feat(review): viewport x theme completeness matrix for the screenshot-table gate

[JSONbored]

Summary

• The deterministic screenshot-table gate only checked that a PR body contained some markdown table with any image inside it, with no concept of viewport or color-mode coverage -- even though metagraphed's own contributor skill file (.claude/skills/metagraphed/SKILL.md, Phase C2, feat(mcp): add gittensory_check_test_evidence tool (#2235) #3770) documents an exact 3-viewport x 2-theme x before/after = 12-image contract. metagraphed PR fix(github): allow self-host TRUSTED_SCANNER_BOT_LOGINS override #4661 shipped with 4/12 images and passed AI review, because the private review-context copy the AI reviewer's instructions come from was never updated to mention viewport/theme completeness.
• screenshotTableGate config gains requireViewports/requireThemes (string arrays, empty by default -- opt-in per repo, byte-identical for a repo that doesn't set them). When requireViewports is non-empty, the evaluator matches every required (viewport, theme) pair against a labeled table row (case-insensitive substring match on the row's first cell, e.g. "Desktop · Light") and requires at least two image-bearing cells in that row (before + after). Missing pairs are named in the rejection reason.
• action gains a real advisory value, distinct from the request_changes/comment values feat(review): wire bot-generated visual captures into screenshotTableGate #4110 removed as dead/unwired config -- this one is actually wired: advisory computes the violation but the caller (processors.ts) only ever folds a result into the close-triggering planner match when action === "close", so advisory is a real no-op on merge/close by construction.
• Full config-as-code wiring, same pattern as every other per-repo gate field: DB migration + Drizzle schema + settings resolver + .gittensory.yml manifest parser (both the Worker copy and the hand-duplicated gittensory-engine package copy, kept in sync per engine-parity:drift-check) + OpenAPI.

Closes #4540

Scope

• The PR title follows type(scope): short summary Conventional Commit format.
• This PR is focused and does not mix unrelated backend, UI, MCP, docs, dependency, and deploy changes.
• This follows CONTRIBUTING.md and does not reintroduce GitHub Pages, VitePress, site/, or CNAME.
• I linked a currently open issue this PR resolves.

Validation

• git diff --check
• npm run typecheck
• npm run db:migrations:check, npm run db:schema-drift:check, npm run cf-typegen:check
• npm run manifest:drift-check, npm run engine-parity:drift-check (Worker/engine screenshot-table-gate.ts + manifest-deps-types.ts copies confirmed in sync)
• npm run ui:openapi (regenerated) + npm run ui:openapi:check (no drift) + npm run ui:openapi:settings-parity
• npm run test --workspace @jsonbored/gittensory-engine (325/325 passing)
• npm run test:coverage (full unsharded local run, 12830+ tests passing, 0 failures)
• npm audit --audit-level=moderate -- 0 vulnerabilities
• npm run docs:drift-check, npm run selfhost:env-reference:check, npm run command-reference:check
• New/changed behavior has unit/integration tests for every new branch (viewport-only vs viewport×theme matrix mode, case-insensitive row matching, missing-pair naming, advisory vs close dispatch, sparse-override parsing both directions) plus a regression test reproducing the exact metagraphed PR fix(github): allow self-host TRUSTED_SCANNER_BOT_LOGINS override #4661 shape in both the Worker and engine-package copies.
• npm run actionlint, npm run test:workers, npm run build:mcp, npm run test:mcp-pack, npm run build:miner, npm run test:miner-pack, npm run rees:test, npm run ui:lint, npm run ui:typecheck, npm run ui:test, npm run ui:build -- not run locally; this diff touches no UI/MCP/miner/REES/workers surface, so CI's full test:ci gate covers these as a backstop.

Safety

• No secrets, wallet details, hotkeys, coldkeys, user PATs, private keys, raw trust scores, private rankings, or private maintainer evidence are exposed.
• Public GitHub text stays sanitized, low-noise, and does not imply compensation guarantees or optimization tactics.
• No auth/cookie/CORS/GitHub App/Cloudflare/session changes.
• API/OpenAPI updated and tested (screenshotTableGate schema gains requireViewports/requireThemes/advisory).
• No UI changes.
• No public docs/changelog changes needed.

Notes

This PR builds the detection engine and config surface only. A follow-up (tracked separately, not in this PR) syncs the private per-repo review-context files on the self-host server so the AI reviewer's own instructions mention the matrix requirement too, and turns the gate on for metagraphed with action: close.

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	5a34d00	Commit Preview URL Branch Preview URL	Jul 10 2026, 01:03 AM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.08%. Comparing base (8061b65) to head (5a34d00).
⚠️ Report is 2 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4545      +/-   ##
==========================================
+ Coverage   94.07%   94.08%   +0.01%     
==========================================
  Files         425      425              
  Lines       37757    37827      +70     
  Branches    13790    13814      +24     
==========================================
+ Hits        35519    35589      +70     
  Misses       1583     1583              
  Partials      655      655              

Files with missing lines	Coverage Δ
packages/gittensory-engine/src/focus-manifest.ts	99.10% <100.00%> (+<0.01%)	⬆️
...tensory-engine/src/review/screenshot-table-gate.ts	100.00% <100.00%> (ø)
src/db/repositories.ts	96.73% <ø> (ø)
src/db/schema.ts	72.43% <ø> (ø)
src/openapi/schemas.ts	100.00% <ø> (ø)
src/review/screenshot-table-gate.ts	100.00% <100.00%> (ø)
src/settings/agent-actions.ts	97.72% <ø> (ø)
src/signals/focus-manifest.ts	99.64% <100.00%> (+<0.01%)	⬆️
src/types.ts	100.00% <ø> (ø)

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[gittensory-orb]

Important

🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪

🔍 Gittensory is reviewing…

AI analysis is in progress. This comment will update when the review is complete.

_{🟩 Safe / merged · 🟦 Advisory · 🟨 Held for review · 🟥 Blocked / closed · 🟪 Reviewing}