@reddoorla/maintenance 0.71.0 → 0.74.0

package/README.md

@@ -368,20 +368,21 @@ This repo's Netlify site hosts the whole dashboard + forms surface: the Resend d
 
 **2. Set env vars** in Site settings → Environment variables:
 
-| Variable                | Value                                                                                                                              |
-| ----------------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
-| `AIRTABLE_PAT`          | Same PAT used by the CLI (read+write on the Websites + Reports tables)                                                             |
-| `AIRTABLE_BASE_ID`      | `appHG8nLOzULzXOER`                                                                                                                |
-| `RESEND_WEBHOOK_SECRET` | Generated by Resend in step 4 — paste back here after creating the endpoint                                                        |
-| `TURSO_DATABASE_URL`    | `libsql://<db>-<org>.turso.io` — submissions + spam counters live here; the dashboard + forms functions 500 without it             |
-| `TURSO_AUTH_TOKEN`      | Auth token for that Turso url (required for a remote `libsql://` url)                                                              |
-| `FORMS_INGEST_TOKEN`    | Shared secret gating `POST /api/forms/:slug` — the SAME value is set on each fleet site                                            |
-| `DASHBOARD_PASSWORD`    | Basic-auth password gating the cockpit, per-site dashboards, and every action endpoint — the dashboard is unauthable without it    |
-| `DASHBOARD_BASE_URL`    | Public base URL of this deploy (e.g. `https://<your-site>.netlify.app`) — used to build absolute links such as report approve URLs |
-| `RENOVATE_TOKEN`        | GitHub PAT with `actions:write` — powers the dashboard's "Trigger Renovate" button (the button 502s without it)                    |
-| `GH_TOKEN`              | GitHub token for the dashboard's request-path REST calls (fleet-refresh dispatch + GitHub-sourced signals)                         |
-
-> The first six vars cover the webhook + forms ingest; `DASHBOARD_PASSWORD` / `DASHBOARD_BASE_URL` / `RENOVATE_TOKEN` / `GH_TOKEN` are additionally required by the operator **dashboard** this same deploy serves (cockpit at `/`, per-site at `/s/:slug`).
+| Variable                | Value                                                                                                                                                                                                                                                    |
+| ----------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `AIRTABLE_PAT`          | Same PAT used by the CLI (read+write on the Websites + Reports tables)                                                                                                                                                                                   |
+| `AIRTABLE_BASE_ID`      | `appHG8nLOzULzXOER`                                                                                                                                                                                                                                      |
+| `RESEND_WEBHOOK_SECRET` | Generated by Resend in step 4 — paste back here after creating the endpoint                                                                                                                                                                              |
+| `TURSO_DATABASE_URL`    | `libsql://<db>-<org>.turso.io` — submissions + spam counters live here; the dashboard + forms functions 500 without it                                                                                                                                   |
+| `TURSO_AUTH_TOKEN`      | Auth token for that Turso url (required for a remote `libsql://` url)                                                                                                                                                                                    |
+| `FORMS_INGEST_TOKEN`    | Shared secret gating `POST /api/forms/:slug` — the SAME value is set on each fleet site                                                                                                                                                                  |
+| `TURNSTILE_SECRET_KEY`  | Cloudflare Turnstile secret for central spam verification. **Optional** — absent → Turnstile is disabled and fails open (the heuristic classifier is then the only defense). The per-site `PUBLIC_TURNSTILE_SITE_KEY` lives on each fleet site, not here |
+| `DASHBOARD_PASSWORD`    | Basic-auth password gating the cockpit, per-site dashboards, and every action endpoint — the dashboard is unauthable without it                                                                                                                          |
+| `DASHBOARD_BASE_URL`    | Public base URL of this deploy (e.g. `https://<your-site>.netlify.app`) — used to build absolute links such as report approve URLs                                                                                                                       |
+| `RENOVATE_TOKEN`        | GitHub PAT with `actions:write` — powers the dashboard's "Trigger Renovate" button (the button 502s without it)                                                                                                                                          |
+| `GH_TOKEN`              | GitHub token for the dashboard's request-path REST calls (fleet-refresh dispatch + GitHub-sourced signals)                                                                                                                                               |
+
+> The first seven vars cover the webhook + forms ingest (`TURNSTILE_SECRET_KEY` optional); `DASHBOARD_PASSWORD` / `DASHBOARD_BASE_URL` / `RENOVATE_TOKEN` / `GH_TOKEN` are additionally required by the operator **dashboard** this same deploy serves (cockpit at `/`, per-site at `/s/:slug`).
 
 **3. Trigger a deploy** (Deploys → Trigger deploy → Deploy site). When it goes green, curl the health endpoint:
 

package/dist/airtable-6L3JD7FY.js

@@ -0,0 +1,9 @@
+import {
+  fromAirtableBase
+} from "./chunk-SK44IFZN.js";
+import "./chunk-U5SZ4FOP.js";
+import "./chunk-GXVX4HUH.js";
+export {
+  fromAirtableBase
+};
+//# sourceMappingURL=airtable-6L3JD7FY.js.map

package/dist/{announce-3JE5FKW7.js → announce-V6EYPPUR.js}

@@ -1,14 +1,14 @@
 import {
   scoresFromRow
-} from "./chunk-PSJQE6T6.js";
+} from "./chunk-I55YWV6T.js";
 import {
   fetchGaUsers,
   fetchSearch,
   readGaConfig
-} from "./chunk-6J25IIAI.js";
+} from "./chunk-NUIBQPB3.js";
 import {
   queueDraft
-} from "./chunk-2PWQ6MPG.js";
+} from "./chunk-KLVMJYZZ.js";
 import {
   defaultReportSubject
 } from "./chunk-GECESMVS.js";
@@ -20,13 +20,13 @@ import {
   resolveCopy,
   updateReportScores,
   uploadAttachment
-} from "./chunk-AYM2EFSK.js";
+} from "./chunk-JCITWZQR.js";
 import "./chunk-U5SZ4FOP.js";
 import {
   listWebsites,
   siteSlug,
   updateAnalyticsHealth
-} from "./chunk-YWRQEDB3.js";
+} from "./chunk-GXVX4HUH.js";
 import {
   openBase,
   readAirtableConfig
@@ -183,4 +183,4 @@ export {
   formatAnnounceResult,
   runAnnounceCommand
 };
-//# sourceMappingURL=announce-3JE5FKW7.js.map
+//# sourceMappingURL=announce-V6EYPPUR.js.map