@storyshelf/core 0.6.2 → 0.8.0

package/dist/adapter/database.mjs

@@ -1,7 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-//#region src/adapters/database.ts
+// src/adapters/database.ts
+/** A fenced reference write lost its generation race and should be retried. */
+var ReferenceGenerationConflict = class extends Error {};
 /** Table keys every DatabaseAdapter must expose (contract + validation share this). */
 const REQUIRED_TABLE_KEYS = [
 	"projects",
@@ -24,7 +26,6 @@ function clampListLimit(limit) {
 	if (!Number.isFinite(limit)) return MAX_LIST_LIMIT;
 	return Math.min(Math.max(Math.floor(limit), 1), MAX_LIST_LIMIT);
 }
-//#endregion
-export { MAX_LIST_LIMIT, REQUIRED_TABLE_KEYS, clampListLimit };
+export { MAX_LIST_LIMIT, REQUIRED_TABLE_KEYS, ReferenceGenerationConflict, clampListLimit };
 
 //# sourceMappingURL=database.mjs.map

package/dist/adapter/database.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"database.mjs","names":[],"sources":["../../src/adapters/database.ts"],"sourcesContent":["/**\n * Database adapter interface: query builders over explicitly typed tables.\n *\n * Canonical home of the database contract — {@link DatabaseAdapter},\n * {@link Tables}, {@link TxStore}, {@link ListOptions}, and\n * {@link DrizzleAdapterOptions}. Driver machinery lives in the database\n * packages (`@storyshelf/db-sqlite`, `@storyshelf/db-postgres`).\n */\nimport type { SQL } from \"drizzle-orm\";\nimport type { Table } from \"drizzle-orm\";\nimport type { Adapter, AdapterMetadata } from \"./metadata.ts\";\n\n/** Type-safe table map enforced on every DatabaseAdapter. */\nexport interface Tables {\n  projects: Table;\n  projectStatusConfigs: Table;\n  builds: Table;\n  captureAttempts: Table;\n  captureLogs: Table;\n  snapshots: Table;\n  baselines: Table;\n  comments: Table;\n  labelTypes: Table;\n  buildLabels: Table;\n  tokens: Table;\n  webhooks: Table;\n  notificationChannels: Table;\n  notificationSubscriptions: Table;\n  users: Table;\n  userInviteTokens: Table;\n  projectMembers: Table;\n  projectGroupMappings: Table;\n  contentRefs: Table;\n}\n\n/** Table keys every DatabaseAdapter must expose (contract + validation share this). */\nexport const REQUIRED_TABLE_KEYS = [\n  \"projects\",\n  \"builds\",\n  \"snapshots\",\n  \"baselines\",\n  \"comments\",\n  \"labelTypes\",\n  \"buildLabels\",\n  \"tokens\",\n  \"webhooks\",\n  \"users\",\n  \"projectMembers\",\n];\n\n/** Largest page any adapter serves in one list call. */\nexport const MAX_LIST_LIMIT = 1000;\n\n/** Clamp a list limit into [1, MAX_LIST_LIMIT]; undefined stays undefined. */\nexport function clampListLimit(limit?: number): number | undefined {\n  if (limit === undefined) {\n    return undefined;\n  }\n  if (!Number.isFinite(limit)) {\n    return MAX_LIST_LIMIT;\n  }\n  return Math.min(Math.max(Math.floor(limit), 1), MAX_LIST_LIMIT);\n}\n\n/** Options that narrow and page a list query. */\nexport interface ListOptions {\n  /** SQL WHERE condition. */\n  where?: SQL;\n  /** SQL ORDER BY condition. */\n  orderBy?: SQL;\n  /** Maximum number of rows to return. */\n  limit?: number;\n  /** Number of rows to skip. */\n  offset?: number;\n}\n\n/**\n * Transactional CRUD subset available inside {@link DatabaseAdapter.transact}.\n * Mirrors the adapter surface minus metadata, lifecycle, and raw `all`\n * (opaque to transactions on some drivers).\n */\nexport interface TxStore {\n  /** Insert a row and return the inserted record. */\n  insert<T extends Table>(table: T, values: T[\"$inferInsert\"]): Promise<T[\"$inferSelect\"]>;\n  /** Update a row by id and return the updated record. */\n  update<T extends Table>(\n    table: T,\n    id: string,\n    values: Partial<T[\"$inferInsert\"]>,\n  ): Promise<T[\"$inferSelect\"]>;\n  /** Fetch a single row by id, or null if not found. */\n  get<T extends Table>(table: T, id: string): Promise<T[\"$inferSelect\"] | null>;\n  /** Delete a row by id. */\n  remove(table: Table, id: string): Promise<void>;\n  /** List rows matching the given options. */\n  list<T extends Table>(table: T, opts?: ListOptions): Promise<T[\"$inferSelect\"][]>;\n  /** Count rows matching an optional where condition. */\n  count(table: Table, where?: SQL): Promise<number>;\n}\n\n/** Database abstraction over Drizzle tables, agnostic of dialect and driver. */\nexport interface DatabaseAdapter extends Adapter<{ readonly category: \"database\" }> {\n  /** Table handles for this adapter's dialect, enforced with type safety. */\n  readonly tables: Tables;\n  /** Insert a row and return the inserted record. */\n  insert<T extends Table>(table: T, values: T[\"$inferInsert\"]): Promise<T[\"$inferSelect\"]>;\n  /** Update a row by id and return the updated record. */\n  update<T extends Table>(\n    table: T,\n    id: string,\n    values: Partial<T[\"$inferInsert\"]>,\n  ): Promise<T[\"$inferSelect\"]>;\n  /** Fetch a single row by id, or null if not found. */\n  get<T extends Table>(table: T, id: string): Promise<T[\"$inferSelect\"] | null>;\n  /** Delete a row by id. */\n  remove(table: Table, id: string): Promise<void>;\n  /** List rows matching the given options. */\n  list<T extends Table>(table: T, opts?: ListOptions): Promise<T[\"$inferSelect\"][]>;\n  /** Count rows matching an optional where condition. */\n  count(table: Table, where?: SQL): Promise<number>;\n  /** Run an arbitrary SQL query and return typed rows. */\n  all<T>(query: SQL): Promise<T[]>;\n  /**\n   * Run `fn` inside a transaction when the driver supports one.\n   * Commits on resolve, rolls back on throw. Drivers without transaction\n   * support omit this; callers must use `?.` and accept sequential execution.\n   */\n  transact?<R>(fn: (tx: TxStore) => Promise<R>): Promise<R>;\n}\n\n/** Driver-supplied identity plus lifecycle hooks. */\nexport interface DrizzleAdapterOptions {\n  metadata: AdapterMetadata & { readonly category: \"database\" };\n  tables: Tables;\n  migrate: () => Promise<void> | void;\n  close: () => Promise<void> | void;\n  /** Cheap liveness probe (e.g. `SELECT 1`); omitted when the driver has none. */\n  ping?: () => Promise<void> | void;\n}\n"],"mappings":";;;;;AAoCA,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,iBAAiB;;AAG9B,SAAgB,eAAe,OAAoC;CACjE,IAAI,UAAU,KAAA,GACZ;CAEF,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,OAAO;CAET,OAAO,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc;AAChE"}
+{"version":3,"file":"database.mjs","names":[],"sources":["../../src/adapters/database.ts"],"sourcesContent":["/**\n * Database adapter interface: query builders over explicitly typed tables.\n *\n * Canonical home of the database contract — {@link DatabaseAdapter},\n * {@link Tables}, {@link TxStore}, {@link ListOptions}, and\n * {@link DrizzleAdapterOptions}. Driver machinery lives in the database\n * packages (`@storyshelf/db-sqlite`, `@storyshelf/db-postgres`).\n */\nimport type { SQL } from \"drizzle-orm\";\nimport type { Table } from \"drizzle-orm\";\nimport type { Adapter, AdapterMetadata } from \"./metadata.ts\";\n\n/** A fenced reference write lost its generation race and should be retried. */\nexport class ReferenceGenerationConflict extends Error {}\n\n/** Type-safe table map enforced on every DatabaseAdapter. */\nexport interface Tables {\n  projects: Table;\n  builds: Table;\n  captureAttempts: Table;\n  captureLogs: Table;\n  captureShards: Table;\n  captureJobs: Table;\n  buildComponents: Table;\n  buildReviews: Table;\n  siteSettings: Table;\n  snapshots: Table;\n  baselines: Table;\n  comments: Table;\n  labelTypes: Table;\n  buildLabels: Table;\n  projectLinks: Table;\n  designLinks: Table;\n  designCredentials: Table;\n  userConnections: Table;\n  designNodes: Table;\n  buildPackageUsage: Table;\n  tokens: Table;\n  webhooks: Table;\n  insights: Table;\n  aiUsage: Table;\n  aiBudgetAlerts: Table;\n  notificationChannels: Table;\n  notificationSubscriptions: Table;\n  users: Table;\n  userInviteTokens: Table;\n  projectMembers: Table;\n  projectGroupMappings: Table;\n  contentRefs: Table;\n}\n\n/** Table keys every DatabaseAdapter must expose (contract + validation share this). */\nexport const REQUIRED_TABLE_KEYS = [\n  \"projects\",\n  \"builds\",\n  \"snapshots\",\n  \"baselines\",\n  \"comments\",\n  \"labelTypes\",\n  \"buildLabels\",\n  \"tokens\",\n  \"webhooks\",\n  \"users\",\n  \"projectMembers\",\n];\n\n/** Largest page any adapter serves in one list call. */\nexport const MAX_LIST_LIMIT = 1000;\n\n/** Clamp a list limit into [1, MAX_LIST_LIMIT]; undefined stays undefined. */\nexport function clampListLimit(limit?: number): number | undefined {\n  if (limit === undefined) {\n    return undefined;\n  }\n  if (!Number.isFinite(limit)) {\n    return MAX_LIST_LIMIT;\n  }\n  return Math.min(Math.max(Math.floor(limit), 1), MAX_LIST_LIMIT);\n}\n\n/** Options that narrow and page a list query. */\nexport interface ListOptions {\n  /** SQL WHERE condition. */\n  where?: SQL;\n  /** SQL ORDER BY condition. */\n  orderBy?: SQL;\n  /** Maximum number of rows to return. */\n  limit?: number;\n  /** Number of rows to skip. */\n  offset?: number;\n}\n\n/**\n * Transactional CRUD subset available inside {@link DatabaseAdapter.transact}.\n * Mirrors the adapter surface minus metadata, lifecycle, and raw `all`\n * (opaque to transactions on some drivers).\n */\nexport interface TxStore {\n  /** Insert a row and return the inserted record. */\n  insert<T extends Table>(table: T, values: T[\"$inferInsert\"]): Promise<T[\"$inferSelect\"]>;\n  /** Update a row by id and return the updated record. */\n  update<T extends Table>(\n    table: T,\n    id: string,\n    values: Partial<T[\"$inferInsert\"]>,\n  ): Promise<T[\"$inferSelect\"]>;\n  /** Fetch a single row by id, or null if not found. */\n  get<T extends Table>(table: T, id: string): Promise<T[\"$inferSelect\"] | null>;\n  /** Delete a row by id. */\n  remove(table: Table, id: string): Promise<void>;\n  /** List rows matching the given options. */\n  list<T extends Table>(table: T, opts?: ListOptions): Promise<T[\"$inferSelect\"][]>;\n  /** Count rows matching an optional where condition. */\n  count(table: Table, where?: SQL): Promise<number>;\n}\n\n/** An owner of durable protection for a build. Historical comparisons are not build owners. */\nexport interface BuildReferenceOwner {\n  type: \"baseline\" | \"investigation\";\n  id: string;\n  projectId: string;\n}\n\n/** One owner's complete new reference set for an atomic multi-owner mutation. */\nexport interface BuildReferenceChange {\n  owner: BuildReferenceOwner;\n  buildIds: readonly string[];\n}\n\n/** A complete owner reference replacement guarded by its last observed generation. */\nexport interface FencedBuildReferenceChange extends BuildReferenceChange {\n  expectedGeneration: number;\n}\n\n/**\n * An explicit database capability; an ordinary transaction does not establish this contract.\n * Implementations serialize admissions, reference changes, and deletion claims across processes.\n * Their tests must use independent connections, including promotion/purge and pin/purge races.\n */\nexport interface BuildReferenceLifecycle {\n  /** Return the durable generation for an owner, or zero before its first reference mutation.\n   * This is a snapshot: callers must pass it to a fenced mutation, which rechecks atomically. */\n  referenceGeneration(owner: BuildReferenceOwner): Promise<number>;\n  /** Atomically fence and replace multiple owners, or roll back all owners and domain writes. */\n  replaceManyFencedReferences<T>(\n    changes: readonly FencedBuildReferenceChange[],\n    writeDomain: (tx: TxStore) => Promise<T>,\n  ): Promise<{ result: T; generations: number[] }>;\n  /** Compare and advance an owner's durable generation with its reference and domain writes.\n   * Generation zero denotes an owner with no earlier mutations. A stale generation rejects the\n   * whole transaction. Generations survive release so an old worker cannot release a newer pin. */\n  replaceFencedReferences<T>(\n    owner: BuildReferenceOwner,\n    expectedGeneration: number,\n    buildIds: readonly string[],\n    writeDomain: (tx: TxStore) => Promise<T>,\n  ): Promise<{ result: T; generation: number }>;\n  /**\n   * Atomically replace one owner's complete reference set and make its domain writes. Both old and\n   * new builds must be locked in stable order, checked for project ownership and availability,\n   * and committed with the domain mutation. Unknown or tombstoned builds reject admission.\n   */\n  replaceReferences<T>(\n    owner: BuildReferenceOwner,\n    buildIds: readonly string[],\n    writeDomain: (tx: TxStore) => Promise<T>,\n  ): Promise<T>;\n  /** Atomically replace several owners' reference sets and the shared domain writes. */\n  replaceManyReferences<T>(\n    changes: readonly BuildReferenceChange[],\n    writeDomain: (tx: TxStore) => Promise<T>,\n  ): Promise<T>;\n  /**\n   * In the same concurrency domain as admissions, irreversibly tombstone a build only if no\n   * protecting reference remains. Existing tombstones are resumable and never become available.\n   * Storage deletion must happen after this operation commits, outside database locks.\n   */\n  claimDeletion(\n    projectId: string,\n    buildId: string,\n  ): Promise<\"claimed\" | \"protected\" | \"deleting\" | \"missing\">;\n}\n\n/** Database-specific metadata: the family plus what the backing platform can carry. */\nexport interface DatabaseAdapterMetadata {\n  readonly category: \"database\";\n  /**\n   * `false` when the database cannot back a deployment with `testing` (ADR 0006, decision 3): it\n   * is reachable only from a platform that ends the process after each request (Cloudflare D1).\n   * Unset means it can.\n   */\n  readonly supportsTesting?: boolean;\n}\n\n/** Database abstraction over Drizzle tables, agnostic of dialect and driver. */\nexport interface DatabaseAdapter extends Adapter<DatabaseAdapterMetadata> {\n  /**\n   * Present only when the adapter implements the cross-process retention safety contract.\n   * `transact` by itself is not evidence of this capability.\n   */\n  readonly buildReferenceLifecycle?: BuildReferenceLifecycle;\n  /** Table handles for this adapter's dialect, enforced with type safety. */\n  readonly tables: Tables;\n  /** Insert a row and return the inserted record. */\n  insert<T extends Table>(table: T, values: T[\"$inferInsert\"]): Promise<T[\"$inferSelect\"]>;\n  /** Update a row by id and return the updated record. */\n  update<T extends Table>(\n    table: T,\n    id: string,\n    values: Partial<T[\"$inferInsert\"]>,\n  ): Promise<T[\"$inferSelect\"]>;\n  /** Atomically update a row only while `where` matches; return the current row, or null if absent.\n   * Custom adapters must implement the condition in the same database statement as the update.\n   */\n  updateWhere<T extends Table>(\n    table: T,\n    id: string,\n    values: Partial<T[\"$inferInsert\"]>,\n    where: SQL,\n  ): Promise<T[\"$inferSelect\"] | null>;\n  /** Fetch a single row by id, or null if not found. */\n  get<T extends Table>(table: T, id: string): Promise<T[\"$inferSelect\"] | null>;\n  /** Delete a row by id. */\n  remove(table: Table, id: string): Promise<void>;\n  /** List rows matching the given options. */\n  list<T extends Table>(table: T, opts?: ListOptions): Promise<T[\"$inferSelect\"][]>;\n  /** Count rows matching an optional where condition. */\n  count(table: Table, where?: SQL): Promise<number>;\n  /** Run an arbitrary SQL query and return typed rows. */\n  all<T>(query: SQL): Promise<T[]>;\n  /**\n   * Run `fn` inside a transaction when the driver supports one.\n   * Commits on resolve, rolls back on throw. Drivers without transaction\n   * support omit this; callers must use `?.` and accept sequential execution.\n   */\n  transact?<R>(fn: (tx: TxStore) => Promise<R>): Promise<R>;\n}\n\n/** Driver-supplied identity plus lifecycle hooks. */\nexport interface DrizzleAdapterOptions {\n  metadata: AdapterMetadata & DatabaseAdapterMetadata;\n  tables: Tables;\n  migrate: () => Promise<void> | void;\n  close: () => Promise<void> | void;\n  /** Cheap liveness probe (e.g. `SELECT 1`); omitted when the driver has none. */\n  ping?: () => Promise<void> | void;\n}\n"],"mappings":";;;;;AAaA,IAAa,8BAAb,cAAiD,MAAM,CAAC;;AAuCxD,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,iBAAiB;;AAG9B,SAAgB,eAAe,OAAoC;CACjE,IAAI,UAAU,KAAA,GACZ;CAEF,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,OAAO;CAET,OAAO,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc;AAChE"}

package/dist/adapter/design.d.mts

@@ -0,0 +1,83 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { Logger } from "../logger.mjs";
+import { OAuthClient } from "./oauth.mjs";
+import { Adapter, AdapterMetadata } from "./metadata.mjs";
+import { Buffer } from "node:buffer";
+/** Design-provider metadata: identity plus the copy the settings UI shows for its credential. */
+interface DesignAdapterMetadata extends AdapterMetadata {
+  readonly category: "design";
+  /** Credential field label, e.g. "Figma access token". */
+  readonly credentialLabel: string;
+  /** Help text under the credential field (scopes needed, expiry). */
+  readonly credentialHelp: string;
+  /** Placeholder for the credential input, e.g. "figd_…". */
+  readonly credentialPlaceholder?: string;
+  /** Example of a link this provider accepts, shown on rejection. */
+  readonly urlHint: string;
+  /** Longest lifetime of a credential, so the UI can count down to rotation. */
+  readonly credentialMaxAgeDays?: number;
+}
+/** A parsed design link. */
+interface DesignRef {
+  /** Provider file identifier. */
+  fileKey: string;
+  /** Node id inside the file, or null when the link targets the whole file. */
+  nodeId: string | null;
+  /** URL to open: the pasted link without credentials or fragment. */
+  url: string;
+}
+/** Outcome of a metadata fetch. `error` is transient (outage/rate limit) and never persisted. */
+type DesignState = "ok" | "deleted" | "unauthorized" | "forbidden" | "error";
+/** Metadata of a design file or node. */
+interface DesignMeta {
+  state: DesignState;
+  name: string | null;
+  version: string | null;
+  lastModified: string | null;
+}
+/** Per-call options: a signal cancelling the whole call (page-render budget) plus a logger. */
+interface DesignCallOptions {
+  logger?: Logger;
+  signal?: AbortSignal;
+}
+/** How a stored credential authenticates: a pasted personal token or a user's OAuth access token. */
+type DesignAuthType = "token" | "oauth";
+/** Descriptor — registered at startup, parses links and binds a credential. */
+interface DesignProvider extends Adapter<DesignAdapterMetadata> {
+  /** Parse a pasted link; null when it is not one of this provider's links. */
+  parseUrl(raw: string): DesignRef | null;
+  /** Create a client bound to a decrypted credential (`authType` defaults to a personal token). */
+  create(opts: {
+    credential: string;
+    authType?: DesignAuthType;
+    logger?: Logger;
+  }): DesignClient;
+  /** Present only when the operator configured OAuth for this provider. */
+  readonly oauth?: OAuthClient;
+}
+/** Runtime — bound to a credential, talks to the vendor API. */
+interface DesignClient {
+  /**
+   * Metadata for several refs of one file, keyed by node id (`""` = whole file).
+   * API failures map to a {@link DesignState} per ref rather than throwing.
+   */
+  fetchMetas(fileKey: string, refs: readonly DesignRef[], options?: DesignCallOptions): Promise<Map<string, DesignMeta>>;
+  /**
+   * PNG renders of several nodes of one file, keyed by node id. Nodes the vendor
+   * cannot render are omitted; throws when the render API call itself fails.
+   */
+  fetchRenders(fileKey: string, nodeIds: readonly string[], options?: DesignCallOptions): Promise<Map<string, Buffer>>;
+}
+/** Thrown when a design link is not accepted by any configured provider. */
+declare class InvalidDesignUrlError extends Error {
+  readonly value: string;
+  constructor(value: string, hint?: string);
+}
+/** First provider that accepts the link, with its parsed ref. */
+declare function parseDesignUrl(providers: readonly DesignProvider[], raw: string): {
+  provider: DesignProvider;
+  ref: DesignRef;
+} | null;
+export { DesignAdapterMetadata, DesignAuthType, DesignCallOptions, DesignClient, DesignMeta, DesignProvider, DesignRef, DesignState, InvalidDesignUrlError, parseDesignUrl };
+//# sourceMappingURL=design.d.mts.map

package/dist/adapter/design.mjs

@@ -0,0 +1,27 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+// src/adapters/design.ts
+/** Thrown when a design link is not accepted by any configured provider. */
+var InvalidDesignUrlError = class extends Error {
+	value;
+	constructor(value, hint) {
+		super(hint ? `Enter a supported design link, e.g. ${hint}` : "No design provider is configured");
+		this.value = value;
+		this.name = "InvalidDesignUrlError";
+	}
+};
+/** First provider that accepts the link, with its parsed ref. */
+function parseDesignUrl(providers, raw) {
+	for (const provider of providers) {
+		const ref = provider.parseUrl(raw);
+		if (ref) return {
+			provider,
+			ref
+		};
+	}
+	return null;
+}
+export { InvalidDesignUrlError, parseDesignUrl };
+
+//# sourceMappingURL=design.mjs.map

package/dist/adapter/design.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"design.mjs","names":[],"sources":["../../src/adapters/design.ts"],"sourcesContent":["/**\n * Design-provider adapter interface: link validation, file/node metadata and\n * rendered previews from a design tool (Figma, …). Core owns link resolution,\n * the metadata/render cache and credential storage; a provider owns only the\n * vendor specifics below.\n */\nimport type { Buffer } from \"node:buffer\";\nimport type { Logger } from \"../logger.ts\";\nimport type { Adapter, AdapterMetadata } from \"./metadata.ts\";\nimport type { OAuthClient } from \"./oauth.ts\";\n\n/** Design-provider metadata: identity plus the copy the settings UI shows for its credential. */\nexport interface DesignAdapterMetadata extends AdapterMetadata {\n  readonly category: \"design\";\n  /** Credential field label, e.g. \"Figma access token\". */\n  readonly credentialLabel: string;\n  /** Help text under the credential field (scopes needed, expiry). */\n  readonly credentialHelp: string;\n  /** Placeholder for the credential input, e.g. \"figd_…\". */\n  readonly credentialPlaceholder?: string;\n  /** Example of a link this provider accepts, shown on rejection. */\n  readonly urlHint: string;\n  /** Longest lifetime of a credential, so the UI can count down to rotation. */\n  readonly credentialMaxAgeDays?: number;\n}\n\n/** A parsed design link. */\nexport interface DesignRef {\n  /** Provider file identifier. */\n  fileKey: string;\n  /** Node id inside the file, or null when the link targets the whole file. */\n  nodeId: string | null;\n  /** URL to open: the pasted link without credentials or fragment. */\n  url: string;\n}\n\n/** Outcome of a metadata fetch. `error` is transient (outage/rate limit) and never persisted. */\nexport type DesignState = \"ok\" | \"deleted\" | \"unauthorized\" | \"forbidden\" | \"error\";\n\n/** Metadata of a design file or node. */\nexport interface DesignMeta {\n  state: DesignState;\n  name: string | null;\n  version: string | null;\n  lastModified: string | null;\n}\n\n/** Per-call options: a signal cancelling the whole call (page-render budget) plus a logger. */\nexport interface DesignCallOptions {\n  logger?: Logger;\n  signal?: AbortSignal;\n}\n\n/** How a stored credential authenticates: a pasted personal token or a user's OAuth access token. */\nexport type DesignAuthType = \"token\" | \"oauth\";\n\n/** Descriptor — registered at startup, parses links and binds a credential. */\nexport interface DesignProvider extends Adapter<DesignAdapterMetadata> {\n  /** Parse a pasted link; null when it is not one of this provider's links. */\n  parseUrl(raw: string): DesignRef | null;\n  /** Create a client bound to a decrypted credential (`authType` defaults to a personal token). */\n  create(opts: { credential: string; authType?: DesignAuthType; logger?: Logger }): DesignClient;\n  /** Present only when the operator configured OAuth for this provider. */\n  readonly oauth?: OAuthClient;\n}\n\n/** Runtime — bound to a credential, talks to the vendor API. */\nexport interface DesignClient {\n  /**\n   * Metadata for several refs of one file, keyed by node id (`\"\"` = whole file).\n   * API failures map to a {@link DesignState} per ref rather than throwing.\n   */\n  fetchMetas(\n    fileKey: string,\n    refs: readonly DesignRef[],\n    options?: DesignCallOptions,\n  ): Promise<Map<string, DesignMeta>>;\n  /**\n   * PNG renders of several nodes of one file, keyed by node id. Nodes the vendor\n   * cannot render are omitted; throws when the render API call itself fails.\n   */\n  fetchRenders(\n    fileKey: string,\n    nodeIds: readonly string[],\n    options?: DesignCallOptions,\n  ): Promise<Map<string, Buffer>>;\n}\n\n/** Thrown when a design link is not accepted by any configured provider. */\nexport class InvalidDesignUrlError extends Error {\n  readonly value: string;\n\n  constructor(value: string, hint?: string) {\n    super(\n      hint ? `Enter a supported design link, e.g. ${hint}` : \"No design provider is configured\",\n    );\n    this.value = value;\n    this.name = \"InvalidDesignUrlError\";\n  }\n}\n\n/** First provider that accepts the link, with its parsed ref. */\nexport function parseDesignUrl(\n  providers: readonly DesignProvider[],\n  raw: string,\n): { provider: DesignProvider; ref: DesignRef } | null {\n  for (const provider of providers) {\n    const ref = provider.parseUrl(raw);\n    if (ref) return { provider, ref };\n  }\n  return null;\n}\n"],"mappings":";;;;;AAyFA,IAAa,wBAAb,cAA2C,MAAM;CAC/C;CAEA,YAAY,OAAe,MAAe;EACxC,MACE,OAAO,uCAAuC,SAAS,kCACzD;EACA,KAAK,QAAQ;EACb,KAAK,OAAO;CACd;AACF;;AAGA,SAAgB,eACd,WACA,KACqD;CACrD,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,MAAM,SAAS,SAAS,GAAG;EACjC,IAAI,KAAK,OAAO;GAAE;GAAU;EAAI;CAClC;CACA,OAAO;AACT"}

package/dist/adapter/email-sender.d.mts

@@ -1,7 +1,6 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { Adapter } from "./metadata.mjs";
-//#region src/adapters/email-sender.d.ts
 /** A single email message (transport-agnostic). */
 interface EmailMessage {
   to: string;
@@ -22,6 +21,5 @@ interface EmailSender extends Adapter<{
 }> {
   send(message: EmailMessage): Promise<void>;
 }
-//#endregion
 export { EmailMessage, EmailSender };
 //# sourceMappingURL=email-sender.d.mts.map

package/dist/adapter/metadata.d.mts

@@ -1,9 +1,7 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-import { ShelfConfig } from "../config.mjs";
 import { Logger } from "../logger.mjs";
-import { z } from "zod";
-//#region src/adapters/metadata.d.ts
+import { ShelfConfig } from "../config.mjs";
 /**
  * Adapter family — which concern an adapter supplies.
  *
@@ -11,7 +9,7 @@ import { z } from "zod";
  * `category` tells a reader which slot the adapter fills without knowing
  * which adapter instance supplied the metadata.
  */
-type AdapterCategory = "database" | "storage" | "capture-runner" | "capture-queue" | "git-host" | "notifier";
+type AdapterCategory = "database" | "storage" | "capture-runner" | "capture-queue" | "design" | "notifier";
 /** Common adapter identity — every adapter instance exposes this. */
 interface AdapterMetadata {
   /** Human label for UI/logs. */
@@ -25,12 +23,6 @@ interface AdapterMetadata {
   /** Adapter family — which concern this adapter supplies. */
   readonly category: AdapterCategory;
 }
-/** Git-specific metadata extension (adds logo + validation schema). */
-interface GitAdapterMetadata extends AdapterMetadata {
-  readonly category: "git-host";
-  readonly logo?: string;
-  readonly schema: z.ZodType;
-}
 /** Context passed to an adapter's `setup` on server startup. */
 interface AdapterSetupContext {
   /** Resolved shelf configuration (scratchDir, secret, …). Never log the secret. */
@@ -84,6 +76,5 @@ interface Adapter<Extra extends object = Record<string, unknown>> {
    */
   setLogger?(logger: Logger): void;
 }
-//#endregion
-export { Adapter, AdapterCategory, AdapterHealth, AdapterLifecycle, AdapterMetadata, AdapterSetupContext, GitAdapterMetadata };
+export { Adapter, AdapterCategory, AdapterHealth, AdapterLifecycle, AdapterMetadata, AdapterSetupContext };
 //# sourceMappingURL=metadata.d.mts.map

package/dist/adapter/notifier.d.mts

@@ -1,7 +1,10 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-import { ChannelToggles, FormattedNotification, NotificationBrand, NotificationChannel, NotificationEvent, SystemEventName, SystemNotification } from "../adapters/notifier/types.mjs";
-import { NotifierAdapter, NotifierMetadata, NotifierProvider } from "../adapters/notifier/provider.mjs";
+import { ChannelOutcome, ChannelToggles, FormattedNotification, NotificationBrand, NotificationChannel, NotificationEvent, NotifierState, NotifierStateTarget, StateAnnotation, SystemEventName, SystemNotification } from "../adapters/notifier/types.mjs";
+import { MessageNotifierAdapter, MessageNotifierMetadata, MessageNotifierProvider, NotifierAdapter, NotifierDelivery, NotifierMetadata, NotifierProvider, SetStateInput, StateNotifierAdapter, StateNotifierMetadata, StateNotifierProvider, isStateProvider } from "../adapters/notifier/provider.mjs";
 import { emitNotifications, emitSystemNotification } from "../adapters/notifier/events.mjs";
+import { BuildStateBuild, BuildStateChange, BuildStateFlags, BuildStateInput, BuildStateSet, DesiredComment, DesiredStatus, MAX_ANNOTATIONS, PublishingState, StatusName, statusesForBuild } from "../adapters/notifier/build-state.mjs";
+import { buildCommentMarkdown } from "../adapters/notifier/build-comment.mjs";
+import { DEFAULT_STATUS_PREFIX, channelPrefix, writeBuildState } from "../adapters/notifier/state.mjs";
 import { formatNotification, formatSystemNotification } from "../adapters/notifier/format.mjs";
-export { type ChannelToggles, type FormattedNotification, type NotificationBrand, type NotificationChannel, type NotificationEvent, type NotifierAdapter, type NotifierMetadata, type NotifierProvider, type SystemEventName, type SystemNotification, emitNotifications, emitSystemNotification, formatNotification, formatSystemNotification };
+export { type BuildStateBuild, type BuildStateChange, type BuildStateFlags, type BuildStateInput, type BuildStateSet, type ChannelOutcome, type ChannelToggles, DEFAULT_STATUS_PREFIX, type DesiredComment, type DesiredStatus, type FormattedNotification, MAX_ANNOTATIONS, type MessageNotifierAdapter, type MessageNotifierMetadata, type MessageNotifierProvider, type NotificationBrand, type NotificationChannel, type NotificationEvent, type NotifierAdapter, type NotifierDelivery, type NotifierMetadata, type NotifierProvider, type NotifierState, type NotifierStateTarget, type PublishingState, type SetStateInput, type StateAnnotation, type StateNotifierAdapter, type StateNotifierMetadata, type StateNotifierProvider, type StatusName, type SystemEventName, type SystemNotification, buildCommentMarkdown, channelPrefix, emitNotifications, emitSystemNotification, formatNotification, formatSystemNotification, isStateProvider, statusesForBuild, writeBuildState };

package/dist/adapter/notifier.mjs

@@ -2,5 +2,9 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { formatNotification, formatSystemNotification } from "../adapters/notifier/format.mjs";
+import { isStateProvider } from "../adapters/notifier/provider.mjs";
 import { emitNotifications, emitSystemNotification } from "../adapters/notifier/events.mjs";
-export { emitNotifications, emitSystemNotification, formatNotification, formatSystemNotification };
+import { buildCommentMarkdown } from "../adapters/notifier/build-comment.mjs";
+import { MAX_ANNOTATIONS, statusesForBuild } from "../adapters/notifier/build-state.mjs";
+import { DEFAULT_STATUS_PREFIX, channelPrefix, writeBuildState } from "../adapters/notifier/state.mjs";
+export { DEFAULT_STATUS_PREFIX, MAX_ANNOTATIONS, buildCommentMarkdown, channelPrefix, emitNotifications, emitSystemNotification, formatNotification, formatSystemNotification, isStateProvider, statusesForBuild, writeBuildState };

package/dist/adapter/oauth.d.mts

@@ -0,0 +1,50 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+/**
+ * Service-neutral OAuth 2 contract for "connect your own account" flows. Any
+ * adapter that talks to a third party on behalf of a user (design tools,
+ * issue trackers, …) can expose an {@link OAuthClient}; the app owns the
+ * redirect/callback routes and core owns token storage and refresh.
+ */
+/** Tokens returned by an authorization-code exchange or a refresh. */
+interface OAuthTokens {
+  accessToken: string;
+  /** Absent when the service keeps the previous refresh token valid. */
+  refreshToken?: string | null;
+  /** ISO time the access token stops working, or null when it never expires. */
+  expiresAt: string | null;
+}
+/** Authorization-code grant against one service, with the operator's client credentials held inside. */
+interface OAuthClient {
+  /** Consent-screen URL to send the user to. */
+  authorizeUrl(opts: {
+    state: string;
+    redirectUri: string;
+  }): string;
+  /** Exchange the callback `code` for tokens. */
+  exchangeCode(opts: {
+    code: string;
+    redirectUri: string;
+    signal?: AbortSignal;
+  }): Promise<OAuthTokens>;
+  /** Mint a new access token from a refresh token. */
+  refresh(opts: {
+    refreshToken: string;
+    signal?: AbortSignal;
+  }): Promise<OAuthTokens>;
+}
+/**
+ * Anything a user can connect an account to. Structurally satisfied by adapters
+ * (`metadata.kind` identifies the service), so registering one is just
+ * listing its adapter.
+ */
+interface OAuthConnectable {
+  readonly metadata: {
+    readonly kind: string;
+    readonly name: string;
+  };
+  /** Present only when the operator configured OAuth for the service. */
+  readonly oauth?: OAuthClient;
+}
+export { OAuthClient, OAuthConnectable, OAuthTokens };
+//# sourceMappingURL=oauth.d.mts.map

package/dist/adapter/setup.d.mts

@@ -2,22 +2,20 @@ import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { CaptureRunner } from "./capture-runner.mjs";
 import { DatabaseAdapter } from "./database.mjs";
+import { DesignProvider } from "./design.mjs";
 import { EmailSender } from "./email-sender.mjs";
-import { GitHostProvider } from "./git-host.mjs";
 import { NotifierProvider } from "../adapters/notifier/provider.mjs";
 import { StorageAdapter } from "./storage.mjs";
 import { AdapterSetupContext } from "./metadata.mjs";
-import { CaptureQueue } from "./capture-queue.mjs";
 import { bindAdapterLoggers, collectSetups, collectTeardowns, runAdapterSetups, runAdapterTeardowns } from "../adapters/setup-runner.mjs";
 import { validateAdapter, validateAdapterSources, validateAuth, validateBootAssembly } from "../adapters/validate.mjs";
-//#region src/adapters/setup.d.ts
+import { adapterSourcesOf } from "../adapters/sources.mjs";
 /** Adapters that can take part in lifecycle runs. */
 interface AdapterSetupSources {
   database: DatabaseAdapter;
   storage: StorageAdapter;
   captureRunner?: CaptureRunner;
-  captureQueue?: CaptureQueue;
-  gitHosts?: GitHostProvider[];
+  design?: DesignProvider[];
   notifiers?: NotifierProvider[];
   emailSender?: EmailSender;
 }
@@ -56,6 +54,5 @@ declare class AdapterLifecycleError extends Error {
   readonly failures: AdapterSetupFailure[];
   constructor(phase: LifecyclePhase, failures: AdapterSetupFailure[]);
 }
-//#endregion
-export { AdapterLifecycleError, AdapterSetupFailure, AdapterSetupResult, AdapterSetupSources, HookEntry, LifecyclePhase, bindAdapterLoggers, collectSetups, collectTeardowns, runAdapterSetups, runAdapterTeardowns, validateAdapter, validateAdapterSources, validateAuth, validateBootAssembly };
+export { AdapterLifecycleError, AdapterSetupFailure, AdapterSetupResult, AdapterSetupSources, HookEntry, LifecyclePhase, adapterSourcesOf, bindAdapterLoggers, collectSetups, collectTeardowns, runAdapterSetups, runAdapterTeardowns, validateAdapter, validateAdapterSources, validateAuth, validateBootAssembly };
 //# sourceMappingURL=setup.d.mts.map

package/dist/adapter/setup.mjs

@@ -3,7 +3,8 @@ import "node:url";
 import.meta.url;
 import { bindAdapterLoggers, collectSetups, collectTeardowns, runAdapterSetups, runAdapterTeardowns } from "../adapters/setup-runner.mjs";
 import { validateAdapter, validateAdapterSources, validateAuth, validateBootAssembly } from "../adapters/validate.mjs";
-//#region src/adapters/setup.ts
+import { adapterSourcesOf } from "../adapters/sources.mjs";
+// src/adapters/setup.ts
 /**
 * Thrown when an `app.lifecycle.setup()` or `teardown()` run finishes with failures.
 *
@@ -23,7 +24,6 @@ var AdapterLifecycleError = class extends Error {
 		this.failures = failures;
 	}
 };
-//#endregion
-export { AdapterLifecycleError, bindAdapterLoggers, collectSetups, collectTeardowns, runAdapterSetups, runAdapterTeardowns, validateAdapter, validateAdapterSources, validateAuth, validateBootAssembly };
+export { AdapterLifecycleError, adapterSourcesOf, bindAdapterLoggers, collectSetups, collectTeardowns, runAdapterSetups, runAdapterTeardowns, validateAdapter, validateAdapterSources, validateAuth, validateBootAssembly };
 
 //# sourceMappingURL=setup.mjs.map

package/dist/adapter/setup.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"setup.mjs","names":[],"sources":["../../src/adapters/setup.ts"],"sourcesContent":["/**\n * Adapter lifecycle contract: hooks every adapter can expose, plus the\n * settled-result and error types. The runner (`setup-runner.ts`) collects\n * and executes the hooks; `createShelfApp` kicks `setup` eagerly and\n * gates the first request on the shared result. All hooks must be\n * idempotent.\n */\nimport type { CaptureQueue } from \"./capture-queue.ts\";\nimport type { CaptureRunner } from \"./capture-runner.ts\";\nimport type { DatabaseAdapter } from \"./database.ts\";\nimport type { EmailSender } from \"./email-sender.ts\";\nimport type { GitHostProvider } from \"./git-host/index.ts\";\nimport type { AdapterSetupContext } from \"./metadata.ts\";\nimport type { NotifierProvider } from \"./notifier/provider.ts\";\nimport type { StorageAdapter } from \"./storage.ts\";\n\n/** Adapters that can take part in lifecycle runs. */\nexport interface AdapterSetupSources {\n  database: DatabaseAdapter;\n  storage: StorageAdapter;\n  captureRunner?: CaptureRunner;\n  captureQueue?: CaptureQueue;\n  gitHosts?: GitHostProvider[];\n  notifiers?: NotifierProvider[];\n  emailSender?: EmailSender;\n}\n\n/** One collected hook bound to its adapter identity. */\nexport interface HookEntry {\n  readonly category: string;\n  readonly kind: string;\n  readonly name: string;\n  readonly run: (ctx: AdapterSetupContext) => Promise<void>;\n}\n\n/** One failed hook, with its adapter identity attached. */\nexport interface AdapterSetupFailure {\n  readonly category: string;\n  readonly kind: string;\n  readonly name: string;\n  readonly error: string;\n}\n\n/** Settled outcome of a lifecycle run (never rejects — use `ok`). */\nexport interface AdapterSetupResult {\n  readonly ok: boolean;\n  readonly failures: AdapterSetupFailure[];\n}\n\n/** Lifecycle phase a run covers. */\nexport type LifecyclePhase = \"setup\" | \"teardown\";\n\n/**\n * Thrown when an `app.lifecycle.setup()` or `teardown()` run finishes with failures.\n *\n * Inspect `phase` to know which hook failed and `failures` for per-adapter\n * diagnostics. The router converts this into a 500 with structured details\n * during health checks.\n */\nexport class AdapterLifecycleError extends Error {\n  /** Which lifecycle phase failed (`setup` or `teardown`). */\n  readonly phase: LifecyclePhase;\n  /** One entry per adapter hook that failed. */\n  readonly failures: AdapterSetupFailure[];\n  constructor(phase: LifecyclePhase, failures: AdapterSetupFailure[]) {\n    super(`Adapter ${phase} failed: ${failures.map((f) => `${f.category}/${f.kind}`).join(\", \")}`);\n    this.name = \"AdapterLifecycleError\";\n    this.phase = phase;\n    this.failures = failures;\n  }\n}\n\n/** Collect every `setup` hook from the configured adapters. */\nexport {\n  bindAdapterLoggers,\n  collectSetups,\n  collectTeardowns,\n  runAdapterSetups,\n  runAdapterTeardowns,\n} from \"./setup-runner.ts\";\n\n/** Boot-time shape validation for third-party adapters. */\nexport {\n  validateAdapter,\n  validateAdapterSources,\n  validateAuth,\n  validateBootAssembly,\n} from \"./validate.ts\";\n"],"mappings":";;;;;;;;;;;;;AA2DA,IAAa,wBAAb,cAA2C,MAAM;;CAE/C;;CAEA;CACA,YAAY,OAAuB,UAAiC;EAClE,MAAM,WAAW,MAAM,WAAW,SAAS,KAAK,MAAM,GAAG,EAAE,SAAS,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,GAAG;EAC7F,KAAK,OAAO;EACZ,KAAK,QAAQ;EACb,KAAK,WAAW;CAClB;AACF"}
+{"version":3,"file":"setup.mjs","names":[],"sources":["../../src/adapters/setup.ts"],"sourcesContent":["/**\n * Adapter lifecycle contract: hooks every adapter can expose, plus the\n * settled-result and error types. The runner (`setup-runner.ts`) collects\n * and executes the hooks; `createShelfApp` kicks `setup` eagerly and\n * gates the first request on the shared result. All hooks must be\n * idempotent.\n */\nimport type { CaptureRunner } from \"./capture-runner.ts\";\nimport type { DatabaseAdapter } from \"./database.ts\";\nimport type { DesignProvider } from \"./design.ts\";\nimport type { EmailSender } from \"./email-sender.ts\";\nimport type { AdapterSetupContext } from \"./metadata.ts\";\nimport type { NotifierProvider } from \"./notifier/provider.ts\";\nimport type { StorageAdapter } from \"./storage.ts\";\n\n/** Adapters that can take part in lifecycle runs. */\nexport interface AdapterSetupSources {\n  database: DatabaseAdapter;\n  storage: StorageAdapter;\n  captureRunner?: CaptureRunner;\n  design?: DesignProvider[];\n  notifiers?: NotifierProvider[];\n  emailSender?: EmailSender;\n}\n\n/** One collected hook bound to its adapter identity. */\nexport interface HookEntry {\n  readonly category: string;\n  readonly kind: string;\n  readonly name: string;\n  readonly run: (ctx: AdapterSetupContext) => Promise<void>;\n}\n\n/** One failed hook, with its adapter identity attached. */\nexport interface AdapterSetupFailure {\n  readonly category: string;\n  readonly kind: string;\n  readonly name: string;\n  readonly error: string;\n}\n\n/** Settled outcome of a lifecycle run (never rejects — use `ok`). */\nexport interface AdapterSetupResult {\n  readonly ok: boolean;\n  readonly failures: AdapterSetupFailure[];\n}\n\n/** Lifecycle phase a run covers. */\nexport type LifecyclePhase = \"setup\" | \"teardown\";\n\n/**\n * Thrown when an `app.lifecycle.setup()` or `teardown()` run finishes with failures.\n *\n * Inspect `phase` to know which hook failed and `failures` for per-adapter\n * diagnostics. The router converts this into a 500 with structured details\n * during health checks.\n */\nexport class AdapterLifecycleError extends Error {\n  /** Which lifecycle phase failed (`setup` or `teardown`). */\n  readonly phase: LifecyclePhase;\n  /** One entry per adapter hook that failed. */\n  readonly failures: AdapterSetupFailure[];\n  constructor(phase: LifecyclePhase, failures: AdapterSetupFailure[]) {\n    super(`Adapter ${phase} failed: ${failures.map((f) => `${f.category}/${f.kind}`).join(\", \")}`);\n    this.name = \"AdapterLifecycleError\";\n    this.phase = phase;\n    this.failures = failures;\n  }\n}\n\n/** Collect every `setup` hook from the configured adapters. */\nexport {\n  bindAdapterLoggers,\n  collectSetups,\n  collectTeardowns,\n  runAdapterSetups,\n  runAdapterTeardowns,\n} from \"./setup-runner.ts\";\n\n/** Boot-time shape validation for third-party adapters. */\nexport {\n  validateAdapter,\n  validateAdapterSources,\n  validateAuth,\n  validateBootAssembly,\n} from \"./validate.ts\";\nexport { adapterSourcesOf } from \"./sources.ts\";\n"],"mappings":";;;;;;;;;;;;;;AAyDA,IAAa,wBAAb,cAA2C,MAAM;;CAE/C;;CAEA;CACA,YAAY,OAAuB,UAAiC;EAClE,MAAM,WAAW,MAAM,WAAW,SAAS,KAAK,MAAM,GAAG,EAAE,SAAS,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,GAAG;EAC7F,KAAK,OAAO;EACZ,KAAK,QAAQ;EACb,KAAK,WAAW;CAClB;AACF"}

package/dist/adapter/storage.d.mts

@@ -1,9 +1,8 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { Adapter } from "./metadata.mjs";
-import { Readable } from "node:stream";
 import { Buffer } from "node:buffer";
-//#region src/adapters/storage.d.ts
+import { Readable } from "node:stream";
 /** Blob storage abstraction for screenshots, diffs and Storybook archives. */
 interface StorageAdapter extends Adapter<{
   readonly category: "storage";
@@ -29,6 +28,5 @@ interface StorageAdapter extends Adapter<{
    */
   readStream(path: string): Promise<Readable>;
 }
-//#endregion
 export { StorageAdapter };
 //# sourceMappingURL=storage.d.mts.map

package/dist/adapter/webhook-events.d.mts

@@ -4,7 +4,6 @@ import { DatabaseAdapter } from "./database.mjs";
 import { SecretInput } from "../utils/encrypt.mjs";
 import { WebhookTables } from "../models/webhook.mjs";
 import { Logger } from "pino";
-//#region src/adapters/webhook-events.d.ts
 /**
  * Deliver an event to every subscribed webhook of a project.
  *
@@ -24,6 +23,5 @@ interface WebhookEvent {
   data: Record<string, unknown>;
   timestamp: string;
 }
-//#endregion
 export { WebhookEvent, emitWebhookEvent };
 //# sourceMappingURL=webhook-events.d.mts.map

package/dist/adapter/webhook-events.mjs

@@ -1,11 +1,10 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { WebhookModel } from "../models/webhook.mjs";
 import { hmacSha256 } from "../utils/hash.mjs";
-//#region src/adapters/webhook-events.ts
-/** Per-delivery budget: single attempt, no retries (events already fan out). */
-const WEBHOOK_TIMEOUT_MS = 1e4;
+import { WebhookModel } from "../models/webhook.mjs";
+import { httpStatus } from "../utils/http.mjs";
+// src/adapters/webhook-events.ts
 /**
 * Deliver an event to every subscribed webhook of a project.
 *
@@ -42,7 +41,7 @@ async function deliverToWebhook(webhookModel, webhook, eventPayload, logger) {
 		return;
 	}
 	try {
-		await sendWebhook(webhook.url, plaintext, eventPayload);
+		await sendWebhook(webhook.url, plaintext, eventPayload, logger);
 		logger?.info({
 			webhookId: webhook.id,
 			host: hostOf(webhook.url)
@@ -63,21 +62,21 @@ function hostOf(url) {
 		return "[invalid-url]";
 	}
 }
-async function sendWebhook(url, secret, event) {
-	const body = JSON.stringify(event);
-	const signature = hmacSha256(secret, body);
-	await fetch(url, {
+/**
+* POST one event through `httpStatus` (default timeout and retry policy). The signature covers the
+* exact body string, and `json` serializes the event with the same `JSON.stringify`.
+*/
+async function sendWebhook(url, secret, event, logger) {
+	await httpStatus(url, {
 		method: "POST",
+		json: event,
 		headers: {
-			"Content-Type": "application/json",
 			"X-StoryShelf-Event": event.event,
-			"X-StoryShelf-Signature": signature
+			"X-StoryShelf-Signature": hmacSha256(secret, JSON.stringify(event))
 		},
-		body,
-		signal: AbortSignal.timeout(WEBHOOK_TIMEOUT_MS)
+		...logger ? { logger } : {}
 	});
 }
-//#endregion
 export { emitWebhookEvent };
 
 //# sourceMappingURL=webhook-events.mjs.map

package/dist/adapter/webhook-events.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-events.mjs","names":[],"sources":["../../src/adapters/webhook-events.ts"],"sourcesContent":["import type { Logger } from \"pino\";\nimport { WebhookModel, type WebhookTables } from \"../models/webhook.ts\";\nimport type { Webhook } from \"../schema/webhook.ts\";\nimport type { SecretInput } from \"../utils/encrypt.ts\";\nimport { hmacSha256 } from \"../utils/hash.ts\";\nimport type { DatabaseAdapter } from \"./database.ts\";\n\n/** Per-delivery budget: single attempt, no retries (events already fan out). */\nconst WEBHOOK_TIMEOUT_MS = 10_000;\n\n/**\n * Deliver an event to every subscribed webhook of a project.\n *\n * @param db - Database adapter for loading subscriptions.\n * @param tables - Webhook table handles.\n * @param projectId - Project whose webhooks receive the event.\n * @param event - Event name (e.g. \"baseline:created\").\n * @param data - Event payload.\n * @param secret - Server secret for decrypting webhook secrets (in memory only).\n * @param logger - Optional logger for per-delivery outcomes.\n */\nexport async function emitWebhookEvent(\n  db: DatabaseAdapter,\n  tables: WebhookTables,\n  projectId: string,\n  event: string,\n  data: Record<string, unknown>,\n  secret: SecretInput,\n  logger?: Logger,\n): Promise<void> {\n  const webhookModel = new WebhookModel(db, tables, secret);\n  const webhooks = await webhookModel.list(projectId);\n  const eventPayload: WebhookEvent = {\n    event,\n    projectId,\n    data,\n    timestamp: new Date().toISOString(),\n  };\n\n  await Promise.allSettled(\n    webhooks.map(async (webhook) => {\n      const events = WebhookModel.eventsOf(webhook);\n      if (events.length > 0 && !events.includes(event)) {\n        return;\n      }\n      await deliverToWebhook(webhookModel, webhook, eventPayload, logger);\n    }),\n  );\n}\n\n/** Decrypt, send, and log one webhook delivery (failures stay non-fatal). */\nasync function deliverToWebhook(\n  webhookModel: WebhookModel,\n  webhook: Webhook,\n  eventPayload: WebhookEvent,\n  logger: Logger | undefined,\n): Promise<void> {\n  let plaintext: string;\n  try {\n    plaintext = webhookModel.decryptSecret(webhook);\n  } catch {\n    // Undecryptable secret (e.g. rotated server SECRET) — skip, don't leak\n    logger?.warn({ webhookId: webhook.id }, \"skipping webhook with undecryptable secret\");\n    return;\n  }\n  try {\n    await sendWebhook(webhook.url, plaintext, eventPayload);\n    logger?.info({ webhookId: webhook.id, host: hostOf(webhook.url) }, \"webhook delivered\");\n  } catch (error) {\n    // Webhook delivery failures are non-fatal\n    logger?.warn(\n      { webhookId: webhook.id, host: hostOf(webhook.url), err: error },\n      \"webhook delivery failed\",\n    );\n  }\n}\n\n/** Outbound webhook payload delivered to subscribers. */\nexport interface WebhookEvent {\n  event: string;\n  projectId: string;\n  data: Record<string, unknown>;\n  timestamp: string;\n}\n\n/** Hostname of a webhook URL for logs (never the full URL — may carry secrets). */\nfunction hostOf(url: string): string {\n  try {\n    return new URL(url).host;\n  } catch {\n    return \"[invalid-url]\";\n  }\n}\n\nasync function sendWebhook(url: string, secret: string, event: WebhookEvent): Promise<void> {\n  const body = JSON.stringify(event);\n  const signature = hmacSha256(secret, body);\n  await fetch(url, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      \"X-StoryShelf-Event\": event.event,\n      \"X-StoryShelf-Signature\": signature,\n    },\n    body,\n    signal: AbortSignal.timeout(WEBHOOK_TIMEOUT_MS),\n  });\n}\n"],"mappings":";;;;;;;AAQA,MAAM,qBAAqB;;;;;;;;;;;;AAa3B,eAAsB,iBACpB,IACA,QACA,WACA,OACA,MACA,QACA,QACe;CACf,MAAM,eAAe,IAAI,aAAa,IAAI,QAAQ,MAAM;CACxD,MAAM,WAAW,MAAM,aAAa,KAAK,SAAS;CAClD,MAAM,eAA6B;EACjC;EACA;EACA;EACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACpC;CAEA,MAAM,QAAQ,WACZ,SAAS,IAAI,OAAO,YAAY;EAC9B,MAAM,SAAS,aAAa,SAAS,OAAO;EAC5C,IAAI,OAAO,SAAS,KAAK,CAAC,OAAO,SAAS,KAAK,GAC7C;EAEF,MAAM,iBAAiB,cAAc,SAAS,cAAc,MAAM;CACpE,CAAC,CACH;AACF;;AAGA,eAAe,iBACb,cACA,SACA,cACA,QACe;CACf,IAAI;CACJ,IAAI;EACF,YAAY,aAAa,cAAc,OAAO;CAChD,QAAQ;EAEN,QAAQ,KAAK,EAAE,WAAW,QAAQ,GAAG,GAAG,4CAA4C;EACpF;CACF;CACA,IAAI;EACF,MAAM,YAAY,QAAQ,KAAK,WAAW,YAAY;EACtD,QAAQ,KAAK;GAAE,WAAW,QAAQ;GAAI,MAAM,OAAO,QAAQ,GAAG;EAAE,GAAG,mBAAmB;CACxF,SAAS,OAAO;EAEd,QAAQ,KACN;GAAE,WAAW,QAAQ;GAAI,MAAM,OAAO,QAAQ,GAAG;GAAG,KAAK;EAAM,GAC/D,yBACF;CACF;AACF;;AAWA,SAAS,OAAO,KAAqB;CACnC,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,YAAY,KAAa,QAAgB,OAAoC;CAC1F,MAAM,OAAO,KAAK,UAAU,KAAK;CACjC,MAAM,YAAY,WAAW,QAAQ,IAAI;CACzC,MAAM,MAAM,KAAK;EACf,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,sBAAsB,MAAM;GAC5B,0BAA0B;EAC5B;EACA;EACA,QAAQ,YAAY,QAAQ,kBAAkB;CAChD,CAAC;AACH"}
+{"version":3,"file":"webhook-events.mjs","names":[],"sources":["../../src/adapters/webhook-events.ts"],"sourcesContent":["import type { Logger } from \"pino\";\nimport { WebhookModel, type WebhookTables } from \"../models/webhook.ts\";\nimport type { Webhook } from \"../schema/webhook.ts\";\nimport type { SecretInput } from \"../utils/encrypt.ts\";\nimport { hmacSha256 } from \"../utils/hash.ts\";\nimport { httpStatus } from \"../utils/http.ts\";\nimport type { DatabaseAdapter } from \"./database.ts\";\n\n/**\n * Deliver an event to every subscribed webhook of a project.\n *\n * @param db - Database adapter for loading subscriptions.\n * @param tables - Webhook table handles.\n * @param projectId - Project whose webhooks receive the event.\n * @param event - Event name (e.g. \"baseline:created\").\n * @param data - Event payload.\n * @param secret - Server secret for decrypting webhook secrets (in memory only).\n * @param logger - Optional logger for per-delivery outcomes.\n */\nexport async function emitWebhookEvent(\n  db: DatabaseAdapter,\n  tables: WebhookTables,\n  projectId: string,\n  event: string,\n  data: Record<string, unknown>,\n  secret: SecretInput,\n  logger?: Logger,\n): Promise<void> {\n  const webhookModel = new WebhookModel(db, tables, secret);\n  const webhooks = await webhookModel.list(projectId);\n  const eventPayload: WebhookEvent = {\n    event,\n    projectId,\n    data,\n    timestamp: new Date().toISOString(),\n  };\n\n  await Promise.allSettled(\n    webhooks.map(async (webhook) => {\n      const events = WebhookModel.eventsOf(webhook);\n      if (events.length > 0 && !events.includes(event)) {\n        return;\n      }\n      await deliverToWebhook(webhookModel, webhook, eventPayload, logger);\n    }),\n  );\n}\n\n/** Decrypt, send, and log one webhook delivery (failures stay non-fatal). */\nasync function deliverToWebhook(\n  webhookModel: WebhookModel,\n  webhook: Webhook,\n  eventPayload: WebhookEvent,\n  logger: Logger | undefined,\n): Promise<void> {\n  let plaintext: string;\n  try {\n    plaintext = webhookModel.decryptSecret(webhook);\n  } catch {\n    // Undecryptable secret (e.g. rotated server SECRET) — skip, don't leak\n    logger?.warn({ webhookId: webhook.id }, \"skipping webhook with undecryptable secret\");\n    return;\n  }\n  try {\n    // A non-2xx answer throws HttpError, so only a delivery the subscriber accepted is \"delivered\".\n    await sendWebhook(webhook.url, plaintext, eventPayload, logger);\n    logger?.info({ webhookId: webhook.id, host: hostOf(webhook.url) }, \"webhook delivered\");\n  } catch (error) {\n    // Webhook delivery failures are non-fatal\n    logger?.warn(\n      { webhookId: webhook.id, host: hostOf(webhook.url), err: error },\n      \"webhook delivery failed\",\n    );\n  }\n}\n\n/** Outbound webhook payload delivered to subscribers. */\nexport interface WebhookEvent {\n  event: string;\n  projectId: string;\n  data: Record<string, unknown>;\n  timestamp: string;\n}\n\n/** Hostname of a webhook URL for logs (never the full URL — may carry secrets). */\nfunction hostOf(url: string): string {\n  try {\n    return new URL(url).host;\n  } catch {\n    return \"[invalid-url]\";\n  }\n}\n\n/**\n * POST one event through `httpStatus` (default timeout and retry policy). The signature covers the\n * exact body string, and `json` serializes the event with the same `JSON.stringify`.\n */\nasync function sendWebhook(\n  url: string,\n  secret: string,\n  event: WebhookEvent,\n  logger: Logger | undefined,\n): Promise<void> {\n  await httpStatus(url, {\n    method: \"POST\",\n    json: event,\n    headers: {\n      \"X-StoryShelf-Event\": event.event,\n      \"X-StoryShelf-Signature\": hmacSha256(secret, JSON.stringify(event)),\n    },\n    ...(logger ? { logger } : {}),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmBA,eAAsB,iBACpB,IACA,QACA,WACA,OACA,MACA,QACA,QACe;CACf,MAAM,eAAe,IAAI,aAAa,IAAI,QAAQ,MAAM;CACxD,MAAM,WAAW,MAAM,aAAa,KAAK,SAAS;CAClD,MAAM,eAA6B;EACjC;EACA;EACA;EACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACpC;CAEA,MAAM,QAAQ,WACZ,SAAS,IAAI,OAAO,YAAY;EAC9B,MAAM,SAAS,aAAa,SAAS,OAAO;EAC5C,IAAI,OAAO,SAAS,KAAK,CAAC,OAAO,SAAS,KAAK,GAC7C;EAEF,MAAM,iBAAiB,cAAc,SAAS,cAAc,MAAM;CACpE,CAAC,CACH;AACF;;AAGA,eAAe,iBACb,cACA,SACA,cACA,QACe;CACf,IAAI;CACJ,IAAI;EACF,YAAY,aAAa,cAAc,OAAO;CAChD,QAAQ;EAEN,QAAQ,KAAK,EAAE,WAAW,QAAQ,GAAG,GAAG,4CAA4C;EACpF;CACF;CACA,IAAI;EAEF,MAAM,YAAY,QAAQ,KAAK,WAAW,cAAc,MAAM;EAC9D,QAAQ,KAAK;GAAE,WAAW,QAAQ;GAAI,MAAM,OAAO,QAAQ,GAAG;EAAE,GAAG,mBAAmB;CACxF,SAAS,OAAO;EAEd,QAAQ,KACN;GAAE,WAAW,QAAQ;GAAI,MAAM,OAAO,QAAQ,GAAG;GAAG,KAAK;EAAM,GAC/D,yBACF;CACF;AACF;;AAWA,SAAS,OAAO,KAAqB;CACnC,IAAI;EACF,OAAO,IAAI,IAAI,GAAG,CAAC,CAAC;CACtB,QAAQ;EACN,OAAO;CACT;AACF;;;;;AAMA,eAAe,YACb,KACA,QACA,OACA,QACe;CACf,MAAM,WAAW,KAAK;EACpB,QAAQ;EACR,MAAM;EACN,SAAS;GACP,sBAAsB,MAAM;GAC5B,0BAA0B,WAAW,QAAQ,KAAK,UAAU,KAAK,CAAC;EACpE;EACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;CAC7B,CAAC;AACH"}

package/dist/adapters/capture-target-offers.d.mts

@@ -0,0 +1,26 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { CaptureTarget, RunnerTarget } from "./capture-target.mjs";
+import { AdapterLifecycle } from "../adapter/metadata.mjs";
+/** A runner's live target list. */
+interface TargetOffers {
+  /** First declared target: what a project with no `browsers` setting resolves to. */
+  readonly defaultTarget: CaptureTarget;
+  /** The targets with their current status; reads `metadata.targets`. */
+  current(): readonly RunnerTarget[];
+  /**
+   * Wrap `launch` so a target the runner does not offer fails with a {@link TargetLaunchError}, and
+   * a launch that fails marks its target unavailable with the launch error as the reason (not a
+   * transient one: a remote service that is down stays offered).
+   */
+  guard<T, Rest extends unknown[]>(launch: (target: CaptureTarget, ...rest: Rest) => Promise<T>): (target: CaptureTarget, ...rest: Rest) => Promise<T>;
+  /** Lifecycle whose `setup` replaces the statuses with what `verify` finds, and `health` reports them. */
+  lifecycle(verify: () => Promise<readonly RunnerTarget[]>): AdapterLifecycle;
+}
+/**
+ * Offer `declared`, default first. Until verified every target reads as ready, so a runner used
+ * without `lifecycle.setup` behaves as before and a failed launch still marks its target.
+ */
+declare function createTargetOffers(declared: readonly RunnerTarget[]): TargetOffers;
+export { TargetOffers, createTargetOffers };
+//# sourceMappingURL=capture-target-offers.d.mts.map

package/dist/adapters/capture-target-offers.mjs

@@ -0,0 +1,57 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { TargetLaunchError } from "./capture-target.mjs";
+// src/adapters/capture-target-offers.ts
+/**
+* What a runner offers right now, shared by the runners (ADR 0007): the targets it declared, whether
+* each can render, and the lifecycle that keeps that honest. A launch failure marks its target
+* unavailable from then on.
+*/
+/**
+* Offer `declared`, default first. Until verified every target reads as ready, so a runner used
+* without `lifecycle.setup` behaves as before and a failed launch still marks its target.
+*/
+function createTargetOffers(declared) {
+	let targets = declared;
+	const first = declared[0];
+	if (first === void 0) throw new Error("A runner must offer at least one target");
+	const fail = (target, reason) => {
+		targets = targets.map((entry) => entry.target === target ? {
+			...entry,
+			status: { unavailable: reason }
+		} : entry);
+	};
+	return {
+		defaultTarget: first.target,
+		current: () => targets,
+		guard: (launch) => async (target, ...rest) => {
+			if (!targets.some((entry) => entry.target === target)) throw new TargetLaunchError(target, "not offered by this runner");
+			try {
+				return await launch(target, ...rest);
+			} catch (error) {
+				if (error instanceof TargetLaunchError && !error.transient) fail(target, error.reason);
+				throw error;
+			}
+		},
+		lifecycle: (verify) => ({
+			setup: async () => {
+				targets = await verify();
+			},
+			teardown: async () => {
+				await Promise.resolve();
+			},
+			health: async () => {
+				await Promise.resolve();
+				const down = targets.flatMap((entry) => entry.status === "ready" ? [] : [`${entry.target}: ${entry.status.unavailable}`]);
+				return {
+					ok: down.length < targets.length,
+					...down.length > 0 ? { detail: down.join("; ") } : {}
+				};
+			}
+		})
+	};
+}
+export { createTargetOffers };
+
+//# sourceMappingURL=capture-target-offers.mjs.map

package/dist/adapters/capture-target-offers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-target-offers.mjs","names":[],"sources":["../../src/adapters/capture-target-offers.ts"],"sourcesContent":["/**\n * What a runner offers right now, shared by the runners (ADR 0007): the targets it declared, whether\n * each can render, and the lifecycle that keeps that honest. A launch failure marks its target\n * unavailable from then on.\n */\nimport { TargetLaunchError, type CaptureTarget, type RunnerTarget } from \"./capture-target.ts\";\nimport type { AdapterLifecycle } from \"./metadata.ts\";\n\n/** A runner's live target list. */\nexport interface TargetOffers {\n  /** First declared target: what a project with no `browsers` setting resolves to. */\n  readonly defaultTarget: CaptureTarget;\n  /** The targets with their current status; reads `metadata.targets`. */\n  current(): readonly RunnerTarget[];\n  /**\n   * Wrap `launch` so a target the runner does not offer fails with a {@link TargetLaunchError}, and\n   * a launch that fails marks its target unavailable with the launch error as the reason (not a\n   * transient one: a remote service that is down stays offered).\n   */\n  guard<T, Rest extends unknown[]>(\n    launch: (target: CaptureTarget, ...rest: Rest) => Promise<T>,\n  ): (target: CaptureTarget, ...rest: Rest) => Promise<T>;\n  /** Lifecycle whose `setup` replaces the statuses with what `verify` finds, and `health` reports them. */\n  lifecycle(verify: () => Promise<readonly RunnerTarget[]>): AdapterLifecycle;\n}\n\n/**\n * Offer `declared`, default first. Until verified every target reads as ready, so a runner used\n * without `lifecycle.setup` behaves as before and a failed launch still marks its target.\n */\nexport function createTargetOffers(declared: readonly RunnerTarget[]): TargetOffers {\n  let targets: readonly RunnerTarget[] = declared;\n  const first = declared[0];\n  if (first === undefined) {\n    throw new Error(\"A runner must offer at least one target\");\n  }\n  const fail = (target: CaptureTarget, reason: string): void => {\n    targets = targets.map((entry) =>\n      entry.target === target ? { ...entry, status: { unavailable: reason } } : entry,\n    );\n  };\n  return {\n    defaultTarget: first.target,\n    current: () => targets,\n    guard:\n      (launch) =>\n      async (target, ...rest) => {\n        if (!targets.some((entry) => entry.target === target)) {\n          throw new TargetLaunchError(target, \"not offered by this runner\");\n        }\n        try {\n          return await launch(target, ...rest);\n        } catch (error) {\n          if (error instanceof TargetLaunchError && !error.transient) {\n            fail(target, error.reason);\n          }\n          throw error;\n        }\n      },\n    lifecycle: (verify) => ({\n      setup: async () => {\n        targets = await verify();\n      },\n      teardown: async () => {\n        await Promise.resolve();\n      },\n      health: async () => {\n        await Promise.resolve();\n        const down = targets.flatMap((entry) =>\n          entry.status === \"ready\" ? [] : [`${entry.target}: ${entry.status.unavailable}`],\n        );\n        return {\n          ok: down.length < targets.length,\n          ...(down.length > 0 ? { detail: down.join(\"; \") } : {}),\n        };\n      },\n    }),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;AA8BA,SAAgB,mBAAmB,UAAiD;CAClF,IAAI,UAAmC;CACvC,MAAM,QAAQ,SAAS;CACvB,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,yCAAyC;CAE3D,MAAM,QAAQ,QAAuB,WAAyB;EAC5D,UAAU,QAAQ,KAAK,UACrB,MAAM,WAAW,SAAS;GAAE,GAAG;GAAO,QAAQ,EAAE,aAAa,OAAO;EAAE,IAAI,KAC5E;CACF;CACA,OAAO;EACL,eAAe,MAAM;EACrB,eAAe;EACf,QACG,WACD,OAAO,QAAQ,GAAG,SAAS;GACzB,IAAI,CAAC,QAAQ,MAAM,UAAU,MAAM,WAAW,MAAM,GAClD,MAAM,IAAI,kBAAkB,QAAQ,4BAA4B;GAElE,IAAI;IACF,OAAO,MAAM,OAAO,QAAQ,GAAG,IAAI;GACrC,SAAS,OAAO;IACd,IAAI,iBAAiB,qBAAqB,CAAC,MAAM,WAC/C,KAAK,QAAQ,MAAM,MAAM;IAE3B,MAAM;GACR;EACF;EACF,YAAY,YAAY;GACtB,OAAO,YAAY;IACjB,UAAU,MAAM,OAAO;GACzB;GACA,UAAU,YAAY;IACpB,MAAM,QAAQ,QAAQ;GACxB;GACA,QAAQ,YAAY;IAClB,MAAM,QAAQ,QAAQ;IACtB,MAAM,OAAO,QAAQ,SAAS,UAC5B,MAAM,WAAW,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,IAAI,MAAM,OAAO,aAAa,CACjF;IACA,OAAO;KACL,IAAI,KAAK,SAAS,QAAQ;KAC1B,GAAI,KAAK,SAAS,IAAI,EAAE,QAAQ,KAAK,KAAK,IAAI,EAAE,IAAI,CAAC;IACvD;GACF;EACF;CACF;AACF"}