Distillation

Date: Aug 27, 2026

• 🟡 (20:28) New untracked module src/modules/approval-attestation.js defines ATTESTATION_PREFIX = "<!-- publish-approval " and ATTESTATION_SUFFIX = " -->".
• 🟡 (20:28) createApprovalAttestation({ actor, eventId, title }) in src/modules/approval-attestation.js:4-10 serializes { actor, eventId: String(eventId), title } as JSON, Base64URL-encodes it with Buffer.from(...).toString("base64url"), and returns it inside the HTML-comment attestation prefix/suffix.
• 🟡 (20:28) parseApprovalAttestation(body) in src/modules/approval-attestation.js:12-45 finds the first attestation prefix/suffix, Base64URL-decodes and JSON-parses the enclosed value, requires string actor, eventId, and title fields, and returns null for missing delimiters, invalid field types, or any decode/parse error.
• 🟡 (20:28) compareEventIds(left, right) in src/modules/approval-attestation.js:47-60 normalizes IDs by stringifying and removing leading zeros (using "0" if empty), rejects non-decimal IDs with throw new Error("Invalid issue event ID"), then compares numeric-string lengths followed by localeCompare, avoiding JavaScript numeric conversion.
• 🟡 (20:28) currentAcceptedEvent(events) in src/modules/approval-attestation.js:62-84 filters for "labeled" issue events whose label?.name === "accepted", whose id is a string or number, and whose actor?.login is present; it selects the greatest ID using compareEventIds() and returns { actor: event.actor.login, eventId: String(event.id) }, otherwise returns null, including when comparison throws.
• 🟡 (20:28) hasApprovalAttestation({ comments, event, title, attestationAuthor }) in src/modules/approval-attestation.js:86-100 accepts an attestation only if a comment’s user?.login exactly equals attestationAuthor and parsed attestation fields exactly match event.actor, event.eventId, and the supplied title.
• 🟡 (20:28) src/modules/approval-attestation.js exports compareEventIds, createApprovalAttestation, currentAcceptedEvent, hasApprovalAttestation, and parseApprovalAttestation.