD,KAAA;AACN"}