feat(cms): improve catalog, editorial recovery and operations

src/lib/error-groups.test.ts

@@ -0,0 +1,60 @@
+import { expect, it } from "vitest";
+import { errorOperationLink, summarizeErrorGroup } from "./error-groups";
+import { createErrorRecord } from "./error-monitor";
+
+it("counts retained occurrences and identified users across releases without trusting browser identities", () => {
+	const base = createErrorRecord("server", "test", "failed", { userId: 12 });
+	const first = { ...base, at: "2026-09-08T10:00:00Z", release: "a" };
+	const latest = { ...base, at: "2026-09-09T10:00:00Z", release: "b" };
+	const browser = {
+		...latest,
+		source: "browser" as const,
+		context: { userId: 99 },
+	};
+	const summary = summarizeErrorGroup([
+		latest,
+		browser,
+		first,
+		{ ...latest, context: { userId: "12" } },
+		{ ...latest, context: { email: "redacted", userId: "[REDACTED]" } },
+	]);
+	expect(summary.count).toBe(5);
+	expect(summary.firstAt).toBe(first.at);
+	expect(summary.lastAt).toBe(latest.at);
+	expect(summary.affectedUsers).toBe(1);
+	expect(summary.unidentified).toBe(2);
+	expect(summary.releases.map((r) => [r.release, r.count])).toEqual([
+		["a", 1],
+		["b", 4],
+	]);
+});
+it("creates only recognized local operation links", () => {
+	const base = createErrorRecord("server", "test", "failed", {
+		module: "news",
+		articleId: 7,
+	});
+	expect(errorOperationLink(base)).toBe("/admin/articles/7");
+	expect(
+		errorOperationLink({
+			...base,
+			context: { module: "news", articleId: "../settings" },
+		}),
+	).toBe("/admin/articles");
+	expect(
+		errorOperationLink({
+			...base,
+			source: "browser",
+			context: { path: "/admin/media" },
+		}),
+	).toBe("/admin/media");
+	for (const path of [
+		"https://evil.invalid",
+		"//evil.invalid",
+		"/admin/articles/1?token=x",
+		"/admin/articles/../settings",
+		"/admin/users/42",
+		"javascript:alert(1)",
+		"/admin/%61rticles",
+	])
+		expect(errorOperationLink({ ...base, context: { path } })).toBeNull();
+});