@prenta/core 5.5.0 → 5.7.0

package/dist/seo/autopilot-outcome.js

@@ -0,0 +1,206 @@
+import { AUTOPILOT_OUTCOME_LAG_DAYS, isAutopilotIssueType, } from './autopilot-policy.js';
+import { startOfDayUTC } from './autopilot-ledger.js';
+import { revertSeoAutoApply } from './autopilot-revert.js';
+/** Upper bound on ledger rows judged per cron tick. */
+export const OUTCOME_MAX_PER_TICK = 50;
+/** A regression whose revert keeps throwing is requeued at most this many times. */
+export const OUTCOME_MAX_REVERT_ATTEMPTS = 3;
+const DAY_MS = 24 * 60 * 60 * 1000;
+/** Absorbs float error in `prior × (1 − dropRatio)` (e.g. 50 × 0.2 = 9.999…). */
+const RATIO_EPSILON = 1e-9;
+/**
+ * Pure judgement. A zero `prior` (no ratio to take) or one below the floor is
+ * not enough signal; otherwise a fall to or below `prior × (1 − dropRatio)` is
+ * a regression.
+ */
+export function evaluateOutcome(prior, after, watch) {
+    if (prior <= 0 || prior < watch.minPriorClicks)
+        return 'insufficient_data';
+    if (after <= prior * (1 - watch.dropRatio) + RATIO_EPSILON)
+        return 'regressed';
+    return 'held';
+}
+async function sumClicks(db, path, from, to) {
+    const agg = await db.searchPerfDaily.aggregate({
+        where: { path, date: { gte: from, lte: to } },
+        _sum: { clicks: true },
+    });
+    return agg._sum.clicks ?? 0;
+}
+function isoDay(d) {
+    return d.toISOString().slice(0, 10);
+}
+/** `revertAttempts` recorded on the row by a previous tick, if any. */
+function priorRevertAttempts(metrics) {
+    if (metrics && typeof metrics === 'object' && !Array.isArray(metrics)) {
+        const v = metrics.revertAttempts;
+        if (typeof v === 'number' && Number.isInteger(v) && v > 0)
+            return v;
+    }
+    return 0;
+}
+/**
+ * Judge every due, still-pending issue fix (oldest first, capped per tick).
+ * Due = applied at least `days + AUTOPILOT_OUTCOME_LAG_DAYS` ago *and* GSC data
+ * synced through the end of the after window. Prior window: `days` days ending
+ * the day before apply. After window: `days` days starting the day after apply.
+ *
+ * A regression reverts the row with reason `outcome_regression` (never
+ * forced — a human edit since is a conflict) and requests a pause of that
+ * issue type via `pausedTypes`; the caller persists the pause on the policy.
+ * A revert that throws is logged, counted in `revertErrors`, and the row is
+ * put back to `pending` (with `outcomeMetrics.revertAttempts`) so the next
+ * tick retries — up to `OUTCOME_MAX_REVERT_ATTEMPTS`, after which it stays
+ * `regressed` for a manual revert. The tick continues with the next row.
+ *
+ * The pause is decided (and `onPause` fired) before the revert is attempted,
+ * so a revert that throws — or a process killed mid-revert — never loses the
+ * breaker. `opts.deadline` bounds the wall clock: rows not reached stay
+ * `pending` and are judged next tick.
+ */
+export async function runOutcomeWatch(db, policy, opts) {
+    const result = {
+        evaluated: 0,
+        held: 0,
+        regressed: 0,
+        reverted: 0,
+        insufficient: 0,
+        conflicts: 0,
+        revertErrors: 0,
+        notReady: 0,
+        deadlineHit: false,
+        pausedTypes: {},
+    };
+    const watch = policy.outcomeWatch;
+    if (!watch.enabled)
+        return result;
+    const clock = opts.clock ?? Date.now;
+    const pastDeadline = () => opts.deadline !== undefined && clock() >= opts.deadline;
+    const newest = await db.searchPerfDaily.findFirst({
+        orderBy: { date: 'desc' },
+        select: { date: true },
+    });
+    if (!newest)
+        return result;
+    const revert = opts.revert ?? revertSeoAutoApply;
+    const dueBefore = new Date(opts.now.getTime() - (watch.days + AUTOPILOT_OUTCOME_LAG_DAYS) * DAY_MS);
+    const rows = await db.seoAutoApply.findMany({
+        where: {
+            kind: 'issue-fix',
+            status: 'applied',
+            outcome: 'pending',
+            appliedAt: { lte: dueBefore },
+        },
+        orderBy: { appliedAt: 'asc' },
+        take: OUTCOME_MAX_PER_TICK,
+    });
+    for (const row of rows) {
+        if (pastDeadline()) {
+            result.deadlineHit = true;
+            break;
+        }
+        // Rows are recorded `skipped` when path is null, but tolerate a stray one.
+        if (!row.path)
+            continue;
+        const day = startOfDayUTC(row.appliedAt);
+        const priorFrom = new Date(day.getTime() - watch.days * DAY_MS);
+        const priorTo = new Date(day.getTime() - DAY_MS);
+        const afterFrom = new Date(day.getTime() + DAY_MS);
+        const afterTo = new Date(day.getTime() + watch.days * DAY_MS);
+        if (afterTo > newest.date) {
+            result.notReady++;
+            continue;
+        }
+        const [prior, after] = await Promise.all([
+            sumClicks(db, row.path, priorFrom, priorTo),
+            sumClicks(db, row.path, afterFrom, afterTo),
+        ]);
+        const judgement = evaluateOutcome(prior, after, watch);
+        result.evaluated++;
+        const dropRatio = prior > 0 ? (prior - after) / prior : 0;
+        const dropPct = Math.round(dropRatio * 100);
+        const previousAttempts = priorRevertAttempts(row.outcomeMetrics);
+        const metrics = {
+            priorClicks: prior,
+            afterClicks: after,
+            dropRatio,
+            windowDays: watch.days,
+            checkedRange: {
+                priorFrom: isoDay(priorFrom),
+                priorTo: isoDay(priorTo),
+                afterFrom: isoDay(afterFrom),
+                afterTo: isoDay(afterTo),
+            },
+            ...(previousAttempts > 0 ? { revertAttempts: previousAttempts } : {}),
+        };
+        await db.seoAutoApply.update({
+            where: { id: row.id },
+            data: { outcome: judgement, outcomeCheckedAt: opts.now, outcomeMetrics: metrics },
+        });
+        switch (judgement) {
+            case 'insufficient_data':
+                result.insufficient++;
+                break;
+            case 'held':
+                result.held++;
+                break;
+            case 'regressed': {
+                result.regressed++;
+                // The regression itself is the signal — pause the type before (and whether
+                // or not) the revert lands, and let the caller persist it right away.
+                if (isAutopilotIssueType(row.issueType)) {
+                    const reason = `Paused ${isoDay(opts.now)}: ${row.path} lost ${dropPct}% clicks after an autopilot change`;
+                    result.pausedTypes[row.issueType] = reason;
+                    if (opts.onPause) {
+                        try {
+                            await opts.onPause(row.issueType, reason);
+                        }
+                        catch (pauseErr) {
+                            console.warn('[seo-autopilot] outcome pause callback failed', {
+                                type: row.issueType,
+                                error: String(pauseErr),
+                            });
+                        }
+                    }
+                }
+                try {
+                    const outcome = await revert(db, row.id, {
+                        actor: opts.actor,
+                        reason: 'outcome_regression',
+                        force: false,
+                    });
+                    if (outcome.status === 'reverted')
+                        result.reverted++;
+                    else if (outcome.status === 'conflict')
+                        result.conflicts++;
+                }
+                catch (err) {
+                    result.revertErrors++;
+                    console.warn('[seo-autopilot] outcome revert failed', { id: row.id, error: String(err) });
+                    const attempts = previousAttempts + 1;
+                    // Requeue so the next tick re-judges and retries; give up after the cap.
+                    const outcome = attempts < OUTCOME_MAX_REVERT_ATTEMPTS ? 'pending' : 'regressed';
+                    try {
+                        await db.seoAutoApply.update({
+                            where: { id: row.id },
+                            data: { outcome, outcomeMetrics: { ...metrics, revertAttempts: attempts } },
+                        });
+                    }
+                    catch (requeueErr) {
+                        console.warn('[seo-autopilot] outcome requeue failed', {
+                            id: row.id,
+                            error: String(requeueErr),
+                        });
+                    }
+                }
+                break;
+            }
+            default: {
+                const exhaustive = judgement;
+                return exhaustive;
+            }
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=autopilot-outcome.js.map

package/dist/seo/autopilot-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-outcome.js","sourceRoot":"","sources":["../../src/seo/autopilot-outcome.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,0BAA0B,EAI1B,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,aAAa,EAA4B,MAAM,uBAAuB,CAAA;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAE1D,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAA;AACtC,oFAAoF;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAA;AAC5C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAClC,iFAAiF;AACjF,MAAM,aAAa,GAAG,IAAI,CAAA;AAO1B;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,KAAa,EACb,KAA4B;IAE5B,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,cAAc;QAAE,OAAO,mBAAmB,CAAA;IAC1E,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,aAAa;QAAE,OAAO,WAAW,CAAA;IAC9E,OAAO,MAAM,CAAA;AACf,CAAC;AA2CD,KAAK,UAAU,SAAS,CAAC,EAAY,EAAE,IAAY,EAAE,IAAU,EAAE,EAAQ;IACvE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;QAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE;QAC7C,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACvB,CAAC,CAAA;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,MAAM,CAAC,CAAO;IACrB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACrC,CAAC;AAED,uEAAuE;AACvE,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,GAAI,OAAmC,CAAC,cAAc,CAAA;QAC7D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAY,EACZ,MAA0B,EAC1B,IAAyB;IAEzB,MAAM,MAAM,GAAuB;QACjC,SAAS,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC;QACP,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;QACf,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,EAAE;KAChB,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAA;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,MAAM,CAAA;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IACpC,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAA;IAE3F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC;QAChD,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;KACvB,CAAC,CAAA;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,kBAAkB,CAAA;IAChD,MAAM,SAAS,GAAG,IAAI,IAAI,CACxB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,0BAA0B,CAAC,GAAG,MAAM,CACxE,CAAA;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;QAC1C,KAAK,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;SAC9B;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QAC7B,IAAI,EAAE,oBAAoB;KAC3B,CAAC,CAAA;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,YAAY,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;YACzB,MAAK;QACP,CAAC;QACD,2EAA2E;QAC3E,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,SAAQ;QACvB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,CAAA;QAC/D,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAA;QAClD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,CAAA;QAC7D,IAAI,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjB,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;YAC3C,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;QACtD,MAAM,CAAC,SAAS,EAAE,CAAA;QAClB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAA;QAC3C,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAChE,MAAM,OAAO,GAAG;YACd,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,KAAK;YAClB,SAAS;YACT,UAAU,EAAE,KAAK,CAAC,IAAI;YACtB,YAAY,EAAE;gBACZ,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;gBACxB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;aACzB;YACD,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAA;QACD,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE;SAClF,CAAC,CAAA;QACF,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,mBAAmB;gBACtB,MAAM,CAAC,YAAY,EAAE,CAAA;gBACrB,MAAK;YACP,KAAK,MAAM;gBACT,MAAM,CAAC,IAAI,EAAE,CAAA;gBACb,MAAK;YACP,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,CAAC,SAAS,EAAE,CAAA;gBAClB,2EAA2E;gBAC3E,sEAAsE;gBACtE,IAAI,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxC,MAAM,MAAM,GAAG,UAAU,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,SAAS,OAAO,oCAAoC,CAAA;oBAC1G,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAA;oBAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACjB,IAAI,CAAC;4BACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;wBAC3C,CAAC;wBAAC,OAAO,QAAQ,EAAE,CAAC;4BAClB,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE;gCAC5D,IAAI,EAAE,GAAG,CAAC,SAAS;gCACnB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;6BACxB,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;wBACvC,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,MAAM,EAAE,oBAAoB;wBAC5B,KAAK,EAAE,KAAK;qBACb,CAAC,CAAA;oBACF,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;wBAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;yBAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;wBAAE,MAAM,CAAC,SAAS,EAAE,CAAA;gBAC5D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,YAAY,EAAE,CAAA;oBACrB,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;oBACzF,MAAM,QAAQ,GAAG,gBAAgB,GAAG,CAAC,CAAA;oBACrC,yEAAyE;oBACzE,MAAM,OAAO,GAAG,QAAQ,GAAG,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;oBAChF,IAAI,CAAC;wBACH,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;4BAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;4BACrB,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE;yBAC5E,CAAC,CAAA;oBACJ,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE;4BACrD,EAAE,EAAE,GAAG,CAAC,EAAE;4BACV,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC;yBAC1B,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAK;YACP,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,UAAU,GAAU,SAAS,CAAA;gBACnC,OAAO,UAAU,CAAA;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/seo/autopilot-policy.d.ts

@@ -0,0 +1,169 @@
+/**
+ * SEO Autopilot policy — the per-issue-type opt-in, thresholds, caps, and
+ * pause state that govern unattended apply. Stored on
+ * `SeoModuleSettings.autopilot` (spec §1). The AI layer's governance flags
+ * (`approvalRequired` / `allowBulkApply`) remain a separate veto.
+ */
+export declare const AUTOPILOT_METADATA_TYPES: readonly ["missing-meta-title", "meta-title-length", "duplicate-meta-title", "missing-meta-description", "meta-description-length", "duplicate-meta-description", "missing-canonical", "accidental-noindex", "missing-structured-data"];
+export declare const AUTOPILOT_ISSUE_TYPES: readonly ["missing-meta-title", "meta-title-length", "duplicate-meta-title", "missing-meta-description", "meta-description-length", "duplicate-meta-description", "missing-canonical", "accidental-noindex", "missing-structured-data", "redirect"];
+export type AutopilotIssueType = (typeof AUTOPILOT_ISSUE_TYPES)[number];
+export declare function isAutopilotIssueType(value: unknown): value is AutopilotIssueType;
+export type AutopilotPauseReason = 'outcome_regression' | 'owner_unavailable' | 'manual';
+export interface AutopilotOutcomeWatch {
+    enabled: boolean;
+    days: number;
+    dropRatio: number;
+    minPriorClicks: number;
+}
+export interface SeoAutopilotPolicy {
+    enabled: boolean;
+    enabledById: string | null;
+    pausedAt: string | null;
+    pausedReason: AutopilotPauseReason | null;
+    types: Partial<Record<AutopilotIssueType, boolean>>;
+    pausedTypes: Partial<Record<AutopilotIssueType, string>>;
+    minBrandAlignment: number;
+    redirectMinConfidence: number;
+    maxPerRun: number;
+    maxPerDay: number;
+    verifyFailuresPerRun: number;
+    outcomeWatch: AutopilotOutcomeWatch;
+}
+export type GateReason = 'policy_disabled' | 'policy_paused' | 'type_not_enabled' | 'type_paused' | 'governance_approval_required' | 'governance_bulk_not_allowed' | 'cap_per_run' | 'cap_per_day' | 'stale' | 'dismissed' | 'cooldown' | 'brand_below_threshold' | 'brand_unscored' | 'banned_term' | 'validator_failed' | 'duplicate_value' | 'redirect_low_confidence' | 'redirect_manual_exists' | 'plan_denied';
+export interface AutopilotRunSummary {
+    startedAt: string;
+    durationMs: number;
+    applied: number;
+    verifyFailed: number;
+    /** Outcome-watch reverts this tick. */
+    reverted: number;
+    gated: Partial<Record<GateReason, number>>;
+    /**
+     * applyIssueFix / acceptRedirectSuggestion statuses other than applied /
+     * verify-failed (`stale`, `not-found`, `not-fixable`, `not-allowed`,
+     * `plan-required`, `invalid`, `still-live`), plus run-level counters:
+     * - `error` — applyIssueFix / acceptRedirectSuggestion threw and no write landed
+     * - `gate_mismatch` — an apply landed a value other than the gated patch and was
+     *   restored (also counted in `verifyFailed`)
+     * - `after_unreadable` — the document could not be re-read after an apply, so the
+     *   written value could not be verified against the gated patch; treated as drift:
+     *   restored and ledgered `verify_failed` with `after` = the gated patch (also
+     *   counted in `verifyFailed`, never in `gate_mismatch`)
+     * - `outcome_revert_error` — outcome-watch reverts that threw (row requeued)
+     * - `outcome_watch_error` — the outcome watch itself failed (run continued)
+     */
+    applyOutcomes: Record<string, number>;
+    /**
+     * `haltedReason`: the generator's own reason (`budget_exhausted`, …) or
+     * `generate_failed` when the generate phase threw. Never a raw error message —
+     * the summary is served to every authenticated role; the message is logged.
+     */
+    generated: {
+        generated: number;
+        skipped: number;
+        failed: number;
+        haltedReason: string | null;
+    };
+    halted: boolean;
+    /**
+     * `disabled` | `paused` | `owner_unavailable` | `already_running` (another
+     * tick holds the run lease; nothing was written) | `verify_failures`
+     * (breaker) | `budget_exhausted` | `ledger_write_failed` (a write could not
+     * be ledgered: it was undone best-effort and the run stopped) |
+     * `apply_failed` (the apply phase threw; the message is logged, never stored)
+     * | `run_failed` (an unexpected escape from the phases; re-thrown to the
+     * caller after the summary is persisted).
+     */
+    haltedReason: string | null;
+}
+export declare const DEFAULT_AUTOPILOT_POLICY: SeoAutopilotPolicy;
+export declare const AUTOPILOT_LIMITS: {
+    readonly maxPerRun: {
+        readonly min: 1;
+        readonly max: 25;
+    };
+    readonly maxPerDay: {
+        readonly min: 1;
+        readonly max: 100;
+    };
+    readonly verifyFailuresPerRun: {
+        readonly min: 1;
+        readonly max: 10;
+    };
+    readonly minBrandAlignment: {
+        readonly min: 0;
+        readonly max: 100;
+    };
+    readonly redirectMinConfidence: {
+        readonly min: 50;
+        readonly max: 100;
+    };
+    readonly outcomeDays: {
+        readonly min: 7;
+        readonly max: 28;
+    };
+    readonly dropRatio: {
+        readonly min: 0.2;
+        readonly max: 0.8;
+    };
+    readonly minPriorClicks: {
+        readonly min: 0;
+        readonly max: 100000;
+    };
+};
+/** A reverted change keeps its issue off autopilot for this long. */
+export declare const AUTOPILOT_COOLDOWN_DAYS = 30;
+/** GSC lag: the after-window must be fully synced before it is judged. */
+export declare const AUTOPILOT_OUTCOME_LAG_DAYS = 3;
+/** Shortest meta description the validator gate accepts (META_DESC_MAX is the ceiling). */
+export declare const AUTOPILOT_DESC_MIN = 70;
+export interface LegacyAutoApplyLever {
+    redirectRecoveryAutoApply?: boolean;
+    redirectRecoveryAutoApplyMinConfidence?: number;
+    /**
+     * `updatedBy` of the module-settings document — the advisory owner of a
+     * migrated lever. Crons (search sync, digest) rewrite it with
+     * `LEGACY_SYSTEM_WRITER`, which is never a user, so that value resolves to
+     * "no owner" and the run's preflight picks an active admin instead.
+     */
+    updatedBy?: string;
+}
+/** The `updatedBy` value cron writers stamp on the settings document. */
+export declare const LEGACY_SYSTEM_WRITER = "system";
+/**
+ * Deep-merge stored policy over defaults, folding the legacy 404 auto-apply
+ * lever in per key (spec §1 "Folding"): `types.redirect` and
+ * `redirectMinConfidence` fall back to the legacy values only when the stored
+ * block does not carry those keys, and a legacy lever that is on also resolves
+ * `enabled` / `enabledById` when stored omits them. Explicit stored values
+ * always win, so behaviour is continuous for tenants that never touched the
+ * new block while remaining fully overridable.
+ *
+ * A legacy-derived owner is advisory (see `LegacyAutoApplyLever.updatedBy`);
+ * the run preflight migrates it to a verified active admin when it cannot be
+ * used, rather than pausing the tenant.
+ */
+export declare function resolveAutopilotPolicy(stored: Partial<SeoAutopilotPolicy> | undefined | null, legacy: LegacyAutoApplyLever): SeoAutopilotPolicy;
+/**
+ * A validated PUT body. `outcomeWatch` is itself partial — only the keys the
+ * client sent — so the route must deep-merge it over the current policy's
+ * `outcomeWatch` rather than replacing the block.
+ */
+export type AutopilotPolicyPatch = Omit<Partial<SeoAutopilotPolicy>, 'outcomeWatch'> & {
+    outcomeWatch?: Partial<AutopilotOutcomeWatch>;
+};
+export type PolicyPatchResult = {
+    ok: true;
+    patch: AutopilotPolicyPatch;
+    resume: boolean;
+    resumeTypes: AutopilotIssueType[];
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Validate a `PUT /seo/autopilot/settings` body. Owner and pause state are
+ * never taken from the body — the route derives them (spec §1 Settings API).
+ */
+export declare function parseAutopilotPolicyPatch(body: unknown): PolicyPatchResult;
+//# sourceMappingURL=autopilot-policy.d.ts.map

package/dist/seo/autopilot-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-policy.d.ts","sourceRoot":"","sources":["../../src/seo/autopilot-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,wBAAwB,yOAU3B,CAAA;AAEV,eAAO,MAAM,qBAAqB,qPAAqD,CAAA;AAEvF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAA;AAIvE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEhF;AAED,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,QAAQ,CAAA;AAExF,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAA;IACzC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAA;IACnD,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAA;IACxD,iBAAiB,EAAE,MAAM,CAAA;IACzB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,YAAY,EAAE,qBAAqB,CAAA;CACpC;AAED,MAAM,MAAM,UAAU,GAClB,iBAAiB,GACjB,eAAe,GACf,kBAAkB,GAClB,aAAa,GACb,8BAA8B,GAC9B,6BAA6B,GAC7B,aAAa,GACb,aAAa,GACb,OAAO,GACP,WAAW,GACX,UAAU,GACV,uBAAuB,GACvB,gBAAgB,GAChB,aAAa,GACb,kBAAkB,GAClB,iBAAiB,GACjB,yBAAyB,GACzB,wBAAwB,GACxB,aAAa,CAAA;AAEjB,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;IAC1C;;;;;;;;;;;;;OAaG;IACH,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC;;;;OAIG;IACH,SAAS,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;IAC9F,MAAM,EAAE,OAAO,CAAA;IACf;;;;;;;;OAQG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED,eAAO,MAAM,wBAAwB,EAAE,kBAatC,CAAA;AAED,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASnB,CAAA;AAEV,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,KAAK,CAAA;AACzC,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B,IAAI,CAAA;AAC3C,2FAA2F;AAC3F,eAAO,MAAM,kBAAkB,KAAK,CAAA;AA4BpC,MAAM,WAAW,oBAAoB;IACnC,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAQ5C;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,SAAS,GAAG,IAAI,EACtD,MAAM,EAAE,oBAAoB,GAC3B,kBAAkB,CAsDpB;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,cAAc,CAAC,GAAG;IACrF,YAAY,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;CAC9C,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,EAAE,EAAE,IAAI,CAAA;IACR,KAAK,EAAE,oBAAoB,CAAA;IAC3B,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,kBAAkB,EAAE,CAAA;CAClC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAShC;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,CA6G1E"}

package/dist/seo/autopilot-policy.js

@@ -0,0 +1,267 @@
+/**
+ * SEO Autopilot policy — the per-issue-type opt-in, thresholds, caps, and
+ * pause state that govern unattended apply. Stored on
+ * `SeoModuleSettings.autopilot` (spec §1). The AI layer's governance flags
+ * (`approvalRequired` / `allowBulkApply`) remain a separate veto.
+ */
+export const AUTOPILOT_METADATA_TYPES = [
+    'missing-meta-title',
+    'meta-title-length',
+    'duplicate-meta-title',
+    'missing-meta-description',
+    'meta-description-length',
+    'duplicate-meta-description',
+    'missing-canonical',
+    'accidental-noindex',
+    'missing-structured-data',
+];
+export const AUTOPILOT_ISSUE_TYPES = [...AUTOPILOT_METADATA_TYPES, 'redirect'];
+const TYPE_SET = new Set(AUTOPILOT_ISSUE_TYPES);
+export function isAutopilotIssueType(value) {
+    return typeof value === 'string' && TYPE_SET.has(value);
+}
+export const DEFAULT_AUTOPILOT_POLICY = {
+    enabled: false,
+    enabledById: null,
+    pausedAt: null,
+    pausedReason: null,
+    types: {},
+    pausedTypes: {},
+    minBrandAlignment: 85,
+    redirectMinConfidence: 85,
+    maxPerRun: 5,
+    maxPerDay: 20,
+    verifyFailuresPerRun: 2,
+    outcomeWatch: { enabled: true, days: 14, dropRatio: 0.4, minPriorClicks: 50 },
+};
+export const AUTOPILOT_LIMITS = {
+    maxPerRun: { min: 1, max: 25 },
+    maxPerDay: { min: 1, max: 100 },
+    verifyFailuresPerRun: { min: 1, max: 10 },
+    minBrandAlignment: { min: 0, max: 100 },
+    redirectMinConfidence: { min: 50, max: 100 },
+    outcomeDays: { min: 7, max: 28 },
+    dropRatio: { min: 0.2, max: 0.8 },
+    minPriorClicks: { min: 0, max: 100_000 },
+};
+/** A reverted change keeps its issue off autopilot for this long. */
+export const AUTOPILOT_COOLDOWN_DAYS = 30;
+/** GSC lag: the after-window must be fully synced before it is judged. */
+export const AUTOPILOT_OUTCOME_LAG_DAYS = 3;
+/** Shortest meta description the validator gate accepts (META_DESC_MAX is the ceiling). */
+export const AUTOPILOT_DESC_MIN = 70;
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+function pickTypes(raw) {
+    const out = {};
+    if (!isRecord(raw))
+        return out;
+    for (const [k, v] of Object.entries(raw)) {
+        if (isAutopilotIssueType(k) && typeof v === 'boolean')
+            out[k] = v;
+    }
+    return out;
+}
+function pickPausedTypes(raw) {
+    const out = {};
+    if (!isRecord(raw))
+        return out;
+    for (const [k, v] of Object.entries(raw)) {
+        if (isAutopilotIssueType(k) && typeof v === 'string')
+            out[k] = v;
+    }
+    return out;
+}
+function num(v, fallback) {
+    return typeof v === 'number' && Number.isFinite(v) ? v : fallback;
+}
+/** The `updatedBy` value cron writers stamp on the settings document. */
+export const LEGACY_SYSTEM_WRITER = 'system';
+function legacyOwnerFrom(updatedBy) {
+    if (typeof updatedBy !== 'string')
+        return null;
+    const id = updatedBy.trim();
+    return id.length > 0 && id !== LEGACY_SYSTEM_WRITER ? id : null;
+}
+/**
+ * Deep-merge stored policy over defaults, folding the legacy 404 auto-apply
+ * lever in per key (spec §1 "Folding"): `types.redirect` and
+ * `redirectMinConfidence` fall back to the legacy values only when the stored
+ * block does not carry those keys, and a legacy lever that is on also resolves
+ * `enabled` / `enabledById` when stored omits them. Explicit stored values
+ * always win, so behaviour is continuous for tenants that never touched the
+ * new block while remaining fully overridable.
+ *
+ * A legacy-derived owner is advisory (see `LegacyAutoApplyLever.updatedBy`);
+ * the run preflight migrates it to a verified active admin when it cannot be
+ * used, rather than pausing the tenant.
+ */
+export function resolveAutopilotPolicy(stored, legacy) {
+    const d = DEFAULT_AUTOPILOT_POLICY;
+    const legacyOn = legacy.redirectRecoveryAutoApply === true;
+    const s = stored ? stored : {};
+    const pausedReason = s.pausedReason;
+    const types = pickTypes(s.types);
+    if (!('redirect' in types) && legacyOn)
+        types.redirect = true;
+    const redirectMinConfidence = num(s.redirectMinConfidence, legacyOn
+        ? num(legacy.redirectRecoveryAutoApplyMinConfidence, d.redirectMinConfidence)
+        : d.redirectMinConfidence);
+    return {
+        enabled: typeof s.enabled === 'boolean' ? s.enabled : legacyOn ? true : d.enabled,
+        enabledById: typeof s.enabledById === 'string'
+            ? s.enabledById
+            : legacyOn
+                ? legacyOwnerFrom(legacy.updatedBy)
+                : null,
+        pausedAt: typeof s.pausedAt === 'string' ? s.pausedAt : null,
+        pausedReason: pausedReason === 'outcome_regression' ||
+            pausedReason === 'owner_unavailable' ||
+            pausedReason === 'manual'
+            ? pausedReason
+            : null,
+        types,
+        pausedTypes: pickPausedTypes(s.pausedTypes),
+        minBrandAlignment: num(s.minBrandAlignment, d.minBrandAlignment),
+        redirectMinConfidence,
+        maxPerRun: num(s.maxPerRun, d.maxPerRun),
+        maxPerDay: num(s.maxPerDay, d.maxPerDay),
+        verifyFailuresPerRun: num(s.verifyFailuresPerRun, d.verifyFailuresPerRun),
+        outcomeWatch: {
+            enabled: isRecord(s.outcomeWatch) && typeof s.outcomeWatch.enabled === 'boolean'
+                ? s.outcomeWatch.enabled
+                : d.outcomeWatch.enabled,
+            days: num(isRecord(s.outcomeWatch) ? s.outcomeWatch.days : undefined, d.outcomeWatch.days),
+            dropRatio: num(isRecord(s.outcomeWatch) ? s.outcomeWatch.dropRatio : undefined, d.outcomeWatch.dropRatio),
+            minPriorClicks: num(isRecord(s.outcomeWatch) ? s.outcomeWatch.minPriorClicks : undefined, d.outcomeWatch.minPriorClicks),
+        },
+    };
+}
+function intIn(v, lo, hi) {
+    return typeof v === 'number' && Number.isInteger(v) && v >= lo && v <= hi;
+}
+function numIn(v, lo, hi) {
+    return typeof v === 'number' && Number.isFinite(v) && v >= lo && v <= hi;
+}
+/**
+ * Validate a `PUT /seo/autopilot/settings` body. Owner and pause state are
+ * never taken from the body — the route derives them (spec §1 Settings API).
+ */
+export function parseAutopilotPolicyPatch(body) {
+    if (!isRecord(body))
+        return { ok: false, error: 'Request body must be an object' };
+    const L = AUTOPILOT_LIMITS;
+    const patch = {};
+    if ('enabled' in body) {
+        if (typeof body.enabled !== 'boolean')
+            return { ok: false, error: 'enabled must be a boolean' };
+        patch.enabled = body.enabled;
+    }
+    if ('types' in body) {
+        if (!isRecord(body.types))
+            return { ok: false, error: 'types must be an object' };
+        const types = {};
+        for (const [k, v] of Object.entries(body.types)) {
+            if (!isAutopilotIssueType(k)) {
+                return { ok: false, error: `types contains an unknown issue type: ${k}` };
+            }
+            if (typeof v !== 'boolean')
+                return { ok: false, error: `types.${k} must be a boolean` };
+            types[k] = v;
+        }
+        patch.types = types;
+    }
+    const intFields = [
+        ['maxPerRun', L.maxPerRun],
+        ['maxPerDay', L.maxPerDay],
+        ['verifyFailuresPerRun', L.verifyFailuresPerRun],
+    ];
+    for (const [key, range] of intFields) {
+        if (key in body) {
+            if (!intIn(body[key], range.min, range.max)) {
+                return {
+                    ok: false,
+                    error: `${key} must be an integer between ${range.min} and ${range.max}`,
+                };
+            }
+            ;
+            patch[key] = body[key];
+        }
+    }
+    const numFields = [
+        ['minBrandAlignment', L.minBrandAlignment],
+        ['redirectMinConfidence', L.redirectMinConfidence],
+    ];
+    for (const [key, range] of numFields) {
+        if (key in body) {
+            if (!numIn(body[key], range.min, range.max)) {
+                return { ok: false, error: `${key} must be a number between ${range.min} and ${range.max}` };
+            }
+            ;
+            patch[key] = body[key];
+        }
+    }
+    if ('outcomeWatch' in body) {
+        if (!isRecord(body.outcomeWatch))
+            return { ok: false, error: 'outcomeWatch must be an object' };
+        const ow = body.outcomeWatch;
+        const out = {};
+        if ('enabled' in ow) {
+            if (typeof ow.enabled !== 'boolean') {
+                return { ok: false, error: 'outcomeWatch.enabled must be a boolean' };
+            }
+            out.enabled = ow.enabled;
+        }
+        if ('days' in ow) {
+            if (!intIn(ow.days, L.outcomeDays.min, L.outcomeDays.max)) {
+                return {
+                    ok: false,
+                    error: `outcomeWatch.days must be an integer between ${L.outcomeDays.min} and ${L.outcomeDays.max}`,
+                };
+            }
+            out.days = ow.days;
+        }
+        if ('dropRatio' in ow) {
+            if (!numIn(ow.dropRatio, L.dropRatio.min, L.dropRatio.max)) {
+                return {
+                    ok: false,
+                    error: `outcomeWatch.dropRatio must be a number between ${L.dropRatio.min} and ${L.dropRatio.max}`,
+                };
+            }
+            out.dropRatio = ow.dropRatio;
+        }
+        if ('minPriorClicks' in ow) {
+            if (!intIn(ow.minPriorClicks, L.minPriorClicks.min, L.minPriorClicks.max)) {
+                return {
+                    ok: false,
+                    error: `outcomeWatch.minPriorClicks must be an integer between ${L.minPriorClicks.min} and ${L.minPriorClicks.max}`,
+                };
+            }
+            out.minPriorClicks = ow.minPriorClicks;
+        }
+        // Partial on purpose: only the keys sent are present. The route must
+        // deep-merge this over the current policy's outcomeWatch, not replace it.
+        patch.outcomeWatch = out;
+    }
+    let resume = false;
+    if ('resume' in body) {
+        if (typeof body.resume !== 'boolean')
+            return { ok: false, error: 'resume must be a boolean' };
+        resume = body.resume;
+    }
+    const resumeTypes = [];
+    if ('resumeTypes' in body) {
+        if (!Array.isArray(body.resumeTypes)) {
+            return { ok: false, error: 'resumeTypes must be an array' };
+        }
+        for (const t of body.resumeTypes) {
+            if (!isAutopilotIssueType(t)) {
+                return { ok: false, error: `resumeTypes contains an unknown issue type: ${String(t)}` };
+            }
+            resumeTypes.push(t);
+        }
+    }
+    return { ok: true, patch, resume, resumeTypes };
+}
+//# sourceMappingURL=autopilot-policy.js.map