@reddoorla/maintenance 0.95.1 → 0.96.0

package/dist/ensure-site-XESZHZEB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/airtable/ensure-site.ts","../src/cli/commands/ensure-site.ts"],"sourcesContent":["import type { FieldSet, Records } from \"airtable\";\nimport type { AirtableBase } from \"./client.js\";\nimport { WEBSITES_TABLE, mapRow, siteSlug, type WebsiteRow } from \"./websites.js\";\nimport { toAirtableStatus } from \"./site-status.js\";\n\nexport type EnsureSiteInput = {\n  /** Canonical slug — matches by siteSlug(Name); the Name on create when no displayName given. */\n  slug: string;\n  /** Human display name written to Name on create, and — unlike every other\n   *  input — UPDATED on an existing row when it differs (#664). Name is\n   *  consumed VERBATIM in client-facing copy (forms auto-reply intro, report\n   *  subjects), so a bare machine slug there reads as \"Thanks for reaching out\n   *  to acme-co.\" — and the row that has it is exactly the one created before\n   *  the name was settled, which only this command re-run can fix. Must\n   *  slugify to the same slug or the row wouldn't be found on re-run. */\n  displayName?: string;\n  url?: string;\n  pointOfContact?: string;\n  /** owner/repo. Default on create: `reddoorla/<slug>`. */\n  gitRepo?: string;\n};\n\n/** #539 Phase 5. Structurally typed rather than importing the db layer's\n *  `SiteMirror`, so this module stays the leaf it has always been — a real\n *  `SiteMirror` satisfies it. Two ops because `ensureSite` has two write paths,\n *  and the create one is the reason this exists: every other site mirror is an\n *  UPDATE, which does nothing for a row that does not exist yet. */\nexport type EnsureSiteMirror = {\n  created: (rec: { id: string; fields: Record<string, unknown> }) => Promise<void>;\n  site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n  /** #645. Does Turso hold a row for this site id? Optional so every pre-#645\n   *  caller (and every hand-built test mirror) is byte-for-byte unchanged —\n   *  absent means the heal below never runs. */\n  hasRow?: (siteId: string) => Promise<boolean>;\n};\n\nexport type EnsureSiteResult = {\n  status: \"created\" | \"exists\";\n  siteId: string;\n  /** Airtable column names written on the exists path (create path writes all). */\n  updatedFields: string[];\n  /** Inputs that DIFFERED from an existing non-blank cell and were left\n   *  untouched (fill-blanks-only) — surfaced so a resumed bootstrap with a\n   *  corrected value doesn't silently discard it. */\n  skippedMismatches: string[];\n  /** #645. True when the site existed in Airtable but had NO Turso row and this\n   *  run inserted one. Surfaced rather than logged-only because it is the\n   *  difference between \"nothing to do\" and \"this site's leads were being\n   *  dropped until just now\". */\n  healedDbRow: boolean;\n};\n\n/** Column-name map (load-bearing magic strings — see websites.ts's mapRow header). */\nconst COLS = {\n  url: \"url\",\n  pointOfContact: \"point of contact\",\n  gitRepo: \"Git repo\",\n} as const;\n\n/**\n * Find-or-create the Websites row for a slug so a new site exists in the fleet\n * inventory (audits, form-ingest slug resolution, reports) from day one.\n *\n * Fill-blanks-only on the exists path: this command runs from a bootstrap skill\n * that may be re-run to resume — it must never clobber operator-edited cells.\n * The one exception is `displayName` (#664): `--name` targets Name and nothing\n * else, so a differing value IS the operator's edit, and the create message\n * sends them back here to make it. Frequencies are deliberately NOT set\n * (launch flips the lifecycle); Status is only written on create (\"building\" —\n * Airtable's \"in development\" until the stage-2 vocabulary switch flips).\n */\nexport async function ensureSite(\n  base: AirtableBase,\n  input: EnsureSiteInput,\n  mirror?: EnsureSiteMirror,\n): Promise<EnsureSiteResult> {\n  const slug = siteSlug(input.slug);\n  if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);\n  if (input.displayName && siteSlug(input.displayName) !== slug)\n    throw new Error(\n      `ensure-site: display name '${input.displayName}' slugifies to '${siteSlug(input.displayName)}', not '${slug}' — the row would not be found on re-run`,\n    );\n\n  // Paged inline rather than through `listWebsites` so the RAW stored record\n  // survives alongside the mapped row: the #645 heal below re-inserts what\n  // Airtable STORED (the same contract as the create path's mirror), and a\n  // mapped `WebsiteRow` cannot be turned back into a FieldSet. Same single\n  // select `listWebsites` issues — no extra Airtable read.\n  const raw: Array<{ id: string; fields: Record<string, unknown> }> = [];\n  await base(WEBSITES_TABLE)\n    .select({ pageSize: 100 })\n    .eachPage((records, fetchNextPage) => {\n      for (const rec of records) raw.push({ id: rec.id, fields: rec.fields });\n      fetchNextPage();\n    });\n  let existing: WebsiteRow | undefined;\n  let existingRaw: { id: string; fields: Record<string, unknown> } | undefined;\n  for (const rec of raw) {\n    const row = mapRow(rec);\n    if (siteSlug(row.name) === slug) {\n      existing = row;\n      existingRaw = rec;\n      break;\n    }\n  }\n\n  if (!existing || !existingRaw) {\n    const fields: FieldSet = {\n      Name: input.displayName ?? slug,\n      Status: toAirtableStatus(\"building\"),\n      [COLS.gitRepo]: input.gitRepo ?? `reddoorla/${slug}`,\n    };\n    if (input.url) fields[COLS.url] = input.url;\n    if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;\n    const created = (await base(WEBSITES_TABLE).create([{ fields }])) as Records<FieldSet>;\n    const rec = created[0]!;\n    // The mirror gets what Airtable STORED, never the `fields` we sent: parity\n    // diffs Turso against the stored record, so mapping our own payload would\n    // diverge the moment Airtable normalises a value.\n    await mirror?.created({ id: rec.id, fields: rec.fields as Record<string, unknown> });\n    return {\n      status: \"created\",\n      siteId: rec.id,\n      updatedFields: [],\n      skippedMismatches: [],\n      // The create path just inserted the row; there is nothing to heal, and a\n      // `hasRow` probe here would be a round-trip whose answer is already known.\n      healedDbRow: false,\n    };\n  }\n\n  // #645. THE gap: before this, `exists` meant \"Airtable has it\" and said nothing\n  // about Turso. Post-flip (#643) the form-ingest lookup reads Turso ONLY, so a\n  // site with an Airtable row and no Turso row has every lead answered\n  // `unknown-site` — silently, permanently, and with no alarm once Phase 6 (#646)\n  // deletes `mirror_missed`. `ensure-site` is the command an operator already\n  // re-runs to finish a half-created site, so the heal belongs here.\n  //\n  // FIRST, before the fill-blanks update below: `mirror.site` is an UPDATE, and\n  // under the freeze a no-match THROWS (`SITE_MIRROR … no such row in Turso`).\n  // Healing second would abort ensure-site on exactly the site it exists to\n  // repair. `mirrorSiteInsert` is an upsert, so a lost race just re-writes.\n  let healedDbRow = false;\n  if (mirror?.hasRow && !(await mirror.hasRow(existingRaw.id))) {\n    await mirror.created(existingRaw);\n    healedDbRow = true;\n  }\n\n  const updates: FieldSet = {};\n  const skippedMismatches: string[] = [];\n  const blank = (v: unknown) => v === null || v === undefined || v === \"\";\n  const consider = (column: string, provided: string | undefined, current: unknown) => {\n    if (!provided) return;\n    if (blank(current)) updates[column] = provided;\n    else if (current !== provided) skippedMismatches.push(column);\n  };\n  consider(COLS.url, input.url, existing.url || null);\n  consider(COLS.pointOfContact, input.pointOfContact, existing.pointOfContact);\n  consider(COLS.gitRepo, input.gitRepo, existing.gitRepo);\n  // #664: Name is NOT fill-blanks. It is never blank (the slug match found it),\n  // and `--name` is the only way to retitle a row created before the display\n  // name was settled — the slugify guard above already proved the new value\n  // resolves to the same row. Goes through the same update + mirror below, so\n  // Turso gets it too.\n  if (input.displayName && existing.name !== input.displayName) {\n    updates[\"Name\"] = input.displayName;\n  }\n\n  const updatedFields = Object.keys(updates);\n  if (updatedFields.length > 0) {\n    await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);\n    // The fill-blanks path writes real cells too — a resumed bootstrap that only\n    // filled a blank `url` would otherwise leave Turso stale until the sync.\n    await mirror?.site(existing.id, updates);\n  }\n  return { status: \"exists\", siteId: existing.id, updatedFields, skippedMismatches, healedDbRow };\n}\n","import { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { ensureSite } from \"../../reports/airtable/ensure-site.js\";\n\nexport type EnsureSiteCommandOptions = {\n  name?: string;\n  url?: string;\n  contact?: string;\n  gitRepo?: string;\n  cwd?: string;\n};\n\n/**\n * `ensure-site <slug>` — create/verify the fleet-inventory row for a new site.\n * Day-one step of the /new-site bootstrap skill. Fill-blanks-only; safe to re-run.\n */\nexport async function runEnsureSiteCommand(\n  slug: string | undefined,\n  opts: EnsureSiteCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (!slug) return { output: \"Provide a <slug> (e.g. `ensure-site roalson`).\", code: 2 };\n  try {\n    const base = openBase(readAirtableConfig());\n    // #539 Phase 5: bootstrapping a site CREATES the Websites row, so this is\n    // the one site path that needs an INSERT mirror — every other one updates.\n    const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n    const result = await ensureSite(\n      base,\n      {\n        slug,\n        ...(opts.name ? { displayName: opts.name } : {}),\n        ...(opts.url ? { url: opts.url } : {}),\n        ...(opts.contact ? { pointOfContact: opts.contact } : {}),\n        ...(opts.gitRepo ? { gitRepo: opts.gitRepo } : {}),\n      },\n      await makeSiteMirror(),\n    );\n    // #664: a Name change on the exists path is a rename the operator asked\n    // for with --name, not a blank the bootstrap filled — say so.\n    const renamed = result.updatedFields.includes(\"Name\") ? ` — Name set to \"${opts.name}\"` : \"\";\n    const blanks = result.updatedFields.filter((f) => f !== \"Name\");\n    const filled = blanks.length > 0 ? ` — filled blank field(s): ${blanks.join(\", \")}` : \"\";\n    const skipped =\n      result.skippedMismatches.length > 0\n        ? ` — differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(\", \")}`\n        : \"\";\n    // #645. Loud, and its own clause: a healed row means this site's leads were\n    // being answered `unknown-site` and dropped until this run.\n    const healed = result.healedDbRow\n      ? ` — HEALED: the Turso row was MISSING and has been inserted; leads for this slug were being dropped (run \\`db replay-deadletters\\`)`\n      : \"\";\n    const nameNote =\n      result.status === \"created\" && !opts.name\n        ? ` — Name set to \"${slug}\"; retitle in Airtable before forms/announce go live (or re-run with --name)`\n        : \"\";\n    return {\n      output: `[${slug}] ${result.status} (${result.siteId})${healed}${renamed}${filled}${skipped}${nameNote}`,\n      code: 0,\n    };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAqDA,IAAM,OAAO;AAAA,EACX,KAAK;AAAA,EACL,gBAAgB;AAAA,EAChB,SAAS;AACX;AAcA,eAAsB,WACpB,MACA,OACA,QAC2B;AAC3B,QAAM,OAAO,SAAS,MAAM,IAAI;AAChC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iBAAiB,MAAM,IAAI,qCAAqC;AAC3F,MAAI,MAAM,eAAe,SAAS,MAAM,WAAW,MAAM;AACvD,UAAM,IAAI;AAAA,MACR,8BAA8B,MAAM,WAAW,mBAAmB,SAAS,MAAM,WAAW,CAAC,WAAW,IAAI;AAAA,IAC9G;AAOF,QAAM,MAA8D,CAAC;AACrE,QAAM,KAAK,cAAc,EACtB,OAAO,EAAE,UAAU,IAAI,CAAC,EACxB,SAAS,CAAC,SAAS,kBAAkB;AACpC,eAAW,OAAO,QAAS,KAAI,KAAK,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAO,CAAC;AACtE,kBAAc;AAAA,EAChB,CAAC;AACH,MAAI;AACJ,MAAI;AACJ,aAAW,OAAO,KAAK;AACrB,UAAM,MAAM,OAAO,GAAG;AACtB,QAAI,SAAS,IAAI,IAAI,MAAM,MAAM;AAC/B,iBAAW;AACX,oBAAc;AACd;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,YAAY,CAAC,aAAa;AAC7B,UAAM,SAAmB;AAAA,MACvB,MAAM,MAAM,eAAe;AAAA,MAC3B,QAAQ,iBAAiB,UAAU;AAAA,MACnC,CAAC,KAAK,OAAO,GAAG,MAAM,WAAW,aAAa,IAAI;AAAA,IACpD;AACA,QAAI,MAAM,IAAK,QAAO,KAAK,GAAG,IAAI,MAAM;AACxC,QAAI,MAAM,eAAgB,QAAO,KAAK,cAAc,IAAI,MAAM;AAC9D,UAAM,UAAW,MAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,UAAM,MAAM,QAAQ,CAAC;AAIrB,UAAM,QAAQ,QAAQ,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAkC,CAAC;AACnF,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,eAAe,CAAC;AAAA,MAChB,mBAAmB,CAAC;AAAA;AAAA;AAAA,MAGpB,aAAa;AAAA,IACf;AAAA,EACF;AAaA,MAAI,cAAc;AAClB,MAAI,QAAQ,UAAU,CAAE,MAAM,OAAO,OAAO,YAAY,EAAE,GAAI;AAC5D,UAAM,OAAO,QAAQ,WAAW;AAChC,kBAAc;AAAA,EAChB;AAEA,QAAM,UAAoB,CAAC;AAC3B,QAAM,oBAA8B,CAAC;AACrC,QAAM,QAAQ,CAAC,MAAe,MAAM,QAAQ,MAAM,UAAa,MAAM;AACrE,QAAM,WAAW,CAAC,QAAgB,UAA8B,YAAqB;AACnF,QAAI,CAAC,SAAU;AACf,QAAI,MAAM,OAAO,EAAG,SAAQ,MAAM,IAAI;AAAA,aAC7B,YAAY,SAAU,mBAAkB,KAAK,MAAM;AAAA,EAC9D;AACA,WAAS,KAAK,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI;AAClD,WAAS,KAAK,gBAAgB,MAAM,gBAAgB,SAAS,cAAc;AAC3E,WAAS,KAAK,SAAS,MAAM,SAAS,SAAS,OAAO;AAMtD,MAAI,MAAM,eAAe,SAAS,SAAS,MAAM,aAAa;AAC5D,YAAQ,MAAM,IAAI,MAAM;AAAA,EAC1B;AAEA,QAAM,gBAAgB,OAAO,KAAK,OAAO;AACzC,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAGxE,UAAM,QAAQ,KAAK,SAAS,IAAI,OAAO;AAAA,EACzC;AACA,SAAO,EAAE,QAAQ,UAAU,QAAQ,SAAS,IAAI,eAAe,mBAAmB,YAAY;AAChG;;;ACjKA,eAAsB,qBACpB,MACA,MAC2C;AAC3C,MAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,kDAAkD,MAAM,EAAE;AACtF,MAAI;AACF,UAAM,OAAO,SAAS,mBAAmB,CAAC;AAG1C,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,KAAK,OAAO,EAAE,aAAa,KAAK,KAAK,IAAI,CAAC;AAAA,QAC9C,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,QACpC,GAAI,KAAK,UAAU,EAAE,gBAAgB,KAAK,QAAQ,IAAI,CAAC;AAAA,QACvD,GAAI,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAClD;AAAA,MACA,MAAM,eAAe;AAAA,IACvB;AAGA,UAAM,UAAU,OAAO,cAAc,SAAS,MAAM,IAAI,wBAAmB,KAAK,IAAI,MAAM;AAC1F,UAAM,SAAS,OAAO,cAAc,OAAO,CAAC,MAAM,MAAM,MAAM;AAC9D,UAAM,SAAS,OAAO,SAAS,IAAI,kCAA6B,OAAO,KAAK,IAAI,CAAC,KAAK;AACtF,UAAM,UACJ,OAAO,kBAAkB,SAAS,IAC9B,qEAAgE,OAAO,kBAAkB,KAAK,IAAI,CAAC,KACnG;AAGN,UAAM,SAAS,OAAO,cAClB,4IACA;AACJ,UAAM,WACJ,OAAO,WAAW,aAAa,CAAC,KAAK,OACjC,wBAAmB,IAAI,iFACvB;AACN,WAAO;AAAA,MACL,QAAQ,IAAI,IAAI,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,IAAI,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ;AAAA,MACtG,MAAM;AAAA,IACR;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/{fleet-state-UEVZ3X3J.js → fleet-state-GJWGKTLD.js}

@@ -14,12 +14,13 @@ import {
   mirrorSiteField,
   mirrorSiteFields,
   mirrorSiteInsert,
+  siteRowExists,
   storeRenderedHtml
-} from "./chunk-WVNDEYXL.js";
-import "./chunk-6R56OKJZ.js";
+} from "./chunk-GEUC5VGM.js";
+import "./chunk-UIITN37J.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-3Z6X3BHU.js";
+import "./chunk-KN52PM63.js";
 export {
   REPORT_LIST_COLUMNS,
   getReportById,
@@ -36,6 +37,7 @@ export {
   mirrorSiteField,
   mirrorSiteFields,
   mirrorSiteInsert,
+  siteRowExists,
   storeRenderedHtml
 };
-//# sourceMappingURL=fleet-state-UEVZ3X3J.js.map
+//# sourceMappingURL=fleet-state-GJWGKTLD.js.map

package/dist/{forms-notify-target-UC6PF3AE.js → forms-notify-target-4NPLX2UG.js}

@@ -1,7 +1,7 @@
 import {
   describeNotifyTarget
-} from "./chunk-4763KQ6O.js";
-import "./chunk-QF6IQQFP.js";
+} from "./chunk-PXRN2MER.js";
+import "./chunk-Z7FDJ35L.js";
 import "./chunk-5ML7FMBD.js";
 import "./chunk-NO74DXDP.js";
 import "./chunk-I7NHLVVI.js";
@@ -16,7 +16,7 @@ import {
   siteSlug,
   toAirtableStatus,
   updateSiteField
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import "./chunk-2OP4JKIQ.js";
 import "./chunk-6VAL7XJT.js";
 
@@ -144,7 +144,7 @@ async function runFormsNotifyTargetCommand(site, opts) {
     return { output: `--set must be 'on' or 'off' (got '${opts.set}')`, code: 2 };
   }
   try {
-    const { makeSiteMirror } = await import("./site-mirror-WON4FTJ2.js");
+    const { makeSiteMirror } = await import("./site-mirror-H2FYMN55.js");
     const result = await formsNotifyTarget({
       siteMirror: await makeSiteMirror(),
       site: site.trim(),
@@ -164,4 +164,4 @@ export {
   formatNotifyTarget,
   runFormsNotifyTargetCommand
 };
-//# sourceMappingURL=forms-notify-target-UC6PF3AE.js.map
+//# sourceMappingURL=forms-notify-target-4NPLX2UG.js.map

package/dist/{freeze-A6MUCZU4.js → freeze-GUQ43EAU.js}

@@ -1,9 +1,9 @@
 import {
   TURSO_IS_AUTHORITATIVE,
   mirrorWrite
-} from "./chunk-SVAAONYB.js";
+} from "./chunk-WQLNUEZL.js";
 export {
   TURSO_IS_AUTHORITATIVE,
   mirrorWrite
 };
-//# sourceMappingURL=freeze-A6MUCZU4.js.map
+//# sourceMappingURL=freeze-GUQ43EAU.js.map

package/dist/{github-signals-TX5FPYP6.js → github-signals-DMU74SAX.js}

@@ -3,9 +3,9 @@ import {
 } from "./chunk-PZQ3WED2.js";
 import {
   formatFleetWriteSummary
-} from "./chunk-5EEMTJMT.js";
-import "./chunk-XN37VTDB.js";
-import "./chunk-SVAAONYB.js";
+} from "./chunk-ZH5LOQET.js";
+import "./chunk-37B4LVB3.js";
+import "./chunk-WQLNUEZL.js";
 import {
   detectSignalEvents,
   fleetSweptEvent
@@ -18,15 +18,15 @@ import {
   listWebsites,
   siteSlug,
   updateGitHubSignals
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import {
   makeGitHub
-} from "./chunk-XHHMM5HX.js";
+} from "./chunk-43SW3FGW.js";
 import {
   recordFleetEventsBestEffort
-} from "./chunk-BI2VI6EM.js";
-import "./chunk-VSGMCCGQ.js";
-import "./chunk-C3IQQKXL.js";
+} from "./chunk-EQQ4H6L3.js";
+import "./chunk-6INOBNRO.js";
+import "./chunk-T76MA2FH.js";
 import "./chunk-LBYOLBW7.js";
 import "./chunk-6VAL7XJT.js";
 
@@ -91,7 +91,7 @@ async function runGitHubSignalsCommand(opts, deps = {}) {
   );
   const sweptAt = (/* @__PURE__ */ new Date()).toISOString();
   const makeMirror = deps.makeMirror ?? (async () => {
-    const { makeHealthMirrorBestEffort } = await import("./health-mirror-XJAKA3EY.js");
+    const { makeHealthMirrorBestEffort } = await import("./health-mirror-ONRT4DQ5.js");
     return makeHealthMirrorBestEffort();
   });
   const mirror = await makeMirror();
@@ -156,4 +156,4 @@ export {
   githubSignalsExitCode,
   runGitHubSignalsCommand
 };
-//# sourceMappingURL=github-signals-TX5FPYP6.js.map
+//# sourceMappingURL=github-signals-DMU74SAX.js.map

package/dist/{header-image-PSPT7CUM.js → header-image-BRTOLHJF.js}

@@ -7,12 +7,12 @@ import {
 } from "./chunk-HN6I2XWI.js";
 import {
   generateHeaderImage
-} from "./chunk-5UINJNAJ.js";
+} from "./chunk-MZZDMBDT.js";
 import {
   ACTIVE_STATUSES,
   listWebsites,
   siteSlug
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-KN52PM63.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/cli/commands/header-image.ts
@@ -54,7 +54,8 @@ async function generateForTargets(targets, opts, generate = generateHeaderImage)
         slug: siteSlug(row.name),
         // `exactOptionalPropertyTypes` rejects an explicit `settleMs: undefined`
         // against `settleMs?: number`, so omit the key entirely when unset.
-        ...settleMs === void 0 ? {} : { settleMs }
+        ...settleMs === void 0 ? {} : { settleMs },
+        ...opts.consentSelector === void 0 ? {} : { consentSelector: opts.consentSelector }
       });
       if (opts.writeAirtable) {
         await uploadAttachment(row.id, "Header image", gen.bytes, gen.filename, gen.contentType, {
@@ -102,7 +103,7 @@ async function runHeaderImageCommand(site, opts) {
   }
   let withStore = opts;
   if (opts.writeAirtable && !opts.storeDb && process.env.TURSO_DATABASE_URL) {
-    const { openDb, readDbConfig } = await import("./client-G2WGWPCA.js");
+    const { openDb, readDbConfig } = await import("./client-L7NAUG6J.js");
     const { storeHeaderImage } = await import("./header-images-SQBCE5OD.js");
     const db = await openDb(readDbConfig());
     withStore = { ...opts, storeDb: (id, img) => storeHeaderImage(db, id, img) };
@@ -115,4 +116,4 @@ export {
   resolveTargets,
   runHeaderImageCommand
 };
-//# sourceMappingURL=header-image-PSPT7CUM.js.map
+//# sourceMappingURL=header-image-BRTOLHJF.js.map

package/dist/header-image-BRTOLHJF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/header-image.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { listWebsites, siteSlug, ACTIVE_STATUSES } from \"../../reports/airtable/websites.js\";\nimport type { WebsiteRow } from \"../../reports/airtable/websites.js\";\nimport { uploadAttachment } from \"../../reports/airtable/attachments.js\";\nimport { generateHeaderImage } from \"../../reports/header-image/index.js\";\nimport type { StoredHeaderImage } from \"../../db/header-images.js\";\n\nexport type HeaderImageOptions = {\n  all?: boolean;\n  force?: boolean;\n  writeAirtable?: boolean;\n  outDir?: string;\n  settleMs?: string;\n  consentSelector?: string;\n  /** Injected Turso store for the dual-write (#539, design D5): while Airtable\n   *  is still written (until the Phase 5 freeze), every upload ALSO lands the\n   *  bytes in sites.header_image* so the Turso read layer serves a real image.\n   *  Absent → Airtable-only (a local run without Turso env still works). */\n  storeDb?: (siteId: string, img: StoredHeaderImage) => Promise<void>;\n};\n\n/** Which rows this invocation should act on. Pure, so it is unit-tested. */\nexport function resolveTargets(\n  rows: readonly WebsiteRow[],\n  // `| undefined` spelled out because `exactOptionalPropertyTypes` otherwise\n  // rejects the caller passing through possibly-undefined CLI flags.\n  opts: { site?: string | undefined; all?: boolean | undefined; force?: boolean | undefined },\n): WebsiteRow[] {\n  if (opts.site) {\n    const want = siteSlug(opts.site);\n    return rows.filter((r) => siteSlug(r.name) === want);\n  }\n  if (!opts.all) return [];\n  return rows.filter((r) => {\n    if (!r.url) return false;\n    if (r.status === null || !ACTIVE_STATUSES.has(r.status)) return false;\n    return opts.force ? true : !r.headerImage;\n  });\n}\n\n/** Parse the `--settle-ms <ms>` flag. Unset → undefined (the generator's own\n *  default settle). `Number(\"abc\")` is NaN, which would sail through as a NaN\n *  timeout and silently skip the settle entirely, so anything non-finite or\n *  negative is rejected up front rather than producing a subtly-wrong capture. */\nexport function parseSettleMs(value: string | undefined): number | undefined {\n  if (value === undefined) return undefined;\n  const n = Number(value);\n  if (!Number.isFinite(n) || n < 0) {\n    throw Object.assign(\n      new Error(`--settle-ms must be a non-negative number of milliseconds, got \"${value}\"`),\n      { exitCode: 2 },\n    );\n  }\n  return n;\n}\n\n/** Injected in tests so the file-writing branch can be exercised without\n *  driving a real browser (mirrors `GenerateInput.shooter`). */\ntype Generate = typeof generateHeaderImage;\n\n/**\n * Generate a header image per target row and either upload it to Airtable or\n * write it locally for review. Split out of {@link runHeaderImageCommand} so\n * the local-output path is testable without an Airtable base.\n */\nexport async function generateForTargets(\n  targets: readonly WebsiteRow[],\n  opts: HeaderImageOptions,\n  generate: Generate = generateHeaderImage,\n): Promise<{ output: string; code: number }> {\n  const outDir = resolve(opts.outDir ?? \"reports\");\n  const settleMs = parseSettleMs(opts.settleMs);\n  // `reports/` does not exist on a fresh checkout, so the writeFile() below\n  // would throw ENOENT for the first operator to run the default (local) path.\n  // Create it once, before the loop, rather than per site.\n  if (!opts.writeAirtable) await mkdir(outDir, { recursive: true });\n\n  const lines: string[] = [];\n  let failed = 0;\n\n  for (const row of targets) {\n    try {\n      const gen = await generate({\n        url: row.url,\n        slug: siteSlug(row.name),\n        // `exactOptionalPropertyTypes` rejects an explicit `settleMs: undefined`\n        // against `settleMs?: number`, so omit the key entirely when unset.\n        ...(settleMs === undefined ? {} : { settleMs }),\n        ...(opts.consentSelector === undefined ? {} : { consentSelector: opts.consentSelector }),\n      });\n      if (opts.writeAirtable) {\n        // replaceIn: the field must hold exactly the current header — see\n        // uploadAttachment, where appending left readers on a stale [0].\n        await uploadAttachment(row.id, \"Header image\", gen.bytes, gen.filename, gen.contentType, {\n          replaceIn: \"Websites\",\n        });\n        let stored = \"\";\n        if (opts.storeDb) {\n          // Dual-write. A Turso failure must not void the Airtable upload —\n          // but it must be VISIBLE, never a silent divergence.\n          try {\n            await opts.storeDb(row.id, {\n              bytes: gen.bytes,\n              filename: gen.filename,\n              contentType: gen.contentType,\n              generatedAt: new Date().toISOString(),\n            });\n            stored = \" + turso\";\n          } catch (err) {\n            stored = ` (⚠ turso store FAILED: ${err instanceof Error ? err.message : String(err)})`;\n          }\n        }\n        lines.push(\n          `✔ ${row.name} — uploaded ${gen.filename} (${(gen.bytes.byteLength / 1024 / 1024).toFixed(2)} MB)${stored}`,\n        );\n      } else {\n        const path = resolve(outDir, gen.filename);\n        await writeFile(path, gen.bytes);\n        lines.push(`✔ ${row.name} — wrote ${path} (review, then re-run with --write-airtable)`);\n      }\n    } catch (err) {\n      failed++;\n      lines.push(`✖ ${row.name} — ${err instanceof Error ? err.message : String(err)}`);\n    }\n  }\n\n  lines.push(`${targets.length - failed}/${targets.length} generated.`);\n  return { output: lines.join(\"\\n\"), code: failed > 0 ? 1 : 0 };\n}\n\n/**\n * `header-image [site]` — capture a site's live homepage and composite its\n * report header image. Defaults to writing the JPEG locally so the operator can\n * eyeball it; `--write-airtable` uploads it to the Websites row's Header image\n * field. `--all` backfills every live site that has no header image yet.\n */\nexport async function runHeaderImageCommand(\n  site: string | undefined,\n  opts: HeaderImageOptions,\n): Promise<{ output: string; code: number }> {\n  const base = openBase(readAirtableConfig());\n  const rows = await listWebsites(base);\n  const targets = resolveTargets(rows, { site, all: opts.all, force: opts.force });\n  if (targets.length === 0) {\n    return {\n      output: site ? `No site matched \"${site}\".` : \"No sites need a header image.\",\n      code: 1,\n    };\n  }\n  // Wire the Turso dual-write when the env is present; a local run without it\n  // still works Airtable-only (the store is per-site error-isolated above).\n  let withStore = opts;\n  if (opts.writeAirtable && !opts.storeDb && process.env.TURSO_DATABASE_URL) {\n    const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n    const { storeHeaderImage } = await import(\"../../db/header-images.js\");\n    const db = await openDb(readDbConfig());\n    withStore = { ...opts, storeDb: (id, img) => storeHeaderImage(db, id, img) };\n  }\n  return generateForTargets(targets, withStore);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAuBjB,SAAS,eACd,MAGA,MACc;AACd,MAAI,KAAK,MAAM;AACb,UAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,WAAO,KAAK,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAAA,EACrD;AACA,MAAI,CAAC,KAAK,IAAK,QAAO,CAAC;AACvB,SAAO,KAAK,OAAO,CAAC,MAAM;AACxB,QAAI,CAAC,EAAE,IAAK,QAAO;AACnB,QAAI,EAAE,WAAW,QAAQ,CAAC,gBAAgB,IAAI,EAAE,MAAM,EAAG,QAAO;AAChE,WAAO,KAAK,QAAQ,OAAO,CAAC,EAAE;AAAA,EAChC,CAAC;AACH;AAMO,SAAS,cAAc,OAA+C;AAC3E,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,GAAG;AAChC,UAAM,OAAO;AAAA,MACX,IAAI,MAAM,mEAAmE,KAAK,GAAG;AAAA,MACrF,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAWA,eAAsB,mBACpB,SACA,MACA,WAAqB,qBACsB;AAC3C,QAAM,SAAS,QAAQ,KAAK,UAAU,SAAS;AAC/C,QAAM,WAAW,cAAc,KAAK,QAAQ;AAI5C,MAAI,CAAC,KAAK,cAAe,OAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AAEhE,QAAM,QAAkB,CAAC;AACzB,MAAI,SAAS;AAEb,aAAW,OAAO,SAAS;AACzB,QAAI;AACF,YAAM,MAAM,MAAM,SAAS;AAAA,QACzB,KAAK,IAAI;AAAA,QACT,MAAM,SAAS,IAAI,IAAI;AAAA;AAAA;AAAA,QAGvB,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,QAC7C,GAAI,KAAK,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,KAAK,gBAAgB;AAAA,MACxF,CAAC;AACD,UAAI,KAAK,eAAe;AAGtB,cAAM,iBAAiB,IAAI,IAAI,gBAAgB,IAAI,OAAO,IAAI,UAAU,IAAI,aAAa;AAAA,UACvF,WAAW;AAAA,QACb,CAAC;AACD,YAAI,SAAS;AACb,YAAI,KAAK,SAAS;AAGhB,cAAI;AACF,kBAAM,KAAK,QAAQ,IAAI,IAAI;AAAA,cACzB,OAAO,IAAI;AAAA,cACX,UAAU,IAAI;AAAA,cACd,aAAa,IAAI;AAAA,cACjB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,YACtC,CAAC;AACD,qBAAS;AAAA,UACX,SAAS,KAAK;AACZ,qBAAS,gCAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,UACtF;AAAA,QACF;AACA,cAAM;AAAA,UACJ,UAAK,IAAI,IAAI,oBAAe,IAAI,QAAQ,MAAM,IAAI,MAAM,aAAa,OAAO,MAAM,QAAQ,CAAC,CAAC,OAAO,MAAM;AAAA,QAC3G;AAAA,MACF,OAAO;AACL,cAAM,OAAO,QAAQ,QAAQ,IAAI,QAAQ;AACzC,cAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,cAAM,KAAK,UAAK,IAAI,IAAI,iBAAY,IAAI,8CAA8C;AAAA,MACxF;AAAA,IACF,SAAS,KAAK;AACZ;AACA,YAAM,KAAK,UAAK,IAAI,IAAI,WAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,IAClF;AAAA,EACF;AAEA,QAAM,KAAK,GAAG,QAAQ,SAAS,MAAM,IAAI,QAAQ,MAAM,aAAa;AACpE,SAAO,EAAE,QAAQ,MAAM,KAAK,IAAI,GAAG,MAAM,SAAS,IAAI,IAAI,EAAE;AAC9D;AAQA,eAAsB,sBACpB,MACA,MAC2C;AAC3C,QAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,QAAM,OAAO,MAAM,aAAa,IAAI;AACpC,QAAM,UAAU,eAAe,MAAM,EAAE,MAAM,KAAK,KAAK,KAAK,OAAO,KAAK,MAAM,CAAC;AAC/E,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,QAAQ,OAAO,oBAAoB,IAAI,OAAO;AAAA,MAC9C,MAAM;AAAA,IACR;AAAA,EACF;AAGA,MAAI,YAAY;AAChB,MAAI,KAAK,iBAAiB,CAAC,KAAK,WAAW,QAAQ,IAAI,oBAAoB;AACzE,UAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,UAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAA2B;AACrE,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,gBAAY,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,QAAQ,iBAAiB,IAAI,IAAI,GAAG,EAAE;AAAA,EAC7E;AACA,SAAO,mBAAmB,SAAS,SAAS;AAC9C;","names":[]}

package/dist/{health-endpoint-KVCJYWET.js → health-endpoint-UCLMSSCN.js}

@@ -5,20 +5,21 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-LM2NHRCJ.js";
+} from "./chunk-SHGIDTYF.js";
 import {
   resolveSites
-} from "./chunk-Z2K4JPQ3.js";
+} from "./chunk-H445EH33.js";
 import {
   healthEndpoint
-} from "./chunk-WSJ7RO54.js";
-import "./chunk-R53VL3RI.js";
-import "./chunk-ZQV7UQNE.js";
+} from "./chunk-XED2DNAI.js";
+import "./chunk-5CJVUPJU.js";
+import "./chunk-4UTJ4G6P.js";
+import "./chunk-SQ4FSNYL.js";
 import "./chunk-Z3JXLULD.js";
 import "./chunk-LBYOLBW7.js";
 import "./chunk-RARREDQE.js";
 import "./chunk-XXTZBPUY.js";
-import "./chunk-AVEQUR44.js";
+import "./chunk-EASYCD6F.js";
 
 // src/cli/commands/health-endpoint.ts
 import { resolve } from "path";
@@ -51,4 +52,4 @@ async function runHealthEndpointCommand(site, opts) {
 export {
   runHealthEndpointCommand
 };
-//# sourceMappingURL=health-endpoint-KVCJYWET.js.map
+//# sourceMappingURL=health-endpoint-UCLMSSCN.js.map

package/dist/{health-endpoint-KVCJYWET.js.map → health-endpoint-UCLMSSCN.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/commands/health-endpoint.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { healthEndpoint } from \"../../recipes/health-endpoint/index.js\";\nimport type { RecipeResult } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport { prepareFleetSites, appendSkipNotice, type SkippedSite } from \"../fleet/prepare-sites.js\";\nimport { runRecipeOverSites } from \"../fleet/run-recipe-over-sites.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\n\nexport type HealthEndpointCommandOptions = {\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n};\n\nfunction formatResult(r: RecipeResult): string {\n  if (r.status === \"noop\") return `[${r.site}] noop: ${r.notes ?? \"\"}`;\n  if (r.status === \"failed\") return `[${r.site}] failed: ${r.notes ?? \"\"}`;\n  return `[${r.site}] applied: ${r.commits.length} commit(s)\\n${r.notes ?? \"\"}`;\n}\n\nexport async function runHealthEndpointCommand(\n  site: string | undefined,\n  opts: HealthEndpointCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  let skipped: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, { workdir });\n    sites = prep.prepared;\n    skipped = prep.skipped;\n  }\n\n  const results = await runRecipeOverSites(\"health-endpoint\", sites, (s) => healthEndpoint(s));\n\n  const output = results.map(formatResult).join(\"\\n\");\n  const code = results.some((r) => r.status === \"failed\") ? 1 : 0;\n  return { output: appendSkipNotice(output, skipped), code };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AAcxB,SAAS,aAAa,GAAyB;AAC7C,MAAI,EAAE,WAAW,OAAQ,QAAO,IAAI,EAAE,IAAI,WAAW,EAAE,SAAS,EAAE;AAClE,MAAI,EAAE,WAAW,SAAU,QAAO,IAAI,EAAE,IAAI,aAAa,EAAE,SAAS,EAAE;AACtE,SAAO,IAAI,EAAE,IAAI,cAAc,EAAE,QAAQ,MAAM;AAAA,EAAe,EAAE,SAAS,EAAE;AAC7E;AAEA,eAAsB,yBACpB,MACA,MAC2C;AAC3C,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAEvD,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,MAAI,UAAyB,CAAC;AAC9B,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO,EAAE,QAAQ,CAAC;AACvD,YAAQ,KAAK;AACb,cAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,MAAM,mBAAmB,mBAAmB,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;AAE3F,QAAM,SAAS,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AAClD,QAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,IAAI,IAAI;AAC9D,SAAO,EAAE,QAAQ,iBAAiB,QAAQ,OAAO,GAAG,KAAK;AAC3D;","names":[]}
+{"version":3,"sources":["../src/cli/commands/health-endpoint.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { healthEndpoint } from \"../../recipes/health-endpoint/index.js\";\nimport type { RecipeResult } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport { prepareFleetSites, appendSkipNotice, type SkippedSite } from \"../fleet/prepare-sites.js\";\nimport { runRecipeOverSites } from \"../fleet/run-recipe-over-sites.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\n\nexport type HealthEndpointCommandOptions = {\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n};\n\nfunction formatResult(r: RecipeResult): string {\n  if (r.status === \"noop\") return `[${r.site}] noop: ${r.notes ?? \"\"}`;\n  if (r.status === \"failed\") return `[${r.site}] failed: ${r.notes ?? \"\"}`;\n  return `[${r.site}] applied: ${r.commits.length} commit(s)\\n${r.notes ?? \"\"}`;\n}\n\nexport async function runHealthEndpointCommand(\n  site: string | undefined,\n  opts: HealthEndpointCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  let skipped: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, { workdir });\n    sites = prep.prepared;\n    skipped = prep.skipped;\n  }\n\n  const results = await runRecipeOverSites(\"health-endpoint\", sites, (s) => healthEndpoint(s));\n\n  const output = results.map(formatResult).join(\"\\n\");\n  const code = results.some((r) => r.status === \"failed\") ? 1 : 0;\n  return { output: appendSkipNotice(output, skipped), code };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AAcxB,SAAS,aAAa,GAAyB;AAC7C,MAAI,EAAE,WAAW,OAAQ,QAAO,IAAI,EAAE,IAAI,WAAW,EAAE,SAAS,EAAE;AAClE,MAAI,EAAE,WAAW,SAAU,QAAO,IAAI,EAAE,IAAI,aAAa,EAAE,SAAS,EAAE;AACtE,SAAO,IAAI,EAAE,IAAI,cAAc,EAAE,QAAQ,MAAM;AAAA,EAAe,EAAE,SAAS,EAAE;AAC7E;AAEA,eAAsB,yBACpB,MACA,MAC2C;AAC3C,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAEvD,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,MAAI,UAAyB,CAAC;AAC9B,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO,EAAE,QAAQ,CAAC;AACvD,YAAQ,KAAK;AACb,cAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,MAAM,mBAAmB,mBAAmB,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;AAE3F,QAAM,SAAS,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AAClD,QAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,IAAI,IAAI;AAC9D,SAAO,EAAE,QAAQ,iBAAiB,QAAQ,OAAO,GAAG,KAAK;AAC3D;","names":[]}

package/dist/{health-mirror-XJAKA3EY.js → health-mirror-ONRT4DQ5.js}

@@ -1,19 +1,19 @@
 import {
   mirrorHealthFields,
   mirrorScheduleFields
-} from "./chunk-WVNDEYXL.js";
-import "./chunk-6R56OKJZ.js";
+} from "./chunk-GEUC5VGM.js";
+import "./chunk-UIITN37J.js";
 import {
   TURSO_IS_AUTHORITATIVE
-} from "./chunk-SVAAONYB.js";
+} from "./chunk-WQLNUEZL.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-3Z6X3BHU.js";
+import "./chunk-KN52PM63.js";
 import {
   openDb,
   readDbConfig
-} from "./chunk-VSGMCCGQ.js";
-import "./chunk-C3IQQKXL.js";
+} from "./chunk-6INOBNRO.js";
+import "./chunk-T76MA2FH.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/audits/health-mirror.ts
@@ -43,4 +43,4 @@ export {
   makeHealthMirrorBestEffort,
   makeScheduleMirrorBestEffort
 };
-//# sourceMappingURL=health-mirror-XJAKA3EY.js.map
+//# sourceMappingURL=health-mirror-ONRT4DQ5.js.map

package/dist/{import-airtable-TAKSN4NV.js → import-airtable-IIK2QUUF.js}

@@ -14,9 +14,9 @@ import {
   renderedHtmlUrl,
   scheduleColumnFor,
   siteValueFor
-} from "./chunk-6R56OKJZ.js";
+} from "./chunk-UIITN37J.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-3Z6X3BHU.js";
+import "./chunk-KN52PM63.js";
 export {
   EXCLUDED_WEBSITE_FIELDS,
   HEALTH_BOOLEAN,
@@ -34,4 +34,4 @@ export {
   scheduleColumnFor,
   siteValueFor
 };
-//# sourceMappingURL=import-airtable-TAKSN4NV.js.map
+//# sourceMappingURL=import-airtable-IIK2QUUF.js.map

package/dist/index.d.ts

@@ -315,14 +315,27 @@ type DependabotAlert = {
     scope: "runtime" | "development" | null;
     /** Dependency graph relationship (`dependency.relationship`), or null when GitHub reports
      *  "unknown"/nothing. "transitive" means no direct-dep bump can fix it — Renovate's vuln
-     *  alerts have no fix vehicle until the weekly lockfile-maintenance window. */
-    relationship: "direct" | "transitive" | null;
+     *  alerts have no fix vehicle until the weekly lockfile-maintenance window. "inconclusive"
+     *  is what GitHub stamps on an alert filed against a manifest its dependency graph still
+     *  tracks but the tree no longer holds (#702) — kept, never folded to null, because it is
+     *  the secondary tell for a ghost alert. */
+    relationship: "direct" | "transitive" | "inconclusive" | null;
+    /** The manifest the alert was filed against (`dependency.manifest_path`, e.g.
+     *  `package-lock.json`), or null when absent. GitHub retains a manifest after the file is
+     *  deleted from the default branch and keeps filing alerts against that frozen snapshot;
+     *  the audit resolves this path with {@link GitHubRest.manifestExists} to tell a ghost from
+     *  a live vulnerability (#702). */
+    manifestPath: string | null;
 };
 
 /** The Dependabot fetch the security audit needs, injectable for tests. The real default is
  *  built from GITHUB_TOKEN; absent token (or a site with no gitRepo) → pnpm/npm audit fallback. */
 type DependabotDeps = {
     listAlerts: (repo: string) => Promise<DependabotAlert[]>;
+    /** Whether an alert's `manifestPath` is still on the default branch. Optional: without it
+     *  every alert counts, which is the loud direction. A lookup that THROWS also counts the
+     *  alert — an API hiccup must never quietly suppress a real vulnerability (#702). */
+    manifestExists?: (repo: string, path: string) => Promise<boolean>;
 };
 declare function securityAudit(ctx: AuditContext): Promise<AuditResult>;
 
@@ -418,6 +431,84 @@ declare function onboard(site: Site, opts?: OnboardOptions): Promise<RecipeResul
  */
 declare function a11yFixturesPage(site: Site): Promise<RecipeResult>;
 
+type HealthEndpointDeps = {
+    spawn: SpawnFn;
+    /** Resolve the TARGET repo's own prettier. Injected so a test can assert the
+     *  absolute-path spawn without a populated `node_modules`. */
+    resolvePrettier?: (repoRoot: string) => Promise<string | null>;
+};
+/**
+ * Writes a resilient `src/routes/health/+server.ts` if the route doesn't already
+ * exist. The function-health audit fetches this endpoint; existing sites need it
+ * or the Report Health Gate blocks their Maintenance reports on "unknown". Operator
+ * edits to an existing endpoint are never clobbered (noop on existing file).
+ *
+ * Two heterogeneity fixes the fleet rollout exposed: (1) it detects whether the
+ * site has a `$lib/prismicio` module and writes the Prismic-free variant when it
+ * doesn't (a static import of a missing module fails the build); (2) it runs the
+ * SITE's own prettier on the written file before committing, so the file matches
+ * that site's formatting config (tabs/spaces, quote style vary fleet-wide) and
+ * doesn't red the CI format check. Prettier is best-effort — a site without it
+ * installed commits unformatted with a flag note rather than failing the recipe.
+ */
+declare function healthEndpoint(site: Site, deps?: HealthEndpointDeps): Promise<RecipeResult>;
+
+type SmokeSuiteDeps = {
+    spawn: SpawnFn;
+    /** Resolve the TARGET repo's own prettier. Injected so a test can assert the
+     *  absolute-path spawn without a populated `node_modules`. */
+    resolvePrettier?: (repoRoot: string) => Promise<string | null>;
+};
+/**
+ * Adds the smoke suite to a site: the `tests/smoke/*` specs, a `test:smoke` /
+ * `test:unit` script split, `@playwright/test`, and a `playwright.config.ts`
+ * that honors `REDDOOR_SMOKE_PORT` (R1.1). Conservative + partial-apply — every
+ * file is noop-if-exists, every `package.json` script/dep is add-if-absent, and
+ * an existing config that isn't a recognizable shared-base shape is left
+ * untouched and flagged for a manual R1.1 patch (never a destructive write).
+ * A site with no `package.json` noops (not a node project). Branch+commit per site.
+ */
+declare function smokeSuite(site: Site, deps?: SmokeSuiteDeps): Promise<RecipeResult>;
+
+type MatchHarnessOptions = {
+    /** The live reference URL the harness gates against. Required — a harness
+     *  with no reference cannot produce evidence, only an absence of errors. */
+    ref: string;
+    /** Candidate origin. Defaults to the SvelteKit dev server. */
+    cand?: string;
+    /** Breakpoint matrix. Defaults to the fleet's 1440 / 834 / 390. */
+    matrix?: number[];
+};
+type MatchHarnessDeps = {
+    spawn: SpawnFn;
+    /** Previously shipped renders per relative path; injectable so the
+     *  safe-replace path is testable before a second version exists. */
+    previous?: Readonly<Record<string, readonly string[]>>;
+    /** Previously shipped BLOCK bodies per target file; injectable for the same
+     *  reason, and empty in the shipped table until a body is superseded. */
+    blockPrevious?: Readonly<Record<string, readonly string[]>>;
+    /** Resolve the TARGET repo's own prettier. Injected so a test can assert the
+     *  absolute-path spawn without a populated `node_modules`. */
+    resolvePrettier?: (repoRoot: string) => Promise<string | null>;
+};
+/**
+ * Installs the matching harness into a site: the dev-guarded `/dev/match/[uid]`
+ * route, a `site-pages.js` scaffold and its fixture-vs-model test,
+ * `matching/harness.json` + the read layer, the round scripts, the site records,
+ * and the `.gitignore` / `.prettierignore` / `CLAUDE.md` blocks.
+ *
+ * Install-if-absent throughout. Files a site edits are never rewritten. A
+ * recipe-owned script that matches a previously shipped render is safe-replaced;
+ * one that has been hand-edited is FLAGGED in the notes and left alone.
+ *
+ * ONE EXCEPTION TO PER-FILE INDEPENDENCE: the scripts in MATCH_HARNESS_COUPLED
+ * upgrade as a SET. If any one of them is hand-edited, none of them is written,
+ * because gate.sh calls `harness.mjs --check-run` and next.mjs imports from
+ * harness.mjs — upgrading the others around a pinned one leaves a harness that
+ * cannot run at all. See the measurement on MATCH_HARNESS_COUPLED.
+ */
+declare function matchHarness(site: Site, opts: MatchHarnessOptions, deps?: MatchHarnessDeps): Promise<RecipeResult>;
+
 type InitStepResult = {
     kind: "recipe";
     result: RecipeResult;
@@ -1166,6 +1257,13 @@ type SiteMirror = {
     health: (siteId: string, fields: Record<string, unknown>) => Promise<void>;
     /** Columns that live in `sites`. */
     site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;
+    /** #645. Does Turso hold a row for this site id? A pure READ, so it is the one
+     *  op here that neither logs a SITE_MIRROR line nor throws under the freeze —
+     *  `ensure-site` uses it to decide whether to heal, and a probe that threw
+     *  would sink the very command that repairs the gap. Creds-absent answers
+     *  `true` ("assume present"), so a mirror that cannot read can never provoke
+     *  a blind insert. */
+    hasRow: (siteId: string) => Promise<boolean>;
 };
 
 type ShootOptions = {
@@ -1174,6 +1272,9 @@ type ShootOptions = {
     height: number;
     deviceScaleFactor: number;
     settleMs: number;
+    /** Extra CSS selector(s) hidden before the shutter, for a site whose consent
+     *  or interstitial UI the class/id heuristic misses. */
+    consentSelector?: string;
 };
 /** Injected browser IO. The real impl drives Playwright; tests pass a fake. */
 type Shooter = {
@@ -1187,8 +1288,11 @@ type GenerateInput = {
     slug?: string;
     /** Injected browser IO (tests). */
     shooter?: Shooter;
-    /** Per-site settle override for animation-heavy or consent-gated homepages. */
+    /** Per-site settle override for animation-heavy homepages. */
     settleMs?: number;
+    /** Extra CSS selector(s) hidden before the shutter, for consent or
+     *  interstitial UI the capture's class/id heuristic misses (#654). */
+    consentSelector?: string;
 };
 type GeneratedHeaderImage = {
     bytes: Uint8Array;
@@ -1452,6 +1556,15 @@ type SubmissionRow = {
      *  was attempted: a non-newsletter form, a spam row, a site with no destination
      *  configured, or a row written before 0005. See ingest.ts for the token grammar. */
     fanoutStatus?: string | null;
+    /** Resend's bounce classification, kept so a content rejection by the CLIENT's
+     *  mail filter can be told apart from a dead mailbox (#783). Null for a
+     *  complaint, and for every row written before migration 0018. */
+    bounceType?: string | null;
+    bounceSubType?: string | null;
+    bounceMessage?: string | null;
+    /** ISO-8601 of the operator saying "this address is not dead" (#783). The row
+     *  keeps its bounce record and stops counting toward the alarm. */
+    bounceAckAt?: string | null;
 };
 
 type ScreenOutTotals = {
@@ -1474,6 +1587,13 @@ type AttentionItem = {
     /** Stable identity for diffing: `vuln:<siteId>`, `delivery:<reportId>`. */
     key: string;
     kind: "vuln" | "delivery" | "renovate" | "lighthouse" | "ci" | "analytics" | "preflight" | "turnstile" | "notify-bounce"
+    /** #645. Leads captured by the dead-letter because their site could not be
+     *  placed — a store outage during the lookup, or (since #645) a slug with no
+     *  Turso row at all. Until this kind existed a dropped lead had NO alarm
+     *  anywhere: the queue could fill and nothing said so. Keyed by SLUG, not by
+     *  site id, because the whole point of the worst case is that the slug
+     *  resolves to no site. */
+     | "deadletter"
     /** The nightly Prismic model sweep. THREE item flavors share this kind —
      *  `prismic-drift:` (repo and Prismic diverge), `prismic-unknown:` (the check
      *  ran and could not answer), `prismic-stale:` (nobody has re-established the
@@ -1612,6 +1732,17 @@ type CockpitModel = {
      *  invisible to every fleet op, so the Needs-you feed surfaces them as amber watch
      *  rows (optional for back-compat). */
     unrecognizedStatus?: OffFleetSiteEntry[];
+    /** #786. Attention items that belong to NO site card. The grid is built from
+     *  the visible sites and items are grouped onto it by `siteName`, so an item
+     *  naming a site the fleet does not have matched nothing and was dropped —
+     *  silently, on the one surface the operator actually watches.
+     *
+     *  The collector that produces them is the one whose entire point is that the
+     *  site is missing: a dead letter for a slug resolving to no fleet row means
+     *  leads are being dropped RIGHT NOW. Kept general rather than
+     *  dead-letter-specific, so a future card-less item lands here instead of
+     *  vanishing the same way. Optional for back-compat with hand-built models. */
+    cardless?: AttentionItem[];
 };
 /** The cockpit's alarm verdict for ONE site, for the /s/<slug> page header. */
 type SiteAlarmContext = {
@@ -1702,4 +1833,4 @@ declare function loadPlate(): Promise<Uint8Array>;
 /** Read a headline overlay (transparent PNG, ink-box cropped). */
 declare function loadHeadline(kind: HeadlineKind): Promise<Uint8Array>;
 
-export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type GenerateInput, type GeneratedHeaderImage, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RefreshHeaderDeps, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, domainFromUrl, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, generateHeaderImage, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, loadHeadline, loadPlate, localPath, onboard, renderCockpitHtml, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, svelteCodemods, upgradeSvelte4to5, verifyBasicAuth };
+export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type GenerateInput, type GeneratedHeaderImage, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RefreshHeaderDeps, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, domainFromUrl, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, generateHeaderImage, healthEndpoint, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, loadHeadline, loadPlate, localPath, matchHarness, onboard, renderCockpitHtml, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, smokeSuite, svelteCodemods, upgradeSvelte4to5, verifyBasicAuth };