@reddoorla/maintenance 0.95.0 → 0.96.0

package/dist/index.d.ts

@@ -315,14 +315,27 @@ type DependabotAlert = {
     scope: "runtime" | "development" | null;
     /** Dependency graph relationship (`dependency.relationship`), or null when GitHub reports
      *  "unknown"/nothing. "transitive" means no direct-dep bump can fix it — Renovate's vuln
-     *  alerts have no fix vehicle until the weekly lockfile-maintenance window. */
-    relationship: "direct" | "transitive" | null;
+     *  alerts have no fix vehicle until the weekly lockfile-maintenance window. "inconclusive"
+     *  is what GitHub stamps on an alert filed against a manifest its dependency graph still
+     *  tracks but the tree no longer holds (#702) — kept, never folded to null, because it is
+     *  the secondary tell for a ghost alert. */
+    relationship: "direct" | "transitive" | "inconclusive" | null;
+    /** The manifest the alert was filed against (`dependency.manifest_path`, e.g.
+     *  `package-lock.json`), or null when absent. GitHub retains a manifest after the file is
+     *  deleted from the default branch and keeps filing alerts against that frozen snapshot;
+     *  the audit resolves this path with {@link GitHubRest.manifestExists} to tell a ghost from
+     *  a live vulnerability (#702). */
+    manifestPath: string | null;
 };
 
 /** The Dependabot fetch the security audit needs, injectable for tests. The real default is
  *  built from GITHUB_TOKEN; absent token (or a site with no gitRepo) → pnpm/npm audit fallback. */
 type DependabotDeps = {
     listAlerts: (repo: string) => Promise<DependabotAlert[]>;
+    /** Whether an alert's `manifestPath` is still on the default branch. Optional: without it
+     *  every alert counts, which is the loud direction. A lookup that THROWS also counts the
+     *  alert — an API hiccup must never quietly suppress a real vulnerability (#702). */
+    manifestExists?: (repo: string, path: string) => Promise<boolean>;
 };
 declare function securityAudit(ctx: AuditContext): Promise<AuditResult>;
 
@@ -418,6 +431,84 @@ declare function onboard(site: Site, opts?: OnboardOptions): Promise<RecipeResul
  */
 declare function a11yFixturesPage(site: Site): Promise<RecipeResult>;
 
+type HealthEndpointDeps = {
+    spawn: SpawnFn;
+    /** Resolve the TARGET repo's own prettier. Injected so a test can assert the
+     *  absolute-path spawn without a populated `node_modules`. */
+    resolvePrettier?: (repoRoot: string) => Promise<string | null>;
+};
+/**
+ * Writes a resilient `src/routes/health/+server.ts` if the route doesn't already
+ * exist. The function-health audit fetches this endpoint; existing sites need it
+ * or the Report Health Gate blocks their Maintenance reports on "unknown". Operator
+ * edits to an existing endpoint are never clobbered (noop on existing file).
+ *
+ * Two heterogeneity fixes the fleet rollout exposed: (1) it detects whether the
+ * site has a `$lib/prismicio` module and writes the Prismic-free variant when it
+ * doesn't (a static import of a missing module fails the build); (2) it runs the
+ * SITE's own prettier on the written file before committing, so the file matches
+ * that site's formatting config (tabs/spaces, quote style vary fleet-wide) and
+ * doesn't red the CI format check. Prettier is best-effort — a site without it
+ * installed commits unformatted with a flag note rather than failing the recipe.
+ */
+declare function healthEndpoint(site: Site, deps?: HealthEndpointDeps): Promise<RecipeResult>;
+
+type SmokeSuiteDeps = {
+    spawn: SpawnFn;
+    /** Resolve the TARGET repo's own prettier. Injected so a test can assert the
+     *  absolute-path spawn without a populated `node_modules`. */
+    resolvePrettier?: (repoRoot: string) => Promise<string | null>;
+};
+/**
+ * Adds the smoke suite to a site: the `tests/smoke/*` specs, a `test:smoke` /
+ * `test:unit` script split, `@playwright/test`, and a `playwright.config.ts`
+ * that honors `REDDOOR_SMOKE_PORT` (R1.1). Conservative + partial-apply — every
+ * file is noop-if-exists, every `package.json` script/dep is add-if-absent, and
+ * an existing config that isn't a recognizable shared-base shape is left
+ * untouched and flagged for a manual R1.1 patch (never a destructive write).
+ * A site with no `package.json` noops (not a node project). Branch+commit per site.
+ */
+declare function smokeSuite(site: Site, deps?: SmokeSuiteDeps): Promise<RecipeResult>;
+
+type MatchHarnessOptions = {
+    /** The live reference URL the harness gates against. Required — a harness
+     *  with no reference cannot produce evidence, only an absence of errors. */
+    ref: string;
+    /** Candidate origin. Defaults to the SvelteKit dev server. */
+    cand?: string;
+    /** Breakpoint matrix. Defaults to the fleet's 1440 / 834 / 390. */
+    matrix?: number[];
+};
+type MatchHarnessDeps = {
+    spawn: SpawnFn;
+    /** Previously shipped renders per relative path; injectable so the
+     *  safe-replace path is testable before a second version exists. */
+    previous?: Readonly<Record<string, readonly string[]>>;
+    /** Previously shipped BLOCK bodies per target file; injectable for the same
+     *  reason, and empty in the shipped table until a body is superseded. */
+    blockPrevious?: Readonly<Record<string, readonly string[]>>;
+    /** Resolve the TARGET repo's own prettier. Injected so a test can assert the
+     *  absolute-path spawn without a populated `node_modules`. */
+    resolvePrettier?: (repoRoot: string) => Promise<string | null>;
+};
+/**
+ * Installs the matching harness into a site: the dev-guarded `/dev/match/[uid]`
+ * route, a `site-pages.js` scaffold and its fixture-vs-model test,
+ * `matching/harness.json` + the read layer, the round scripts, the site records,
+ * and the `.gitignore` / `.prettierignore` / `CLAUDE.md` blocks.
+ *
+ * Install-if-absent throughout. Files a site edits are never rewritten. A
+ * recipe-owned script that matches a previously shipped render is safe-replaced;
+ * one that has been hand-edited is FLAGGED in the notes and left alone.
+ *
+ * ONE EXCEPTION TO PER-FILE INDEPENDENCE: the scripts in MATCH_HARNESS_COUPLED
+ * upgrade as a SET. If any one of them is hand-edited, none of them is written,
+ * because gate.sh calls `harness.mjs --check-run` and next.mjs imports from
+ * harness.mjs — upgrading the others around a pinned one leaves a harness that
+ * cannot run at all. See the measurement on MATCH_HARNESS_COUPLED.
+ */
+declare function matchHarness(site: Site, opts: MatchHarnessOptions, deps?: MatchHarnessDeps): Promise<RecipeResult>;
+
 type InitStepResult = {
     kind: "recipe";
     result: RecipeResult;
@@ -1166,6 +1257,13 @@ type SiteMirror = {
     health: (siteId: string, fields: Record<string, unknown>) => Promise<void>;
     /** Columns that live in `sites`. */
     site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;
+    /** #645. Does Turso hold a row for this site id? A pure READ, so it is the one
+     *  op here that neither logs a SITE_MIRROR line nor throws under the freeze —
+     *  `ensure-site` uses it to decide whether to heal, and a probe that threw
+     *  would sink the very command that repairs the gap. Creds-absent answers
+     *  `true` ("assume present"), so a mirror that cannot read can never provoke
+     *  a blind insert. */
+    hasRow: (siteId: string) => Promise<boolean>;
 };
 
 type ShootOptions = {
@@ -1174,6 +1272,9 @@ type ShootOptions = {
     height: number;
     deviceScaleFactor: number;
     settleMs: number;
+    /** Extra CSS selector(s) hidden before the shutter, for a site whose consent
+     *  or interstitial UI the class/id heuristic misses. */
+    consentSelector?: string;
 };
 /** Injected browser IO. The real impl drives Playwright; tests pass a fake. */
 type Shooter = {
@@ -1187,8 +1288,11 @@ type GenerateInput = {
     slug?: string;
     /** Injected browser IO (tests). */
     shooter?: Shooter;
-    /** Per-site settle override for animation-heavy or consent-gated homepages. */
+    /** Per-site settle override for animation-heavy homepages. */
     settleMs?: number;
+    /** Extra CSS selector(s) hidden before the shutter, for consent or
+     *  interstitial UI the capture's class/id heuristic misses (#654). */
+    consentSelector?: string;
 };
 type GeneratedHeaderImage = {
     bytes: Uint8Array;
@@ -1452,6 +1556,15 @@ type SubmissionRow = {
      *  was attempted: a non-newsletter form, a spam row, a site with no destination
      *  configured, or a row written before 0005. See ingest.ts for the token grammar. */
     fanoutStatus?: string | null;
+    /** Resend's bounce classification, kept so a content rejection by the CLIENT's
+     *  mail filter can be told apart from a dead mailbox (#783). Null for a
+     *  complaint, and for every row written before migration 0018. */
+    bounceType?: string | null;
+    bounceSubType?: string | null;
+    bounceMessage?: string | null;
+    /** ISO-8601 of the operator saying "this address is not dead" (#783). The row
+     *  keeps its bounce record and stops counting toward the alarm. */
+    bounceAckAt?: string | null;
 };
 
 type ScreenOutTotals = {
@@ -1474,6 +1587,13 @@ type AttentionItem = {
     /** Stable identity for diffing: `vuln:<siteId>`, `delivery:<reportId>`. */
     key: string;
     kind: "vuln" | "delivery" | "renovate" | "lighthouse" | "ci" | "analytics" | "preflight" | "turnstile" | "notify-bounce"
+    /** #645. Leads captured by the dead-letter because their site could not be
+     *  placed — a store outage during the lookup, or (since #645) a slug with no
+     *  Turso row at all. Until this kind existed a dropped lead had NO alarm
+     *  anywhere: the queue could fill and nothing said so. Keyed by SLUG, not by
+     *  site id, because the whole point of the worst case is that the slug
+     *  resolves to no site. */
+     | "deadletter"
     /** The nightly Prismic model sweep. THREE item flavors share this kind —
      *  `prismic-drift:` (repo and Prismic diverge), `prismic-unknown:` (the check
      *  ran and could not answer), `prismic-stale:` (nobody has re-established the
@@ -1612,6 +1732,17 @@ type CockpitModel = {
      *  invisible to every fleet op, so the Needs-you feed surfaces them as amber watch
      *  rows (optional for back-compat). */
     unrecognizedStatus?: OffFleetSiteEntry[];
+    /** #786. Attention items that belong to NO site card. The grid is built from
+     *  the visible sites and items are grouped onto it by `siteName`, so an item
+     *  naming a site the fleet does not have matched nothing and was dropped —
+     *  silently, on the one surface the operator actually watches.
+     *
+     *  The collector that produces them is the one whose entire point is that the
+     *  site is missing: a dead letter for a slug resolving to no fleet row means
+     *  leads are being dropped RIGHT NOW. Kept general rather than
+     *  dead-letter-specific, so a future card-less item lands here instead of
+     *  vanishing the same way. Optional for back-compat with hand-built models. */
+    cardless?: AttentionItem[];
 };
 /** The cockpit's alarm verdict for ONE site, for the /s/<slug> page header. */
 type SiteAlarmContext = {
@@ -1702,4 +1833,4 @@ declare function loadPlate(): Promise<Uint8Array>;
 /** Read a headline overlay (transparent PNG, ink-box cropped). */
 declare function loadHeadline(kind: HeadlineKind): Promise<Uint8Array>;
 
-export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type GenerateInput, type GeneratedHeaderImage, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RefreshHeaderDeps, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, domainFromUrl, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, generateHeaderImage, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, loadHeadline, loadPlate, localPath, onboard, renderCockpitHtml, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, svelteCodemods, upgradeSvelte4to5, verifyBasicAuth };
+export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type GenerateInput, type GeneratedHeaderImage, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RefreshHeaderDeps, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, domainFromUrl, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, generateHeaderImage, healthEndpoint, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, loadHeadline, loadPlate, localPath, matchHarness, onboard, renderCockpitHtml, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, smokeSuite, svelteCodemods, upgradeSvelte4to5, verifyBasicAuth };

package/dist/index.js

@@ -1,39 +1,47 @@
-import "./chunk-2SLED3NB.js";
+import "./chunk-YDZ7XGPZ.js";
 import {
   DEFAULT_INIT_STEPS,
   a11yFixturesPage,
   init
-} from "./chunk-BVEDKMNG.js";
+} from "./chunk-3EA43S3R.js";
 import {
   onboard,
   selfCaretRange,
   selfPackageVersion
-} from "./chunk-S7RYFUIK.js";
+} from "./chunk-CA6ADGOC.js";
 import {
   draftReportForSite
-} from "./chunk-BYGPUUCT.js";
+} from "./chunk-72FJZ6LO.js";
 import "./chunk-YFAXOD7Z.js";
 import {
   upgradeSvelte4to5
-} from "./chunk-BCKEP5S6.js";
+} from "./chunk-ECDJDHKT.js";
 import {
   convertToPnpm
-} from "./chunk-CWXTNPNZ.js";
+} from "./chunk-DVJNYPFR.js";
 import {
   svelteCodemods
-} from "./chunk-2LYOAB2E.js";
+} from "./chunk-RRE74VWI.js";
 import "./chunk-J7SZQUCW.js";
-import "./chunk-WSJ7RO54.js";
-import "./chunk-6VKYQATC.js";
-import "./chunk-DFKBTBO3.js";
-import "./chunk-R53VL3RI.js";
+import {
+  healthEndpoint
+} from "./chunk-XED2DNAI.js";
+import {
+  matchHarness
+} from "./chunk-IHHAYXKY.js";
+import "./chunk-Y6FCXRIC.js";
+import {
+  smokeSuite
+} from "./chunk-NVLREB5R.js";
+import "./chunk-5CJVUPJU.js";
 import {
   bumpDeps
-} from "./chunk-CJ2RMTT7.js";
-import "./chunk-4AIYWWKV.js";
+} from "./chunk-VEIIUCYL.js";
+import "./chunk-4UTJ4G6P.js";
+import "./chunk-62YWOFVN.js";
 import {
   approveBlockers
-} from "./chunk-AEUABPAJ.js";
+} from "./chunk-OTEVKRAH.js";
 import {
   findDueReports
 } from "./chunk-PZR4EBPY.js";
@@ -41,7 +49,7 @@ import {
   parseAddresses,
   sendApprovedReports,
   withGlobalCc
-} from "./chunk-KQB2BX4V.js";
+} from "./chunk-P4A6D6HO.js";
 import {
   isPendingApproval
 } from "./chunk-F3JWOPTG.js";
@@ -51,13 +59,13 @@ import {
   isHealthGateClear
 } from "./chunk-VAD43MOR.js";
 import "./chunk-BRYXFH77.js";
-import "./chunk-7MKT4I5T.js";
+import "./chunk-P7323YVW.js";
 import {
   fromAirtableBase
-} from "./chunk-5GUJ36TL.js";
+} from "./chunk-74QRWE6G.js";
 import "./chunk-IY6256GK.js";
 import "./chunk-HN6I2XWI.js";
-import "./chunk-HTABUCF4.js";
+import "./chunk-Y5BVR4HW.js";
 import "./chunk-GECESMVS.js";
 import {
   BLURRED_CID,
@@ -75,19 +83,19 @@ import {
   generateHeaderImage,
   loadHeadline,
   loadPlate
-} from "./chunk-5UINJNAJ.js";
+} from "./chunk-MZZDMBDT.js";
 import {
   CANONICAL_STATUSES,
   SEVERITY_RANK,
   siteSlug,
   toAirtableStatus
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import "./chunk-WEKL2HYJ.js";
 import "./chunk-T7ZUUOZ2.js";
 import {
   syncConfigs
-} from "./chunk-FUWFLAWQ.js";
-import "./chunk-ZQV7UQNE.js";
+} from "./chunk-IMYL67JV.js";
+import "./chunk-SQ4FSNYL.js";
 import "./chunk-SLFG7Y76.js";
 import "./chunk-OTGB6YQO.js";
 import {
@@ -98,20 +106,20 @@ import {
   runAudits,
   runAuditsAcross,
   securityAudit
-} from "./chunk-TO7DJYLZ.js";
+} from "./chunk-XY7YV2YQ.js";
 import "./chunk-LKGVSM2O.js";
-import "./chunk-GASBX52O.js";
-import "./chunk-XHHMM5HX.js";
+import "./chunk-CGQZFQAY.js";
+import "./chunk-43SW3FGW.js";
 import {
   fromJsonFile,
   localPath
 } from "./chunk-Z3JXLULD.js";
-import "./chunk-DMPHP7UP.js";
-import "./chunk-22GKJO5F.js";
-import "./chunk-OCNSIBMP.js";
+import "./chunk-EQQ4H6L3.js";
+import "./chunk-6INOBNRO.js";
+import "./chunk-T76MA2FH.js";
 import {
   lighthouseAudit
-} from "./chunk-2NQUCS7O.js";
+} from "./chunk-BIYQN7FH.js";
 import "./chunk-UDRHAQT7.js";
 import "./chunk-PTDMVGKL.js";
 import "./chunk-LBYOLBW7.js";
@@ -121,10 +129,10 @@ import {
 } from "./chunk-2OP4JKIQ.js";
 import "./chunk-RARREDQE.js";
 import "./chunk-XXTZBPUY.js";
-import "./chunk-AVEQUR44.js";
+import "./chunk-EASYCD6F.js";
 import "./chunk-6VAL7XJT.js";
 import "./chunk-NMAWXBJA.js";
-import "./chunk-YLYXW5PH.js";
+import "./chunk-CXICCLNM.js";
 
 // src/recipes/index.ts
 var ALL_RECIPE_NAMES = [
@@ -245,7 +253,13 @@ function renderSubmissionRowInner(s) {
   const reasonChip = reasonTokens.length > 0 ? ` <span class="subm-reasons">${escapeHtml(reasonChipText(reasonTokens))}</span>` : "";
   const provenance = s.status === "spam_auto" && s.spamScore !== null && s.spamScore !== void 0 ? ` <span class="subm-provenance" title="${escapeHtml(s.spamReason ?? "")}">auto-spam \xB7 ${escapeHtml(String(s.spamScore))}</span>${reasonChip}` : "";
   const recover = s.status === "spam_auto" ? btn("Not spam \u2192 new", "new") : "";
-  const bounceChip = s.notifyStatus === "bounced" ? ` <span class="subm-bounce" title="The lead notification email bounced \u2014 the point-of-contact address may be dead">notify bounced</span>` : "";
+  const bouncePermanent = (s.bounceType ?? "").toLowerCase() === "permanent";
+  const bounceAcked = typeof s.bounceAckAt === "string" && s.bounceAckAt !== "";
+  const bounceLabel = s.bounceSubType ?? s.bounceType ?? null;
+  const bounceTitle = bouncePermanent ? "The lead notification email bounced \u2014 the point-of-contact address may be dead" : bounceLabel !== null ? "The receiving server refused this message \u2014 the client's mail filter is rejecting lead notifications, which is not the same as a dead address" : "The lead notification email bounced \u2014 Resend recorded no classification for it";
+  const bounceChipText = `notify bounced${bounceLabel !== null ? ` \xB7 ${bounceLabel}` : ""}${bounceAcked ? " \xB7 acknowledged" : ""}`;
+  const bounceChip = s.notifyStatus === "bounced" ? ` <span class="subm-bounce${bounceAcked ? " acked" : ""}" title="${escapeHtml(bounceTitle)}">${escapeHtml(bounceChipText)}</span>` : "";
+  const ackBounce = s.notifyStatus === "bounced" && !bounceAcked ? `<button class="subm-status" data-id="${id}" data-ack="notify-bounce" data-url="${url}">Not dead \u2014 acknowledge</button>` : "";
   const fanoutBad = fanoutFailures(s.fanoutStatus);
   const fanoutChip = fanoutBad.length > 0 ? ` <span class="subm-fanout-fail" title="This signup did not reach every configured destination">fan-out: ${escapeHtml(fanoutBad.join(" \xB7 "))}</span>` : "";
   const kv = (label, value) => value === null || value === "" ? "" : `<div class="subm-kv"><span class="k">${label}</span> ${escapeHtml(String(value))}</div>`;
@@ -261,6 +275,11 @@ function renderSubmissionRowInner(s) {
     extraFieldsList(s.extraFields),
     kv("Spam", spamDetail),
     kv("Notify", s.notifyStatus),
+    kv("Bounce", [s.bounceType, s.bounceSubType].filter((x) => !!x).join(" / ")),
+    // The receiving server's own words — the single most useful line when
+    // deciding whether an address is dead or a filter is being strict.
+    kv("Bounce message", s.bounceMessage ?? null),
+    kv("Bounce acknowledged", s.bounceAckAt ?? null),
     kv("Fan-out", s.fanoutStatus ?? null),
     kv("Resend ID", s.resendMessageId),
     kv("Submission #", s.submissionId)
@@ -269,7 +288,7 @@ function renderSubmissionRowInner(s) {
       <summary class="subm-head"><strong>${type}</strong> \xB7 ${who} <span class="muted">${email}</span> <span class="pill subm-${status}">${status}</span>${provenance}${bounceChip}${fanoutChip} <span class="muted">${when}</span></summary>
       <div class="subm-detail">${details}</div>
     </details>
-    <div class="subm-actions">${recover}${btn("Read", "read")}${btn("Archive", "archived")}${btn("Spam", "spam")}</div>`;
+    <div class="subm-actions">${recover}${ackBounce}${btn("Read", "read")}${btn("Archive", "archived")}${btn("Spam", "spam")}</div>`;
 }
 function renderSubmissionRow(s) {
   return `<li class="subm-item">${renderSubmissionRowInner(s)}</li>`;
@@ -296,6 +315,7 @@ button.subm-status:disabled { opacity: 0.6; cursor: default; }
 .pill.subm-spam_auto { background: #fff4e5; color: #a65a00; }
 .subm-provenance { font-size: 0.72rem; border-radius: 0.25rem; padding: 0 0.35rem; white-space: nowrap; background: #fff4e5; color: #a65a00; }
 .subm-bounce { font-size: 0.72rem; border-radius: 0.25rem; padding: 0 0.35rem; white-space: nowrap; background: #fdecea; color: #b00; font-weight: 700; }
+.subm-bounce.acked { background: #f0f0f0; color: #666; font-weight: 400; }
 .subm-fanout-fail { font-size: 0.72rem; border-radius: 0.25rem; padding: 0 0.35rem; white-space: nowrap; background: #fdecea; color: #b00; font-weight: 700; }
 .subm-reasons { font-size: 0.72rem; color: #999; }
 .subm-viewall { font-size: 0.8rem; font-weight: normal; margin-left: 0.4rem; white-space: nowrap; }`;
@@ -306,7 +326,9 @@ var SUBMISSION_STATUS_SCRIPT = `document.querySelectorAll("button.subm-status").
           const res = await fetch(b.dataset.url, {
             method: "POST",
             headers: { "content-type": "application/json" },
-            body: JSON.stringify({ status: b.dataset.status }),
+            body: JSON.stringify(
+              b.dataset.ack ? { ack: b.dataset.ack } : { status: b.dataset.status },
+            ),
           });
           b.textContent = res.ok ? "\u2713" : "Failed";
           if (!res.ok) b.disabled = false;
@@ -1638,6 +1660,14 @@ function renderArchivedLane(model) {
   ).join("");
   return `<details class="archived"><summary>\u{1F5C4} Archived (${rows.length})</summary>${lis}</details>`;
 }
+function renderCardlessLane(model) {
+  const items = model.cardless ?? [];
+  if (items.length === 0) return "";
+  const rows = items.map(
+    (i) => `<div class="approve-row"><strong>${escapeHtml(i.siteName)}</strong> <span class="muted">${escapeHtml(i.title)}</span></div>`
+  ).join("");
+  return `<details class="cardless"><summary>\u26A0 Not on any site card (${items.length})</summary>${rows}</details>`;
+}
 function renderInboxLane(model) {
   const subs = model.submissions ?? [];
   const spam = model.spam;
@@ -1812,6 +1842,7 @@ function renderCockpitHtml(model, operatorEmail = null) {
   ${renderFleetBrowsePanel(model)}
   ${renderRecentlyLane(model)}
   ${renderArchivedLane(model)}
+  ${renderCardlessLane(model)}
   ${renderInboxLane(model)}
   ${AUDIT_SCRIPT}
   ${FLEET_BROWSE_SCRIPT}
@@ -1867,6 +1898,7 @@ export {
   fromAirtableBase,
   fromJsonFile,
   generateHeaderImage,
+  healthEndpoint,
   init,
   isRecipeName,
   lighthouseAudit,
@@ -1875,6 +1907,7 @@ export {
   loadHeadline,
   loadPlate,
   localPath,
+  matchHarness,
   onboard,
   renderCockpitHtml,
   renderReportHtml,
@@ -1885,6 +1918,7 @@ export {
   selfCaretRange,
   selfPackageVersion,
   sendApprovedReports,
+  smokeSuite,
   svelteCodemods,
   syncConfigs,
   upgradeSvelte4to5,