@reddoorla/maintenance 0.85.2 → 0.86.0

package/dist/{chunk-UYCAF77E.js → chunk-7RJ2HMMJ.js}

@@ -1,6 +1,6 @@
 import {
   withRecipe
-} from "./chunk-ZTPPCHDB.js";
+} from "./chunk-3G25KIWW.js";
 import {
   bumpDep,
   readPackageJson,
@@ -11,7 +11,7 @@ import {
 } from "./chunk-LKGVSM2O.js";
 import {
   defaultSpawn
-} from "./chunk-4DHQCN5H.js";
+} from "./chunk-LBYOLBW7.js";
 
 // src/util/self-version.ts
 import { readFileSync, existsSync } from "fs";
@@ -150,4 +150,4 @@ export {
   selfCaretRange,
   onboard
 };
-//# sourceMappingURL=chunk-UYCAF77E.js.map
+//# sourceMappingURL=chunk-7RJ2HMMJ.js.map

package/dist/chunk-ACBRLLFT.js

@@ -0,0 +1,198 @@
+import {
+  ALL_CHECKLIST_FIELDS
+} from "./chunk-VAD43MOR.js";
+
+// src/reports/airtable/reports.ts
+var REPORTS_TABLE = "Reports";
+var REPORT_TYPES = ["Maintenance", "Testing", "Launch", "Announcement"];
+function toReportType(raw) {
+  if (raw && REPORT_TYPES.includes(raw)) return raw;
+  if (raw)
+    console.warn(`[reports] unknown Report type ${JSON.stringify(raw)} \u2014 treating as Maintenance`);
+  return "Maintenance";
+}
+function isPendingApproval(r) {
+  return r.draftReady && !r.approvedToSend && r.sentAt === null;
+}
+function mapRow(rec) {
+  const f = rec.fields;
+  const linkSites = f["Site"] ?? [];
+  const html = (f["Rendered HTML"] ?? [])[0] ?? null;
+  return {
+    id: rec.id,
+    reportId: String(f["Report ID"] ?? ""),
+    siteId: linkSites[0] ?? "",
+    reportType: toReportType(f["Report type"]),
+    period: f["Period"] ?? null,
+    periodStart: f["Period start"] ?? null,
+    periodEnd: f["Period end"] ?? null,
+    completedOn: f["Completed on"] ?? null,
+    lighthouse: lighthouseFromFields(f),
+    gaUsersCurrent: f["GA users (period)"] ?? null,
+    gaUsersPrevious: f["GA users (prev period)"] ?? null,
+    searchFoundPage1: typeof f["Search found page 1"] === "boolean" ? f["Search found page 1"] : null,
+    searchPosition: f["Search position"] ?? null,
+    lastTestedDate: f["Last tested date"] ?? null,
+    commentary: f["Commentary"] ?? null,
+    subjectOverride: f["Subject override"] ?? null,
+    draftReady: Boolean(f["Draft ready"]),
+    approvedToSend: Boolean(f["Approved to send"]),
+    sentAt: f["Sent at"] ?? null,
+    approvedAt: f["Approved At"] ?? null,
+    approvedBy: f["Approved By"] ?? null,
+    deliveryStatus: f["Delivery status"] ?? "pending",
+    renderedHtmlAttachment: html,
+    resendMessageId: f["Resend message ID"] ?? null,
+    checklist: Object.fromEntries(ALL_CHECKLIST_FIELDS.map((name) => [name, Boolean(f[name])])),
+    autoEvidence: parseAutoEvidence(f["Checklist auto-evidence"]),
+    sendOverride: Boolean(f["Send override"]),
+    overrideReason: f["Override reason"] ?? null,
+    overrideBy: f["Override by"] ?? null,
+    overrideAt: f["Override at"] ?? null
+  };
+}
+function parseAutoEvidence(raw) {
+  if (typeof raw !== "string" || !raw.trim()) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+  const out = {};
+  for (const [field, v] of Object.entries(parsed)) {
+    if (!v || typeof v !== "object") continue;
+    const o = v;
+    if (o.result !== "pass" && o.result !== "fail" && o.result !== "unknown" && o.result !== "n/a")
+      continue;
+    out[field] = {
+      result: o.result,
+      checkedAt: typeof o.checkedAt === "string" ? o.checkedAt : null,
+      note: typeof o.note === "string" ? o.note : ""
+    };
+  }
+  return Object.keys(out).length > 0 ? out : null;
+}
+function lighthouseFromFields(f) {
+  const p = f["Lighthouse \u2014 Performance"];
+  const a = f["Lighthouse \u2014 Accessibility"];
+  const b = f["Lighthouse \u2014 Best Practices"];
+  const s = f["Lighthouse \u2014 SEO"];
+  if (typeof p !== "number" || typeof a !== "number" || typeof b !== "number" || typeof s !== "number")
+    return null;
+  return { performance: p, accessibility: a, bestPractices: b, seo: s };
+}
+function ymd(d) {
+  return d.toISOString().slice(0, 10);
+}
+function escapeFormulaString(s) {
+  return s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+async function createDraft(base, input) {
+  const fields = {
+    "Report ID": input.reportId,
+    Site: [input.siteId],
+    "Report type": input.reportType,
+    "Period start": ymd(input.periodStart),
+    "Period end": ymd(input.periodEnd),
+    "Completed on": ymd(input.completedOn),
+    "Lighthouse \u2014 Performance": input.lighthouse.performance,
+    "Lighthouse \u2014 Accessibility": input.lighthouse.accessibility,
+    "Lighthouse \u2014 Best Practices": input.lighthouse.bestPractices,
+    "Lighthouse \u2014 SEO": input.lighthouse.seo,
+    "Delivery status": "pending"
+  };
+  if (input.lastTestedDate) fields["Last tested date"] = ymd(input.lastTestedDate);
+  if (input.gaUsersCurrent !== void 0) fields["GA users (period)"] = input.gaUsersCurrent;
+  if (input.gaUsersPrevious !== void 0) fields["GA users (prev period)"] = input.gaUsersPrevious;
+  if (input.searchFoundPage1 !== void 0) fields["Search found page 1"] = input.searchFoundPage1;
+  if (input.searchPosition !== void 0) fields["Search position"] = input.searchPosition;
+  if (input.period !== void 0) fields["Period"] = input.period;
+  if (input.subjectOverride !== void 0) fields["Subject override"] = input.subjectOverride;
+  for (const field of input.checklistTicks ?? []) fields[field] = true;
+  if (input.autoEvidence && Object.keys(input.autoEvidence).length > 0) {
+    fields["Checklist auto-evidence"] = JSON.stringify(input.autoEvidence);
+  }
+  const created = await base(REPORTS_TABLE).create([{ fields }]);
+  const rec = created[0];
+  if (!rec) throw new Error("Airtable create returned no records");
+  return mapRow({ id: rec.id, fields: rec.fields });
+}
+async function setDraftReady(base, recordId, ready) {
+  await base(REPORTS_TABLE).update([{ id: recordId, fields: { "Draft ready": ready } }]);
+}
+async function updateReportScores(base, recordId, scores, completedOn, enrichment) {
+  const fields = {
+    "Lighthouse \u2014 Performance": scores.performance,
+    "Lighthouse \u2014 Accessibility": scores.accessibility,
+    "Lighthouse \u2014 Best Practices": scores.bestPractices,
+    "Lighthouse \u2014 SEO": scores.seo
+  };
+  if (completedOn) fields["Completed on"] = ymd(completedOn);
+  if (enrichment?.gaUsersCurrent !== void 0)
+    fields["GA users (period)"] = enrichment.gaUsersCurrent;
+  if (enrichment?.gaUsersPrevious !== void 0)
+    fields["GA users (prev period)"] = enrichment.gaUsersPrevious;
+  if (enrichment?.searchFoundPage1 !== void 0)
+    fields["Search found page 1"] = enrichment.searchFoundPage1;
+  if (enrichment?.searchPosition !== void 0)
+    fields["Search position"] = enrichment.searchPosition;
+  await base(REPORTS_TABLE).update([{ id: recordId, fields }]);
+}
+async function listSendableReports(base) {
+  const out = [];
+  await base(REPORTS_TABLE).select({
+    filterByFormula: "AND({Draft ready} = TRUE(), {Approved to send} = TRUE(), {Sent at} = BLANK())",
+    pageSize: 100
+  }).eachPage((records, fetchNextPage) => {
+    for (const rec of records) out.push(mapRow({ id: rec.id, fields: rec.fields }));
+    fetchNextPage();
+  });
+  return out;
+}
+async function listAllReports(base) {
+  const out = [];
+  await base(REPORTS_TABLE).select({ pageSize: 100 }).eachPage((records, fetchNextPage) => {
+    for (const rec of records) out.push(mapRow({ id: rec.id, fields: rec.fields }));
+    fetchNextPage();
+  });
+  return out;
+}
+async function listReportsForSite(base, siteId) {
+  return (await listAllReports(base)).filter((r) => r.siteId === siteId);
+}
+async function stampSent(base, recordId, sentAt, messageId) {
+  const fields = { "Sent at": sentAt.toISOString() };
+  if (messageId !== null) fields["Resend message ID"] = messageId;
+  await base(REPORTS_TABLE).update([
+    {
+      id: recordId,
+      fields
+    }
+  ]);
+}
+async function findReportByPeriod(base, siteId, reportType, period) {
+  const safeType = escapeFormulaString(reportType);
+  const safePeriod = escapeFormulaString(period);
+  const formula = `AND({Report type} = "${safeType}", {Period} = "${safePeriod}")`;
+  const rows = [];
+  await base(REPORTS_TABLE).select({ filterByFormula: formula, pageSize: 100 }).eachPage((records, fetchNextPage) => {
+    for (const rec of records) rows.push(mapRow({ id: rec.id, fields: rec.fields }));
+    fetchNextPage();
+  });
+  return rows.find((r) => r.siteId === siteId) ?? null;
+}
+
+export {
+  isPendingApproval,
+  createDraft,
+  setDraftReady,
+  updateReportScores,
+  listSendableReports,
+  listAllReports,
+  listReportsForSite,
+  stampSent,
+  findReportByPeriod
+};
+//# sourceMappingURL=chunk-ACBRLLFT.js.map

package/dist/chunk-ACBRLLFT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/airtable/reports.ts"],"sourcesContent":["import type { FieldSet, Records } from \"airtable\";\nimport type { AirtableBase } from \"./client.js\";\nimport type { ReportType, LighthouseScores } from \"../types.js\";\nimport { ALL_CHECKLIST_FIELDS } from \"../checklist.js\";\nimport type { EvidenceRecord } from \"../auto-tick.js\";\n\nexport const REPORTS_TABLE = \"Reports\";\n\nconst REPORT_TYPES: readonly ReportType[] = [\"Maintenance\", \"Testing\", \"Launch\", \"Announcement\"];\n\n/** Coerce the Airtable `Report type` (a single-select string) to a known\n *  ReportType. A bare `as ReportType` cast is a compile-time lie: if the\n *  single-select gains an unexpected option, the bad value flows to render.ts,\n *  where `reportType === \"Launch\"` silently falls through to the Maintenance\n *  template. Validate at the boundary; warn + default to \"Maintenance\" so an\n *  unknown type is VISIBLE in the logs rather than silently mis-templated. */\nexport function toReportType(raw: string | undefined): ReportType {\n  if (raw && (REPORT_TYPES as readonly string[]).includes(raw)) return raw as ReportType;\n  if (raw)\n    console.warn(`[reports] unknown Report type ${JSON.stringify(raw)} — treating as Maintenance`);\n  return \"Maintenance\";\n}\n\nexport type DeliveryStatus = \"pending\" | \"delivered\" | \"bounced\" | \"complained\";\n\nexport type ReportRow = {\n  id: string;\n  reportId: string;\n  siteId: string;\n  reportType: ReportType;\n  /** UTC `YYYY-MM` recurrence key (idempotency for search-before-create). Null on legacy rows. */\n  period: string | null;\n  periodStart: string | null;\n  periodEnd: string | null;\n  completedOn: string | null;\n  lighthouse: LighthouseScores | null;\n  gaUsersCurrent: number | null;\n  gaUsersPrevious: number | null;\n  searchFoundPage1: boolean | null;\n  searchPosition: number | null;\n  lastTestedDate: string | null;\n  commentary: string | null;\n  subjectOverride: string | null;\n  draftReady: boolean;\n  approvedToSend: boolean;\n  sentAt: string | null;\n  approvedAt: string | null;\n  approvedBy: string | null;\n  deliveryStatus: DeliveryStatus;\n  renderedHtmlAttachment: { url: string; filename: string } | null;\n  /** Read out of the Resend response and stored in a hidden field; needed for webhook reconciliation. */\n  resendMessageId: string | null;\n  /** The 12 operator-checklist checkboxes, keyed by their Airtable column name (ALL_CHECKLIST_FIELDS);\n   *  missing/false cells read false. Maintenance/Testing reports gate approve+send on the relevant\n   *  subset (see src/reports/checklist.ts). */\n  checklist: Record<string, boolean>;\n  /** Snapshot of the auto-tick evidence at draft time, keyed by checklist field → evidence\n   *  record. Null when the report predates auto-tick or carried no auto-checked items. This is the\n   *  health gate's source of truth: `isHealthGateClear`/`gatingHealth` (src/reports/checklist.ts)\n   *  read these evidence records, NOT the checklist booleans — and also drive the dashboard badges. */\n  autoEvidence: Record<string, EvidenceRecord> | null;\n  /** Logged send-anyway override (Phase 10). When `sendOverride` is true AND `overrideReason` is\n   *  non-empty, the health gate is bypassed for THIS report; `overrideBy`/`overrideAt` are the\n   *  audit trail (parallel to approvedBy/approvedAt). Missing cells read false/null. */\n  sendOverride: boolean;\n  overrideReason: string | null;\n  overrideBy: string | null;\n  overrideAt: string | null;\n};\n\n/**\n * The \"Ready for your yes\" gate: Draft ready ∧ ¬Approved to send ∧ Sent at BLANK.\n * The single source of truth for \"pending the operator's approval\" — `listPendingApproval`,\n * `runDigest`'s ready-list, the per-site dashboard, and the fleet cockpit all key off this\n * one predicate so the surfaces can't drift.\n */\nexport function isPendingApproval(r: ReportRow): boolean {\n  return r.draftReady && !r.approvedToSend && r.sentAt === null;\n}\n\nexport function mapRow(rec: { id: string; fields: Record<string, unknown> }): ReportRow {\n  const f = rec.fields;\n  const linkSites = (f[\"Site\"] as string[] | undefined) ?? [];\n  const html =\n    ((f[\"Rendered HTML\"] as Array<{ url: string; filename: string }> | undefined) ?? [])[0] ?? null;\n  return {\n    id: rec.id,\n    reportId: String(f[\"Report ID\"] ?? \"\"),\n    siteId: linkSites[0] ?? \"\",\n    reportType: toReportType(f[\"Report type\"] as string | undefined),\n    period: (f[\"Period\"] as string | undefined) ?? null,\n    periodStart: (f[\"Period start\"] as string | undefined) ?? null,\n    periodEnd: (f[\"Period end\"] as string | undefined) ?? null,\n    completedOn: (f[\"Completed on\"] as string | undefined) ?? null,\n    lighthouse: lighthouseFromFields(f),\n    gaUsersCurrent: (f[\"GA users (period)\"] as number | undefined) ?? null,\n    gaUsersPrevious: (f[\"GA users (prev period)\"] as number | undefined) ?? null,\n    searchFoundPage1:\n      typeof f[\"Search found page 1\"] === \"boolean\" ? (f[\"Search found page 1\"] as boolean) : null,\n    searchPosition: (f[\"Search position\"] as number | undefined) ?? null,\n    lastTestedDate: (f[\"Last tested date\"] as string | undefined) ?? null,\n    commentary: (f[\"Commentary\"] as string | undefined) ?? null,\n    subjectOverride: (f[\"Subject override\"] as string | undefined) ?? null,\n    draftReady: Boolean(f[\"Draft ready\"]),\n    approvedToSend: Boolean(f[\"Approved to send\"]),\n    sentAt: (f[\"Sent at\"] as string | undefined) ?? null,\n    approvedAt: (f[\"Approved At\"] as string | undefined) ?? null,\n    approvedBy: (f[\"Approved By\"] as string | undefined) ?? null,\n    deliveryStatus: ((f[\"Delivery status\"] as string | undefined) ?? \"pending\") as DeliveryStatus,\n    renderedHtmlAttachment: html,\n    resendMessageId: (f[\"Resend message ID\"] as string | undefined) ?? null,\n    checklist: Object.fromEntries(ALL_CHECKLIST_FIELDS.map((name) => [name, Boolean(f[name])])),\n    autoEvidence: parseAutoEvidence(f[\"Checklist auto-evidence\"]),\n    sendOverride: Boolean(f[\"Send override\"]),\n    overrideReason: (f[\"Override reason\"] as string | undefined) ?? null,\n    overrideBy: (f[\"Override by\"] as string | undefined) ?? null,\n    overrideAt: (f[\"Override at\"] as string | undefined) ?? null,\n  };\n}\n\n/**\n * Parse the `Checklist auto-evidence` JSON field → a field→EvidenceRecord map, or null when\n * absent/malformed. Permissive on inner shape (it's display-only — a bad blob just yields null,\n * never throws), mirroring `parseNotifyRouting`.\n */\nexport function parseAutoEvidence(raw: unknown): Record<string, EvidenceRecord> | null {\n  if (typeof raw !== \"string\" || !raw.trim()) return null;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) return null;\n  // Validate each entry's inner shape (it drives display) — drop any record whose `result` isn't\n  // one of the four literals, and coerce `note`/`checkedAt` to safe types. A garbage blob yields\n  // null rather than a record that would render \"auto: undefined\" on the dashboard.\n  const out: Record<string, EvidenceRecord> = {};\n  for (const [field, v] of Object.entries(parsed as Record<string, unknown>)) {\n    if (!v || typeof v !== \"object\") continue;\n    const o = v as Record<string, unknown>;\n    if (o.result !== \"pass\" && o.result !== \"fail\" && o.result !== \"unknown\" && o.result !== \"n/a\")\n      continue;\n    out[field] = {\n      result: o.result,\n      checkedAt: typeof o.checkedAt === \"string\" ? o.checkedAt : null,\n      note: typeof o.note === \"string\" ? o.note : \"\",\n    };\n  }\n  return Object.keys(out).length > 0 ? out : null;\n}\n\nfunction lighthouseFromFields(f: Record<string, unknown>): LighthouseScores | null {\n  const p = f[\"Lighthouse — Performance\"];\n  const a = f[\"Lighthouse — Accessibility\"];\n  const b = f[\"Lighthouse — Best Practices\"];\n  const s = f[\"Lighthouse — SEO\"];\n  if (\n    typeof p !== \"number\" ||\n    typeof a !== \"number\" ||\n    typeof b !== \"number\" ||\n    typeof s !== \"number\"\n  )\n    return null;\n  return { performance: p, accessibility: a, bestPractices: b, seo: s };\n}\n\n/** The GA + Search-presence fields a draft can carry, written to the Reports row.\n *  `searchFoundPage1` is written whenever the check ran (true or false — false is the\n *  operator-only negative signal); `searchPosition` only when found on page 1. Shared by\n *  the create path (DraftInput) and the reuse path (updateReportScores). */\nexport type ReportEnrichment = {\n  gaUsersCurrent?: number;\n  gaUsersPrevious?: number;\n  searchFoundPage1?: boolean;\n  searchPosition?: number;\n};\n\nexport type DraftInput = {\n  reportId: string;\n  siteId: string;\n  reportType: ReportType;\n  /** UTC `YYYY-MM` recurrence key. Omitted on legacy callers; written only when supplied. */\n  period?: string;\n  periodStart: Date;\n  periodEnd: Date;\n  completedOn: Date;\n  lighthouse: LighthouseScores;\n  lastTestedDate: Date | null;\n  /** GA \"Users\" for the period / previous period. Omitted when GA is not configured\n   *  for the site or the fetch failed — the operator fills the fields manually. */\n  gaUsersCurrent?: number;\n  gaUsersPrevious?: number;\n  /** Search-presence result. `searchFoundPage1` is written whenever the check ran (true or\n   *  false — false is the operator-only negative signal). `searchPosition` only when found. */\n  searchFoundPage1?: boolean;\n  searchPosition?: number;\n  subjectOverride?: string;\n  /** Checklist fields to tick at create time (the auto-tick \"pass\" set). */\n  checklistTicks?: string[];\n  /** Auto-tick evidence snapshot to persist (keyed by checklist field). */\n  autoEvidence?: Record<string, EvidenceRecord>;\n};\n\nfunction ymd(d: Date): string {\n  return d.toISOString().slice(0, 10);\n}\n\n/**\n * Escape a string for safe interpolation into an Airtable filterByFormula.\n * Airtable formulas use SQL-like string literals; we escape backslash and\n * double quote. Used wherever an externally-supplied string flows into a\n * formula (e.g. Resend message ids on the webhook path).\n */\nexport function escapeFormulaString(s: string): string {\n  return s.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"');\n}\n\nexport async function createDraft(base: AirtableBase, input: DraftInput): Promise<ReportRow> {\n  // Set Delivery status to \"pending\" at creation time, NOT at send time. This\n  // matters for H4: if stampSent wrote \"pending\" after the webhook had already\n  // written \"delivered\" (race), the operator would see a regressed status.\n  const fields: FieldSet = {\n    \"Report ID\": input.reportId,\n    Site: [input.siteId],\n    \"Report type\": input.reportType,\n    \"Period start\": ymd(input.periodStart),\n    \"Period end\": ymd(input.periodEnd),\n    \"Completed on\": ymd(input.completedOn),\n    \"Lighthouse — Performance\": input.lighthouse.performance,\n    \"Lighthouse — Accessibility\": input.lighthouse.accessibility,\n    \"Lighthouse — Best Practices\": input.lighthouse.bestPractices,\n    \"Lighthouse — SEO\": input.lighthouse.seo,\n    \"Delivery status\": \"pending\",\n  };\n  if (input.lastTestedDate) fields[\"Last tested date\"] = ymd(input.lastTestedDate);\n  // GA fields are written only when supplied (GA configured + fetch succeeded). When\n  // omitted the row keeps them blank for manual entry — the pre-GA behavior.\n  if (input.gaUsersCurrent !== undefined) fields[\"GA users (period)\"] = input.gaUsersCurrent;\n  if (input.gaUsersPrevious !== undefined) fields[\"GA users (prev period)\"] = input.gaUsersPrevious;\n  if (input.searchFoundPage1 !== undefined) fields[\"Search found page 1\"] = input.searchFoundPage1;\n  if (input.searchPosition !== undefined) fields[\"Search position\"] = input.searchPosition;\n  if (input.period !== undefined) fields[\"Period\"] = input.period;\n  if (input.subjectOverride !== undefined) fields[\"Subject override\"] = input.subjectOverride;\n  // Auto-ticked checklist boxes + the evidence snapshot. The booleans are the same columns the\n  // operator/dashboard toggle; the JSON is what the health gate reads (isHealthGateClear/gatingHealth)\n  // and also drives the dashboard's green/amber badges.\n  for (const field of input.checklistTicks ?? []) fields[field] = true;\n  if (input.autoEvidence && Object.keys(input.autoEvidence).length > 0) {\n    fields[\"Checklist auto-evidence\"] = JSON.stringify(input.autoEvidence);\n  }\n  const created = (await base(REPORTS_TABLE).create([{ fields }])) as Records<FieldSet>;\n  const rec = created[0];\n  if (!rec) throw new Error(\"Airtable create returned no records\");\n  return mapRow({ id: rec.id, fields: rec.fields });\n}\n\nexport async function setDraftReady(\n  base: AirtableBase,\n  recordId: string,\n  ready: boolean,\n): Promise<void> {\n  await base(REPORTS_TABLE).update([{ id: recordId, fields: { \"Draft ready\": ready } }]);\n}\n\n/**\n * Overwrite the four `Lighthouse — *` score cells (and, when supplied, `Completed\n * on`) on an EXISTING Reports row. The launch re-run path uses this: it reuses the\n * already-created Launch row but must refresh its scores to match the freshly-run\n * audit — otherwise the re-rendered preview shows new scores while the row (and the\n * eventually-sent email, which reads the row) keeps the stale ones. The create path\n * already writes fresh scores via `createDraft`; this is its update-side mirror, using\n * the same exact field names so the two stay in lockstep.\n */\nexport async function updateReportScores(\n  base: AirtableBase,\n  recordId: string,\n  scores: LighthouseScores,\n  completedOn?: Date,\n  enrichment?: ReportEnrichment,\n): Promise<void> {\n  const fields: FieldSet = {\n    \"Lighthouse — Performance\": scores.performance,\n    \"Lighthouse — Accessibility\": scores.accessibility,\n    \"Lighthouse — Best Practices\": scores.bestPractices,\n    \"Lighthouse — SEO\": scores.seo,\n  };\n  if (completedOn) fields[\"Completed on\"] = ymd(completedOn);\n  if (enrichment?.gaUsersCurrent !== undefined)\n    fields[\"GA users (period)\"] = enrichment.gaUsersCurrent;\n  if (enrichment?.gaUsersPrevious !== undefined)\n    fields[\"GA users (prev period)\"] = enrichment.gaUsersPrevious;\n  if (enrichment?.searchFoundPage1 !== undefined)\n    fields[\"Search found page 1\"] = enrichment.searchFoundPage1;\n  if (enrichment?.searchPosition !== undefined)\n    fields[\"Search position\"] = enrichment.searchPosition;\n  await base(REPORTS_TABLE).update([{ id: recordId, fields }]);\n}\n\nexport async function listSendableReports(base: AirtableBase): Promise<ReportRow[]> {\n  const out: ReportRow[] = [];\n  await base(REPORTS_TABLE)\n    .select({\n      filterByFormula:\n        \"AND({Draft ready} = TRUE(), {Approved to send} = TRUE(), {Sent at} = BLANK())\",\n      pageSize: 100,\n    })\n    .eachPage((records, fetchNextPage) => {\n      for (const rec of records) out.push(mapRow({ id: rec.id, fields: rec.fields }));\n      fetchNextPage();\n    });\n  return out;\n}\n\n/**\n * Fetch every Reports row, unfiltered. Site-scoped callers filter the result in\n * memory: the `Site` linked-record field CANNOT be formula-filtered by record id\n * (see findReportByPeriod's doc for why), and the fleet's Reports table is small\n * enough that one paged fetch-all beats N broken-or-per-site queries.\n */\nexport async function listAllReports(base: AirtableBase): Promise<ReportRow[]> {\n  const out: ReportRow[] = [];\n  await base(REPORTS_TABLE)\n    .select({ pageSize: 100 })\n    .eachPage((records, fetchNextPage) => {\n      for (const rec of records) out.push(mapRow({ id: rec.id, fields: rec.fields }));\n      fetchNextPage();\n    });\n  return out;\n}\n\nexport async function listReportsForSite(base: AirtableBase, siteId: string): Promise<ReportRow[]> {\n  // Client-side match on the mapped siteId (mapRow reads the record id from the\n  // REST response, where it IS present) — record ids can't appear in formulas.\n  return (await listAllReports(base)).filter((r) => r.siteId === siteId);\n}\n\n/**\n * Mark a row as sent: write `Sent at` and (when known) `Resend message ID`.\n * Crucially does NOT touch `Delivery status` — that's set to \"pending\" in\n * createDraft and updated by the webhook from there. If we wrote \"pending\" here\n * we could clobber a \"delivered\" that the webhook raced ahead and wrote first (H4).\n *\n * `messageId` may be `null`: the 409 idempotency-conflict path has no recoverable\n * id (the original send's id was lost when the prior run's stamp failed), so it\n * passes null and we write ONLY `Sent at`. Writing a sentinel string like\n * \"idempotent-conflict\" into the id column would masquerade as a real Resend id\n * and silently orphan `findReportByMessageId` lookups; leaving it null is honest —\n * the row still stops replaying (Sent at is set), delivery tracking for that one\n * report is simply degraded (the id is genuinely unknowable on that path).\n */\nexport async function stampSent(\n  base: AirtableBase,\n  recordId: string,\n  sentAt: Date,\n  messageId: string | null,\n): Promise<void> {\n  const fields: Record<string, string> = { \"Sent at\": sentAt.toISOString() };\n  if (messageId !== null) fields[\"Resend message ID\"] = messageId;\n  await base(REPORTS_TABLE).update([\n    {\n      id: recordId,\n      fields,\n    },\n  ]);\n}\n\nexport async function setDeliveryStatus(\n  base: AirtableBase,\n  recordId: string,\n  status: DeliveryStatus,\n): Promise<void> {\n  await base(REPORTS_TABLE).update([{ id: recordId, fields: { \"Delivery status\": status } }]);\n}\n\n/**\n * Stamp the approval on a Reports row: flips `Approved to send` TRUE and records\n * who/when for the audit trail. The caller (approveReport handler) is responsible\n * for idempotency — this is the raw write. Never touches `Sent at`.\n */\nexport async function approveReportRow(\n  base: AirtableBase,\n  recordId: string,\n  approvedAt: Date,\n  approvedBy: string,\n): Promise<void> {\n  await base(REPORTS_TABLE).update([\n    {\n      id: recordId,\n      fields: {\n        \"Approved to send\": true,\n        \"Approved At\": approvedAt.toISOString(),\n        \"Approved By\": approvedBy,\n      },\n    },\n  ]);\n}\n\n/**\n * Stamp a logged send-anyway override on a Reports row: sets `Send override` TRUE, the reason, and\n * who/when — AND flips `Approved to send` TRUE (with the same Approved At/By stamp) so the daily\n * cron delivers the overridden report. Mirrors {@link approveReportRow}; never touches `Sent at`.\n */\nexport async function overrideReportRow(\n  base: AirtableBase,\n  recordId: string,\n  overrideAt: Date,\n  overrideBy: string,\n  reason: string,\n): Promise<void> {\n  const at = overrideAt.toISOString();\n  await base(REPORTS_TABLE).update([\n    {\n      id: recordId,\n      fields: {\n        \"Send override\": true,\n        \"Override reason\": reason,\n        \"Override by\": overrideBy,\n        \"Override at\": at,\n        \"Approved to send\": true,\n        \"Approved At\": at,\n        \"Approved By\": overrideBy,\n      },\n    },\n  ]);\n}\n\n/**\n * True when an `.find` rejection is a GENUINE not-found, not a transient failure.\n * The Airtable SDK stamps `.statusCode` (404) and/or `.error` (\"NOT_FOUND\") on\n * its errors. Anything else (429 rate-limit, 500 outage, bad-PAT 401, network\n * error) must NOT be masked as a 404 — see getReportById.\n */\nfunction isNotFoundError(err: unknown): boolean {\n  if (typeof err !== \"object\" || err === null) return false;\n  const e = err as { statusCode?: unknown; error?: unknown; name?: unknown; message?: unknown };\n  if (e.statusCode === 404) return true;\n  const tag = String(e.error ?? e.name ?? e.message ?? \"\");\n  return tag === \"NOT_FOUND\" || /not found/i.test(tag);\n}\n\n/**\n * Fetch one Reports row by its Airtable record id, or null if it doesn't exist.\n * Only a GENUINE not-found (404 / NOT_FOUND) collapses to null; every other\n * failure (outage, 429, bad PAT, network error) is rethrown so the adapter\n * surfaces a 500 instead of a misleading 404. Swallowing all throws previously\n * turned an Airtable outage into a \"no such report\".\n */\nexport async function getReportById(\n  base: AirtableBase,\n  recordId: string,\n): Promise<ReportRow | null> {\n  try {\n    const rec = await base(REPORTS_TABLE).find(recordId);\n    return mapRow({ id: rec.id, fields: rec.fields as Record<string, unknown> });\n  } catch (err) {\n    if (isNotFoundError(err)) return null;\n    throw err;\n  }\n}\n\nexport async function findReportByMessageId(\n  base: AirtableBase,\n  messageId: string,\n): Promise<ReportRow | null> {\n  const rows: ReportRow[] = [];\n  await base(REPORTS_TABLE)\n    .select({\n      filterByFormula: `{Resend message ID} = \"${escapeFormulaString(messageId)}\"`,\n      maxRecords: 1,\n    })\n    .eachPage((records, fetchNextPage) => {\n      for (const rec of records) rows.push(mapRow({ id: rec.id, fields: rec.fields }));\n      fetchNextPage();\n    });\n  return rows[0] ?? null;\n}\n\n/**\n * Find the Reports row for a `(site, reportType, period)` triple, or null. The\n * idempotency lookup behind search-before-create drafting.\n *\n * The site is matched CLIENT-side, never in the formula: Airtable's formula layer\n * renders linked-record fields ({Site}) as the linked rows' PRIMARY-FIELD NAMES,\n * not record ids, so any formula comparing {Site} or ARRAYJOIN({Site}) against a\n * `recXXX` id matches NOTHING (live-proven against the real base — do not\n * reintroduce that idiom). Record ids exist only in the REST response, where\n * mapRow reads them. So the formula filters on the real scalar fields (Report\n * type + Period — escaped, keeping it injection-safe if their source ever\n * changes), and the first mapped row whose siteId matches wins. The candidate\n * set is at most one row per site for the (type, period), so this stays small.\n */\nexport async function findReportByPeriod(\n  base: AirtableBase,\n  siteId: string,\n  reportType: ReportType,\n  period: string,\n): Promise<ReportRow | null> {\n  const safeType = escapeFormulaString(reportType);\n  const safePeriod = escapeFormulaString(period);\n  const formula = `AND({Report type} = \"${safeType}\", {Period} = \"${safePeriod}\")`;\n  const rows: ReportRow[] = [];\n  await base(REPORTS_TABLE)\n    .select({ filterByFormula: formula, pageSize: 100 })\n    .eachPage((records, fetchNextPage) => {\n      for (const rec of records) rows.push(mapRow({ id: rec.id, fields: rec.fields }));\n      fetchNextPage();\n    });\n  return rows.find((r) => r.siteId === siteId) ?? null;\n}\n"],"mappings":";;;;;AAMO,IAAM,gBAAgB;AAE7B,IAAM,eAAsC,CAAC,eAAe,WAAW,UAAU,cAAc;AAQxF,SAAS,aAAa,KAAqC;AAChE,MAAI,OAAQ,aAAmC,SAAS,GAAG,EAAG,QAAO;AACrE,MAAI;AACF,YAAQ,KAAK,iCAAiC,KAAK,UAAU,GAAG,CAAC,iCAA4B;AAC/F,SAAO;AACT;AAuDO,SAAS,kBAAkB,GAAuB;AACvD,SAAO,EAAE,cAAc,CAAC,EAAE,kBAAkB,EAAE,WAAW;AAC3D;AAEO,SAAS,OAAO,KAAiE;AACtF,QAAM,IAAI,IAAI;AACd,QAAM,YAAa,EAAE,MAAM,KAA8B,CAAC;AAC1D,QAAM,QACF,EAAE,eAAe,KAA8D,CAAC,GAAG,CAAC,KAAK;AAC7F,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,UAAU,OAAO,EAAE,WAAW,KAAK,EAAE;AAAA,IACrC,QAAQ,UAAU,CAAC,KAAK;AAAA,IACxB,YAAY,aAAa,EAAE,aAAa,CAAuB;AAAA,IAC/D,QAAS,EAAE,QAAQ,KAA4B;AAAA,IAC/C,aAAc,EAAE,cAAc,KAA4B;AAAA,IAC1D,WAAY,EAAE,YAAY,KAA4B;AAAA,IACtD,aAAc,EAAE,cAAc,KAA4B;AAAA,IAC1D,YAAY,qBAAqB,CAAC;AAAA,IAClC,gBAAiB,EAAE,mBAAmB,KAA4B;AAAA,IAClE,iBAAkB,EAAE,wBAAwB,KAA4B;AAAA,IACxE,kBACE,OAAO,EAAE,qBAAqB,MAAM,YAAa,EAAE,qBAAqB,IAAgB;AAAA,IAC1F,gBAAiB,EAAE,iBAAiB,KAA4B;AAAA,IAChE,gBAAiB,EAAE,kBAAkB,KAA4B;AAAA,IACjE,YAAa,EAAE,YAAY,KAA4B;AAAA,IACvD,iBAAkB,EAAE,kBAAkB,KAA4B;AAAA,IAClE,YAAY,QAAQ,EAAE,aAAa,CAAC;AAAA,IACpC,gBAAgB,QAAQ,EAAE,kBAAkB,CAAC;AAAA,IAC7C,QAAS,EAAE,SAAS,KAA4B;AAAA,IAChD,YAAa,EAAE,aAAa,KAA4B;AAAA,IACxD,YAAa,EAAE,aAAa,KAA4B;AAAA,IACxD,gBAAkB,EAAE,iBAAiB,KAA4B;AAAA,IACjE,wBAAwB;AAAA,IACxB,iBAAkB,EAAE,mBAAmB,KAA4B;AAAA,IACnE,WAAW,OAAO,YAAY,qBAAqB,IAAI,CAAC,SAAS,CAAC,MAAM,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAAA,IAC1F,cAAc,kBAAkB,EAAE,yBAAyB,CAAC;AAAA,IAC5D,cAAc,QAAQ,EAAE,eAAe,CAAC;AAAA,IACxC,gBAAiB,EAAE,iBAAiB,KAA4B;AAAA,IAChE,YAAa,EAAE,aAAa,KAA4B;AAAA,IACxD,YAAa,EAAE,aAAa,KAA4B;AAAA,EAC1D;AACF;AAOO,SAAS,kBAAkB,KAAqD;AACrF,MAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,EAAG,QAAO;AACnD,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AAI3E,QAAM,MAAsC,CAAC;AAC7C,aAAW,CAAC,OAAO,CAAC,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC1E,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU;AACjC,UAAM,IAAI;AACV,QAAI,EAAE,WAAW,UAAU,EAAE,WAAW,UAAU,EAAE,WAAW,aAAa,EAAE,WAAW;AACvF;AACF,QAAI,KAAK,IAAI;AAAA,MACX,QAAQ,EAAE;AAAA,MACV,WAAW,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAAA,MAC3D,MAAM,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,IAC9C;AAAA,EACF;AACA,SAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAC7C;AAEA,SAAS,qBAAqB,GAAqD;AACjF,QAAM,IAAI,EAAE,+BAA0B;AACtC,QAAM,IAAI,EAAE,iCAA4B;AACxC,QAAM,IAAI,EAAE,kCAA6B;AACzC,QAAM,IAAI,EAAE,uBAAkB;AAC9B,MACE,OAAO,MAAM,YACb,OAAO,MAAM,YACb,OAAO,MAAM,YACb,OAAO,MAAM;AAEb,WAAO;AACT,SAAO,EAAE,aAAa,GAAG,eAAe,GAAG,eAAe,GAAG,KAAK,EAAE;AACtE;AAuCA,SAAS,IAAI,GAAiB;AAC5B,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACpC;AAQO,SAAS,oBAAoB,GAAmB;AACrD,SAAO,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK;AACrD;AAEA,eAAsB,YAAY,MAAoB,OAAuC;AAI3F,QAAM,SAAmB;AAAA,IACvB,aAAa,MAAM;AAAA,IACnB,MAAM,CAAC,MAAM,MAAM;AAAA,IACnB,eAAe,MAAM;AAAA,IACrB,gBAAgB,IAAI,MAAM,WAAW;AAAA,IACrC,cAAc,IAAI,MAAM,SAAS;AAAA,IACjC,gBAAgB,IAAI,MAAM,WAAW;AAAA,IACrC,iCAA4B,MAAM,WAAW;AAAA,IAC7C,mCAA8B,MAAM,WAAW;AAAA,IAC/C,oCAA+B,MAAM,WAAW;AAAA,IAChD,yBAAoB,MAAM,WAAW;AAAA,IACrC,mBAAmB;AAAA,EACrB;AACA,MAAI,MAAM,eAAgB,QAAO,kBAAkB,IAAI,IAAI,MAAM,cAAc;AAG/E,MAAI,MAAM,mBAAmB,OAAW,QAAO,mBAAmB,IAAI,MAAM;AAC5E,MAAI,MAAM,oBAAoB,OAAW,QAAO,wBAAwB,IAAI,MAAM;AAClF,MAAI,MAAM,qBAAqB,OAAW,QAAO,qBAAqB,IAAI,MAAM;AAChF,MAAI,MAAM,mBAAmB,OAAW,QAAO,iBAAiB,IAAI,MAAM;AAC1E,MAAI,MAAM,WAAW,OAAW,QAAO,QAAQ,IAAI,MAAM;AACzD,MAAI,MAAM,oBAAoB,OAAW,QAAO,kBAAkB,IAAI,MAAM;AAI5E,aAAW,SAAS,MAAM,kBAAkB,CAAC,EAAG,QAAO,KAAK,IAAI;AAChE,MAAI,MAAM,gBAAgB,OAAO,KAAK,MAAM,YAAY,EAAE,SAAS,GAAG;AACpE,WAAO,yBAAyB,IAAI,KAAK,UAAU,MAAM,YAAY;AAAA,EACvE;AACA,QAAM,UAAW,MAAM,KAAK,aAAa,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9D,QAAM,MAAM,QAAQ,CAAC;AACrB,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,qCAAqC;AAC/D,SAAO,OAAO,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAO,CAAC;AAClD;AAEA,eAAsB,cACpB,MACA,UACA,OACe;AACf,QAAM,KAAK,aAAa,EAAE,OAAO,CAAC,EAAE,IAAI,UAAU,QAAQ,EAAE,eAAe,MAAM,EAAE,CAAC,CAAC;AACvF;AAWA,eAAsB,mBACpB,MACA,UACA,QACA,aACA,YACe;AACf,QAAM,SAAmB;AAAA,IACvB,iCAA4B,OAAO;AAAA,IACnC,mCAA8B,OAAO;AAAA,IACrC,oCAA+B,OAAO;AAAA,IACtC,yBAAoB,OAAO;AAAA,EAC7B;AACA,MAAI,YAAa,QAAO,cAAc,IAAI,IAAI,WAAW;AACzD,MAAI,YAAY,mBAAmB;AACjC,WAAO,mBAAmB,IAAI,WAAW;AAC3C,MAAI,YAAY,oBAAoB;AAClC,WAAO,wBAAwB,IAAI,WAAW;AAChD,MAAI,YAAY,qBAAqB;AACnC,WAAO,qBAAqB,IAAI,WAAW;AAC7C,MAAI,YAAY,mBAAmB;AACjC,WAAO,iBAAiB,IAAI,WAAW;AACzC,QAAM,KAAK,aAAa,EAAE,OAAO,CAAC,EAAE,IAAI,UAAU,OAAO,CAAC,CAAC;AAC7D;AAEA,eAAsB,oBAAoB,MAA0C;AAClF,QAAM,MAAmB,CAAC;AAC1B,QAAM,KAAK,aAAa,EACrB,OAAO;AAAA,IACN,iBACE;AAAA,IACF,UAAU;AAAA,EACZ,CAAC,EACA,SAAS,CAAC,SAAS,kBAAkB;AACpC,eAAW,OAAO,QAAS,KAAI,KAAK,OAAO,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC9E,kBAAc;AAAA,EAChB,CAAC;AACH,SAAO;AACT;AAQA,eAAsB,eAAe,MAA0C;AAC7E,QAAM,MAAmB,CAAC;AAC1B,QAAM,KAAK,aAAa,EACrB,OAAO,EAAE,UAAU,IAAI,CAAC,EACxB,SAAS,CAAC,SAAS,kBAAkB;AACpC,eAAW,OAAO,QAAS,KAAI,KAAK,OAAO,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC9E,kBAAc;AAAA,EAChB,CAAC;AACH,SAAO;AACT;AAEA,eAAsB,mBAAmB,MAAoB,QAAsC;AAGjG,UAAQ,MAAM,eAAe,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM;AACvE;AAgBA,eAAsB,UACpB,MACA,UACA,QACA,WACe;AACf,QAAM,SAAiC,EAAE,WAAW,OAAO,YAAY,EAAE;AACzE,MAAI,cAAc,KAAM,QAAO,mBAAmB,IAAI;AACtD,QAAM,KAAK,aAAa,EAAE,OAAO;AAAA,IAC/B;AAAA,MACE,IAAI;AAAA,MACJ;AAAA,IACF;AAAA,EACF,CAAC;AACH;AA+HA,eAAsB,mBACpB,MACA,QACA,YACA,QAC2B;AAC3B,QAAM,WAAW,oBAAoB,UAAU;AAC/C,QAAM,aAAa,oBAAoB,MAAM;AAC7C,QAAM,UAAU,wBAAwB,QAAQ,kBAAkB,UAAU;AAC5E,QAAM,OAAoB,CAAC;AAC3B,QAAM,KAAK,aAAa,EACrB,OAAO,EAAE,iBAAiB,SAAS,UAAU,IAAI,CAAC,EAClD,SAAS,CAAC,SAAS,kBAAkB;AACpC,eAAW,OAAO,QAAS,MAAK,KAAK,OAAO,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC/E,kBAAc;AAAA,EAChB,CAAC;AACH,SAAO,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,KAAK;AAClD;","names":[]}

package/dist/chunk-BNM5POSJ.js

@@ -0,0 +1,284 @@
+import {
+  SPAM_THRESHOLD
+} from "./chunk-SNSTJLQW.js";
+import {
+  SUBMISSION_FORM_TYPES
+} from "./chunk-2OP4JKIQ.js";
+
+// src/forms/payload.ts
+var KNOWN_KEYS = /* @__PURE__ */ new Set([
+  "formType",
+  "name",
+  "firstName",
+  "lastName",
+  "email",
+  "phone",
+  "message",
+  "sourceUrl",
+  "utm",
+  "extra",
+  "_meta"
+]);
+var DANGEROUS_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+var EMAIL_RE = /^[^@\s]+@[^@\s]+\.[^@\s]+$/;
+function str(v) {
+  return typeof v === "string" ? v.trim() : "";
+}
+function resolveFormType(raw) {
+  const s = str(raw);
+  if (s === "") return "contact";
+  return SUBMISSION_FORM_TYPES.includes(s) ? s : null;
+}
+function normalizeSubmission(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return { ok: false, errors: ["payload must be a JSON object"] };
+  }
+  const p = payload;
+  const name = str(p.name) || [str(p.firstName), str(p.lastName)].filter(Boolean).join(" ");
+  const email = str(p.email).toLowerCase();
+  const message = str(p.message);
+  const formType = resolveFormType(p.formType);
+  const errors = [];
+  if (!email && !message) errors.push("at least one of email or message is required");
+  if (email && !EMAIL_RE.test(email)) errors.push("email is not a valid address");
+  if (formType === null) errors.push("formType is not a recognized form type");
+  if (errors.length > 0 || formType === null) return { ok: false, errors };
+  const extraFields = {};
+  const extra = p.extra;
+  if (typeof extra === "object" && extra !== null) {
+    for (const [k, v] of Object.entries(extra)) {
+      if (!DANGEROUS_KEYS.has(k)) extraFields[k] = v;
+    }
+  }
+  for (const [k, v] of Object.entries(p)) {
+    if (!KNOWN_KEYS.has(k) && !DANGEROUS_KEYS.has(k)) extraFields[k] = v;
+  }
+  const value = {
+    formType,
+    name,
+    email,
+    extraFields
+  };
+  const phone = str(p.phone);
+  if (phone) value.phone = phone;
+  if (message) value.message = message;
+  const sourceUrl = str(p.sourceUrl);
+  if (sourceUrl) value.sourceUrl = sourceUrl;
+  const utm = str(p.utm);
+  if (utm) value.utm = utm;
+  return { ok: true, value };
+}
+
+// src/forms/ingest.ts
+var DUPLICATE_WINDOW_MS = 30 * 24 * 60 * 60 * 1e3;
+async function ingestSubmission(deps, slug, rawPayload, turnstileInput = "unverifiable") {
+  const verification = typeof turnstileInput === "string" ? { outcome: turnstileInput, hostname: null } : turnstileInput;
+  const turnstile = verification.outcome;
+  const normalized = normalizeSubmission(rawPayload);
+  if (!normalized.ok) {
+    return { status: "rejected", reason: "invalid-payload", errors: normalized.errors };
+  }
+  let site;
+  try {
+    site = await deps.getWebsiteBySlug(slug);
+  } catch (err) {
+    if (!deps.deadLetter || isTestMode(rawPayload)) throw err;
+    const dl = await deps.deadLetter({
+      siteSlug: slug,
+      payload: rawPayload,
+      turnstile: verification,
+      error: String(err),
+      receivedAt: deps.now()
+    });
+    console.error(
+      `[ingest] site lookup failed for '${slug}' \u2014 lead dead-lettered as ${dl.id}: ${String(err)}`
+    );
+    return { status: "accepted", submissionId: dl.id, notifyStatus: "skipped" };
+  }
+  if (!site) return { status: "unknown-site", slug };
+  if (isTestMode(rawPayload)) {
+    return { status: "accepted", submissionId: "test-mode", notifyStatus: "skipped" };
+  }
+  const n = normalized.value;
+  const spamHandlingEnabled = site.status !== "building";
+  let verdict = { score: 0, reasons: [] };
+  if (spamHandlingEnabled && deps.classifySpam) {
+    try {
+      verdict = deps.classifySpam(n, turnstile);
+    } catch (err) {
+      console.error(`[ingest] classifySpam threw: ${String(err)}`);
+    }
+  }
+  const reasons = [...verdict.reasons];
+  let status = verdict.score >= SPAM_THRESHOLD ? "spam_auto" : "new";
+  if (spamHandlingEnabled && site.requireTurnstile && (turnstile === "fail" || turnstile === "absent")) {
+    status = "spam_auto";
+    const reason = turnstile === "fail" ? "turnstile-required-failed" : "turnstile-required-absent";
+    if (!reasons.includes(reason)) reasons.push(reason);
+  } else if (spamHandlingEnabled && site.requireTurnstile && turnstile === "pass" && verification.hostname !== null && !turnstileHostnameAcceptable(verification.hostname, site.url)) {
+    status = "spam_auto";
+    if (!reasons.includes("turnstile-required-hostname"))
+      reasons.push("turnstile-required-hostname");
+  }
+  if (spamHandlingEnabled && n.formType !== "newsletter" && deps.listRecentSubmissionsForEmail) {
+    try {
+      const since = new Date(deps.now().getTime() - DUPLICATE_WINDOW_MS);
+      const prior = await deps.listRecentSubmissionsForEmail(n.email, since);
+      const otherSites = prior.filter((p) => p.siteId !== site.id);
+      if (otherSites.length > 0) {
+        if (status !== "spam_auto") {
+          status = "spam_auto";
+          if (!reasons.includes("repeat-sender")) reasons.push("repeat-sender");
+        }
+        const retroIds = otherSites.filter((p) => p.status === "new").map((p) => p.id);
+        if (deps.retroBucket && retroIds.length > 0) {
+          try {
+            await deps.retroBucket(retroIds, "retro:repeat-sender");
+          } catch (err) {
+            console.error(`[ingest] retroBucket (repeat-sender) threw: ${String(err)}`);
+          }
+        }
+      }
+    } catch (err) {
+      console.error(`[ingest] listRecentSubmissionsForEmail threw: ${String(err)}`);
+    }
+  }
+  if (spamHandlingEnabled && n.formType !== "newsletter" && n.message !== void 0 && deps.findRecentDuplicates) {
+    try {
+      const since = new Date(deps.now().getTime() - DUPLICATE_WINDOW_MS);
+      const dupes = await deps.findRecentDuplicates(n.message, since);
+      const senderEmail = n.email.trim().toLowerCase();
+      const isOwnResend = (m) => m.siteId === site.id && m.email.trim().toLowerCase() === senderEmail;
+      const exact = dupes.exact.filter((m) => !isOwnResend(m));
+      const similar = dupes.similar.filter((m) => !isOwnResend(m));
+      const reason = exact.length > 0 ? "duplicate-body" : similar.length > 0 ? "similar-body" : null;
+      if (reason !== null) {
+        if (status !== "spam_auto") {
+          status = "spam_auto";
+          if (!reasons.includes(reason)) reasons.push(reason);
+        }
+        const retroIds = [...exact, ...similar].filter((m) => m.status === "new").map((m) => m.id);
+        if (deps.retroBucket && retroIds.length > 0) {
+          try {
+            await deps.retroBucket(retroIds, "retro:duplicate-body");
+          } catch (err) {
+            console.error(`[ingest] retroBucket (duplicate-body) threw: ${String(err)}`);
+          }
+        }
+      }
+    } catch (err) {
+      console.error(`[ingest] findRecentDuplicates threw: ${String(err)}`);
+    }
+  }
+  const spamReason = reasons.length > 0 ? reasons.join(",") : null;
+  const row = await deps.createSubmission({
+    siteId: site.id,
+    formType: n.formType,
+    name: n.name,
+    email: n.email,
+    extraFields: n.extraFields,
+    status,
+    spamScore: verdict.score,
+    spamReason,
+    // Optional fields spread only when present — exactOptionalPropertyTypes
+    // forbids assigning `undefined` to an optional `phone?: string` etc.
+    ...n.phone !== void 0 ? { phone: n.phone } : {},
+    ...n.message !== void 0 ? { message: n.message } : {},
+    ...n.sourceUrl !== void 0 ? { sourceUrl: n.sourceUrl } : {},
+    ...n.utm !== void 0 ? { utm: n.utm } : {},
+    submittedAt: deps.now()
+  });
+  const isSpam = row.status === "spam_auto" || row.status === "spam";
+  const runTail = async () => {
+    let notify;
+    if (isSpam) {
+      notify = { status: "skipped", messageId: null };
+    } else {
+      try {
+        notify = await deps.notify(site, row);
+      } catch (err) {
+        console.error(`[ingest] notify threw: ${String(err)}`);
+        notify = { status: "failed", messageId: null };
+      }
+    }
+    try {
+      await deps.stampNotified(row.id, notify.status, notify.messageId);
+    } catch (err) {
+      console.error(`[ingest] stampNotified failed: ${String(err)}`);
+    }
+    await runFanout();
+    return notify.status;
+  };
+  const runFanout = async () => {
+    const fanout = [];
+    if (n.formType === "newsletter" && !isSpam) {
+      if (site.newsletterWebhook && deps.forwardNewsletter) {
+        try {
+          const fwd = await deps.forwardNewsletter(site.newsletterWebhook, row, site);
+          if (!fwd.ok)
+            console.error(`[ingest] newsletter webhook \u2192 ${fwd.status} for ${site.name}`);
+          fanout.push(fwd.ok ? "webhook:ok" : `webhook:${fwd.status}`);
+        } catch (err) {
+          console.error(`[ingest] newsletter webhook threw: ${String(err)}`);
+          fanout.push("webhook:threw");
+        }
+      }
+      if (site.mailchimpApiKey && site.mailchimpAudienceId && deps.addToMailchimp) {
+        try {
+          const mc = await deps.addToMailchimp(site, row);
+          if (!mc.ok) console.error(`[ingest] mailchimp add \u2192 ${mc.status} for ${site.name}`);
+          fanout.push(mc.ok ? "mailchimp:ok" : `mailchimp:${mc.status}`);
+          if (mc.ok && mc.tagged === false) {
+            console.error(`[ingest] mailchimp tags not applied for ${site.name}`);
+            fanout.push("mailchimp-tags:failed");
+          }
+        } catch (err) {
+          console.error(`[ingest] mailchimp add threw: ${String(err)}`);
+          fanout.push("mailchimp:threw");
+        }
+      }
+    }
+    if (fanout.length > 0 && deps.stampFanout) {
+      try {
+        await deps.stampFanout(row.id, fanout.join(","));
+      } catch (err) {
+        console.error(`[ingest] stampFanout failed: ${String(err)}`);
+      }
+    }
+  };
+  if (deps.defer) {
+    deps.defer(
+      runTail().catch((err) => {
+        console.error(`[ingest] deferred tail threw: ${String(err)}`);
+      })
+    );
+    return { status: "accepted", submissionId: row.id, notifyStatus: "deferred" };
+  }
+  return { status: "accepted", submissionId: row.id, notifyStatus: await runTail() };
+}
+function hostsMatch(a, b) {
+  const ha = a.trim().toLowerCase();
+  const hb = b.trim().toLowerCase();
+  if (ha.length === 0 || hb.length === 0) return false;
+  return ha === hb || ha.endsWith(`.${hb}`) || hb.endsWith(`.${ha}`);
+}
+function turnstileHostnameAcceptable(tokenHostname, siteUrl) {
+  let siteHost;
+  try {
+    siteHost = new URL(siteUrl).hostname;
+  } catch {
+    return true;
+  }
+  if (!siteHost) return true;
+  return hostsMatch(tokenHostname, siteHost);
+}
+function isTestMode(rawPayload) {
+  if (!rawPayload || typeof rawPayload !== "object") return false;
+  return rawPayload.testMode === true;
+}
+
+export {
+  ingestSubmission,
+  hostsMatch
+};
+//# sourceMappingURL=chunk-BNM5POSJ.js.map