@storyshelf/core 0.7.0 → 0.8.0

package/dist/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { Logger } from \"pino\";\nimport { z } from \"zod\";\nimport type { CaptureRunner } from \"./adapters/capture-runner.ts\";\nimport type { DatabaseAdapter } from \"./adapters/database.ts\";\nimport type { DesignProvider } from \"./adapters/design.ts\";\nimport type { EmailSender } from \"./adapters/email-sender.ts\";\nimport type { AdapterCategory } from \"./adapters/metadata.ts\";\nimport type { NotifierProvider } from \"./adapters/notifier/provider.ts\";\nimport type { StorageAdapter } from \"./adapters/storage.ts\";\nimport type { Ai } from \"./ai.ts\";\nimport type { Auth } from \"./auth.ts\";\n\n/** Brand color theme for the server-rendered UI. */\nexport interface BrandTheme {\n  accent: string;\n  accentContrast?: string;\n  ring?: string;\n  surface: { base: string; card: string; muted?: string; subtle?: string };\n  text: { primary: string; secondary: string; muted?: string };\n  border: string;\n  borderSubtle?: string;\n  status: { approved: string; new: string; rejected: string };\n  sidebarBg?: string;\n  topbarBg?: string;\n  radius?: string;\n  radiusSm?: string;\n  shadow?: string;\n}\n\n/** Text overrides for the auth (login) UI. */\nexport interface AuthUiConfig {\n  /** Page title, default \"Sign in\". */\n  title?: string;\n  /** Optional subtitle under the title. */\n  subtitle?: string;\n  /** Password field label, default \"Password\". */\n  passwordLabel?: string;\n  /** Password field placeholder. */\n  passwordPlaceholder?: string;\n  /** Submit button label, default \"Sign in\". */\n  submitLabel?: string;\n  /**\n   * Template for SSO buttons, default \"Sign in with {label}\".\n   * Must contain \"{label}\" which is replaced with the provider label.\n   */\n  ssoLabelTemplate?: string;\n  /** Help text shown under the form. */\n  helpText?: string;\n  /** Footer text shown at the bottom of the card. */\n  footerText?: string;\n}\n\n/** Branding overrides for the server-rendered UI. */\nexport interface UIConfig {\n  name?: string;\n  logo?: string;\n  /**\n   * @deprecated Ignored. The favicon is the product's own mark, served by the\n   * app itself; set `logo` to rebrand the sidebar instead.\n   */\n  favicon?: string;\n  lightTheme?: BrandTheme;\n  darkTheme?: BrandTheme;\n  auth?: AuthUiConfig;\n}\n\n/** Default cap for a single Storybook zip upload (1 GiB). */\nexport const DEFAULT_MAX_UPLOAD_BYTES = 1024 * 1024 * 1024;\n\n/** A viewport in which stories are captured. */\nexport interface ShelfViewport {\n  name: string;\n  width: number;\n  height: number;\n}\n\n/** Metadata snapshot of a configured adapter. */\nexport interface AdapterSnapshot {\n  name: string;\n  version: string;\n  description?: string;\n  kind: string;\n  category: AdapterCategory;\n}\n\n/** Site-wide notification defaults (brand + sender identity for admin alerts). */\nexport interface NotificationsConfig {\n  fromEmail?: string;\n  fromName?: string;\n  footerText?: string;\n  slackUsername?: string;\n}\n/** Shelf-level configuration (validated by {@link shelfConfigSchema}). */\nexport interface ShelfConfig {\n  secret?: string;\n  /**\n   * The secret `secret` replaced. Used only to decrypt stored credentials\n   * (webhook, git-token, and notification secrets) written before a rotation;\n   * new writes always use `secret`. Remove once credentials are re-encrypted.\n   */\n  previousSecret?: string;\n  /**\n   * Re-encrypt credentials still under `previousSecret` at boot. Default false:\n   * site admins can run it from the System page instead. No effect without\n   * `previousSecret`.\n   */\n  migrateCredentialsOnBoot?: boolean;\n  /**\n   * Bootstrap site-admin bearer token (`STORYSHELF_ADMIN_TOKEN`/`ADMIN_TOKEN`).\n   * Grants site-admin API access when no admin user exists yet; never\n   * mint sessions from it. Distinct from `secret` (session signing).\n   */\n  adminToken?: string;\n  publishedBaseDomain?: string;\n  /**\n   * Public base URL of this deployment (e.g. `https://shelf.example.com`).\n   * Used as the issuer in the `/.well-known/openid-configuration` relying-party\n   * helper document; falls back to the request origin when unset.\n   */\n  publicBaseUrl?: string;\n  /**\n   * Working directory for capture and inline statics extraction. Defaults to\n   * `<os.tmpdir()>/storyshelf`; publishing and capture extract there.\n   */\n  scratchDir?: string;\n  purgeTtlDays?: number;\n  /** Branch baseline TTL, days; null disables branch GC (default 30). */\n  branchTtlDays?: number | null;\n  /** Branch GC interval, ms; daily sweep via interval clock (default 86_400_000). */\n  branchGcIntervalMs?: number;\n  maxUploadBytes?: number;\n  /**\n   * Emit `Server-Timing` response headers (total + db/storage roll-ups).\n   * Opt-in, off by default — some deployments prefer no timing headers.\n   */\n  serverTiming?: boolean;\n  /**\n   * Largest zip (bytes) extracted inline in the upload request; a larger zip is published by a\n   * `publish` job (or refused with 413 on a host that runs no consumer). The count is taken\n   * while the upload streams, never from `Content-Length`. Default 50 MB; `0` sends every zip to\n   * a `publish` job.\n   */\n  maxInlineUnzipSize?: number;\n  /** Most entries an uploaded Storybook zip may hold (default 50 000); more fails the publish. */\n  maxZipEntries?: number;\n  /**\n   * Most uncompressed bytes an uploaded Storybook zip may expand to (default 2 GiB), counted while\n   * extracting; more fails the publish. The compressed size is no bound on its own.\n   */\n  maxUnzippedBytes?: number;\n  viewports?: ShelfViewport[];\n  adapters?: Record<string, AdapterSnapshot>;\n}\n\nconst viewportSchema: z.ZodType<ShelfViewport> = z.object({\n  name: z.string().min(1),\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n});\n\nconst brandThemeSchema: z.ZodType<BrandTheme> = z.object({\n  accent: z.string(),\n  accentContrast: z.string().optional(),\n  ring: z.string().optional(),\n  surface: z.object({\n    base: z.string(),\n    card: z.string(),\n    muted: z.string().optional(),\n    subtle: z.string().optional(),\n  }),\n  text: z.object({ primary: z.string(), secondary: z.string(), muted: z.string().optional() }),\n  border: z.string(),\n  borderSubtle: z.string().optional(),\n  status: z.object({ approved: z.string(), new: z.string(), rejected: z.string() }),\n  sidebarBg: z.string().optional(),\n  topbarBg: z.string().optional(),\n  radius: z.string().optional(),\n  radiusSm: z.string().optional(),\n  shadow: z.string().optional(),\n});\n\nconst adapterSnapshotSchema: z.ZodType<AdapterSnapshot> = z.object({\n  name: z.string(),\n  version: z.string(),\n  description: z.string().optional(),\n  kind: z.string(),\n  category: z.enum([\n    \"database\",\n    \"storage\",\n    \"capture-runner\",\n    \"capture-queue\",\n    \"design\",\n    \"notifier\",\n  ]),\n});\n\nconst authUiConfigSchema: z.ZodType<AuthUiConfig> = z.object({\n  title: z.string().min(1).optional(),\n  subtitle: z.string().optional(),\n  passwordLabel: z.string().min(1).optional(),\n  passwordPlaceholder: z.string().optional(),\n  submitLabel: z.string().min(1).optional(),\n  ssoLabelTemplate: z.string().min(1).optional(),\n  helpText: z.string().optional(),\n  footerText: z.string().optional(),\n});\n\n/** Zod schema validating `notifications.config`. */\nexport const notificationsConfigSchema: z.ZodType<NotificationsConfig> = z.object({\n  fromEmail: z.string().min(1).optional(),\n  fromName: z.string().min(1).optional(),\n  footerText: z.string().min(1).optional(),\n  slackUsername: z.string().min(1).optional(),\n});\n\n/** Zod schema validating the shelf-level configuration. */\nexport const shelfConfigSchema: z.ZodType<ShelfConfig> = z\n  .object({\n    secret: z.string().min(1).optional(),\n    previousSecret: z.string().min(1).optional(),\n    migrateCredentialsOnBoot: z.boolean().optional(),\n    adminToken: z.string().min(1).optional(),\n    publishedBaseDomain: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    publicBaseUrl: z.string().url().optional(),\n    scratchDir: z.string().optional(),\n    purgeTtlDays: z.number().int().positive().optional(),\n    branchTtlDays: z.number().int().positive().nullable().optional(),\n    branchGcIntervalMs: z.number().int().positive().optional(),\n    maxUploadBytes: z.number().int().positive().optional(),\n    serverTiming: z.boolean().optional(),\n    maxInlineUnzipSize: z.number().int().min(0).optional(),\n    maxZipEntries: z.number().int().positive().optional(),\n    maxUnzippedBytes: z.number().int().positive().optional(),\n    viewports: z.array(viewportSchema).min(1, \"at least one viewport required\").optional(),\n    adapters: z.record(z.string(), adapterSnapshotSchema).optional(),\n  })\n  .strict()\n  .superRefine((config, ctx) => {\n    if (config.previousSecret !== undefined && config.secret === undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret requires secret\",\n      });\n    }\n    if (config.previousSecret !== undefined && config.previousSecret === config.secret) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret must differ from secret\",\n      });\n    }\n  });\n\n/** Zod schema validating the UI branding configuration. */\nexport const uiConfigSchema: z.ZodType<UIConfig> = z\n  .object({\n    name: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    logo: z.string().url().optional(),\n    // Accepted but ignored (see UIConfig.favicon) so existing configs keep\n    // validating under .strict().\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    favicon: z.string().url().optional(),\n    lightTheme: brandThemeSchema.optional(),\n    darkTheme: brandThemeSchema.optional(),\n    auth: authUiConfigSchema.optional(),\n  })\n  .strict();\n\n/**\n * Parse and validate a raw shelf-level configuration object.\n *\n * @param config - Unvalidated configuration record.\n * @returns The validated shelf configuration.\n */\nexport function validateConfig(config: Record<string, unknown>): ShelfConfig {\n  const result = shelfConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid ShelfConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Parse and validate a raw UI branding configuration object.\n *\n * @param config - Unvalidated UI configuration record.\n * @returns The validated UI configuration.\n */\nexport function validateUiConfig(config: Record<string, unknown>): UIConfig {\n  const result = uiConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid UIConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/** Testing options: what renders, how many run at once, and how screenshots are compared. */\nexport interface ShelfTestingOptions {\n  /** Pure renderer. Required: `testing` without a `runner` throws. */\n  runner: CaptureRunner;\n  /** Jobs this instance runs at once; auto-sized from CPU and memory when unset. */\n  concurrency?: number;\n  /**\n   * Retries after a first failed attempt before a capture job fails for good (default 2: three\n   * attempts). One limit covers failed attempts, lost leases and forked-child crashes.\n   */\n  retries?: number;\n  /**\n   * Lease of a job of the database queue, in seconds (default 300: 5 minutes). A running job\n   * renews it on a heartbeat (every `min(30 s, lease / 3)`) and on progress, so a stage that prints\n   * nothing is not redelivered while its process lives; a crashed holder's job is claimed by\n   * another instance once the lease runs out, so a shorter lease recovers crashes sooner.\n   */\n  leaseSeconds?: number;\n  /**\n   * Module run in a forked capture child (it calls `runCaptureChild` from `@storyshelf/core/capture`).\n   * The app consumes the queue and pushes each job to the child over IPC. Needs `runner`, which\n   * serves as the in-process fallback.\n   */\n  workerEntry?: string;\n  /**\n   * Split a big build across the queue: captures (story x viewport x engine) per shard. A build of\n   * up to twice this size still renders in one piece. Unset keeps every build in one job. Needs\n   * `runner`. With `workerEntry` the forked child plans and renders shards and puts them on the\n   * database queue itself.\n   */\n  shardSize?: number;\n  /**\n   * Requests per minute one client IP may make to the signed Storybook URL route, `/_s/<token>/*`\n   * (ADR 0007, decision 5). Default 6000, enough for a render fetching thousands of assets from one\n   * farm IP; a larger farm behind one address raises it. Over the limit the route answers `429`\n   * before it looks at the token, so the answer says nothing about a token's validity.\n   */\n  storybookUrlRateLimit?: number;\n  /**\n   * Where captures run. `auto` (default) forks when `workerEntry` is set and the host can afford\n   * a second process; `in-process` never forks; `fork` forks regardless of the host and fails at\n   * boot if it cannot.\n   */\n  mode?: \"auto\" | \"in-process\" | \"fork\";\n  /** Screenshot comparison, shared by capture and the re-diff endpoint. */\n  compare?: ShelfCompareOptions;\n  /** Image library selection; see {@link ShelfImagesOptions}. */\n  images?: ShelfImagesOptions;\n  /**\n   * Clock and timers of the database job queue. Tests inject a manual clock so lease and poll\n   * transitions do not depend on wall time; production leaves it unset (`Date.now` and the global\n   * timers).\n   */\n  queueClock?: {\n    now: () => number;\n    timers: {\n      setTimeout(callback: () => void, ms: number): unknown;\n      clearTimeout(handle: unknown): void;\n    };\n  };\n}\n\n/** Notification options: who can deliver, over which transport, with what branding. */\nexport interface ShelfNotificationsOptions {\n  /** Provider adapters (Slack, Teams, email, ...); a channel's `provider` must name one of these. */\n  notifiers?: NotifierProvider[];\n  /** Email transport. Listed here so its setup/teardown/validation hooks run with the app's. */\n  emailSender?: EmailSender;\n  /** Site-wide brand and sender settings for outgoing notifications. */\n  config?: NotificationsConfig;\n}\n\n/** Comparison options. */\nexport interface ShelfCompareOptions {\n  /**\n   * Worker threads for pixel diffs: default CPU count minus one (min 1), `0` diffs on the main\n   * thread. Takes precedence over `STORYSHELF_DIFF_WORKERS`.\n   */\n  threads?: number;\n}\n\n/** Image-handling options: which library decodes, encodes and resizes the PNGs. */\nexport interface ShelfImagesOptions {\n  /**\n   * Image library for diffs, diff overlays and AI thumbnails: `\"pngjs\"` (default, pure JavaScript,\n   * runs anywhere) or `\"sharp\"` (native, several times faster on large PNGs; needs the optional\n   * `sharp` package installed). Falls back to `STORYSHELF_IMAGE_ENGINE`. The pixel comparison is\n   * pixelmatch either way, so verdicts match.\n   */\n  engine?: \"pngjs\" | \"sharp\";\n}\n\n/** Adapter and configuration options for creating the shelf router. */\nexport interface ShelfOptions {\n  database: DatabaseAdapter;\n  storage: StorageAdapter;\n  /**\n   * Testing (render + diff in the background). Absent means Storybook hosting only: no renderer,\n   * no queue, and the tuning below is unreachable rather than silently ignored.\n   */\n  testing?: ShelfTestingOptions;\n  auth?: Auth;\n  /** AI insights surface (ADR 0016). Set ⇒ AI on site-wide; absent ⇒ off. */\n  ai?: Ai;\n  /** Design-tool providers (Figma, …) that resolve links, metadata and previews. */\n  design?: DesignProvider[];\n  /** Notification subsystem: providers, the email transport, and shared brand/sender settings. */\n  notifications?: ShelfNotificationsOptions;\n  logger?: Logger;\n  ui?: UIConfig;\n  config?: ShelfConfig;\n  /**\n   * Externally-managed observability SDK handle (e.g. from\n   * `initObservabilityFromEnv`). Structural — core never imports the\n   * observability package. Flushed on `app.lifecycle.teardown()`.\n   */\n  observability?: ObservabilityHandle;\n}\n\n/**\n * Shutdown hook for an externally-managed observability SDK.\n * Structural so core stays dependency-free.\n */\nexport interface ObservabilityHandle {\n  /** Flush exporters and release SDK resources. Must be idempotent. */\n  shutdown(): Promise<void>;\n}\nexport { DEFAULT_SCRATCH_DIR, resolveShelfOptions } from \"./options.ts\";\nexport { ALLOW_SERVERLESS_ENV, assertServerless, isServerlessHost } from \"./serverless.ts\";\n"],"mappings":";;;;;;;;AAmEA,MAAa,2BAA2B;AAuFxC,MAAM,iBAA2C,EAAE,OAAO;CACxD,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACjC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;AACpC,CAAC;AAED,MAAM,mBAA0C,EAAE,OAAO;CACvD,QAAQ,EAAE,OAAO;CACjB,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAAS,EAAE,OAAO;EAChB,MAAM,EAAE,OAAO;EACf,MAAM,EAAE,OAAO;EACf,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,CAAC;CACD,MAAM,EAAE,OAAO;EAAE,SAAS,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAAE,CAAC;CAC3F,QAAQ,EAAE,OAAO;CACjB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,QAAQ,EAAE,OAAO;EAAE,UAAU,EAAE,OAAO;EAAG,KAAK,EAAE,OAAO;EAAG,UAAU,EAAE,OAAO;CAAE,CAAC;CAChF,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAED,MAAM,wBAAoD,EAAE,OAAO;CACjE,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,MAAM,EAAE,OAAO;CACf,UAAU,EAAE,KAAK;EACf;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH,CAAC;AAED,MAAM,qBAA8C,EAAE,OAAO;CAC3D,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAClC,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC1C,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CACzC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC7C,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;;AAGD,MAAa,4BAA4D,EAAE,OAAO;CAChF,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACtC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAC5C,CAAC;;AAGD,MAAa,oBAA4C,EACtD,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACnC,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC3C,0BAA0B,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC/C,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CAEzC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACzC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACnD,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC/D,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzD,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACrD,cAAc,EAAE,QAAQ,CAAC,CAAC,SAAS;CACnC,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrD,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpD,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACvD,WAAW,EAAE,MAAM,cAAc,CAAC,CAAC,IAAI,GAAG,gCAAgC,CAAC,CAAC,SAAS;CACrF,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,qBAAqB,CAAC,CAAC,SAAS;AACjE,CAAC,CAAC,CACD,OAAO,CAAC,CACR,aAAa,QAAQ,QAAQ;CAC5B,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,WAAW,KAAA,GAC3D,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;CAEH,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,mBAAmB,OAAO,QAC1E,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;AAEL,CAAC;;AAGH,MAAa,iBAAsC,EAChD,OAAO;CACN,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAE1B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAIhC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACnC,YAAY,iBAAiB,SAAS;CACtC,WAAW,iBAAiB,SAAS;CACrC,MAAM,mBAAmB,SAAS;AACpC,CAAC,CAAC,CACD,OAAO;;;;;;;AAQV,SAAgB,eAAe,QAA8C;CAC3E,MAAM,SAAS,kBAAkB,UAAU,MAAM;CACjD,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,wBAAwB,QAAQ;CAClD;CACA,OAAO,OAAO;AAChB;;;;;;;AAQA,SAAgB,iBAAiB,QAA2C;CAC1E,MAAM,SAAS,eAAe,UAAU,MAAM;CAC9C,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,qBAAqB,QAAQ;CAC/C;CACA,OAAO,OAAO;AAChB"}
+{"version":3,"file":"config.mjs","names":[],"sources":["../src/config.ts"],"sourcesContent":["import type { Logger } from \"pino\";\nimport { z } from \"zod\";\nimport type { CaptureRunner } from \"./adapters/capture-runner.ts\";\nimport type { DatabaseAdapter } from \"./adapters/database.ts\";\nimport type { DesignProvider } from \"./adapters/design.ts\";\nimport type { EmailSender } from \"./adapters/email-sender.ts\";\nimport type { AdapterCategory } from \"./adapters/metadata.ts\";\nimport type { NotifierProvider } from \"./adapters/notifier/provider.ts\";\nimport type { StorageAdapter } from \"./adapters/storage.ts\";\nimport type { Ai } from \"./ai.ts\";\nimport type { Auth } from \"./auth.ts\";\n\n/** Brand color theme for the server-rendered UI. */\nexport interface BrandTheme {\n  accent: string;\n  accentContrast?: string;\n  ring?: string;\n  surface: { base: string; card: string; muted?: string; subtle?: string };\n  text: { primary: string; secondary: string; muted?: string };\n  border: string;\n  borderSubtle?: string;\n  status: { approved: string; new: string; rejected: string };\n  sidebarBg?: string;\n  topbarBg?: string;\n  radius?: string;\n  radiusSm?: string;\n  shadow?: string;\n}\n\n/** Text overrides for the auth (login) UI. */\nexport interface AuthUiConfig {\n  /** Page title, default \"Sign in\". */\n  title?: string;\n  /** Optional subtitle under the title. */\n  subtitle?: string;\n  /** Password field label, default \"Password\". */\n  passwordLabel?: string;\n  /** Password field placeholder. */\n  passwordPlaceholder?: string;\n  /** Submit button label, default \"Sign in\". */\n  submitLabel?: string;\n  /**\n   * Template for SSO buttons, default \"Sign in with {label}\".\n   * Must contain \"{label}\" which is replaced with the provider label.\n   */\n  ssoLabelTemplate?: string;\n  /** Help text shown under the form. */\n  helpText?: string;\n  /** Footer text shown at the bottom of the card. */\n  footerText?: string;\n}\n\n/** Branding overrides for the server-rendered UI. */\nexport interface UIConfig {\n  name?: string;\n  logo?: string;\n  /**\n   * @deprecated Ignored. The favicon is the product's own mark, served by the\n   * app itself; set `logo` to rebrand the sidebar instead.\n   */\n  favicon?: string;\n  lightTheme?: BrandTheme;\n  darkTheme?: BrandTheme;\n  auth?: AuthUiConfig;\n}\n\n/** Default cap for a single Storybook zip upload (1 GiB). */\nexport const DEFAULT_MAX_UPLOAD_BYTES = 1024 * 1024 * 1024;\n\n/** A viewport in which stories are captured. */\nexport interface ShelfViewport {\n  name: string;\n  width: number;\n  height: number;\n}\n\n/** Metadata snapshot of a configured adapter. */\nexport interface AdapterSnapshot {\n  name: string;\n  version: string;\n  description?: string;\n  kind: string;\n  category: AdapterCategory;\n}\n\n/** Site-wide notification defaults (brand + sender identity for admin alerts). */\nexport interface NotificationsConfig {\n  fromEmail?: string;\n  fromName?: string;\n  footerText?: string;\n  slackUsername?: string;\n}\n/** Longest browser-private freshness a signed capture asset may be given, in seconds (1 hour). */\nexport const MAX_CAPTURE_ASSET_CACHE_SECONDS = 3600;\n\n/** Signed Storybook asset serving for remote capture browsers (ADR 0007, decision 5). */\nexport interface CaptureAssetsConfig {\n  /**\n   * Opt-in browser-private freshness of capture-scoped signed assets, in whole seconds from 0 to\n   * {@link MAX_CAPTURE_ASSET_CACHE_SECONDS}. 0 (default) keeps every signed answer `no-store`. A\n   * positive value is a cap: the answer's `max-age` never exceeds the grant's remaining lifetime.\n   */\n  cacheMaxAgeSeconds?: number;\n}\n\n/** Shelf-level configuration (validated by {@link shelfConfigSchema}). */\nexport interface ShelfConfig {\n  secret?: string;\n  /**\n   * The secret `secret` replaced. Used only to decrypt stored credentials\n   * (webhook, git-token, and notification secrets) written before a rotation;\n   * new writes always use `secret`. Remove once credentials are re-encrypted.\n   */\n  previousSecret?: string;\n  /**\n   * Re-encrypt credentials still under `previousSecret` at boot. Default false:\n   * site admins can run it from the System page instead. No effect without\n   * `previousSecret`.\n   */\n  migrateCredentialsOnBoot?: boolean;\n  /**\n   * Bootstrap site-admin bearer token (`STORYSHELF_ADMIN_TOKEN`/`ADMIN_TOKEN`).\n   * Grants site-admin API access when no admin user exists yet; never\n   * mint sessions from it. Distinct from `secret` (session signing).\n   */\n  adminToken?: string;\n  publishedBaseDomain?: string;\n  /**\n   * Public base URL of this deployment (e.g. `https://shelf.example.com`).\n   * Used as the issuer in the `/.well-known/openid-configuration` relying-party\n   * helper document; falls back to the request origin when unset.\n   */\n  publicBaseUrl?: string;\n  /**\n   * Working directory for capture and inline statics extraction. Defaults to\n   * `<os.tmpdir()>/storyshelf`; publishing and capture extract there.\n   */\n  scratchDir?: string;\n  purgeTtlDays?: number;\n  /** Branch baseline TTL, days; null disables branch GC (default 30). */\n  branchTtlDays?: number | null;\n  /** Branch GC interval, ms; daily sweep via interval clock (default 86_400_000). */\n  branchGcIntervalMs?: number;\n  maxUploadBytes?: number;\n  /**\n   * Emit `Server-Timing` response headers (total + db/storage roll-ups).\n   * Opt-in, off by default — some deployments prefer no timing headers.\n   */\n  serverTiming?: boolean;\n  /** Persist gzip variants for published Storybook files (default off). */\n  publishedCompression?: boolean;\n  /** Signed Storybook asset serving for remote capture browsers; see {@link CaptureAssetsConfig}. */\n  captureAssets?: CaptureAssetsConfig;\n  /**\n   * Largest zip (bytes) extracted inline in the upload request; a larger zip is published by a\n   * `publish` job (or refused with 413 on a host that runs no consumer). The count is taken\n   * while the upload streams, never from `Content-Length`. Default 50 MB; `0` sends every zip to\n   * a `publish` job.\n   */\n  maxInlineUnzipSize?: number;\n  /** Most entries an uploaded Storybook zip may hold (default 50 000); more fails the publish. */\n  maxZipEntries?: number;\n  /**\n   * Most uncompressed bytes an uploaded Storybook zip may expand to (default 2 GiB), counted while\n   * extracting; more fails the publish. The compressed size is no bound on its own.\n   */\n  maxUnzippedBytes?: number;\n  viewports?: ShelfViewport[];\n  adapters?: Record<string, AdapterSnapshot>;\n}\n\nconst viewportSchema: z.ZodType<ShelfViewport> = z.object({\n  name: z.string().min(1),\n  width: z.number().int().positive(),\n  height: z.number().int().positive(),\n});\n\nconst brandThemeSchema: z.ZodType<BrandTheme> = z.object({\n  accent: z.string(),\n  accentContrast: z.string().optional(),\n  ring: z.string().optional(),\n  surface: z.object({\n    base: z.string(),\n    card: z.string(),\n    muted: z.string().optional(),\n    subtle: z.string().optional(),\n  }),\n  text: z.object({ primary: z.string(), secondary: z.string(), muted: z.string().optional() }),\n  border: z.string(),\n  borderSubtle: z.string().optional(),\n  status: z.object({ approved: z.string(), new: z.string(), rejected: z.string() }),\n  sidebarBg: z.string().optional(),\n  topbarBg: z.string().optional(),\n  radius: z.string().optional(),\n  radiusSm: z.string().optional(),\n  shadow: z.string().optional(),\n});\n\nconst adapterSnapshotSchema: z.ZodType<AdapterSnapshot> = z.object({\n  name: z.string(),\n  version: z.string(),\n  description: z.string().optional(),\n  kind: z.string(),\n  category: z.enum([\n    \"database\",\n    \"storage\",\n    \"capture-runner\",\n    \"capture-queue\",\n    \"design\",\n    \"notifier\",\n  ]),\n});\n\nconst authUiConfigSchema: z.ZodType<AuthUiConfig> = z.object({\n  title: z.string().min(1).optional(),\n  subtitle: z.string().optional(),\n  passwordLabel: z.string().min(1).optional(),\n  passwordPlaceholder: z.string().optional(),\n  submitLabel: z.string().min(1).optional(),\n  ssoLabelTemplate: z.string().min(1).optional(),\n  helpText: z.string().optional(),\n  footerText: z.string().optional(),\n});\n\n/** Zod schema validating `notifications.config`. */\nexport const notificationsConfigSchema: z.ZodType<NotificationsConfig> = z.object({\n  fromEmail: z.string().min(1).optional(),\n  fromName: z.string().min(1).optional(),\n  footerText: z.string().min(1).optional(),\n  slackUsername: z.string().min(1).optional(),\n});\n\n/** Zod schema validating the shelf-level configuration. */\nexport const shelfConfigSchema: z.ZodType<ShelfConfig> = z\n  .object({\n    secret: z.string().min(1).optional(),\n    previousSecret: z.string().min(1).optional(),\n    migrateCredentialsOnBoot: z.boolean().optional(),\n    adminToken: z.string().min(1).optional(),\n    publishedBaseDomain: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    publicBaseUrl: z.string().url().optional(),\n    scratchDir: z.string().optional(),\n    purgeTtlDays: z.number().int().positive().optional(),\n    branchTtlDays: z.number().int().positive().nullable().optional(),\n    branchGcIntervalMs: z.number().int().positive().optional(),\n    maxUploadBytes: z.number().int().positive().optional(),\n    serverTiming: z.boolean().optional(),\n    publishedCompression: z.boolean().optional(),\n    captureAssets: z\n      .object({\n        cacheMaxAgeSeconds: z.number().int().min(0).max(MAX_CAPTURE_ASSET_CACHE_SECONDS).optional(),\n      })\n      .strict()\n      .optional(),\n    maxInlineUnzipSize: z.number().int().min(0).optional(),\n    maxZipEntries: z.number().int().positive().optional(),\n    maxUnzippedBytes: z.number().int().positive().optional(),\n    viewports: z.array(viewportSchema).min(1, \"at least one viewport required\").optional(),\n    adapters: z.record(z.string(), adapterSnapshotSchema).optional(),\n  })\n  .strict()\n  .superRefine((config, ctx) => {\n    if (config.previousSecret !== undefined && config.secret === undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret requires secret\",\n      });\n    }\n    if (config.previousSecret !== undefined && config.previousSecret === config.secret) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"previousSecret\"],\n        message: \"previousSecret must differ from secret\",\n      });\n    }\n  });\n\n/** Zod schema validating the UI branding configuration. */\nexport const uiConfigSchema: z.ZodType<UIConfig> = z\n  .object({\n    name: z.string().optional(),\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    logo: z.string().url().optional(),\n    // Accepted but ignored (see UIConfig.favicon) so existing configs keep\n    // validating under .strict().\n    // oxlint-disable-next-line typescript/no-deprecated -- z.string().url() kept for zod v3 API compat\n    favicon: z.string().url().optional(),\n    lightTheme: brandThemeSchema.optional(),\n    darkTheme: brandThemeSchema.optional(),\n    auth: authUiConfigSchema.optional(),\n  })\n  .strict();\n\n/**\n * Parse and validate a raw shelf-level configuration object.\n *\n * @param config - Unvalidated configuration record.\n * @returns The validated shelf configuration.\n */\nexport function validateConfig(config: Record<string, unknown>): ShelfConfig {\n  const result = shelfConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid ShelfConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/**\n * Parse and validate a raw UI branding configuration object.\n *\n * @param config - Unvalidated UI configuration record.\n * @returns The validated UI configuration.\n */\nexport function validateUiConfig(config: Record<string, unknown>): UIConfig {\n  const result = uiConfigSchema.safeParse(config);\n  if (!result.success) {\n    const issues = result.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \");\n    throw new Error(`Invalid UIConfig: ${issues}`);\n  }\n  return result.data;\n}\n\n/** Testing options: what renders, how many run at once, and how screenshots are compared. */\nexport interface ShelfTestingOptions {\n  /** Pure renderer. Required: `testing` without a `runner` throws. */\n  runner: CaptureRunner;\n  /** Jobs this instance runs at once; auto-sized from CPU and memory when unset. */\n  concurrency?: number;\n  /**\n   * Retries after a first failed attempt before a capture job fails for good (default 2: three\n   * attempts). One limit covers failed attempts, lost leases and forked-child crashes.\n   */\n  retries?: number;\n  /**\n   * Lease of a job of the database queue, in seconds (default 300: 5 minutes). A running job\n   * renews it on a heartbeat (every `min(30 s, lease / 3)`) and on progress, so a stage that prints\n   * nothing is not redelivered while its process lives; a crashed holder's job is claimed by\n   * another instance once the lease runs out, so a shorter lease recovers crashes sooner.\n   */\n  leaseSeconds?: number;\n  /**\n   * Module run in a forked capture child (it calls `runCaptureChild` from `@storyshelf/core/capture`).\n   * The app consumes the queue and pushes each job to the child over IPC. Needs `runner`, which\n   * serves as the in-process fallback.\n   */\n  workerEntry?: string;\n  /**\n   * Split a big build across the queue: captures (story x viewport x engine) per shard. A build of\n   * up to twice this size still renders in one piece. Unset keeps every build in one job. Needs\n   * `runner`. With `workerEntry` the forked child plans and renders shards and puts them on the\n   * database queue itself.\n   */\n  shardSize?: number;\n  /**\n   * Requests per minute one client IP may make to the signed Storybook URL route, `/_s/<token>/*`\n   * (ADR 0007, decision 5). Default 6000, enough for a render fetching thousands of assets from one\n   * farm IP; a larger farm behind one address raises it. Over the limit the route answers `429`\n   * before it looks at the token, so the answer says nothing about a token's validity.\n   */\n  storybookUrlRateLimit?: number;\n  /**\n   * Where captures run. `auto` (default) forks when `workerEntry` is set and the host can afford\n   * a second process; `in-process` never forks; `fork` forks regardless of the host and fails at\n   * boot if it cannot.\n   */\n  mode?: \"auto\" | \"in-process\" | \"fork\";\n  /** Screenshot comparison, shared by capture and the re-diff endpoint. */\n  compare?: ShelfCompareOptions;\n  /** Image library selection; see {@link ShelfImagesOptions}. */\n  images?: ShelfImagesOptions;\n  /**\n   * Clock and timers of the database job queue. Tests inject a manual clock so lease and poll\n   * transitions do not depend on wall time; production leaves it unset (`Date.now` and the global\n   * timers).\n   */\n  queueClock?: {\n    now: () => number;\n    timers: {\n      setTimeout(callback: () => void, ms: number): unknown;\n      clearTimeout(handle: unknown): void;\n    };\n  };\n}\n\n/** Notification options: who can deliver, over which transport, with what branding. */\nexport interface ShelfNotificationsOptions {\n  /** Provider adapters (Slack, Teams, email, ...); a channel's `provider` must name one of these. */\n  notifiers?: NotifierProvider[];\n  /** Email transport. Listed here so its setup/teardown/validation hooks run with the app's. */\n  emailSender?: EmailSender;\n  /** Site-wide brand and sender settings for outgoing notifications. */\n  config?: NotificationsConfig;\n}\n\n/** Comparison options. */\nexport interface ShelfCompareOptions {\n  /**\n   * Worker threads for pixel diffs: default CPU count minus one (min 1), `0` diffs on the main\n   * thread. Takes precedence over `STORYSHELF_DIFF_WORKERS`.\n   */\n  threads?: number;\n}\n\n/** Image-handling options: which library decodes, encodes and resizes the PNGs. */\nexport interface ShelfImagesOptions {\n  /**\n   * Image library for diffs, diff overlays and AI thumbnails: `\"pngjs\"` (default, pure JavaScript,\n   * runs anywhere) or `\"sharp\"` (native, several times faster on large PNGs; needs the optional\n   * `sharp` package installed). Falls back to `STORYSHELF_IMAGE_ENGINE`. The pixel comparison is\n   * pixelmatch either way, so verdicts match.\n   */\n  engine?: \"pngjs\" | \"sharp\";\n}\n\n/** Adapter and configuration options for creating the shelf router. */\nexport interface ShelfOptions {\n  database: DatabaseAdapter;\n  storage: StorageAdapter;\n  /**\n   * Testing (render + diff in the background). Absent means Storybook hosting only: no renderer,\n   * no queue, and the tuning below is unreachable rather than silently ignored.\n   */\n  testing?: ShelfTestingOptions;\n  auth?: Auth;\n  /** AI insights surface (ADR 0016). Set ⇒ AI on site-wide; absent ⇒ off. */\n  ai?: Ai;\n  /** Design-tool providers (Figma, …) that resolve links, metadata and previews. */\n  design?: DesignProvider[];\n  /** Notification subsystem: providers, the email transport, and shared brand/sender settings. */\n  notifications?: ShelfNotificationsOptions;\n  logger?: Logger;\n  ui?: UIConfig;\n  config?: ShelfConfig;\n  /**\n   * Externally-managed observability SDK handle (e.g. from\n   * `initObservabilityFromEnv`). Structural — core never imports the\n   * observability package. Flushed on `app.lifecycle.teardown()`.\n   */\n  observability?: ObservabilityHandle;\n}\n\n/**\n * Shutdown hook for an externally-managed observability SDK.\n * Structural so core stays dependency-free.\n */\nexport interface ObservabilityHandle {\n  /** Flush exporters and release SDK resources. Must be idempotent. */\n  shutdown(): Promise<void>;\n}\nexport { DEFAULT_SCRATCH_DIR, resolveShelfOptions } from \"./options.ts\";\nexport { ALLOW_SERVERLESS_ENV, assertServerless, isServerlessHost } from \"./serverless.ts\";\n"],"mappings":";;;;;;;;AAmEA,MAAa,2BAA2B;;AA0BxC,MAAa,kCAAkC;AA8E/C,MAAM,iBAA2C,EAAE,OAAO;CACxD,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACtB,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACjC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;AACpC,CAAC;AAED,MAAM,mBAA0C,EAAE,OAAO;CACvD,QAAQ,EAAE,OAAO;CACjB,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAAS,EAAE,OAAO;EAChB,MAAM,EAAE,OAAO;EACf,MAAM,EAAE,OAAO;EACf,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,CAAC;CACD,MAAM,EAAE,OAAO;EAAE,SAAS,EAAE,OAAO;EAAG,WAAW,EAAE,OAAO;EAAG,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAAE,CAAC;CAC3F,QAAQ,EAAE,OAAO;CACjB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,QAAQ,EAAE,OAAO;EAAE,UAAU,EAAE,OAAO;EAAG,KAAK,EAAE,OAAO;EAAG,UAAU,EAAE,OAAO;CAAE,CAAC;CAChF,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAED,MAAM,wBAAoD,EAAE,OAAO;CACjE,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,MAAM,EAAE,OAAO;CACf,UAAU,EAAE,KAAK;EACf;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;AACH,CAAC;AAED,MAAM,qBAA8C,EAAE,OAAO;CAC3D,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAClC,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC1C,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CACzC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC7C,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;;AAGD,MAAa,4BAA4D,EAAE,OAAO;CAChF,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACtC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAC5C,CAAC;;AAGD,MAAa,oBAA4C,EACtD,OAAO;CACN,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACnC,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC3C,0BAA0B,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC/C,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACvC,qBAAqB,EAAE,OAAO,CAAC,CAAC,SAAS;CAEzC,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACzC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACnD,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC/D,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzD,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACrD,cAAc,EAAE,QAAQ,CAAC,CAAC,SAAS;CACnC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC3C,eAAe,EACZ,OAAO,EACN,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,+BAA+B,CAAC,CAAC,SAAS,EAC5F,CAAC,CAAC,CACD,OAAO,CAAC,CACR,SAAS;CACZ,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACrD,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpD,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACvD,WAAW,EAAE,MAAM,cAAc,CAAC,CAAC,IAAI,GAAG,gCAAgC,CAAC,CAAC,SAAS;CACrF,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,qBAAqB,CAAC,CAAC,SAAS;AACjE,CAAC,CAAC,CACD,OAAO,CAAC,CACR,aAAa,QAAQ,QAAQ;CAC5B,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,WAAW,KAAA,GAC3D,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;CAEH,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,mBAAmB,OAAO,QAC1E,IAAI,SAAS;EACX,MAAM;EACN,MAAM,CAAC,gBAAgB;EACvB,SAAS;CACX,CAAC;AAEL,CAAC;;AAGH,MAAa,iBAAsC,EAChD,OAAO;CACN,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAE1B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAIhC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACnC,YAAY,iBAAiB,SAAS;CACtC,WAAW,iBAAiB,SAAS;CACrC,MAAM,mBAAmB,SAAS;AACpC,CAAC,CAAC,CACD,OAAO;;;;;;;AAQV,SAAgB,eAAe,QAA8C;CAC3E,MAAM,SAAS,kBAAkB,UAAU,MAAM;CACjD,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,wBAAwB,QAAQ;CAClD;CACA,OAAO,OAAO;AAChB;;;;;;;AAQA,SAAgB,iBAAiB,QAA2C;CAC1E,MAAM,SAAS,eAAe,UAAU,MAAM;CAC9C,IAAI,CAAC,OAAO,SAAS;EACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;EAC5F,MAAM,IAAI,MAAM,qBAAqB,QAAQ;CAC/C;CACA,OAAO,OAAO;AAChB"}

package/dist/diff.d.mts

@@ -1,11 +1,9 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, DiffOptions, DiffResult, IMAGE_ENGINE_ENV, ImageEngine, configureImages, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine } from "@storyshelf/image";
-//#region src/diff/index.d.ts
 /** @deprecated Use `configureImages`, which also takes the image engine. */
 declare function configureDiffPool(options: {
   threads?: number;
 }): void;
-//#endregion
 export { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, type DiffOptions, type DiffResult, IMAGE_ENGINE_ENV, type ImageEngine, configureDiffPool, configureImages, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine };
 //# sourceMappingURL=diff.d.mts.map

package/dist/diff.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, IMAGE_ENGINE_ENV, configureImages, configureImages as configureImages$1, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine } from "@storyshelf/image";
-//#region src/diff/index.ts
+// src/diff/index.ts
 /**
 * Pixel diff engine (re-exported from `@storyshelf/image`, which owns the codecs and worker pool).
 *
@@ -13,7 +13,6 @@ import { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, IMAGE_ENGINE_ENV, configureImag
 function configureDiffPool(options) {
 	configureImages$1(options);
 }
-//#endregion
 export { DEFAULT_DIFF_OPTIONS, DIFF_WORKERS_ENV, IMAGE_ENGINE_ENV, configureDiffPool, configureImages, diffImages, diffImagesAsync, shutdownDiffPool, verifyImageEngine };
 
 //# sourceMappingURL=diff.mjs.map

package/dist/index.d.mts

@@ -2,6 +2,6 @@ import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { Logger, LoggerOptions, PinoTransport, createShelfLogger } from "./logger.mjs";
 import { BUILD_STATUSES, BuildStatus, ProjectRole, SNAPSHOT_STATUSES, SiteRole, SnapshotStatus, TERMINAL_BUILD_STATUSES } from "./types.mjs";
-import { AdapterSnapshot, BrandTheme, DEFAULT_MAX_UPLOAD_BYTES, ShelfConfig, ShelfOptions, ShelfViewport, UIConfig, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig } from "./config.mjs";
+import { AdapterSnapshot, BrandTheme, CaptureAssetsConfig, DEFAULT_MAX_UPLOAD_BYTES, MAX_CAPTURE_ASSET_CACHE_SECONDS, ShelfConfig, ShelfOptions, ShelfViewport, UIConfig, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig } from "./config.mjs";
 import { BrandPack, brandPack, brandPacks } from "./brand-packs.mjs";
-export { type AdapterSnapshot, BUILD_STATUSES, type BrandPack, type BrandTheme, type BuildStatus, DEFAULT_MAX_UPLOAD_BYTES, type Logger, type LoggerOptions, type PinoTransport, type ProjectRole, SNAPSHOT_STATUSES, type ShelfConfig, type ShelfOptions, type ShelfViewport, type SiteRole, type SnapshotStatus, TERMINAL_BUILD_STATUSES, type UIConfig, brandPack, brandPacks, createShelfLogger, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig };
+export { type AdapterSnapshot, BUILD_STATUSES, type BrandPack, type BrandTheme, type BuildStatus, type CaptureAssetsConfig, DEFAULT_MAX_UPLOAD_BYTES, type Logger, type LoggerOptions, MAX_CAPTURE_ASSET_CACHE_SECONDS, type PinoTransport, type ProjectRole, SNAPSHOT_STATUSES, type ShelfConfig, type ShelfOptions, type ShelfViewport, type SiteRole, type SnapshotStatus, TERMINAL_BUILD_STATUSES, type UIConfig, brandPack, brandPacks, createShelfLogger, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig };

package/dist/index.mjs

@@ -1,8 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { DEFAULT_MAX_UPLOAD_BYTES, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig } from "./config.mjs";
+import { DEFAULT_MAX_UPLOAD_BYTES, MAX_CAPTURE_ASSET_CACHE_SECONDS, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig } from "./config.mjs";
 import { brandPack, brandPacks } from "./brand-packs.mjs";
 import { createShelfLogger } from "./logger.mjs";
 import { BUILD_STATUSES, SNAPSHOT_STATUSES, TERMINAL_BUILD_STATUSES } from "./types.mjs";
-export { BUILD_STATUSES, DEFAULT_MAX_UPLOAD_BYTES, SNAPSHOT_STATUSES, TERMINAL_BUILD_STATUSES, brandPack, brandPacks, createShelfLogger, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig };
+export { BUILD_STATUSES, DEFAULT_MAX_UPLOAD_BYTES, MAX_CAPTURE_ASSET_CACHE_SECONDS, SNAPSHOT_STATUSES, TERMINAL_BUILD_STATUSES, brandPack, brandPacks, createShelfLogger, shelfConfigSchema, uiConfigSchema, validateConfig, validateUiConfig };

package/dist/insights/budget.d.mts

@@ -1,7 +1,6 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { AiBudget } from "../ai.mjs";
-//#region src/insights/budget.d.ts
 /** Alert thresholds as percentages of the daily cap. */
 declare const BUDGET_THRESHOLDS: readonly [50, 75, 90, 100];
 /** UTC day key (`YYYY-MM-DD`). */
@@ -15,6 +14,5 @@ declare function countedTokens(usage: {
 }, images: number, budget: Pick<AiBudget, "visionWeight">): number;
 /** Thresholds crossed when moving from `before` to `after` tokens of `cap`. */
 declare function crossedThresholds(before: number, after: number, cap: number): number[];
-//#endregion
 export { BUDGET_THRESHOLDS, countedTokens, crossedThresholds, utcDay, utcDayStart };
 //# sourceMappingURL=budget.d.mts.map

package/dist/insights/budget.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-//#region src/insights/budget.ts
+// src/insights/budget.ts
 /** Alert thresholds as percentages of the daily cap. */
 const BUDGET_THRESHOLDS = [
 	50,
@@ -27,7 +27,6 @@ function crossedThresholds(before, after, cap) {
 	if (cap <= 0) return [];
 	return BUDGET_THRESHOLDS.filter((t) => before < cap * t / 100 && after >= cap * t / 100);
 }
-//#endregion
 export { BUDGET_THRESHOLDS, countedTokens, crossedThresholds, utcDay, utcDayStart };
 
 //# sourceMappingURL=budget.mjs.map

package/dist/insights/envelope.d.mts

@@ -1,7 +1,6 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { z } from "zod";
-//#region src/insights/envelope.d.ts
 /** Build triage envelope. */
 declare const triageEnvelopeSchema: z.ZodObject<{
   verdict: z.ZodEnum<{
@@ -54,6 +53,5 @@ declare const healthEnvelopeSchema: z.ZodObject<{
 type TriageEnvelope = z.infer<typeof triageEnvelopeSchema>;
 /** A parsed health result. */
 type HealthEnvelope = z.infer<typeof healthEnvelopeSchema>;
-//#endregion
 export { HealthEnvelope, TriageEnvelope, healthEnvelopeSchema, triageEnvelopeSchema };
 //# sourceMappingURL=envelope.d.mts.map

package/dist/insights/envelope.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { z } from "zod";
-//#region src/insights/envelope.ts
+// src/insights/envelope.ts
 /** Result envelopes the model must produce (validated; stored as opaque JSON text). */
 const severitySchema = z.enum([
 	"info",
@@ -54,7 +54,6 @@ const healthEnvelopeSchema = z.object({
 	})).max(10),
 	confidence: confidenceSchema
 });
-//#endregion
 export { HEALTH_VERDICTS, TRIAGE_VERDICTS, healthEnvelopeSchema, triageEnvelopeSchema };
 
 //# sourceMappingURL=envelope.mjs.map

package/dist/insights/evidence-health.d.mts

@@ -2,7 +2,6 @@ import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { EvidenceLimits } from "./limits.mjs";
 import { BuiltEvidence } from "./evidence.mjs";
-//#region src/insights/evidence-health.d.ts
 /** One build in the window, summarized. */
 interface BuildSummary {
   createdAt: string;
@@ -27,6 +26,5 @@ interface HealthEvidenceInput {
 }
 /** Assemble health evidence deterministically. */
 declare function buildHealthEvidence(input: HealthEvidenceInput): BuiltEvidence;
-//#endregion
 export { BuildSummary, HealthEvidenceInput, buildHealthEvidence };
 //# sourceMappingURL=evidence-health.d.mts.map

package/dist/insights/evidence-health.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { resolveLimits } from "./limits.mjs";
 import { capBytes, field } from "./text.mjs";
-//#region src/insights/evidence-health.ts
+// src/insights/evidence-health.ts
 /** Assemble health evidence deterministically. */
 function buildHealthEvidence(input) {
 	const limits = resolveLimits(input.limits);
@@ -22,7 +22,6 @@ function buildHealthEvidence(input) {
 		omitted: 0
 	};
 }
-//#endregion
 export { buildHealthEvidence };
 
 //# sourceMappingURL=evidence-health.mjs.map

package/dist/insights/evidence.d.mts

@@ -2,7 +2,6 @@ import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { EvidenceLimits } from "./limits.mjs";
 import { AiEvidence } from "../ai.mjs";
-//#region src/insights/evidence.d.ts
 /** One changed (or failed) snapshot as evidence. */
 interface SnapshotEvidence {
   storyId: string;
@@ -50,6 +49,5 @@ declare function snapshotKey(s: Pick<SnapshotEvidence, "title" | "name" | "viewp
 declare function rankSnapshots(a: SnapshotEvidence, b: SnapshotEvidence): number;
 /** Assemble triage evidence deterministically (redacted, capped, ranked). */
 declare function buildTriageEvidence(input: TriageEvidenceInput): Promise<BuiltEvidence>;
-//#endregion
 export { BuiltEvidence, SnapshotEvidence, TriageEvidenceInput, buildTriageEvidence, rankSnapshots, snapshotKey };
 //# sourceMappingURL=evidence.d.mts.map

package/dist/insights/evidence.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { resolveLimits } from "./limits.mjs";
 import { capBytes, field, headTail } from "./text.mjs";
 import { downscalePng } from "@storyshelf/image";
-//#region src/insights/evidence.ts
+// src/insights/evidence.ts
 /** Pure evidence builders: already-loaded inputs in, delimited text + images out. */
 /** Stable story key shown to the model and echoed back in `snapshotKey`. */
 function snapshotKey(s) {
@@ -58,7 +58,6 @@ async function triageImages(listed, limits) {
 		label: snapshotKey(item)
 	})));
 }
-//#endregion
 export { buildTriageEvidence, rankSnapshots, snapshotKey };
 
 //# sourceMappingURL=evidence.mjs.map

package/dist/insights/hash.d.mts

@@ -1,6 +1,5 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-//#region src/insights/hash.d.ts
 /** Parts that define whether a cached insight is still valid. */
 interface InputHashParts {
   evidenceText: string;
@@ -13,6 +12,5 @@ interface InputHashParts {
 }
 /** Hash the final assembled evidence plus prompt/task/profile/model. */
 declare function computeInputHash(parts: InputHashParts): string;
-//#endregion
 export { InputHashParts, computeInputHash };
 //# sourceMappingURL=hash.d.mts.map

package/dist/insights/hash.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { sha256 } from "../utils/hash.mjs";
-//#region src/insights/hash.ts
+// src/insights/hash.ts
 /** Cache key for an insight: identical evidence + prompt + model is a free hit. */
 /** Hash the final assembled evidence plus prompt/task/profile/model. */
 function computeInputHash(parts) {
@@ -15,7 +15,6 @@ function computeInputHash(parts) {
 		parts.evidenceText
 	]));
 }
-//#endregion
 export { computeInputHash };
 
 //# sourceMappingURL=hash.mjs.map

package/dist/insights/limits.d.mts

@@ -1,6 +1,5 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-//#region src/insights/limits.d.ts
 /** Deterministic evidence limits (defaults; overridable in `createAi` options). */
 /** Caps applied when assembling evidence. */
 interface EvidenceLimits {
@@ -19,6 +18,5 @@ interface EvidenceLimits {
 declare const DEFAULT_EVIDENCE_LIMITS: EvidenceLimits;
 /** Merge partial overrides onto the defaults. */
 declare function resolveLimits(overrides?: Partial<EvidenceLimits>): EvidenceLimits;
-//#endregion
 export { DEFAULT_EVIDENCE_LIMITS, EvidenceLimits, resolveLimits };
 //# sourceMappingURL=limits.d.mts.map

package/dist/insights/limits.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-//#region src/insights/limits.ts
+// src/insights/limits.ts
 /** Default limits from ADR 0016 §5. */
 const DEFAULT_EVIDENCE_LIMITS = {
 	maxImages: 3,
@@ -18,7 +18,6 @@ function resolveLimits(overrides) {
 		...overrides
 	};
 }
-//#endregion
 export { DEFAULT_EVIDENCE_LIMITS, resolveLimits };
 
 //# sourceMappingURL=limits.mjs.map

package/dist/insights/prompts/v1.d.mts

@@ -1,6 +1,5 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-//#region src/insights/prompts/v1.d.ts
 /** Versioned prompts (pinned and logged; bump `PROMPT_VERSION` on any change). */
 /** Identifier folded into every `inputHash` and stored on each row. */
 declare const PROMPT_VERSION = "v1";
@@ -8,6 +7,5 @@ declare const PROMPT_VERSION = "v1";
 declare const TRIAGE_SYSTEM: string;
 /** System prompt for project health. */
 declare const HEALTH_SYSTEM: string;
-//#endregion
 export { HEALTH_SYSTEM, PROMPT_VERSION, TRIAGE_SYSTEM };
 //# sourceMappingURL=v1.d.mts.map

package/dist/insights/prompts/v1.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-//#region src/insights/prompts/v1.ts
+// src/insights/prompts/v1.ts
 /** Versioned prompts (pinned and logged; bump `PROMPT_VERSION` on any change). */
 /** Identifier folded into every `inputHash` and stored on each row. */
 const PROMPT_VERSION = "v1";
@@ -28,7 +28,6 @@ const HEALTH_SYSTEM = [
 	"a verdict and a few short trends.",
 	SHARED
 ].join(" ");
-//#endregion
 export { HEALTH_SYSTEM, PROMPT_VERSION, TRIAGE_SYSTEM };
 
 //# sourceMappingURL=v1.mjs.map

package/dist/insights/redact.d.mts

@@ -1,9 +1,7 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
-//#region src/insights/redact.d.ts
 /** Secret redaction applied to every string before it can reach a model. */
 /** Replace secrets in a string with a fixed marker (never throws). */
 declare function redactText(input: string): string;
-//#endregion
 export { redactText };
 //# sourceMappingURL=redact.d.mts.map

package/dist/insights/redact.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-//#region src/insights/redact.ts
+// src/insights/redact.ts
 /** Secret redaction applied to every string before it can reach a model. */
 const MARK = "[REDACTED]";
 const RULES = [
@@ -18,7 +18,6 @@ function redactText(input) {
 	for (const [pattern, replacement] of RULES) out = out.replaceAll(pattern, replacement);
 	return out;
 }
-//#endregion
 export { redactText };
 
 //# sourceMappingURL=redact.mjs.map

package/dist/insights/text.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { redactText } from "./redact.mjs";
-//#region src/insights/text.ts
+// src/insights/text.ts
 /** Text helpers for deterministic, safe evidence. */
 const LT = "‹";
 const GT = "›";
@@ -38,7 +38,6 @@ function capBytes(lines, maxBytes) {
 	}
 	return kept.join("\n");
 }
-//#endregion
 export { capBytes, field, headTail, neutralize };
 
 //# sourceMappingURL=text.mjs.map

package/dist/logger.d.mts

@@ -1,7 +1,6 @@
 import __tsdown_shims_path from 'node:path';
 import __tsdown_shims_url from 'node:url';
 import { Logger } from "pino";
-//#region src/logger.d.ts
 /**
  * Create the structured JSON logger used across StoryShelf.
  *
@@ -43,6 +42,5 @@ interface LoggerOptions {
    */
   mixin?: () => Record<string, unknown>;
 }
-//#endregion
 export { type Logger, LoggerOptions, PinoTransport, createShelfLogger };
 //# sourceMappingURL=logger.d.mts.map

package/dist/logger.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { redactSecrets } from "./utils/redact.mjs";
 import pino from "pino";
-//#region src/logger.ts
+// src/logger.ts
 /**
 * Create the structured JSON logger used across StoryShelf.
 *
@@ -50,7 +50,6 @@ function redactedError(err) {
 	}
 	return record;
 }
-//#endregion
 export { createShelfLogger };
 
 //# sourceMappingURL=logger.mjs.map

package/dist/models/ai-budget-alert.d.mts

@@ -3,7 +3,6 @@ import __tsdown_shims_url from 'node:url';
 import { DatabaseAdapter } from "../adapter/database.mjs";
 import { AiBudgetAlertRow } from "../schema/insight.mjs";
 import { Table } from "drizzle-orm";
-//#region src/models/ai-budget-alert.d.ts
 /** Tables required by {@link AiBudgetAlertModel}. */
 interface AiBudgetAlertTables {
   aiBudgetAlerts: Table;
@@ -18,6 +17,5 @@ declare class AiBudgetAlertModel {
   /** Claims already made for a day. */
   listForDay(day: string): Promise<AiBudgetAlertRow[]>;
 }
-//#endregion
 export { AiBudgetAlertModel, AiBudgetAlertTables };
 //# sourceMappingURL=ai-budget-alert.d.mts.map

package/dist/models/ai-budget-alert.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { col } from "./columns.mjs";
 import { eq } from "drizzle-orm";
-//#region src/models/ai-budget-alert.ts
+// src/models/ai-budget-alert.ts
 /** Budget-threshold alert claims: the primary key makes "once per day" atomic. */
 /** Data operations for budget alert claims. */
 var AiBudgetAlertModel = class {
@@ -32,7 +32,6 @@ var AiBudgetAlertModel = class {
 		return await this.db.list(this.tables.aiBudgetAlerts, { where: eq(col(this.tables.aiBudgetAlerts, "day"), day) });
 	}
 };
-//#endregion
 export { AiBudgetAlertModel };
 
 //# sourceMappingURL=ai-budget-alert.mjs.map

package/dist/models/ai-usage.d.mts

@@ -3,7 +3,6 @@ import __tsdown_shims_url from 'node:url';
 import { DatabaseAdapter } from "../adapter/database.mjs";
 import { AiUsageRow } from "../schema/insight.mjs";
 import { Table } from "drizzle-orm";
-//#region src/models/ai-usage.d.ts
 /** Tables required by {@link AiUsageModel}. */
 interface AiUsageTables {
   aiUsage: Table;
@@ -35,6 +34,5 @@ declare class AiUsageModel {
   purgeBefore(cutoffIso: string): Promise<number>;
   private col;
 }
-//#endregion
 export { AiUsageInput, AiUsageModel, AiUsageTables };
 //# sourceMappingURL=ai-usage.d.mts.map

package/dist/models/ai-usage.mjs

@@ -4,7 +4,7 @@ import.meta.url;
 import { ulid } from "../utils/ulid.mjs";
 import { col } from "./columns.mjs";
 import { and, asc, eq, gte, lt } from "drizzle-orm";
-//#region src/models/ai-usage.ts
+// src/models/ai-usage.ts
 /** Provider-reported AI usage rows; budget and hourly limits are counted from them. */
 const PAGE = 500;
 /** Data operations for AI usage rows. */
@@ -55,7 +55,6 @@ var AiUsageModel = class {
 		return col(this.tables.aiUsage, name);
 	}
 };
-//#endregion
 export { AiUsageModel };
 
 //# sourceMappingURL=ai-usage.mjs.map

package/dist/models/baseline-approval.d.mts

@@ -0,0 +1,18 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import "../adapter/database.mjs";
+import { Snapshot } from "../schema/snapshot.mjs";
+import { BaselineWriteConflict } from "./baseline-conflict.mjs";
+import { BaselineStatus } from "./baseline-status.mjs";
+interface AtomicBaselineApproval {
+  snapshot: Snapshot;
+  reviewedBy: string | null;
+  force: boolean;
+  branch: string;
+}
+declare class BaselineApprovalConflict extends BaselineWriteConflict {
+  readonly driftStatus?: BaselineStatus;
+  constructor(message: string, driftStatus?: BaselineStatus);
+}
+export { AtomicBaselineApproval, BaselineApprovalConflict };
+//# sourceMappingURL=baseline-approval.d.mts.map

package/dist/models/baseline-approval.mjs

@@ -0,0 +1,41 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { col } from "./columns.mjs";
+import { BaselineWriteConflict } from "./baseline-conflict.mjs";
+import { baselineStatus, isBaselineDrifted } from "./baseline-status.mjs";
+import { and, eq } from "drizzle-orm";
+// src/models/baseline-approval.ts
+/** Review checks and decision persisted inside the baseline/reference transaction. */
+var BaselineApprovalConflict = class extends BaselineWriteConflict {
+	driftStatus;
+	constructor(message, driftStatus) {
+		super(message);
+		this.driftStatus = driftStatus;
+	}
+};
+async function approveInTransaction(tx, tables, input) {
+	const snapshot = await tx.get(tables.snapshots, input.snapshot.id);
+	if (!snapshot || snapshot.projectId !== input.snapshot.projectId || snapshot.buildId !== input.snapshot.buildId || snapshot.status !== input.snapshot.status || snapshot.updatedAt !== input.snapshot.updatedAt || snapshot.screenshotPath !== input.snapshot.screenshotPath || snapshot.baselineId !== input.snapshot.baselineId || snapshot.baselineVersion !== input.snapshot.baselineVersion) throw new BaselineApprovalConflict("Snapshot changed during approval; reload and retry");
+	const build = await tx.get(tables.builds, snapshot.buildId);
+	const project = await tx.get(tables.projects, snapshot.projectId);
+	if (!build || !project || build.projectId !== project.id || build.status === "cancelled" || build.gitBranch !== input.branch) throw new BaselineApprovalConflict("Build is unavailable for approval");
+	const current = await baselineFor(tx, tables, snapshot, build.gitBranch) ?? (build.gitBranch === project.gitDefaultBranch ? null : await baselineFor(tx, tables, snapshot, project.gitDefaultBranch));
+	const status = baselineStatus(snapshot, current);
+	if ((snapshot.status === "new" || snapshot.status === "changed") && isBaselineDrifted(status) && !input.force) throw new BaselineApprovalConflict("Baseline changed after this diff was computed", status);
+	await tx.update(tables.snapshots, snapshot.id, {
+		status: "approved",
+		reviewedBy: input.reviewedBy,
+		reviewedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+}
+async function baselineFor(tx, tables, snapshot, branch) {
+	return (await tx.list(tables.baselines, {
+		where: and(eq(col(tables.baselines, "projectId"), snapshot.projectId), eq(col(tables.baselines, "storyId"), snapshot.storyId), eq(col(tables.baselines, "viewportName"), snapshot.viewportName), eq(col(tables.baselines, "browser"), snapshot.browser ?? "chromium"), eq(col(tables.baselines, "branch"), branch)),
+		limit: 1
+	}))[0] ?? null;
+}
+export { BaselineApprovalConflict, approveInTransaction };
+
+//# sourceMappingURL=baseline-approval.mjs.map

package/dist/models/baseline-approval.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-approval.mjs","names":[],"sources":["../../src/models/baseline-approval.ts"],"sourcesContent":["/** Review checks and decision persisted inside the baseline/reference transaction. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { Tables, TxStore } from \"../adapters/database.ts\";\nimport type { Baseline } from \"../schema/baseline.ts\";\nimport type { Build } from \"../schema/build.ts\";\nimport type { Project } from \"../schema/project.ts\";\nimport type { Snapshot } from \"../schema/snapshot.ts\";\nimport { BaselineWriteConflict } from \"./baseline-conflict.ts\";\nimport { baselineStatus, isBaselineDrifted, type BaselineStatus } from \"./baseline-status.ts\";\nimport { col } from \"./columns.ts\";\n\nexport interface AtomicBaselineApproval {\n  snapshot: Snapshot;\n  reviewedBy: string | null;\n  force: boolean;\n  branch: string;\n}\nexport class BaselineApprovalConflict extends BaselineWriteConflict {\n  readonly driftStatus?: BaselineStatus;\n  constructor(message: string, driftStatus?: BaselineStatus) {\n    super(message);\n    this.driftStatus = driftStatus;\n  }\n}\n\nexport async function approveInTransaction(\n  tx: TxStore,\n  tables: Tables,\n  input: AtomicBaselineApproval,\n): Promise<void> {\n  const snapshot = (await tx.get(\n    tables.snapshots,\n    input.snapshot.id,\n  )) as unknown as Snapshot | null;\n  if (\n    !snapshot ||\n    snapshot.projectId !== input.snapshot.projectId ||\n    snapshot.buildId !== input.snapshot.buildId ||\n    snapshot.status !== input.snapshot.status ||\n    snapshot.updatedAt !== input.snapshot.updatedAt ||\n    snapshot.screenshotPath !== input.snapshot.screenshotPath ||\n    snapshot.baselineId !== input.snapshot.baselineId ||\n    snapshot.baselineVersion !== input.snapshot.baselineVersion\n  )\n    throw new BaselineApprovalConflict(\"Snapshot changed during approval; reload and retry\");\n  const build = (await tx.get(tables.builds, snapshot.buildId)) as unknown as Build | null;\n  const project = (await tx.get(tables.projects, snapshot.projectId)) as unknown as Project | null;\n  if (\n    !build ||\n    !project ||\n    build.projectId !== project.id ||\n    build.status === \"cancelled\" ||\n    build.gitBranch !== input.branch\n  )\n    throw new BaselineApprovalConflict(\"Build is unavailable for approval\");\n  const own = await baselineFor(tx, tables, snapshot, build.gitBranch);\n  const current =\n    own ??\n    (build.gitBranch === project.gitDefaultBranch\n      ? null\n      : await baselineFor(tx, tables, snapshot, project.gitDefaultBranch));\n  const status = baselineStatus(snapshot, current);\n  if (\n    (snapshot.status === \"new\" || snapshot.status === \"changed\") &&\n    isBaselineDrifted(status) &&\n    !input.force\n  )\n    throw new BaselineApprovalConflict(\"Baseline changed after this diff was computed\", status);\n  await tx.update(tables.snapshots, snapshot.id, {\n    status: \"approved\",\n    reviewedBy: input.reviewedBy,\n    reviewedAt: new Date().toISOString(),\n    updatedAt: new Date().toISOString(),\n  });\n}\n\nasync function baselineFor(\n  tx: TxStore,\n  tables: Tables,\n  snapshot: Snapshot,\n  branch: string,\n): Promise<Baseline | null> {\n  const rows = await tx.list(tables.baselines, {\n    where: and(\n      eq(col(tables.baselines, \"projectId\"), snapshot.projectId),\n      eq(col(tables.baselines, \"storyId\"), snapshot.storyId),\n      eq(col(tables.baselines, \"viewportName\"), snapshot.viewportName),\n      eq(col(tables.baselines, \"browser\"), snapshot.browser ?? \"chromium\"),\n      eq(col(tables.baselines, \"branch\"), branch),\n    ),\n    limit: 1,\n  });\n  return (rows[0] as unknown as Baseline | undefined) ?? null;\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAa,2BAAb,cAA8C,sBAAsB;CAClE;CACA,YAAY,SAAiB,aAA8B;EACzD,MAAM,OAAO;EACb,KAAK,cAAc;CACrB;AACF;AAEA,eAAsB,qBACpB,IACA,QACA,OACe;CACf,MAAM,WAAY,MAAM,GAAG,IACzB,OAAO,WACP,MAAM,SAAS,EACjB;CACA,IACE,CAAC,YACD,SAAS,cAAc,MAAM,SAAS,aACtC,SAAS,YAAY,MAAM,SAAS,WACpC,SAAS,WAAW,MAAM,SAAS,UACnC,SAAS,cAAc,MAAM,SAAS,aACtC,SAAS,mBAAmB,MAAM,SAAS,kBAC3C,SAAS,eAAe,MAAM,SAAS,cACvC,SAAS,oBAAoB,MAAM,SAAS,iBAE5C,MAAM,IAAI,yBAAyB,oDAAoD;CACzF,MAAM,QAAS,MAAM,GAAG,IAAI,OAAO,QAAQ,SAAS,OAAO;CAC3D,MAAM,UAAW,MAAM,GAAG,IAAI,OAAO,UAAU,SAAS,SAAS;CACjE,IACE,CAAC,SACD,CAAC,WACD,MAAM,cAAc,QAAQ,MAC5B,MAAM,WAAW,eACjB,MAAM,cAAc,MAAM,QAE1B,MAAM,IAAI,yBAAyB,mCAAmC;CAExE,MAAM,UACJ,MAFgB,YAAY,IAAI,QAAQ,UAAU,MAAM,SAAS,MAGhE,MAAM,cAAc,QAAQ,mBACzB,OACA,MAAM,YAAY,IAAI,QAAQ,UAAU,QAAQ,gBAAgB;CACtE,MAAM,SAAS,eAAe,UAAU,OAAO;CAC/C,KACG,SAAS,WAAW,SAAS,SAAS,WAAW,cAClD,kBAAkB,MAAM,KACxB,CAAC,MAAM,OAEP,MAAM,IAAI,yBAAyB,iDAAiD,MAAM;CAC5F,MAAM,GAAG,OAAO,OAAO,WAAW,SAAS,IAAI;EAC7C,QAAQ;EACR,YAAY,MAAM;EAClB,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;CACpC,CAAC;AACH;AAEA,eAAe,YACb,IACA,QACA,UACA,QAC0B;CAW1B,QAAQ,MAVW,GAAG,KAAK,OAAO,WAAW;EAC3C,OAAO,IACL,GAAG,IAAI,OAAO,WAAW,WAAW,GAAG,SAAS,SAAS,GACzD,GAAG,IAAI,OAAO,WAAW,SAAS,GAAG,SAAS,OAAO,GACrD,GAAG,IAAI,OAAO,WAAW,cAAc,GAAG,SAAS,YAAY,GAC/D,GAAG,IAAI,OAAO,WAAW,SAAS,GAAG,SAAS,WAAW,UAAU,GACnE,GAAG,IAAI,OAAO,WAAW,QAAQ,GAAG,MAAM,CAC5C;EACA,OAAO;CACT,CAAC,EAAA,CACY,MAA0C;AACzD"}