@storyshelf/core 0.6.2 → 0.8.0

package/dist/insights.mjs

@@ -0,0 +1,12 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { DEFAULT_EVIDENCE_LIMITS, resolveLimits } from "./insights/limits.mjs";
+import { redactText } from "./insights/redact.mjs";
+import { buildTriageEvidence, rankSnapshots, snapshotKey } from "./insights/evidence.mjs";
+import { buildHealthEvidence } from "./insights/evidence-health.mjs";
+import { healthEnvelopeSchema, triageEnvelopeSchema } from "./insights/envelope.mjs";
+import { computeInputHash } from "./insights/hash.mjs";
+import { BUDGET_THRESHOLDS, countedTokens, crossedThresholds, utcDay, utcDayStart } from "./insights/budget.mjs";
+import { HEALTH_SYSTEM, PROMPT_VERSION, TRIAGE_SYSTEM } from "./insights/prompts/v1.mjs";
+export { BUDGET_THRESHOLDS, DEFAULT_EVIDENCE_LIMITS, HEALTH_SYSTEM, PROMPT_VERSION, TRIAGE_SYSTEM, buildHealthEvidence, buildTriageEvidence, computeInputHash, countedTokens, crossedThresholds, healthEnvelopeSchema, rankSnapshots, redactText, resolveLimits, snapshotKey, triageEnvelopeSchema, utcDay, utcDayStart };

package/dist/logger.d.mts

@@ -1,7 +1,6 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { Logger } from "pino";
-//#region src/logger.d.ts
 /**
  * Create the structured JSON logger used across StoryShelf.
  *
@@ -43,6 +42,5 @@ interface LoggerOptions {
    */
   mixin?: () => Record<string, unknown>;
 }
-//#endregion
 export { type Logger, LoggerOptions, PinoTransport, createShelfLogger };
 //# sourceMappingURL=logger.d.mts.map

package/dist/logger.mjs

@@ -1,8 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { redactSecrets } from "./utils/redact.mjs";
 import pino from "pino";
-//#region src/logger.ts
+// src/logger.ts
 /**
 * Create the structured JSON logger used across StoryShelf.
 *
@@ -31,10 +32,24 @@ function createShelfLogger(options = {}) {
 	return pino({
 		level: options.level ?? process.env["LOG_LEVEL"] ?? "info",
 		base: { env: options.env ?? process.env["NODE_ENV"] },
-		mixin: options.mixin
+		mixin: options.mixin,
+		serializers: { err: redactedError }
 	}, transport);
 }
-//#endregion
+/**
+* Pino's error serializer, with secrets scrubbed from the message and stack: a runner's error can
+* quote the signed Storybook URL it failed to open (ADR 0007, decision 5).
+*/
+function redactedError(err) {
+	const serialized = pino.stdSerializers.err(err);
+	if (serialized === null || typeof serialized !== "object") return serialized;
+	const record = serialized;
+	for (const key of ["message", "stack"]) {
+		const value = record[key];
+		if (typeof value === "string") record[key] = redactSecrets(value);
+	}
+	return record;
+}
 export { createShelfLogger };
 
 //# sourceMappingURL=logger.mjs.map

package/dist/logger.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"logger.mjs","names":[],"sources":["../src/logger.ts"],"sourcesContent":["import pino from \"pino\";\nimport type { Logger } from \"pino\";\n\n/**\n * Create the structured JSON logger used across StoryShelf.\n *\n * Logging conventions:\n * - Always log structured objects, never interpolate into the message:\n *   `logger.info({ projectId, buildId }, \"build started\")`.\n * - Attach errors as an `err` child field rather than stringifying into the message:\n *   `logger.error({ err }, \"capture failed\")`.\n * - Derive scoped child loggers for background work:\n *   `const captureLogger = logger.child({ buildId })`.\n *\n * The default sink is stdout. The level resolves as explicit option, then\n * the `LOG_LEVEL` environment variable, then `\"info\"` — so `LOG_LEVEL=debug`\n * configures a default-constructed logger with no code changes. Unknown\n * levels throw at construction (fail fast on typos). Hosted observability\n * platforms (Sentry, PostHog, Datadog, GCP, OTEL collector, etc.) are added\n * as pino worker `transports` — they are sinks for this logger, not\n * standalone loggers.\n */\nexport function createShelfLogger(options: LoggerOptions = {}): Logger {\n  const targets = [\n    { target: \"pino/file\", options: { destination: 1 } },\n    ...(options.transports ?? []),\n  ];\n  const transport = pino.transport({ targets });\n  return pino(\n    {\n      level: options.level ?? process.env[\"LOG_LEVEL\"] ?? \"info\",\n      base: { env: options.env ?? process.env[\"NODE_ENV\"] },\n      mixin: options.mixin,\n    },\n    transport,\n  );\n}\n\n/** Pino logger type shared across StoryShelf. */\nexport type { Logger };\n\n/** A pino worker transport to attach to the logger output. */\nexport interface PinoTransport {\n  /** Package name or absolute path of the transport module. */\n  target: string;\n  /** Options passed to the transport worker. */\n  options?: Record<string, unknown>;\n}\n\n/** Configuration for constructing the shelf logger. */\nexport interface LoggerOptions {\n  /** Minimum level to emit. Defaults to `LOG_LEVEL` env, then `\"info\"`. */\n  level?: string;\n  /** Extra pino worker transports appended to the default stdout sink. */\n  transports?: PinoTransport[];\n  /** Deployment environment recorded in the `env` base field. Defaults to `NODE_ENV`. */\n  env?: string;\n  /**\n   * Per-line mixin merged into every log record. Used for OTEL trace\n   * correlation (`otelLogMixin` from `@storyshelf/observability`).\n   */\n  mixin?: () => Record<string, unknown>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,kBAAkB,UAAyB,CAAC,GAAW;CACrE,MAAM,UAAU,CACd;EAAE,QAAQ;EAAa,SAAS,EAAE,aAAa,EAAE;CAAE,GACnD,GAAI,QAAQ,cAAc,CAAC,CAC7B;CACA,MAAM,YAAY,KAAK,UAAU,EAAE,QAAQ,CAAC;CAC5C,OAAO,KACL;EACE,OAAO,QAAQ,SAAS,QAAQ,IAAI,gBAAgB;EACpD,MAAM,EAAE,KAAK,QAAQ,OAAO,QAAQ,IAAI,YAAY;EACpD,OAAO,QAAQ;CACjB,GACA,SACF;AACF"}
+{"version":3,"file":"logger.mjs","names":[],"sources":["../src/logger.ts"],"sourcesContent":["import pino from \"pino\";\nimport type { Logger } from \"pino\";\nimport { redactSecrets } from \"./utils/redact.ts\";\n\n/**\n * Create the structured JSON logger used across StoryShelf.\n *\n * Logging conventions:\n * - Always log structured objects, never interpolate into the message:\n *   `logger.info({ projectId, buildId }, \"build started\")`.\n * - Attach errors as an `err` child field rather than stringifying into the message:\n *   `logger.error({ err }, \"capture failed\")`.\n * - Derive scoped child loggers for background work:\n *   `const captureLogger = logger.child({ buildId })`.\n *\n * The default sink is stdout. The level resolves as explicit option, then\n * the `LOG_LEVEL` environment variable, then `\"info\"` — so `LOG_LEVEL=debug`\n * configures a default-constructed logger with no code changes. Unknown\n * levels throw at construction (fail fast on typos). Hosted observability\n * platforms (Sentry, PostHog, Datadog, GCP, OTEL collector, etc.) are added\n * as pino worker `transports` — they are sinks for this logger, not\n * standalone loggers.\n */\nexport function createShelfLogger(options: LoggerOptions = {}): Logger {\n  const targets = [\n    { target: \"pino/file\", options: { destination: 1 } },\n    ...(options.transports ?? []),\n  ];\n  const transport = pino.transport({ targets });\n  return pino(\n    {\n      level: options.level ?? process.env[\"LOG_LEVEL\"] ?? \"info\",\n      base: { env: options.env ?? process.env[\"NODE_ENV\"] },\n      mixin: options.mixin,\n      serializers: { err: redactedError },\n    },\n    transport,\n  );\n}\n\n/**\n * Pino's error serializer, with secrets scrubbed from the message and stack: a runner's error can\n * quote the signed Storybook URL it failed to open (ADR 0007, decision 5).\n */\nfunction redactedError(err: unknown): unknown {\n  const serialized: unknown = pino.stdSerializers.err(err as Error);\n  if (serialized === null || typeof serialized !== \"object\") {\n    return serialized;\n  }\n  const record = serialized as Record<string, unknown>;\n  for (const key of [\"message\", \"stack\"]) {\n    const value = record[key];\n    if (typeof value === \"string\") {\n      record[key] = redactSecrets(value);\n    }\n  }\n  return record;\n}\n\n/** Pino logger type shared across StoryShelf. */\nexport type { Logger };\n\n/** A pino worker transport to attach to the logger output. */\nexport interface PinoTransport {\n  /** Package name or absolute path of the transport module. */\n  target: string;\n  /** Options passed to the transport worker. */\n  options?: Record<string, unknown>;\n}\n\n/** Configuration for constructing the shelf logger. */\nexport interface LoggerOptions {\n  /** Minimum level to emit. Defaults to `LOG_LEVEL` env, then `\"info\"`. */\n  level?: string;\n  /** Extra pino worker transports appended to the default stdout sink. */\n  transports?: PinoTransport[];\n  /** Deployment environment recorded in the `env` base field. Defaults to `NODE_ENV`. */\n  env?: string;\n  /**\n   * Per-line mixin merged into every log record. Used for OTEL trace\n   * correlation (`otelLogMixin` from `@storyshelf/observability`).\n   */\n  mixin?: () => Record<string, unknown>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,kBAAkB,UAAyB,CAAC,GAAW;CACrE,MAAM,UAAU,CACd;EAAE,QAAQ;EAAa,SAAS,EAAE,aAAa,EAAE;CAAE,GACnD,GAAI,QAAQ,cAAc,CAAC,CAC7B;CACA,MAAM,YAAY,KAAK,UAAU,EAAE,QAAQ,CAAC;CAC5C,OAAO,KACL;EACE,OAAO,QAAQ,SAAS,QAAQ,IAAI,gBAAgB;EACpD,MAAM,EAAE,KAAK,QAAQ,OAAO,QAAQ,IAAI,YAAY;EACpD,OAAO,QAAQ;EACf,aAAa,EAAE,KAAK,cAAc;CACpC,GACA,SACF;AACF;;;;;AAMA,SAAS,cAAc,KAAuB;CAC5C,MAAM,aAAsB,KAAK,eAAe,IAAI,GAAY;CAChE,IAAI,eAAe,QAAQ,OAAO,eAAe,UAC/C,OAAO;CAET,MAAM,SAAS;CACf,KAAK,MAAM,OAAO,CAAC,WAAW,OAAO,GAAG;EACtC,MAAM,QAAQ,OAAO;EACrB,IAAI,OAAO,UAAU,UACnB,OAAO,OAAO,cAAc,KAAK;CAErC;CACA,OAAO;AACT"}

package/dist/models/ai-budget-alert.d.mts

@@ -0,0 +1,21 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { AiBudgetAlertRow } from "../schema/insight.mjs";
+import { Table } from "drizzle-orm";
+/** Tables required by {@link AiBudgetAlertModel}. */
+interface AiBudgetAlertTables {
+  aiBudgetAlerts: Table;
+}
+/** Data operations for budget alert claims. */
+declare class AiBudgetAlertModel {
+  private readonly tables;
+  private readonly db;
+  constructor(db: DatabaseAdapter, tables?: AiBudgetAlertTables);
+  /** Claim `(day, threshold)`; true only for the single instance that inserted it. */
+  claim(day: string, threshold: number): Promise<boolean>;
+  /** Claims already made for a day. */
+  listForDay(day: string): Promise<AiBudgetAlertRow[]>;
+}
+export { AiBudgetAlertModel, AiBudgetAlertTables };
+//# sourceMappingURL=ai-budget-alert.d.mts.map

package/dist/models/ai-budget-alert.mjs

@@ -0,0 +1,37 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { col } from "./columns.mjs";
+import { eq } from "drizzle-orm";
+// src/models/ai-budget-alert.ts
+/** Budget-threshold alert claims: the primary key makes "once per day" atomic. */
+/** Data operations for budget alert claims. */
+var AiBudgetAlertModel = class {
+	tables;
+	db;
+	constructor(db, tables) {
+		this.db = db;
+		this.tables = tables ?? { aiBudgetAlerts: db.tables.aiBudgetAlerts };
+	}
+	/** Claim `(day, threshold)`; true only for the single instance that inserted it. */
+	async claim(day, threshold) {
+		try {
+			await this.db.insert(this.tables.aiBudgetAlerts, {
+				id: `${day}:${threshold}`,
+				day,
+				threshold,
+				createdAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/** Claims already made for a day. */
+	async listForDay(day) {
+		return await this.db.list(this.tables.aiBudgetAlerts, { where: eq(col(this.tables.aiBudgetAlerts, "day"), day) });
+	}
+};
+export { AiBudgetAlertModel };
+
+//# sourceMappingURL=ai-budget-alert.mjs.map

package/dist/models/ai-budget-alert.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-budget-alert.mjs","names":[],"sources":["../../src/models/ai-budget-alert.ts"],"sourcesContent":["/** Budget-threshold alert claims: the primary key makes \"once per day\" atomic. */\nimport { eq } from \"drizzle-orm\";\nimport type { Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { AiBudgetAlertRow } from \"../schema/insight.ts\";\nimport { col } from \"./columns.ts\";\n\n/** Tables required by {@link AiBudgetAlertModel}. */\nexport interface AiBudgetAlertTables {\n  aiBudgetAlerts: Table;\n}\n\n/** Data operations for budget alert claims. */\nexport class AiBudgetAlertModel {\n  private readonly tables: AiBudgetAlertTables;\n  private readonly db: DatabaseAdapter;\n\n  constructor(db: DatabaseAdapter, tables?: AiBudgetAlertTables) {\n    this.db = db;\n    this.tables = tables ?? { aiBudgetAlerts: db.tables.aiBudgetAlerts };\n  }\n\n  /** Claim `(day, threshold)`; true only for the single instance that inserted it. */\n  async claim(day: string, threshold: number): Promise<boolean> {\n    try {\n      await this.db.insert(this.tables.aiBudgetAlerts, {\n        id: `${day}:${threshold}`,\n        day,\n        threshold,\n        createdAt: new Date().toISOString(),\n      });\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  /** Claims already made for a day. */\n  async listForDay(day: string): Promise<AiBudgetAlertRow[]> {\n    return (await this.db.list(this.tables.aiBudgetAlerts, {\n      where: eq(col(this.tables.aiBudgetAlerts, \"day\"), day),\n    })) as unknown as AiBudgetAlertRow[];\n  }\n}\n"],"mappings":";;;;;;;;AAaA,IAAa,qBAAb,MAAgC;CAC9B;CACA;CAEA,YAAY,IAAqB,QAA8B;EAC7D,KAAK,KAAK;EACV,KAAK,SAAS,UAAU,EAAE,gBAAgB,GAAG,OAAO,eAAe;CACrE;;CAGA,MAAM,MAAM,KAAa,WAAqC;EAC5D,IAAI;GACF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,gBAAgB;IAC/C,IAAI,GAAG,IAAI,GAAG;IACd;IACA;IACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;GACpC,CAAC;GACD,OAAO;EACT,QAAQ;GACN,OAAO;EACT;CACF;;CAGA,MAAM,WAAW,KAA0C;EACzD,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,gBAAgB,EACrD,OAAO,GAAG,IAAI,KAAK,OAAO,gBAAgB,KAAK,GAAG,GAAG,EACvD,CAAC;CACH;AACF"}

package/dist/models/ai-usage.d.mts

@@ -0,0 +1,38 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { AiUsageRow } from "../schema/insight.mjs";
+import { Table } from "drizzle-orm";
+/** Tables required by {@link AiUsageModel}. */
+interface AiUsageTables {
+  aiUsage: Table;
+}
+/** Input for recording one provider call. */
+interface AiUsageInput {
+  insightId: string | null;
+  projectId: string;
+  profile: string;
+  task: string;
+  model: string;
+  inputTokens: number;
+  outputTokens: number;
+  estimated: boolean;
+  images: number;
+  status: "ok" | "failed";
+}
+/** Data operations for AI usage rows. */
+declare class AiUsageModel {
+  private readonly tables;
+  private readonly db;
+  constructor(db: DatabaseAdapter, tables?: AiUsageTables);
+  record(input: AiUsageInput): Promise<AiUsageRow>;
+  /** Page through rows since `sinceIso` (bounded pages; the list clamp is 1000). */
+  listSince(sinceIso: string): Promise<AiUsageRow[]>;
+  /** Calls recorded for a project since `sinceIso` (rolling-hour limit). */
+  countCalls(projectId: string, sinceIso: string): Promise<number>;
+  /** Delete rows older than `cutoffIso`; returns the number removed. */
+  purgeBefore(cutoffIso: string): Promise<number>;
+  private col;
+}
+export { AiUsageInput, AiUsageModel, AiUsageTables };
+//# sourceMappingURL=ai-usage.d.mts.map

package/dist/models/ai-usage.mjs

@@ -0,0 +1,60 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ulid } from "../utils/ulid.mjs";
+import { col } from "./columns.mjs";
+import { and, asc, eq, gte, lt } from "drizzle-orm";
+// src/models/ai-usage.ts
+/** Provider-reported AI usage rows; budget and hourly limits are counted from them. */
+const PAGE = 500;
+/** Data operations for AI usage rows. */
+var AiUsageModel = class {
+	tables;
+	db;
+	constructor(db, tables) {
+		this.db = db;
+		this.tables = tables ?? { aiUsage: db.tables.aiUsage };
+	}
+	async record(input) {
+		return await this.db.insert(this.tables.aiUsage, {
+			id: ulid(),
+			...input,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+	}
+	/** Page through rows since `sinceIso` (bounded pages; the list clamp is 1000). */
+	async listSince(sinceIso) {
+		const all = [];
+		for (let offset = 0;; offset += PAGE) {
+			const page = await this.db.list(this.tables.aiUsage, {
+				where: gte(this.col("createdAt"), sinceIso),
+				orderBy: asc(this.col("id")),
+				limit: PAGE,
+				offset
+			});
+			all.push(...page);
+			if (page.length < PAGE) return all;
+		}
+	}
+	/** Calls recorded for a project since `sinceIso` (rolling-hour limit). */
+	async countCalls(projectId, sinceIso) {
+		return await this.db.count(this.tables.aiUsage, and(eq(this.col("projectId"), projectId), gte(this.col("createdAt"), sinceIso)));
+	}
+	/** Delete rows older than `cutoffIso`; returns the number removed. */
+	async purgeBefore(cutoffIso) {
+		const rows = await this.db.list(this.tables.aiUsage, {
+			where: lt(this.col("createdAt"), cutoffIso),
+			limit: 1e3
+		});
+		await Promise.all(rows.map(async (row) => {
+			await this.db.remove(this.tables.aiUsage, row.id);
+		}));
+		return rows.length;
+	}
+	col(name) {
+		return col(this.tables.aiUsage, name);
+	}
+};
+export { AiUsageModel };
+
+//# sourceMappingURL=ai-usage.mjs.map

package/dist/models/ai-usage.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-usage.mjs","names":[],"sources":["../../src/models/ai-usage.ts"],"sourcesContent":["/** Provider-reported AI usage rows; budget and hourly limits are counted from them. */\nimport { and, asc, eq, gte, lt } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { AiUsageRow } from \"../schema/insight.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\nimport { col } from \"./columns.ts\";\n\n/** Tables required by {@link AiUsageModel}. */\nexport interface AiUsageTables {\n  aiUsage: Table;\n}\n\n/** Input for recording one provider call. */\nexport interface AiUsageInput {\n  insightId: string | null;\n  projectId: string;\n  profile: string;\n  task: string;\n  model: string;\n  inputTokens: number;\n  outputTokens: number;\n  estimated: boolean;\n  images: number;\n  status: \"ok\" | \"failed\";\n}\n\nconst PAGE = 500;\n\n/** Data operations for AI usage rows. */\nexport class AiUsageModel {\n  private readonly tables: AiUsageTables;\n  private readonly db: DatabaseAdapter;\n\n  constructor(db: DatabaseAdapter, tables?: AiUsageTables) {\n    this.db = db;\n    this.tables = tables ?? { aiUsage: db.tables.aiUsage };\n  }\n\n  async record(input: AiUsageInput): Promise<AiUsageRow> {\n    return (await this.db.insert(this.tables.aiUsage, {\n      id: ulid(),\n      ...input,\n      createdAt: new Date().toISOString(),\n    })) as unknown as AiUsageRow;\n  }\n\n  /** Page through rows since `sinceIso` (bounded pages; the list clamp is 1000). */\n  async listSince(sinceIso: string): Promise<AiUsageRow[]> {\n    const all: AiUsageRow[] = [];\n    for (let offset = 0; ; offset += PAGE) {\n      // Pages are inherently sequential (each needs the previous offset).\n      // oxlint-disable-next-line no-await-in-loop\n      const page = (await this.db.list(this.tables.aiUsage, {\n        where: gte(this.col(\"createdAt\"), sinceIso),\n        orderBy: asc(this.col(\"id\")),\n        limit: PAGE,\n        offset,\n      })) as unknown as AiUsageRow[];\n      all.push(...page);\n      if (page.length < PAGE) {\n        return all;\n      }\n    }\n  }\n\n  /** Calls recorded for a project since `sinceIso` (rolling-hour limit). */\n  async countCalls(projectId: string, sinceIso: string): Promise<number> {\n    return await this.db.count(\n      this.tables.aiUsage,\n      and(eq(this.col(\"projectId\"), projectId), gte(this.col(\"createdAt\"), sinceIso)),\n    );\n  }\n\n  /** Delete rows older than `cutoffIso`; returns the number removed. */\n  async purgeBefore(cutoffIso: string): Promise<number> {\n    const rows = (await this.db.list(this.tables.aiUsage, {\n      where: lt(this.col(\"createdAt\"), cutoffIso),\n      limit: 1000,\n    })) as unknown as AiUsageRow[];\n    await Promise.all(\n      rows.map(async (row) => {\n        await this.db.remove(this.tables.aiUsage, row.id);\n      }),\n    );\n    return rows.length;\n  }\n\n  private col(name: string): SQLWrapper {\n    return col(this.tables.aiUsage, name);\n  }\n}\n"],"mappings":";;;;;;;;AA2BA,MAAM,OAAO;;AAGb,IAAa,eAAb,MAA0B;CACxB;CACA;CAEA,YAAY,IAAqB,QAAwB;EACvD,KAAK,KAAK;EACV,KAAK,SAAS,UAAU,EAAE,SAAS,GAAG,OAAO,QAAQ;CACvD;CAEA,MAAM,OAAO,OAA0C;EACrD,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,SAAS;GAChD,IAAI,KAAK;GACT,GAAG;GACH,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,UAAU,UAAyC;EACvD,MAAM,MAAoB,CAAC;EAC3B,KAAK,IAAI,SAAS,IAAK,UAAU,MAAM;GAGrC,MAAM,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,SAAS;IACpD,OAAO,IAAI,KAAK,IAAI,WAAW,GAAG,QAAQ;IAC1C,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;IAC3B,OAAO;IACP;GACF,CAAC;GACD,IAAI,KAAK,GAAG,IAAI;GAChB,IAAI,KAAK,SAAS,MAChB,OAAO;EAEX;CACF;;CAGA,MAAM,WAAW,WAAmB,UAAmC;EACrE,OAAO,MAAM,KAAK,GAAG,MACnB,KAAK,OAAO,SACZ,IAAI,GAAG,KAAK,IAAI,WAAW,GAAG,SAAS,GAAG,IAAI,KAAK,IAAI,WAAW,GAAG,QAAQ,CAAC,CAChF;CACF;;CAGA,MAAM,YAAY,WAAoC;EACpD,MAAM,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,SAAS;GACpD,OAAO,GAAG,KAAK,IAAI,WAAW,GAAG,SAAS;GAC1C,OAAO;EACT,CAAC;EACD,MAAM,QAAQ,IACZ,KAAK,IAAI,OAAO,QAAQ;GACtB,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,SAAS,IAAI,EAAE;EAClD,CAAC,CACH;EACA,OAAO,KAAK;CACd;CAEA,IAAY,MAA0B;EACpC,OAAO,IAAI,KAAK,OAAO,SAAS,IAAI;CACtC;AACF"}

package/dist/models/baseline-approval.d.mts

@@ -0,0 +1,18 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import "../adapter/database.mjs";
+import { Snapshot } from "../schema/snapshot.mjs";
+import { BaselineWriteConflict } from "./baseline-conflict.mjs";
+import { BaselineStatus } from "./baseline-status.mjs";
+interface AtomicBaselineApproval {
+  snapshot: Snapshot;
+  reviewedBy: string | null;
+  force: boolean;
+  branch: string;
+}
+declare class BaselineApprovalConflict extends BaselineWriteConflict {
+  readonly driftStatus?: BaselineStatus;
+  constructor(message: string, driftStatus?: BaselineStatus);
+}
+export { AtomicBaselineApproval, BaselineApprovalConflict };
+//# sourceMappingURL=baseline-approval.d.mts.map

package/dist/models/baseline-approval.mjs

@@ -0,0 +1,41 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { col } from "./columns.mjs";
+import { BaselineWriteConflict } from "./baseline-conflict.mjs";
+import { baselineStatus, isBaselineDrifted } from "./baseline-status.mjs";
+import { and, eq } from "drizzle-orm";
+// src/models/baseline-approval.ts
+/** Review checks and decision persisted inside the baseline/reference transaction. */
+var BaselineApprovalConflict = class extends BaselineWriteConflict {
+	driftStatus;
+	constructor(message, driftStatus) {
+		super(message);
+		this.driftStatus = driftStatus;
+	}
+};
+async function approveInTransaction(tx, tables, input) {
+	const snapshot = await tx.get(tables.snapshots, input.snapshot.id);
+	if (!snapshot || snapshot.projectId !== input.snapshot.projectId || snapshot.buildId !== input.snapshot.buildId || snapshot.status !== input.snapshot.status || snapshot.updatedAt !== input.snapshot.updatedAt || snapshot.screenshotPath !== input.snapshot.screenshotPath || snapshot.baselineId !== input.snapshot.baselineId || snapshot.baselineVersion !== input.snapshot.baselineVersion) throw new BaselineApprovalConflict("Snapshot changed during approval; reload and retry");
+	const build = await tx.get(tables.builds, snapshot.buildId);
+	const project = await tx.get(tables.projects, snapshot.projectId);
+	if (!build || !project || build.projectId !== project.id || build.status === "cancelled" || build.gitBranch !== input.branch) throw new BaselineApprovalConflict("Build is unavailable for approval");
+	const current = await baselineFor(tx, tables, snapshot, build.gitBranch) ?? (build.gitBranch === project.gitDefaultBranch ? null : await baselineFor(tx, tables, snapshot, project.gitDefaultBranch));
+	const status = baselineStatus(snapshot, current);
+	if ((snapshot.status === "new" || snapshot.status === "changed") && isBaselineDrifted(status) && !input.force) throw new BaselineApprovalConflict("Baseline changed after this diff was computed", status);
+	await tx.update(tables.snapshots, snapshot.id, {
+		status: "approved",
+		reviewedBy: input.reviewedBy,
+		reviewedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+}
+async function baselineFor(tx, tables, snapshot, branch) {
+	return (await tx.list(tables.baselines, {
+		where: and(eq(col(tables.baselines, "projectId"), snapshot.projectId), eq(col(tables.baselines, "storyId"), snapshot.storyId), eq(col(tables.baselines, "viewportName"), snapshot.viewportName), eq(col(tables.baselines, "browser"), snapshot.browser ?? "chromium"), eq(col(tables.baselines, "branch"), branch)),
+		limit: 1
+	}))[0] ?? null;
+}
+export { BaselineApprovalConflict, approveInTransaction };
+
+//# sourceMappingURL=baseline-approval.mjs.map

package/dist/models/baseline-approval.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-approval.mjs","names":[],"sources":["../../src/models/baseline-approval.ts"],"sourcesContent":["/** Review checks and decision persisted inside the baseline/reference transaction. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { Tables, TxStore } from \"../adapters/database.ts\";\nimport type { Baseline } from \"../schema/baseline.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport type { Snapshot } from \"../schema/snapshot.ts\";\nimport { BaselineWriteConflict } from \"./baseline-conflict.ts\";\nimport { baselineStatus, isBaselineDrifted, type BaselineStatus } from \"./baseline-status.ts\";\nimport { col } from \"./columns.ts\";\n\nexport interface AtomicBaselineApproval {\n  snapshot: Snapshot;\n  reviewedBy: string | null;\n  force: boolean;\n  branch: string;\n}\nexport class BaselineApprovalConflict extends BaselineWriteConflict {\n  readonly driftStatus?: BaselineStatus;\n  constructor(message: string, driftStatus?: BaselineStatus) {\n    super(message);\n    this.driftStatus = driftStatus;\n  }\n}\n\nexport async function approveInTransaction(\n  tx: TxStore,\n  tables: Tables,\n  input: AtomicBaselineApproval,\n): Promise<void> {\n  const snapshot = (await tx.get(\n    tables.snapshots,\n    input.snapshot.id,\n  )) as unknown as Snapshot | null;\n  if (\n    !snapshot ||\n    snapshot.projectId !== input.snapshot.projectId ||\n    snapshot.buildId !== input.snapshot.buildId ||\n    snapshot.status !== input.snapshot.status ||\n    snapshot.updatedAt !== input.snapshot.updatedAt ||\n    snapshot.screenshotPath !== input.snapshot.screenshotPath ||\n    snapshot.baselineId !== input.snapshot.baselineId ||\n    snapshot.baselineVersion !== input.snapshot.baselineVersion\n  )\n    throw new BaselineApprovalConflict(\"Snapshot changed during approval; reload and retry\");\n  const build = (await tx.get(tables.builds, snapshot.buildId)) as unknown as Build | null;\n  const project = (await tx.get(tables.projects, snapshot.projectId)) as unknown as Project | null;\n  if (\n    !build ||\n    !project ||\n    build.projectId !== project.id ||\n    build.status === \"cancelled\" ||\n    build.gitBranch !== input.branch\n  )\n    throw new BaselineApprovalConflict(\"Build is unavailable for approval\");\n  const own = await baselineFor(tx, tables, snapshot, build.gitBranch);\n  const current =\n    own ??\n    (build.gitBranch === project.gitDefaultBranch\n      ? null\n      : await baselineFor(tx, tables, snapshot, project.gitDefaultBranch));\n  const status = baselineStatus(snapshot, current);\n  if (\n    (snapshot.status === \"new\" || snapshot.status === \"changed\") &&\n    isBaselineDrifted(status) &&\n    !input.force\n  )\n    throw new BaselineApprovalConflict(\"Baseline changed after this diff was computed\", status);\n  await tx.update(tables.snapshots, snapshot.id, {\n    status: \"approved\",\n    reviewedBy: input.reviewedBy,\n    reviewedAt: new Date().toISOString(),\n    updatedAt: new Date().toISOString(),\n  });\n}\n\nasync function baselineFor(\n  tx: TxStore,\n  tables: Tables,\n  snapshot: Snapshot,\n  branch: string,\n): Promise<Baseline | null> {\n  const rows = await tx.list(tables.baselines, {\n    where: and(\n      eq(col(tables.baselines, \"projectId\"), snapshot.projectId),\n      eq(col(tables.baselines, \"storyId\"), snapshot.storyId),\n      eq(col(tables.baselines, \"viewportName\"), snapshot.viewportName),\n      eq(col(tables.baselines, \"browser\"), snapshot.browser ?? \"chromium\"),\n      eq(col(tables.baselines, \"branch\"), branch),\n    ),\n    limit: 1,\n  });\n  return (rows[0] as unknown as Baseline | undefined) ?? null;\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAa,2BAAb,cAA8C,sBAAsB;CAClE;CACA,YAAY,SAAiB,aAA8B;EACzD,MAAM,OAAO;EACb,KAAK,cAAc;CACrB;AACF;AAEA,eAAsB,qBACpB,IACA,QACA,OACe;CACf,MAAM,WAAY,MAAM,GAAG,IACzB,OAAO,WACP,MAAM,SAAS,EACjB;CACA,IACE,CAAC,YACD,SAAS,cAAc,MAAM,SAAS,aACtC,SAAS,YAAY,MAAM,SAAS,WACpC,SAAS,WAAW,MAAM,SAAS,UACnC,SAAS,cAAc,MAAM,SAAS,aACtC,SAAS,mBAAmB,MAAM,SAAS,kBAC3C,SAAS,eAAe,MAAM,SAAS,cACvC,SAAS,oBAAoB,MAAM,SAAS,iBAE5C,MAAM,IAAI,yBAAyB,oDAAoD;CACzF,MAAM,QAAS,MAAM,GAAG,IAAI,OAAO,QAAQ,SAAS,OAAO;CAC3D,MAAM,UAAW,MAAM,GAAG,IAAI,OAAO,UAAU,SAAS,SAAS;CACjE,IACE,CAAC,SACD,CAAC,WACD,MAAM,cAAc,QAAQ,MAC5B,MAAM,WAAW,eACjB,MAAM,cAAc,MAAM,QAE1B,MAAM,IAAI,yBAAyB,mCAAmC;CAExE,MAAM,UACJ,MAFgB,YAAY,IAAI,QAAQ,UAAU,MAAM,SAAS,MAGhE,MAAM,cAAc,QAAQ,mBACzB,OACA,MAAM,YAAY,IAAI,QAAQ,UAAU,QAAQ,gBAAgB;CACtE,MAAM,SAAS,eAAe,UAAU,OAAO;CAC/C,KACG,SAAS,WAAW,SAAS,SAAS,WAAW,cAClD,kBAAkB,MAAM,KACxB,CAAC,MAAM,OAEP,MAAM,IAAI,yBAAyB,iDAAiD,MAAM;CAC5F,MAAM,GAAG,OAAO,OAAO,WAAW,SAAS,IAAI;EAC7C,QAAQ;EACR,YAAY,MAAM;EAClB,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACpC,CAAC;AACH;AAEA,eAAe,YACb,IACA,QACA,UACA,QAC0B;CAW1B,QAAQ,MAVW,GAAG,KAAK,OAAO,WAAW;EAC3C,OAAO,IACL,GAAG,IAAI,OAAO,WAAW,WAAW,GAAG,SAAS,SAAS,GACzD,GAAG,IAAI,OAAO,WAAW,SAAS,GAAG,SAAS,OAAO,GACrD,GAAG,IAAI,OAAO,WAAW,cAAc,GAAG,SAAS,YAAY,GAC/D,GAAG,IAAI,OAAO,WAAW,SAAS,GAAG,SAAS,WAAW,UAAU,GACnE,GAAG,IAAI,OAAO,WAAW,QAAQ,GAAG,MAAM,CAC5C;EACA,OAAO;CACT,CAAC,EAAA,CACY,MAA0C;AACzD"}

package/dist/models/baseline-archive.d.mts

@@ -0,0 +1,82 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { z } from "zod";
+/** Identifies a StoryShelf baseline archive. */
+declare const BASELINE_ARCHIVE_FORMAT = "storyshelf-baselines";
+/** Current archive format version. */
+declare const BASELINE_ARCHIVE_VERSION = 1;
+/** Hard limits for archives (both directions). Zip64 is unsupported, so entries stay < 65535 and archives stay far below 4 GiB. */
+declare const BASELINE_ARCHIVE_LIMITS: {
+  /** Maximum baselines in one archive. */
+  readonly maxBaselines: 50000;
+  /** Maximum size of one baseline PNG. */
+  readonly maxImageBytes: number;
+  /** Maximum size of `manifest.json`. */
+  readonly maxManifestBytes: number;
+  /**
+   * Maximum size of an archive in either direction: the combined uncompressed
+   * size of an import, and what an export may stream. Matches the import
+   * request-body ceiling, so every export can be imported back.
+   */
+  readonly maxArchiveBytes: number;
+};
+/** One baseline in the manifest. */
+declare const baselineManifestEntrySchema: z.ZodObject<{
+  storyId: z.ZodString;
+  viewport: z.ZodString;
+  browser: z.ZodString;
+  branch: z.ZodString;
+  mode: z.ZodNullable<z.ZodString>;
+  infraHash: z.ZodNullable<z.ZodString>;
+  fingerprint: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  createdAt: z.ZodISODateTime;
+  updatedAt: z.ZodISODateTime;
+  file: z.ZodString;
+  sha256: z.ZodString;
+}, z.core.$strip>;
+/** Identity of a baseline the export could not read (listed, not archived). */
+declare const baselineSkippedSchema: z.ZodObject<{
+  storyId: z.ZodString;
+  viewport: z.ZodString;
+  browser: z.ZodString;
+  branch: z.ZodString;
+}, z.core.$strip>;
+/** Archive manifest (`manifest.json`). */
+declare const baselineManifestSchema: z.ZodObject<{
+  format: z.ZodLiteral<"storyshelf-baselines">;
+  version: z.ZodLiteral<1>;
+  exportedAt: z.ZodISODateTime;
+  project: z.ZodNullable<z.ZodString>;
+  branch: z.ZodNullable<z.ZodString>;
+  baselines: z.ZodArray<z.ZodObject<{
+    storyId: z.ZodString;
+    viewport: z.ZodString;
+    browser: z.ZodString;
+    branch: z.ZodString;
+    mode: z.ZodNullable<z.ZodString>;
+    infraHash: z.ZodNullable<z.ZodString>;
+    fingerprint: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+    file: z.ZodString;
+    sha256: z.ZodString;
+  }, z.core.$strip>>;
+  skipped: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    storyId: z.ZodString;
+    viewport: z.ZodString;
+    browser: z.ZodString;
+    branch: z.ZodString;
+  }, z.core.$strip>>>;
+}, z.core.$strip>;
+/** One baseline in the manifest. */
+type BaselineManifestEntry = z.infer<typeof baselineManifestEntrySchema>;
+/** Archive manifest. */
+type BaselineManifest = z.infer<typeof baselineManifestSchema>;
+/** Identity of a baseline the export skipped. */
+type BaselineSkipped = z.infer<typeof baselineSkippedSchema>;
+/** An archive that is malformed, unsafe, over a limit, or inconsistent with its manifest. */
+declare class BaselineArchiveError extends Error {
+  readonly name = "BaselineArchiveError";
+}
+export { BASELINE_ARCHIVE_FORMAT, BASELINE_ARCHIVE_LIMITS, BASELINE_ARCHIVE_VERSION, BaselineArchiveError, BaselineManifest, BaselineManifestEntry, BaselineSkipped, baselineManifestEntrySchema, baselineManifestSchema, baselineSkippedSchema };
+//# sourceMappingURL=baseline-archive.d.mts.map

package/dist/models/baseline-archive.mjs

@@ -0,0 +1,105 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { modeSegment } from "../paths.mjs";
+import { z } from "zod";
+// src/models/baseline-archive.ts
+/**
+* Baseline archive format (v1): a zip holding `manifest.json` plus one PNG per
+* baseline at `baselines/<branch>/<storyId>/<mode>.png` — the storage layout
+* minus the instance-specific project id. The manifest is the source of truth
+* on import; file names inside the zip are only lookup keys and are never used
+* to build storage paths.
+*/
+/** Identifies a StoryShelf baseline archive. */
+const BASELINE_ARCHIVE_FORMAT = "storyshelf-baselines";
+/** Current archive format version. */
+const BASELINE_ARCHIVE_VERSION = 1;
+/** Name of the manifest entry at the archive root. */
+const BASELINE_MANIFEST_NAME = "manifest.json";
+/** Hard limits for archives (both directions). Zip64 is unsupported, so entries stay < 65535 and archives stay far below 4 GiB. */
+const BASELINE_ARCHIVE_LIMITS = {
+	/** Maximum baselines in one archive. */
+	maxBaselines: 5e4,
+	/** Maximum size of one baseline PNG. */
+	maxImageBytes: 67108864,
+	/** Maximum size of `manifest.json`. */
+	maxManifestBytes: 33554432,
+	/**
+	* Maximum size of an archive in either direction: the combined uncompressed
+	* size of an import, and what an export may stream. Matches the import
+	* request-body ceiling, so every export can be imported back.
+	*/
+	maxArchiveBytes: 536870912
+};
+const isoTimestamp = z.iso.datetime({ offset: true });
+/** One baseline in the manifest. */
+const baselineManifestEntrySchema = z.object({
+	storyId: z.string().min(1).max(512),
+	viewport: z.string().min(1).max(256),
+	browser: z.string().min(1).max(64),
+	branch: z.string().min(1).max(512),
+	mode: z.string().max(65536).nullable(),
+	infraHash: z.string().max(512).nullable(),
+	/** JSON fingerprint behind `infraHash`; absent in archives from before fingerprints. */
+	fingerprint: z.string().max(4096).nullable().optional(),
+	createdAt: isoTimestamp,
+	updatedAt: isoTimestamp,
+	/** Zip entry holding the PNG. */
+	file: z.string().min(1).max(2048),
+	/** Lowercase hex SHA-256 of the PNG bytes. */
+	sha256: z.string().regex(/^[0-9a-f]{64}$/u)
+});
+/** Identity of a baseline the export could not read (listed, not archived). */
+const baselineSkippedSchema = baselineManifestEntrySchema.pick({
+	storyId: true,
+	viewport: true,
+	browser: true,
+	branch: true
+});
+/** Archive manifest (`manifest.json`). */
+const baselineManifestSchema = z.object({
+	format: z.literal(BASELINE_ARCHIVE_FORMAT),
+	version: z.literal(1),
+	exportedAt: isoTimestamp,
+	/** Source project slug (informational). */
+	project: z.string().nullable(),
+	/** Branch filter used by the export; null means every branch. */
+	branch: z.string().nullable(),
+	baselines: z.array(baselineManifestEntrySchema).max(BASELINE_ARCHIVE_LIMITS.maxBaselines),
+	skipped: z.array(baselineSkippedSchema).optional()
+});
+/** An archive that is malformed, unsafe, over a limit, or inconsistent with its manifest. */
+var BaselineArchiveError = class extends Error {
+	name = "BaselineArchiveError";
+};
+/** Zip entry name for a baseline, mirroring the storage layout without the project id. */
+function archiveFileName(branch, storyId, viewport, browser) {
+	return `baselines/${branch}/${storyId}/${modeSegment(viewport, browser)}.png`;
+}
+/** Stable identity key of a baseline (story, mode, browser, branch). */
+function baselineIdentity(entry) {
+	return JSON.stringify([
+		entry.storyId,
+		entry.viewport,
+		entry.browser,
+		entry.branch
+	]);
+}
+const PNG_SIGNATURE = Buffer.from([
+	137,
+	80,
+	78,
+	71,
+	13,
+	10,
+	26,
+	10
+]);
+/** Whether `data` starts with the PNG file signature. */
+function isPng(data) {
+	return data.length >= PNG_SIGNATURE.length && data.subarray(0, 8).equals(PNG_SIGNATURE);
+}
+export { BASELINE_ARCHIVE_FORMAT, BASELINE_ARCHIVE_LIMITS, BASELINE_ARCHIVE_VERSION, BASELINE_MANIFEST_NAME, BaselineArchiveError, archiveFileName, baselineIdentity, baselineManifestEntrySchema, baselineManifestSchema, baselineSkippedSchema, isPng };
+
+//# sourceMappingURL=baseline-archive.mjs.map

package/dist/models/baseline-archive.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-archive.mjs","names":[],"sources":["../../src/models/baseline-archive.ts"],"sourcesContent":["/**\n * Baseline archive format (v1): a zip holding `manifest.json` plus one PNG per\n * baseline at `baselines/<branch>/<storyId>/<mode>.png` — the storage layout\n * minus the instance-specific project id. The manifest is the source of truth\n * on import; file names inside the zip are only lookup keys and are never used\n * to build storage paths.\n */\nimport { z } from \"zod\";\nimport { modeSegment } from \"../utils/paths.ts\";\n\n/** Identifies a StoryShelf baseline archive. */\nexport const BASELINE_ARCHIVE_FORMAT = \"storyshelf-baselines\";\n/** Current archive format version. */\nexport const BASELINE_ARCHIVE_VERSION = 1;\n/** Name of the manifest entry at the archive root. */\nexport const BASELINE_MANIFEST_NAME = \"manifest.json\";\n\n/** Hard limits for archives (both directions). Zip64 is unsupported, so entries stay < 65535 and archives stay far below 4 GiB. */\nexport const BASELINE_ARCHIVE_LIMITS = {\n  /** Maximum baselines in one archive. */\n  maxBaselines: 50_000,\n  /** Maximum size of one baseline PNG. */\n  maxImageBytes: 64 * 1024 * 1024,\n  /** Maximum size of `manifest.json`. */\n  maxManifestBytes: 32 * 1024 * 1024,\n  /**\n   * Maximum size of an archive in either direction: the combined uncompressed\n   * size of an import, and what an export may stream. Matches the import\n   * request-body ceiling, so every export can be imported back.\n   */\n  maxArchiveBytes: 512 * 1024 * 1024,\n} as const;\n\nconst isoTimestamp = z.iso.datetime({ offset: true });\n\n/** One baseline in the manifest. */\nexport const baselineManifestEntrySchema = z.object({\n  storyId: z.string().min(1).max(512),\n  viewport: z.string().min(1).max(256),\n  browser: z.string().min(1).max(64),\n  branch: z.string().min(1).max(512),\n  mode: z.string().max(65_536).nullable(),\n  infraHash: z.string().max(512).nullable(),\n  /** JSON fingerprint behind `infraHash`; absent in archives from before fingerprints. */\n  fingerprint: z.string().max(4096).nullable().optional(),\n  createdAt: isoTimestamp,\n  updatedAt: isoTimestamp,\n  /** Zip entry holding the PNG. */\n  file: z.string().min(1).max(2048),\n  /** Lowercase hex SHA-256 of the PNG bytes. */\n  sha256: z.string().regex(/^[0-9a-f]{64}$/u),\n});\n\n/** Identity of a baseline the export could not read (listed, not archived). */\nexport const baselineSkippedSchema = baselineManifestEntrySchema.pick({\n  storyId: true,\n  viewport: true,\n  browser: true,\n  branch: true,\n});\n\n/** Archive manifest (`manifest.json`). */\nexport const baselineManifestSchema = z.object({\n  format: z.literal(BASELINE_ARCHIVE_FORMAT),\n  version: z.literal(BASELINE_ARCHIVE_VERSION),\n  exportedAt: isoTimestamp,\n  /** Source project slug (informational). */\n  project: z.string().nullable(),\n  /** Branch filter used by the export; null means every branch. */\n  branch: z.string().nullable(),\n  baselines: z.array(baselineManifestEntrySchema).max(BASELINE_ARCHIVE_LIMITS.maxBaselines),\n  skipped: z.array(baselineSkippedSchema).optional(),\n});\n\n/** One baseline in the manifest. */\nexport type BaselineManifestEntry = z.infer<typeof baselineManifestEntrySchema>;\n/** Archive manifest. */\nexport type BaselineManifest = z.infer<typeof baselineManifestSchema>;\n/** Identity of a baseline the export skipped. */\nexport type BaselineSkipped = z.infer<typeof baselineSkippedSchema>;\n\n/** An archive that is malformed, unsafe, over a limit, or inconsistent with its manifest. */\nexport class BaselineArchiveError extends Error {\n  override readonly name = \"BaselineArchiveError\";\n}\n\n/** Zip entry name for a baseline, mirroring the storage layout without the project id. */\nexport function archiveFileName(\n  branch: string,\n  storyId: string,\n  viewport: string,\n  browser: string,\n): string {\n  return `baselines/${branch}/${storyId}/${modeSegment(viewport, browser)}.png`;\n}\n\n/** Stable identity key of a baseline (story, mode, browser, branch). */\nexport function baselineIdentity(entry: BaselineSkipped): string {\n  return JSON.stringify([entry.storyId, entry.viewport, entry.browser, entry.branch]);\n}\n\nconst PNG_SIGNATURE = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);\n\n/** Whether `data` starts with the PNG file signature. */\nexport function isPng(data: Buffer): boolean {\n  return data.length >= PNG_SIGNATURE.length && data.subarray(0, 8).equals(PNG_SIGNATURE);\n}\n"],"mappings":";;;;;;;;;;;;;;AAWA,MAAa,0BAA0B;;AAEvC,MAAa,2BAA2B;;AAExC,MAAa,yBAAyB;;AAGtC,MAAa,0BAA0B;;CAErC,cAAc;;CAEd,eAAe;;CAEf,kBAAkB;;;;;;CAMlB,iBAAiB;AACnB;AAEA,MAAM,eAAe,EAAE,IAAI,SAAS,EAAE,QAAQ,KAAK,CAAC;;AAGpD,MAAa,8BAA8B,EAAE,OAAO;CAClD,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAClC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACnC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;CACjC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CACjC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,KAAM,CAAC,CAAC,SAAS;CACtC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;;CAExC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACtD,WAAW;CACX,WAAW;;CAEX,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;;CAEhC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,iBAAiB;AAC5C,CAAC;;AAGD,MAAa,wBAAwB,4BAA4B,KAAK;CACpE,SAAS;CACT,UAAU;CACV,SAAS;CACT,QAAQ;AACV,CAAC;;AAGD,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,QAAQ,uBAAuB;CACzC,SAAS,EAAE,QAAA,CAAgC;CAC3C,YAAY;;CAEZ,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;;CAE7B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,WAAW,EAAE,MAAM,2BAA2B,CAAC,CAAC,IAAI,wBAAwB,YAAY;CACxF,SAAS,EAAE,MAAM,qBAAqB,CAAC,CAAC,SAAS;AACnD,CAAC;;AAUD,IAAa,uBAAb,cAA0C,MAAM;CAC9C,OAAyB;AAC3B;;AAGA,SAAgB,gBACd,QACA,SACA,UACA,SACQ;CACR,OAAO,aAAa,OAAO,GAAG,QAAQ,GAAG,YAAY,UAAU,OAAO,EAAE;AAC1E;;AAGA,SAAgB,iBAAiB,OAAgC;CAC/D,OAAO,KAAK,UAAU;EAAC,MAAM;EAAS,MAAM;EAAU,MAAM;EAAS,MAAM;CAAM,CAAC;AACpF;AAEA,MAAM,gBAAgB,OAAO,KAAK;CAAC;CAAM;CAAM;CAAM;CAAM;CAAM;CAAM;CAAM;AAAI,CAAC;;AAGlF,SAAgB,MAAM,MAAuB;CAC3C,OAAO,KAAK,UAAU,cAAc,UAAU,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,aAAa;AACxF"}

package/dist/models/baseline-atomic.mjs

@@ -0,0 +1,66 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import "../adapters/capture-target.mjs";
+import { col } from "./columns.mjs";
+import { BaselineWriteConflict } from "./baseline-conflict.mjs";
+import { and, eq } from "drizzle-orm";
+// src/models/baseline-atomic.ts
+/** Transactional baseline mutation for adapters with explicit reference lifecycle support. */
+/** Atomically change the baseline row and its complete build-reference set. */
+async function upsertAtomicBaseline(lifecycle, tables, input) {
+	const owner = {
+		projectId: input.projectId,
+		type: "baseline",
+		id: input.id
+	};
+	const generation = await lifecycle.referenceGeneration(owner);
+	return (await lifecycle.replaceFencedReferences(owner, generation, input.sourceBuildId ? [input.sourceBuildId] : [], async (tx) => {
+		await input.beforeWrite?.(tx);
+		return await writeBaseline(tx, tables, input);
+	})).result;
+}
+async function writeBaseline(tx, tables, input) {
+	const existing = (await tx.list(tables.baselines, {
+		where: and(eq(col(tables.baselines, "projectId"), input.projectId), eq(col(tables.baselines, "storyId"), input.storyId), eq(col(tables.baselines, "viewportName"), input.viewport), eq(col(tables.baselines, "branch"), input.branch), eq(col(tables.baselines, "browser"), input.browser)),
+		limit: 1
+	}))[0] ?? null;
+	assertBaselineUnchanged(existing, input);
+	if (input.sourceBuildId) await assertSource(tx, tables.snapshots, input);
+	const now = nextBaselineVersion(existing?.updatedAt ?? null, /* @__PURE__ */ new Date());
+	const fields = {
+		snapshotId: input.snapshotId,
+		sourceBuildId: input.sourceBuildId,
+		screenshotPath: input.screenshotPath,
+		infraHash: input.infraHash ?? existing?.infraHash ?? null,
+		fingerprint: input.fingerprint ?? existing?.fingerprint ?? null,
+		mode: input.mode ?? existing?.mode ?? null,
+		updatedAt: now
+	};
+	return existing ? await tx.update(tables.baselines, existing.id, fields) : await tx.insert(tables.baselines, {
+		...fields,
+		id: input.id,
+		projectId: input.projectId,
+		storyId: input.storyId,
+		viewportName: input.viewport,
+		branch: input.branch,
+		browser: input.browser,
+		createdAt: now
+	});
+}
+function assertBaselineUnchanged(existing, input) {
+	if ((existing?.id ?? null) !== input.existingId || (existing?.updatedAt ?? null) !== input.existingVersion) throw new BaselineWriteConflict("Baseline changed during promotion; retry");
+}
+/** Keep the version advancing even when updates share a millisecond or clocks move backwards. */
+function nextBaselineVersion(previous, now) {
+	const last = previous === null ? NaN : Date.parse(previous);
+	return new Date(Number.isFinite(last) ? Math.max(now.getTime(), last + 1) : now.getTime()).toISOString();
+}
+async function assertSource(tx, table, input) {
+	const row = await tx.get(table, input.snapshotId);
+	const origin = row?.inherited ? row.sourceBuildId : row?.buildId;
+	if (!row || row.projectId !== input.projectId || row.storyId !== input.storyId || row.viewportName !== input.viewport || (row.browser ?? "chromium") !== input.browser || row.screenshotPath !== input.originalPath || origin !== input.sourceBuildId) throw new BaselineWriteConflict("Source snapshot changed during promotion; retry");
+}
+export { nextBaselineVersion, upsertAtomicBaseline };
+
+//# sourceMappingURL=baseline-atomic.mjs.map

package/dist/models/baseline-atomic.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-atomic.mjs","names":[],"sources":["../../src/models/baseline-atomic.ts"],"sourcesContent":["/** Transactional baseline mutation for adapters with explicit reference lifecycle support. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { Table } from \"drizzle-orm\";\nimport { DEFAULT_BROWSER } from \"../adapters/capture-runner.ts\";\nimport type { BuildReferenceLifecycle, TxStore } from \"../adapters/database.ts\";\nimport type { Baseline } from \"../schema/baseline.ts\";\nimport type { Snapshot } from \"../schema/snapshot.ts\";\nimport { BaselineWriteConflict } from \"./baseline-conflict.ts\";\nimport { col } from \"./columns.ts\";\n\nexport interface AtomicBaselineInput {\n  id: string;\n  existingId: string | null;\n  existingVersion: string | null;\n  projectId: string;\n  storyId: string;\n  viewport: string;\n  branch: string;\n  browser: string;\n  snapshotId: string;\n  sourceBuildId: string | null;\n  originalPath: string;\n  screenshotPath: string;\n  infraHash: string | null | undefined;\n  fingerprint: string | null | undefined;\n  mode: string | null | undefined;\n  beforeWrite?: (tx: TxStore) => Promise<void>;\n}\n\n/** Atomically change the baseline row and its complete build-reference set. */\nexport async function upsertAtomicBaseline(\n  lifecycle: BuildReferenceLifecycle,\n  tables: { baselines: Table; snapshots: Table },\n  input: AtomicBaselineInput,\n): Promise<Baseline> {\n  const owner = { projectId: input.projectId, type: \"baseline\" as const, id: input.id };\n  const generation = await lifecycle.referenceGeneration(owner);\n  const updated = await lifecycle.replaceFencedReferences(\n    owner,\n    generation,\n    input.sourceBuildId ? [input.sourceBuildId] : [],\n    async (tx) => {\n      await input.beforeWrite?.(tx);\n      return await writeBaseline(tx, tables, input);\n    },\n  );\n  return updated.result;\n}\n\nasync function writeBaseline(\n  tx: TxStore,\n  tables: { baselines: Table; snapshots: Table },\n  input: AtomicBaselineInput,\n): Promise<Baseline> {\n  const rows = (await tx.list(tables.baselines, {\n    where: and(\n      eq(col(tables.baselines, \"projectId\"), input.projectId),\n      eq(col(tables.baselines, \"storyId\"), input.storyId),\n      eq(col(tables.baselines, \"viewportName\"), input.viewport),\n      eq(col(tables.baselines, \"branch\"), input.branch),\n      eq(col(tables.baselines, \"browser\"), input.browser),\n    ),\n    limit: 1,\n  })) as unknown as Baseline[];\n  const existing = rows[0] ?? null;\n  assertBaselineUnchanged(existing, input);\n  if (input.sourceBuildId) await assertSource(tx, tables.snapshots, input);\n  const now = nextBaselineVersion(existing?.updatedAt ?? null, new Date());\n  const fields = {\n    snapshotId: input.snapshotId,\n    sourceBuildId: input.sourceBuildId,\n    screenshotPath: input.screenshotPath,\n    infraHash: input.infraHash ?? existing?.infraHash ?? null,\n    fingerprint: input.fingerprint ?? existing?.fingerprint ?? null,\n    mode: input.mode ?? existing?.mode ?? null,\n    updatedAt: now,\n  };\n  return (existing\n    ? await tx.update(tables.baselines, existing.id, fields)\n    : await tx.insert(tables.baselines, {\n        ...fields,\n        id: input.id,\n        projectId: input.projectId,\n        storyId: input.storyId,\n        viewportName: input.viewport,\n        branch: input.branch,\n        browser: input.browser,\n        createdAt: now,\n      })) as unknown as Baseline;\n}\n\nfunction assertBaselineUnchanged(existing: Baseline | null, input: AtomicBaselineInput): void {\n  if (\n    (existing?.id ?? null) !== input.existingId ||\n    (existing?.updatedAt ?? null) !== input.existingVersion\n  )\n    throw new BaselineWriteConflict(\"Baseline changed during promotion; retry\");\n}\n\n/** Keep the version advancing even when updates share a millisecond or clocks move backwards. */\nexport function nextBaselineVersion(previous: string | null, now: Date): string {\n  const last = previous === null ? Number.NaN : Date.parse(previous);\n  return new Date(\n    Number.isFinite(last) ? Math.max(now.getTime(), last + 1) : now.getTime(),\n  ).toISOString();\n}\n\nasync function assertSource(tx: TxStore, table: Table, input: AtomicBaselineInput): Promise<void> {\n  const row = (await tx.get(table, input.snapshotId)) as unknown as Snapshot | null;\n  const origin = row?.inherited ? row.sourceBuildId : row?.buildId;\n  if (\n    !row ||\n    row.projectId !== input.projectId ||\n    row.storyId !== input.storyId ||\n    row.viewportName !== input.viewport ||\n    (row.browser ?? DEFAULT_BROWSER) !== input.browser ||\n    row.screenshotPath !== input.originalPath ||\n    origin !== input.sourceBuildId\n  ) {\n    throw new BaselineWriteConflict(\"Source snapshot changed during promotion; retry\");\n  }\n}\n"],"mappings":";;;;;;;;;;AA8BA,eAAsB,qBACpB,WACA,QACA,OACmB;CACnB,MAAM,QAAQ;EAAE,WAAW,MAAM;EAAW,MAAM;EAAqB,IAAI,MAAM;CAAG;CACpF,MAAM,aAAa,MAAM,UAAU,oBAAoB,KAAK;CAU5D,QAAO,MATe,UAAU,wBAC9B,OACA,YACA,MAAM,gBAAgB,CAAC,MAAM,aAAa,IAAI,CAAC,GAC/C,OAAO,OAAO;EACZ,MAAM,MAAM,cAAc,EAAE;EAC5B,OAAO,MAAM,cAAc,IAAI,QAAQ,KAAK;CAC9C,CACF,EAAA,CACe;AACjB;AAEA,eAAe,cACb,IACA,QACA,OACmB;CAWnB,MAAM,YAAW,MAVG,GAAG,KAAK,OAAO,WAAW;EAC5C,OAAO,IACL,GAAG,IAAI,OAAO,WAAW,WAAW,GAAG,MAAM,SAAS,GACtD,GAAG,IAAI,OAAO,WAAW,SAAS,GAAG,MAAM,OAAO,GAClD,GAAG,IAAI,OAAO,WAAW,cAAc,GAAG,MAAM,QAAQ,GACxD,GAAG,IAAI,OAAO,WAAW,QAAQ,GAAG,MAAM,MAAM,GAChD,GAAG,IAAI,OAAO,WAAW,SAAS,GAAG,MAAM,OAAO,CACpD;EACA,OAAO;CACT,CAAC,EAAA,CACqB,MAAM;CAC5B,wBAAwB,UAAU,KAAK;CACvC,IAAI,MAAM,eAAe,MAAM,aAAa,IAAI,OAAO,WAAW,KAAK;CACvE,MAAM,MAAM,oBAAoB,UAAU,aAAa,sBAAM,IAAI,KAAK,CAAC;CACvE,MAAM,SAAS;EACb,YAAY,MAAM;EAClB,eAAe,MAAM;EACrB,gBAAgB,MAAM;EACtB,WAAW,MAAM,aAAa,UAAU,aAAa;EACrD,aAAa,MAAM,eAAe,UAAU,eAAe;EAC3D,MAAM,MAAM,QAAQ,UAAU,QAAQ;EACtC,WAAW;CACb;CACA,OAAQ,WACJ,MAAM,GAAG,OAAO,OAAO,WAAW,SAAS,IAAI,MAAM,IACrD,MAAM,GAAG,OAAO,OAAO,WAAW;EAChC,GAAG;EACH,IAAI,MAAM;EACV,WAAW,MAAM;EACjB,SAAS,MAAM;EACf,cAAc,MAAM;EACpB,QAAQ,MAAM;EACd,SAAS,MAAM;EACf,WAAW;CACb,CAAC;AACP;AAEA,SAAS,wBAAwB,UAA2B,OAAkC;CAC5F,KACG,UAAU,MAAM,UAAU,MAAM,eAChC,UAAU,aAAa,UAAU,MAAM,iBAExC,MAAM,IAAI,sBAAsB,0CAA0C;AAC9E;;AAGA,SAAgB,oBAAoB,UAAyB,KAAmB;CAC9E,MAAM,OAAO,aAAa,OAAO,MAAa,KAAK,MAAM,QAAQ;CACjE,OAAO,IAAI,KACT,OAAO,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAC1E,CAAC,CAAC,YAAY;AAChB;AAEA,eAAe,aAAa,IAAa,OAAc,OAA2C;CAChG,MAAM,MAAO,MAAM,GAAG,IAAI,OAAO,MAAM,UAAU;CACjD,MAAM,SAAS,KAAK,YAAY,IAAI,gBAAgB,KAAK;CACzD,IACE,CAAC,OACD,IAAI,cAAc,MAAM,aACxB,IAAI,YAAY,MAAM,WACtB,IAAI,iBAAiB,MAAM,aAC1B,IAAI,WAAA,gBAAgC,MAAM,WAC3C,IAAI,mBAAmB,MAAM,gBAC7B,WAAW,MAAM,eAEjB,MAAM,IAAI,sBAAsB,iDAAiD;AAErF"}

package/dist/models/baseline-conflict.d.mts

@@ -0,0 +1,6 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+/** A baseline write lost a concurrency check and should be retried. */
+declare class BaselineWriteConflict extends Error {}
+export { BaselineWriteConflict };
+//# sourceMappingURL=baseline-conflict.d.mts.map