@reddoorla/maintenance 0.86.0 → 0.88.2

package/dist/{header-image-AWLLQA4L.js → header-image-7A7XLVEU.js}

@@ -1,18 +1,18 @@
-import {
-  generateHeaderImage
-} from "./chunk-5UINJNAJ.js";
 import {
   uploadAttachment
-} from "./chunk-Z7AXYKQB.js";
+} from "./chunk-IY6256GK.js";
 import {
   openBase,
   readAirtableConfig
 } from "./chunk-HN6I2XWI.js";
+import {
+  generateHeaderImage
+} from "./chunk-5UINJNAJ.js";
 import {
   ACTIVE_STATUSES,
   listWebsites,
   siteSlug
-} from "./chunk-LDWZSLSU.js";
+} from "./chunk-7NYN2P6I.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/cli/commands/header-image.ts
@@ -102,8 +102,8 @@ async function runHeaderImageCommand(site, opts) {
   }
   let withStore = opts;
   if (opts.writeAirtable && !opts.storeDb && process.env.TURSO_DATABASE_URL) {
-    const { openDb, readDbConfig } = await import("./client-AUE3XUPO.js");
-    const { storeHeaderImage } = await import("./header-images-335L2AKB.js");
+    const { openDb, readDbConfig } = await import("./client-JYKPVCJX.js");
+    const { storeHeaderImage } = await import("./header-images-SQBCE5OD.js");
     const db = await openDb(readDbConfig());
     withStore = { ...opts, storeDb: (id, img) => storeHeaderImage(db, id, img) };
   }
@@ -115,4 +115,4 @@ export {
   resolveTargets,
   runHeaderImageCommand
 };
-//# sourceMappingURL=header-image-AWLLQA4L.js.map
+//# sourceMappingURL=header-image-7A7XLVEU.js.map

package/dist/{header-images-335L2AKB.js → header-images-SQBCE5OD.js}

@@ -7,6 +7,25 @@ async function storeHeaderImage(db, siteId, image) {
     header_image_generated_at: image.generatedAt
   }).where("id", "=", siteId).execute();
 }
+async function loadHeaderImage(db, siteId) {
+  const row = await db.selectFrom("sites").select([
+    "header_image",
+    "header_image_filename",
+    "header_image_type",
+    "header_image_generated_at"
+  ]).where("id", "=", siteId).executeTakeFirst();
+  if (!row) return null;
+  const raw = row.header_image;
+  if (raw === null || raw === void 0) return null;
+  const bytes = new Uint8Array(raw);
+  if (bytes.length === 0) return null;
+  return {
+    bytes,
+    filename: row.header_image_filename ?? "header-image",
+    contentType: row.header_image_type ?? "application/octet-stream",
+    generatedAt: row.header_image_generated_at ?? null
+  };
+}
 function headerImageAttachment(rec) {
   const atts = rec.fields["Header image"];
   const a = atts?.at(-1);
@@ -63,6 +82,7 @@ export {
   backfillHeaderImages,
   formatBackfillResult,
   headerImageAttachment,
+  loadHeaderImage,
   storeHeaderImage
 };
-//# sourceMappingURL=header-images-335L2AKB.js.map
+//# sourceMappingURL=header-images-SQBCE5OD.js.map

package/dist/header-images-SQBCE5OD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/header-images.ts"],"sourcesContent":["/** Header images move to Turso (#539, design D5 completed).\n *\n *  Since Phase 1 the schema has reserved `sites.header_image*` as the image's\n *  home — the importer deliberately never touches those columns — but nothing\n *  wrote them, so the read layer's `headerImage` was null fleet-wide and both\n *  cockpit preflight and approve-report stayed pinned to the Airtable reader.\n *  Two writers and one reader close that:\n *\n *  - `storeHeaderImage` — the shared write, used by the header-image CLI's\n *    dual-write (Airtable upload + Turso store, until Phase 5 freezes Airtable)\n *    and by the backfill.\n *  - `loadHeaderImage` — the reader. Until it existed the bytes went in and could\n *    not come out, so every consumer still fetched Airtable's signed URL.\n *  - `backfillHeaderImages` — one-shot: copy every site's CURRENT Airtable\n *    attachment into Turso. Idempotent — a site whose BLOB is already\n *    populated is skipped, so re-runs never clobber a freshly generated image\n *    with a stale Airtable copy. Emits its machine line on EVERY run.\n */\nimport type { Db } from \"./client.js\";\nimport type { RawRecord } from \"./import-airtable.js\";\n\nexport type StoredHeaderImage = {\n  bytes: Uint8Array;\n  filename: string;\n  contentType: string;\n  /** The generator's stamp; null for a backfilled copy (a backfill is not a\n   *  generation — the column keeps meaning \"when the generator made it\"). */\n  generatedAt: string | null;\n};\n\nexport async function storeHeaderImage(\n  db: Db,\n  siteId: string,\n  image: StoredHeaderImage,\n): Promise<void> {\n  await db\n    .updateTable(\"sites\")\n    .set({\n      header_image: image.bytes,\n      header_image_filename: image.filename,\n      header_image_type: image.contentType,\n      header_image_generated_at: image.generatedAt,\n    })\n    .where(\"id\", \"=\", siteId)\n    .execute();\n}\n\n/**\n * Read one site's stored header image back.\n *\n * A SEPARATE query from the site read, deliberately. `getSiteBySlug` excludes\n * the BLOB on purpose — it is 0.6–0.8 MB per site in production, so a selectAll\n * would haul megabytes into every dashboard GET and every form ingest — which\n * means reading the bytes has to be an explicit, per-site act rather than a\n * field that arrives for free.\n *\n * Null when the site has no image, when the id is unknown, and when the\n * metadata is present but the BLOB is not: handing a consumer an empty buffer\n * with a filename would render a report with a broken header instead of failing\n * loudly with \"no header image\".\n */\nexport async function loadHeaderImage(db: Db, siteId: string): Promise<StoredHeaderImage | null> {\n  const row = await db\n    .selectFrom(\"sites\")\n    .select([\n      \"header_image\",\n      \"header_image_filename\",\n      \"header_image_type\",\n      \"header_image_generated_at\",\n    ])\n    .where(\"id\", \"=\", siteId)\n    .executeTakeFirst();\n  if (!row) return null;\n  // Normalize BEFORE measuring. libSQL can hand the BLOB back as an ArrayBuffer\n  // rather than a Uint8Array, and an ArrayBuffer has `byteLength`, not `length` —\n  // so a naive `bytes.length === 0` compares `undefined` to 0, passes, and lets a\n  // zero-length image through as if it were real. Mutation-testing the null check\n  // is what exposed that; the guard did not do what its own name said.\n  const raw = row.header_image;\n  if (raw === null || raw === undefined) return null;\n  // `raw` is a Uint8Array on some drivers and an ArrayBuffer on others; the\n  // Uint8Array constructor accepts either, but the two do not share a TS type.\n  const bytes = new Uint8Array(raw as unknown as ArrayBufferLike);\n  if (bytes.length === 0) return null;\n\n  return {\n    bytes,\n    filename: row.header_image_filename ?? \"header-image\",\n    contentType: row.header_image_type ?? \"application/octet-stream\",\n    generatedAt: row.header_image_generated_at ?? null,\n  };\n}\n\ntype Attachment = { url: string; filename: string; type: string };\n\n/** NEWEST \"Header image\" attachment of a raw Websites record, or null.\n *\n *  The tail, not the head: Airtable's uploadAttachment APPENDS, so a field that ever\n *  held more than one file served its OLDEST image from `[0]` forever — see the note\n *  in `reports/airtable/websites.ts` and #574/#577. Kept in step with that reader so\n *  the Turso mirror and the send path can never disagree about which file is current. */\nexport function headerImageAttachment(rec: RawRecord): Attachment | null {\n  const atts = rec.fields[\"Header image\"] as Array<Partial<Attachment>> | undefined;\n  const a = atts?.at(-1);\n  return a && typeof a.url === \"string\" && a.url.length > 0\n    ? {\n        url: a.url,\n        filename: typeof a.filename === \"string\" ? a.filename : \"header-image\",\n        type: typeof a.type === \"string\" ? a.type : \"application/octet-stream\",\n      }\n    : null;\n}\n\nexport type BackfillIo = {\n  listWebsiteRecords: () => Promise<RawRecord[]>;\n  /** Fetch attachment bytes; null on failure (named in the summary, not fatal). */\n  fetchBytes: (url: string) => Promise<Uint8Array | null>;\n};\n\nexport type BackfillResult = {\n  stored: number;\n  /** Sites whose BLOB was already populated — never overwritten. */\n  skipped: number;\n  /** Sites with no Airtable attachment at all. */\n  absent: number;\n  /** Record ids whose attachment fetch failed — named, never silent. */\n  failed: string[];\n};\n\nexport async function backfillHeaderImages(db: Db, io: BackfillIo): Promise<BackfillResult> {\n  const records = await io.listWebsiteRecords();\n  const populated = new Set(\n    (await db.selectFrom(\"sites\").select(\"id\").where(\"header_image\", \"is not\", null).execute()).map(\n      (r) => r.id,\n    ),\n  );\n  const result: BackfillResult = { stored: 0, skipped: 0, absent: 0, failed: [] };\n  for (const rec of records) {\n    const att = headerImageAttachment(rec);\n    if (!att) {\n      result.absent++;\n      continue;\n    }\n    if (populated.has(rec.id)) {\n      result.skipped++;\n      continue;\n    }\n    const bytes = await io.fetchBytes(att.url);\n    if (bytes === null) {\n      result.failed.push(rec.id);\n      continue;\n    }\n    await storeHeaderImage(db, rec.id, {\n      bytes,\n      filename: att.filename,\n      contentType: att.type,\n      generatedAt: null,\n    });\n    result.stored++;\n  }\n  return result;\n}\n\n/** Human lines + the machine line, emitted on every run (count=0 included). */\nexport function formatBackfillResult(r: BackfillResult): string {\n  const lines: string[] = [];\n  if (r.failed.length > 0) {\n    lines.push(`⚠ ${r.failed.length} attachment fetch(es) failed: ${r.failed.join(\", \")}`);\n  }\n  lines.push(\n    `HEADER_IMAGE_BACKFILL stored=${r.stored} skipped=${r.skipped} absent=${r.absent} failed=${r.failed.length}`,\n  );\n  return lines.join(\"\\n\");\n}\n"],"mappings":";AA8BA,eAAsB,iBACpB,IACA,QACA,OACe;AACf,QAAM,GACH,YAAY,OAAO,EACnB,IAAI;AAAA,IACH,cAAc,MAAM;AAAA,IACpB,uBAAuB,MAAM;AAAA,IAC7B,mBAAmB,MAAM;AAAA,IACzB,2BAA2B,MAAM;AAAA,EACnC,CAAC,EACA,MAAM,MAAM,KAAK,MAAM,EACvB,QAAQ;AACb;AAgBA,eAAsB,gBAAgB,IAAQ,QAAmD;AAC/F,QAAM,MAAM,MAAM,GACf,WAAW,OAAO,EAClB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,MAAM,KAAK,MAAM,EACvB,iBAAiB;AACpB,MAAI,CAAC,IAAK,QAAO;AAMjB,QAAM,MAAM,IAAI;AAChB,MAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAG9C,QAAM,QAAQ,IAAI,WAAW,GAAiC;AAC9D,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,SAAO;AAAA,IACL;AAAA,IACA,UAAU,IAAI,yBAAyB;AAAA,IACvC,aAAa,IAAI,qBAAqB;AAAA,IACtC,aAAa,IAAI,6BAA6B;AAAA,EAChD;AACF;AAUO,SAAS,sBAAsB,KAAmC;AACvE,QAAM,OAAO,IAAI,OAAO,cAAc;AACtC,QAAM,IAAI,MAAM,GAAG,EAAE;AACrB,SAAO,KAAK,OAAO,EAAE,QAAQ,YAAY,EAAE,IAAI,SAAS,IACpD;AAAA,IACE,KAAK,EAAE;AAAA,IACP,UAAU,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAAA,IACxD,MAAM,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,EAC9C,IACA;AACN;AAkBA,eAAsB,qBAAqB,IAAQ,IAAyC;AAC1F,QAAM,UAAU,MAAM,GAAG,mBAAmB;AAC5C,QAAM,YAAY,IAAI;AAAA,KACnB,MAAM,GAAG,WAAW,OAAO,EAAE,OAAO,IAAI,EAAE,MAAM,gBAAgB,UAAU,IAAI,EAAE,QAAQ,GAAG;AAAA,MAC1F,CAAC,MAAM,EAAE;AAAA,IACX;AAAA,EACF;AACA,QAAM,SAAyB,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC,EAAE;AAC9E,aAAW,OAAO,SAAS;AACzB,UAAM,MAAM,sBAAsB,GAAG;AACrC,QAAI,CAAC,KAAK;AACR,aAAO;AACP;AAAA,IACF;AACA,QAAI,UAAU,IAAI,IAAI,EAAE,GAAG;AACzB,aAAO;AACP;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,GAAG,WAAW,IAAI,GAAG;AACzC,QAAI,UAAU,MAAM;AAClB,aAAO,OAAO,KAAK,IAAI,EAAE;AACzB;AAAA,IACF;AACA,UAAM,iBAAiB,IAAI,IAAI,IAAI;AAAA,MACjC;AAAA,MACA,UAAU,IAAI;AAAA,MACd,aAAa,IAAI;AAAA,MACjB,aAAa;AAAA,IACf,CAAC;AACD,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAGO,SAAS,qBAAqB,GAA2B;AAC9D,QAAM,QAAkB,CAAC;AACzB,MAAI,EAAE,OAAO,SAAS,GAAG;AACvB,UAAM,KAAK,UAAK,EAAE,OAAO,MAAM,iCAAiC,EAAE,OAAO,KAAK,IAAI,CAAC,EAAE;AAAA,EACvF;AACA,QAAM;AAAA,IACJ,gCAAgC,EAAE,MAAM,YAAY,EAAE,OAAO,WAAW,EAAE,MAAM,WAAW,EAAE,OAAO,MAAM;AAAA,EAC5G;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/{health-endpoint-WJC2UMYS.js → health-endpoint-UVX6R5N5.js}

@@ -8,14 +8,14 @@ import {
 } from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-P2FE5AI6.js";
+} from "./chunk-Q47DU255.js";
 import {
   healthEndpoint
 } from "./chunk-BQRFQSGY.js";
 import "./chunk-R53VL3RI.js";
 import "./chunk-3G25KIWW.js";
-import "./chunk-6TWWY7ZU.js";
-import "./chunk-EVBCK2KC.js";
+import "./chunk-Z3JXLULD.js";
+import "./chunk-RARREDQE.js";
 import "./chunk-XTK5VIQB.js";
 import "./chunk-LBYOLBW7.js";
 import "./chunk-XXTZBPUY.js";
@@ -51,4 +51,4 @@ async function runHealthEndpointCommand(site, opts) {
 export {
   runHealthEndpointCommand
 };
-//# sourceMappingURL=health-endpoint-WJC2UMYS.js.map
+//# sourceMappingURL=health-endpoint-UVX6R5N5.js.map

package/dist/health-mirror-GCDN7BJL.js

@@ -0,0 +1,46 @@
+import {
+  TURSO_IS_AUTHORITATIVE
+} from "./chunk-RUPPWAD6.js";
+import {
+  mirrorHealthFields,
+  mirrorScheduleFields
+} from "./chunk-GQDDWYU2.js";
+import "./chunk-P6AORG32.js";
+import "./chunk-F3JWOPTG.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-7NYN2P6I.js";
+import {
+  openDb,
+  readDbConfig
+} from "./chunk-WS6NU475.js";
+import "./chunk-MFHS7IQ2.js";
+import "./chunk-6VAL7XJT.js";
+
+// src/audits/health-mirror.ts
+async function makeHealthMirrorBestEffort(open = () => openDb(readDbConfig()), strict = TURSO_IS_AUTHORITATIVE) {
+  let db;
+  try {
+    db = await open();
+  } catch (e) {
+    if (strict) throw new Error(`health-mirror unavailable: ${String(e)}`, { cause: e });
+    console.error(`[health-mirror] mirroring disabled: no libSQL (${String(e)})`);
+    return null;
+  }
+  return (siteId, fields) => mirrorHealthFields(db, siteId, fields);
+}
+async function makeScheduleMirrorBestEffort(open = () => openDb(readDbConfig()), strict = TURSO_IS_AUTHORITATIVE) {
+  let db;
+  try {
+    db = await open();
+  } catch (e) {
+    if (strict) throw new Error(`schedule-mirror unavailable: ${String(e)}`, { cause: e });
+    console.error(`[schedule-mirror] mirroring disabled: no libSQL (${String(e)})`);
+    return null;
+  }
+  return (siteId, fields, computedAt) => mirrorScheduleFields(db, siteId, fields, computedAt);
+}
+export {
+  makeHealthMirrorBestEffort,
+  makeScheduleMirrorBestEffort
+};
+//# sourceMappingURL=health-mirror-GCDN7BJL.js.map

package/dist/health-mirror-GCDN7BJL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/audits/health-mirror.ts"],"sourcesContent":["import { openDb, readDbConfig, type Db } from \"../db/client.js\";\nimport { mirrorHealthFields, mirrorScheduleFields } from \"../db/fleet-state.js\";\nimport { TURSO_IS_AUTHORITATIVE } from \"../db/freeze.js\";\n\n/** One site's just-written Airtable FieldSet, mirrored into site_health.\n *  Resolves true when a site_health row matched; false when the UPDATE touched\n *  0 rows (site created in Airtable after the last hourly import) — callers\n *  count that as mirror_missed, never as mirrored. */\nexport type HealthMirror = (siteId: string, fields: Record<string, unknown>) => Promise<boolean>;\n\n/** The site_schedule twin, for the nightly next-due write-back. Same\n *  matched-row contract as {@link HealthMirror}: false = 0-row UPDATE →\n *  mirror_missed. */\nexport type ScheduleMirror = (\n  siteId: string,\n  fields: Record<string, unknown>,\n  computedAt: string,\n) => Promise<boolean>;\n\n/** Build the Turso write-through for the nightly writers (#539 Phase 3\n *  dual-write), or null when libSQL creds are absent — mirroring NOT attempted\n *  is a different outcome than mirroring failed, and the caller's summary line\n *  reports mirror counts only when a mirror existed. Same contract as\n *  recordFleetEventsBestEffort: the mirror must never fail the sweep that\n *  produced the data (per-site failures are the caller's to count; Airtable\n *  stays authoritative and the hourly sync converges whatever the mirror\n *  missed). `open` is injectable for tests. */\nexport async function makeHealthMirrorBestEffort(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n  /** #612. `true` = Turso is the only store, so \"mirroring disabled\" is no\n   *  longer a survivable state: returning null would discard every write in the\n   *  sweep with nothing to converge it. Throws instead. Injected by tests so\n   *  both sides stay proven. */\n  strict: boolean = TURSO_IS_AUTHORITATIVE,\n): Promise<HealthMirror | null> {\n  let db: Db;\n  try {\n    db = await open();\n  } catch (e) {\n    if (strict) throw new Error(`health-mirror unavailable: ${String(e)}`, { cause: e });\n    console.error(`[health-mirror] mirroring disabled: no libSQL (${String(e)})`);\n    return null;\n  }\n  return (siteId, fields) => mirrorHealthFields(db, siteId, fields);\n}\n\n/** {@link makeHealthMirrorBestEffort}'s schedule twin — same null-without-creds\n *  contract, for `writeNextDueDates`' site_schedule write-through. */\nexport async function makeScheduleMirrorBestEffort(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n  /** #612 — same contract as {@link makeHealthMirrorBestEffort}'s. */\n  strict: boolean = TURSO_IS_AUTHORITATIVE,\n): Promise<ScheduleMirror | null> {\n  let db: Db;\n  try {\n    db = await open();\n  } catch (e) {\n    if (strict) throw new Error(`schedule-mirror unavailable: ${String(e)}`, { cause: e });\n    console.error(`[schedule-mirror] mirroring disabled: no libSQL (${String(e)})`);\n    return null;\n  }\n  return (siteId, fields, computedAt) => mirrorScheduleFields(db, siteId, fields, computedAt);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA2BA,eAAsB,2BACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GAKrD,SAAkB,wBACY;AAC9B,MAAI;AACJ,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,QAAI,OAAQ,OAAM,IAAI,MAAM,8BAA8B,OAAO,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AACnF,YAAQ,MAAM,kDAAkD,OAAO,CAAC,CAAC,GAAG;AAC5E,WAAO;AAAA,EACT;AACA,SAAO,CAAC,QAAQ,WAAW,mBAAmB,IAAI,QAAQ,MAAM;AAClE;AAIA,eAAsB,6BACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GAErD,SAAkB,wBACc;AAChC,MAAI;AACJ,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,QAAI,OAAQ,OAAM,IAAI,MAAM,gCAAgC,OAAO,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AACrF,YAAQ,MAAM,oDAAoD,OAAO,CAAC,CAAC,GAAG;AAC9E,WAAO;AAAA,EACT;AACA,SAAO,CAAC,QAAQ,QAAQ,eAAe,qBAAqB,IAAI,QAAQ,QAAQ,UAAU;AAC5F;","names":[]}

package/dist/{import-airtable-HE43FB4H.js → import-airtable-OHVY344G.js}

@@ -12,10 +12,11 @@ import {
   reapAllowance,
   reapRefusal,
   renderedHtmlUrl,
-  scheduleColumnFor
-} from "./chunk-ITIOFN7A.js";
+  scheduleColumnFor,
+  siteValueFor
+} from "./chunk-P6AORG32.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-LDWZSLSU.js";
+import "./chunk-7NYN2P6I.js";
 export {
   EXCLUDED_WEBSITE_FIELDS,
   HEALTH_BOOLEAN,
@@ -30,6 +31,7 @@ export {
   reapAllowance,
   reapRefusal,
   renderedHtmlUrl,
-  scheduleColumnFor
+  scheduleColumnFor,
+  siteValueFor
 };
-//# sourceMappingURL=import-airtable-HE43FB4H.js.map
+//# sourceMappingURL=import-airtable-OHVY344G.js.map

package/dist/index.d.ts

@@ -952,6 +952,135 @@ type ReportRow = {
     overrideBy: string | null;
     overrideAt: string | null;
 };
+/** Called with the record Airtable echoed back from the create, before it is
+ *  mapped (#539 Phase 5). Structurally typed rather than importing the db
+ *  layer's `RawRecord`, so this module stays the leaf it has always been. */
+type CreatedDraftMirror = (rec: {
+    id: string;
+    fields: Record<string, unknown>;
+}) => Promise<void>;
+
+/** Report rows (migration 0007). PK = Airtable rec id. `checklist` is JSON
+ *  keyed by the STABLE checklist key (src/reports/checklist.ts), not the
+ *  Airtable column name; `rendered_html` is the downloaded attachment body. */
+interface ReportsTable {
+    id: string;
+    site_id: string | null;
+    report_id: string | null;
+    report_type: string | null;
+    period: string | null;
+    period_start: string | null;
+    period_end: string | null;
+    completed_on: string | null;
+    lighthouse_performance: number | null;
+    lighthouse_accessibility: number | null;
+    lighthouse_best_practices: number | null;
+    lighthouse_seo: number | null;
+    ga_users_current: number | null;
+    ga_users_previous: number | null;
+    search_found_page1: number | null;
+    search_position: number | null;
+    last_tested_date: string | null;
+    commentary: string | null;
+    subject_override: string | null;
+    draft_ready: number;
+    approved_to_send: number;
+    approved_at: string | null;
+    approved_by: string | null;
+    send_override: number;
+    override_reason: string | null;
+    override_by: string | null;
+    override_at: string | null;
+    sent_at: string | null;
+    delivery_status: string | null;
+    resend_message_id: string | null;
+    checklist: string | null;
+    checklist_auto_evidence: string | null;
+    rendered_html: string | null;
+}
+
+/** Columns a report writer mirrors after its Airtable write (same pattern as
+ *  mirrorSiteField): the approve/override flow, the resend-webhook's delivery
+ *  status, and — since #539 Phase 5 — the drafting path's queue flag and a
+ *  re-run's refreshed scores.
+ *
+ *  `rendered_html` stays deliberately OUT even though the drafting path now
+ *  writes it: bodies go through `storeRenderedHtml`, so a request handler
+ *  holding a patch cannot accidentally write megabytes of HTML. `sent_at` and
+ *  `resend_message_id` stay out because nothing but the send batch writes them
+ *  and the hourly sync converges those. */
+type ReportMirrorPatch = Partial<Pick<ReportsTable, "approved_to_send" | "approved_at" | "approved_by" | "send_override" | "override_reason" | "override_by" | "override_at" | "delivery_status" | "commentary" | "draft_ready" | "lighthouse_performance" | "lighthouse_accessibility" | "lighthouse_best_practices" | "lighthouse_seo" | "ga_users_current" | "ga_users_previous" | "search_found_page1" | "search_position" | "completed_on">>;
+
+/** #539 Phase 5: the Turso write-through for the Reports write surface.
+ *
+ *  Before this, the only report mirrors were UPDATEs on the request path
+ *  (approve, override, delivery status, commentary). Everything the DRAFTING
+ *  path writes — the row itself, the rendered body, the queue flag, a re-run's
+ *  refreshed scores — reached Turso only via the hourly sync. Two of those are
+ *  visible to the operator today: a fresh draft's row does not exist, and its
+ *  preview route answers "No rendered body stored" for up to an hour. At the
+ *  freeze they stop being windows.
+ *
+ *  Deliberately UNLIKE `makeHealthMirrorBestEffort`, this never returns null.
+ *  #585 is the reason: Phase 3's next-due mirror silently no-opped in production
+ *  for weeks because the factory returned null without creds, and a dead
+ *  dual-write then looked exactly like a healthy one — the only tell was an
+ *  ABSENT log suffix nobody was watching for. Here creds-absent is a state the
+ *  mirror REPORTS, so every write emits one REPORT_MIRROR line and an absent
+ *  line means the wiring is gone, not that conditions were quiet.
+ */
+
+/** The three shapes a report write takes. Injected as ONE object rather than
+ *  three parameters because they share a db handle and always travel together:
+ *  a caller holding `created` but not `body` produces exactly the half-mirrored
+ *  state (row present, preview 404) this module exists to prevent. */
+type ReportMirror = {
+    /** A row Airtable just CREATED, as Airtable echoed it back. */
+    created: CreatedDraftMirror;
+    /** A freshly rendered body for an existing row. */
+    body: (reportId: string, html: string) => Promise<void>;
+    /** Columns just written to an existing row. */
+    patch: (reportId: string, patch: ReportMirrorPatch) => Promise<void>;
+};
+
+/** #539 Phase 5: the Turso write-through for the ONE-OFF Websites writers.
+ *
+ *  Phase 3 mirrored the nightly sweep — the audit write-back, github-signals and
+ *  the next-due dates. It did not touch the writers that run on their own
+ *  schedule or on demand: the analytics soft-fail stamp, the Renovate
+ *  auto-fix counter, the prismic-models verdict, `updateLaunched`, the
+ *  forms notify target, and the SINGLE-SITE audit write-back (only the fleet
+ *  path ever passed a mirror). Each of those reached Turso solely via the hourly
+ *  sync, which stops existing at the freeze.
+ *
+ *  It lives in `src/db` rather than a feature folder because its callers span
+ *  audits, recipes, CLI commands and the send path — no one feature owns it.
+ *
+ *  Deliberately UNLIKE `makeHealthMirrorBestEffort`, this never returns null.
+ *  #585 is the reason: that factory returned null without creds and the
+ *  dual-write silently no-opped in production for weeks, because a dead mirror
+ *  and a healthy one produced identical output — the only tell was an ABSENT log
+ *  suffix nobody was watching for. Here creds-absent is a state the mirror
+ *  REPORTS, so a missing SITE_MIRROR line means the wiring is gone.
+ */
+
+/** Two ops because the Websites row is split across two Turso tables. Callers
+ *  pass the EXACT FieldSet the Airtable writer returned, so the mirror can never
+ *  carry a different payload than the write it shadows. */
+type SiteMirror = {
+    /** A row Airtable just CREATED, as Airtable echoed it back (`ensure-site`).
+     *  Every other op is an UPDATE, which does nothing for a row that does not
+     *  exist yet — so without this a bootstrapped site is invisible to Turso and
+     *  every mirror the rest of the bootstrap fires reports `mirrored=missed`. */
+    created: (rec: {
+        id: string;
+        fields: Record<string, unknown>;
+    }) => Promise<void>;
+    /** Columns that live in `site_health`. */
+    health: (siteId: string, fields: Record<string, unknown>) => Promise<void>;
+    /** Columns that live in `sites`. */
+    site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;
+};
 
 type ShootOptions = {
     url: string;
@@ -1028,6 +1157,22 @@ type DraftOptions = {
      *  entirely. Tests set `false` (or a stub) so a unit suite never launches a
      *  browser or resolves DNS. Production leaves it unset and gets the real thing. */
     refreshHeader?: RefreshHeaderDeps | false;
+    /** #539 Phase 5: Turso write-through for everything this function writes to
+     *  Airtable — the created row, the rendered body, and the queue flag — so a
+     *  fresh draft is fully readable in the Turso-backed console immediately
+     *  instead of after the next hourly sync.
+     *
+     *  Deliberately NOT defaulted here. Defaulting would open a real libSQL handle
+     *  from inside `draftReportForSite`, which every unit test calls — and on a
+     *  machine with TURSO_* exported that means a test suite writing rows into
+     *  production. The wiring lives at the composition roots (cli/commands/report.ts,
+     *  recipes) where it is pinned by test, the same division `runFleetWriteBack`
+     *  uses for the health mirror. */
+    reportMirror?: ReportMirror;
+    /** #539 Phase 5: the Websites-row twin of `reportMirror`. Drafting stamps
+     *  `Analytics soft-fail at` on the SITE row, which is a different Turso table
+     *  and a different mirror. Injected for the same reason — see reportMirror. */
+    siteMirror?: SiteMirror;
 };
 /** An enrichment fetch that *errored* (not one that was legitimately skipped
  *  because it isn't configured / the site lacks the inputs). Surfaced so a
@@ -1106,6 +1251,10 @@ type ResendClient = {
 
 type OrchestrateOptions = {
     resend?: ResendClient;
+    /** #539 Phase 5: Turso write-through for the Websites row a Launch send
+     *  updates. Injected rather than defaulted — this function is called directly
+     *  by tests, and a default would open a real libSQL handle inside the suite. */
+    siteMirror?: SiteMirror;
 };
 declare function sendApprovedReports(options?: OrchestrateOptions): Promise<{
     output: string;