@reddoorla/maintenance 0.85.2 → 0.87.0

package/dist/forms-notify-target-2EAWCWBW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recipes/forms-notify-target.ts","../src/cli/commands/forms-notify-target.ts"],"sourcesContent":["import { openBase, readAirtableConfig } from \"../reports/airtable/client.js\";\nimport type { AirtableBase } from \"../reports/airtable/client.js\";\nimport type { SiteMirror } from \"../db/site-mirror.js\";\nimport {\n  listWebsites,\n  siteSlug,\n  updateSiteField,\n  type Status,\n  type WebsiteRow,\n} from \"../reports/airtable/websites.js\";\nimport { canonicalizeStatus, toAirtableStatus } from \"../reports/airtable/site-status.js\";\nimport { describeNotifyTarget, type NotifyTarget } from \"../forms/notify.js\";\n\n/** The Airtable column the pre-launch guard actually lives in. */\nexport const STATUS_COLUMN = \"Status\";\n\n/** The two ends of the verify flip. Deliberately the ONLY transition this\n *  performs: a site in any other status is already guarded (or is deliberately\n *  something else, like \"hosted-only\"), and silently rewriting that would be the\n *  same class of unseen change as the incident. */\nexport const LIVE_STATUS: Status = \"maintained\";\nexport const VERIFY_STATUS: Status = \"launching\";\n\nexport type FormsNotifyTargetDeps = {\n  base?: AirtableBase;\n  /** Site slug or the Airtable Websites NAME (both accepted). */\n  site: string;\n  /** `on` routes notifications to the operator; `off` restores. Omit to read. */\n  set?: \"on\" | \"off\";\n  /** Status to restore with `--set off`. Required, never inferred. */\n  restore?: string;\n  /** #539 Phase 5: Turso write-through for the Status cell this flips. Injected\n   *  at the CLI root, never defaulted — the unit suite calls this with a fake\n   *  base and must not open a real libSQL handle. */\n  siteMirror?: SiteMirror;\n};\n\nexport type FormsNotifyTargetResult = {\n  site: string;\n  status: Status | null;\n  target: NotifyTarget;\n  /** Present only when a flip was attempted. `confirmed` is the whole point:\n   *  it comes from RE-READING the row, not from the write call returning. */\n  flip?: { from: Status | null; to: Status; confirmed: boolean };\n};\n\n/**\n * The exact Airtable cell to write for an operator-supplied `--restore` value:\n * the operator's own string, verbatim.\n *\n * This is the ONE non-revertible surface in the #539 Phase 4 stage-1 rename —\n * every other change is code, and `git revert` undoes code. It cannot undo a\n * rewritten Airtable cell. So the rule here is stricter than everywhere else:\n * substitute only when the substitution is provably lossless, i.e. when\n * canonicalizing and mapping back ROUND-TRIPS to the operator's own string.\n *\n * That condition is, today, never false in a way that changes the answer — which\n * is the point. `toAirtableStatus(canonicalizeStatus(raw))` either equals `raw`\n * (so writing it is writing `raw`) or it does not (so we must write `raw`). The\n * function therefore reduces to \"write raw\", and it is written this way so the\n * reduction is visible rather than assumed. The case that made it matter:\n * `--restore legacy` canonicalizes to `archived`, which maps back to\n * \"deprecated\" — a different, real, operator-visible Airtable option that nobody\n * asked for. `hosting` → `hosted-only` → \"hosting\" round-trips and is safe.\n *\n * Airtable, not this module, is the authority on which option strings the\n * \"Status\" single-select accepts. Writing verbatim delegates to it: a typo is\n * rejected loudly at the API, exactly as it was before the rename.\n */\nexport function restoreCell(raw: string): string {\n  const canonical = canonicalizeStatus(raw);\n  if (canonical === null) return raw;\n  const roundTripped = toAirtableStatus(canonical);\n  return roundTripped === raw ? roundTripped : raw;\n}\n\nfunction findSite(rows: WebsiteRow[], site: string): WebsiteRow | undefined {\n  const wanted = site.trim().toLowerCase();\n  return rows.find(\n    (r) => siteSlug(r.name) === siteSlug(site) || r.name.trim().toLowerCase() === wanted,\n  );\n}\n\n/**\n * Answer \"who would a form submission on this site email?\" — and optionally\n * flip the pre-launch guard, confirming the flip by reading it back.\n *\n * The guard is a single Airtable `Status` cell. Nothing between \"I intended to\n * flip it\" and \"the client received a test lead\" reported the current state, so\n * on 2026-08-03 a flip that never landed sent a real client a test submission.\n * The fix is not a better intention, it is feedback: this reads the row back\n * after every write and refuses to call the flip confirmed on anything less.\n */\nexport async function formsNotifyTarget(\n  deps: FormsNotifyTargetDeps,\n): Promise<FormsNotifyTargetResult> {\n  const base = deps.base ?? openBase(readAirtableConfig());\n  const rows = await listWebsites(base);\n  const row = findSite(rows, deps.site);\n  if (!row) {\n    // The Websites NAME is not the repo slug (\"Sonder\", not \"gallerysonder\"),\n    // and that mismatch has cost time before — so name the near misses rather\n    // than making the operator go read Airtable to find the spelling.\n    const needle = siteSlug(deps.site);\n    const near = rows\n      .map((r) => r.name)\n      .filter((n) => siteSlug(n).includes(needle) || needle.includes(siteSlug(n)));\n    throw Object.assign(\n      new Error(\n        `No Websites row matches '${deps.site}'. The Websites NAME is not always the repo ` +\n          `slug (Sonder, not gallerysonder).` +\n          (near.length > 0 ? ` Did you mean: ${near.join(\", \")}?` : \"\"),\n      ),\n      { exitCode: 2 },\n    );\n  }\n\n  if (!deps.set) {\n    return { site: row.name, status: row.status, target: describeNotifyTarget(row) };\n  }\n\n  // `--restore` is operator free text. It is canonicalized for what this command\n  // REPORTS (`flip.to`, and the predicates downstream), but NEVER for what it\n  // WRITES — see `restoreCell` below.\n  const restoreRaw = deps.restore?.trim();\n  const to = deps.set === \"on\" ? VERIFY_STATUS : (canonicalizeStatus(restoreRaw) ?? undefined);\n  if (deps.set === \"off\" && !to) {\n    throw Object.assign(\n      new Error(\n        `--set off needs --restore <status>: the status to return to is never inferred. ` +\n          `Guessing \"${LIVE_STATUS}\" for a site that was \"hosted-only\" or \"archived\" would start ` +\n          `sending real client notifications — the inverse of the failure this command exists ` +\n          `to prevent.`,\n      ),\n      { exitCode: 2 },\n    );\n  }\n  // Only ever flip a LIVE site into verify mode. A site already outside\n  // \"maintained\" is guarded already, and rewriting its status would destroy a\n  // real value nobody asked us to touch.\n  if (deps.set === \"on\" && row.status !== LIVE_STATUS) {\n    throw Object.assign(\n      new Error(\n        `${row.name} is \"${row.status ?? \"blank\"}\", not \"${LIVE_STATUS}\" — notifications ` +\n          `already go to the operator only, so there is nothing to flip. Leaving the status ` +\n          `untouched.`,\n      ),\n      { exitCode: 2 },\n    );\n  }\n\n  // `--set on` writes a status this MODULE owns (VERIFY_STATUS), so mapping it to\n  // the current Airtable vocabulary is correct. `--set off` writes the operator's\n  // own string — see restoreCell.\n  const cell = deps.set === \"on\" ? toAirtableStatus(VERIFY_STATUS) : restoreCell(restoreRaw!);\n  await updateSiteField(base, row.id, STATUS_COLUMN, cell);\n  // Mirror the same cell. The console reads Status from Turso, so without this a\n  // site flipped into verify mode still reads as live for up to an hour — on the\n  // one surface an operator would check to confirm the flip.\n  await deps.siteMirror?.site(row.id, { [STATUS_COLUMN]: cell });\n\n  // Read it back. The write returning is NOT evidence the field changed.\n  const after = findSite(await listWebsites(base), deps.site);\n  if (!after) {\n    throw Object.assign(new Error(`${row.name} vanished from Websites during the flip.`), {\n      exitCode: 1,\n    });\n  }\n  return {\n    site: after.name,\n    status: after.status,\n    target: describeNotifyTarget(after),\n    // `confirmed` compares the RAW cell against the exact string written, not\n    // canonical-to-canonical. Canonical equality is too weak to be a read-back\n    // guard here: `legacy` and `deprecated` are the same canonical status, so a\n    // cell holding either would confirm a flip to the other. Comparing raw is the\n    // only comparison that can actually catch \"the cell is not what I sent\". The\n    // canonical check rides along so a reader that stopped canonicalizing is\n    // caught too.\n    flip: {\n      from: row.status,\n      to: to!,\n      confirmed: after.statusRaw === cell && after.status === to,\n    },\n  };\n}\n","import {\n  formsNotifyTarget,\n  LIVE_STATUS,\n  VERIFY_STATUS,\n  type FormsNotifyTargetResult,\n} from \"../../recipes/forms-notify-target.js\";\n\nexport type FormsNotifyTargetCommandOptions = {\n  set?: string;\n  restore?: string;\n  cwd?: string;\n};\n\nconst AUDIENCE_LABEL = {\n  client: \"THE CLIENT\",\n  operator: \"OPERATOR ONLY\",\n  nobody: \"NOBODY\",\n} as const;\n\n/** The line that decides whether it is safe to test-submit. Deliberately the\n *  loudest thing on screen: the incident happened because the answer was\n *  invisible, not because it was subtle. */\nexport function formatNotifyTarget(r: FormsNotifyTargetResult): string {\n  const lines: string[] = [];\n  if (r.flip) {\n    const arrow = `${r.flip.from ?? \"blank\"} → ${r.flip.to}`;\n    lines.push(\n      r.flip.confirmed\n        ? `${r.site}  Status: ${arrow}  ✓ confirmed by read-back`\n        : `${r.site}  Status: ${arrow}  ✗ NOT CONFIRMED — the row still reads \"${r.status ?? \"blank\"}\". Nothing was verified; do not test-submit.`,\n    );\n  } else {\n    lines.push(`${r.site}  Status: ${r.status ?? \"blank\"}`);\n  }\n\n  lines.push(`A submission right now would notify: ${AUDIENCE_LABEL[r.target.audience]}`);\n  if (r.target.to.length > 0) lines.push(`  to: ${r.target.to.join(\", \")}`);\n  if (r.target.cc.length > 0) lines.push(`  cc: ${r.target.cc.join(\", \")}`);\n  lines.push(`  ${r.target.reason}`);\n\n  if (r.target.audience === \"client\") {\n    lines.push(\n      \"\",\n      `⚠️  A test submission WILL email the client, and email cannot be recalled.`,\n      `   Route it to yourself first:  reddoor forms-notify-target ${r.site} --set on`,\n    );\n  }\n  if (r.flip?.confirmed && r.flip.to === VERIFY_STATUS) {\n    lines.push(\n      \"\",\n      `Safe to test. When you are done, restore it:`,\n      `  reddoor forms-notify-target ${r.site} --set off --restore ${r.flip.from ?? LIVE_STATUS}`,\n    );\n  }\n  return lines.join(\"\\n\");\n}\n\n/**\n * `forms-notify-target <site>` — show who a form submission would email, and\n * optionally flip the pre-launch guard with a read-back confirmation.\n *\n * Read-only by default: answering the question must never be riskier than not\n * asking it.\n */\nexport async function runFormsNotifyTargetCommand(\n  site: string | undefined,\n  opts: FormsNotifyTargetCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (!site?.trim()) {\n    return { output: \"forms-notify-target requires <site> (slug or Airtable name)\", code: 2 };\n  }\n  const set = opts.set?.trim().toLowerCase();\n  if (set !== undefined && set !== \"on\" && set !== \"off\") {\n    return { output: `--set must be 'on' or 'off' (got '${opts.set}')`, code: 2 };\n  }\n  try {\n    // #539 Phase 5: the flip writes Status on the Websites row; mirror it so the\n    // console (which reads Turso) shows the new routing immediately.\n    const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n    const result = await formsNotifyTarget({\n      siteMirror: await makeSiteMirror(),\n      site: site.trim(),\n      ...(set ? { set: set as \"on\" | \"off\" } : {}),\n      ...(opts.restore ? { restore: opts.restore } : {}),\n    });\n    // An unconfirmed flip must not exit 0: a script (or a person skimming) that\n    // reads exit status would otherwise take \"I flipped it\" on faith, which is\n    // exactly the assumption that sent a client a test lead.\n    return {\n      output: formatNotifyTarget(result),\n      code: result.flip && !result.flip.confirmed ? 1 : 0,\n    };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAcO,IAAM,gBAAgB;AAMtB,IAAM,cAAsB;AAC5B,IAAM,gBAAwB;AAgD9B,SAAS,YAAY,KAAqB;AAC/C,QAAM,YAAY,mBAAmB,GAAG;AACxC,MAAI,cAAc,KAAM,QAAO;AAC/B,QAAM,eAAe,iBAAiB,SAAS;AAC/C,SAAO,iBAAiB,MAAM,eAAe;AAC/C;AAEA,SAAS,SAAS,MAAoB,MAAsC;AAC1E,QAAM,SAAS,KAAK,KAAK,EAAE,YAAY;AACvC,SAAO,KAAK;AAAA,IACV,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,KAAK,EAAE,KAAK,KAAK,EAAE,YAAY,MAAM;AAAA,EAChF;AACF;AAYA,eAAsB,kBACpB,MACkC;AAClC,QAAM,OAAO,KAAK,QAAQ,SAAS,mBAAmB,CAAC;AACvD,QAAM,OAAO,MAAM,aAAa,IAAI;AACpC,QAAM,MAAM,SAAS,MAAM,KAAK,IAAI;AACpC,MAAI,CAAC,KAAK;AAIR,UAAM,SAAS,SAAS,KAAK,IAAI;AACjC,UAAM,OAAO,KACV,IAAI,CAAC,MAAM,EAAE,IAAI,EACjB,OAAO,CAAC,MAAM,SAAS,CAAC,EAAE,SAAS,MAAM,KAAK,OAAO,SAAS,SAAS,CAAC,CAAC,CAAC;AAC7E,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF,4BAA4B,KAAK,IAAI,mFAElC,KAAK,SAAS,IAAI,kBAAkB,KAAK,KAAK,IAAI,CAAC,MAAM;AAAA,MAC9D;AAAA,MACA,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,CAAC,KAAK,KAAK;AACb,WAAO,EAAE,MAAM,IAAI,MAAM,QAAQ,IAAI,QAAQ,QAAQ,qBAAqB,GAAG,EAAE;AAAA,EACjF;AAKA,QAAM,aAAa,KAAK,SAAS,KAAK;AACtC,QAAM,KAAK,KAAK,QAAQ,OAAO,gBAAiB,mBAAmB,UAAU,KAAK;AAClF,MAAI,KAAK,QAAQ,SAAS,CAAC,IAAI;AAC7B,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF,4FACe,WAAW;AAAA,MAG5B;AAAA,MACA,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAIA,MAAI,KAAK,QAAQ,QAAQ,IAAI,WAAW,aAAa;AACnD,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF,GAAG,IAAI,IAAI,QAAQ,IAAI,UAAU,OAAO,WAAW,WAAW;AAAA,MAGhE;AAAA,MACA,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAKA,QAAM,OAAO,KAAK,QAAQ,OAAO,iBAAiB,aAAa,IAAI,YAAY,UAAW;AAC1F,QAAM,gBAAgB,MAAM,IAAI,IAAI,eAAe,IAAI;AAIvD,QAAM,KAAK,YAAY,KAAK,IAAI,IAAI,EAAE,CAAC,aAAa,GAAG,KAAK,CAAC;AAG7D,QAAM,QAAQ,SAAS,MAAM,aAAa,IAAI,GAAG,KAAK,IAAI;AAC1D,MAAI,CAAC,OAAO;AACV,UAAM,OAAO,OAAO,IAAI,MAAM,GAAG,IAAI,IAAI,0CAA0C,GAAG;AAAA,MACpF,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,QAAQ,MAAM;AAAA,IACd,QAAQ,qBAAqB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQlC,MAAM;AAAA,MACJ,MAAM,IAAI;AAAA,MACV;AAAA,MACA,WAAW,MAAM,cAAc,QAAQ,MAAM,WAAW;AAAA,IAC1D;AAAA,EACF;AACF;;;AC5KA,IAAM,iBAAiB;AAAA,EACrB,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,QAAQ;AACV;AAKO,SAAS,mBAAmB,GAAoC;AACrE,QAAM,QAAkB,CAAC;AACzB,MAAI,EAAE,MAAM;AACV,UAAM,QAAQ,GAAG,EAAE,KAAK,QAAQ,OAAO,WAAM,EAAE,KAAK,EAAE;AACtD,UAAM;AAAA,MACJ,EAAE,KAAK,YACH,GAAG,EAAE,IAAI,aAAa,KAAK,oCAC3B,GAAG,EAAE,IAAI,aAAa,KAAK,sDAA4C,EAAE,UAAU,OAAO;AAAA,IAChG;AAAA,EACF,OAAO;AACL,UAAM,KAAK,GAAG,EAAE,IAAI,aAAa,EAAE,UAAU,OAAO,EAAE;AAAA,EACxD;AAEA,QAAM,KAAK,wCAAwC,eAAe,EAAE,OAAO,QAAQ,CAAC,EAAE;AACtF,MAAI,EAAE,OAAO,GAAG,SAAS,EAAG,OAAM,KAAK,SAAS,EAAE,OAAO,GAAG,KAAK,IAAI,CAAC,EAAE;AACxE,MAAI,EAAE,OAAO,GAAG,SAAS,EAAG,OAAM,KAAK,SAAS,EAAE,OAAO,GAAG,KAAK,IAAI,CAAC,EAAE;AACxE,QAAM,KAAK,KAAK,EAAE,OAAO,MAAM,EAAE;AAEjC,MAAI,EAAE,OAAO,aAAa,UAAU;AAClC,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,+DAA+D,EAAE,IAAI;AAAA,IACvE;AAAA,EACF;AACA,MAAI,EAAE,MAAM,aAAa,EAAE,KAAK,OAAO,eAAe;AACpD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,iCAAiC,EAAE,IAAI,wBAAwB,EAAE,KAAK,QAAQ,WAAW;AAAA,IAC3F;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AASA,eAAsB,4BACpB,MACA,MAC2C;AAC3C,MAAI,CAAC,MAAM,KAAK,GAAG;AACjB,WAAO,EAAE,QAAQ,+DAA+D,MAAM,EAAE;AAAA,EAC1F;AACA,QAAM,MAAM,KAAK,KAAK,KAAK,EAAE,YAAY;AACzC,MAAI,QAAQ,UAAa,QAAQ,QAAQ,QAAQ,OAAO;AACtD,WAAO,EAAE,QAAQ,qCAAqC,KAAK,GAAG,MAAM,MAAM,EAAE;AAAA,EAC9E;AACA,MAAI;AAGF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,UAAM,SAAS,MAAM,kBAAkB;AAAA,MACrC,YAAY,MAAM,eAAe;AAAA,MACjC,MAAM,KAAK,KAAK;AAAA,MAChB,GAAI,MAAM,EAAE,IAAyB,IAAI,CAAC;AAAA,MAC1C,GAAI,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAClD,CAAC;AAID,WAAO;AAAA,MACL,QAAQ,mBAAmB,MAAM;AAAA,MACjC,MAAM,OAAO,QAAQ,CAAC,OAAO,KAAK,YAAY,IAAI;AAAA,IACpD;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/{github-signals-G4ILZAJ6.js → github-signals-E2WPYTBK.js}

@@ -3,30 +3,30 @@ import {
 } from "./chunk-PZQ3WED2.js";
 import {
   formatFleetWriteSummary
-} from "./chunk-3YXDSCM6.js";
-import "./chunk-PBWDDDQH.js";
+} from "./chunk-NXNPDCF3.js";
+import "./chunk-7BZUOZPU.js";
 import {
   detectSignalEvents,
   fleetSweptEvent
 } from "./chunk-5L3FPQIJ.js";
 import {
-  makeGitHub
-} from "./chunk-VRWUL4TR.js";
-import {
-  recordFleetEventsBestEffort
-} from "./chunk-QG6OSL4M.js";
-import "./chunk-DC5H7KEQ.js";
-import "./chunk-4SOCPK7A.js";
-import "./chunk-4DHQCN5H.js";
+  openBase,
+  readAirtableConfig
+} from "./chunk-HN6I2XWI.js";
 import {
   listWebsites,
   siteSlug,
   updateGitHubSignals
-} from "./chunk-577HCGZO.js";
+} from "./chunk-7NYN2P6I.js";
 import {
-  openBase,
-  readAirtableConfig
-} from "./chunk-HN6I2XWI.js";
+  makeGitHub
+} from "./chunk-XHHMM5HX.js";
+import {
+  recordFleetEventsBestEffort
+} from "./chunk-XUGSZP7Z.js";
+import "./chunk-JHGHLKFS.js";
+import "./chunk-3SF7D4DY.js";
+import "./chunk-LBYOLBW7.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/audits/github-signals.ts
@@ -59,7 +59,7 @@ async function collectGitHubSignals(sites, deps, onSkip = () => {
 function githubSignalsExitCode(written, failed) {
   return failed > written ? 1 : 0;
 }
-async function runGitHubSignalsCommand(opts) {
+async function runGitHubSignalsCommand(opts, deps = {}) {
   if (!opts.fleet || !opts.writeAirtable) {
     return { output: "github-signals currently supports only --fleet --write-airtable", code: 2 };
   }
@@ -70,9 +70,9 @@ async function runGitHubSignalsCommand(opts) {
       code: 0
     };
   }
-  const base = openBase(readAirtableConfig());
+  const base = deps.openBase ? deps.openBase() : openBase(readAirtableConfig());
   const websites = await listWebsites(base);
-  const gh = makeGitHub({ token });
+  const gh = deps.makeGh ? deps.makeGh(token) : makeGitHub({ token });
   const sites = websites.map((w) => ({
     path: "",
     name: w.name,
@@ -89,7 +89,16 @@ async function runGitHubSignalsCommand(opts) {
     ({ repo }) => skipped.push(repo)
   );
   const sweptAt = (/* @__PURE__ */ new Date()).toISOString();
-  const result = { written: [], failed: [] };
+  const makeMirror = deps.makeMirror ?? (async () => {
+    const { makeHealthMirrorBestEffort } = await import("./health-mirror-L5JBEJVA.js");
+    return makeHealthMirrorBestEffort();
+  });
+  const mirror = await makeMirror();
+  const result = {
+    written: [],
+    failed: [],
+    ...mirror ? { mirrored: 0, mirrorFailed: 0, mirrorMissed: 0 } : {}
+  };
   const byRepo = new Map(websites.filter((w) => w.gitRepo).map((w) => [w.gitRepo, w]));
   const events = [];
   const sweptMs = Date.parse(sweptAt);
@@ -101,12 +110,24 @@ async function runGitHubSignalsCommand(opts) {
       continue;
     }
     try {
-      await updateGitHubSignals(base, target.id, {
+      const ghFields = await updateGitHubSignals(base, target.id, {
         renovateFailingCis: row.renovateFailingCis,
         ciState: row.ciState,
         lastCommitAt: row.lastCommitAt,
         sweptAt
       });
+      if (mirror) {
+        try {
+          if (await mirror(target.id, ghFields)) {
+            result.mirrored = (result.mirrored ?? 0) + 1;
+          } else {
+            result.mirrorMissed = (result.mirrorMissed ?? 0) + 1;
+          }
+        } catch (e) {
+          result.mirrorFailed = (result.mirrorFailed ?? 0) + 1;
+          console.error(`[health-mirror] ${target.name}: ${e.message}`);
+        }
+      }
       result.written.push({
         siteName: target.name,
         writes: [{ audit: "github-signals", counts: row }]
@@ -124,7 +145,7 @@ async function runGitHubSignalsCommand(opts) {
   }
   for (const repo of skipped) result.failed.push({ slug: repo, error: "probe failed (skipped)" });
   events.push(fleetSweptEvent("github-signals", result.written.length, sweptAt));
-  await recordFleetEventsBestEffort(events, /* @__PURE__ */ new Date());
+  await (deps.recordEvents ?? recordFleetEventsBestEffort)(events, /* @__PURE__ */ new Date());
   return {
     output: formatFleetWriteSummary(result),
     code: githubSignalsExitCode(result.written.length, result.failed.length)
@@ -134,4 +155,4 @@ export {
   githubSignalsExitCode,
   runGitHubSignalsCommand
 };
-//# sourceMappingURL=github-signals-G4ILZAJ6.js.map
+//# sourceMappingURL=github-signals-E2WPYTBK.js.map

package/dist/github-signals-E2WPYTBK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/audits/github-signals.ts","../src/cli/commands/github-signals.ts"],"sourcesContent":["import type { Site } from \"../types.js\";\nimport type { CiState, PullRequestSummary } from \"../github/gh.js\";\nimport { isFailingRenovatePR } from \"../alerts/renovate.js\";\n\n/** One swept row, ready for the Airtable writer (slug-keyed by `site`). */\nexport type GitHubSignalsRow = {\n  site: string; // the site name/slug the writer matches on\n  repo: string; // owner/repo\n  renovateFailingCis: number;\n  ciState: CiState;\n  lastCommitAt: string | null;\n};\n\n/** Injected GitHub reads (so the sweep is pure + testable). */\nexport type GitHubSignalsDeps = {\n  openPullRequests: (repo: string) => Promise<PullRequestSummary[]>;\n  defaultBranchStatus: (repo: string) => Promise<{ ciState: CiState; lastCommitAt: string | null }>;\n};\n\n/** Per repo-backed site: count its failing Renovate PRs + read its default-branch\n *  status. Sites without `gitRepo` are skipped (not errors). A repo whose probe\n *  throws is reported via `onSkip` and produces no row — one GitHub hiccup never\n *  sinks the sweep. PURE over `deps`. */\nexport async function collectGitHubSignals(\n  sites: Site[],\n  deps: GitHubSignalsDeps,\n  onSkip: (s: { repo: string }) => void = () => {},\n): Promise<GitHubSignalsRow[]> {\n  const rows: GitHubSignalsRow[] = [];\n  for (const s of sites) {\n    const repo = s.gitRepo;\n    if (!repo) continue;\n    const name = s.name;\n    if (!name) continue;\n    try {\n      const prs = await deps.openPullRequests(repo);\n      const status = await deps.defaultBranchStatus(repo);\n      rows.push({\n        site: name,\n        repo,\n        renovateFailingCis: prs.filter(isFailingRenovatePR).length,\n        ciState: status.ciState,\n        lastCommitAt: status.lastCommitAt,\n      });\n    } catch {\n      onSkip({ repo });\n    }\n  }\n  return rows;\n}\n","import { openBase, readAirtableConfig, type AirtableBase } from \"../../reports/airtable/client.js\";\nimport { listWebsites, siteSlug, updateGitHubSignals } from \"../../reports/airtable/websites.js\";\nimport type { Site } from \"../../types.js\";\nimport { collectGitHubSignals } from \"../../audits/github-signals.js\";\nimport { makeGitHub, type GitHub } from \"../../github/gh.js\";\nimport {\n  formatFleetWriteSummary,\n  type FleetWriteResult,\n} from \"../../audits/write-audits-to-airtable.js\";\nimport { detectSignalEvents, fleetSweptEvent } from \"../../audits/fleet-event-detectors.js\";\nimport { recordFleetEventsBestEffort } from \"../../audits/fleet-events-writer.js\";\nimport type { FleetEvent } from \"../../db/fleet-events.js\";\nimport type { HealthMirror } from \"../../audits/health-mirror.js\";\n\n/** The slice of the GitHub client this sweep actually probes. */\ntype GhProbes = Pick<\n  GitHub,\n  \"openPullRequests\" | \"defaultBranchStatus\" | \"mergedRenovatePullRequests\"\n>;\n\n/** Injectable wiring for {@link runGitHubSignalsCommand}. Every default is the\n *  real fleet path; tests override to reach the per-row write+mirror loop —\n *  the hand-rolled `makeHealthMirrorBestEffort()` call made that loop\n *  untestable (no test could prove a mirror throw stays out of `failed`, that\n *  the counters increment the right way round, or that the mirror sees the\n *  same payload Airtable got). Same seam shape as\n *  `writeFleetAuditsToAirtable`'s `mirror` argument. */\nexport type GitHubSignalsDeps = {\n  /** Airtable base (default: real creds via readAirtableConfig). */\n  openBase: () => AirtableBase;\n  /** GitHub probe client for the fleet token (default: makeGitHub). */\n  makeGh: (token: string) => GhProbes;\n  /** Turso mirror factory (default: makeHealthMirrorBestEffort — null without\n   *  libSQL creds, leaving the Airtable sweep byte-for-byte unchanged). */\n  makeMirror: () => Promise<HealthMirror | null>;\n  /** Fleet-activity recorder (default: recordFleetEventsBestEffort). */\n  recordEvents: (events: FleetEvent[], now: Date) => Promise<void>;\n};\n\n/** Exit code for a fleet github-signals run. Exit 1 when failures are the\n *  MAJORITY of the fleet (`failed > written`), not only on a total wipeout —\n *  a run where 11/12 repos failed but 1 wrote should still signal an outage.\n *  All-success or a minority of flakes (e.g. 1/12 failed) stays exit 0. The\n *  no-token clean-skip returns 0 separately (before any probe runs). */\nexport function githubSignalsExitCode(written: number, failed: number): number {\n  return failed > written ? 1 : 0;\n}\n\n/** `github-signals --fleet --write-airtable`: sweep every repo-backed site for its\n *  Renovate-failing count + default-branch CI state + last-commit date, write each\n *  row serially (Airtable ~5 req/sec), and emit FLEET_WRITE_SUMMARY for CI. A\n *  missing fleet token is a clean skip (local runs), not a failure. */\nexport async function runGitHubSignalsCommand(\n  opts: {\n    fleet?: boolean | undefined;\n    writeAirtable?: boolean | undefined;\n  },\n  deps: Partial<GitHubSignalsDeps> = {},\n): Promise<{ output: string; code: number }> {\n  if (!opts.fleet || !opts.writeAirtable) {\n    return { output: \"github-signals currently supports only --fleet --write-airtable\", code: 2 };\n  }\n  const token = process.env.RENOVATE_TOKEN?.trim() || process.env.GH_TOKEN?.trim();\n  if (!token) {\n    return {\n      output: \"github-signals skipped: no RENOVATE_TOKEN/GH_TOKEN (fleet read) configured.\",\n      code: 0,\n    };\n  }\n  const base = deps.openBase ? deps.openBase() : openBase(readAirtableConfig());\n  const websites = await listWebsites(base);\n  const gh: GhProbes = deps.makeGh ? deps.makeGh(token) : makeGitHub({ token });\n  const sites: Site[] = websites.map((w) => ({\n    path: \"\",\n    name: w.name,\n    meta: {},\n    ...(w.gitRepo ? { gitRepo: w.gitRepo } : {}),\n  }));\n\n  const skipped: string[] = [];\n  const rows = await collectGitHubSignals(\n    sites,\n    {\n      openPullRequests: (r) => gh.openPullRequests(r),\n      defaultBranchStatus: (r) => gh.defaultBranchStatus(r),\n    },\n    ({ repo }) => skipped.push(repo),\n  );\n\n  const sweptAt = new Date().toISOString();\n  // Phase 3 dual-write (#539): mirror each row's written FieldSet into\n  // site_health. Null when libSQL creds are absent — the Airtable sweep\n  // proceeds exactly as before. (Dynamic import so the no-mirror path never\n  // loads the db client.)\n  const makeMirror =\n    deps.makeMirror ??\n    (async () => {\n      const { makeHealthMirrorBestEffort } = await import(\"../../audits/health-mirror.js\");\n      return makeHealthMirrorBestEffort();\n    });\n  const mirror = await makeMirror();\n  const result: FleetWriteResult = {\n    written: [],\n    failed: [],\n    ...(mirror ? { mirrored: 0, mirrorFailed: 0, mirrorMissed: 0 } : {}),\n  };\n  const byRepo = new Map(websites.filter((w) => w.gitRepo).map((w) => [w.gitRepo, w]));\n  const events: FleetEvent[] = [];\n  const sweptMs = Date.parse(sweptAt);\n  const since24h = new Date(sweptMs - 24 * 60 * 60 * 1000).toISOString();\n  // Serial: Airtable's ~5 req/sec limit (matches writeFleetAuditsToAirtable).\n  for (const row of rows) {\n    const target = byRepo.get(row.repo);\n    if (!target) {\n      result.failed.push({ slug: siteSlug(row.site), error: \"no Websites row matched\" });\n      continue;\n    }\n    try {\n      const ghFields = await updateGitHubSignals(base, target.id, {\n        renovateFailingCis: row.renovateFailingCis,\n        ciState: row.ciState,\n        lastCommitAt: row.lastCommitAt,\n        sweptAt,\n      });\n      if (mirror) {\n        // Count, never throw: a Turso blip must not move an Airtable-written\n        // row into `failed` (that would red the sweep via githubSignalsExitCode\n        // on a fleet-wide mirror outage). A 0-row match (site not yet imported)\n        // is a miss, not a mirror — see FleetWriteResult.mirrorMissed.\n        try {\n          if (await mirror(target.id, ghFields)) {\n            result.mirrored = (result.mirrored ?? 0) + 1;\n          } else {\n            result.mirrorMissed = (result.mirrorMissed ?? 0) + 1;\n          }\n        } catch (e) {\n          result.mirrorFailed = (result.mirrorFailed ?? 0) + 1;\n          console.error(`[health-mirror] ${target.name}: ${(e as Error).message}`);\n        }\n      }\n      result.written.push({\n        siteName: target.name,\n        writes: [{ audit: \"github-signals\", counts: row }],\n      });\n      // Fleet-activity events for this repo: merged Renovate PRs since the last sweep\n      // (watermark = the row's prior GitHub Signals At, else a 24h fallback) + a\n      // CI-recovered transition. A PR-fetch hiccup drops only this repo's PR events.\n      const since = target.githubSignalsAt ?? since24h;\n      let merged: Awaited<ReturnType<typeof gh.mergedRenovatePullRequests>> = [];\n      try {\n        merged = await gh.mergedRenovatePullRequests(row.repo, since);\n      } catch {\n        // PR list unavailable this run — skip pr_automerged for this repo, keep ci_recovered\n      }\n      events.push(...detectSignalEvents(target, row, merged, sweptAt));\n    } catch (e) {\n      result.failed.push({ slug: siteSlug(row.site), error: (e as Error).message });\n    }\n  }\n  for (const repo of skipped) result.failed.push({ slug: repo, error: \"probe failed (skipped)\" });\n\n  events.push(fleetSweptEvent(\"github-signals\", result.written.length, sweptAt));\n  await (deps.recordEvents ?? recordFleetEventsBestEffort)(events, new Date());\n\n  // Exit non-zero when failures are the MAJORITY of the fleet, not only on a\n  // total wipeout. A run where 11/12 repos failed but 1 wrote used to return 0,\n  // masking a large outage. The nightly cron step is `continue-on-error`, so a\n  // non-zero here is an operator-visibility signal, not a red build.\n  return {\n    output: formatFleetWriteSummary(result),\n    code: githubSignalsExitCode(result.written.length, result.failed.length),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,eAAsB,qBACpB,OACA,MACA,SAAwC,MAAM;AAAC,GAClB;AAC7B,QAAM,OAA2B,CAAC;AAClC,aAAW,KAAK,OAAO;AACrB,UAAM,OAAO,EAAE;AACf,QAAI,CAAC,KAAM;AACX,UAAM,OAAO,EAAE;AACf,QAAI,CAAC,KAAM;AACX,QAAI;AACF,YAAM,MAAM,MAAM,KAAK,iBAAiB,IAAI;AAC5C,YAAM,SAAS,MAAM,KAAK,oBAAoB,IAAI;AAClD,WAAK,KAAK;AAAA,QACR,MAAM;AAAA,QACN;AAAA,QACA,oBAAoB,IAAI,OAAO,mBAAmB,EAAE;AAAA,QACpD,SAAS,OAAO;AAAA,QAChB,cAAc,OAAO;AAAA,MACvB,CAAC;AAAA,IACH,QAAQ;AACN,aAAO,EAAE,KAAK,CAAC;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;;;ACLO,SAAS,sBAAsB,SAAiB,QAAwB;AAC7E,SAAO,SAAS,UAAU,IAAI;AAChC;AAMA,eAAsB,wBACpB,MAIA,OAAmC,CAAC,GACO;AAC3C,MAAI,CAAC,KAAK,SAAS,CAAC,KAAK,eAAe;AACtC,WAAO,EAAE,QAAQ,mEAAmE,MAAM,EAAE;AAAA,EAC9F;AACA,QAAM,QAAQ,QAAQ,IAAI,gBAAgB,KAAK,KAAK,QAAQ,IAAI,UAAU,KAAK;AAC/E,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,IACR;AAAA,EACF;AACA,QAAM,OAAO,KAAK,WAAW,KAAK,SAAS,IAAI,SAAS,mBAAmB,CAAC;AAC5E,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,QAAM,KAAe,KAAK,SAAS,KAAK,OAAO,KAAK,IAAI,WAAW,EAAE,MAAM,CAAC;AAC5E,QAAM,QAAgB,SAAS,IAAI,CAAC,OAAO;AAAA,IACzC,MAAM;AAAA,IACN,MAAM,EAAE;AAAA,IACR,MAAM,CAAC;AAAA,IACP,GAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5C,EAAE;AAEF,QAAM,UAAoB,CAAC;AAC3B,QAAM,OAAO,MAAM;AAAA,IACjB;AAAA,IACA;AAAA,MACE,kBAAkB,CAAC,MAAM,GAAG,iBAAiB,CAAC;AAAA,MAC9C,qBAAqB,CAAC,MAAM,GAAG,oBAAoB,CAAC;AAAA,IACtD;AAAA,IACA,CAAC,EAAE,KAAK,MAAM,QAAQ,KAAK,IAAI;AAAA,EACjC;AAEA,QAAM,WAAU,oBAAI,KAAK,GAAE,YAAY;AAKvC,QAAM,aACJ,KAAK,eACJ,YAAY;AACX,UAAM,EAAE,2BAA2B,IAAI,MAAM,OAAO,6BAA+B;AACnF,WAAO,2BAA2B;AAAA,EACpC;AACF,QAAM,SAAS,MAAM,WAAW;AAChC,QAAM,SAA2B;AAAA,IAC/B,SAAS,CAAC;AAAA,IACV,QAAQ,CAAC;AAAA,IACT,GAAI,SAAS,EAAE,UAAU,GAAG,cAAc,GAAG,cAAc,EAAE,IAAI,CAAC;AAAA,EACpE;AACA,QAAM,SAAS,IAAI,IAAI,SAAS,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AACnF,QAAM,SAAuB,CAAC;AAC9B,QAAM,UAAU,KAAK,MAAM,OAAO;AAClC,QAAM,WAAW,IAAI,KAAK,UAAU,KAAK,KAAK,KAAK,GAAI,EAAE,YAAY;AAErE,aAAW,OAAO,MAAM;AACtB,UAAM,SAAS,OAAO,IAAI,IAAI,IAAI;AAClC,QAAI,CAAC,QAAQ;AACX,aAAO,OAAO,KAAK,EAAE,MAAM,SAAS,IAAI,IAAI,GAAG,OAAO,0BAA0B,CAAC;AACjF;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,MAAM,oBAAoB,MAAM,OAAO,IAAI;AAAA,QAC1D,oBAAoB,IAAI;AAAA,QACxB,SAAS,IAAI;AAAA,QACb,cAAc,IAAI;AAAA,QAClB;AAAA,MACF,CAAC;AACD,UAAI,QAAQ;AAKV,YAAI;AACF,cAAI,MAAM,OAAO,OAAO,IAAI,QAAQ,GAAG;AACrC,mBAAO,YAAY,OAAO,YAAY,KAAK;AAAA,UAC7C,OAAO;AACL,mBAAO,gBAAgB,OAAO,gBAAgB,KAAK;AAAA,UACrD;AAAA,QACF,SAAS,GAAG;AACV,iBAAO,gBAAgB,OAAO,gBAAgB,KAAK;AACnD,kBAAQ,MAAM,mBAAmB,OAAO,IAAI,KAAM,EAAY,OAAO,EAAE;AAAA,QACzE;AAAA,MACF;AACA,aAAO,QAAQ,KAAK;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,QAAQ,CAAC,EAAE,OAAO,kBAAkB,QAAQ,IAAI,CAAC;AAAA,MACnD,CAAC;AAID,YAAM,QAAQ,OAAO,mBAAmB;AACxC,UAAI,SAAoE,CAAC;AACzE,UAAI;AACF,iBAAS,MAAM,GAAG,2BAA2B,IAAI,MAAM,KAAK;AAAA,MAC9D,QAAQ;AAAA,MAER;AACA,aAAO,KAAK,GAAG,mBAAmB,QAAQ,KAAK,QAAQ,OAAO,CAAC;AAAA,IACjE,SAAS,GAAG;AACV,aAAO,OAAO,KAAK,EAAE,MAAM,SAAS,IAAI,IAAI,GAAG,OAAQ,EAAY,QAAQ,CAAC;AAAA,IAC9E;AAAA,EACF;AACA,aAAW,QAAQ,QAAS,QAAO,OAAO,KAAK,EAAE,MAAM,MAAM,OAAO,yBAAyB,CAAC;AAE9F,SAAO,KAAK,gBAAgB,kBAAkB,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC7E,SAAO,KAAK,gBAAgB,6BAA6B,QAAQ,oBAAI,KAAK,CAAC;AAM3E,SAAO;AAAA,IACL,QAAQ,wBAAwB,MAAM;AAAA,IACtC,MAAM,sBAAsB,OAAO,QAAQ,QAAQ,OAAO,OAAO,MAAM;AAAA,EACzE;AACF;","names":[]}

package/dist/{header-image-T7XD37JL.js → header-image-6IC53W27.js}

@@ -1,18 +1,18 @@
-import {
-  generateHeaderImage
-} from "./chunk-37S6L6G4.js";
 import {
   uploadAttachment
-} from "./chunk-MPBXOJ3N.js";
-import {
-  ACTIVE_STATUSES,
-  listWebsites,
-  siteSlug
-} from "./chunk-577HCGZO.js";
+} from "./chunk-IY6256GK.js";
 import {
   openBase,
   readAirtableConfig
 } from "./chunk-HN6I2XWI.js";
+import {
+  generateHeaderImage
+} from "./chunk-5UINJNAJ.js";
+import {
+  ACTIVE_STATUSES,
+  listWebsites,
+  siteSlug
+} from "./chunk-7NYN2P6I.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/cli/commands/header-image.ts
@@ -57,9 +57,25 @@ async function generateForTargets(targets, opts, generate = generateHeaderImage)
         ...settleMs === void 0 ? {} : { settleMs }
       });
       if (opts.writeAirtable) {
-        await uploadAttachment(row.id, "Header image", gen.bytes, gen.filename, gen.contentType);
+        await uploadAttachment(row.id, "Header image", gen.bytes, gen.filename, gen.contentType, {
+          replaceIn: "Websites"
+        });
+        let stored = "";
+        if (opts.storeDb) {
+          try {
+            await opts.storeDb(row.id, {
+              bytes: gen.bytes,
+              filename: gen.filename,
+              contentType: gen.contentType,
+              generatedAt: (/* @__PURE__ */ new Date()).toISOString()
+            });
+            stored = " + turso";
+          } catch (err) {
+            stored = ` (\u26A0 turso store FAILED: ${err instanceof Error ? err.message : String(err)})`;
+          }
+        }
         lines.push(
-          `\u2714 ${row.name} \u2014 uploaded ${gen.filename} (${(gen.bytes.byteLength / 1024 / 1024).toFixed(2)} MB)`
+          `\u2714 ${row.name} \u2014 uploaded ${gen.filename} (${(gen.bytes.byteLength / 1024 / 1024).toFixed(2)} MB)${stored}`
         );
       } else {
         const path = resolve(outDir, gen.filename);
@@ -84,7 +100,14 @@ async function runHeaderImageCommand(site, opts) {
       code: 1
     };
   }
-  return generateForTargets(targets, opts);
+  let withStore = opts;
+  if (opts.writeAirtable && !opts.storeDb && process.env.TURSO_DATABASE_URL) {
+    const { openDb, readDbConfig } = await import("./client-AUE3XUPO.js");
+    const { storeHeaderImage } = await import("./header-images-SQBCE5OD.js");
+    const db = await openDb(readDbConfig());
+    withStore = { ...opts, storeDb: (id, img) => storeHeaderImage(db, id, img) };
+  }
+  return generateForTargets(targets, withStore);
 }
 export {
   generateForTargets,
@@ -92,4 +115,4 @@ export {
   resolveTargets,
   runHeaderImageCommand
 };
-//# sourceMappingURL=header-image-T7XD37JL.js.map
+//# sourceMappingURL=header-image-6IC53W27.js.map

package/dist/header-image-6IC53W27.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/header-image.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { listWebsites, siteSlug, ACTIVE_STATUSES } from \"../../reports/airtable/websites.js\";\nimport type { WebsiteRow } from \"../../reports/airtable/websites.js\";\nimport { uploadAttachment } from \"../../reports/airtable/attachments.js\";\nimport { generateHeaderImage } from \"../../reports/header-image/index.js\";\nimport type { StoredHeaderImage } from \"../../db/header-images.js\";\n\nexport type HeaderImageOptions = {\n  all?: boolean;\n  force?: boolean;\n  writeAirtable?: boolean;\n  outDir?: string;\n  settleMs?: string;\n  /** Injected Turso store for the dual-write (#539, design D5): while Airtable\n   *  is still written (until the Phase 5 freeze), every upload ALSO lands the\n   *  bytes in sites.header_image* so the Turso read layer serves a real image.\n   *  Absent → Airtable-only (a local run without Turso env still works). */\n  storeDb?: (siteId: string, img: StoredHeaderImage) => Promise<void>;\n};\n\n/** Which rows this invocation should act on. Pure, so it is unit-tested. */\nexport function resolveTargets(\n  rows: readonly WebsiteRow[],\n  // `| undefined` spelled out because `exactOptionalPropertyTypes` otherwise\n  // rejects the caller passing through possibly-undefined CLI flags.\n  opts: { site?: string | undefined; all?: boolean | undefined; force?: boolean | undefined },\n): WebsiteRow[] {\n  if (opts.site) {\n    const want = siteSlug(opts.site);\n    return rows.filter((r) => siteSlug(r.name) === want);\n  }\n  if (!opts.all) return [];\n  return rows.filter((r) => {\n    if (!r.url) return false;\n    if (r.status === null || !ACTIVE_STATUSES.has(r.status)) return false;\n    return opts.force ? true : !r.headerImage;\n  });\n}\n\n/** Parse the `--settle-ms <ms>` flag. Unset → undefined (the generator's own\n *  default settle). `Number(\"abc\")` is NaN, which would sail through as a NaN\n *  timeout and silently skip the settle entirely, so anything non-finite or\n *  negative is rejected up front rather than producing a subtly-wrong capture. */\nexport function parseSettleMs(value: string | undefined): number | undefined {\n  if (value === undefined) return undefined;\n  const n = Number(value);\n  if (!Number.isFinite(n) || n < 0) {\n    throw Object.assign(\n      new Error(`--settle-ms must be a non-negative number of milliseconds, got \"${value}\"`),\n      { exitCode: 2 },\n    );\n  }\n  return n;\n}\n\n/** Injected in tests so the file-writing branch can be exercised without\n *  driving a real browser (mirrors `GenerateInput.shooter`). */\ntype Generate = typeof generateHeaderImage;\n\n/**\n * Generate a header image per target row and either upload it to Airtable or\n * write it locally for review. Split out of {@link runHeaderImageCommand} so\n * the local-output path is testable without an Airtable base.\n */\nexport async function generateForTargets(\n  targets: readonly WebsiteRow[],\n  opts: HeaderImageOptions,\n  generate: Generate = generateHeaderImage,\n): Promise<{ output: string; code: number }> {\n  const outDir = resolve(opts.outDir ?? \"reports\");\n  const settleMs = parseSettleMs(opts.settleMs);\n  // `reports/` does not exist on a fresh checkout, so the writeFile() below\n  // would throw ENOENT for the first operator to run the default (local) path.\n  // Create it once, before the loop, rather than per site.\n  if (!opts.writeAirtable) await mkdir(outDir, { recursive: true });\n\n  const lines: string[] = [];\n  let failed = 0;\n\n  for (const row of targets) {\n    try {\n      const gen = await generate({\n        url: row.url,\n        slug: siteSlug(row.name),\n        // `exactOptionalPropertyTypes` rejects an explicit `settleMs: undefined`\n        // against `settleMs?: number`, so omit the key entirely when unset.\n        ...(settleMs === undefined ? {} : { settleMs }),\n      });\n      if (opts.writeAirtable) {\n        // replaceIn: the field must hold exactly the current header — see\n        // uploadAttachment, where appending left readers on a stale [0].\n        await uploadAttachment(row.id, \"Header image\", gen.bytes, gen.filename, gen.contentType, {\n          replaceIn: \"Websites\",\n        });\n        let stored = \"\";\n        if (opts.storeDb) {\n          // Dual-write. A Turso failure must not void the Airtable upload —\n          // but it must be VISIBLE, never a silent divergence.\n          try {\n            await opts.storeDb(row.id, {\n              bytes: gen.bytes,\n              filename: gen.filename,\n              contentType: gen.contentType,\n              generatedAt: new Date().toISOString(),\n            });\n            stored = \" + turso\";\n          } catch (err) {\n            stored = ` (⚠ turso store FAILED: ${err instanceof Error ? err.message : String(err)})`;\n          }\n        }\n        lines.push(\n          `✔ ${row.name} — uploaded ${gen.filename} (${(gen.bytes.byteLength / 1024 / 1024).toFixed(2)} MB)${stored}`,\n        );\n      } else {\n        const path = resolve(outDir, gen.filename);\n        await writeFile(path, gen.bytes);\n        lines.push(`✔ ${row.name} — wrote ${path} (review, then re-run with --write-airtable)`);\n      }\n    } catch (err) {\n      failed++;\n      lines.push(`✖ ${row.name} — ${err instanceof Error ? err.message : String(err)}`);\n    }\n  }\n\n  lines.push(`${targets.length - failed}/${targets.length} generated.`);\n  return { output: lines.join(\"\\n\"), code: failed > 0 ? 1 : 0 };\n}\n\n/**\n * `header-image [site]` — capture a site's live homepage and composite its\n * report header image. Defaults to writing the JPEG locally so the operator can\n * eyeball it; `--write-airtable` uploads it to the Websites row's Header image\n * field. `--all` backfills every live site that has no header image yet.\n */\nexport async function runHeaderImageCommand(\n  site: string | undefined,\n  opts: HeaderImageOptions,\n): Promise<{ output: string; code: number }> {\n  const base = openBase(readAirtableConfig());\n  const rows = await listWebsites(base);\n  const targets = resolveTargets(rows, { site, all: opts.all, force: opts.force });\n  if (targets.length === 0) {\n    return {\n      output: site ? `No site matched \"${site}\".` : \"No sites need a header image.\",\n      code: 1,\n    };\n  }\n  // Wire the Turso dual-write when the env is present; a local run without it\n  // still works Airtable-only (the store is per-site error-isolated above).\n  let withStore = opts;\n  if (opts.writeAirtable && !opts.storeDb && process.env.TURSO_DATABASE_URL) {\n    const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n    const { storeHeaderImage } = await import(\"../../db/header-images.js\");\n    const db = await openDb(readDbConfig());\n    withStore = { ...opts, storeDb: (id, img) => storeHeaderImage(db, id, img) };\n  }\n  return generateForTargets(targets, withStore);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAsBjB,SAAS,eACd,MAGA,MACc;AACd,MAAI,KAAK,MAAM;AACb,UAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,WAAO,KAAK,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAAA,EACrD;AACA,MAAI,CAAC,KAAK,IAAK,QAAO,CAAC;AACvB,SAAO,KAAK,OAAO,CAAC,MAAM;AACxB,QAAI,CAAC,EAAE,IAAK,QAAO;AACnB,QAAI,EAAE,WAAW,QAAQ,CAAC,gBAAgB,IAAI,EAAE,MAAM,EAAG,QAAO;AAChE,WAAO,KAAK,QAAQ,OAAO,CAAC,EAAE;AAAA,EAChC,CAAC;AACH;AAMO,SAAS,cAAc,OAA+C;AAC3E,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,GAAG;AAChC,UAAM,OAAO;AAAA,MACX,IAAI,MAAM,mEAAmE,KAAK,GAAG;AAAA,MACrF,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAWA,eAAsB,mBACpB,SACA,MACA,WAAqB,qBACsB;AAC3C,QAAM,SAAS,QAAQ,KAAK,UAAU,SAAS;AAC/C,QAAM,WAAW,cAAc,KAAK,QAAQ;AAI5C,MAAI,CAAC,KAAK,cAAe,OAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AAEhE,QAAM,QAAkB,CAAC;AACzB,MAAI,SAAS;AAEb,aAAW,OAAO,SAAS;AACzB,QAAI;AACF,YAAM,MAAM,MAAM,SAAS;AAAA,QACzB,KAAK,IAAI;AAAA,QACT,MAAM,SAAS,IAAI,IAAI;AAAA;AAAA;AAAA,QAGvB,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,MAC/C,CAAC;AACD,UAAI,KAAK,eAAe;AAGtB,cAAM,iBAAiB,IAAI,IAAI,gBAAgB,IAAI,OAAO,IAAI,UAAU,IAAI,aAAa;AAAA,UACvF,WAAW;AAAA,QACb,CAAC;AACD,YAAI,SAAS;AACb,YAAI,KAAK,SAAS;AAGhB,cAAI;AACF,kBAAM,KAAK,QAAQ,IAAI,IAAI;AAAA,cACzB,OAAO,IAAI;AAAA,cACX,UAAU,IAAI;AAAA,cACd,aAAa,IAAI;AAAA,cACjB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,YACtC,CAAC;AACD,qBAAS;AAAA,UACX,SAAS,KAAK;AACZ,qBAAS,gCAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,UACtF;AAAA,QACF;AACA,cAAM;AAAA,UACJ,UAAK,IAAI,IAAI,oBAAe,IAAI,QAAQ,MAAM,IAAI,MAAM,aAAa,OAAO,MAAM,QAAQ,CAAC,CAAC,OAAO,MAAM;AAAA,QAC3G;AAAA,MACF,OAAO;AACL,cAAM,OAAO,QAAQ,QAAQ,IAAI,QAAQ;AACzC,cAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,cAAM,KAAK,UAAK,IAAI,IAAI,iBAAY,IAAI,8CAA8C;AAAA,MACxF;AAAA,IACF,SAAS,KAAK;AACZ;AACA,YAAM,KAAK,UAAK,IAAI,IAAI,WAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,IAClF;AAAA,EACF;AAEA,QAAM,KAAK,GAAG,QAAQ,SAAS,MAAM,IAAI,QAAQ,MAAM,aAAa;AACpE,SAAO,EAAE,QAAQ,MAAM,KAAK,IAAI,GAAG,MAAM,SAAS,IAAI,IAAI,EAAE;AAC9D;AAQA,eAAsB,sBACpB,MACA,MAC2C;AAC3C,QAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,QAAM,OAAO,MAAM,aAAa,IAAI;AACpC,QAAM,UAAU,eAAe,MAAM,EAAE,MAAM,KAAK,KAAK,KAAK,OAAO,KAAK,MAAM,CAAC;AAC/E,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,QAAQ,OAAO,oBAAoB,IAAI,OAAO;AAAA,MAC9C,MAAM;AAAA,IACR;AAAA,EACF;AAGA,MAAI,YAAY;AAChB,MAAI,KAAK,iBAAiB,CAAC,KAAK,WAAW,QAAQ,IAAI,oBAAoB;AACzE,UAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAA2B;AACrE,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,gBAAY,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,QAAQ,iBAAiB,IAAI,IAAI,GAAG,EAAE;AAAA,EAC7E;AACA,SAAO,mBAAmB,SAAS,SAAS;AAC9C;","names":[]}

package/dist/header-images-SQBCE5OD.js

@@ -0,0 +1,88 @@
+// src/db/header-images.ts
+async function storeHeaderImage(db, siteId, image) {
+  await db.updateTable("sites").set({
+    header_image: image.bytes,
+    header_image_filename: image.filename,
+    header_image_type: image.contentType,
+    header_image_generated_at: image.generatedAt
+  }).where("id", "=", siteId).execute();
+}
+async function loadHeaderImage(db, siteId) {
+  const row = await db.selectFrom("sites").select([
+    "header_image",
+    "header_image_filename",
+    "header_image_type",
+    "header_image_generated_at"
+  ]).where("id", "=", siteId).executeTakeFirst();
+  if (!row) return null;
+  const raw = row.header_image;
+  if (raw === null || raw === void 0) return null;
+  const bytes = new Uint8Array(raw);
+  if (bytes.length === 0) return null;
+  return {
+    bytes,
+    filename: row.header_image_filename ?? "header-image",
+    contentType: row.header_image_type ?? "application/octet-stream",
+    generatedAt: row.header_image_generated_at ?? null
+  };
+}
+function headerImageAttachment(rec) {
+  const atts = rec.fields["Header image"];
+  const a = atts?.at(-1);
+  return a && typeof a.url === "string" && a.url.length > 0 ? {
+    url: a.url,
+    filename: typeof a.filename === "string" ? a.filename : "header-image",
+    type: typeof a.type === "string" ? a.type : "application/octet-stream"
+  } : null;
+}
+async function backfillHeaderImages(db, io) {
+  const records = await io.listWebsiteRecords();
+  const populated = new Set(
+    (await db.selectFrom("sites").select("id").where("header_image", "is not", null).execute()).map(
+      (r) => r.id
+    )
+  );
+  const result = { stored: 0, skipped: 0, absent: 0, failed: [] };
+  for (const rec of records) {
+    const att = headerImageAttachment(rec);
+    if (!att) {
+      result.absent++;
+      continue;
+    }
+    if (populated.has(rec.id)) {
+      result.skipped++;
+      continue;
+    }
+    const bytes = await io.fetchBytes(att.url);
+    if (bytes === null) {
+      result.failed.push(rec.id);
+      continue;
+    }
+    await storeHeaderImage(db, rec.id, {
+      bytes,
+      filename: att.filename,
+      contentType: att.type,
+      generatedAt: null
+    });
+    result.stored++;
+  }
+  return result;
+}
+function formatBackfillResult(r) {
+  const lines = [];
+  if (r.failed.length > 0) {
+    lines.push(`\u26A0 ${r.failed.length} attachment fetch(es) failed: ${r.failed.join(", ")}`);
+  }
+  lines.push(
+    `HEADER_IMAGE_BACKFILL stored=${r.stored} skipped=${r.skipped} absent=${r.absent} failed=${r.failed.length}`
+  );
+  return lines.join("\n");
+}
+export {
+  backfillHeaderImages,
+  formatBackfillResult,
+  headerImageAttachment,
+  loadHeaderImage,
+  storeHeaderImage
+};
+//# sourceMappingURL=header-images-SQBCE5OD.js.map

package/dist/header-images-SQBCE5OD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/header-images.ts"],"sourcesContent":["/** Header images move to Turso (#539, design D5 completed).\n *\n *  Since Phase 1 the schema has reserved `sites.header_image*` as the image's\n *  home — the importer deliberately never touches those columns — but nothing\n *  wrote them, so the read layer's `headerImage` was null fleet-wide and both\n *  cockpit preflight and approve-report stayed pinned to the Airtable reader.\n *  Two writers and one reader close that:\n *\n *  - `storeHeaderImage` — the shared write, used by the header-image CLI's\n *    dual-write (Airtable upload + Turso store, until Phase 5 freezes Airtable)\n *    and by the backfill.\n *  - `loadHeaderImage` — the reader. Until it existed the bytes went in and could\n *    not come out, so every consumer still fetched Airtable's signed URL.\n *  - `backfillHeaderImages` — one-shot: copy every site's CURRENT Airtable\n *    attachment into Turso. Idempotent — a site whose BLOB is already\n *    populated is skipped, so re-runs never clobber a freshly generated image\n *    with a stale Airtable copy. Emits its machine line on EVERY run.\n */\nimport type { Db } from \"./client.js\";\nimport type { RawRecord } from \"./import-airtable.js\";\n\nexport type StoredHeaderImage = {\n  bytes: Uint8Array;\n  filename: string;\n  contentType: string;\n  /** The generator's stamp; null for a backfilled copy (a backfill is not a\n   *  generation — the column keeps meaning \"when the generator made it\"). */\n  generatedAt: string | null;\n};\n\nexport async function storeHeaderImage(\n  db: Db,\n  siteId: string,\n  image: StoredHeaderImage,\n): Promise<void> {\n  await db\n    .updateTable(\"sites\")\n    .set({\n      header_image: image.bytes,\n      header_image_filename: image.filename,\n      header_image_type: image.contentType,\n      header_image_generated_at: image.generatedAt,\n    })\n    .where(\"id\", \"=\", siteId)\n    .execute();\n}\n\n/**\n * Read one site's stored header image back.\n *\n * A SEPARATE query from the site read, deliberately. `getSiteBySlug` excludes\n * the BLOB on purpose — it is 0.6–0.8 MB per site in production, so a selectAll\n * would haul megabytes into every dashboard GET and every form ingest — which\n * means reading the bytes has to be an explicit, per-site act rather than a\n * field that arrives for free.\n *\n * Null when the site has no image, when the id is unknown, and when the\n * metadata is present but the BLOB is not: handing a consumer an empty buffer\n * with a filename would render a report with a broken header instead of failing\n * loudly with \"no header image\".\n */\nexport async function loadHeaderImage(db: Db, siteId: string): Promise<StoredHeaderImage | null> {\n  const row = await db\n    .selectFrom(\"sites\")\n    .select([\n      \"header_image\",\n      \"header_image_filename\",\n      \"header_image_type\",\n      \"header_image_generated_at\",\n    ])\n    .where(\"id\", \"=\", siteId)\n    .executeTakeFirst();\n  if (!row) return null;\n  // Normalize BEFORE measuring. libSQL can hand the BLOB back as an ArrayBuffer\n  // rather than a Uint8Array, and an ArrayBuffer has `byteLength`, not `length` —\n  // so a naive `bytes.length === 0` compares `undefined` to 0, passes, and lets a\n  // zero-length image through as if it were real. Mutation-testing the null check\n  // is what exposed that; the guard did not do what its own name said.\n  const raw = row.header_image;\n  if (raw === null || raw === undefined) return null;\n  // `raw` is a Uint8Array on some drivers and an ArrayBuffer on others; the\n  // Uint8Array constructor accepts either, but the two do not share a TS type.\n  const bytes = new Uint8Array(raw as unknown as ArrayBufferLike);\n  if (bytes.length === 0) return null;\n\n  return {\n    bytes,\n    filename: row.header_image_filename ?? \"header-image\",\n    contentType: row.header_image_type ?? \"application/octet-stream\",\n    generatedAt: row.header_image_generated_at ?? null,\n  };\n}\n\ntype Attachment = { url: string; filename: string; type: string };\n\n/** NEWEST \"Header image\" attachment of a raw Websites record, or null.\n *\n *  The tail, not the head: Airtable's uploadAttachment APPENDS, so a field that ever\n *  held more than one file served its OLDEST image from `[0]` forever — see the note\n *  in `reports/airtable/websites.ts` and #574/#577. Kept in step with that reader so\n *  the Turso mirror and the send path can never disagree about which file is current. */\nexport function headerImageAttachment(rec: RawRecord): Attachment | null {\n  const atts = rec.fields[\"Header image\"] as Array<Partial<Attachment>> | undefined;\n  const a = atts?.at(-1);\n  return a && typeof a.url === \"string\" && a.url.length > 0\n    ? {\n        url: a.url,\n        filename: typeof a.filename === \"string\" ? a.filename : \"header-image\",\n        type: typeof a.type === \"string\" ? a.type : \"application/octet-stream\",\n      }\n    : null;\n}\n\nexport type BackfillIo = {\n  listWebsiteRecords: () => Promise<RawRecord[]>;\n  /** Fetch attachment bytes; null on failure (named in the summary, not fatal). */\n  fetchBytes: (url: string) => Promise<Uint8Array | null>;\n};\n\nexport type BackfillResult = {\n  stored: number;\n  /** Sites whose BLOB was already populated — never overwritten. */\n  skipped: number;\n  /** Sites with no Airtable attachment at all. */\n  absent: number;\n  /** Record ids whose attachment fetch failed — named, never silent. */\n  failed: string[];\n};\n\nexport async function backfillHeaderImages(db: Db, io: BackfillIo): Promise<BackfillResult> {\n  const records = await io.listWebsiteRecords();\n  const populated = new Set(\n    (await db.selectFrom(\"sites\").select(\"id\").where(\"header_image\", \"is not\", null).execute()).map(\n      (r) => r.id,\n    ),\n  );\n  const result: BackfillResult = { stored: 0, skipped: 0, absent: 0, failed: [] };\n  for (const rec of records) {\n    const att = headerImageAttachment(rec);\n    if (!att) {\n      result.absent++;\n      continue;\n    }\n    if (populated.has(rec.id)) {\n      result.skipped++;\n      continue;\n    }\n    const bytes = await io.fetchBytes(att.url);\n    if (bytes === null) {\n      result.failed.push(rec.id);\n      continue;\n    }\n    await storeHeaderImage(db, rec.id, {\n      bytes,\n      filename: att.filename,\n      contentType: att.type,\n      generatedAt: null,\n    });\n    result.stored++;\n  }\n  return result;\n}\n\n/** Human lines + the machine line, emitted on every run (count=0 included). */\nexport function formatBackfillResult(r: BackfillResult): string {\n  const lines: string[] = [];\n  if (r.failed.length > 0) {\n    lines.push(`⚠ ${r.failed.length} attachment fetch(es) failed: ${r.failed.join(\", \")}`);\n  }\n  lines.push(\n    `HEADER_IMAGE_BACKFILL stored=${r.stored} skipped=${r.skipped} absent=${r.absent} failed=${r.failed.length}`,\n  );\n  return lines.join(\"\\n\");\n}\n"],"mappings":";AA8BA,eAAsB,iBACpB,IACA,QACA,OACe;AACf,QAAM,GACH,YAAY,OAAO,EACnB,IAAI;AAAA,IACH,cAAc,MAAM;AAAA,IACpB,uBAAuB,MAAM;AAAA,IAC7B,mBAAmB,MAAM;AAAA,IACzB,2BAA2B,MAAM;AAAA,EACnC,CAAC,EACA,MAAM,MAAM,KAAK,MAAM,EACvB,QAAQ;AACb;AAgBA,eAAsB,gBAAgB,IAAQ,QAAmD;AAC/F,QAAM,MAAM,MAAM,GACf,WAAW,OAAO,EAClB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,MAAM,KAAK,MAAM,EACvB,iBAAiB;AACpB,MAAI,CAAC,IAAK,QAAO;AAMjB,QAAM,MAAM,IAAI;AAChB,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAG9C,QAAM,QAAQ,IAAI,WAAW,GAAiC;AAC9D,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,SAAO;AAAA,IACL;AAAA,IACA,UAAU,IAAI,yBAAyB;AAAA,IACvC,aAAa,IAAI,qBAAqB;AAAA,IACtC,aAAa,IAAI,6BAA6B;AAAA,EAChD;AACF;AAUO,SAAS,sBAAsB,KAAmC;AACvE,QAAM,OAAO,IAAI,OAAO,cAAc;AACtC,QAAM,IAAI,MAAM,GAAG,EAAE;AACrB,SAAO,KAAK,OAAO,EAAE,QAAQ,YAAY,EAAE,IAAI,SAAS,IACpD;AAAA,IACE,KAAK,EAAE;AAAA,IACP,UAAU,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAAA,IACxD,MAAM,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,EAC9C,IACA;AACN;AAkBA,eAAsB,qBAAqB,IAAQ,IAAyC;AAC1F,QAAM,UAAU,MAAM,GAAG,mBAAmB;AAC5C,QAAM,YAAY,IAAI;AAAA,KACnB,MAAM,GAAG,WAAW,OAAO,EAAE,OAAO,IAAI,EAAE,MAAM,gBAAgB,UAAU,IAAI,EAAE,QAAQ,GAAG;AAAA,MAC1F,CAAC,MAAM,EAAE;AAAA,IACX;AAAA,EACF;AACA,QAAM,SAAyB,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC,EAAE;AAC9E,aAAW,OAAO,SAAS;AACzB,UAAM,MAAM,sBAAsB,GAAG;AACrC,QAAI,CAAC,KAAK;AACR,aAAO;AACP;AAAA,IACF;AACA,QAAI,UAAU,IAAI,IAAI,EAAE,GAAG;AACzB,aAAO;AACP;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,GAAG,WAAW,IAAI,GAAG;AACzC,QAAI,UAAU,MAAM;AAClB,aAAO,OAAO,KAAK,IAAI,EAAE;AACzB;AAAA,IACF;AACA,UAAM,iBAAiB,IAAI,IAAI,IAAI;AAAA,MACjC;AAAA,MACA,UAAU,IAAI;AAAA,MACd,aAAa,IAAI;AAAA,MACjB,aAAa;AAAA,IACf,CAAC;AACD,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAGO,SAAS,qBAAqB,GAA2B;AAC9D,QAAM,QAAkB,CAAC;AACzB,MAAI,EAAE,OAAO,SAAS,GAAG;AACvB,UAAM,KAAK,UAAK,EAAE,OAAO,MAAM,iCAAiC,EAAE,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,EACvF;AACA,QAAM;AAAA,IACJ,gCAAgC,EAAE,MAAM,YAAY,EAAE,OAAO,WAAW,EAAE,MAAM,WAAW,EAAE,OAAO,MAAM;AAAA,EAC5G;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/{health-endpoint-242WG2OJ.js → health-endpoint-RFXL2F4A.js}

@@ -5,20 +5,20 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-CROKUHJB.js";
 import {
   healthEndpoint
-} from "./chunk-R6FPFMOS.js";
+} from "./chunk-BQRFQSGY.js";
 import "./chunk-R53VL3RI.js";
-import "./chunk-ZTPPCHDB.js";
-import "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
-import "./chunk-XXTZBPUY.js";
+import "./chunk-3G25KIWW.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/health-endpoint.ts
 import { resolve } from "path";
@@ -51,4 +51,4 @@ async function runHealthEndpointCommand(site, opts) {
 export {
   runHealthEndpointCommand
 };
-//# sourceMappingURL=health-endpoint-242WG2OJ.js.map
+//# sourceMappingURL=health-endpoint-RFXL2F4A.js.map

package/dist/health-mirror-L5JBEJVA.js

@@ -0,0 +1,41 @@
+import {
+  mirrorHealthFields,
+  mirrorScheduleFields
+} from "./chunk-HHMMUR4P.js";
+import "./chunk-P6AORG32.js";
+import "./chunk-F3JWOPTG.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-7NYN2P6I.js";
+import {
+  openDb,
+  readDbConfig
+} from "./chunk-JHGHLKFS.js";
+import "./chunk-3SF7D4DY.js";
+import "./chunk-6VAL7XJT.js";
+
+// src/audits/health-mirror.ts
+async function makeHealthMirrorBestEffort(open = () => openDb(readDbConfig())) {
+  let db;
+  try {
+    db = await open();
+  } catch (e) {
+    console.error(`[health-mirror] mirroring disabled: no libSQL (${String(e)})`);
+    return null;
+  }
+  return (siteId, fields) => mirrorHealthFields(db, siteId, fields);
+}
+async function makeScheduleMirrorBestEffort(open = () => openDb(readDbConfig())) {
+  let db;
+  try {
+    db = await open();
+  } catch (e) {
+    console.error(`[schedule-mirror] mirroring disabled: no libSQL (${String(e)})`);
+    return null;
+  }
+  return (siteId, fields, computedAt) => mirrorScheduleFields(db, siteId, fields, computedAt);
+}
+export {
+  makeHealthMirrorBestEffort,
+  makeScheduleMirrorBestEffort
+};
+//# sourceMappingURL=health-mirror-L5JBEJVA.js.map

package/dist/health-mirror-L5JBEJVA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/audits/health-mirror.ts"],"sourcesContent":["import { openDb, readDbConfig, type Db } from \"../db/client.js\";\nimport { mirrorHealthFields, mirrorScheduleFields } from \"../db/fleet-state.js\";\n\n/** One site's just-written Airtable FieldSet, mirrored into site_health.\n *  Resolves true when a site_health row matched; false when the UPDATE touched\n *  0 rows (site created in Airtable after the last hourly import) — callers\n *  count that as mirror_missed, never as mirrored. */\nexport type HealthMirror = (siteId: string, fields: Record<string, unknown>) => Promise<boolean>;\n\n/** The site_schedule twin, for the nightly next-due write-back. Same\n *  matched-row contract as {@link HealthMirror}: false = 0-row UPDATE →\n *  mirror_missed. */\nexport type ScheduleMirror = (\n  siteId: string,\n  fields: Record<string, unknown>,\n  computedAt: string,\n) => Promise<boolean>;\n\n/** Build the Turso write-through for the nightly writers (#539 Phase 3\n *  dual-write), or null when libSQL creds are absent — mirroring NOT attempted\n *  is a different outcome than mirroring failed, and the caller's summary line\n *  reports mirror counts only when a mirror existed. Same contract as\n *  recordFleetEventsBestEffort: the mirror must never fail the sweep that\n *  produced the data (per-site failures are the caller's to count; Airtable\n *  stays authoritative and the hourly sync converges whatever the mirror\n *  missed). `open` is injectable for tests. */\nexport async function makeHealthMirrorBestEffort(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n): Promise<HealthMirror | null> {\n  let db: Db;\n  try {\n    db = await open();\n  } catch (e) {\n    console.error(`[health-mirror] mirroring disabled: no libSQL (${String(e)})`);\n    return null;\n  }\n  return (siteId, fields) => mirrorHealthFields(db, siteId, fields);\n}\n\n/** {@link makeHealthMirrorBestEffort}'s schedule twin — same null-without-creds\n *  contract, for `writeNextDueDates`' site_schedule write-through. */\nexport async function makeScheduleMirrorBestEffort(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n): Promise<ScheduleMirror | null> {\n  let db: Db;\n  try {\n    db = await open();\n  } catch (e) {\n    console.error(`[schedule-mirror] mirroring disabled: no libSQL (${String(e)})`);\n    return null;\n  }\n  return (siteId, fields, computedAt) => mirrorScheduleFields(db, siteId, fields, computedAt);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA0BA,eAAsB,2BACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GACvB;AAC9B,MAAI;AACJ,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,YAAQ,MAAM,kDAAkD,OAAO,CAAC,CAAC,GAAG;AAC5E,WAAO;AAAA,EACT;AACA,SAAO,CAAC,QAAQ,WAAW,mBAAmB,IAAI,QAAQ,MAAM;AAClE;AAIA,eAAsB,6BACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GACrB;AAChC,MAAI;AACJ,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,YAAQ,MAAM,oDAAoD,OAAO,CAAC,CAAC,GAAG;AAC9E,WAAO;AAAA,EACT;AACA,SAAO,CAAC,QAAQ,QAAQ,eAAe,qBAAqB,IAAI,QAAQ,QAAQ,UAAU;AAC5F;","names":[]}

package/dist/import-airtable-OHVY344G.js

@@ -0,0 +1,37 @@
+import {
+  EXCLUDED_WEBSITE_FIELDS,
+  HEALTH_BOOLEAN,
+  HEALTH_FIELDS,
+  SCHEDULE_FIELDS,
+  SITE_FIELDS,
+  formatReapSummary,
+  healthColumnFor,
+  importFleetState,
+  mapReportRecord,
+  mapWebsiteRecord,
+  reapAllowance,
+  reapRefusal,
+  renderedHtmlUrl,
+  scheduleColumnFor,
+  siteValueFor
+} from "./chunk-P6AORG32.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-7NYN2P6I.js";
+export {
+  EXCLUDED_WEBSITE_FIELDS,
+  HEALTH_BOOLEAN,
+  HEALTH_FIELDS,
+  SCHEDULE_FIELDS,
+  SITE_FIELDS,
+  formatReapSummary,
+  healthColumnFor,
+  importFleetState,
+  mapReportRecord,
+  mapWebsiteRecord,
+  reapAllowance,
+  reapRefusal,
+  renderedHtmlUrl,
+  scheduleColumnFor,
+  siteValueFor
+};
+//# sourceMappingURL=import-airtable-OHVY344G.js.map