@reddoorla/maintenance 0.85.2 → 0.87.0

package/dist/email-KJXASVH5.js

@@ -0,0 +1,195 @@
+import {
+  renderProspectReport
+} from "./chunk-DEWJMMG3.js";
+import "./chunk-HSI6Q7MI.js";
+import {
+  escapeHtml,
+  safeUrl
+} from "./chunk-DJZWYIPP.js";
+import {
+  defaultResendClient
+} from "./chunk-WEKL2HYJ.js";
+import {
+  hostnameOf
+} from "./chunk-EVBCK2KC.js";
+
+// src/prospect/email.ts
+var FROM_ADDRESS = "Reddoor Reports <reports@reddoorla.com>";
+var IMPACT_ORDER = { high: 0, medium: 1, low: 2 };
+var TOP_FIX_COUNT = 3;
+function resolveName(result) {
+  return result.businessName && result.businessName.trim() ? result.businessName : hostnameOf(result.url);
+}
+function subjectSafe(s) {
+  return s.replace(/\s+/g, " ").trim();
+}
+function formatIsoDate(iso) {
+  const d = new Date(iso);
+  if (Number.isNaN(d.getTime())) return iso;
+  return d.toLocaleDateString("en-US", {
+    year: "numeric",
+    month: "long",
+    day: "numeric",
+    timeZone: "UTC"
+  });
+}
+function notMeasuredLines(result) {
+  const lines = [];
+  if (!result.checks.ok) {
+    lines.push({
+      label: "Findability",
+      reason: `the checks stage failed \u2014 ${result.checks.error}`
+    });
+    lines.push({
+      label: "Readability",
+      reason: `the checks stage failed \u2014 ${result.checks.error}`
+    });
+  } else {
+    const c = result.checks.data;
+    if (result.scores.findability === null) {
+      lines.push({
+        label: "Findability",
+        reason: !c.crawlerAccessMeasured ? "robots.txt could not be fetched, so crawler access wasn't measured" : "every crawled page failed to produce readable content"
+      });
+    }
+    if (result.scores.readability === null) {
+      lines.push({
+        label: "Readability",
+        reason: "no page produced a comparable raw/rendered pair to measure JavaScript dependence"
+      });
+    }
+  }
+  if (!result.lighthouse.ok) {
+    lines.push({ label: "Lighthouse", reason: result.lighthouse.error });
+  }
+  if (!result.analyze.ok) {
+    lines.push({ label: "Answers", reason: result.analyze.error });
+  } else if (result.scores.answers === null) {
+    lines.push({ label: "Answers", reason: "the model found no buyer questions to check" });
+  }
+  if (!result.probes.ok) {
+    lines.push({ label: "AI Visibility", reason: result.probes.error });
+  } else if (result.scores.aiVisibility === null) {
+    lines.push({ label: "AI Visibility", reason: "no category (buyer-question) query ran" });
+  }
+  return lines;
+}
+var SCORE_FIELDS = [
+  { key: "findability", label: "Findability" },
+  { key: "readability", label: "Readability" },
+  { key: "answers", label: "Answers" },
+  { key: "aiVisibility", label: "AI Visibility" }
+];
+function scoresTableHtml(scores) {
+  const cells = SCORE_FIELDS.map(({ key, label }) => {
+    const value = scores[key];
+    const display = value === null ? "Not measured" : String(value);
+    const valueStyle = value === null ? "color:#8a857e;font-size:14px;" : "color:#d71920;font-size:28px;";
+    return `<td style="padding:12px 16px;border:1px solid #e6e1da;text-align:center;">
+      <div style="font-weight:600;${valueStyle}">${escapeHtml(display)}</div>
+      <div style="font-size:12px;letter-spacing:.04em;text-transform:uppercase;color:#57544f;margin-top:4px;">${escapeHtml(label)}</div>
+    </td>`;
+  }).join("");
+  return `<table role="presentation" style="border-collapse:collapse;margin:16px 0;"><tr>${cells}</tr></table>`;
+}
+function notMeasuredHtml(lines) {
+  if (lines.length === 0) return "";
+  const items = lines.map((l) => `<li><strong>${escapeHtml(l.label)}</strong> \u2014 ${escapeHtml(l.reason)}</li>`).join("");
+  return `<h2 style="font-size:16px;margin:24px 0 8px;">Not measured</h2><ul style="margin:0;padding-left:20px;">${items}</ul>`;
+}
+function fixesHtml(analyze) {
+  if (!analyze.ok) {
+    return `<p style="color:#8a857e;margin:8px 0 0;">Fixes not available \u2014 ${escapeHtml(analyze.error)}</p>`;
+  }
+  const top = [...analyze.data.fixes].sort((a, b) => IMPACT_ORDER[a.impact] - IMPACT_ORDER[b.impact]).slice(0, TOP_FIX_COUNT);
+  if (top.length === 0) {
+    return `<p style="margin:8px 0 0;">Nothing urgent \u2014 the essentials are already in place.</p>`;
+  }
+  const items = top.map(
+    (f) => `<li><strong>${escapeHtml(f.title)}</strong> \u2014 ${escapeHtml(f.why)} <span style="color:#8a857e;">(${escapeHtml(f.impact)} impact, ${escapeHtml(f.effort)} effort)</span></li>`
+  ).join("");
+  return `<ol style="margin:8px 0 0;padding-left:20px;">${items}</ol>`;
+}
+function linkHtml(link) {
+  if (!link) {
+    return `<p style="margin:24px 0 0;color:#8a857e;">No shareable link \u2014 the audit could not be saved to the database. The full report is attached to this email instead.</p>`;
+  }
+  const safe = safeUrl(link);
+  return `<p style="margin:24px 0 0;"><strong>Full report:</strong> <a href="${escapeHtml(safe)}">${escapeHtml(link)}</a></p>`;
+}
+var INTERNAL_NOTE = `<p style="margin:24px 0 0;padding:12px 14px;background:#f4f2ef;border-left:3px solid #d71920;color:#57544f;font-size:14px;">
+  Internal sheet \u2014 it names the reasons a section could not be measured. The
+  version to send a prospect is the linked report, also attached to this email.
+</p>`;
+function buildAuditEmail(result, opts) {
+  const name = resolveName(result);
+  const subject = `Prospect audit \u2014 ${subjectSafe(name)}`;
+  const html = `<!doctype html>
+<html lang="en">
+<head><meta charset="utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /></head>
+<body style="margin:0;padding:24px;background:#faf8f5;color:#1a1a1a;font:15px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;">
+  <h1 style="font-size:22px;margin:0 0 4px;">Prospect audit \u2014 ${escapeHtml(name)}</h1>
+  <p style="margin:0 0 16px;color:#57544f;">
+    <a href="${escapeHtml(safeUrl(result.url))}">${escapeHtml(result.url)}</a> \xB7 audited ${escapeHtml(formatIsoDate(result.generatedAt))}
+  </p>
+  ${scoresTableHtml(result.scores)}
+  ${notMeasuredHtml(notMeasuredLines(result))}
+  <h2 style="font-size:16px;margin:24px 0 8px;">Top fixes</h2>
+  ${fixesHtml(result.analyze)}
+  ${linkHtml(opts.link)}
+  ${INTERNAL_NOTE}
+</body>
+</html>`;
+  return { subject, html, attachmentHtml: renderProspectReport(result) };
+}
+function parseProspectAuditRecipients(raw) {
+  if (!raw) return [];
+  const seen = /* @__PURE__ */ new Set();
+  const list = [];
+  for (const part of raw.split(",")) {
+    const trimmed = part.trim().toLowerCase();
+    if (!trimmed) continue;
+    if (seen.has(trimmed)) continue;
+    seen.add(trimmed);
+    list.push(trimmed);
+  }
+  return list;
+}
+function slugify(s) {
+  const slug = s.toLowerCase().replace(/[^a-z0-9.-]+/g, "-").replace(/^-+|-+$/g, "");
+  return slug || "prospect";
+}
+async function sendAuditEmail(result, opts) {
+  if (opts.recipients.length === 0) {
+    return {
+      sent: false,
+      reason: "no recipients configured (PROSPECT_AUDIT_RECIPIENTS is unset or empty)"
+    };
+  }
+  const built = buildAuditEmail(result, { link: opts.link });
+  const attachmentHtml = opts.renderReport ? opts.renderReport(result) : built.attachmentHtml;
+  const client = opts.client ?? defaultResendClient();
+  const idempotencyKey = `prospect-audit:${opts.auditId ?? `${result.url}#${result.generatedAt}`}`;
+  const filename = `prospect-audit-${slugify(hostnameOf(result.url))}.html`;
+  const { messageId } = await client.send({
+    from: FROM_ADDRESS,
+    to: opts.recipients,
+    subject: built.subject,
+    html: built.html,
+    attachments: [
+      {
+        filename,
+        content: Buffer.from(attachmentHtml, "utf-8").toString("base64"),
+        contentType: "text/html"
+      }
+    ],
+    idempotencyKey
+  });
+  return { sent: true, messageId, recipients: opts.recipients };
+}
+export {
+  buildAuditEmail,
+  parseProspectAuditRecipients,
+  sendAuditEmail
+};
+//# sourceMappingURL=email-KJXASVH5.js.map

package/dist/email-KJXASVH5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prospect/email.ts"],"sourcesContent":["import { escapeHtml, safeUrl } from \"../util/html.js\";\nimport { hostnameOf } from \"../util/url.js\";\nimport { renderProspectReport } from \"./render.js\";\nimport { defaultResendClient, type ResendClient } from \"../reports/send/resend.js\";\nimport type { AnalyzeResult, Fix, ProspectAuditResult, StageResult } from \"./types.js\";\n\n/**\n * Mirrors `reports/send/orchestrate.ts`'s `FROM_ADDRESS` (its line 18) — copied,\n * not imported, exactly like `digest.ts` and `recipes/selftest-email.ts` already\n * do. orchestrate.ts's own `FROM_ADDRESS` isn't exported, and importing it would\n * drag its whole Airtable/MJML dependency chain into this module's graph, which\n * stays lazy-loaded on purpose (see bin.ts's central-dep-blocker comment — this\n * module reaches `resend`, a devDependency, and must only ever be reached via a\n * dynamic `import()` from the CLI).\n */\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\n\nconst IMPACT_ORDER: Record<Fix[\"impact\"], number> = { high: 0, medium: 1, low: 2 };\n\n/** \"top few fixes\" per the design — enough to be useful on an internal sheet\n *  without turning it into the full client report. */\nconst TOP_FIX_COUNT = 3;\n\nexport type AuditEmailContent = {\n  subject: string;\n  html: string;\n  /** The FULL client-facing report (render.ts's `renderProspectReport`, pure\n   *  and deterministic like this function), so `sendAuditEmail` can attach it\n   *  without a second render call on the default path. */\n  attachmentHtml: string;\n};\n\n/** The searchable business name when the pipeline resolved one, else the\n *  hostname — mirrors render.ts's identical fallback (types.ts's businessName\n *  doc: \"Null when no name was ever resolved... itself a finding, not an\n *  error\"). Used for both the subject line and the sheet's own heading. */\nfunction resolveName(result: ProspectAuditResult): string {\n  return result.businessName && result.businessName.trim()\n    ? result.businessName\n    : hostnameOf(result.url);\n}\n\n/**\n * Mail subject headers are plain text, never HTML-rendered by a client — no\n * `escapeHtml` needed there (that would wrongly show literal \"&lt;\" etc. in\n * the subject line). A raw newline/control character IS worth collapsing:\n * a business name that embeds one (scraped page title, model output) would\n * otherwise visibly break the subject, and a stray CR/LF in a header value\n * is the classic email-header-injection vector — defense-in-depth even\n * though the Resend API's JSON transport already neutralizes it here.\n */\nfunction subjectSafe(s: string): string {\n  return s.replace(/\\s+/g, \" \").trim();\n}\n\n/** Local copy of render.ts's date formatter — small enough that importing it\n *  (render.ts doesn't export it) isn't worth the coupling. */\nfunction formatIsoDate(iso: string): string {\n  const d = new Date(iso);\n  if (Number.isNaN(d.getTime())) return iso;\n  return d.toLocaleDateString(\"en-US\", {\n    year: \"numeric\",\n    month: \"long\",\n    day: \"numeric\",\n    timeZone: \"UTC\",\n  });\n}\n\ntype NotMeasuredLine = { label: string; reason: string };\n\n/**\n * Everything on the sheet that reads \"not measured\", and why — in plain\n * words. Unlike render.ts's client-facing report (which collapses every\n * stage failure to STAGE_FAILED_MESSAGE so a stranger never sees operator\n * vocabulary), this email goes to Tucker/Tim/Erik: the real diagnostic\n * (a fetch error, an LLM timeout) is more useful to them than a sanitized\n * phrase, so stage `error` strings are surfaced verbatim (still escaped —\n * they can embed arbitrary text from a fetch response).\n *\n * The four-Scores branches mirror checks.ts's `computeScores` exactly: which\n * stage feeds which score, and the cases where that stage's OWN data still\n * nulls the score even though the stage itself succeeded (crawlerAccessMeasured\n * false, avgMissing null, empty buyerQuestions, a null visibilityScore). If\n * computeScores' conditions change, this needs the matching update.\n */\nfunction notMeasuredLines(result: ProspectAuditResult): NotMeasuredLine[] {\n  const lines: NotMeasuredLine[] = [];\n\n  if (!result.checks.ok) {\n    lines.push({\n      label: \"Findability\",\n      reason: `the checks stage failed — ${result.checks.error}`,\n    });\n    lines.push({\n      label: \"Readability\",\n      reason: `the checks stage failed — ${result.checks.error}`,\n    });\n  } else {\n    const c = result.checks.data;\n    if (result.scores.findability === null) {\n      lines.push({\n        label: \"Findability\",\n        reason: !c.crawlerAccessMeasured\n          ? \"robots.txt could not be fetched, so crawler access wasn't measured\"\n          : \"every crawled page failed to produce readable content\",\n      });\n    }\n    if (result.scores.readability === null) {\n      lines.push({\n        label: \"Readability\",\n        reason: \"no page produced a comparable raw/rendered pair to measure JavaScript dependence\",\n      });\n    }\n  }\n\n  if (!result.lighthouse.ok) {\n    lines.push({ label: \"Lighthouse\", reason: result.lighthouse.error });\n  }\n\n  if (!result.analyze.ok) {\n    lines.push({ label: \"Answers\", reason: result.analyze.error });\n  } else if (result.scores.answers === null) {\n    lines.push({ label: \"Answers\", reason: \"the model found no buyer questions to check\" });\n  }\n\n  if (!result.probes.ok) {\n    lines.push({ label: \"AI Visibility\", reason: result.probes.error });\n  } else if (result.scores.aiVisibility === null) {\n    lines.push({ label: \"AI Visibility\", reason: \"no category (buyer-question) query ran\" });\n  }\n\n  return lines;\n}\n\nconst SCORE_FIELDS: { key: keyof ProspectAuditResult[\"scores\"]; label: string }[] = [\n  { key: \"findability\", label: \"Findability\" },\n  { key: \"readability\", label: \"Readability\" },\n  { key: \"answers\", label: \"Answers\" },\n  { key: \"aiVisibility\", label: \"AI Visibility\" },\n];\n\nfunction scoresTableHtml(scores: ProspectAuditResult[\"scores\"]): string {\n  const cells = SCORE_FIELDS.map(({ key, label }) => {\n    const value = scores[key];\n    const display = value === null ? \"Not measured\" : String(value);\n    const valueStyle =\n      value === null ? \"color:#8a857e;font-size:14px;\" : \"color:#d71920;font-size:28px;\";\n    return `<td style=\"padding:12px 16px;border:1px solid #e6e1da;text-align:center;\">\n      <div style=\"font-weight:600;${valueStyle}\">${escapeHtml(display)}</div>\n      <div style=\"font-size:12px;letter-spacing:.04em;text-transform:uppercase;color:#57544f;margin-top:4px;\">${escapeHtml(label)}</div>\n    </td>`;\n  }).join(\"\");\n  return `<table role=\"presentation\" style=\"border-collapse:collapse;margin:16px 0;\"><tr>${cells}</tr></table>`;\n}\n\nfunction notMeasuredHtml(lines: NotMeasuredLine[]): string {\n  if (lines.length === 0) return \"\";\n  const items = lines\n    .map((l) => `<li><strong>${escapeHtml(l.label)}</strong> — ${escapeHtml(l.reason)}</li>`)\n    .join(\"\");\n  return `<h2 style=\"font-size:16px;margin:24px 0 8px;\">Not measured</h2><ul style=\"margin:0;padding-left:20px;\">${items}</ul>`;\n}\n\n/** analyze.error and fix titles/why are untrusted (LLM output, or text lifted\n *  from the prospect's own site) — every interpolation below is escaped. */\nfunction fixesHtml(analyze: StageResult<AnalyzeResult>): string {\n  if (!analyze.ok) {\n    return `<p style=\"color:#8a857e;margin:8px 0 0;\">Fixes not available — ${escapeHtml(analyze.error)}</p>`;\n  }\n  const top = [...analyze.data.fixes]\n    .sort((a, b) => IMPACT_ORDER[a.impact] - IMPACT_ORDER[b.impact])\n    .slice(0, TOP_FIX_COUNT);\n  if (top.length === 0) {\n    return `<p style=\"margin:8px 0 0;\">Nothing urgent — the essentials are already in place.</p>`;\n  }\n  const items = top\n    .map(\n      (f) =>\n        `<li><strong>${escapeHtml(f.title)}</strong> — ${escapeHtml(f.why)} <span style=\"color:#8a857e;\">(${escapeHtml(f.impact)} impact, ${escapeHtml(f.effort)} effort)</span></li>`,\n    )\n    .join(\"\");\n  return `<ol style=\"margin:8px 0 0;padding-left:20px;\">${items}</ol>`;\n}\n\nfunction linkHtml(link: string | null): string {\n  if (!link) {\n    return `<p style=\"margin:24px 0 0;color:#8a857e;\">No shareable link — the audit could not be saved to the database. The full report is attached to this email instead.</p>`;\n  }\n  const safe = safeUrl(link);\n  return `<p style=\"margin:24px 0 0;\"><strong>Full report:</strong> <a href=\"${escapeHtml(safe)}\">${escapeHtml(link)}</a></p>`;\n}\n\n/** This sheet is for us, and it says so. It carries the real reasons a stage did\n *  not run — useful internally, wrong in front of a prospect — so it has to be\n *  obvious that the shareable artefact is the attachment and the link, not this\n *  body. Without the label, the natural thing to do with a useful email is\n *  forward it. */\nconst INTERNAL_NOTE = `<p style=\"margin:24px 0 0;padding:12px 14px;background:#f4f2ef;border-left:3px solid #d71920;color:#57544f;font-size:14px;\">\n  Internal sheet — it names the reasons a section could not be measured. The\n  version to send a prospect is the linked report, also attached to this email.\n</p>`;\n\n/**\n * Build the internal sheet — a SHORT summary for Tucker/Tim/Erik, distinct\n * from the client-facing report render.ts builds. Pure: no IO, so it's safe\n * to call from a test with no network. `attachmentHtml` is the full report\n * (render.ts's `renderProspectReport`, itself pure), included here so\n * `sendAuditEmail`'s default path doesn't need a second render call.\n *\n * Every value that can trace back to the prospect's site or the model —\n * the business name, fixes, stage error text, the narrative-adjacent bits —\n * is escaped with `escapeHtml`/`safeUrl`, the same honesty-and-safety rule\n * render.ts follows for the client-facing report.\n */\nexport function buildAuditEmail(\n  result: ProspectAuditResult,\n  opts: { link: string | null },\n): AuditEmailContent {\n  const name = resolveName(result);\n  const subject = `Prospect audit — ${subjectSafe(name)}`;\n\n  const html = `<!doctype html>\n<html lang=\"en\">\n<head><meta charset=\"utf-8\" /><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" /></head>\n<body style=\"margin:0;padding:24px;background:#faf8f5;color:#1a1a1a;font:15px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;\">\n  <h1 style=\"font-size:22px;margin:0 0 4px;\">Prospect audit — ${escapeHtml(name)}</h1>\n  <p style=\"margin:0 0 16px;color:#57544f;\">\n    <a href=\"${escapeHtml(safeUrl(result.url))}\">${escapeHtml(result.url)}</a> · audited ${escapeHtml(formatIsoDate(result.generatedAt))}\n  </p>\n  ${scoresTableHtml(result.scores)}\n  ${notMeasuredHtml(notMeasuredLines(result))}\n  <h2 style=\"font-size:16px;margin:24px 0 8px;\">Top fixes</h2>\n  ${fixesHtml(result.analyze)}\n  ${linkHtml(opts.link)}\n  ${INTERNAL_NOTE}\n</body>\n</html>`;\n\n  return { subject, html, attachmentHtml: renderProspectReport(result) };\n}\n\n/**\n * Parse `PROSPECT_AUDIT_RECIPIENTS` (comma-separated) into a clean address\n * list: trimmed, empties dropped, case-insensitively deduped — mirrors\n * `reports/send/orchestrate.ts`'s `parseAddresses` for the same reasons (an\n * operator-typed env var, same typo surface). No address is ever hardcoded\n * anywhere in this module; an unset or empty var yields `[]`, which\n * `sendAuditEmail` treats as \"skip, and say why\" rather than an error.\n */\nexport function parseProspectAuditRecipients(raw: string | undefined | null): string[] {\n  if (!raw) return [];\n  const seen = new Set<string>();\n  const list: string[] = [];\n  for (const part of raw.split(\",\")) {\n    const trimmed = part.trim().toLowerCase();\n    if (!trimmed) continue;\n    if (seen.has(trimmed)) continue;\n    seen.add(trimmed);\n    list.push(trimmed);\n  }\n  return list;\n}\n\n/** Filesystem-safe attachment-filename fragment. Tiny local copy of the CLI's\n *  private `slugify` (prospect-audit.ts) — not worth exporting/sharing one\n *  three-line predicate across a module boundary. */\nfunction slugify(s: string): string {\n  const slug = s\n    .toLowerCase()\n    .replace(/[^a-z0-9.-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return slug || \"prospect\";\n}\n\nexport type SendAuditEmailOptions = {\n  link: string | null;\n  recipients: string[];\n  /**\n   * The persisted `prospect_audits` row id (from `createProspectAudit`), when\n   * persistence succeeded. Mirrors orchestrate.ts's\n   * `idempotencyKey: \\`report:${report.id}\\`` pattern, so re-sending for the\n   * SAME already-persisted audit dedupes at Resend instead of double-mailing.\n   * Null when persistence failed — the sheet can still be sent (it's built to\n   * survive independently of Turso), but then there is no stable row id, so\n   * the key falls back to `url`+`generatedAt`: that still protects a\n   * same-process double-call, though — unlike a DB id — it can't survive an\n   * entire pipeline rerun, which mints genuinely new content anyway.\n   */\n  auditId?: string | null;\n  /** Defaults to `defaultResendClient()`. */\n  client?: ResendClient;\n  /** Test seam for the ATTACHMENT content only (production omits it and gets\n   *  the real `renderProspectReport` output `buildAuditEmail` already\n   *  computed) — lets a test of this function's sending mechanics (recipients,\n   *  idempotency key, attachment shape) skip re-deriving the full report. */\n  renderReport?: (result: ProspectAuditResult) => string;\n};\n\nexport type SendAuditEmailResult =\n  { sent: true; messageId: string; recipients: string[] } | { sent: false; reason: string };\n\n/**\n * Send the audit sheet with the full rendered report attached as an `.html`\n * file (base64), so the sheet survives independently of the link and of\n * Turso. Empty `recipients` is a legitimate, non-exceptional outcome (no\n * `PROSPECT_AUDIT_RECIPIENTS` configured) — returns `{sent:false}` rather\n * than throwing, so a caller can report it as a warning; a genuine send\n * failure (a throwing `client.send`) still propagates as a real exception.\n */\nexport async function sendAuditEmail(\n  result: ProspectAuditResult,\n  opts: SendAuditEmailOptions,\n): Promise<SendAuditEmailResult> {\n  if (opts.recipients.length === 0) {\n    return {\n      sent: false,\n      reason: \"no recipients configured (PROSPECT_AUDIT_RECIPIENTS is unset or empty)\",\n    };\n  }\n\n  const built = buildAuditEmail(result, { link: opts.link });\n  const attachmentHtml = opts.renderReport ? opts.renderReport(result) : built.attachmentHtml;\n  const client = opts.client ?? defaultResendClient();\n  const idempotencyKey = `prospect-audit:${opts.auditId ?? `${result.url}#${result.generatedAt}`}`;\n  const filename = `prospect-audit-${slugify(hostnameOf(result.url))}.html`;\n\n  const { messageId } = await client.send({\n    from: FROM_ADDRESS,\n    to: opts.recipients,\n    subject: built.subject,\n    html: built.html,\n    attachments: [\n      {\n        filename,\n        content: Buffer.from(attachmentHtml, \"utf-8\").toString(\"base64\"),\n        contentType: \"text/html\",\n      },\n    ],\n    idempotencyKey,\n  });\n\n  return { sent: true, messageId, recipients: opts.recipients };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,IAAM,eAAe;AAErB,IAAM,eAA8C,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,EAAE;AAIjF,IAAM,gBAAgB;AAetB,SAAS,YAAY,QAAqC;AACxD,SAAO,OAAO,gBAAgB,OAAO,aAAa,KAAK,IACnD,OAAO,eACP,WAAW,OAAO,GAAG;AAC3B;AAWA,SAAS,YAAY,GAAmB;AACtC,SAAO,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACrC;AAIA,SAAS,cAAc,KAAqB;AAC1C,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,MAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,SAAO,EAAE,mBAAmB,SAAS;AAAA,IACnC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,UAAU;AAAA,EACZ,CAAC;AACH;AAmBA,SAAS,iBAAiB,QAAgD;AACxE,QAAM,QAA2B,CAAC;AAElC,MAAI,CAAC,OAAO,OAAO,IAAI;AACrB,UAAM,KAAK;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,kCAA6B,OAAO,OAAO,KAAK;AAAA,IAC1D,CAAC;AACD,UAAM,KAAK;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,kCAA6B,OAAO,OAAO,KAAK;AAAA,IAC1D,CAAC;AAAA,EACH,OAAO;AACL,UAAM,IAAI,OAAO,OAAO;AACxB,QAAI,OAAO,OAAO,gBAAgB,MAAM;AACtC,YAAM,KAAK;AAAA,QACT,OAAO;AAAA,QACP,QAAQ,CAAC,EAAE,wBACP,uEACA;AAAA,MACN,CAAC;AAAA,IACH;AACA,QAAI,OAAO,OAAO,gBAAgB,MAAM;AACtC,YAAM,KAAK;AAAA,QACT,OAAO;AAAA,QACP,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,WAAW,IAAI;AACzB,UAAM,KAAK,EAAE,OAAO,cAAc,QAAQ,OAAO,WAAW,MAAM,CAAC;AAAA,EACrE;AAEA,MAAI,CAAC,OAAO,QAAQ,IAAI;AACtB,UAAM,KAAK,EAAE,OAAO,WAAW,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAAA,EAC/D,WAAW,OAAO,OAAO,YAAY,MAAM;AACzC,UAAM,KAAK,EAAE,OAAO,WAAW,QAAQ,8CAA8C,CAAC;AAAA,EACxF;AAEA,MAAI,CAAC,OAAO,OAAO,IAAI;AACrB,UAAM,KAAK,EAAE,OAAO,iBAAiB,QAAQ,OAAO,OAAO,MAAM,CAAC;AAAA,EACpE,WAAW,OAAO,OAAO,iBAAiB,MAAM;AAC9C,UAAM,KAAK,EAAE,OAAO,iBAAiB,QAAQ,yCAAyC,CAAC;AAAA,EACzF;AAEA,SAAO;AACT;AAEA,IAAM,eAA8E;AAAA,EAClF,EAAE,KAAK,eAAe,OAAO,cAAc;AAAA,EAC3C,EAAE,KAAK,eAAe,OAAO,cAAc;AAAA,EAC3C,EAAE,KAAK,WAAW,OAAO,UAAU;AAAA,EACnC,EAAE,KAAK,gBAAgB,OAAO,gBAAgB;AAChD;AAEA,SAAS,gBAAgB,QAA+C;AACtE,QAAM,QAAQ,aAAa,IAAI,CAAC,EAAE,KAAK,MAAM,MAAM;AACjD,UAAM,QAAQ,OAAO,GAAG;AACxB,UAAM,UAAU,UAAU,OAAO,iBAAiB,OAAO,KAAK;AAC9D,UAAM,aACJ,UAAU,OAAO,kCAAkC;AACrD,WAAO;AAAA,oCACyB,UAAU,KAAK,WAAW,OAAO,CAAC;AAAA,gHAC0C,WAAW,KAAK,CAAC;AAAA;AAAA,EAE/H,CAAC,EAAE,KAAK,EAAE;AACV,SAAO,kFAAkF,KAAK;AAChG;AAEA,SAAS,gBAAgB,OAAkC;AACzD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,QAAQ,MACX,IAAI,CAAC,MAAM,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,MAAM,CAAC,OAAO,EACvF,KAAK,EAAE;AACV,SAAO,0GAA0G,KAAK;AACxH;AAIA,SAAS,UAAU,SAA6C;AAC9D,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,uEAAkE,WAAW,QAAQ,KAAK,CAAC;AAAA,EACpG;AACA,QAAM,MAAM,CAAC,GAAG,QAAQ,KAAK,KAAK,EAC/B,KAAK,CAAC,GAAG,MAAM,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,CAAC,EAC9D,MAAM,GAAG,aAAa;AACzB,MAAI,IAAI,WAAW,GAAG;AACpB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,IACX;AAAA,IACC,CAAC,MACC,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,GAAG,CAAC,kCAAkC,WAAW,EAAE,MAAM,CAAC,YAAY,WAAW,EAAE,MAAM,CAAC;AAAA,EAC5J,EACC,KAAK,EAAE;AACV,SAAO,iDAAiD,KAAK;AAC/D;AAEA,SAAS,SAAS,MAA6B;AAC7C,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,QAAM,OAAO,QAAQ,IAAI;AACzB,SAAO,sEAAsE,WAAW,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC;AACpH;AAOA,IAAM,gBAAgB;AAAA;AAAA;AAAA;AAiBf,SAAS,gBACd,QACA,MACmB;AACnB,QAAM,OAAO,YAAY,MAAM;AAC/B,QAAM,UAAU,yBAAoB,YAAY,IAAI,CAAC;AAErD,QAAM,OAAO;AAAA;AAAA;AAAA;AAAA,qEAIiD,WAAW,IAAI,CAAC;AAAA;AAAA,eAEjE,WAAW,QAAQ,OAAO,GAAG,CAAC,CAAC,KAAK,WAAW,OAAO,GAAG,CAAC,qBAAkB,WAAW,cAAc,OAAO,WAAW,CAAC,CAAC;AAAA;AAAA,IAEpI,gBAAgB,OAAO,MAAM,CAAC;AAAA,IAC9B,gBAAgB,iBAAiB,MAAM,CAAC,CAAC;AAAA;AAAA,IAEzC,UAAU,OAAO,OAAO,CAAC;AAAA,IACzB,SAAS,KAAK,IAAI,CAAC;AAAA,IACnB,aAAa;AAAA;AAAA;AAIf,SAAO,EAAE,SAAS,MAAM,gBAAgB,qBAAqB,MAAM,EAAE;AACvE;AAUO,SAAS,6BAA6B,KAA0C;AACrF,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,OAAiB,CAAC;AACxB,aAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;AACjC,UAAM,UAAU,KAAK,KAAK,EAAE,YAAY;AACxC,QAAI,CAAC,QAAS;AACd,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,SAAK,KAAK,OAAO;AAAA,EACnB;AACA,SAAO;AACT;AAKA,SAAS,QAAQ,GAAmB;AAClC,QAAM,OAAO,EACV,YAAY,EACZ,QAAQ,iBAAiB,GAAG,EAC5B,QAAQ,YAAY,EAAE;AACzB,SAAO,QAAQ;AACjB;AAqCA,eAAsB,eACpB,QACA,MAC+B;AAC/B,MAAI,KAAK,WAAW,WAAW,GAAG;AAChC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,QAAQ,gBAAgB,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC;AACzD,QAAM,iBAAiB,KAAK,eAAe,KAAK,aAAa,MAAM,IAAI,MAAM;AAC7E,QAAM,SAAS,KAAK,UAAU,oBAAoB;AAClD,QAAM,iBAAiB,kBAAkB,KAAK,WAAW,GAAG,OAAO,GAAG,IAAI,OAAO,WAAW,EAAE;AAC9F,QAAM,WAAW,kBAAkB,QAAQ,WAAW,OAAO,GAAG,CAAC,CAAC;AAElE,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK;AAAA,IACtC,MAAM;AAAA,IACN,IAAI,KAAK;AAAA,IACT,SAAS,MAAM;AAAA,IACf,MAAM,MAAM;AAAA,IACZ,aAAa;AAAA,MACX;AAAA,QACE;AAAA,QACA,SAAS,OAAO,KAAK,gBAAgB,OAAO,EAAE,SAAS,QAAQ;AAAA,QAC/D,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO,EAAE,MAAM,MAAM,WAAW,YAAY,KAAK,WAAW;AAC9D;","names":[]}

package/dist/{ensure-site-S25MDDHW.js → ensure-site-4DCEBAPM.js}

@@ -1,12 +1,13 @@
-import {
-  WEBSITES_TABLE,
-  listWebsites,
-  siteSlug
-} from "./chunk-577HCGZO.js";
 import {
   openBase,
   readAirtableConfig
 } from "./chunk-HN6I2XWI.js";
+import {
+  WEBSITES_TABLE,
+  listWebsites,
+  siteSlug,
+  toAirtableStatus
+} from "./chunk-7NYN2P6I.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/reports/airtable/ensure-site.ts
@@ -15,7 +16,7 @@ var COLS = {
   pointOfContact: "point of contact",
   gitRepo: "Git repo"
 };
-async function ensureSite(base, input) {
+async function ensureSite(base, input, mirror) {
   const slug = siteSlug(input.slug);
   if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);
   if (input.displayName && siteSlug(input.displayName) !== slug)
@@ -26,15 +27,17 @@ async function ensureSite(base, input) {
   if (!existing) {
     const fields = {
       Name: input.displayName ?? slug,
-      Status: "in development",
+      Status: toAirtableStatus("building"),
       [COLS.gitRepo]: input.gitRepo ?? `reddoorla/${slug}`
     };
     if (input.url) fields[COLS.url] = input.url;
     if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;
     const created = await base(WEBSITES_TABLE).create([{ fields }]);
+    const rec = created[0];
+    await mirror?.created({ id: rec.id, fields: rec.fields });
     return {
       status: "created",
-      siteId: created[0].id,
+      siteId: rec.id,
       updatedFields: [],
       skippedMismatches: []
     };
@@ -53,6 +56,7 @@ async function ensureSite(base, input) {
   const updatedFields = Object.keys(updates);
   if (updatedFields.length > 0) {
     await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);
+    await mirror?.site(existing.id, updates);
   }
   return { status: "exists", siteId: existing.id, updatedFields, skippedMismatches };
 }
@@ -62,13 +66,18 @@ async function runEnsureSiteCommand(slug, opts) {
   if (!slug) return { output: "Provide a <slug> (e.g. `ensure-site roalson`).", code: 2 };
   try {
     const base = openBase(readAirtableConfig());
-    const result = await ensureSite(base, {
-      slug,
-      ...opts.name ? { displayName: opts.name } : {},
-      ...opts.url ? { url: opts.url } : {},
-      ...opts.contact ? { pointOfContact: opts.contact } : {},
-      ...opts.gitRepo ? { gitRepo: opts.gitRepo } : {}
-    });
+    const { makeSiteMirror } = await import("./site-mirror-NIREX5ME.js");
+    const result = await ensureSite(
+      base,
+      {
+        slug,
+        ...opts.name ? { displayName: opts.name } : {},
+        ...opts.url ? { url: opts.url } : {},
+        ...opts.contact ? { pointOfContact: opts.contact } : {},
+        ...opts.gitRepo ? { gitRepo: opts.gitRepo } : {}
+      },
+      await makeSiteMirror()
+    );
     const filled = result.updatedFields.length > 0 ? ` \u2014 filled blank field(s): ${result.updatedFields.join(", ")}` : "";
     const skipped = result.skippedMismatches.length > 0 ? ` \u2014 differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(", ")}` : "";
     const nameNote = result.status === "created" && !opts.name ? ` \u2014 Name set to "${slug}"; retitle in Airtable before forms/announce go live (or re-create with --name)` : "";
@@ -84,4 +93,4 @@ async function runEnsureSiteCommand(slug, opts) {
 export {
   runEnsureSiteCommand
 };
-//# sourceMappingURL=ensure-site-S25MDDHW.js.map
+//# sourceMappingURL=ensure-site-4DCEBAPM.js.map

package/dist/ensure-site-4DCEBAPM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/airtable/ensure-site.ts","../src/cli/commands/ensure-site.ts"],"sourcesContent":["import type { FieldSet, Records } from \"airtable\";\nimport type { AirtableBase } from \"./client.js\";\nimport { WEBSITES_TABLE, listWebsites, siteSlug } from \"./websites.js\";\nimport { toAirtableStatus } from \"./site-status.js\";\n\nexport type EnsureSiteInput = {\n  /** Canonical slug — matches by siteSlug(Name); the Name on create when no displayName given. */\n  slug: string;\n  /** Human display name written to Name on create. Name is consumed VERBATIM in\n   *  client-facing copy (forms auto-reply intro, report subjects), so a bare\n   *  machine slug there reads as \"Thanks for reaching out to acme-co.\" Must\n   *  slugify to the same slug or the row wouldn't be found on re-run. */\n  displayName?: string;\n  url?: string;\n  pointOfContact?: string;\n  /** owner/repo. Default on create: `reddoorla/<slug>`. */\n  gitRepo?: string;\n};\n\n/** #539 Phase 5. Structurally typed rather than importing the db layer's\n *  `SiteMirror`, so this module stays the leaf it has always been — a real\n *  `SiteMirror` satisfies it. Two ops because `ensureSite` has two write paths,\n *  and the create one is the reason this exists: every other site mirror is an\n *  UPDATE, which does nothing for a row that does not exist yet. */\nexport type EnsureSiteMirror = {\n  created: (rec: { id: string; fields: Record<string, unknown> }) => Promise<void>;\n  site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n};\n\nexport type EnsureSiteResult = {\n  status: \"created\" | \"exists\";\n  siteId: string;\n  /** Airtable column names written on the exists path (create path writes all). */\n  updatedFields: string[];\n  /** Inputs that DIFFERED from an existing non-blank cell and were left\n   *  untouched (fill-blanks-only) — surfaced so a resumed bootstrap with a\n   *  corrected value doesn't silently discard it. */\n  skippedMismatches: string[];\n};\n\n/** Column-name map (load-bearing magic strings — see websites.ts's mapRow header). */\nconst COLS = {\n  url: \"url\",\n  pointOfContact: \"point of contact\",\n  gitRepo: \"Git repo\",\n} as const;\n\n/**\n * Find-or-create the Websites row for a slug so a new site exists in the fleet\n * inventory (audits, form-ingest slug resolution, reports) from day one.\n *\n * Fill-blanks-only on the exists path: this command runs from a bootstrap skill\n * that may be re-run to resume — it must never clobber operator-edited cells.\n * Frequencies are deliberately NOT set (launch flips the lifecycle); Status is\n * only written on create (\"building\" — Airtable's \"in development\" until the\n * stage-2 vocabulary switch flips).\n */\nexport async function ensureSite(\n  base: AirtableBase,\n  input: EnsureSiteInput,\n  mirror?: EnsureSiteMirror,\n): Promise<EnsureSiteResult> {\n  const slug = siteSlug(input.slug);\n  if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);\n  if (input.displayName && siteSlug(input.displayName) !== slug)\n    throw new Error(\n      `ensure-site: display name '${input.displayName}' slugifies to '${siteSlug(input.displayName)}', not '${slug}' — the row would not be found on re-run`,\n    );\n\n  const existing = (await listWebsites(base)).find((w) => siteSlug(w.name) === slug);\n\n  if (!existing) {\n    const fields: FieldSet = {\n      Name: input.displayName ?? slug,\n      Status: toAirtableStatus(\"building\"),\n      [COLS.gitRepo]: input.gitRepo ?? `reddoorla/${slug}`,\n    };\n    if (input.url) fields[COLS.url] = input.url;\n    if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;\n    const created = (await base(WEBSITES_TABLE).create([{ fields }])) as Records<FieldSet>;\n    const rec = created[0]!;\n    // The mirror gets what Airtable STORED, never the `fields` we sent: parity\n    // diffs Turso against the stored record, so mapping our own payload would\n    // diverge the moment Airtable normalises a value.\n    await mirror?.created({ id: rec.id, fields: rec.fields as Record<string, unknown> });\n    return {\n      status: \"created\",\n      siteId: rec.id,\n      updatedFields: [],\n      skippedMismatches: [],\n    };\n  }\n\n  const updates: FieldSet = {};\n  const skippedMismatches: string[] = [];\n  const blank = (v: unknown) => v === null || v === undefined || v === \"\";\n  const consider = (column: string, provided: string | undefined, current: unknown) => {\n    if (!provided) return;\n    if (blank(current)) updates[column] = provided;\n    else if (current !== provided) skippedMismatches.push(column);\n  };\n  consider(COLS.url, input.url, existing.url || null);\n  consider(COLS.pointOfContact, input.pointOfContact, existing.pointOfContact);\n  consider(COLS.gitRepo, input.gitRepo, existing.gitRepo);\n\n  const updatedFields = Object.keys(updates);\n  if (updatedFields.length > 0) {\n    await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);\n    // The fill-blanks path writes real cells too — a resumed bootstrap that only\n    // filled a blank `url` would otherwise leave Turso stale until the sync.\n    await mirror?.site(existing.id, updates);\n  }\n  return { status: \"exists\", siteId: existing.id, updatedFields, skippedMismatches };\n}\n","import { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { ensureSite } from \"../../reports/airtable/ensure-site.js\";\n\nexport type EnsureSiteCommandOptions = {\n  name?: string;\n  url?: string;\n  contact?: string;\n  gitRepo?: string;\n  cwd?: string;\n};\n\n/**\n * `ensure-site <slug>` — create/verify the fleet-inventory row for a new site.\n * Day-one step of the /new-site bootstrap skill. Fill-blanks-only; safe to re-run.\n */\nexport async function runEnsureSiteCommand(\n  slug: string | undefined,\n  opts: EnsureSiteCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (!slug) return { output: \"Provide a <slug> (e.g. `ensure-site roalson`).\", code: 2 };\n  try {\n    const base = openBase(readAirtableConfig());\n    // #539 Phase 5: bootstrapping a site CREATES the Websites row, so this is\n    // the one site path that needs an INSERT mirror — every other one updates.\n    const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n    const result = await ensureSite(\n      base,\n      {\n        slug,\n        ...(opts.name ? { displayName: opts.name } : {}),\n        ...(opts.url ? { url: opts.url } : {}),\n        ...(opts.contact ? { pointOfContact: opts.contact } : {}),\n        ...(opts.gitRepo ? { gitRepo: opts.gitRepo } : {}),\n      },\n      await makeSiteMirror(),\n    );\n    const filled =\n      result.updatedFields.length > 0\n        ? ` — filled blank field(s): ${result.updatedFields.join(\", \")}`\n        : \"\";\n    const skipped =\n      result.skippedMismatches.length > 0\n        ? ` — differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(\", \")}`\n        : \"\";\n    const nameNote =\n      result.status === \"created\" && !opts.name\n        ? ` — Name set to \"${slug}\"; retitle in Airtable before forms/announce go live (or re-create with --name)`\n        : \"\";\n    return {\n      output: `[${slug}] ${result.status} (${result.siteId})${filled}${skipped}${nameNote}`,\n      code: 0,\n    };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAyCA,IAAM,OAAO;AAAA,EACX,KAAK;AAAA,EACL,gBAAgB;AAAA,EAChB,SAAS;AACX;AAYA,eAAsB,WACpB,MACA,OACA,QAC2B;AAC3B,QAAM,OAAO,SAAS,MAAM,IAAI;AAChC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iBAAiB,MAAM,IAAI,qCAAqC;AAC3F,MAAI,MAAM,eAAe,SAAS,MAAM,WAAW,MAAM;AACvD,UAAM,IAAI;AAAA,MACR,8BAA8B,MAAM,WAAW,mBAAmB,SAAS,MAAM,WAAW,CAAC,WAAW,IAAI;AAAA,IAC9G;AAEF,QAAM,YAAY,MAAM,aAAa,IAAI,GAAG,KAAK,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAEjF,MAAI,CAAC,UAAU;AACb,UAAM,SAAmB;AAAA,MACvB,MAAM,MAAM,eAAe;AAAA,MAC3B,QAAQ,iBAAiB,UAAU;AAAA,MACnC,CAAC,KAAK,OAAO,GAAG,MAAM,WAAW,aAAa,IAAI;AAAA,IACpD;AACA,QAAI,MAAM,IAAK,QAAO,KAAK,GAAG,IAAI,MAAM;AACxC,QAAI,MAAM,eAAgB,QAAO,KAAK,cAAc,IAAI,MAAM;AAC9D,UAAM,UAAW,MAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,UAAM,MAAM,QAAQ,CAAC;AAIrB,UAAM,QAAQ,QAAQ,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAkC,CAAC;AACnF,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,eAAe,CAAC;AAAA,MAChB,mBAAmB,CAAC;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,UAAoB,CAAC;AAC3B,QAAM,oBAA8B,CAAC;AACrC,QAAM,QAAQ,CAAC,MAAe,MAAM,QAAQ,MAAM,UAAa,MAAM;AACrE,QAAM,WAAW,CAAC,QAAgB,UAA8B,YAAqB;AACnF,QAAI,CAAC,SAAU;AACf,QAAI,MAAM,OAAO,EAAG,SAAQ,MAAM,IAAI;AAAA,aAC7B,YAAY,SAAU,mBAAkB,KAAK,MAAM;AAAA,EAC9D;AACA,WAAS,KAAK,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI;AAClD,WAAS,KAAK,gBAAgB,MAAM,gBAAgB,SAAS,cAAc;AAC3E,WAAS,KAAK,SAAS,MAAM,SAAS,SAAS,OAAO;AAEtD,QAAM,gBAAgB,OAAO,KAAK,OAAO;AACzC,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAGxE,UAAM,QAAQ,KAAK,SAAS,IAAI,OAAO;AAAA,EACzC;AACA,SAAO,EAAE,QAAQ,UAAU,QAAQ,SAAS,IAAI,eAAe,kBAAkB;AACnF;;;AClGA,eAAsB,qBACpB,MACA,MAC2C;AAC3C,MAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,kDAAkD,MAAM,EAAE;AACtF,MAAI;AACF,UAAM,OAAO,SAAS,mBAAmB,CAAC;AAG1C,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,KAAK,OAAO,EAAE,aAAa,KAAK,KAAK,IAAI,CAAC;AAAA,QAC9C,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,QACpC,GAAI,KAAK,UAAU,EAAE,gBAAgB,KAAK,QAAQ,IAAI,CAAC;AAAA,QACvD,GAAI,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAClD;AAAA,MACA,MAAM,eAAe;AAAA,IACvB;AACA,UAAM,SACJ,OAAO,cAAc,SAAS,IAC1B,kCAA6B,OAAO,cAAc,KAAK,IAAI,CAAC,KAC5D;AACN,UAAM,UACJ,OAAO,kBAAkB,SAAS,IAC9B,qEAAgE,OAAO,kBAAkB,KAAK,IAAI,CAAC,KACnG;AACN,UAAM,WACJ,OAAO,WAAW,aAAa,CAAC,KAAK,OACjC,wBAAmB,IAAI,oFACvB;AACN,WAAO;AAAA,MACL,QAAQ,IAAI,IAAI,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,IAAI,MAAM,GAAG,OAAO,GAAG,QAAQ;AAAA,MACnF,MAAM;AAAA,IACR;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/fleet-events-cF2Om88w.d.ts

@@ -0,0 +1,24 @@
+import * as airtable_lib_airtable_base_js from 'airtable/lib/airtable_base.js';
+
+type AirtableConfig = {
+    apiKey: string;
+    baseId: string;
+};
+type AirtableBase = ReturnType<typeof openBase>;
+declare function openBase(cfg: AirtableConfig): airtable_lib_airtable_base_js.AirtableBase;
+
+type FleetEventType = "pr_automerged" | "vuln_cleared" | "ci_recovered" | "site_launched" | "fleet_swept" | "cert_renewed" | "report_sent_with_override";
+/** One recorded fleet activity event. `id` is deterministic (see the detectors)
+ *  so re-runs INSERT OR IGNORE without duplicating. `siteId`/`siteName` are null
+ *  for fleet-wide rollups; `data` is optional structured detail (e.g. the PR url). */
+type FleetEvent = {
+    id: string;
+    ts: string;
+    type: FleetEventType;
+    siteId: string | null;
+    siteName: string | null;
+    summary: string;
+    data: unknown | null;
+};
+
+export type { AirtableBase as A, FleetEvent as F, FleetEventType as a };

package/dist/fleet-state-7TJ2GYT2.js

@@ -0,0 +1,39 @@
+import {
+  getReportById,
+  getReportHtml,
+  getSiteById,
+  getSiteBySlug,
+  listAllReports,
+  listReportsForSite,
+  listSites,
+  mirrorHealthFields,
+  mirrorReportInsert,
+  mirrorReportPatch,
+  mirrorScheduleFields,
+  mirrorSiteField,
+  mirrorSiteFields,
+  mirrorSiteInsert,
+  storeRenderedHtml
+} from "./chunk-HHMMUR4P.js";
+import "./chunk-P6AORG32.js";
+import "./chunk-F3JWOPTG.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-7NYN2P6I.js";
+export {
+  getReportById,
+  getReportHtml,
+  getSiteById,
+  getSiteBySlug,
+  listAllReports,
+  listReportsForSite,
+  listSites,
+  mirrorHealthFields,
+  mirrorReportInsert,
+  mirrorReportPatch,
+  mirrorScheduleFields,
+  mirrorSiteField,
+  mirrorSiteFields,
+  mirrorSiteInsert,
+  storeRenderedHtml
+};
+//# sourceMappingURL=fleet-state-7TJ2GYT2.js.map

package/dist/{forms-notify-target-TWN4EH6K.js → forms-notify-target-2EAWCWBW.js}

@@ -1,141 +1,34 @@
+import {
+  describeNotifyTarget
+} from "./chunk-VSBFM7DS.js";
+import "./chunk-BNM5POSJ.js";
 import "./chunk-SNSTJLQW.js";
+import "./chunk-5ML7FMBD.js";
 import {
-  operatorEmail
-} from "./chunk-5ML7FMBD.js";
-import "./chunk-SEEA6RXF.js";
-import "./chunk-2OP4JKIQ.js";
+  openBase,
+  readAirtableConfig
+} from "./chunk-HN6I2XWI.js";
+import "./chunk-DJZWYIPP.js";
 import {
+  canonicalizeStatus,
   listWebsites,
   siteSlug,
+  toAirtableStatus,
   updateSiteField
-} from "./chunk-577HCGZO.js";
-import {
-  openBase,
-  readAirtableConfig
-} from "./chunk-HN6I2XWI.js";
+} from "./chunk-7NYN2P6I.js";
+import "./chunk-2OP4JKIQ.js";
 import "./chunk-6VAL7XJT.js";
 
-// src/forms/ingest.ts
-var DUPLICATE_WINDOW_MS = 30 * 24 * 60 * 60 * 1e3;
-
-// src/forms/notify.ts
-function pocAddress(site) {
-  return site.pointOfContact ?? site.reportRecipientsTo ?? null;
-}
-function normalizeRecipients(v) {
-  const arr = Array.isArray(v) ? v : v ? [v] : [];
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const raw of arr) {
-    if (typeof raw !== "string") continue;
-    const t = raw.trim();
-    if (t && !seen.has(t)) {
-      seen.add(t);
-      out.push(t);
-    }
-  }
-  return out;
-}
-function resolveRecipients(site, submission) {
-  if (site.status !== "maintenance") {
-    return { to: [operatorEmail()], cc: [] };
-  }
-  const routing = site.notifyRouting;
-  if (routing) {
-    const value = parseExtraFields(submission.extraFields)[routing.field];
-    const match = typeof value === "string" ? routing.routes[value] : void 0;
-    const to = normalizeRecipients(match ?? routing.default);
-    if (to.length > 0) return { to, cc: normalizeRecipients(routing.cc) };
-  }
-  const poc = pocAddress(site);
-  return poc ? { to: [poc], cc: [] } : null;
-}
-function probeSubmission(extraFields) {
-  return {
-    id: "probe",
-    submissionId: null,
-    siteId: "probe",
-    formType: "contact",
-    name: "probe",
-    email: "probe@example.com",
-    phone: null,
-    message: null,
-    extraFields,
-    sourceUrl: null,
-    utm: null,
-    submittedAt: null,
-    status: "new",
-    notifyStatus: "pending",
-    resendMessageId: null
-  };
-}
-function describeNotifyTarget(site) {
-  if (site.status !== "maintenance") {
-    const guarded = resolveRecipients(site, probeSubmission(null));
-    return {
-      audience: "operator",
-      to: guarded?.to ?? [],
-      cc: [],
-      reason: `Status is ${site.status === null ? "blank" : `"${site.status}"`}, not "maintenance" \u2014 the pre-launch guard routes every notification to the operator.`
-    };
-  }
-  const routing = site.notifyRouting;
-  if (!routing) {
-    const direct = resolveRecipients(site, probeSubmission(null));
-    if (!direct || direct.to.length === 0) {
-      return {
-        audience: "nobody",
-        to: [],
-        cc: [],
-        reason: `Status is "maintenance" but the site has no Point of Contact and no Notify Routing \u2014 the lead is stored and no notification is sent.`
-      };
-    }
-    return {
-      audience: "client",
-      to: direct.to,
-      cc: direct.cc,
-      reason: `Status is "maintenance" \u2014 notifications go to the site's Point of Contact.`
-    };
-  }
-  const to = /* @__PURE__ */ new Set();
-  const cc = /* @__PURE__ */ new Set();
-  const values = [...Object.keys(routing.routes), "\0no-such-route"];
-  for (const value of values) {
-    const r = resolveRecipients(site, probeSubmission(JSON.stringify({ [routing.field]: value })));
-    r?.to.forEach((a) => to.add(a));
-    r?.cc.forEach((a) => cc.add(a));
-  }
-  if (to.size === 0) {
-    return {
-      audience: "nobody",
-      to: [],
-      cc: [],
-      reason: `Status is "maintenance" with Notify Routing on "${routing.field}", but no route, default or Point of Contact resolves to an address.`
-    };
-  }
-  return {
-    audience: "client",
-    to: [...to],
-    cc: [...cc],
-    reason: `Status is "maintenance" with Notify Routing on "${routing.field}" \u2014 the recipient depends on that field's value; every address it could reach is listed.`
-  };
-}
-function parseExtraFields(raw) {
-  if (!raw) return {};
-  try {
-    const parsed = JSON.parse(raw);
-    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
-      return parsed;
-    }
-  } catch {
-  }
-  return {};
-}
-
 // src/recipes/forms-notify-target.ts
 var STATUS_COLUMN = "Status";
-var LIVE_STATUS = "maintenance";
-var VERIFY_STATUS = "launch period";
+var LIVE_STATUS = "maintained";
+var VERIFY_STATUS = "launching";
+function restoreCell(raw) {
+  const canonical = canonicalizeStatus(raw);
+  if (canonical === null) return raw;
+  const roundTripped = toAirtableStatus(canonical);
+  return roundTripped === raw ? roundTripped : raw;
+}
 function findSite(rows, site) {
   const wanted = site.trim().toLowerCase();
   return rows.find(
@@ -159,11 +52,12 @@ async function formsNotifyTarget(deps) {
   if (!deps.set) {
     return { site: row.name, status: row.status, target: describeNotifyTarget(row) };
   }
-  const to = deps.set === "on" ? VERIFY_STATUS : deps.restore?.trim();
+  const restoreRaw = deps.restore?.trim();
+  const to = deps.set === "on" ? VERIFY_STATUS : canonicalizeStatus(restoreRaw) ?? void 0;
   if (deps.set === "off" && !to) {
     throw Object.assign(
       new Error(
-        `--set off needs --restore <status>: the status to return to is never inferred. Guessing "${LIVE_STATUS}" for a site that was "hosting" or "legacy" would start sending real client notifications \u2014 the inverse of the failure this command exists to prevent.`
+        `--set off needs --restore <status>: the status to return to is never inferred. Guessing "${LIVE_STATUS}" for a site that was "hosted-only" or "archived" would start sending real client notifications \u2014 the inverse of the failure this command exists to prevent.`
       ),
       { exitCode: 2 }
     );
@@ -176,7 +70,9 @@ async function formsNotifyTarget(deps) {
       { exitCode: 2 }
     );
   }
-  await updateSiteField(base, row.id, STATUS_COLUMN, to);
+  const cell = deps.set === "on" ? toAirtableStatus(VERIFY_STATUS) : restoreCell(restoreRaw);
+  await updateSiteField(base, row.id, STATUS_COLUMN, cell);
+  await deps.siteMirror?.site(row.id, { [STATUS_COLUMN]: cell });
   const after = findSite(await listWebsites(base), deps.site);
   if (!after) {
     throw Object.assign(new Error(`${row.name} vanished from Websites during the flip.`), {
@@ -187,7 +83,18 @@ async function formsNotifyTarget(deps) {
     site: after.name,
     status: after.status,
     target: describeNotifyTarget(after),
-    flip: { from: row.status, to, confirmed: after.status === to }
+    // `confirmed` compares the RAW cell against the exact string written, not
+    // canonical-to-canonical. Canonical equality is too weak to be a read-back
+    // guard here: `legacy` and `deprecated` are the same canonical status, so a
+    // cell holding either would confirm a flip to the other. Comparing raw is the
+    // only comparison that can actually catch "the cell is not what I sent". The
+    // canonical check rides along so a reader that stopped canonicalizing is
+    // caught too.
+    flip: {
+      from: row.status,
+      to,
+      confirmed: after.statusRaw === cell && after.status === to
+    }
   };
 }
 
@@ -236,7 +143,9 @@ async function runFormsNotifyTargetCommand(site, opts) {
     return { output: `--set must be 'on' or 'off' (got '${opts.set}')`, code: 2 };
   }
   try {
+    const { makeSiteMirror } = await import("./site-mirror-NIREX5ME.js");
     const result = await formsNotifyTarget({
+      siteMirror: await makeSiteMirror(),
       site: site.trim(),
       ...set ? { set } : {},
       ...opts.restore ? { restore: opts.restore } : {}
@@ -254,4 +163,4 @@ export {
   formatNotifyTarget,
   runFormsNotifyTargetCommand
 };
-//# sourceMappingURL=forms-notify-target-TWN4EH6K.js.map
+//# sourceMappingURL=forms-notify-target-2EAWCWBW.js.map