@cogenta/fleet 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,42 @@
+export { assertNoForbiddenFields } from './agent/assert.js';
+export { fingerprintSbom, summarizeAdminAccounts } from './agent/build.js';
+export type { FleetCommandDispatchResult, FleetCommandHandlers, FleetCommandVerification, } from './agent/commands.js';
+export { dispatchFleetCommand, verifyFleetCommand } from './agent/commands.js';
+export type { RollbackIntent } from './agent/rollback-handler.js';
+export { createRollbackIntentHandler } from './agent/rollback-handler.js';
+export type { SignedTelemetry } from './agent/sign.js';
+export { signTelemetryPayload, verifyTelemetrySignature } from './agent/sign.js';
+export type { AdminAccountsSummary, AggregatedErrorsSummary, AvailabilitySummary, BackupSummary, CertificateExpirySummary, InstalledVersions, OpenCveSummary, TelemetryPayload, } from './agent/types.js';
+export type { AlertSender } from './alerts/alerts.js';
+export { detectCampaignHaltedAlert, detectCriticalRiskAlert, detectSiteSilentAlert, dispatchAlert, raiseIfNew, } from './alerts/alerts.js';
+export type { AlertConditionStore, AlertConditionType } from './alerts/conditions.js';
+export { createAlertConditionStore } from './alerts/conditions.js';
+export { ALERT_TABLES, ensureAlertTables } from './alerts/tables.js';
+export type { CommandQueueStore, FleetCommand, FleetCommandAction, SignedFleetCommand, } from './control/commands.js';
+export { createCommandQueueStore, FLEET_COMMAND_ACTIONS } from './control/commands.js';
+export type { ControlPlaneIdentity } from './control/identity.js';
+export { generateControlPlaneIdentity } from './control/identity.js';
+export type { IngestResult } from './control/ingest.js';
+export { ingestTelemetry } from './control/ingest.js';
+export type { FleetFilter, RiskReason, RiskTier, SiteRisk } from './control/risk.js';
+export { computeSiteRisk, filterRisks, groupRisksByClient, rankSitesByRisk, } from './control/risk.js';
+export type { SiteStateStore, TelemetrySnapshot } from './control/state.js';
+export { createSiteStateStore } from './control/state.js';
+export { CONTROL_TABLES, ensureControlTables } from './control/tables.js';
+export type { EnrollmentStore, PairingConsumeResult, PairingToken, SiteRegistration, } from './enrollment/store.js';
+export { createEnrollmentStore } from './enrollment/store.js';
+export { ensureFleetTables, FLEET_TABLES } from './enrollment/tables.js';
+export { generatePairingToken, hashPairingToken } from './enrollment/tokens.js';
+export type { DriftDirection, DriftEntry, FleetBaseline, InventoryComponent, InventoryComponentKind, SiteInventory, } from './inventory/drift.js';
+export { computeFleetBaseline, detectDrift, extractInventory } from './inventory/drift.js';
+export type { ClientReport, ReportField } from './reporting/report.js';
+export { assembleClientReport, renderClientReport } from './reporting/report.js';
+export type { ReportScheduleStore } from './reporting/schedule.js';
+export { createReportScheduleStore, isReportDue } from './reporting/schedule.js';
+export { ensureReportingTables, REPORTING_TABLES } from './reporting/tables.js';
+export type { CampaignRecord, CampaignStatus, CampaignWave, CampaignWaveLabel, RolloutCampaignStore, SiteRolloutRecord, SiteRolloutStatus, StartCampaignInput, } from './rollout/campaign.js';
+export { createRolloutCampaignStore, orderSitesForCanary, planWaves, } from './rollout/campaign.js';
+export type { RollbackCandidate } from './rollout/rollback.js';
+export { listRollbackCandidates, triggerRollback } from './rollout/rollback.js';
+export { ensureRolloutTables, ROLLOUT_TABLES } from './rollout/tables.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAC1E,YAAY,EACV,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC9E,YAAY,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AACzE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAChF,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,aAAa,EACb,wBAAwB,EACxB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,aAAa,EACb,UAAU,GACX,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACpE,YAAY,EACV,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AACtF,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAA;AACpE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACpF,OAAO,EACL,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzE,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,GACjB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC/E,YAAY,EACV,cAAc,EACd,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,GACd,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC1F,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAChF,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAClE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAChF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC/E,YAAY,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,SAAS,GACV,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC/E,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/index.js

@@ -0,0 +1,25 @@
+export { assertNoForbiddenFields } from './agent/assert.js';
+export { fingerprintSbom, summarizeAdminAccounts } from './agent/build.js';
+export { dispatchFleetCommand, verifyFleetCommand } from './agent/commands.js';
+export { createRollbackIntentHandler } from './agent/rollback-handler.js';
+export { signTelemetryPayload, verifyTelemetrySignature } from './agent/sign.js';
+export { detectCampaignHaltedAlert, detectCriticalRiskAlert, detectSiteSilentAlert, dispatchAlert, raiseIfNew, } from './alerts/alerts.js';
+export { createAlertConditionStore } from './alerts/conditions.js';
+export { ALERT_TABLES, ensureAlertTables } from './alerts/tables.js';
+export { createCommandQueueStore, FLEET_COMMAND_ACTIONS } from './control/commands.js';
+export { generateControlPlaneIdentity } from './control/identity.js';
+export { ingestTelemetry } from './control/ingest.js';
+export { computeSiteRisk, filterRisks, groupRisksByClient, rankSitesByRisk, } from './control/risk.js';
+export { createSiteStateStore } from './control/state.js';
+export { CONTROL_TABLES, ensureControlTables } from './control/tables.js';
+export { createEnrollmentStore } from './enrollment/store.js';
+export { ensureFleetTables, FLEET_TABLES } from './enrollment/tables.js';
+export { generatePairingToken, hashPairingToken } from './enrollment/tokens.js';
+export { computeFleetBaseline, detectDrift, extractInventory } from './inventory/drift.js';
+export { assembleClientReport, renderClientReport } from './reporting/report.js';
+export { createReportScheduleStore, isReportDue } from './reporting/schedule.js';
+export { ensureReportingTables, REPORTING_TABLES } from './reporting/tables.js';
+export { createRolloutCampaignStore, orderSitesForCanary, planWaves, } from './rollout/campaign.js';
+export { listRollbackCandidates, triggerRollback } from './rollout/rollback.js';
+export { ensureRolloutTables, ROLLOUT_TABLES } from './rollout/tables.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAM1E,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAE9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AAEzE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAA;AAYhF,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,aAAa,EACb,UAAU,GACX,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAOpE,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAEtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAA;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAErD,OAAO,EACL,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAOzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAS/E,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAE1F,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAEhF,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAChF,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAW/E,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,SAAS,GACV,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC/E,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA"}

package/dist/inventory/drift.d.ts

@@ -0,0 +1,73 @@
+import type { TelemetrySnapshot } from '../control/state.js';
+/**
+ * Kind of a version-bearing component a site reports. `cms` is its own kind
+ * (not a plugin/theme) even though today it is honestly `null` for every
+ * real site — no meaningful "Cogenta CMS version" exists anywhere in this
+ * codebase yet (pre-alpha; root `package.json` carries no `version` field,
+ * `@cogenta/plugins`' own `loadPlugin` documents the identical gap for
+ * `engineCompatible`). The `cms` component is included in the SHAPE so a
+ * later, real Cogenta version scheme slots in without a breaking change to
+ * this module's output — but a `null` `cms` version is never treated as
+ * "drifted" against anything (see `computeFleetBaseline`/`detectDrift`
+ * below: a component with no real version anywhere in the fleet has no
+ * baseline and produces no drift entries, honestly, rather than a fabricated
+ * "0.0.0 vs 0.0.0, no drift" result).
+ */
+export type InventoryComponentKind = 'cms' | 'plugin' | 'theme';
+export interface InventoryComponent {
+    readonly kind: InventoryComponentKind;
+    /** The component's own name — `"cms"` for the kind `cms`, a plugin/theme's real name otherwise. */
+    readonly name: string;
+    readonly version: string;
+}
+export interface SiteInventory {
+    readonly siteId: string;
+    /** When this inventory was collected — the site's own real `collectedAt`, not the ingestion time. */
+    readonly collectedAt: string;
+    readonly components: readonly InventoryComponent[];
+}
+/**
+ * Real inventory extraction from a real, already-verified telemetry
+ * snapshot (`../control/state.js`'s `SiteStateStore`) — no new data source,
+ * just a flatter, component-oriented view of `TelemetryPayload.installedVersions`
+ * for the drift-comparison logic below to work over uniformly (cms/plugin/theme
+ * treated the same shape, rather than three separately-typed lists).
+ */
+export declare function extractInventory(snapshot: TelemetrySnapshot): SiteInventory;
+export interface FleetBaseline {
+    /** The expected/most-common version per real component key (`"plugin:my-plugin"`), computed from what the fleet actually reports — never hardcoded. */
+    readonly expectedVersion: ReadonlyMap<string, string>;
+}
+/**
+ * "Dérive" implies a baseline to drift FROM. The real, honestly-computable
+ * baseline today: the most common (mode) version of each component across
+ * the currently-known fleet. A tie is broken by the lexicographically
+ * greatest raw version string — an arbitrary but deterministic, real
+ * tie-break (not "first seen," which would depend on iteration order and
+ * make the baseline non-reproducible for the same inventory set).
+ */
+export declare function computeFleetBaseline(inventories: readonly SiteInventory[]): FleetBaseline;
+export type DriftDirection = 'behind' | 'ahead' | 'different';
+export interface DriftEntry {
+    readonly siteId: string;
+    readonly componentKind: InventoryComponentKind;
+    readonly componentName: string;
+    readonly version: string;
+    readonly expectedVersion: string;
+    /**
+     * `behind`/`ahead` when both the site's and the fleet's version parse as
+     * real semver (`@cogenta/plugins`'s real, already-tested comparator,
+     * reused rather than reimplemented) — `different` when they don't (a raw
+     * string mismatch is still real, reportable drift, it just can't be
+     * ordered without a parseable version on both sides).
+     */
+    readonly direction: DriftDirection;
+}
+/**
+ * Compares every site's real inventory against the real fleet baseline and
+ * reports every component whose version differs — a site agreeing with the
+ * baseline on every component produces no entries for it, honestly (no
+ * "0 drift" placeholder row).
+ */
+export declare function detectDrift(inventories: readonly SiteInventory[], baseline: FleetBaseline): readonly DriftEntry[];
+//# sourceMappingURL=drift.d.ts.map

package/dist/inventory/drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift.d.ts","sourceRoot":"","sources":["../../src/inventory/drift.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAE5D;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE/D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;IACrC,mGAAmG;IACnG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,qGAAqG;IACrG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAA;CACnD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,aAAa,CAS3E;AAOD,MAAM,WAAW,aAAa;IAC5B,uJAAuJ;IACvJ,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACtD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,GAAG,aAAa,CA6BzF;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAA;AAE7D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAA;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,WAAW,EAAE,SAAS,aAAa,EAAE,EACrC,QAAQ,EAAE,aAAa,GACtB,SAAS,UAAU,EAAE,CA8BvB"}

package/dist/inventory/drift.js

@@ -0,0 +1,91 @@
+import { compareVersions, parseVersion } from '@cogenta/plugins';
+/**
+ * Real inventory extraction from a real, already-verified telemetry
+ * snapshot (`../control/state.js`'s `SiteStateStore`) — no new data source,
+ * just a flatter, component-oriented view of `TelemetryPayload.installedVersions`
+ * for the drift-comparison logic below to work over uniformly (cms/plugin/theme
+ * treated the same shape, rather than three separately-typed lists).
+ */
+export function extractInventory(snapshot) {
+    const { cms, plugins, themes } = snapshot.payload.installedVersions;
+    const components = [];
+    if (cms !== null)
+        components.push({ kind: 'cms', name: 'cms', version: cms });
+    for (const plugin of plugins)
+        components.push({ kind: 'plugin', name: plugin.name, version: plugin.version });
+    for (const theme of themes)
+        components.push({ kind: 'theme', name: theme.name, version: theme.version });
+    return { siteId: snapshot.siteId, collectedAt: snapshot.collectedAt, components };
+}
+/** Identifies one real component across the fleet, independent of which site reports it. */
+function componentKey(kind, name) {
+    return `${kind}:${name}`;
+}
+/**
+ * "Dérive" implies a baseline to drift FROM. The real, honestly-computable
+ * baseline today: the most common (mode) version of each component across
+ * the currently-known fleet. A tie is broken by the lexicographically
+ * greatest raw version string — an arbitrary but deterministic, real
+ * tie-break (not "first seen," which would depend on iteration order and
+ * make the baseline non-reproducible for the same inventory set).
+ */
+export function computeFleetBaseline(inventories) {
+    const counts = new Map();
+    for (const inventory of inventories) {
+        for (const component of inventory.components) {
+            const key = componentKey(component.kind, component.name);
+            const perVersion = counts.get(key) ?? new Map();
+            perVersion.set(component.version, (perVersion.get(component.version) ?? 0) + 1);
+            counts.set(key, perVersion);
+        }
+    }
+    const expectedVersion = new Map();
+    for (const [key, perVersion] of counts) {
+        let bestVersion;
+        let bestCount = -1;
+        for (const [version, count] of perVersion) {
+            if (count > bestCount ||
+                (count === bestCount && bestVersion !== undefined && version > bestVersion)) {
+                bestVersion = version;
+                bestCount = count;
+            }
+        }
+        if (bestVersion !== undefined)
+            expectedVersion.set(key, bestVersion);
+    }
+    return { expectedVersion };
+}
+/**
+ * Compares every site's real inventory against the real fleet baseline and
+ * reports every component whose version differs — a site agreeing with the
+ * baseline on every component produces no entries for it, honestly (no
+ * "0 drift" placeholder row).
+ */
+export function detectDrift(inventories, baseline) {
+    const entries = [];
+    for (const inventory of inventories) {
+        for (const component of inventory.components) {
+            const key = componentKey(component.kind, component.name);
+            const expected = baseline.expectedVersion.get(key);
+            if (expected === undefined || expected === component.version)
+                continue;
+            const siteVersion = parseVersion(component.version);
+            const expectedParsed = parseVersion(expected);
+            const direction = siteVersion === null || expectedParsed === null
+                ? 'different'
+                : compareVersions(siteVersion, expectedParsed) < 0
+                    ? 'behind'
+                    : 'ahead';
+            entries.push({
+                siteId: inventory.siteId,
+                componentKind: component.kind,
+                componentName: component.name,
+                version: component.version,
+                expectedVersion: expected,
+                direction,
+            });
+        }
+    }
+    return entries;
+}
+//# sourceMappingURL=drift.js.map

package/dist/inventory/drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift.js","sourceRoot":"","sources":["../../src/inventory/drift.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAiChE;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA2B;IAC1D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAA;IACnE,MAAM,UAAU,GAAyB,EAAE,CAAA;IAC3C,IAAI,GAAG,KAAK,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7E,KAAK,MAAM,MAAM,IAAI,OAAO;QAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IACjF,KAAK,MAAM,KAAK,IAAI,MAAM;QACxB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IAC9E,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,CAAA;AACnF,CAAC;AAED,4FAA4F;AAC5F,SAAS,YAAY,CAAC,IAA4B,EAAE,IAAY;IAC9D,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAA;AAC1B,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAqC;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAA;IAErD,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAA;YAC/D,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/E,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAA;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,WAA+B,CAAA;QACnC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAA;QAClB,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;YAC1C,IACE,KAAK,GAAG,SAAS;gBACjB,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,GAAG,WAAW,CAAC,EAC3E,CAAC;gBACD,WAAW,GAAG,OAAO,CAAA;gBACrB,SAAS,GAAG,KAAK,CAAA;YACnB,CAAC;QACH,CAAC;QACD,IAAI,WAAW,KAAK,SAAS;YAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,CAAA;AAC5B,CAAC;AAoBD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,WAAqC,EACrC,QAAuB;IAEvB,MAAM,OAAO,GAAiB,EAAE,CAAA;IAEhC,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,CAAC,OAAO;gBAAE,SAAQ;YAEtE,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;YAC7C,MAAM,SAAS,GACb,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;gBAC7C,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC;oBAChD,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,OAAO,CAAA;YAEf,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,eAAe,EAAE,QAAQ;gBACzB,SAAS;aACV,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/reporting/report.d.ts

@@ -0,0 +1,65 @@
+import type { CruxMetrics, Urgency } from '@cogenta/agents-builtin';
+import type { ReportChannelMessage } from '@cogenta/channels';
+import type { TelemetrySnapshot } from '../control/state.js';
+import type { SiteRegistration } from '../enrollment/store.js';
+import type { DriftEntry } from '../inventory/drift.js';
+/**
+ * "## Rapports client" (`docs/lots/L8-flotte.md`): "Un rapport mensuel par
+ * site... C'est un livrable commercial pour l'agence, pas un tableau
+ * technique. Le format doit pouvoir être lu par le client final."
+ *
+ * A field the lot names but for which no real data source exists anywhere
+ * in this codebase yet (`available: false`) is never fabricated — the whole
+ * point of this shape is that a caller CANNOT accidentally read a plausible
+ * number out of an unavailable field, the same "structural honesty" `../agent/types.js`'s
+ * `TelemetryPayload` already applies to what a site reports upstream.
+ */
+export type ReportField<T> = {
+    readonly available: true;
+    readonly value: T;
+} | {
+    readonly available: false;
+};
+export interface ClientReport {
+    readonly siteId: string;
+    readonly siteName: string;
+    readonly client: string | null;
+    readonly generatedAt: string;
+    /** Real when `../agent/types.js`'s `AvailabilitySummary.uptimeRatio` is non-null; `../agent/types.js` itself documents no real uptime monitor exists yet, so this is honestly `available: false` for every site today. */
+    readonly availability: ReportField<number>;
+    /** Real, always — `TelemetryPayload.openCves`, the security agent's real OSV/EPSS pipeline (tasks 2/5). Never `available: false`: an empty list is itself the real, reportable "no known incidents" answer, not an unavailable field. */
+    readonly securityIncidents: readonly {
+        readonly urgency: Urgency;
+        readonly status: 'open' | 'patched' | 'ignored';
+    }[];
+    /** Real when the performance agent's CrUX pipeline has field data for this site (`../agent/types.js`'s own `null` case: not enough real-user traffic, not an error); `available: false` only when no telemetry has ever been received at all. */
+    readonly performance: ReportField<CruxMetrics>;
+    /** No real "content published" count exists anywhere in `TelemetryPayload` or any other fleet-visible signal — the lot's own absolute "aucune donnée de contenu ne remonte" rule means this could only ever be a real operational COUNT, and no such count is collected today. Always `available: false`, honestly, never estimated. */
+    readonly publishedContent: ReportField<number>;
+    /** No live `AgentRegistry` exists anywhere in this codebase (R2-honest finding, repeated across L5/L7/L9/L8) — a site's own AI agents' actions have no real fleet-visible signal to report. Always `available: false`. */
+    readonly agentActions: ReportField<number>;
+    /** Real when `AvailabilitySummary`'s sibling `BackupSummary.lastResult` is not `'unknown'` — `../agent/types.js` documents no real backup mechanism exists yet, so this is honestly `available: false` for every site today. */
+    readonly backups: ReportField<{
+        readonly at: string;
+        readonly result: 'success' | 'failure';
+    }>;
+    /** Real — every component (`../inventory/drift.js`'s `DriftEntry`) this specific site is drifted on, already filtered to `siteId`. Empty is itself the real "up to date with the fleet" answer. */
+    readonly versionDrift: readonly DriftEntry[];
+}
+/**
+ * Real assembly from real, already-verified fleet data (tasks 3/4/5's real
+ * stores) — no new data source, a commercial-report-shaped view over what
+ * already exists. `driftEntries` is the FULL fleet's drift list (as
+ * `../inventory/drift.js`'s `detectDrift` returns it) — filtered here to
+ * this one site, never a caller's job to pre-filter.
+ */
+export declare function assembleClientReport(site: SiteRegistration, snapshot: TelemetrySnapshot | null, driftEntries: readonly DriftEntry[], now?: () => number): ClientReport;
+/**
+ * Plain-language French, never a raw technical identifier or a metric
+ * without a sentence around it — the literal acceptance criterion ("un
+ * rapport client est compréhensible par un non-technicien"), tested the
+ * same way L7's `describeCapability` proved it: no bare CVE id, no raw
+ * percentile number with nothing to say what it means.
+ */
+export declare function renderClientReport(report: ClientReport): ReportChannelMessage;
+//# sourceMappingURL=report.d.ts.map

package/dist/reporting/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/reporting/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEvD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,IACrB;IAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAA;CAAE,CAAA;AAQjC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,0NAA0N;IAC1N,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,yOAAyO;IACzO,QAAQ,CAAC,iBAAiB,EAAE,SAAS;QACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;KAChD,EAAE,CAAA;IACH,iPAAiP;IACjP,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,CAAA;IAC9C,wUAAwU;IACxU,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC9C,0NAA0N;IAC1N,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,gOAAgO;IAChO,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC,CAAA;IAC9F,mMAAmM;IACnM,QAAQ,CAAC,YAAY,EAAE,SAAS,UAAU,EAAE,CAAA;CAC7C;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAClC,YAAY,EAAE,SAAS,UAAU,EAAE,EACnC,GAAG,GAAE,MAAM,MAAiB,GAC3B,YAAY,CAiDd;AAeD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,oBAAoB,CAkE7E"}

package/dist/reporting/report.js

@@ -0,0 +1,137 @@
+import { buildReport } from '@cogenta/channels';
+function available(value) {
+    return { available: true, value };
+}
+const unavailable = { available: false };
+/**
+ * Real assembly from real, already-verified fleet data (tasks 3/4/5's real
+ * stores) — no new data source, a commercial-report-shaped view over what
+ * already exists. `driftEntries` is the FULL fleet's drift list (as
+ * `../inventory/drift.js`'s `detectDrift` returns it) — filtered here to
+ * this one site, never a caller's job to pre-filter.
+ */
+export function assembleClientReport(site, snapshot, driftEntries, now = Date.now) {
+    const siteDrift = driftEntries.filter((entry) => entry.siteId === site.id);
+    if (snapshot === null) {
+        return {
+            siteId: site.id,
+            siteName: site.name,
+            client: site.client,
+            generatedAt: new Date(now()).toISOString(),
+            availability: unavailable,
+            securityIncidents: [],
+            performance: unavailable,
+            publishedContent: unavailable,
+            agentActions: unavailable,
+            backups: unavailable,
+            versionDrift: siteDrift,
+        };
+    }
+    const { payload } = snapshot;
+    const availability = payload.availability.uptimeRatio === null
+        ? unavailable
+        : available(payload.availability.uptimeRatio);
+    const performance = payload.coreWebVitalsAggregate === null
+        ? unavailable
+        : available(payload.coreWebVitalsAggregate);
+    const backups = payload.backups.lastResult === 'unknown' || payload.backups.lastBackupAt === null
+        ? unavailable
+        : available({ at: payload.backups.lastBackupAt, result: payload.backups.lastResult });
+    return {
+        siteId: site.id,
+        siteName: site.name,
+        client: site.client,
+        generatedAt: new Date(now()).toISOString(),
+        availability,
+        securityIncidents: payload.openCves.map((cve) => ({
+            urgency: cve.urgency,
+            status: cve.status,
+        })),
+        performance,
+        publishedContent: unavailable,
+        agentActions: unavailable,
+        backups,
+        versionDrift: siteDrift,
+    };
+}
+const URGENCY_FR = {
+    critical: 'critique',
+    high: 'élevée',
+    medium: 'moyenne',
+    low: 'faible',
+};
+const STATUS_FR = {
+    open: 'toujours ouverte',
+    patched: 'corrigée',
+    ignored: 'écartée après analyse',
+};
+/**
+ * Plain-language French, never a raw technical identifier or a metric
+ * without a sentence around it — the literal acceptance criterion ("un
+ * rapport client est compréhensible par un non-technicien"), tested the
+ * same way L7's `describeCapability` proved it: no bare CVE id, no raw
+ * percentile number with nothing to say what it means.
+ */
+export function renderClientReport(report) {
+    const openCount = report.securityIncidents.filter((cve) => cve.status === 'open').length;
+    const criticalOpen = report.securityIncidents.some((cve) => cve.status === 'open' && cve.urgency === 'critical');
+    const keyFigures = [
+        {
+            label: 'Sécurité',
+            value: openCount === 0
+                ? 'Aucune faille connue en attente'
+                : `${openCount} faille${openCount > 1 ? 's' : ''} de sécurité en attente de correction${criticalOpen ? ' (dont au moins une critique)' : ''}`,
+        },
+        {
+            label: 'Mise à jour',
+            value: report.versionDrift.length === 0
+                ? 'Le site est à jour avec le reste de la flotte'
+                : `${report.versionDrift.length} composant${report.versionDrift.length > 1 ? 's' : ''} à mettre à jour`,
+        },
+    ];
+    const sections = [];
+    sections.push({
+        heading: 'Sécurité',
+        body: report.securityIncidents.length === 0
+            ? 'Aucun incident connu.'
+            : report.securityIncidents
+                .map((cve) => `Faille ${URGENCY_FR[cve.urgency]}, ${STATUS_FR[cve.status]}.`)
+                .join(' '),
+    });
+    sections.push({
+        heading: 'Performances',
+        body: report.performance.available
+            ? describePerformance(report.performance.value)
+            : 'Pas encore assez de visites pour mesurer la rapidité.',
+    });
+    sections.push({
+        heading: 'Disponibilité',
+        body: report.availability.available
+            ? `Répond ${Math.round(report.availability.value * 100)}% du temps.`
+            : 'Suivi pas encore activé.',
+    });
+    sections.push({
+        heading: 'Sauvegardes',
+        body: report.backups.available
+            ? `Dernière sauvegarde le ${new Date(report.backups.value.at).toLocaleDateString('fr-FR')} — ${report.backups.value.result === 'success' ? 'réussie' : 'échouée'}.`
+            : 'Pas encore de suivi automatique.',
+    });
+    sections.push({
+        heading: 'Contenu et agents',
+        body: 'Pas encore disponible dans ce rapport.',
+    });
+    return buildReport({
+        title: `Rapport mensuel — ${report.siteName}`,
+        keyFigures,
+        sections,
+    });
+}
+function describePerformance(metrics) {
+    if (metrics.lcpP75Ms === undefined) {
+        return 'Des données de performance existent mais restent incomplètes pour ce site sur la période.';
+    }
+    const seconds = (metrics.lcpP75Ms / 1000).toFixed(1);
+    const feel = metrics.lcpP75Ms <= 2500 ? 'rapide' : metrics.lcpP75Ms <= 4000 ? 'correcte' : 'lente';
+    return `Le site met en moyenne ${seconds} seconde${Number(seconds) > 1 ? 's' : ''} à afficher son contenu principal pour un visiteur — une vitesse jugée ${feel}.`;
+}
+//# sourceMappingURL=report.js.map

package/dist/reporting/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/reporting/report.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAqD,MAAM,mBAAmB,CAAA;AAoBlG,SAAS,SAAS,CAAI,KAAQ;IAC5B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AACnC,CAAC;AAED,MAAM,WAAW,GAAuB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AA0B5D;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAsB,EACtB,QAAkC,EAClC,YAAmC,EACnC,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,CAAA;IAE1E,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC1C,YAAY,EAAE,WAAW;YACzB,iBAAiB,EAAE,EAAE;YACrB,WAAW,EAAE,WAAW;YACxB,gBAAgB,EAAE,WAAW;YAC7B,YAAY,EAAE,WAAW;YACzB,OAAO,EAAE,WAAW;YACpB,YAAY,EAAE,SAAS;SACxB,CAAA;IACH,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAA;IAC5B,MAAM,YAAY,GAChB,OAAO,CAAC,YAAY,CAAC,WAAW,KAAK,IAAI;QACvC,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;IACjD,MAAM,WAAW,GACf,OAAO,CAAC,sBAAsB,KAAK,IAAI;QACrC,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC/C,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI;QAC/E,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAEzF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QAC1C,YAAY;QACZ,iBAAiB,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;QACH,WAAW;QACX,gBAAgB,EAAE,WAAW;QAC7B,YAAY,EAAE,WAAW;QACzB,OAAO;QACP,YAAY,EAAE,SAAS;KACxB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,GAA4B;IAC1C,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,QAAQ;CACd,CAAA;AAED,MAAM,SAAS,GAAmD;IAChE,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,uBAAuB;CACjC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAA;IACxF,MAAM,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAChD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,UAAU,CAC7D,CAAA;IAED,MAAM,UAAU,GAAuB;QACrC;YACE,KAAK,EAAE,UAAU;YACjB,KAAK,EACH,SAAS,KAAK,CAAC;gBACb,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,GAAG,SAAS,UAAU,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,wCAAwC,YAAY,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAAE,EAAE;SAClJ;QACD;YACE,KAAK,EAAE,aAAa;YACpB,KAAK,EACH,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;gBAC9B,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,aAAa,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB;SAC5G;KACF,CAAA;IAED,MAAM,QAAQ,GAA4B,EAAE,CAAA;IAE5C,QAAQ,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,UAAU;QACnB,IAAI,EACF,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;YACnC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,MAAM,CAAC,iBAAiB;iBACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC5E,IAAI,CAAC,GAAG,CAAC;KACnB,CAAC,CAAA;IAEF,QAAQ,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS;YAChC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;YAC/C,CAAC,CAAC,uDAAuD;KAC5D,CAAC,CAAA;IAEF,QAAQ,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS;YACjC,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,GAAG,GAAG,CAAC,aAAa;YACpE,CAAC,CAAC,0BAA0B;KAC/B,CAAC,CAAA;IAEF,QAAQ,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YAC5B,CAAC,CAAC,0BAA0B,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG;YACnK,CAAC,CAAC,kCAAkC;KACvC,CAAC,CAAA;IAEF,QAAQ,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,wCAAwC;KAC/C,CAAC,CAAA;IAEF,OAAO,WAAW,CAAC;QACjB,KAAK,EAAE,qBAAqB,MAAM,CAAC,QAAQ,EAAE;QAC7C,UAAU;QACV,QAAQ;KACT,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAoB;IAC/C,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,2FAA2F,CAAA;IACpG,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAA;IAClG,OAAO,0BAA0B,OAAO,WAAW,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,0EAA0E,IAAI,GAAG,CAAA;AACpK,CAAC"}

package/dist/reporting/schedule.d.ts

@@ -0,0 +1,10 @@
+import { type DatabaseHandle } from '@cogenta/core';
+export declare function isReportDue(lastSentAt: string | null, now?: () => number): boolean;
+export interface ReportScheduleStore {
+    /** `null` if no report has ever been recorded as sent for this site. */
+    lastSentAt(siteId: string): Promise<string | null>;
+    /** Records that a report was sent for `siteId` at `now()` — real, idempotent (a later call simply overwrites the prior timestamp). */
+    recordSent(siteId: string, now?: () => number): Promise<void>;
+}
+export declare function createReportScheduleStore(db: DatabaseHandle): ReportScheduleStore;
+//# sourceMappingURL=schedule.d.ts.map

package/dist/reporting/schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../src/reporting/schedule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAmB,MAAM,eAAe,CAAA;AAepE,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,OAAO,CAI5F;AAED,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAClD,sIAAsI;IACtI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9D;AAOD,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,mBAAmB,CAmBjF"}

package/dist/reporting/schedule.js

@@ -0,0 +1,34 @@
+import { identifier, sql } from '@cogenta/core';
+import { REPORTING_TABLES } from './tables.js';
+/**
+ * "Un rapport mensuel par site... planifiés" (`docs/lots/L8-flotte.md`).
+ * This is the real due/not-due computation only — no live cron/scheduler is
+ * wired anywhere in this codebase (the same honest "no live control-plane
+ * deployment exists" scoping every other L8 task has made); a real
+ * deployment calls `isReportDue` from whatever real scheduling mechanism it
+ * has, the same way `packages/create-cogenta/src/playground-reset.ts`
+ * (L9 task 12) is a real, callable function with no live cron wired to it
+ * either.
+ */
+const REPORT_INTERVAL_DAYS = 30;
+export function isReportDue(lastSentAt, now = Date.now) {
+    if (lastSentAt === null)
+        return true;
+    const elapsedMs = now() - new Date(lastSentAt).getTime();
+    return elapsedMs >= REPORT_INTERVAL_DAYS * 24 * 60 * 60 * 1000;
+}
+export function createReportScheduleStore(db) {
+    const table = identifier(REPORTING_TABLES.schedule, db.dialect);
+    return {
+        async lastSentAt(siteId) {
+            const result = await db.query(sql `select site_id, last_sent_at from ${table} where site_id = ${siteId}`);
+            return result.rows[0]?.last_sent_at ?? null;
+        },
+        async recordSent(siteId, now = Date.now) {
+            const sentAt = new Date(now()).toISOString();
+            await db.query(sql `delete from ${table} where site_id = ${siteId}`);
+            await db.query(sql `insert into ${table} (site_id, last_sent_at) values (${siteId}, ${sentAt})`);
+        },
+    };
+}
+//# sourceMappingURL=schedule.js.map

package/dist/reporting/schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.js","sourceRoot":"","sources":["../../src/reporting/schedule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAG,EAAE,CAAA;AAE/B,MAAM,UAAU,WAAW,CAAC,UAAyB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IACjF,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACpC,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAA;IACxD,OAAO,SAAS,IAAI,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAChE,CAAC;AAcD,MAAM,UAAU,yBAAyB,CAAC,EAAkB;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAE/D,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,MAAM;YACrB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,qCAAqC,KAAK,oBAAoB,MAAM,EAAE,CAC1E,CAAA;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI,CAAA;QAC7C,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG;YACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,oBAAoB,MAAM,EAAE,CAAC,CAAA;YACnE,MAAM,EAAE,CAAC,KAAK,CACZ,GAAG,CAAA,eAAe,KAAK,oCAAoC,MAAM,KAAK,MAAM,GAAG,CAChF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/reporting/tables.d.ts

@@ -0,0 +1,11 @@
+import { type DatabaseHandle } from '@cogenta/core';
+export declare const REPORTING_TABLES: {
+    readonly schedule: 'cogenta_fleet_report_schedule';
+};
+/**
+ * Same `create table if not exists` pattern as `../control/tables.ts` — one
+ * row per site's last-sent report timestamp, strictly per-site (no query
+ * shape here spans more than one site's row at once).
+ */
+export declare function ensureReportingTables(db: DatabaseHandle): Promise<void>;
+//# sourceMappingURL=tables.d.ts.map

package/dist/reporting/tables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../src/reporting/tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,eAAe,CAAA;AAEtB,eAAO,MAAM,gBAAgB;aAC3B,QAAQ,EAAE,+BAA+B;CACjC,CAAA;AAMV;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ7E"}

package/dist/reporting/tables.js

@@ -0,0 +1,22 @@
+import { identifier, sql, unsafeRaw, } from '@cogenta/core';
+export const REPORTING_TABLES = {
+    schedule: 'cogenta_fleet_report_schedule',
+};
+function textColumn(dialect, length) {
+    return unsafeRaw(dialect === 'sqlite' ? 'text' : `varchar(${length})`);
+}
+/**
+ * Same `create table if not exists` pattern as `../control/tables.ts` — one
+ * row per site's last-sent report timestamp, strictly per-site (no query
+ * shape here spans more than one site's row at once).
+ */
+export async function ensureReportingTables(db) {
+    const t255 = textColumn(db.dialect, 255);
+    const schedule = identifier(REPORTING_TABLES.schedule, db.dialect);
+    await db.query(sql `
+    create table if not exists ${schedule} (
+      site_id ${t255} not null primary key,
+      last_sent_at ${t255} not null
+    )`);
+}
+//# sourceMappingURL=tables.js.map

package/dist/reporting/tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../src/reporting/tables.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,UAAU,EAEV,GAAG,EACH,SAAS,GACV,MAAM,eAAe,CAAA;AAEtB,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,+BAA+B;CACjC,CAAA;AAEV,SAAS,UAAU,CAAC,OAAwB,EAAE,MAAc;IAC1D,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,GAAG,CAAC,CAAA;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAkB;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAClE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iCACa,QAAQ;gBACzB,IAAI;qBACC,IAAI;MACnB,CAAC,CAAA;AACP,CAAC"}