feat: normalize deployment inventory evidence

src/main/config-store.cjs

@@ -7,7 +7,7 @@ const { safeStorage } = require('electron');
 const { assertHttpUrl, assertWorkflowFileName, assertBranchName, assertEnvironmentName, assertCloneRemote, assertRepositoryRelativePath, assertRepositoryRelativePaths } = require('../shared/validation.cjs');
 
 const DEFAULT_CONFIG = {
-  schemaVersion: 11,
+  schemaVersion: 12,
   setupComplete: false,
   appearance: 'dark',
   gitea: { baseUrl: '', user: null, encryptedToken: null },
@@ -15,6 +15,7 @@ const DEFAULT_CONFIG = {
   repositoryMappings: {},
   deploymentProfiles: {},
   deploymentStates: {},
+  inventoryReviewDecisions: {},
   favorites: [],
   updates: {
     owner: 'Jens',
@@ -65,6 +66,7 @@ class ConfigStore {
       gitea: { ...DEFAULT_CONFIG.gitea, ...(source.gitea || {}) },
       workspaceRoots: uniqueStrings(source.workspaceRoots),
       repositoryMappings: source.repositoryMappings && typeof source.repositoryMappings === 'object' ? source.repositoryMappings : {},
+      inventoryReviewDecisions: source.inventoryReviewDecisions && typeof source.inventoryReviewDecisions === 'object' ? structuredClone(source.inventoryReviewDecisions) : {},
       deploymentProfiles: source.deploymentProfiles && typeof source.deploymentProfiles === 'object'
         ? Object.fromEntries(Object.entries(source.deploymentProfiles).map(([key, profiles]) => [key, (Array.isArray(profiles) ? profiles : []).map((profile) => {
           if (!profile || typeof profile !== 'object' || profile.provider !== 'ssh-unraid') return profile;
@@ -216,6 +218,8 @@ class ConfigStore {
     if (!basePath.startsWith('/') || /[\r\n\0]/.test(basePath)) throw new Error('The server base path must be an absolute Unix path.');
     const privateKeyPath = String(source.privateKeyPath || existing?.privateKeyPath || '').trim();
     const hostFingerprint = String(source.hostFingerprint || existing?.hostFingerprint || '').trim();
+    const scanRoots = uniqueStrings(source.scanRoots || existing?.scanRoots || [basePath]).map((value) => value.replace(/\/+$/, '')).filter((value) => value.startsWith('/') && !/[\r\n\0]/.test(value));
+    const scanExcludes = uniqueStrings(source.scanExcludes || existing?.scanExcludes || ['backups', 'archives', 'releases', 'staging', 'testdata']).filter((value) => /^[a-zA-Z0-9._*-]+$/.test(value));
     return {
       id: source.id || existing?.id || crypto.randomUUID(),
       name,
@@ -224,6 +228,8 @@ class ConfigStore {
       username,
       authType,
       basePath,
+      scanRoots: scanRoots.length ? scanRoots : [basePath],
+      scanExcludes,
       privateKeyPath,
       hostFingerprint,
       encryptedPassword: existing?.encryptedPassword || null,
@@ -503,6 +509,27 @@ class ConfigStore {
     return this.getDeploymentProfiles(fullName).find((item) => item.id === profileId) || null;
   }
 
+  getInventoryReviewDecisions(serverId) {
+    return structuredClone(this.data.inventoryReviewDecisions[String(serverId || '')] || []);
+  }
+
+  async saveInventoryReviewDecision(serverId, decision) {
+    const key = String(serverId || '');
+    if (!key || !decision?.workloadId || !/^[0-9a-f]{64}$/i.test(String(decision.evidenceHash || ''))) throw new Error('A server, workload and evidence hash are required for an inventory review decision.');
+    const decisions = this.getInventoryReviewDecisions(key).filter((item) => item.workloadId !== decision.workloadId);
+    decisions.push(structuredClone(decision));
+    this.data.inventoryReviewDecisions[key] = decisions;
+    await this.save();
+    return structuredClone(decision);
+  }
+
+  async deleteInventoryReviewDecision(serverId, workloadId) {
+    const key = String(serverId || '');
+    this.data.inventoryReviewDecisions[key] = this.getInventoryReviewDecisions(key).filter((item) => item.workloadId !== workloadId);
+    await this.save();
+    return this.getInventoryReviewDecisions(key);
+  }
+
   async saveDeploymentState(profileId, state) {
     this.data.deploymentStates[profileId] = {
       ...(this.data.deploymentStates[profileId] || {}),