@reddoorla/maintenance 0.85.2 → 0.87.0

package/dist/{self-updating-PPQVV6UA.js → self-updating-UCIWESAX.js}

@@ -1,6 +1,6 @@
 import {
   selfUpdating
-} from "./chunk-THEFTZ7F.js";
+} from "./chunk-62CMMGEO.js";
 import "./chunk-MNDIED4M.js";
 import {
   runRecipeOverSites
@@ -9,18 +9,18 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-CROKUHJB.js";
 import "./chunk-73UFRZKY.js";
 import "./chunk-GASBX52O.js";
-import "./chunk-VRWUL4TR.js";
-import "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
-import "./chunk-XXTZBPUY.js";
+import "./chunk-XHHMM5HX.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/self-updating.ts
 import { resolve } from "path";
@@ -62,4 +62,4 @@ async function runSelfUpdatingCommand(site, opts) {
 export {
   runSelfUpdatingCommand
 };
-//# sourceMappingURL=self-updating-PPQVV6UA.js.map
+//# sourceMappingURL=self-updating-UCIWESAX.js.map

package/dist/{selftest-CQ6NOX52.js → selftest-VGHWPN72.js}

@@ -1,43 +1,49 @@
 import {
   buildReportDataForSite,
   scoresFromRow
-} from "./chunk-GZNBCHAZ.js";
+} from "./chunk-HEWSRXYV.js";
 import {
   operatorEmail
 } from "./chunk-5ML7FMBD.js";
+import "./chunk-BBUSGEES.js";
 import {
   ELIGIBLE_STATUSES
-} from "./chunk-D4FVAIEJ.js";
-import "./chunk-MGR2H7F4.js";
-import "./chunk-62VF32IC.js";
-import "./chunk-37S6L6G4.js";
+} from "./chunk-PZR4EBPY.js";
+import "./chunk-YFAXOD7Z.js";
 import {
   isProbablyEmail,
-  parseAddresses,
+  parseAddresses
+} from "./chunk-NDWYJLRF.js";
+import "./chunk-F3JWOPTG.js";
+import "./chunk-VAD43MOR.js";
+import {
+  fetchAttachmentBytes
+} from "./chunk-IY6256GK.js";
+import {
+  openBase,
+  readAirtableConfig
+} from "./chunk-HN6I2XWI.js";
+import {
   prepareHeaderImage,
   renderReportEmail
-} from "./chunk-COZPL62X.js";
+} from "./chunk-ZGBEIWSC.js";
 import "./chunk-GECESMVS.js";
-import "./chunk-6QRLRT3P.js";
-import {
-  fetchAttachmentBytes
-} from "./chunk-MPBXOJ3N.js";
-import "./chunk-SEEA6RXF.js";
+import "./chunk-MT2JINSS.js";
+import "./chunk-DJZWYIPP.js";
 import {
-  defaultResendClient
-} from "./chunk-WEKL2HYJ.js";
-import "./chunk-QG6OSL4M.js";
-import "./chunk-DC5H7KEQ.js";
-import "./chunk-4SOCPK7A.js";
-import "./chunk-U5SZ4FOP.js";
+  applyReportTypeHeadline
+} from "./chunk-5UINJNAJ.js";
 import {
   listWebsites,
   siteSlug
-} from "./chunk-577HCGZO.js";
+} from "./chunk-7NYN2P6I.js";
 import {
-  openBase,
-  readAirtableConfig
-} from "./chunk-HN6I2XWI.js";
+  defaultResendClient
+} from "./chunk-WEKL2HYJ.js";
+import "./chunk-XUGSZP7Z.js";
+import "./chunk-EVBCK2KC.js";
+import "./chunk-JHGHLKFS.js";
+import "./chunk-3SF7D4DY.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/recipes/selftest-email.ts
@@ -85,7 +91,8 @@ async function selftestEmail(deps) {
         continue;
       }
       const original = await fetchAttachmentBytes(w.headerImage.url);
-      const header = await prepareHeaderImage(original.bytes);
+      const withHeadline = await applyReportTypeHeadline(original.bytes, type);
+      const header = await prepareHeaderImage(withHeadline);
       const slug = siteSlug(w.name);
       const reportData = await buildReportDataForSite(w, type, now, { scores, header });
       const { html, attachments, subject } = await renderReportEmail(reportData, {
@@ -165,4 +172,4 @@ async function runSelftestCommand(kind, site, opts) {
 export {
   runSelftestCommand
 };
-//# sourceMappingURL=selftest-CQ6NOX52.js.map
+//# sourceMappingURL=selftest-VGHWPN72.js.map

package/dist/selftest-VGHWPN72.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recipes/selftest-email.ts","../src/cli/commands/selftest.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\nimport { openBase, readAirtableConfig } from \"../reports/airtable/client.js\";\nimport type { AirtableBase } from \"../reports/airtable/client.js\";\nimport { listWebsites, siteSlug } from \"../reports/airtable/websites.js\";\nimport { ELIGIBLE_STATUSES } from \"../reports/due.js\";\nimport type { WebsiteRow } from \"../reports/airtable/websites.js\";\nimport { fetchAttachmentBytes } from \"../reports/airtable/attachments.js\";\nimport { prepareHeaderImage } from \"../reports/maintenance-email/header-image.js\";\nimport { applyReportTypeHeadline } from \"../reports/header-image/index.js\";\nimport { buildReportDataForSite, scoresFromRow } from \"../reports/report-data.js\";\nimport { renderReportEmail } from \"../reports/send/render-email.js\";\nimport { defaultResendClient, type ResendClient } from \"../reports/send/resend.js\";\nimport { parseAddresses, isProbablyEmail } from \"../reports/send/orchestrate.js\";\nimport { operatorEmail } from \"../util/operator.js\";\nimport type { ReportType } from \"../reports/types.js\";\n\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\nconst REPLY_TO = \"info@reddoorla.com\";\n\nexport type SelftestEmailDeps = {\n  /** Airtable handle (read-only here). Defaults to the live base from credentials. */\n  base?: AirtableBase;\n  /** Resend client. Defaults to the real client. */\n  resend?: ResendClient;\n  /** Single-site slug. Mutually exclusive with `all`. */\n  site?: string;\n  /** All `maintenance` sites (one email each). Mutually exclusive with `site`. */\n  all?: boolean;\n  /** Report type to preview. Default \"Announcement\". */\n  type?: ReportType;\n  /** Raw `--to` (comma- or newline-separated). Default: the operator inbox. */\n  to?: string;\n  /** Render only; write reports/<slug>/selftest-<type>.html, never send. */\n  dryRun?: boolean;\n  /** Single timestamp driving the window + completedOn. */\n  now?: Date;\n};\n\nexport type SelftestEmailSiteResult =\n  | { site: string; status: \"sent\" | \"dry-run\"; subject: string; recipients: string[] }\n  | { site: string; status: \"skipped\"; reason: string }\n  | { site: string; status: \"error\"; message: string };\n\nexport type SelftestEmailResult = { results: SelftestEmailSiteResult[] };\n\n/** Resolve the recipient list: explicit `--to` (validated) else the operator default. */\nfunction resolveRecipients(to: string | undefined): string[] {\n  const operator = operatorEmail();\n  const parsed = to ? parseAddresses(to) : null;\n  const list = parsed ?? [operator];\n  for (const addr of list) {\n    if (!isProbablyEmail(addr)) {\n      throw Object.assign(new Error(`--to has a malformed address: ${addr}`), { exitCode: 2 });\n    }\n  }\n  return list;\n}\n\n/**\n * Send (or dry-render) a single report email per target site to the operator/`--to`, with NO\n * Airtable side effects (no draft, queue, or stamp). Mirrors the production render+send via the\n * shared `renderReportEmail` seam, so the preview matches a real send. One bad site never aborts\n * `--all` (per-site try/catch). Sites missing stored scores or a header image are skipped.\n */\nexport async function selftestEmail(deps: SelftestEmailDeps): Promise<SelftestEmailResult> {\n  const base = deps.base ?? openBase(readAirtableConfig());\n  const resend = deps.resend ?? defaultResendClient();\n  const type: ReportType = deps.type ?? \"Announcement\";\n  const now = deps.now ?? new Date();\n  const recipients = resolveRecipients(deps.to);\n\n  const websites = await listWebsites(base);\n  let targets: WebsiteRow[];\n  if (deps.all) {\n    // The report-eligible set (maintained + hosted-only), not a hard-coded \"maintained\" —\n    // the latter silently excluded hosting sites and implied a type↔status coupling that\n    // doesn't exist (the requested --type drives the rendered template; single-site mode\n    // applies no status filter at all).\n    targets = websites.filter((w) => w.status !== null && ELIGIBLE_STATUSES.has(w.status));\n  } else if (deps.site) {\n    const wanted = siteSlug(deps.site);\n    targets = websites.filter((w) => siteSlug(w.name) === wanted);\n  } else {\n    throw Object.assign(new Error(\"Provide a site slug or --all\"), { exitCode: 2 });\n  }\n\n  const results: SelftestEmailSiteResult[] = [];\n  for (const w of targets) {\n    try {\n      const scores = scoresFromRow(w);\n      if (!scores) {\n        results.push({ site: w.name, status: \"skipped\", reason: \"missing Lighthouse scores\" });\n        continue;\n      }\n      if (!w.headerImage) {\n        results.push({ site: w.name, status: \"skipped\", reason: \"no Header image\" });\n        continue;\n      }\n      const original = await fetchAttachmentBytes(w.headerImage.url);\n      // Mirror orchestrate.ts exactly: the stored header is the CLEAN plate, so the\n      // report type's headline has to be stamped on before downscaling. Omitting this\n      // step made every selftest preview ship a header with an EMPTY headline band —\n      // the one thing a preview exists to catch, silently wrong in the preview itself.\n      const withHeadline = await applyReportTypeHeadline(original.bytes, type);\n      const header = await prepareHeaderImage(withHeadline);\n      const slug = siteSlug(w.name);\n      const reportData = await buildReportDataForSite(w, type, now, { scores, header });\n      const { html, attachments, subject } = await renderReportEmail(reportData, {\n        header,\n        cidName: `${slug}-header`,\n      });\n\n      if (deps.dryRun) {\n        const path = `reports/${slug}/selftest-${type.toLowerCase()}.html`;\n        await mkdir(dirname(path), { recursive: true });\n        await writeFile(path, html, \"utf-8\");\n        results.push({ site: w.name, status: \"dry-run\", subject, recipients });\n        continue;\n      }\n\n      await resend.send({\n        from: FROM_ADDRESS,\n        to: recipients,\n        replyTo: REPLY_TO,\n        subject,\n        html,\n        attachments,\n      });\n      results.push({ site: w.name, status: \"sent\", subject, recipients });\n    } catch (err) {\n      results.push({\n        site: w.name,\n        status: \"error\",\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  return { results };\n}\n","import { selftestEmail, type SelftestEmailSiteResult } from \"../../recipes/selftest-email.js\";\nimport type { ReportType } from \"../../reports/types.js\";\n\nexport type SelftestCommandOptions = {\n  type?: string;\n  to?: string;\n  all?: boolean;\n  dryRun?: boolean;\n  cwd?: string;\n};\n\nconst TYPES: Record<string, ReportType> = {\n  announcement: \"Announcement\",\n  maintenance: \"Maintenance\",\n  testing: \"Testing\",\n  launch: \"Launch\",\n};\n\nfunction formatResult(r: SelftestEmailSiteResult): string {\n  if (r.status === \"skipped\") return `[${r.site}] skipped — ${r.reason}`;\n  if (r.status === \"error\") return `[${r.site}] error: ${r.message}`;\n  return `[${r.site}] ${r.status} — \"${r.subject}\" → ${r.recipients.join(\", \")}`;\n}\n\n/**\n * `selftest <kind> [site]` — operator self-tests. The only kind today is `email`: preview a\n * report email for one site (or `--all` maintenance sites) to the operator/`--to`, with no\n * Airtable side effects. Validates kind/type and the site-xor-all rule before doing any work.\n */\nexport async function runSelftestCommand(\n  kind: string,\n  site: string | undefined,\n  opts: SelftestCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (kind !== \"email\") {\n    return { output: `Unknown selftest kind '${kind}'. Supported: email`, code: 2 };\n  }\n  if (Boolean(site) === Boolean(opts.all)) {\n    return { output: \"Provide exactly one of <site> or --all.\", code: 2 };\n  }\n  const typeKey = (opts.type ?? \"announcement\").toLowerCase();\n  const type = TYPES[typeKey];\n  if (!type) {\n    return {\n      output: `Unknown --type '${opts.type}'. Supported: ${Object.keys(TYPES).join(\", \")}`,\n      code: 2,\n    };\n  }\n\n  try {\n    const { results } = await selftestEmail({\n      ...(site ? { site } : {}),\n      ...(opts.all ? { all: true } : {}),\n      type,\n      ...(opts.to ? { to: opts.to } : {}),\n      ...(opts.dryRun ? { dryRun: true } : {}),\n    });\n    const output =\n      results.length === 0 ? \"No matching sites.\" : results.map(formatResult).join(\"\\n\");\n    const code = results.some((r) => r.status === \"error\") ? 1 : 0;\n    return { output, code };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAgBxB,IAAM,eAAe;AACrB,IAAM,WAAW;AA6BjB,SAAS,kBAAkB,IAAkC;AAC3D,QAAM,WAAW,cAAc;AAC/B,QAAM,SAAS,KAAK,eAAe,EAAE,IAAI;AACzC,QAAM,OAAO,UAAU,CAAC,QAAQ;AAChC,aAAW,QAAQ,MAAM;AACvB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,YAAM,OAAO,OAAO,IAAI,MAAM,iCAAiC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,IACzF;AAAA,EACF;AACA,SAAO;AACT;AAQA,eAAsB,cAAc,MAAuD;AACzF,QAAM,OAAO,KAAK,QAAQ,SAAS,mBAAmB,CAAC;AACvD,QAAM,SAAS,KAAK,UAAU,oBAAoB;AAClD,QAAM,OAAmB,KAAK,QAAQ;AACtC,QAAM,MAAM,KAAK,OAAO,oBAAI,KAAK;AACjC,QAAM,aAAa,kBAAkB,KAAK,EAAE;AAE5C,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,MAAI;AACJ,MAAI,KAAK,KAAK;AAKZ,cAAU,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ,kBAAkB,IAAI,EAAE,MAAM,CAAC;AAAA,EACvF,WAAW,KAAK,MAAM;AACpB,UAAM,SAAS,SAAS,KAAK,IAAI;AACjC,cAAU,SAAS,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,MAAM;AAAA,EAC9D,OAAO;AACL,UAAM,OAAO,OAAO,IAAI,MAAM,8BAA8B,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,EAChF;AAEA,QAAM,UAAqC,CAAC;AAC5C,aAAW,KAAK,SAAS;AACvB,QAAI;AACF,YAAM,SAAS,cAAc,CAAC;AAC9B,UAAI,CAAC,QAAQ;AACX,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,QAAQ,4BAA4B,CAAC;AACrF;AAAA,MACF;AACA,UAAI,CAAC,EAAE,aAAa;AAClB,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,QAAQ,kBAAkB,CAAC;AAC3E;AAAA,MACF;AACA,YAAM,WAAW,MAAM,qBAAqB,EAAE,YAAY,GAAG;AAK7D,YAAM,eAAe,MAAM,wBAAwB,SAAS,OAAO,IAAI;AACvE,YAAM,SAAS,MAAM,mBAAmB,YAAY;AACpD,YAAM,OAAO,SAAS,EAAE,IAAI;AAC5B,YAAM,aAAa,MAAM,uBAAuB,GAAG,MAAM,KAAK,EAAE,QAAQ,OAAO,CAAC;AAChF,YAAM,EAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,kBAAkB,YAAY;AAAA,QACzE;AAAA,QACA,SAAS,GAAG,IAAI;AAAA,MAClB,CAAC;AAED,UAAI,KAAK,QAAQ;AACf,cAAM,OAAO,WAAW,IAAI,aAAa,KAAK,YAAY,CAAC;AAC3D,cAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9C,cAAM,UAAU,MAAM,MAAM,OAAO;AACnC,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,SAAS,WAAW,CAAC;AACrE;AAAA,MACF;AAEA,YAAM,OAAO,KAAK;AAAA,QAChB,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,cAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,QAAQ,SAAS,WAAW,CAAC;AAAA,IACpE,SAAS,KAAK;AACZ,cAAQ,KAAK;AAAA,QACX,MAAM,EAAE;AAAA,QACR,QAAQ;AAAA,QACR,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ;AACnB;;;ACjIA,IAAM,QAAoC;AAAA,EACxC,cAAc;AAAA,EACd,aAAa;AAAA,EACb,SAAS;AAAA,EACT,QAAQ;AACV;AAEA,SAAS,aAAa,GAAoC;AACxD,MAAI,EAAE,WAAW,UAAW,QAAO,IAAI,EAAE,IAAI,oBAAe,EAAE,MAAM;AACpE,MAAI,EAAE,WAAW,QAAS,QAAO,IAAI,EAAE,IAAI,YAAY,EAAE,OAAO;AAChE,SAAO,IAAI,EAAE,IAAI,KAAK,EAAE,MAAM,YAAO,EAAE,OAAO,YAAO,EAAE,WAAW,KAAK,IAAI,CAAC;AAC9E;AAOA,eAAsB,mBACpB,MACA,MACA,MAC2C;AAC3C,MAAI,SAAS,SAAS;AACpB,WAAO,EAAE,QAAQ,0BAA0B,IAAI,uBAAuB,MAAM,EAAE;AAAA,EAChF;AACA,MAAI,QAAQ,IAAI,MAAM,QAAQ,KAAK,GAAG,GAAG;AACvC,WAAO,EAAE,QAAQ,2CAA2C,MAAM,EAAE;AAAA,EACtE;AACA,QAAM,WAAW,KAAK,QAAQ,gBAAgB,YAAY;AAC1D,QAAM,OAAO,MAAM,OAAO;AAC1B,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,QAAQ,mBAAmB,KAAK,IAAI,iBAAiB,OAAO,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC;AAAA,MAClF,MAAM;AAAA,IACR;AAAA,EACF;AAEA,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,cAAc;AAAA,MACtC,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,MACvB,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,MAChC;AAAA,MACA,GAAI,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MACjC,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,IACxC,CAAC;AACD,UAAM,SACJ,QAAQ,WAAW,IAAI,uBAAuB,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AACnF,UAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,IAAI,IAAI;AAC7D,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/site-mirror-NIREX5ME.js

@@ -0,0 +1,52 @@
+import {
+  mirrorHealthFields,
+  mirrorSiteFields,
+  mirrorSiteInsert
+} from "./chunk-HHMMUR4P.js";
+import "./chunk-P6AORG32.js";
+import "./chunk-F3JWOPTG.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-7NYN2P6I.js";
+import {
+  openDb,
+  readDbConfig
+} from "./chunk-JHGHLKFS.js";
+import "./chunk-3SF7D4DY.js";
+import "./chunk-6VAL7XJT.js";
+
+// src/db/site-mirror.ts
+async function makeSiteMirror(open = () => openDb(readDbConfig())) {
+  let db = null;
+  let why = "";
+  try {
+    db = await open();
+  } catch (e) {
+    why = e.message;
+  }
+  const run = async (siteId, op, work) => {
+    if (!db) {
+      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=absent reason=${why}`);
+      return;
+    }
+    try {
+      const matched = await work(db);
+      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=${matched ? "1" : "missed"}`);
+    } catch (e) {
+      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=0 error=${e.message}`);
+    }
+  };
+  return {
+    // An INSERT always lands, so it reports 1 rather than routing a row count
+    // through `missed` — there was nothing to match in the first place.
+    created: (rec) => run(rec.id, "created", async (d) => {
+      await mirrorSiteInsert(d, rec, (/* @__PURE__ */ new Date()).toISOString());
+      return true;
+    }),
+    health: (siteId, fields) => run(siteId, "health", (d) => mirrorHealthFields(d, siteId, fields)),
+    site: (siteId, fields) => run(siteId, "site", (d) => mirrorSiteFields(d, siteId, fields))
+  };
+}
+export {
+  makeSiteMirror
+};
+//# sourceMappingURL=site-mirror-NIREX5ME.js.map

package/dist/site-mirror-NIREX5ME.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/site-mirror.ts"],"sourcesContent":["/** #539 Phase 5: the Turso write-through for the ONE-OFF Websites writers.\n *\n *  Phase 3 mirrored the nightly sweep — the audit write-back, github-signals and\n *  the next-due dates. It did not touch the writers that run on their own\n *  schedule or on demand: the analytics soft-fail stamp, the Renovate\n *  auto-fix counter, the prismic-models verdict, `updateLaunched`, the\n *  forms notify target, and the SINGLE-SITE audit write-back (only the fleet\n *  path ever passed a mirror). Each of those reached Turso solely via the hourly\n *  sync, which stops existing at the freeze.\n *\n *  It lives in `src/db` rather than a feature folder because its callers span\n *  audits, recipes, CLI commands and the send path — no one feature owns it.\n *\n *  Deliberately UNLIKE `makeHealthMirrorBestEffort`, this never returns null.\n *  #585 is the reason: that factory returned null without creds and the\n *  dual-write silently no-opped in production for weeks, because a dead mirror\n *  and a healthy one produced identical output — the only tell was an ABSENT log\n *  suffix nobody was watching for. Here creds-absent is a state the mirror\n *  REPORTS, so a missing SITE_MIRROR line means the wiring is gone.\n */\nimport { openDb, readDbConfig, type Db } from \"./client.js\";\nimport { mirrorHealthFields, mirrorSiteFields, mirrorSiteInsert } from \"./fleet-state.js\";\n\n/** Two ops because the Websites row is split across two Turso tables. Callers\n *  pass the EXACT FieldSet the Airtable writer returned, so the mirror can never\n *  carry a different payload than the write it shadows. */\nexport type SiteMirror = {\n  /** A row Airtable just CREATED, as Airtable echoed it back (`ensure-site`).\n   *  Every other op is an UPDATE, which does nothing for a row that does not\n   *  exist yet — so without this a bootstrapped site is invisible to Turso and\n   *  every mirror the rest of the bootstrap fires reports `mirrored=missed`. */\n  created: (rec: { id: string; fields: Record<string, unknown> }) => Promise<void>;\n  /** Columns that live in `site_health`. */\n  health: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n  /** Columns that live in `sites`. */\n  site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n};\n\n/** Build the one-off writers' mirror. Never throws and never returns null:\n *  Airtable is still authoritative through Phase 5, so a mirror problem must not\n *  cost the write it shadows — the hourly sync converges whatever this misses.\n *  `open` is injectable for tests. */\nexport async function makeSiteMirror(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n): Promise<SiteMirror> {\n  let db: Db | null = null;\n  let why = \"\";\n  try {\n    db = await open();\n  } catch (e) {\n    why = (e as Error).message;\n  }\n\n  const run = async (siteId: string, op: string, work: (db: Db) => Promise<boolean>) => {\n    if (!db) {\n      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=absent reason=${why}`);\n      return;\n    }\n    try {\n      // `missed` is its own outcome: the UPDATE matched no row because the\n      // hourly sync has not imported this site yet. Reporting it as mirrored=1\n      // would claim a write that never landed.\n      const matched = await work(db);\n      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=${matched ? \"1\" : \"missed\"}`);\n    } catch (e) {\n      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=0 error=${(e as Error).message}`);\n    }\n  };\n\n  return {\n    // An INSERT always lands, so it reports 1 rather than routing a row count\n    // through `missed` — there was nothing to match in the first place.\n    created: (rec) =>\n      run(rec.id, \"created\", async (d) => {\n        await mirrorSiteInsert(d, rec, new Date().toISOString());\n        return true;\n      }),\n    health: (siteId, fields) => run(siteId, \"health\", (d) => mirrorHealthFields(d, siteId, fields)),\n    site: (siteId, fields) => run(siteId, \"site\", (d) => mirrorSiteFields(d, siteId, fields)),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA0CA,eAAsB,eACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GAChC;AACrB,MAAI,KAAgB;AACpB,MAAI,MAAM;AACV,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,UAAO,EAAY;AAAA,EACrB;AAEA,QAAM,MAAM,OAAO,QAAgB,IAAY,SAAuC;AACpF,QAAI,CAAC,IAAI;AACP,cAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,2BAA2B,GAAG,EAAE;AAC/E;AAAA,IACF;AACA,QAAI;AAIF,YAAM,UAAU,MAAM,KAAK,EAAE;AAC7B,cAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,aAAa,UAAU,MAAM,QAAQ,EAAE;AAAA,IACxF,SAAS,GAAG;AACV,cAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,qBAAsB,EAAY,OAAO,EAAE;AAAA,IAC5F;AAAA,EACF;AAEA,SAAO;AAAA;AAAA;AAAA,IAGL,SAAS,CAAC,QACR,IAAI,IAAI,IAAI,WAAW,OAAO,MAAM;AAClC,YAAM,iBAAiB,GAAG,MAAK,oBAAI,KAAK,GAAE,YAAY,CAAC;AACvD,aAAO;AAAA,IACT,CAAC;AAAA,IACH,QAAQ,CAAC,QAAQ,WAAW,IAAI,QAAQ,UAAU,CAAC,MAAM,mBAAmB,GAAG,QAAQ,MAAM,CAAC;AAAA,IAC9F,MAAM,CAAC,QAAQ,WAAW,IAAI,QAAQ,QAAQ,CAAC,MAAM,iBAAiB,GAAG,QAAQ,MAAM,CAAC;AAAA,EAC1F;AACF;","names":[]}

package/dist/smoke-B2GQOSIZ.js

@@ -0,0 +1,20 @@
+import {
+  SMOKE_TIMEOUT_MS,
+  SMOKE_UNMEASURED_PREFIX,
+  formatUnmeasuredSmokeSummary,
+  isUnmeasuredSmoke,
+  smokeAudit,
+  summarizeSmokeFailure
+} from "./chunk-UDRHAQT7.js";
+import "./chunk-PTDMVGKL.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
+export {
+  SMOKE_TIMEOUT_MS,
+  SMOKE_UNMEASURED_PREFIX,
+  formatUnmeasuredSmokeSummary,
+  isUnmeasuredSmoke,
+  smokeAudit,
+  summarizeSmokeFailure
+};
+//# sourceMappingURL=smoke-B2GQOSIZ.js.map

package/dist/smoke-B2GQOSIZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{smoke-suite-TMCSOYRK.js → smoke-suite-U3UKD3NS.js}

@@ -5,20 +5,20 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-CROKUHJB.js";
 import {
   smokeSuite
-} from "./chunk-S56JQJ4F.js";
+} from "./chunk-Y53WOQIJ.js";
 import "./chunk-R53VL3RI.js";
-import "./chunk-ZTPPCHDB.js";
-import "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
-import "./chunk-XXTZBPUY.js";
+import "./chunk-3G25KIWW.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/smoke-suite.ts
 import { resolve } from "path";
@@ -51,4 +51,4 @@ async function runSmokeSuiteCommand(site, opts) {
 export {
   runSmokeSuiteCommand
 };
-//# sourceMappingURL=smoke-suite-TMCSOYRK.js.map
+//# sourceMappingURL=smoke-suite-U3UKD3NS.js.map

package/dist/{submissions-GJ6ITBRH.js → submissions-IQEJX6FK.js}

@@ -41,7 +41,7 @@ async function rescoreNewSubmissions(db, opts) {
 async function loadSiteNames() {
   try {
     const { openBase, readAirtableConfig } = await import("./client-EPVO3FEH.js");
-    const { listWebsites } = await import("./websites-SADZR4XQ.js");
+    const { listWebsites } = await import("./websites-D6WYFAES.js");
     const sites = await listWebsites(openBase(readAirtableConfig()));
     return new Map(sites.map((s) => [s.id, s.name]));
   } catch (err) {
@@ -78,7 +78,7 @@ async function runSubmissionsCommand(action, opts) {
     return { output: "--apply and --dry-run conflict. Pick one.", code: 2 };
   }
   const apply = opts.apply === true;
-  const { openDb, readDbConfig } = await import("./client-X5WUJWDE.js");
+  const { openDb, readDbConfig } = await import("./client-AUE3XUPO.js");
   const { SPAM_THRESHOLD } = await import("./spam-classifier-XLBFCO7G.js");
   const cfg = opts.url ? { url: opts.url } : readDbConfig();
   const db = await openDb(cfg);
@@ -119,4 +119,4 @@ export {
   rescoreNewSubmissions,
   runSubmissionsCommand
 };
-//# sourceMappingURL=submissions-GJ6ITBRH.js.map
+//# sourceMappingURL=submissions-IQEJX6FK.js.map

package/dist/{svelte-codemods-ZOBDHIES.js → svelte-codemods-GOKXTBHW.js}

@@ -5,20 +5,20 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-CROKUHJB.js";
 import {
   svelteCodemods
-} from "./chunk-LS6QPANO.js";
+} from "./chunk-IYSEC543.js";
 import "./chunk-J7SZQUCW.js";
-import "./chunk-ZTPPCHDB.js";
-import "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
-import "./chunk-XXTZBPUY.js";
+import "./chunk-3G25KIWW.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/svelte-codemods.ts
 import { resolve } from "path";
@@ -51,4 +51,4 @@ async function runSvelteCodemodsCommand(site, opts) {
 export {
   runSvelteCodemodsCommand
 };
-//# sourceMappingURL=svelte-codemods-ZOBDHIES.js.map
+//# sourceMappingURL=svelte-codemods-GOKXTBHW.js.map

package/dist/sync-CTUVXMCK.js

@@ -0,0 +1,44 @@
+import {
+  checkFleetParity,
+  formatParityResult
+} from "./chunk-ZBDZTJUO.js";
+import {
+  formatReapSummary,
+  importFleetState
+} from "./chunk-P6AORG32.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-7NYN2P6I.js";
+
+// src/db/sync.ts
+async function syncFleetState(db, io) {
+  let importSummary = await importFleetState(db, io, { reportHtml: "when-missing" });
+  let parity = await checkFleetParity(db, io);
+  let retried = false;
+  if (parity.mismatches.length > 0) {
+    retried = true;
+    importSummary = await importFleetState(db, io, { reportHtml: "when-missing" });
+    parity = await checkFleetParity(db, io);
+  }
+  return { importSummary, parity, retried };
+}
+function formatSyncResult(r) {
+  const lines = [];
+  if (r.importSummary.renderedHtmlMisses.length > 0) {
+    lines.push(
+      `\u26A0 ${r.importSummary.renderedHtmlMisses.length} report(s) imported WITHOUT Rendered HTML (fetch failed / URL expired): ${r.importSummary.renderedHtmlMisses.join(", ")}`
+    );
+  }
+  lines.push(...formatReapSummary(r.importSummary.reaped));
+  if (r.parity.mismatches.length > 0) {
+    lines.push(formatParityResult(r.parity));
+  }
+  lines.push(
+    `FLEET_SYNC sites=${r.importSummary.sites} reports=${r.importSummary.reports} html_fetched=${r.importSummary.renderedHtmlFetched} html_skipped=${r.importSummary.renderedHtmlSkipped} retried=${r.retried ? 1 : 0} mismatches=${r.parity.mismatches.length}`
+  );
+  return lines.join("\n");
+}
+export {
+  formatSyncResult,
+  syncFleetState
+};
+//# sourceMappingURL=sync-CTUVXMCK.js.map

package/dist/sync-CTUVXMCK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/sync.ts"],"sourcesContent":["/** Phase 2 backbone of the Airtable → Turso migration (#539): the hourly sync.\n *\n *  In Phase 2 readers move to Turso while writers still write Airtable, so\n *  Turso is only as fresh as the last import. One sync pass = import (with\n *  reportHtml \"when-missing\", so hourly runs don't re-download every report\n *  attachment) followed by the parity check, so every pass both refreshes the\n *  copy and PROVES it converged — the same instrument the whole cutover trusts.\n *\n *  The retry exists for a specific race, not for flakiness: the importer and\n *  the parity check each read Airtable separately, so a write landing between\n *  those two reads makes parity flag rows the import genuinely never saw. One\n *  re-import + re-check converges unless Airtable is being written continuously\n *  — a persistent mismatch after the retry is real drift and must red the run.\n */\nimport type { Db } from \"./client.js\";\nimport {\n  importFleetState,\n  formatReapSummary,\n  type ImportIo,\n  type ImportSummary,\n} from \"./import-airtable.js\";\nimport { checkFleetParity, formatParityResult, type ParityResult } from \"./parity.js\";\n\nexport type SyncResult = {\n  importSummary: ImportSummary;\n  parity: ParityResult;\n  /** True when the first parity check mismatched and the pass re-imported. */\n  retried: boolean;\n};\n\nexport async function syncFleetState(db: Db, io: ImportIo): Promise<SyncResult> {\n  let importSummary = await importFleetState(db, io, { reportHtml: \"when-missing\" });\n  let parity = await checkFleetParity(db, io);\n  let retried = false;\n  if (parity.mismatches.length > 0) {\n    retried = true;\n    importSummary = await importFleetState(db, io, { reportHtml: \"when-missing\" });\n    parity = await checkFleetParity(db, io);\n  }\n  return { importSummary, parity, retried };\n}\n\n/** Human lines plus the machine gate line, emitted on EVERY run (count=0\n *  included) — an absent FLEET_SYNC line means the sync crashed, never that it\n *  was clean. */\nexport function formatSyncResult(r: SyncResult): string {\n  const lines: string[] = [];\n  if (r.importSummary.renderedHtmlMisses.length > 0) {\n    lines.push(\n      `⚠ ${r.importSummary.renderedHtmlMisses.length} report(s) imported WITHOUT Rendered HTML ` +\n        `(fetch failed / URL expired): ${r.importSummary.renderedHtmlMisses.join(\", \")}`,\n    );\n  }\n  // The reap is the only destructive step, so every removal is NAMED and every\n  // refusal is quoted in full. FLEET_REAP rides its own line rather than as new\n  // keys on FLEET_SYNC: the workflow gate greps `^FLEET_SYNC .* mismatches=0$`,\n  // anchored at the end, so extending that line is a contract change waiting to\n  // be got wrong. A separate always-emitted line costs nothing and, like\n  // FLEET_PARITY, means an absent line reads as \"never ran\", not as \"clean\".\n  lines.push(...formatReapSummary(r.importSummary.reaped));\n  if (r.parity.mismatches.length > 0) {\n    lines.push(formatParityResult(r.parity));\n  }\n  lines.push(\n    `FLEET_SYNC sites=${r.importSummary.sites} reports=${r.importSummary.reports} ` +\n      `html_fetched=${r.importSummary.renderedHtmlFetched} ` +\n      `html_skipped=${r.importSummary.renderedHtmlSkipped} ` +\n      `retried=${r.retried ? 1 : 0} mismatches=${r.parity.mismatches.length}`,\n  );\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;AA8BA,eAAsB,eAAe,IAAQ,IAAmC;AAC9E,MAAI,gBAAgB,MAAM,iBAAiB,IAAI,IAAI,EAAE,YAAY,eAAe,CAAC;AACjF,MAAI,SAAS,MAAM,iBAAiB,IAAI,EAAE;AAC1C,MAAI,UAAU;AACd,MAAI,OAAO,WAAW,SAAS,GAAG;AAChC,cAAU;AACV,oBAAgB,MAAM,iBAAiB,IAAI,IAAI,EAAE,YAAY,eAAe,CAAC;AAC7E,aAAS,MAAM,iBAAiB,IAAI,EAAE;AAAA,EACxC;AACA,SAAO,EAAE,eAAe,QAAQ,QAAQ;AAC1C;AAKO,SAAS,iBAAiB,GAAuB;AACtD,QAAM,QAAkB,CAAC;AACzB,MAAI,EAAE,cAAc,mBAAmB,SAAS,GAAG;AACjD,UAAM;AAAA,MACJ,UAAK,EAAE,cAAc,mBAAmB,MAAM,2EACX,EAAE,cAAc,mBAAmB,KAAK,IAAI,CAAC;AAAA,IAClF;AAAA,EACF;AAOA,QAAM,KAAK,GAAG,kBAAkB,EAAE,cAAc,MAAM,CAAC;AACvD,MAAI,EAAE,OAAO,WAAW,SAAS,GAAG;AAClC,UAAM,KAAK,mBAAmB,EAAE,MAAM,CAAC;AAAA,EACzC;AACA,QAAM;AAAA,IACJ,oBAAoB,EAAE,cAAc,KAAK,YAAY,EAAE,cAAc,OAAO,iBAC1D,EAAE,cAAc,mBAAmB,iBACnC,EAAE,cAAc,mBAAmB,YACxC,EAAE,UAAU,IAAI,CAAC,eAAe,EAAE,OAAO,WAAW,MAAM;AAAA,EACzE;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/{sync-configs-CJXUX6MD.js → sync-configs-SPTLFJCC.js}

@@ -5,27 +5,27 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-CROKUHJB.js";
 import {
   ALL_CONFIG_NAMES,
   CANONICAL_GITIGNORE_ENTRIES,
   isConfigName,
   mergeGitignore,
   syncConfigs
-} from "./chunk-Q276MZ7E.js";
+} from "./chunk-7UAYMAKR.js";
 import {
   ALL_TEMPLATES,
   templatesByName
 } from "./chunk-73UFRZKY.js";
-import "./chunk-ZTPPCHDB.js";
-import "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
-import "./chunk-XXTZBPUY.js";
+import "./chunk-3G25KIWW.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/sync-configs.ts
 import { readFile } from "fs/promises";
@@ -113,4 +113,4 @@ async function runSyncConfigsCommand(site, opts) {
 export {
   runSyncConfigsCommand
 };
-//# sourceMappingURL=sync-configs-CJXUX6MD.js.map
+//# sourceMappingURL=sync-configs-SPTLFJCC.js.map

package/dist/{upgrade-WLX27UPC.js → upgrade-W6ZR3FJH.js}

@@ -5,21 +5,21 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-CROKUHJB.js";
 import {
   upgradeSvelte4to5
-} from "./chunk-ICXV25N7.js";
+} from "./chunk-Z3KYFUN6.js";
 import "./chunk-J7SZQUCW.js";
-import "./chunk-ZTPPCHDB.js";
+import "./chunk-3G25KIWW.js";
 import "./chunk-OTGB6YQO.js";
-import "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
-import "./chunk-XXTZBPUY.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/upgrade.ts
 import { resolve } from "path";
@@ -60,4 +60,4 @@ async function runUpgradeCommand(upgradeName, site, opts = {}) {
 export {
   runUpgradeCommand
 };
-//# sourceMappingURL=upgrade-WLX27UPC.js.map
+//# sourceMappingURL=upgrade-W6ZR3FJH.js.map

package/dist/webhook-VOGOW3W6.js

@@ -0,0 +1,38 @@
+import {
+  isPublicHttpsUrl
+} from "./chunk-EVBCK2KC.js";
+
+// src/forms/webhook.ts
+function buildNewsletterWebhookBody(submission, site) {
+  return {
+    email: submission.email,
+    name: submission.name,
+    formType: submission.formType,
+    site: site.name,
+    sourceUrl: submission.sourceUrl,
+    utm: submission.utm,
+    submittedAt: submission.submittedAt
+  };
+}
+async function forwardNewsletterToWebhook(url, submission, site, fetchImpl = fetch) {
+  if (!isPublicHttpsUrl(url)) {
+    console.error(`[newsletter-webhook] refusing non-public/non-https url for site=${site.name}`);
+    return { ok: false, status: 0 };
+  }
+  try {
+    const res = await fetchImpl(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(buildNewsletterWebhookBody(submission, site))
+    });
+    return { ok: res.ok, status: res.status };
+  } catch (err) {
+    console.error(`[newsletter-webhook] forward failed for site=${site.name}: ${String(err)}`);
+    return { ok: false, status: 0 };
+  }
+}
+export {
+  buildNewsletterWebhookBody,
+  forwardNewsletterToWebhook
+};
+//# sourceMappingURL=webhook-VOGOW3W6.js.map

package/dist/webhook-VOGOW3W6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/forms/webhook.ts"],"sourcesContent":["import type { SubmissionRow } from \"../reports/submission-row.js\";\nimport type { WebsiteRow } from \"../reports/airtable/websites.js\";\nimport { isPublicHttpsUrl } from \"../util/url.js\";\n\nexport type WebhookForwardResult = { ok: boolean; status: number };\n\n/** The JSON body POSTed to a site's newsletter webhook (e.g. a Zapier Catch\n *  Hook). Lean, newsletter-relevant fields; the Zap maps them downstream. */\nexport function buildNewsletterWebhookBody(\n  submission: SubmissionRow,\n  site: WebsiteRow,\n): Record<string, unknown> {\n  return {\n    email: submission.email,\n    name: submission.name,\n    formType: submission.formType,\n    site: site.name,\n    sourceUrl: submission.sourceUrl,\n    utm: submission.utm,\n    submittedAt: submission.submittedAt,\n  };\n}\n\n/**\n * POST a newsletter submission to a site-configured webhook. NEVER throws — a\n * disallowed URL, non-2xx response, or network error returns `{ ok: false }` so\n * the caller treats it as a swallowed side-effect. Only PUBLIC https URLs are\n * allowed (the URL is operator-set in Airtable, but this is a server-side egress\n * — so an internal/loopback/private host is refused as an SSRF guard).\n */\nexport async function forwardNewsletterToWebhook(\n  url: string,\n  submission: SubmissionRow,\n  site: WebsiteRow,\n  fetchImpl: typeof fetch = fetch,\n): Promise<WebhookForwardResult> {\n  if (!isPublicHttpsUrl(url)) {\n    console.error(`[newsletter-webhook] refusing non-public/non-https url for site=${site.name}`);\n    return { ok: false, status: 0 };\n  }\n  try {\n    const res = await fetchImpl(url, {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify(buildNewsletterWebhookBody(submission, site)),\n    });\n    return { ok: res.ok, status: res.status };\n  } catch (err) {\n    console.error(`[newsletter-webhook] forward failed for site=${site.name}: ${String(err)}`);\n    return { ok: false, status: 0 };\n  }\n}\n"],"mappings":";;;;;AAQO,SAAS,2BACd,YACA,MACyB;AACzB,SAAO;AAAA,IACL,OAAO,WAAW;AAAA,IAClB,MAAM,WAAW;AAAA,IACjB,UAAU,WAAW;AAAA,IACrB,MAAM,KAAK;AAAA,IACX,WAAW,WAAW;AAAA,IACtB,KAAK,WAAW;AAAA,IAChB,aAAa,WAAW;AAAA,EAC1B;AACF;AASA,eAAsB,2BACpB,KACA,YACA,MACA,YAA0B,OACK;AAC/B,MAAI,CAAC,iBAAiB,GAAG,GAAG;AAC1B,YAAQ,MAAM,mEAAmE,KAAK,IAAI,EAAE;AAC5F,WAAO,EAAE,IAAI,OAAO,QAAQ,EAAE;AAAA,EAChC;AACA,MAAI;AACF,UAAM,MAAM,MAAM,UAAU,KAAK;AAAA,MAC/B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,2BAA2B,YAAY,IAAI,CAAC;AAAA,IACnE,CAAC;AACD,WAAO,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAO;AAAA,EAC1C,SAAS,KAAK;AACZ,YAAQ,MAAM,gDAAgD,KAAK,IAAI,KAAK,OAAO,GAAG,CAAC,EAAE;AACzF,WAAO,EAAE,IAAI,OAAO,QAAQ,EAAE;AAAA,EAChC;AACF;","names":[]}

package/dist/{websites-SADZR4XQ.js → websites-D6WYFAES.js}

@@ -17,8 +17,10 @@ import {
   parseNotifyRouting,
   parseSecurityAdvisories,
   siteSlug,
+  toFrequency,
   toPrismicModelsVerdict,
   toVerdict,
+  trimToNull,
   updateA11yCounts,
   updateAnalyticsHealth,
   updateAuditFields,
@@ -31,7 +33,7 @@ import {
   updateScores,
   updateSecurityCounts,
   updateSiteField
-} from "./chunk-577HCGZO.js";
+} from "./chunk-7NYN2P6I.js";
 export {
   ACTIVE_STATUSES,
   ARCHIVED_STATUSES,
@@ -51,8 +53,10 @@ export {
   parseNotifyRouting,
   parseSecurityAdvisories,
   siteSlug,
+  toFrequency,
   toPrismicModelsVerdict,
   toVerdict,
+  trimToNull,
   updateA11yCounts,
   updateAnalyticsHealth,
   updateAuditFields,
@@ -66,4 +70,4 @@ export {
   updateSecurityCounts,
   updateSiteField
 };
-//# sourceMappingURL=websites-SADZR4XQ.js.map
+//# sourceMappingURL=websites-D6WYFAES.js.map

package/dist/websites-D6WYFAES.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{write-audits-to-airtable-7PH75YWY.js → write-audits-to-airtable-CMKHGJNQ.js}

@@ -2,13 +2,13 @@ import {
   formatFleetWriteSummary,
   writeAuditsToAirtable,
   writeFleetAuditsToAirtable
-} from "./chunk-3YXDSCM6.js";
-import "./chunk-PBWDDDQH.js";
+} from "./chunk-NXNPDCF3.js";
+import "./chunk-7BZUOZPU.js";
 import "./chunk-5L3FPQIJ.js";
-import "./chunk-577HCGZO.js";
+import "./chunk-7NYN2P6I.js";
 export {
   formatFleetWriteSummary,
   writeAuditsToAirtable,
   writeFleetAuditsToAirtable
 };
-//# sourceMappingURL=write-audits-to-airtable-7PH75YWY.js.map
+//# sourceMappingURL=write-audits-to-airtable-CMKHGJNQ.js.map

package/dist/write-audits-to-airtable-CMKHGJNQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reddoorla/maintenance",
-  "version": "0.85.2",
+  "version": "0.87.0",
   "description": "Canonical maintenance configs, audits, and recipes for the reddoor stack.",
   "type": "module",
   "license": "MIT",
@@ -25,6 +25,10 @@
       "types": "./dist/forms/index.d.ts",
       "import": "./dist/forms/index.js"
     },
+    "./audit": {
+      "types": "./dist/prospect/types.d.ts",
+      "import": "./dist/prospect/types.js"
+    },
     "./client": {
       "types": "./dist/client/index.d.ts",
       "import": "./dist/client/index.js"
@@ -78,6 +82,7 @@
     }
   },
   "devDependencies": {
+    "@anthropic-ai/sdk": "^0.120.0",
     "@changesets/cli": "^2.31.0",
     "@google-analytics/data": "^7.0.0",
     "@lhci/cli": "^0.15.1",
@@ -100,7 +105,8 @@
     "tsup": "^8.3.0",
     "tsx": "^4.19.0",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.8"
+    "vitest": "^4.1.8",
+    "zod": "^4.4.3"
   },
   "scripts": {
     "build": "tsup",
@@ -109,6 +115,7 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
+    "test:time-travel": "REDDOOR_TIME_TRAVEL_DAYS=${REDDOOR_TIME_TRAVEL_DAYS:-90} vitest run",
     "pretest:dist": "pnpm run build",
     "test:dist": "node scripts/smoke-dist.mjs",
     "lint": "eslint . && prettier --check .",

package/dist/airtable-HRKSA7V4.js

@@ -1,9 +0,0 @@
-import {
-  fromAirtableBase
-} from "./chunk-NWB4O5EY.js";
-import "./chunk-U5SZ4FOP.js";
-import "./chunk-577HCGZO.js";
-export {
-  fromAirtableBase
-};
-//# sourceMappingURL=airtable-HRKSA7V4.js.map