@reddoorla/maintenance 0.95.0 → 0.96.0

package/dist/{digest-state-3KHZF7GD.js → digest-state-ZDPKR7MW.js}

@@ -18,6 +18,22 @@ async function writeDigestState(db, snap, updatedAt = (/* @__PURE__ */ new Date(
   await db.insertInto("digest_state").values(row).onConflict((oc) => oc.column("id").doUpdateSet(row)).execute();
 }
 var COCKPIT_ROLLUP_ID = "cockpit_rollup";
+function coerceBounces(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return {};
+  const out = {};
+  for (const [siteId, v] of Object.entries(raw)) {
+    if (typeof v === "number" && Number.isFinite(v)) {
+      out[siteId] = { total: v, permanent: 0 };
+      continue;
+    }
+    if (typeof v !== "object" || v === null || Array.isArray(v)) continue;
+    const o = v;
+    if (typeof o.total === "number" && Number.isFinite(o.total) && typeof o.permanent === "number" && Number.isFinite(o.permanent)) {
+      out[siteId] = { total: o.total, permanent: o.permanent };
+    }
+  }
+  return out;
+}
 async function readCockpitRollup(db) {
   const row = await db.selectFrom("digest_state").select("snapshot").where("id", "=", COCKPIT_ROLLUP_ID).executeTakeFirst();
   if (!row) return null;
@@ -26,7 +42,7 @@ async function readCockpitRollup(db) {
     if (typeof parsed !== "object" || parsed === null || typeof parsed.computedAt !== "string" || typeof parsed.spamTotals !== "object" || parsed.spamTotals === null || typeof parsed.notifyBounces !== "object" || parsed.notifyBounces === null) {
       return null;
     }
-    return parsed;
+    return { ...parsed, notifyBounces: coerceBounces(parsed.notifyBounces) };
   } catch {
     return null;
   }
@@ -47,4 +63,4 @@ export {
   writeCockpitRollup,
   writeDigestState
 };
-//# sourceMappingURL=digest-state-3KHZF7GD.js.map
+//# sourceMappingURL=digest-state-ZDPKR7MW.js.map

package/dist/digest-state-ZDPKR7MW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/digest-state.ts"],"sourcesContent":["/** #609 (#539 Phase 5): the digest's prior-run snapshot, on Turso.\n *\n *  Unlike every other Phase 5 slice this is a MIGRATION, not a mirror — there\n *  was no Turso table to dual-write into, so these REPLACE the Airtable pair in\n *  `src/alerts/digest-state.ts` rather than shadowing them. Nothing writes the\n *  Airtable \"Digest State\" table after this, so parity does not cover the new\n *  one: it has no counterpart to compare against.\n *\n *  The pure half — `diffAttention`, and the `DigestSnapshot` type it is written\n *  against — stays exactly where it is. Only the IO moved.\n *\n *  Stored as ONE row holding the whole snapshot as JSON. Both readers\n *  (`runDigest`'s diff and the fleet homepage's NEW badges) need the entire map,\n *  so a keyed table would buy nothing on reads and its \"give me everything\"\n *  query would be a raw scan needing a justified entry in the EXPLAIN gate's\n *  allowlist. One row by primary key needs neither.\n *\n *  Worth stating plainly: the homepage's read of this used to be an AIRTABLE\n *  call on a request path — a Phase 2 leftover, since digest state was never in\n *  that phase's scope. Moving it removes a live dependency, which is the same\n *  failure class as the 2026-08-17 quota outage.\n */\nimport type { Db } from \"./client.js\";\nimport type { DigestSnapshot } from \"../alerts/digest-state.js\";\nimport type { NotifyBounceCounts } from \"./submissions.js\";\n\n/** The singleton row's key. A constant rather than a magic string at each call\n *  site, so the \"there is exactly one row\" invariant is visible in one place. */\nexport const DIGEST_STATE_ID = \"default\";\n\n/**\n * The prior snapshot, or `{}` when there is none.\n *\n * A missing row and a malformed blob BOTH read as `{}` — the Airtable reader's\n * contract, kept verbatim. The digest runs unattended on a cron, so a bad blob\n * must cost accurate NEW badges for one run, never the whole send.\n */\nexport async function readDigestState(db: Db): Promise<DigestSnapshot> {\n  const row = await db\n    .selectFrom(\"digest_state\")\n    .select(\"snapshot\")\n    .where(\"id\", \"=\", DIGEST_STATE_ID)\n    .executeTakeFirst();\n  if (!row) return {};\n  try {\n    return JSON.parse(row.snapshot) as DigestSnapshot;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Persist the next snapshot, replacing whatever was there.\n *\n * An upsert on the constant id rather than a get-then-create: the Airtable\n * version needed two round-trips to decide, and here the singleton invariant is\n * enforced by the primary key instead of by the code that happens to run.\n */\nexport async function writeDigestState(\n  db: Db,\n  snap: DigestSnapshot,\n  updatedAt: string = new Date().toISOString(),\n): Promise<void> {\n  const row = {\n    id: DIGEST_STATE_ID,\n    snapshot: JSON.stringify(snap),\n    updated_at: updatedAt,\n  };\n  await db\n    .insertInto(\"digest_state\")\n    .values(row)\n    .onConflict((oc) => oc.column(\"id\").doUpdateSet(row))\n    .execute();\n}\n\n/**\n * A SECOND row in the same table, holding the cockpit's \"since a window\"\n * roll-ups. Keyed separately rather than folded into the snapshot: the snapshot\n * is the digest's own diff state and has one writer and one meaning; conflating\n * two unrelated payloads in one blob makes a partial write of either look like a\n * corruption of both.\n */\nexport const COCKPIT_ROLLUP_ID = \"cockpit_rollup\";\n\n/**\n * Fleet-wide counts the cockpit renders, computed once by the nightly digest\n * instead of aggregated on every page load.\n *\n * `computedAt` is not decoration. These figures are up to 24h old by\n * construction, and a stale number rendered as though it were live is worse than\n * no number — so the cockpit shows when it was taken.\n */\nexport type CockpitRollup = {\n  spamTotals: { honeypot: number; tooFast: number; markedSpam: number };\n  /** site id → unacknowledged bounce counts inside the bounce window, split by\n   *  whether Resend called any of them Permanent (#783). */\n  notifyBounces: Record<string, NotifyBounceCounts>;\n  /** The windows these were computed over, so a changed constant is visible\n   *  rather than silently re-labelling old numbers. */\n  windowDays: { screenOuts: number; bounces: number };\n  computedAt: string;\n};\n\n/**\n * The stored roll-up, or **null** when there is none.\n *\n * Null rather than zeros, deliberately. Every one of these numbers has a\n * legitimate zero, so a reader given `{honeypot: 0, …}` cannot tell \"nothing was\n * screened out\" from \"the digest has never run\". That is the same distinction\n * `FLEET_SMOKE_UNMEASURED` exists to preserve, and the cockpit renders the strip\n * as ABSENT for null rather than drawing a row of zeros.\n *\n * A malformed blob is also null: same reasoning, and it must never throw on a\n * request path.\n */\n/**\n * Normalize the stored per-site bounce map (#783).\n *\n * The shape changed from `{recA: 2}` to `{recA: {total, permanent}}`, and this\n * blob is written by the NIGHTLY digest — so after a deploy the stored payload\n * is the old shape until the next run. Rejecting it outright would blank the\n * whole strip, `spamTotals` included, for a number that is merely less detailed.\n *\n * An old numeric entry reads as `permanent: 0`, which is the honest translation:\n * that writer recorded no classification, and 0 is exactly \"nothing said the\n * address is dead\". It words the alarm as the mail-filter case for one night,\n * which is the safe direction. Anything else is dropped per SITE rather than\n * poisoning the map with NaN or discarding the roll-up.\n */\nfunction coerceBounces(raw: unknown): Record<string, NotifyBounceCounts> {\n  if (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) return {};\n  const out: Record<string, NotifyBounceCounts> = {};\n  for (const [siteId, v] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof v === \"number\" && Number.isFinite(v)) {\n      out[siteId] = { total: v, permanent: 0 };\n      continue;\n    }\n    if (typeof v !== \"object\" || v === null || Array.isArray(v)) continue;\n    const o = v as Record<string, unknown>;\n    if (\n      typeof o.total === \"number\" &&\n      Number.isFinite(o.total) &&\n      typeof o.permanent === \"number\" &&\n      Number.isFinite(o.permanent)\n    ) {\n      out[siteId] = { total: o.total, permanent: o.permanent };\n    }\n  }\n  return out;\n}\n\nexport async function readCockpitRollup(db: Db): Promise<CockpitRollup | null> {\n  const row = await db\n    .selectFrom(\"digest_state\")\n    .select(\"snapshot\")\n    .where(\"id\", \"=\", COCKPIT_ROLLUP_ID)\n    .executeTakeFirst();\n  if (!row) return null;\n  try {\n    const parsed = JSON.parse(row.snapshot) as Partial<CockpitRollup>;\n    // Shape-check rather than trust: this blob is written by a different process\n    // on a different schedule, so an older writer's payload can outlive a type\n    // change here. Anything unrecognized reads as \"not measured\".\n    if (\n      typeof parsed !== \"object\" ||\n      parsed === null ||\n      typeof parsed.computedAt !== \"string\" ||\n      typeof parsed.spamTotals !== \"object\" ||\n      parsed.spamTotals === null ||\n      typeof parsed.notifyBounces !== \"object\" ||\n      parsed.notifyBounces === null\n    ) {\n      return null;\n    }\n    return { ...(parsed as CockpitRollup), notifyBounces: coerceBounces(parsed.notifyBounces) };\n  } catch {\n    return null;\n  }\n}\n\n/** Upsert the roll-up, same singleton-by-PK shape as the snapshot. */\nexport async function writeCockpitRollup(db: Db, rollup: CockpitRollup): Promise<void> {\n  const row = {\n    id: COCKPIT_ROLLUP_ID,\n    snapshot: JSON.stringify(rollup),\n    updated_at: rollup.computedAt,\n  };\n  await db\n    .insertInto(\"digest_state\")\n    .values(row)\n    .onConflict((oc) => oc.column(\"id\").doUpdateSet(row))\n    .execute();\n}\n"],"mappings":";AA4BO,IAAM,kBAAkB;AAS/B,eAAsB,gBAAgB,IAAiC;AACrE,QAAM,MAAM,MAAM,GACf,WAAW,cAAc,EACzB,OAAO,UAAU,EACjB,MAAM,MAAM,KAAK,eAAe,EAChC,iBAAiB;AACpB,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,MAAI;AACF,WAAO,KAAK,MAAM,IAAI,QAAQ;AAAA,EAChC,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AASA,eAAsB,iBACpB,IACA,MACA,aAAoB,oBAAI,KAAK,GAAE,YAAY,GAC5B;AACf,QAAM,MAAM;AAAA,IACV,IAAI;AAAA,IACJ,UAAU,KAAK,UAAU,IAAI;AAAA,IAC7B,YAAY;AAAA,EACd;AACA,QAAM,GACH,WAAW,cAAc,EACzB,OAAO,GAAG,EACV,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,YAAY,GAAG,CAAC,EACnD,QAAQ;AACb;AASO,IAAM,oBAAoB;AA+CjC,SAAS,cAAc,KAAkD;AACvE,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,EAAG,QAAO,CAAC;AAC3E,QAAM,MAA0C,CAAC;AACjD,aAAW,CAAC,QAAQ,CAAC,KAAK,OAAO,QAAQ,GAA8B,GAAG;AACxE,QAAI,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,GAAG;AAC/C,UAAI,MAAM,IAAI,EAAE,OAAO,GAAG,WAAW,EAAE;AACvC;AAAA,IACF;AACA,QAAI,OAAO,MAAM,YAAY,MAAM,QAAQ,MAAM,QAAQ,CAAC,EAAG;AAC7D,UAAM,IAAI;AACV,QACE,OAAO,EAAE,UAAU,YACnB,OAAO,SAAS,EAAE,KAAK,KACvB,OAAO,EAAE,cAAc,YACvB,OAAO,SAAS,EAAE,SAAS,GAC3B;AACA,UAAI,MAAM,IAAI,EAAE,OAAO,EAAE,OAAO,WAAW,EAAE,UAAU;AAAA,IACzD;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,kBAAkB,IAAuC;AAC7E,QAAM,MAAM,MAAM,GACf,WAAW,cAAc,EACzB,OAAO,UAAU,EACjB,MAAM,MAAM,KAAK,iBAAiB,EAClC,iBAAiB;AACpB,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI,QAAQ;AAItC,QACE,OAAO,WAAW,YAClB,WAAW,QACX,OAAO,OAAO,eAAe,YAC7B,OAAO,OAAO,eAAe,YAC7B,OAAO,eAAe,QACtB,OAAO,OAAO,kBAAkB,YAChC,OAAO,kBAAkB,MACzB;AACA,aAAO;AAAA,IACT;AACA,WAAO,EAAE,GAAI,QAA0B,eAAe,cAAc,OAAO,aAAa,EAAE;AAAA,EAC5F,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,eAAsB,mBAAmB,IAAQ,QAAsC;AACrF,QAAM,MAAM;AAAA,IACV,IAAI;AAAA,IACJ,UAAU,KAAK,UAAU,MAAM;AAAA,IAC/B,YAAY,OAAO;AAAA,EACrB;AACA,QAAM,GACH,WAAW,cAAc,EACzB,OAAO,GAAG,EACV,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,YAAY,GAAG,CAAC,EACnD,QAAQ;AACb;","names":[]}

package/dist/{ensure-site-WIDO6LGU.js → ensure-site-XESZHZEB.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-HN6I2XWI.js";
 import {
   WEBSITES_TABLE,
-  listWebsites,
+  mapRow,
   siteSlug,
   toAirtableStatus
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/reports/airtable/ensure-site.ts
@@ -23,8 +23,22 @@ async function ensureSite(base, input, mirror) {
     throw new Error(
       `ensure-site: display name '${input.displayName}' slugifies to '${siteSlug(input.displayName)}', not '${slug}' \u2014 the row would not be found on re-run`
     );
-  const existing = (await listWebsites(base)).find((w) => siteSlug(w.name) === slug);
-  if (!existing) {
+  const raw = [];
+  await base(WEBSITES_TABLE).select({ pageSize: 100 }).eachPage((records, fetchNextPage) => {
+    for (const rec of records) raw.push({ id: rec.id, fields: rec.fields });
+    fetchNextPage();
+  });
+  let existing;
+  let existingRaw;
+  for (const rec of raw) {
+    const row = mapRow(rec);
+    if (siteSlug(row.name) === slug) {
+      existing = row;
+      existingRaw = rec;
+      break;
+    }
+  }
+  if (!existing || !existingRaw) {
     const fields = {
       Name: input.displayName ?? slug,
       Status: toAirtableStatus("building"),
@@ -39,9 +53,17 @@ async function ensureSite(base, input, mirror) {
       status: "created",
       siteId: rec.id,
       updatedFields: [],
-      skippedMismatches: []
+      skippedMismatches: [],
+      // The create path just inserted the row; there is nothing to heal, and a
+      // `hasRow` probe here would be a round-trip whose answer is already known.
+      healedDbRow: false
     };
   }
+  let healedDbRow = false;
+  if (mirror?.hasRow && !await mirror.hasRow(existingRaw.id)) {
+    await mirror.created(existingRaw);
+    healedDbRow = true;
+  }
   const updates = {};
   const skippedMismatches = [];
   const blank = (v) => v === null || v === void 0 || v === "";
@@ -53,12 +75,15 @@ async function ensureSite(base, input, mirror) {
   consider(COLS.url, input.url, existing.url || null);
   consider(COLS.pointOfContact, input.pointOfContact, existing.pointOfContact);
   consider(COLS.gitRepo, input.gitRepo, existing.gitRepo);
+  if (input.displayName && existing.name !== input.displayName) {
+    updates["Name"] = input.displayName;
+  }
   const updatedFields = Object.keys(updates);
   if (updatedFields.length > 0) {
     await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);
     await mirror?.site(existing.id, updates);
   }
-  return { status: "exists", siteId: existing.id, updatedFields, skippedMismatches };
+  return { status: "exists", siteId: existing.id, updatedFields, skippedMismatches, healedDbRow };
 }
 
 // src/cli/commands/ensure-site.ts
@@ -66,7 +91,7 @@ async function runEnsureSiteCommand(slug, opts) {
   if (!slug) return { output: "Provide a <slug> (e.g. `ensure-site roalson`).", code: 2 };
   try {
     const base = openBase(readAirtableConfig());
-    const { makeSiteMirror } = await import("./site-mirror-UKHREAD6.js");
+    const { makeSiteMirror } = await import("./site-mirror-H2FYMN55.js");
     const result = await ensureSite(
       base,
       {
@@ -78,11 +103,14 @@ async function runEnsureSiteCommand(slug, opts) {
       },
       await makeSiteMirror()
     );
-    const filled = result.updatedFields.length > 0 ? ` \u2014 filled blank field(s): ${result.updatedFields.join(", ")}` : "";
+    const renamed = result.updatedFields.includes("Name") ? ` \u2014 Name set to "${opts.name}"` : "";
+    const blanks = result.updatedFields.filter((f) => f !== "Name");
+    const filled = blanks.length > 0 ? ` \u2014 filled blank field(s): ${blanks.join(", ")}` : "";
     const skipped = result.skippedMismatches.length > 0 ? ` \u2014 differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(", ")}` : "";
-    const nameNote = result.status === "created" && !opts.name ? ` \u2014 Name set to "${slug}"; retitle in Airtable before forms/announce go live (or re-create with --name)` : "";
+    const healed = result.healedDbRow ? ` \u2014 HEALED: the Turso row was MISSING and has been inserted; leads for this slug were being dropped (run \`db replay-deadletters\`)` : "";
+    const nameNote = result.status === "created" && !opts.name ? ` \u2014 Name set to "${slug}"; retitle in Airtable before forms/announce go live (or re-run with --name)` : "";
     return {
-      output: `[${slug}] ${result.status} (${result.siteId})${filled}${skipped}${nameNote}`,
+      output: `[${slug}] ${result.status} (${result.siteId})${healed}${renamed}${filled}${skipped}${nameNote}`,
       code: 0
     };
   } catch (err) {
@@ -93,4 +121,4 @@ async function runEnsureSiteCommand(slug, opts) {
 export {
   runEnsureSiteCommand
 };
-//# sourceMappingURL=ensure-site-WIDO6LGU.js.map
+//# sourceMappingURL=ensure-site-XESZHZEB.js.map

package/dist/ensure-site-XESZHZEB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/airtable/ensure-site.ts","../src/cli/commands/ensure-site.ts"],"sourcesContent":["import type { FieldSet, Records } from \"airtable\";\nimport type { AirtableBase } from \"./client.js\";\nimport { WEBSITES_TABLE, mapRow, siteSlug, type WebsiteRow } from \"./websites.js\";\nimport { toAirtableStatus } from \"./site-status.js\";\n\nexport type EnsureSiteInput = {\n  /** Canonical slug — matches by siteSlug(Name); the Name on create when no displayName given. */\n  slug: string;\n  /** Human display name written to Name on create, and — unlike every other\n   *  input — UPDATED on an existing row when it differs (#664). Name is\n   *  consumed VERBATIM in client-facing copy (forms auto-reply intro, report\n   *  subjects), so a bare machine slug there reads as \"Thanks for reaching out\n   *  to acme-co.\" — and the row that has it is exactly the one created before\n   *  the name was settled, which only this command re-run can fix. Must\n   *  slugify to the same slug or the row wouldn't be found on re-run. */\n  displayName?: string;\n  url?: string;\n  pointOfContact?: string;\n  /** owner/repo. Default on create: `reddoorla/<slug>`. */\n  gitRepo?: string;\n};\n\n/** #539 Phase 5. Structurally typed rather than importing the db layer's\n *  `SiteMirror`, so this module stays the leaf it has always been — a real\n *  `SiteMirror` satisfies it. Two ops because `ensureSite` has two write paths,\n *  and the create one is the reason this exists: every other site mirror is an\n *  UPDATE, which does nothing for a row that does not exist yet. */\nexport type EnsureSiteMirror = {\n  created: (rec: { id: string; fields: Record<string, unknown> }) => Promise<void>;\n  site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n  /** #645. Does Turso hold a row for this site id? Optional so every pre-#645\n   *  caller (and every hand-built test mirror) is byte-for-byte unchanged —\n   *  absent means the heal below never runs. */\n  hasRow?: (siteId: string) => Promise<boolean>;\n};\n\nexport type EnsureSiteResult = {\n  status: \"created\" | \"exists\";\n  siteId: string;\n  /** Airtable column names written on the exists path (create path writes all). */\n  updatedFields: string[];\n  /** Inputs that DIFFERED from an existing non-blank cell and were left\n   *  untouched (fill-blanks-only) — surfaced so a resumed bootstrap with a\n   *  corrected value doesn't silently discard it. */\n  skippedMismatches: string[];\n  /** #645. True when the site existed in Airtable but had NO Turso row and this\n   *  run inserted one. Surfaced rather than logged-only because it is the\n   *  difference between \"nothing to do\" and \"this site's leads were being\n   *  dropped until just now\". */\n  healedDbRow: boolean;\n};\n\n/** Column-name map (load-bearing magic strings — see websites.ts's mapRow header). */\nconst COLS = {\n  url: \"url\",\n  pointOfContact: \"point of contact\",\n  gitRepo: \"Git repo\",\n} as const;\n\n/**\n * Find-or-create the Websites row for a slug so a new site exists in the fleet\n * inventory (audits, form-ingest slug resolution, reports) from day one.\n *\n * Fill-blanks-only on the exists path: this command runs from a bootstrap skill\n * that may be re-run to resume — it must never clobber operator-edited cells.\n * The one exception is `displayName` (#664): `--name` targets Name and nothing\n * else, so a differing value IS the operator's edit, and the create message\n * sends them back here to make it. Frequencies are deliberately NOT set\n * (launch flips the lifecycle); Status is only written on create (\"building\" —\n * Airtable's \"in development\" until the stage-2 vocabulary switch flips).\n */\nexport async function ensureSite(\n  base: AirtableBase,\n  input: EnsureSiteInput,\n  mirror?: EnsureSiteMirror,\n): Promise<EnsureSiteResult> {\n  const slug = siteSlug(input.slug);\n  if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);\n  if (input.displayName && siteSlug(input.displayName) !== slug)\n    throw new Error(\n      `ensure-site: display name '${input.displayName}' slugifies to '${siteSlug(input.displayName)}', not '${slug}' — the row would not be found on re-run`,\n    );\n\n  // Paged inline rather than through `listWebsites` so the RAW stored record\n  // survives alongside the mapped row: the #645 heal below re-inserts what\n  // Airtable STORED (the same contract as the create path's mirror), and a\n  // mapped `WebsiteRow` cannot be turned back into a FieldSet. Same single\n  // select `listWebsites` issues — no extra Airtable read.\n  const raw: Array<{ id: string; fields: Record<string, unknown> }> = [];\n  await base(WEBSITES_TABLE)\n    .select({ pageSize: 100 })\n    .eachPage((records, fetchNextPage) => {\n      for (const rec of records) raw.push({ id: rec.id, fields: rec.fields });\n      fetchNextPage();\n    });\n  let existing: WebsiteRow | undefined;\n  let existingRaw: { id: string; fields: Record<string, unknown> } | undefined;\n  for (const rec of raw) {\n    const row = mapRow(rec);\n    if (siteSlug(row.name) === slug) {\n      existing = row;\n      existingRaw = rec;\n      break;\n    }\n  }\n\n  if (!existing || !existingRaw) {\n    const fields: FieldSet = {\n      Name: input.displayName ?? slug,\n      Status: toAirtableStatus(\"building\"),\n      [COLS.gitRepo]: input.gitRepo ?? `reddoorla/${slug}`,\n    };\n    if (input.url) fields[COLS.url] = input.url;\n    if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;\n    const created = (await base(WEBSITES_TABLE).create([{ fields }])) as Records<FieldSet>;\n    const rec = created[0]!;\n    // The mirror gets what Airtable STORED, never the `fields` we sent: parity\n    // diffs Turso against the stored record, so mapping our own payload would\n    // diverge the moment Airtable normalises a value.\n    await mirror?.created({ id: rec.id, fields: rec.fields as Record<string, unknown> });\n    return {\n      status: \"created\",\n      siteId: rec.id,\n      updatedFields: [],\n      skippedMismatches: [],\n      // The create path just inserted the row; there is nothing to heal, and a\n      // `hasRow` probe here would be a round-trip whose answer is already known.\n      healedDbRow: false,\n    };\n  }\n\n  // #645. THE gap: before this, `exists` meant \"Airtable has it\" and said nothing\n  // about Turso. Post-flip (#643) the form-ingest lookup reads Turso ONLY, so a\n  // site with an Airtable row and no Turso row has every lead answered\n  // `unknown-site` — silently, permanently, and with no alarm once Phase 6 (#646)\n  // deletes `mirror_missed`. `ensure-site` is the command an operator already\n  // re-runs to finish a half-created site, so the heal belongs here.\n  //\n  // FIRST, before the fill-blanks update below: `mirror.site` is an UPDATE, and\n  // under the freeze a no-match THROWS (`SITE_MIRROR … no such row in Turso`).\n  // Healing second would abort ensure-site on exactly the site it exists to\n  // repair. `mirrorSiteInsert` is an upsert, so a lost race just re-writes.\n  let healedDbRow = false;\n  if (mirror?.hasRow && !(await mirror.hasRow(existingRaw.id))) {\n    await mirror.created(existingRaw);\n    healedDbRow = true;\n  }\n\n  const updates: FieldSet = {};\n  const skippedMismatches: string[] = [];\n  const blank = (v: unknown) => v === null || v === undefined || v === \"\";\n  const consider = (column: string, provided: string | undefined, current: unknown) => {\n    if (!provided) return;\n    if (blank(current)) updates[column] = provided;\n    else if (current !== provided) skippedMismatches.push(column);\n  };\n  consider(COLS.url, input.url, existing.url || null);\n  consider(COLS.pointOfContact, input.pointOfContact, existing.pointOfContact);\n  consider(COLS.gitRepo, input.gitRepo, existing.gitRepo);\n  // #664: Name is NOT fill-blanks. It is never blank (the slug match found it),\n  // and `--name` is the only way to retitle a row created before the display\n  // name was settled — the slugify guard above already proved the new value\n  // resolves to the same row. Goes through the same update + mirror below, so\n  // Turso gets it too.\n  if (input.displayName && existing.name !== input.displayName) {\n    updates[\"Name\"] = input.displayName;\n  }\n\n  const updatedFields = Object.keys(updates);\n  if (updatedFields.length > 0) {\n    await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);\n    // The fill-blanks path writes real cells too — a resumed bootstrap that only\n    // filled a blank `url` would otherwise leave Turso stale until the sync.\n    await mirror?.site(existing.id, updates);\n  }\n  return { status: \"exists\", siteId: existing.id, updatedFields, skippedMismatches, healedDbRow };\n}\n","import { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { ensureSite } from \"../../reports/airtable/ensure-site.js\";\n\nexport type EnsureSiteCommandOptions = {\n  name?: string;\n  url?: string;\n  contact?: string;\n  gitRepo?: string;\n  cwd?: string;\n};\n\n/**\n * `ensure-site <slug>` — create/verify the fleet-inventory row for a new site.\n * Day-one step of the /new-site bootstrap skill. Fill-blanks-only; safe to re-run.\n */\nexport async function runEnsureSiteCommand(\n  slug: string | undefined,\n  opts: EnsureSiteCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (!slug) return { output: \"Provide a <slug> (e.g. `ensure-site roalson`).\", code: 2 };\n  try {\n    const base = openBase(readAirtableConfig());\n    // #539 Phase 5: bootstrapping a site CREATES the Websites row, so this is\n    // the one site path that needs an INSERT mirror — every other one updates.\n    const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n    const result = await ensureSite(\n      base,\n      {\n        slug,\n        ...(opts.name ? { displayName: opts.name } : {}),\n        ...(opts.url ? { url: opts.url } : {}),\n        ...(opts.contact ? { pointOfContact: opts.contact } : {}),\n        ...(opts.gitRepo ? { gitRepo: opts.gitRepo } : {}),\n      },\n      await makeSiteMirror(),\n    );\n    // #664: a Name change on the exists path is a rename the operator asked\n    // for with --name, not a blank the bootstrap filled — say so.\n    const renamed = result.updatedFields.includes(\"Name\") ? ` — Name set to \"${opts.name}\"` : \"\";\n    const blanks = result.updatedFields.filter((f) => f !== \"Name\");\n    const filled = blanks.length > 0 ? ` — filled blank field(s): ${blanks.join(\", \")}` : \"\";\n    const skipped =\n      result.skippedMismatches.length > 0\n        ? ` — differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(\", \")}`\n        : \"\";\n    // #645. Loud, and its own clause: a healed row means this site's leads were\n    // being answered `unknown-site` and dropped until this run.\n    const healed = result.healedDbRow\n      ? ` — HEALED: the Turso row was MISSING and has been inserted; leads for this slug were being dropped (run \\`db replay-deadletters\\`)`\n      : \"\";\n    const nameNote =\n      result.status === \"created\" && !opts.name\n        ? ` — Name set to \"${slug}\"; retitle in Airtable before forms/announce go live (or re-run with --name)`\n        : \"\";\n    return {\n      output: `[${slug}] ${result.status} (${result.siteId})${healed}${renamed}${filled}${skipped}${nameNote}`,\n      code: 0,\n    };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAqDA,IAAM,OAAO;AAAA,EACX,KAAK;AAAA,EACL,gBAAgB;AAAA,EAChB,SAAS;AACX;AAcA,eAAsB,WACpB,MACA,OACA,QAC2B;AAC3B,QAAM,OAAO,SAAS,MAAM,IAAI;AAChC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iBAAiB,MAAM,IAAI,qCAAqC;AAC3F,MAAI,MAAM,eAAe,SAAS,MAAM,WAAW,MAAM;AACvD,UAAM,IAAI;AAAA,MACR,8BAA8B,MAAM,WAAW,mBAAmB,SAAS,MAAM,WAAW,CAAC,WAAW,IAAI;AAAA,IAC9G;AAOF,QAAM,MAA8D,CAAC;AACrE,QAAM,KAAK,cAAc,EACtB,OAAO,EAAE,UAAU,IAAI,CAAC,EACxB,SAAS,CAAC,SAAS,kBAAkB;AACpC,eAAW,OAAO,QAAS,KAAI,KAAK,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAO,CAAC;AACtE,kBAAc;AAAA,EAChB,CAAC;AACH,MAAI;AACJ,MAAI;AACJ,aAAW,OAAO,KAAK;AACrB,UAAM,MAAM,OAAO,GAAG;AACtB,QAAI,SAAS,IAAI,IAAI,MAAM,MAAM;AAC/B,iBAAW;AACX,oBAAc;AACd;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,YAAY,CAAC,aAAa;AAC7B,UAAM,SAAmB;AAAA,MACvB,MAAM,MAAM,eAAe;AAAA,MAC3B,QAAQ,iBAAiB,UAAU;AAAA,MACnC,CAAC,KAAK,OAAO,GAAG,MAAM,WAAW,aAAa,IAAI;AAAA,IACpD;AACA,QAAI,MAAM,IAAK,QAAO,KAAK,GAAG,IAAI,MAAM;AACxC,QAAI,MAAM,eAAgB,QAAO,KAAK,cAAc,IAAI,MAAM;AAC9D,UAAM,UAAW,MAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,UAAM,MAAM,QAAQ,CAAC;AAIrB,UAAM,QAAQ,QAAQ,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAkC,CAAC;AACnF,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,eAAe,CAAC;AAAA,MAChB,mBAAmB,CAAC;AAAA;AAAA;AAAA,MAGpB,aAAa;AAAA,IACf;AAAA,EACF;AAaA,MAAI,cAAc;AAClB,MAAI,QAAQ,UAAU,CAAE,MAAM,OAAO,OAAO,YAAY,EAAE,GAAI;AAC5D,UAAM,OAAO,QAAQ,WAAW;AAChC,kBAAc;AAAA,EAChB;AAEA,QAAM,UAAoB,CAAC;AAC3B,QAAM,oBAA8B,CAAC;AACrC,QAAM,QAAQ,CAAC,MAAe,MAAM,QAAQ,MAAM,UAAa,MAAM;AACrE,QAAM,WAAW,CAAC,QAAgB,UAA8B,YAAqB;AACnF,QAAI,CAAC,SAAU;AACf,QAAI,MAAM,OAAO,EAAG,SAAQ,MAAM,IAAI;AAAA,aAC7B,YAAY,SAAU,mBAAkB,KAAK,MAAM;AAAA,EAC9D;AACA,WAAS,KAAK,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI;AAClD,WAAS,KAAK,gBAAgB,MAAM,gBAAgB,SAAS,cAAc;AAC3E,WAAS,KAAK,SAAS,MAAM,SAAS,SAAS,OAAO;AAMtD,MAAI,MAAM,eAAe,SAAS,SAAS,MAAM,aAAa;AAC5D,YAAQ,MAAM,IAAI,MAAM;AAAA,EAC1B;AAEA,QAAM,gBAAgB,OAAO,KAAK,OAAO;AACzC,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAGxE,UAAM,QAAQ,KAAK,SAAS,IAAI,OAAO;AAAA,EACzC;AACA,SAAO,EAAE,QAAQ,UAAU,QAAQ,SAAS,IAAI,eAAe,mBAAmB,YAAY;AAChG;;;ACjKA,eAAsB,qBACpB,MACA,MAC2C;AAC3C,MAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,kDAAkD,MAAM,EAAE;AACtF,MAAI;AACF,UAAM,OAAO,SAAS,mBAAmB,CAAC;AAG1C,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,KAAK,OAAO,EAAE,aAAa,KAAK,KAAK,IAAI,CAAC;AAAA,QAC9C,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,QACpC,GAAI,KAAK,UAAU,EAAE,gBAAgB,KAAK,QAAQ,IAAI,CAAC;AAAA,QACvD,GAAI,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAClD;AAAA,MACA,MAAM,eAAe;AAAA,IACvB;AAGA,UAAM,UAAU,OAAO,cAAc,SAAS,MAAM,IAAI,wBAAmB,KAAK,IAAI,MAAM;AAC1F,UAAM,SAAS,OAAO,cAAc,OAAO,CAAC,MAAM,MAAM,MAAM;AAC9D,UAAM,SAAS,OAAO,SAAS,IAAI,kCAA6B,OAAO,KAAK,IAAI,CAAC,KAAK;AACtF,UAAM,UACJ,OAAO,kBAAkB,SAAS,IAC9B,qEAAgE,OAAO,kBAAkB,KAAK,IAAI,CAAC,KACnG;AAGN,UAAM,SAAS,OAAO,cAClB,4IACA;AACJ,UAAM,WACJ,OAAO,WAAW,aAAa,CAAC,KAAK,OACjC,wBAAmB,IAAI,iFACvB;AACN,WAAO;AAAA,MACL,QAAQ,IAAI,IAAI,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,IAAI,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ;AAAA,MACtG,MAAM;AAAA,IACR;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/{fleet-state-UEVZ3X3J.js → fleet-state-GJWGKTLD.js}

@@ -14,12 +14,13 @@ import {
   mirrorSiteField,
   mirrorSiteFields,
   mirrorSiteInsert,
+  siteRowExists,
   storeRenderedHtml
-} from "./chunk-WVNDEYXL.js";
-import "./chunk-6R56OKJZ.js";
+} from "./chunk-GEUC5VGM.js";
+import "./chunk-UIITN37J.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-3Z6X3BHU.js";
+import "./chunk-KN52PM63.js";
 export {
   REPORT_LIST_COLUMNS,
   getReportById,
@@ -36,6 +37,7 @@ export {
   mirrorSiteField,
   mirrorSiteFields,
   mirrorSiteInsert,
+  siteRowExists,
   storeRenderedHtml
 };
-//# sourceMappingURL=fleet-state-UEVZ3X3J.js.map
+//# sourceMappingURL=fleet-state-GJWGKTLD.js.map

package/dist/{forms-notify-target-2LWF5C5B.js → forms-notify-target-4NPLX2UG.js}

@@ -1,7 +1,7 @@
 import {
   describeNotifyTarget
-} from "./chunk-4763KQ6O.js";
-import "./chunk-QF6IQQFP.js";
+} from "./chunk-PXRN2MER.js";
+import "./chunk-Z7FDJ35L.js";
 import "./chunk-5ML7FMBD.js";
 import "./chunk-NO74DXDP.js";
 import "./chunk-I7NHLVVI.js";
@@ -16,7 +16,7 @@ import {
   siteSlug,
   toAirtableStatus,
   updateSiteField
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import "./chunk-2OP4JKIQ.js";
 import "./chunk-6VAL7XJT.js";
 
@@ -144,7 +144,7 @@ async function runFormsNotifyTargetCommand(site, opts) {
     return { output: `--set must be 'on' or 'off' (got '${opts.set}')`, code: 2 };
   }
   try {
-    const { makeSiteMirror } = await import("./site-mirror-UKHREAD6.js");
+    const { makeSiteMirror } = await import("./site-mirror-H2FYMN55.js");
     const result = await formsNotifyTarget({
       siteMirror: await makeSiteMirror(),
       site: site.trim(),
@@ -164,4 +164,4 @@ export {
   formatNotifyTarget,
   runFormsNotifyTargetCommand
 };
-//# sourceMappingURL=forms-notify-target-2LWF5C5B.js.map
+//# sourceMappingURL=forms-notify-target-4NPLX2UG.js.map

package/dist/{freeze-A6MUCZU4.js → freeze-GUQ43EAU.js}

@@ -1,9 +1,9 @@
 import {
   TURSO_IS_AUTHORITATIVE,
   mirrorWrite
-} from "./chunk-SVAAONYB.js";
+} from "./chunk-WQLNUEZL.js";
 export {
   TURSO_IS_AUTHORITATIVE,
   mirrorWrite
 };
-//# sourceMappingURL=freeze-A6MUCZU4.js.map
+//# sourceMappingURL=freeze-GUQ43EAU.js.map

package/dist/{github-signals-GAHNOAHS.js → github-signals-DMU74SAX.js}

@@ -3,9 +3,9 @@ import {
 } from "./chunk-PZQ3WED2.js";
 import {
   formatFleetWriteSummary
-} from "./chunk-5EEMTJMT.js";
-import "./chunk-XN37VTDB.js";
-import "./chunk-SVAAONYB.js";
+} from "./chunk-ZH5LOQET.js";
+import "./chunk-37B4LVB3.js";
+import "./chunk-WQLNUEZL.js";
 import {
   detectSignalEvents,
   fleetSweptEvent
@@ -18,15 +18,15 @@ import {
   listWebsites,
   siteSlug,
   updateGitHubSignals
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import {
   makeGitHub
-} from "./chunk-XHHMM5HX.js";
+} from "./chunk-43SW3FGW.js";
 import {
   recordFleetEventsBestEffort
-} from "./chunk-DMPHP7UP.js";
-import "./chunk-22GKJO5F.js";
-import "./chunk-OCNSIBMP.js";
+} from "./chunk-EQQ4H6L3.js";
+import "./chunk-6INOBNRO.js";
+import "./chunk-T76MA2FH.js";
 import "./chunk-LBYOLBW7.js";
 import "./chunk-6VAL7XJT.js";
 
@@ -91,7 +91,7 @@ async function runGitHubSignalsCommand(opts, deps = {}) {
   );
   const sweptAt = (/* @__PURE__ */ new Date()).toISOString();
   const makeMirror = deps.makeMirror ?? (async () => {
-    const { makeHealthMirrorBestEffort } = await import("./health-mirror-EB76EERV.js");
+    const { makeHealthMirrorBestEffort } = await import("./health-mirror-ONRT4DQ5.js");
     return makeHealthMirrorBestEffort();
   });
   const mirror = await makeMirror();
@@ -156,4 +156,4 @@ export {
   githubSignalsExitCode,
   runGitHubSignalsCommand
 };
-//# sourceMappingURL=github-signals-GAHNOAHS.js.map
+//# sourceMappingURL=github-signals-DMU74SAX.js.map

package/dist/{header-image-YN3AQRY3.js → header-image-BRTOLHJF.js}

@@ -7,12 +7,12 @@ import {
 } from "./chunk-HN6I2XWI.js";
 import {
   generateHeaderImage
-} from "./chunk-5UINJNAJ.js";
+} from "./chunk-MZZDMBDT.js";
 import {
   ACTIVE_STATUSES,
   listWebsites,
   siteSlug
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/cli/commands/header-image.ts
@@ -54,7 +54,8 @@ async function generateForTargets(targets, opts, generate = generateHeaderImage)
         slug: siteSlug(row.name),
         // `exactOptionalPropertyTypes` rejects an explicit `settleMs: undefined`
         // against `settleMs?: number`, so omit the key entirely when unset.
-        ...settleMs === void 0 ? {} : { settleMs }
+        ...settleMs === void 0 ? {} : { settleMs },
+        ...opts.consentSelector === void 0 ? {} : { consentSelector: opts.consentSelector }
       });
       if (opts.writeAirtable) {
         await uploadAttachment(row.id, "Header image", gen.bytes, gen.filename, gen.contentType, {
@@ -102,7 +103,7 @@ async function runHeaderImageCommand(site, opts) {
   }
   let withStore = opts;
   if (opts.writeAirtable && !opts.storeDb && process.env.TURSO_DATABASE_URL) {
-    const { openDb, readDbConfig } = await import("./client-M2V6FHH5.js");
+    const { openDb, readDbConfig } = await import("./client-L7NAUG6J.js");
     const { storeHeaderImage } = await import("./header-images-SQBCE5OD.js");
     const db = await openDb(readDbConfig());
     withStore = { ...opts, storeDb: (id, img) => storeHeaderImage(db, id, img) };
@@ -115,4 +116,4 @@ export {
   resolveTargets,
   runHeaderImageCommand
 };
-//# sourceMappingURL=header-image-YN3AQRY3.js.map
+//# sourceMappingURL=header-image-BRTOLHJF.js.map

package/dist/header-image-BRTOLHJF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/header-image.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { listWebsites, siteSlug, ACTIVE_STATUSES } from \"../../reports/airtable/websites.js\";\nimport type { WebsiteRow } from \"../../reports/airtable/websites.js\";\nimport { uploadAttachment } from \"../../reports/airtable/attachments.js\";\nimport { generateHeaderImage } from \"../../reports/header-image/index.js\";\nimport type { StoredHeaderImage } from \"../../db/header-images.js\";\n\nexport type HeaderImageOptions = {\n  all?: boolean;\n  force?: boolean;\n  writeAirtable?: boolean;\n  outDir?: string;\n  settleMs?: string;\n  consentSelector?: string;\n  /** Injected Turso store for the dual-write (#539, design D5): while Airtable\n   *  is still written (until the Phase 5 freeze), every upload ALSO lands the\n   *  bytes in sites.header_image* so the Turso read layer serves a real image.\n   *  Absent → Airtable-only (a local run without Turso env still works). */\n  storeDb?: (siteId: string, img: StoredHeaderImage) => Promise<void>;\n};\n\n/** Which rows this invocation should act on. Pure, so it is unit-tested. */\nexport function resolveTargets(\n  rows: readonly WebsiteRow[],\n  // `| undefined` spelled out because `exactOptionalPropertyTypes` otherwise\n  // rejects the caller passing through possibly-undefined CLI flags.\n  opts: { site?: string | undefined; all?: boolean | undefined; force?: boolean | undefined },\n): WebsiteRow[] {\n  if (opts.site) {\n    const want = siteSlug(opts.site);\n    return rows.filter((r) => siteSlug(r.name) === want);\n  }\n  if (!opts.all) return [];\n  return rows.filter((r) => {\n    if (!r.url) return false;\n    if (r.status === null || !ACTIVE_STATUSES.has(r.status)) return false;\n    return opts.force ? true : !r.headerImage;\n  });\n}\n\n/** Parse the `--settle-ms <ms>` flag. Unset → undefined (the generator's own\n *  default settle). `Number(\"abc\")` is NaN, which would sail through as a NaN\n *  timeout and silently skip the settle entirely, so anything non-finite or\n *  negative is rejected up front rather than producing a subtly-wrong capture. */\nexport function parseSettleMs(value: string | undefined): number | undefined {\n  if (value === undefined) return undefined;\n  const n = Number(value);\n  if (!Number.isFinite(n) || n < 0) {\n    throw Object.assign(\n      new Error(`--settle-ms must be a non-negative number of milliseconds, got \"${value}\"`),\n      { exitCode: 2 },\n    );\n  }\n  return n;\n}\n\n/** Injected in tests so the file-writing branch can be exercised without\n *  driving a real browser (mirrors `GenerateInput.shooter`). */\ntype Generate = typeof generateHeaderImage;\n\n/**\n * Generate a header image per target row and either upload it to Airtable or\n * write it locally for review. Split out of {@link runHeaderImageCommand} so\n * the local-output path is testable without an Airtable base.\n */\nexport async function generateForTargets(\n  targets: readonly WebsiteRow[],\n  opts: HeaderImageOptions,\n  generate: Generate = generateHeaderImage,\n): Promise<{ output: string; code: number }> {\n  const outDir = resolve(opts.outDir ?? \"reports\");\n  const settleMs = parseSettleMs(opts.settleMs);\n  // `reports/` does not exist on a fresh checkout, so the writeFile() below\n  // would throw ENOENT for the first operator to run the default (local) path.\n  // Create it once, before the loop, rather than per site.\n  if (!opts.writeAirtable) await mkdir(outDir, { recursive: true });\n\n  const lines: string[] = [];\n  let failed = 0;\n\n  for (const row of targets) {\n    try {\n      const gen = await generate({\n        url: row.url,\n        slug: siteSlug(row.name),\n        // `exactOptionalPropertyTypes` rejects an explicit `settleMs: undefined`\n        // against `settleMs?: number`, so omit the key entirely when unset.\n        ...(settleMs === undefined ? {} : { settleMs }),\n        ...(opts.consentSelector === undefined ? {} : { consentSelector: opts.consentSelector }),\n      });\n      if (opts.writeAirtable) {\n        // replaceIn: the field must hold exactly the current header — see\n        // uploadAttachment, where appending left readers on a stale [0].\n        await uploadAttachment(row.id, \"Header image\", gen.bytes, gen.filename, gen.contentType, {\n          replaceIn: \"Websites\",\n        });\n        let stored = \"\";\n        if (opts.storeDb) {\n          // Dual-write. A Turso failure must not void the Airtable upload —\n          // but it must be VISIBLE, never a silent divergence.\n          try {\n            await opts.storeDb(row.id, {\n              bytes: gen.bytes,\n              filename: gen.filename,\n              contentType: gen.contentType,\n              generatedAt: new Date().toISOString(),\n            });\n            stored = \" + turso\";\n          } catch (err) {\n            stored = ` (⚠ turso store FAILED: ${err instanceof Error ? err.message : String(err)})`;\n          }\n        }\n        lines.push(\n          `✔ ${row.name} — uploaded ${gen.filename} (${(gen.bytes.byteLength / 1024 / 1024).toFixed(2)} MB)${stored}`,\n        );\n      } else {\n        const path = resolve(outDir, gen.filename);\n        await writeFile(path, gen.bytes);\n        lines.push(`✔ ${row.name} — wrote ${path} (review, then re-run with --write-airtable)`);\n      }\n    } catch (err) {\n      failed++;\n      lines.push(`✖ ${row.name} — ${err instanceof Error ? err.message : String(err)}`);\n    }\n  }\n\n  lines.push(`${targets.length - failed}/${targets.length} generated.`);\n  return { output: lines.join(\"\\n\"), code: failed > 0 ? 1 : 0 };\n}\n\n/**\n * `header-image [site]` — capture a site's live homepage and composite its\n * report header image. Defaults to writing the JPEG locally so the operator can\n * eyeball it; `--write-airtable` uploads it to the Websites row's Header image\n * field. `--all` backfills every live site that has no header image yet.\n */\nexport async function runHeaderImageCommand(\n  site: string | undefined,\n  opts: HeaderImageOptions,\n): Promise<{ output: string; code: number }> {\n  const base = openBase(readAirtableConfig());\n  const rows = await listWebsites(base);\n  const targets = resolveTargets(rows, { site, all: opts.all, force: opts.force });\n  if (targets.length === 0) {\n    return {\n      output: site ? `No site matched \"${site}\".` : \"No sites need a header image.\",\n      code: 1,\n    };\n  }\n  // Wire the Turso dual-write when the env is present; a local run without it\n  // still works Airtable-only (the store is per-site error-isolated above).\n  let withStore = opts;\n  if (opts.writeAirtable && !opts.storeDb && process.env.TURSO_DATABASE_URL) {\n    const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n    const { storeHeaderImage } = await import(\"../../db/header-images.js\");\n    const db = await openDb(readDbConfig());\n    withStore = { ...opts, storeDb: (id, img) => storeHeaderImage(db, id, img) };\n  }\n  return generateForTargets(targets, withStore);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAuBjB,SAAS,eACd,MAGA,MACc;AACd,MAAI,KAAK,MAAM;AACb,UAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,WAAO,KAAK,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAAA,EACrD;AACA,MAAI,CAAC,KAAK,IAAK,QAAO,CAAC;AACvB,SAAO,KAAK,OAAO,CAAC,MAAM;AACxB,QAAI,CAAC,EAAE,IAAK,QAAO;AACnB,QAAI,EAAE,WAAW,QAAQ,CAAC,gBAAgB,IAAI,EAAE,MAAM,EAAG,QAAO;AAChE,WAAO,KAAK,QAAQ,OAAO,CAAC,EAAE;AAAA,EAChC,CAAC;AACH;AAMO,SAAS,cAAc,OAA+C;AAC3E,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,GAAG;AAChC,UAAM,OAAO;AAAA,MACX,IAAI,MAAM,mEAAmE,KAAK,GAAG;AAAA,MACrF,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAWA,eAAsB,mBACpB,SACA,MACA,WAAqB,qBACsB;AAC3C,QAAM,SAAS,QAAQ,KAAK,UAAU,SAAS;AAC/C,QAAM,WAAW,cAAc,KAAK,QAAQ;AAI5C,MAAI,CAAC,KAAK,cAAe,OAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AAEhE,QAAM,QAAkB,CAAC;AACzB,MAAI,SAAS;AAEb,aAAW,OAAO,SAAS;AACzB,QAAI;AACF,YAAM,MAAM,MAAM,SAAS;AAAA,QACzB,KAAK,IAAI;AAAA,QACT,MAAM,SAAS,IAAI,IAAI;AAAA;AAAA;AAAA,QAGvB,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,QAC7C,GAAI,KAAK,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,KAAK,gBAAgB;AAAA,MACxF,CAAC;AACD,UAAI,KAAK,eAAe;AAGtB,cAAM,iBAAiB,IAAI,IAAI,gBAAgB,IAAI,OAAO,IAAI,UAAU,IAAI,aAAa;AAAA,UACvF,WAAW;AAAA,QACb,CAAC;AACD,YAAI,SAAS;AACb,YAAI,KAAK,SAAS;AAGhB,cAAI;AACF,kBAAM,KAAK,QAAQ,IAAI,IAAI;AAAA,cACzB,OAAO,IAAI;AAAA,cACX,UAAU,IAAI;AAAA,cACd,aAAa,IAAI;AAAA,cACjB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,YACtC,CAAC;AACD,qBAAS;AAAA,UACX,SAAS,KAAK;AACZ,qBAAS,gCAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,UACtF;AAAA,QACF;AACA,cAAM;AAAA,UACJ,UAAK,IAAI,IAAI,oBAAe,IAAI,QAAQ,MAAM,IAAI,MAAM,aAAa,OAAO,MAAM,QAAQ,CAAC,CAAC,OAAO,MAAM;AAAA,QAC3G;AAAA,MACF,OAAO;AACL,cAAM,OAAO,QAAQ,QAAQ,IAAI,QAAQ;AACzC,cAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,cAAM,KAAK,UAAK,IAAI,IAAI,iBAAY,IAAI,8CAA8C;AAAA,MACxF;AAAA,IACF,SAAS,KAAK;AACZ;AACA,YAAM,KAAK,UAAK,IAAI,IAAI,WAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,IAClF;AAAA,EACF;AAEA,QAAM,KAAK,GAAG,QAAQ,SAAS,MAAM,IAAI,QAAQ,MAAM,aAAa;AACpE,SAAO,EAAE,QAAQ,MAAM,KAAK,IAAI,GAAG,MAAM,SAAS,IAAI,IAAI,EAAE;AAC9D;AAQA,eAAsB,sBACpB,MACA,MAC2C;AAC3C,QAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,QAAM,OAAO,MAAM,aAAa,IAAI;AACpC,QAAM,UAAU,eAAe,MAAM,EAAE,MAAM,KAAK,KAAK,KAAK,OAAO,KAAK,MAAM,CAAC;AAC/E,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,QAAQ,OAAO,oBAAoB,IAAI,OAAO;AAAA,MAC9C,MAAM;AAAA,IACR;AAAA,EACF;AAGA,MAAI,YAAY;AAChB,MAAI,KAAK,iBAAiB,CAAC,KAAK,WAAW,QAAQ,IAAI,oBAAoB;AACzE,UAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAA2B;AACrE,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,gBAAY,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,QAAQ,iBAAiB,IAAI,IAAI,GAAG,EAAE;AAAA,EAC7E;AACA,SAAO,mBAAmB,SAAS,SAAS;AAC9C;","names":[]}

package/dist/{health-endpoint-KVCJYWET.js → health-endpoint-UCLMSSCN.js}

@@ -5,20 +5,21 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-LM2NHRCJ.js";
+} from "./chunk-SHGIDTYF.js";
 import {
   resolveSites
-} from "./chunk-Z2K4JPQ3.js";
+} from "./chunk-H445EH33.js";
 import {
   healthEndpoint
-} from "./chunk-WSJ7RO54.js";
-import "./chunk-R53VL3RI.js";
-import "./chunk-ZQV7UQNE.js";
+} from "./chunk-XED2DNAI.js";
+import "./chunk-5CJVUPJU.js";
+import "./chunk-4UTJ4G6P.js";
+import "./chunk-SQ4FSNYL.js";
 import "./chunk-Z3JXLULD.js";
 import "./chunk-LBYOLBW7.js";
 import "./chunk-RARREDQE.js";
 import "./chunk-XXTZBPUY.js";
-import "./chunk-AVEQUR44.js";
+import "./chunk-EASYCD6F.js";
 
 // src/cli/commands/health-endpoint.ts
 import { resolve } from "path";
@@ -51,4 +52,4 @@ async function runHealthEndpointCommand(site, opts) {
 export {
   runHealthEndpointCommand
 };
-//# sourceMappingURL=health-endpoint-KVCJYWET.js.map
+//# sourceMappingURL=health-endpoint-UCLMSSCN.js.map

package/dist/{health-endpoint-KVCJYWET.js.map → health-endpoint-UCLMSSCN.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/commands/health-endpoint.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { healthEndpoint } from \"../../recipes/health-endpoint/index.js\";\nimport type { RecipeResult } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport { prepareFleetSites, appendSkipNotice, type SkippedSite } from \"../fleet/prepare-sites.js\";\nimport { runRecipeOverSites } from \"../fleet/run-recipe-over-sites.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\n\nexport type HealthEndpointCommandOptions = {\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n};\n\nfunction formatResult(r: RecipeResult): string {\n  if (r.status === \"noop\") return `[${r.site}] noop: ${r.notes ?? \"\"}`;\n  if (r.status === \"failed\") return `[${r.site}] failed: ${r.notes ?? \"\"}`;\n  return `[${r.site}] applied: ${r.commits.length} commit(s)\\n${r.notes ?? \"\"}`;\n}\n\nexport async function runHealthEndpointCommand(\n  site: string | undefined,\n  opts: HealthEndpointCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  let skipped: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, { workdir });\n    sites = prep.prepared;\n    skipped = prep.skipped;\n  }\n\n  const results = await runRecipeOverSites(\"health-endpoint\", sites, (s) => healthEndpoint(s));\n\n  const output = results.map(formatResult).join(\"\\n\");\n  const code = results.some((r) => r.status === \"failed\") ? 1 : 0;\n  return { output: appendSkipNotice(output, skipped), code };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AAcxB,SAAS,aAAa,GAAyB;AAC7C,MAAI,EAAE,WAAW,OAAQ,QAAO,IAAI,EAAE,IAAI,WAAW,EAAE,SAAS,EAAE;AAClE,MAAI,EAAE,WAAW,SAAU,QAAO,IAAI,EAAE,IAAI,aAAa,EAAE,SAAS,EAAE;AACtE,SAAO,IAAI,EAAE,IAAI,cAAc,EAAE,QAAQ,MAAM;AAAA,EAAe,EAAE,SAAS,EAAE;AAC7E;AAEA,eAAsB,yBACpB,MACA,MAC2C;AAC3C,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAEvD,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,MAAI,UAAyB,CAAC;AAC9B,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO,EAAE,QAAQ,CAAC;AACvD,YAAQ,KAAK;AACb,cAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,MAAM,mBAAmB,mBAAmB,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;AAE3F,QAAM,SAAS,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AAClD,QAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,IAAI,IAAI;AAC9D,SAAO,EAAE,QAAQ,iBAAiB,QAAQ,OAAO,GAAG,KAAK;AAC3D;","names":[]}
+{"version":3,"sources":["../src/cli/commands/health-endpoint.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { healthEndpoint } from \"../../recipes/health-endpoint/index.js\";\nimport type { RecipeResult } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport { prepareFleetSites, appendSkipNotice, type SkippedSite } from \"../fleet/prepare-sites.js\";\nimport { runRecipeOverSites } from \"../fleet/run-recipe-over-sites.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\n\nexport type HealthEndpointCommandOptions = {\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n};\n\nfunction formatResult(r: RecipeResult): string {\n  if (r.status === \"noop\") return `[${r.site}] noop: ${r.notes ?? \"\"}`;\n  if (r.status === \"failed\") return `[${r.site}] failed: ${r.notes ?? \"\"}`;\n  return `[${r.site}] applied: ${r.commits.length} commit(s)\\n${r.notes ?? \"\"}`;\n}\n\nexport async function runHealthEndpointCommand(\n  site: string | undefined,\n  opts: HealthEndpointCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  let skipped: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, { workdir });\n    sites = prep.prepared;\n    skipped = prep.skipped;\n  }\n\n  const results = await runRecipeOverSites(\"health-endpoint\", sites, (s) => healthEndpoint(s));\n\n  const output = results.map(formatResult).join(\"\\n\");\n  const code = results.some((r) => r.status === \"failed\") ? 1 : 0;\n  return { output: appendSkipNotice(output, skipped), code };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AAcxB,SAAS,aAAa,GAAyB;AAC7C,MAAI,EAAE,WAAW,OAAQ,QAAO,IAAI,EAAE,IAAI,WAAW,EAAE,SAAS,EAAE;AAClE,MAAI,EAAE,WAAW,SAAU,QAAO,IAAI,EAAE,IAAI,aAAa,EAAE,SAAS,EAAE;AACtE,SAAO,IAAI,EAAE,IAAI,cAAc,EAAE,QAAQ,MAAM;AAAA,EAAe,EAAE,SAAS,EAAE;AAC7E;AAEA,eAAsB,yBACpB,MACA,MAC2C;AAC3C,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAEvD,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,MAAI,UAAyB,CAAC;AAC9B,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO,EAAE,QAAQ,CAAC;AACvD,YAAQ,KAAK;AACb,cAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,MAAM,mBAAmB,mBAAmB,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;AAE3F,QAAM,SAAS,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AAClD,QAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,IAAI,IAAI;AAC9D,SAAO,EAAE,QAAQ,iBAAiB,QAAQ,OAAO,GAAG,KAAK;AAC3D;","names":[]}

package/dist/{health-mirror-EB76EERV.js → health-mirror-ONRT4DQ5.js}

@@ -1,19 +1,19 @@
 import {
   mirrorHealthFields,
   mirrorScheduleFields
-} from "./chunk-WVNDEYXL.js";
-import "./chunk-6R56OKJZ.js";
+} from "./chunk-GEUC5VGM.js";
+import "./chunk-UIITN37J.js";
 import {
   TURSO_IS_AUTHORITATIVE
-} from "./chunk-SVAAONYB.js";
+} from "./chunk-WQLNUEZL.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-3Z6X3BHU.js";
+import "./chunk-KN52PM63.js";
 import {
   openDb,
   readDbConfig
-} from "./chunk-22GKJO5F.js";
-import "./chunk-OCNSIBMP.js";
+} from "./chunk-6INOBNRO.js";
+import "./chunk-T76MA2FH.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/audits/health-mirror.ts
@@ -43,4 +43,4 @@ export {
   makeHealthMirrorBestEffort,
   makeScheduleMirrorBestEffort
 };
-//# sourceMappingURL=health-mirror-EB76EERV.js.map
+//# sourceMappingURL=health-mirror-ONRT4DQ5.js.map

package/dist/{import-airtable-TAKSN4NV.js → import-airtable-IIK2QUUF.js}

@@ -14,9 +14,9 @@ import {
   renderedHtmlUrl,
   scheduleColumnFor,
   siteValueFor
-} from "./chunk-6R56OKJZ.js";
+} from "./chunk-UIITN37J.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-3Z6X3BHU.js";
+import "./chunk-KN52PM63.js";
 export {
   EXCLUDED_WEBSITE_FIELDS,
   HEALTH_BOOLEAN,
@@ -34,4 +34,4 @@ export {
   scheduleColumnFor,
   siteValueFor
 };
-//# sourceMappingURL=import-airtable-TAKSN4NV.js.map
+//# sourceMappingURL=import-airtable-IIK2QUUF.js.map