@reddoorla/maintenance 0.95.1 → 0.97.0

package/dist/{chunk-R53VL3RI.js.map → chunk-5CJVUPJU.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/recipes/_prettier.ts"],"sourcesContent":["import { realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { SpawnFn } from \"../audits/util/spawn.js\";\n\n/** Flag note recipes surface when best-effort formatting couldn't run, so the\n * operator knows to eyeball CI's format check for that site. */\nexport const PRETTIER_FLAG_NOTE =\n  \"could not prettier-format written files (prettier unavailable?) — verify CI formatting\";\n\n/**\n * The target repo's OWN prettier, as an absolute path, or null when it has none.\n *\n * This is how a caller obtains {@link FormatWithPrettierOptions.bin}, and a\n * recipe that has not just run `pnpm install` in the target MUST use it rather\n * than the `pnpm exec` default — see that option's comment for what `pnpm exec`\n * does to a client repo with no `node_modules` (a full unrequested install,\n * then a fall-through to the CALLING repo's prettier, then exit 0).\n *\n * `node_modules/.bin/prettier` under the repo root is the right probe rather\n * than a resolve-from-`repoRoot`: Node's algorithm walks UP, which would find\n * the maintenance repo's own prettier for any clone checked out beneath it —\n * the precise confusion this exists to end.\n *\n * Every failure collapses to null on purpose, EACCES included: unlike a read\n * whose result decides what gets written, \"I cannot tell\" here costs only\n * `formatted: false`, which is the conservative flag and the documented degraded\n * path. `realpath` doubles as the existence probe, so a DANGLING shim reads as\n * absent rather than present.\n *\n * (`src/prismic/models/write.ts` keeps a private twin of this. The duplication\n * is deliberate: that module takes formatting as an injected capability\n * specifically so it does not import from `src/recipes/`.)\n */\nexport async function resolveTargetPrettier(repoRoot: string): Promise<string | null> {\n  try {\n    return await realpath(join(repoRoot, \"node_modules\", \".bin\", \"prettier\"));\n  } catch {\n    return null;\n  }\n}\n\nexport type FormatWithPrettierOptions = {\n  /**\n   * Absolute path to the prettier executable to run, INSTEAD of going through\n   * `pnpm exec`.\n   *\n   * `pnpm exec prettier` picks the binary by resolution — the project's\n   * `node_modules/.bin` if it is populated, otherwise whatever `prettier` the\n   * ambient PATH offers. That is fine for a recipe that has just run\n   * `pnpm install` in the site, and wrong for a caller that has not: measured\n   * 2026-08-13 in a fixture repo with no `node_modules`, `pnpm exec prettier`\n   * silently ran a `pnpm install` in the target and then, in a repo that does\n   * not depend on prettier at all, fell through to the CALLING repo's prettier\n   * and exited 0 — reporting success for a format the target never did.\n   *\n   * A caller that has POSITIVELY resolved the target's own prettier passes it\n   * here, so nothing about which binary runs is left to resolution.\n   */\n  bin?: string;\n  /** Passed straight to the spawn. Also what makes {@link SpawnFn}'s default\n   *  implementation detach the child, so a timeout kills the whole process\n   *  group rather than just the wrapper. Omitted = no timeout, the historical\n   *  behaviour of this helper's two recipe callers. */\n  timeoutMs?: number;\n};\n\n/**\n * Format recipe-written files with the SITE's own prettier, so they match that\n * site's config — quote style, tabs vs spaces, and printWidth all vary across\n * the fleet, and a single hardcoded template style reds the CI format check on\n * the sites that differ.\n *\n * Best-effort by contract: returns `false` (never throws) when prettier isn't\n * installed, exits non-zero, or times out, so a recipe can commit the file\n * unformatted and flag it rather than fail the whole rollout. Files in the\n * site's `.prettierignore` are skipped by prettier itself. Returns `true`\n * immediately (no spawn) when `relPaths` is empty, so a recipe that wrote\n * nothing this run doesn't shell out.\n *\n * Only pass paths the recipe actually wrote/changed — never operator files it\n * left untouched, which must not be reformatted.\n */\nexport async function formatWithPrettier(\n  spawn: SpawnFn,\n  cwd: string,\n  relPaths: readonly string[],\n  opts: FormatWithPrettierOptions = {},\n): Promise<boolean> {\n  if (relPaths.length === 0) return true;\n  const cmd = opts.bin ?? \"pnpm\";\n  const args =\n    opts.bin !== undefined\n      ? [\"--write\", ...relPaths]\n      : [\"exec\", \"prettier\", \"--write\", ...relPaths];\n  try {\n    const res = await spawn(cmd, args, {\n      cwd,\n      ...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),\n    });\n    return res.code === 0;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,YAAY;AAKd,IAAM,qBACX;AA0BF,eAAsB,sBAAsB,UAA0C;AACpF,MAAI;AACF,WAAO,MAAM,SAAS,KAAK,UAAU,gBAAgB,QAAQ,UAAU,CAAC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA2CA,eAAsB,mBACpB,OACA,KACA,UACA,OAAkC,CAAC,GACjB;AAClB,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,MAAM,KAAK,OAAO;AACxB,QAAM,OACJ,KAAK,QAAQ,SACT,CAAC,WAAW,GAAG,QAAQ,IACvB,CAAC,QAAQ,YAAY,WAAW,GAAG,QAAQ;AACjD,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK,MAAM;AAAA,MACjC;AAAA,MACA,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACtE,CAAC;AACD,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../src/recipes/_prettier.ts"],"sourcesContent":["import { realpath } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { SpawnFn } from \"../audits/util/spawn.js\";\n\n/** Flag note recipes surface when best-effort formatting couldn't run, so the\n * operator knows to eyeball CI's format check for that site. */\nexport const PRETTIER_FLAG_NOTE =\n  \"could not prettier-format written files (prettier unavailable?) — verify CI formatting\";\n\n/**\n * The target repo's OWN prettier, as an absolute path, or null when it has none.\n *\n * This is how a caller obtains {@link FormatWithPrettierOptions.bin}, and a\n * recipe that has not just run `pnpm install` in the target MUST use it rather\n * than the `pnpm exec` default — see that option's comment for what `pnpm exec`\n * does to a client repo with no `node_modules` (a full unrequested install,\n * then a fall-through to the CALLING repo's prettier, then exit 0).\n *\n * `node_modules/.bin/prettier` under the repo root is the right probe rather\n * than a resolve-from-`repoRoot`: Node's algorithm walks UP, which would find\n * the maintenance repo's own prettier for any clone checked out beneath it —\n * the precise confusion this exists to end.\n *\n * Every failure collapses to null on purpose, EACCES included: unlike a read\n * whose result decides what gets written, \"I cannot tell\" here costs only\n * `formatted: false`, which is the conservative flag and the documented degraded\n * path. `realpath` doubles as the existence probe, so a DANGLING shim reads as\n * absent rather than present.\n *\n * (`src/prismic/models/write.ts` keeps a private twin of this. The duplication\n * is deliberate: that module takes formatting as an injected capability\n * specifically so it does not import from `src/recipes/`.)\n */\nexport async function resolveTargetPrettier(repoRoot: string): Promise<string | null> {\n  try {\n    return await realpath(join(repoRoot, \"node_modules\", \".bin\", \"prettier\"));\n  } catch {\n    return null;\n  }\n}\n\nexport type FormatWithPrettierOptions = {\n  /**\n   * Absolute path to the prettier executable to run, INSTEAD of going through\n   * `pnpm exec`.\n   *\n   * `pnpm exec prettier` picks the binary by resolution — the project's\n   * `node_modules/.bin` if it is populated, otherwise whatever `prettier` the\n   * ambient PATH offers. That is fine for a recipe that has just run\n   * `pnpm install` in the site, and wrong for a caller that has not: measured\n   * 2026-08-13 in a fixture repo with no `node_modules`, `pnpm exec prettier`\n   * silently ran a `pnpm install` in the target and then, in a repo that does\n   * not depend on prettier at all, fell through to the CALLING repo's prettier\n   * and exited 0 — reporting success for a format the target never did.\n   *\n   * A caller that has POSITIVELY resolved the target's own prettier passes it\n   * here, so nothing about which binary runs is left to resolution.\n   */\n  bin?: string;\n  /** Passed straight to the spawn. Also what makes {@link SpawnFn}'s default\n   *  implementation detach the child, so a timeout kills the whole process\n   *  group rather than just the wrapper. Omitted = no timeout. Every recipe\n   *  caller now supplies one (60s; prismic-ci first, then match-harness in\n   *  #733 and health-endpoint + smoke-suite in #737) — the option stays\n   *  optional only for the helper's contract, not because any caller wants\n   *  an unbounded formatter. */\n  timeoutMs?: number;\n};\n\n/**\n * Format recipe-written files with the SITE's own prettier, so they match that\n * site's config — quote style, tabs vs spaces, and printWidth all vary across\n * the fleet, and a single hardcoded template style reds the CI format check on\n * the sites that differ.\n *\n * Best-effort by contract: returns `false` (never throws) when prettier isn't\n * installed, exits non-zero, or times out, so a recipe can commit the file\n * unformatted and flag it rather than fail the whole rollout. Files in the\n * site's `.prettierignore` are skipped by prettier itself. Returns `true`\n * immediately (no spawn) when `relPaths` is empty, so a recipe that wrote\n * nothing this run doesn't shell out.\n *\n * Only pass paths the recipe actually wrote/changed — never operator files it\n * left untouched, which must not be reformatted.\n */\nexport async function formatWithPrettier(\n  spawn: SpawnFn,\n  cwd: string,\n  relPaths: readonly string[],\n  opts: FormatWithPrettierOptions = {},\n): Promise<boolean> {\n  if (relPaths.length === 0) return true;\n  const cmd = opts.bin ?? \"pnpm\";\n  const args =\n    opts.bin !== undefined\n      ? [\"--write\", ...relPaths]\n      : [\"exec\", \"prettier\", \"--write\", ...relPaths];\n  try {\n    const res = await spawn(cmd, args, {\n      cwd,\n      ...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),\n    });\n    return res.code === 0;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,YAAY;AAKd,IAAM,qBACX;AA0BF,eAAsB,sBAAsB,UAA0C;AACpF,MAAI;AACF,WAAO,MAAM,SAAS,KAAK,UAAU,gBAAgB,QAAQ,UAAU,CAAC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA8CA,eAAsB,mBACpB,OACA,KACA,UACA,OAAkC,CAAC,GACjB;AAClB,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,MAAM,KAAK,OAAO;AACxB,QAAM,OACJ,KAAK,QAAQ,SACT,CAAC,WAAW,GAAG,QAAQ,IACvB,CAAC,QAAQ,YAAY,WAAW,GAAG,QAAQ;AACjD,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,KAAK,MAAM;AAAA,MACjC;AAAA,MACA,GAAI,KAAK,cAAc,SAAY,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;AAAA,IACtE,CAAC;AACD,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/{chunk-S7RYFUIK.js → chunk-6PGXKN6F.js}

@@ -1,6 +1,6 @@
 import {
   withRecipe
-} from "./chunk-ZQV7UQNE.js";
+} from "./chunk-LUF52EIY.js";
 import {
   bumpDep,
   readPackageJson,
@@ -150,4 +150,4 @@ export {
   selfCaretRange,
   onboard
 };
-//# sourceMappingURL=chunk-S7RYFUIK.js.map
+//# sourceMappingURL=chunk-6PGXKN6F.js.map

package/dist/{chunk-HTABUCF4.js → chunk-6THEZQLA.js}

@@ -9,10 +9,10 @@ import {
 } from "./chunk-KJGKZLCT.js";
 import {
   applyReportTypeHeadline
-} from "./chunk-5UINJNAJ.js";
+} from "./chunk-LZMAG73U.js";
 import {
   siteSlug
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-ICSRWW5Q.js";
 
 // src/reports/send/render-email.ts
 function toInlineAttachment(a) {
@@ -143,4 +143,4 @@ export {
   renderReportFromRow,
   windowDays
 };
-//# sourceMappingURL=chunk-HTABUCF4.js.map
+//# sourceMappingURL=chunk-6THEZQLA.js.map

package/dist/chunk-A5QKNOXW.js

@@ -0,0 +1,72 @@
+// src/db/deadletter.ts
+function newDeadLetterId() {
+  return `dl_${crypto.randomUUID()}`;
+}
+async function createDeadLetter(db, input) {
+  const id = newDeadLetterId();
+  await db.insertInto("submission_deadletter").values({
+    id,
+    site_slug: input.siteSlug,
+    payload: JSON.stringify(input.payload),
+    turnstile: JSON.stringify(input.turnstile),
+    error: input.error,
+    received_at: input.receivedAt.toISOString(),
+    replayed_at: null,
+    replay_outcome: null,
+    replay_submission_id: null
+  }).execute();
+  return { id };
+}
+async function listUnreplayedDeadLetters(db) {
+  const rows = await db.selectFrom("submission_deadletter").select(["id", "site_slug", "payload", "turnstile", "error", "received_at"]).where("replayed_at", "is", null).where("abandoned_at", "is", null).orderBy("received_at", "asc").execute();
+  return rows.map((r) => ({
+    id: r.id,
+    siteSlug: r.site_slug,
+    payload: JSON.parse(r.payload),
+    turnstile: JSON.parse(r.turnstile),
+    error: r.error,
+    receivedAt: r.received_at
+  }));
+}
+async function markDeadLetterReplayed(db, id, outcome, submissionId, now) {
+  await db.updateTable("submission_deadletter").set({
+    replayed_at: now.toISOString(),
+    replay_outcome: outcome,
+    replay_submission_id: submissionId
+  }).where("id", "=", id).execute();
+}
+async function countUnreplayedDeadLettersBySlug(db) {
+  const rows = await db.selectFrom("submission_deadletter").select((eb) => ["site_slug", eb.fn.countAll().as("n")]).where("replayed_at", "is", null).where("abandoned_at", "is", null).groupBy("site_slug").execute();
+  return new Map(rows.map((r) => [r.site_slug, Number(r.n)]));
+}
+async function abandonDeadLetters(db, opts) {
+  const bySlug = opts.slug !== void 0;
+  const byId = opts.id !== void 0;
+  if (bySlug === byId) {
+    throw new Error("abandonDeadLetters: pass exactly one of slug or id");
+  }
+  const reason = opts.reason.trim();
+  if (reason === "") {
+    throw new Error("abandonDeadLetters: a non-blank reason is required");
+  }
+  let q = db.selectFrom("submission_deadletter").select("id").where("replayed_at", "is", null).where("abandoned_at", "is", null);
+  q = bySlug ? q.where("site_slug", "=", opts.slug) : q.where("id", "=", opts.id);
+  const ids = (await q.execute()).map((r) => r.id);
+  if (ids.length === 0) return [];
+  await db.updateTable("submission_deadletter").set({
+    abandoned_at: opts.now.toISOString(),
+    abandoned_by: opts.by,
+    abandoned_reason: reason
+  }).where("id", "in", ids).where("replayed_at", "is", null).where("abandoned_at", "is", null).execute();
+  return ids;
+}
+
+export {
+  newDeadLetterId,
+  createDeadLetter,
+  listUnreplayedDeadLetters,
+  markDeadLetterReplayed,
+  countUnreplayedDeadLettersBySlug,
+  abandonDeadLetters
+};
+//# sourceMappingURL=chunk-A5QKNOXW.js.map

package/dist/chunk-A5QKNOXW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/deadletter.ts"],"sourcesContent":["import type { Db } from \"./client.js\";\nimport type { TurnstileVerification } from \"../forms/turnstile.js\";\n\n/** One captured-but-unresolved lead: the site lookup threw before the normal\n *  pipeline could run (Phase 0 of #539 — persist before enrich). */\nexport type DeadLetterRow = {\n  id: string;\n  siteSlug: string;\n  /** The raw wire payload, exactly as the handler received it. */\n  payload: unknown;\n  /** The Turnstile verification computed at receipt — tokens expire in 300s,\n   *  so replay reuses this answer rather than re-verifying. */\n  turnstile: TurnstileVerification;\n  error: string;\n  receivedAt: string;\n};\n\nexport type DeadLetterInput = {\n  siteSlug: string;\n  payload: unknown;\n  turnstile: TurnstileVerification;\n  error: string;\n  receivedAt: Date;\n};\n\n/** Opaque, collision-free id (mirrors newSubmissionId). */\nexport function newDeadLetterId(): string {\n  return `dl_${crypto.randomUUID()}`;\n}\n\n/** Persist a lead the normal pipeline could not place. This is the LAST writer\n *  on the ingest path — if it throws too, both stores are down and the caller's\n *  502 is honest. */\nexport async function createDeadLetter(db: Db, input: DeadLetterInput): Promise<{ id: string }> {\n  const id = newDeadLetterId();\n  await db\n    .insertInto(\"submission_deadletter\")\n    .values({\n      id,\n      site_slug: input.siteSlug,\n      payload: JSON.stringify(input.payload),\n      turnstile: JSON.stringify(input.turnstile),\n      error: input.error,\n      received_at: input.receivedAt.toISOString(),\n      replayed_at: null,\n      replay_outcome: null,\n      replay_submission_id: null,\n    })\n    .execute();\n  return { id };\n}\n\n/** Rows not yet replayed, oldest first — replay preserves arrival order so the\n *  duplicate/velocity signals see submissions in the order they happened. */\nexport async function listUnreplayedDeadLetters(db: Db): Promise<DeadLetterRow[]> {\n  const rows = await db\n    .selectFrom(\"submission_deadletter\")\n    .select([\"id\", \"site_slug\", \"payload\", \"turnstile\", \"error\", \"received_at\"])\n    .where(\"replayed_at\", \"is\", null)\n    // #786: an abandoned row is terminal by decision — it must leave the replay\n    // queue, or the command it was meant to release stays at exit 1 forever.\n    .where(\"abandoned_at\", \"is\", null)\n    .orderBy(\"received_at\", \"asc\")\n    .execute();\n  return rows.map((r) => ({\n    id: r.id,\n    siteSlug: r.site_slug,\n    payload: JSON.parse(r.payload) as unknown,\n    turnstile: JSON.parse(r.turnstile) as TurnstileVerification,\n    error: r.error,\n    receivedAt: r.received_at,\n  }));\n}\n\n/** Mark a row's replay TERMINAL — it will never be picked up again. Only call\n *  for outcomes that re-running cannot improve (accepted, rejected). A replay\n *  whose lookup threw again is left untouched so the next run retries it — and\n *  since #645 so is `unknown-site`, because `ensure-site` can heal the missing\n *  Turso row and make the same replay succeed. */\nexport async function markDeadLetterReplayed(\n  db: Db,\n  id: string,\n  outcome: string,\n  submissionId: string | null,\n  now: Date,\n): Promise<void> {\n  await db\n    .updateTable(\"submission_deadletter\")\n    .set({\n      replayed_at: now.toISOString(),\n      replay_outcome: outcome,\n      replay_submission_id: submissionId,\n    })\n    .where(\"id\", \"=\", id)\n    .execute();\n}\n\n/** Unreplayed rows per site slug — the input to the `deadletter` attention\n *  collector (#645). Grouped in SQL rather than by listing and counting in JS:\n *  the rows carry full lead payloads, and an alarm must never pull a client's\n *  PII into a dashboard request just to learn how many rows there are. */\nexport async function countUnreplayedDeadLettersBySlug(\n  db: Db,\n): Promise<ReadonlyMap<string, number>> {\n  const rows = await db\n    .selectFrom(\"submission_deadletter\")\n    .select((eb) => [\"site_slug\", eb.fn.countAll<number>().as(\"n\")])\n    .where(\"replayed_at\", \"is\", null)\n    // #786: and out of the alarm count, which is the standing CRITICAL item.\n    .where(\"abandoned_at\", \"is\", null)\n    .groupBy(\"site_slug\")\n    .execute();\n  return new Map(rows.map((r) => [r.site_slug, Number(r.n)]));\n}\n\n/** Abandon dead letters as resolved-by-DECISION (#786).\n *\n *  The escape hatch #785 left open. `unknown-site` is deliberately non-terminal\n *  on replay so that healing and replaying are safe in either order — but that\n *  means a slug which is genuinely dead, and still deployed and posting, grows\n *  the queue without bound, holds `db replay-deadletters` at exit 1, and leaves\n *  a standing CRITICAL cockpit item. The only alternative today is deleting\n *  rows by hand, which destroys the very leads the decision was made about.\n *\n *  Targets ONE slug or ONE row id, never \"everything\": a mistyped invocation\n *  must not be able to write off the whole queue. Only rows that are still live\n *  (neither replayed nor already abandoned) are touched, which makes the call\n *  idempotent and keeps the FIRST decision — the one actually made — in place.\n *  `reason` is required and non-blank, because an undocumented write-off is the\n *  thing this exists to stop being necessary.\n *\n *  Returns the ids it abandoned, so the CLI can name them rather than print a\n *  bare count.\n */\nexport async function abandonDeadLetters(\n  db: Db,\n  opts: { slug?: string; id?: string; by: string; reason: string; now: Date },\n): Promise<string[]> {\n  const bySlug = opts.slug !== undefined;\n  const byId = opts.id !== undefined;\n  if (bySlug === byId) {\n    throw new Error(\"abandonDeadLetters: pass exactly one of slug or id\");\n  }\n  const reason = opts.reason.trim();\n  if (reason === \"\") {\n    throw new Error(\"abandonDeadLetters: a non-blank reason is required\");\n  }\n\n  // Read the target ids first so the caller can be told exactly what was\n  // abandoned; the same predicate then guards the write.\n  let q = db\n    .selectFrom(\"submission_deadletter\")\n    .select(\"id\")\n    .where(\"replayed_at\", \"is\", null)\n    .where(\"abandoned_at\", \"is\", null);\n  q = bySlug ? q.where(\"site_slug\", \"=\", opts.slug!) : q.where(\"id\", \"=\", opts.id!);\n  const ids = (await q.execute()).map((r) => r.id);\n  if (ids.length === 0) return [];\n\n  await db\n    .updateTable(\"submission_deadletter\")\n    .set({\n      abandoned_at: opts.now.toISOString(),\n      abandoned_by: opts.by,\n      abandoned_reason: reason,\n    })\n    .where(\"id\", \"in\", ids)\n    // Re-asserted on the write: between the read and here nothing else runs\n    // (libSQL is single-writer), but the guard costs nothing and keeps the\n    // write's meaning legible on its own.\n    .where(\"replayed_at\", \"is\", null)\n    .where(\"abandoned_at\", \"is\", null)\n    .execute();\n  return ids;\n}\n"],"mappings":";AA0BO,SAAS,kBAA0B;AACxC,SAAO,MAAM,OAAO,WAAW,CAAC;AAClC;AAKA,eAAsB,iBAAiB,IAAQ,OAAiD;AAC9F,QAAM,KAAK,gBAAgB;AAC3B,QAAM,GACH,WAAW,uBAAuB,EAClC,OAAO;AAAA,IACN;AAAA,IACA,WAAW,MAAM;AAAA,IACjB,SAAS,KAAK,UAAU,MAAM,OAAO;AAAA,IACrC,WAAW,KAAK,UAAU,MAAM,SAAS;AAAA,IACzC,OAAO,MAAM;AAAA,IACb,aAAa,MAAM,WAAW,YAAY;AAAA,IAC1C,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,EACxB,CAAC,EACA,QAAQ;AACX,SAAO,EAAE,GAAG;AACd;AAIA,eAAsB,0BAA0B,IAAkC;AAChF,QAAM,OAAO,MAAM,GAChB,WAAW,uBAAuB,EAClC,OAAO,CAAC,MAAM,aAAa,WAAW,aAAa,SAAS,aAAa,CAAC,EAC1E,MAAM,eAAe,MAAM,IAAI,EAG/B,MAAM,gBAAgB,MAAM,IAAI,EAChC,QAAQ,eAAe,KAAK,EAC5B,QAAQ;AACX,SAAO,KAAK,IAAI,CAAC,OAAO;AAAA,IACtB,IAAI,EAAE;AAAA,IACN,UAAU,EAAE;AAAA,IACZ,SAAS,KAAK,MAAM,EAAE,OAAO;AAAA,IAC7B,WAAW,KAAK,MAAM,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE;AAAA,IACT,YAAY,EAAE;AAAA,EAChB,EAAE;AACJ;AAOA,eAAsB,uBACpB,IACA,IACA,SACA,cACA,KACe;AACf,QAAM,GACH,YAAY,uBAAuB,EACnC,IAAI;AAAA,IACH,aAAa,IAAI,YAAY;AAAA,IAC7B,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,EACxB,CAAC,EACA,MAAM,MAAM,KAAK,EAAE,EACnB,QAAQ;AACb;AAMA,eAAsB,iCACpB,IACsC;AACtC,QAAM,OAAO,MAAM,GAChB,WAAW,uBAAuB,EAClC,OAAO,CAAC,OAAO,CAAC,aAAa,GAAG,GAAG,SAAiB,EAAE,GAAG,GAAG,CAAC,CAAC,EAC9D,MAAM,eAAe,MAAM,IAAI,EAE/B,MAAM,gBAAgB,MAAM,IAAI,EAChC,QAAQ,WAAW,EACnB,QAAQ;AACX,SAAO,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5D;AAqBA,eAAsB,mBACpB,IACA,MACmB;AACnB,QAAM,SAAS,KAAK,SAAS;AAC7B,QAAM,OAAO,KAAK,OAAO;AACzB,MAAI,WAAW,MAAM;AACnB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,QAAM,SAAS,KAAK,OAAO,KAAK;AAChC,MAAI,WAAW,IAAI;AACjB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAIA,MAAI,IAAI,GACL,WAAW,uBAAuB,EAClC,OAAO,IAAI,EACX,MAAM,eAAe,MAAM,IAAI,EAC/B,MAAM,gBAAgB,MAAM,IAAI;AACnC,MAAI,SAAS,EAAE,MAAM,aAAa,KAAK,KAAK,IAAK,IAAI,EAAE,MAAM,MAAM,KAAK,KAAK,EAAG;AAChF,QAAM,OAAO,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE;AAC/C,MAAI,IAAI,WAAW,EAAG,QAAO,CAAC;AAE9B,QAAM,GACH,YAAY,uBAAuB,EACnC,IAAI;AAAA,IACH,cAAc,KAAK,IAAI,YAAY;AAAA,IACnC,cAAc,KAAK;AAAA,IACnB,kBAAkB;AAAA,EACpB,CAAC,EACA,MAAM,MAAM,MAAM,GAAG,EAIrB,MAAM,eAAe,MAAM,IAAI,EAC/B,MAAM,gBAAgB,MAAM,IAAI,EAChC,QAAQ;AACX,SAAO;AACT;","names":[]}

package/dist/chunk-ASLDCWBF.js

@@ -0,0 +1,41 @@
+// src/reports/report-row.ts
+var REPORT_TYPES = ["Maintenance", "Testing", "Launch", "Announcement"];
+function toReportType(raw) {
+  if (raw && REPORT_TYPES.includes(raw)) return raw;
+  if (raw)
+    console.warn(`[reports] unknown Report type ${JSON.stringify(raw)} \u2014 treating as Maintenance`);
+  return "Maintenance";
+}
+function isPendingApproval(r) {
+  return r.draftReady && !r.approvedToSend && r.sentAt === null;
+}
+function parseAutoEvidence(raw) {
+  if (typeof raw !== "string" || !raw.trim()) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+  const out = {};
+  for (const [field, v] of Object.entries(parsed)) {
+    if (!v || typeof v !== "object") continue;
+    const o = v;
+    if (o.result !== "pass" && o.result !== "fail" && o.result !== "unknown" && o.result !== "n/a")
+      continue;
+    out[field] = {
+      result: o.result,
+      checkedAt: typeof o.checkedAt === "string" ? o.checkedAt : null,
+      note: typeof o.note === "string" ? o.note : ""
+    };
+  }
+  return Object.keys(out).length > 0 ? out : null;
+}
+
+export {
+  toReportType,
+  isPendingApproval,
+  parseAutoEvidence
+};
+//# sourceMappingURL=chunk-ASLDCWBF.js.map

package/dist/chunk-ASLDCWBF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/report-row.ts"],"sourcesContent":["/**\n * The report-row model and its pure, vendor-neutral coercers.\n *\n * `ReportRow` is what BOTH readers return — `mapRow` over an Airtable record\n * (`src/reports/airtable/reports.ts`) and the Turso report reader in\n * `src/db/fleet-state.ts`. Moved out of the Airtable module in #539 Phase 6\n * step 1 (#646) so the Turso read path does not depend on the directory Phase 6\n * deletes. `src/reports/airtable/reports.ts` re-exports every name.\n */\nimport type { ReportType, LighthouseScores } from \"./types.js\";\nimport type { EvidenceRecord } from \"./auto-tick.js\";\n\nconst REPORT_TYPES: readonly ReportType[] = [\"Maintenance\", \"Testing\", \"Launch\", \"Announcement\"];\n\n/** Coerce the Airtable `Report type` (a single-select string) to a known\n *  ReportType. A bare `as ReportType` cast is a compile-time lie: if the\n *  single-select gains an unexpected option, the bad value flows to render.ts,\n *  where `reportType === \"Launch\"` silently falls through to the Maintenance\n *  template. Validate at the boundary; warn + default to \"Maintenance\" so an\n *  unknown type is VISIBLE in the logs rather than silently mis-templated. */\nexport function toReportType(raw: string | undefined): ReportType {\n  if (raw && (REPORT_TYPES as readonly string[]).includes(raw)) return raw as ReportType;\n  if (raw)\n    console.warn(`[reports] unknown Report type ${JSON.stringify(raw)} — treating as Maintenance`);\n  return \"Maintenance\";\n}\n\nexport type DeliveryStatus = \"pending\" | \"delivered\" | \"bounced\" | \"complained\";\n\nexport type ReportRow = {\n  id: string;\n  reportId: string;\n  siteId: string;\n  reportType: ReportType;\n  /** UTC `YYYY-MM` recurrence key (idempotency for search-before-create). Null on legacy rows. */\n  period: string | null;\n  periodStart: string | null;\n  periodEnd: string | null;\n  completedOn: string | null;\n  lighthouse: LighthouseScores | null;\n  gaUsersCurrent: number | null;\n  gaUsersPrevious: number | null;\n  searchFoundPage1: boolean | null;\n  searchPosition: number | null;\n  lastTestedDate: string | null;\n  commentary: string | null;\n  subjectOverride: string | null;\n  draftReady: boolean;\n  approvedToSend: boolean;\n  sentAt: string | null;\n  approvedAt: string | null;\n  approvedBy: string | null;\n  deliveryStatus: DeliveryStatus;\n  renderedHtmlAttachment: { url: string; filename: string } | null;\n  /** Read out of the Resend response and stored in a hidden field; needed for webhook reconciliation. */\n  resendMessageId: string | null;\n  /** The 12 operator-checklist checkboxes, keyed by their Airtable column name (ALL_CHECKLIST_FIELDS);\n   *  missing/false cells read false. Maintenance/Testing reports gate approve+send on the relevant\n   *  subset (see src/reports/checklist.ts). */\n  checklist: Record<string, boolean>;\n  /** Snapshot of the auto-tick evidence at draft time, keyed by checklist field → evidence\n   *  record. Null when the report predates auto-tick or carried no auto-checked items. This is the\n   *  health gate's source of truth: `isHealthGateClear`/`gatingHealth` (src/reports/checklist.ts)\n   *  read these evidence records, NOT the checklist booleans — and also drive the dashboard badges. */\n  autoEvidence: Record<string, EvidenceRecord> | null;\n  /** Logged send-anyway override (Phase 10). When `sendOverride` is true AND `overrideReason` is\n   *  non-empty, the health gate is bypassed for THIS report; `overrideBy`/`overrideAt` are the\n   *  audit trail (parallel to approvedBy/approvedAt). Missing cells read false/null. */\n  sendOverride: boolean;\n  overrideReason: string | null;\n  overrideBy: string | null;\n  overrideAt: string | null;\n};\n\n/**\n * The \"Ready for your yes\" gate: Draft ready ∧ ¬Approved to send ∧ Sent at BLANK.\n * The single source of truth for \"pending the operator's approval\" — `listPendingApproval`,\n * `runDigest`'s ready-list, the per-site dashboard, and the fleet cockpit all key off this\n * one predicate so the surfaces can't drift.\n */\nexport function isPendingApproval(r: ReportRow): boolean {\n  return r.draftReady && !r.approvedToSend && r.sentAt === null;\n}\n\n/**\n * Parse the `Checklist auto-evidence` JSON field → a field→EvidenceRecord map, or null when\n * absent/malformed. Permissive on inner shape (it's display-only — a bad blob just yields null,\n * never throws), mirroring `parseNotifyRouting`.\n */\nexport function parseAutoEvidence(raw: unknown): Record<string, EvidenceRecord> | null {\n  if (typeof raw !== \"string\" || !raw.trim()) return null;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) return null;\n  // Validate each entry's inner shape (it drives display) — drop any record whose `result` isn't\n  // one of the four literals, and coerce `note`/`checkedAt` to safe types. A garbage blob yields\n  // null rather than a record that would render \"auto: undefined\" on the dashboard.\n  const out: Record<string, EvidenceRecord> = {};\n  for (const [field, v] of Object.entries(parsed as Record<string, unknown>)) {\n    if (!v || typeof v !== \"object\") continue;\n    const o = v as Record<string, unknown>;\n    if (o.result !== \"pass\" && o.result !== \"fail\" && o.result !== \"unknown\" && o.result !== \"n/a\")\n      continue;\n    out[field] = {\n      result: o.result,\n      checkedAt: typeof o.checkedAt === \"string\" ? o.checkedAt : null,\n      note: typeof o.note === \"string\" ? o.note : \"\",\n    };\n  }\n  return Object.keys(out).length > 0 ? out : null;\n}\n"],"mappings":";AAYA,IAAM,eAAsC,CAAC,eAAe,WAAW,UAAU,cAAc;AAQxF,SAAS,aAAa,KAAqC;AAChE,MAAI,OAAQ,aAAmC,SAAS,GAAG,EAAG,QAAO;AACrE,MAAI;AACF,YAAQ,KAAK,iCAAiC,KAAK,UAAU,GAAG,CAAC,iCAA4B;AAC/F,SAAO;AACT;AAuDO,SAAS,kBAAkB,GAAuB;AACvD,SAAO,EAAE,cAAc,CAAC,EAAE,kBAAkB,EAAE,WAAW;AAC3D;AAOO,SAAS,kBAAkB,KAAqD;AACrF,MAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,EAAG,QAAO;AACnD,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AAI3E,QAAM,MAAsC,CAAC;AAC7C,aAAW,CAAC,OAAO,CAAC,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC1E,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU;AACjC,UAAM,IAAI;AACV,QAAI,EAAE,WAAW,UAAU,EAAE,WAAW,UAAU,EAAE,WAAW,aAAa,EAAE,WAAW;AACvF;AACF,QAAI,KAAK,IAAI;AAAA,MACX,QAAQ,EAAE;AAAA,MACV,WAAW,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAAA,MAC3D,MAAM,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,IAC9C;AAAA,EACF;AACA,SAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAC7C;","names":[]}

package/dist/{chunk-CWXTNPNZ.js → chunk-AYDQQBNG.js}

@@ -1,6 +1,6 @@
 import {
   withRecipe
-} from "./chunk-ZQV7UQNE.js";
+} from "./chunk-LUF52EIY.js";
 import {
   readPackageJson,
   writePackageJson
@@ -32,7 +32,7 @@ function rewriteScriptsForPnpm(scripts) {
 }
 
 // src/recipes/convert-to-pnpm.ts
-var DEFAULT_PNPM_VERSION = "10.33.1";
+var DEFAULT_PNPM_VERSION = "11.11.0";
 async function exists(path) {
   try {
     await stat(path);
@@ -96,4 +96,4 @@ async function convertToPnpm(site, opts = {}) {
 export {
   convertToPnpm
 };
-//# sourceMappingURL=chunk-CWXTNPNZ.js.map
+//# sourceMappingURL=chunk-AYDQQBNG.js.map

package/dist/chunk-AYDQQBNG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recipes/convert-to-pnpm.ts","../src/recipes/convert-to-pnpm/script-rewrites.ts"],"sourcesContent":["import { rm, stat } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { RecipeResult, Site } from \"../types.js\";\nimport { readPackageJson, writePackageJson, type PackageJsonLike } from \"../util/pkg.js\";\nimport { defaultSpawn, type SpawnFn } from \"../audits/util/spawn.js\";\nimport { rewriteScriptsForPnpm } from \"./convert-to-pnpm/script-rewrites.js\";\nimport { withRecipe } from \"./_with-recipe.js\";\n\nexport type ConvertToPnpmOptions = {\n  spawn?: SpawnFn;\n  /** Version string written into package.json's `packageManager` field.\n   *  Defaults to the version baked into this package's own pnpm setup. */\n  pnpmVersion?: string;\n};\n\n/** Version this recipe stamps into a converted site's `packageManager` field.\n *  Sites can override it per-recipe via `pnpmVersion`.\n *\n *  Hand-typed, and therefore WATCHED: the guard in\n *  `tests/recipes/convert-to-pnpm.test.ts` reads this package's own\n *  `packageManager` field and fails the moment the two disagree. It is exported\n *  for that guard — a constant nothing can read is a constant nothing can check.\n *\n *  The comment this replaces asserted the value was \"kept in sync with\n *  package.json\". It was not. It read `10.33.1` for roughly a year while this\n *  repo and all 24 pinned fleet repos ran `pnpm@11.11.0`, so every site the\n *  recipe converted was born a year behind the fleet (#835). Nothing caught it,\n *  because a stale pin is a plausible number whose install succeeds. */\nexport const DEFAULT_PNPM_VERSION = \"11.11.0\";\n\nasync function exists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\ntype Plan = { hasNpmLock: boolean; hasYarnLock: boolean };\n\nexport async function convertToPnpm(\n  site: Site,\n  opts: ConvertToPnpmOptions = {},\n): Promise<RecipeResult> {\n  const spawn = opts.spawn ?? defaultSpawn;\n  const pnpmVersion = opts.pnpmVersion ?? DEFAULT_PNPM_VERSION;\n\n  const pnpmLockPath = join(site.path, \"pnpm-lock.yaml\");\n  const npmLockPath = join(site.path, \"package-lock.json\");\n  const yarnLockPath = join(site.path, \"yarn.lock\");\n\n  return withRecipe<Plan>({\n    name: \"convert-to-pnpm\",\n    site,\n    plan: async () => {\n      if (await exists(pnpmLockPath)) {\n        return { kind: \"noop\", notes: \"site already has pnpm-lock.yaml\" };\n      }\n      const hasNpmLock = await exists(npmLockPath);\n      const hasYarnLock = await exists(yarnLockPath);\n      if (!hasNpmLock && !hasYarnLock) {\n        return {\n          kind: \"noop\",\n          notes: \"no convertible lockfile (package-lock.json or yarn.lock) at site root\",\n        };\n      }\n      return { kind: \"apply\", plan: { hasNpmLock, hasYarnLock } };\n    },\n    apply: async ({ hasNpmLock, hasYarnLock }, { commit, cwd }) => {\n      // Step 1: remove the npm/yarn lockfile(s).\n      if (hasNpmLock) await rm(npmLockPath, { force: true });\n      if (hasYarnLock) await rm(yarnLockPath, { force: true });\n      const sourceLock = hasNpmLock ? \"package-lock.json\" : \"yarn.lock\";\n      await commit(`chore(pnpm): remove ${sourceLock}`);\n\n      // Step 2: pin packageManager + rewrite scripts (single commit — they\n      // both touch package.json).\n      const pkgPath = join(cwd, \"package.json\");\n      const pkg = await readPackageJson(pkgPath);\n      const next: PackageJsonLike = { ...pkg, packageManager: `pnpm@${pnpmVersion}` };\n\n      if (pkg.scripts && typeof pkg.scripts === \"object\") {\n        const { scripts: rewritten, changedCount } = rewriteScriptsForPnpm(\n          pkg.scripts as Record<string, string>,\n        );\n        if (changedCount > 0) {\n          next.scripts = rewritten;\n        }\n      }\n\n      await writePackageJson(pkgPath, next);\n      await commit(\"chore(pnpm): pin packageManager + rewrite npm scripts\");\n\n      // Step 3: remove any existing flat node_modules from a prior npm/yarn run\n      // before pnpm installs. Sharing a node_modules across package managers\n      // produces phantom-dep resolution issues (pnpm's nested layout disagrees\n      // with what's already on disk). node_modules is gitignored on every\n      // reddoor site so this doesn't dirty the tree.\n      await rm(join(cwd, \"node_modules\"), { recursive: true, force: true });\n\n      // Step 4: run pnpm install to materialize pnpm-lock.yaml.\n      const installResult = await spawn(\"pnpm\", [\"install\"], { cwd, streaming: true });\n      if (installResult.code !== 0) {\n        return { kind: \"failed\", notes: `pnpm install failed (exit ${installResult.code})` };\n      }\n\n      await commit(\"chore(pnpm): add pnpm-lock.yaml\");\n      return { kind: \"ok\" };\n    },\n  });\n}\n","/**\n * Rewrite a single package.json script value to use pnpm equivalents\n * where the substitution is safe. Conservative on purpose: we only touch\n * patterns whose semantics are identical under pnpm.\n *\n * - `npm run <token>` → `pnpm run <token>` (identical behavior)\n * - `npx <token>` → `pnpm dlx <token>` (identical behavior in pnpm 7+)\n *\n * Intentionally NOT rewritten:\n * - `npm install`, `npm install <pkg>`, `npm install --save-dev <pkg>` —\n *   subtle flag mapping (e.g. `--save-dev` → `-D`) and edge cases like\n *   `--save-exact` / `--save-optional`. Better to leave for an operator\n *   eyeball than to silently mis-translate.\n * - Hyphenated identifiers like `npm-check-updates` (word-boundary protected).\n * - `concurrently \"npm:scriptName\"` shorthand syntax — it isn't actually\n *   running npm; it's a concurrently-specific script reference.\n */\nexport function rewriteScriptForPnpm(script: string): string {\n  let out = script;\n  // `npm run <name>` → `pnpm run <name>`. \\b before npm prevents\n  // matching inside hyphenated identifiers. Lookahead `(?=\\s)` after run\n  // ensures we don't match `runner`.\n  out = out.replace(/\\bnpm run(?=\\s)/g, \"pnpm run\");\n  // `npx ` → `pnpm dlx `. \\b before npx prevents matching `npx-something`.\n  out = out.replace(/\\bnpx(?=\\s)/g, \"pnpm dlx\");\n  return out;\n}\n\n/**\n * Rewrite every entry in a package.json `scripts` map. Returns the new\n * map alongside a count of scripts that were actually changed.\n */\nexport function rewriteScriptsForPnpm(scripts: Record<string, string>): {\n  scripts: Record<string, string>;\n  changedCount: number;\n} {\n  const next: Record<string, string> = {};\n  let changedCount = 0;\n  for (const [name, value] of Object.entries(scripts)) {\n    const rewritten = rewriteScriptForPnpm(value);\n    next[name] = rewritten;\n    if (rewritten !== value) changedCount++;\n  }\n  return { scripts: next, changedCount };\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAS,IAAI,YAAY;AACzB,SAAS,YAAY;;;ACgBd,SAAS,qBAAqB,QAAwB;AAC3D,MAAI,MAAM;AAIV,QAAM,IAAI,QAAQ,oBAAoB,UAAU;AAEhD,QAAM,IAAI,QAAQ,gBAAgB,UAAU;AAC5C,SAAO;AACT;AAMO,SAAS,sBAAsB,SAGpC;AACA,QAAM,OAA+B,CAAC;AACtC,MAAI,eAAe;AACnB,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACnD,UAAM,YAAY,qBAAqB,KAAK;AAC5C,SAAK,IAAI,IAAI;AACb,QAAI,cAAc,MAAO;AAAA,EAC3B;AACA,SAAO,EAAE,SAAS,MAAM,aAAa;AACvC;;;ADhBO,IAAM,uBAAuB;AAEpC,eAAe,OAAO,MAAgC;AACpD,MAAI;AACF,UAAM,KAAK,IAAI;AACf,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,cACpB,MACA,OAA6B,CAAC,GACP;AACvB,QAAM,QAAQ,KAAK,SAAS;AAC5B,QAAM,cAAc,KAAK,eAAe;AAExC,QAAM,eAAe,KAAK,KAAK,MAAM,gBAAgB;AACrD,QAAM,cAAc,KAAK,KAAK,MAAM,mBAAmB;AACvD,QAAM,eAAe,KAAK,KAAK,MAAM,WAAW;AAEhD,SAAO,WAAiB;AAAA,IACtB,MAAM;AAAA,IACN;AAAA,IACA,MAAM,YAAY;AAChB,UAAI,MAAM,OAAO,YAAY,GAAG;AAC9B,eAAO,EAAE,MAAM,QAAQ,OAAO,kCAAkC;AAAA,MAClE;AACA,YAAM,aAAa,MAAM,OAAO,WAAW;AAC3C,YAAM,cAAc,MAAM,OAAO,YAAY;AAC7C,UAAI,CAAC,cAAc,CAAC,aAAa;AAC/B,eAAO;AAAA,UACL,MAAM;AAAA,UACN,OAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,EAAE,MAAM,SAAS,MAAM,EAAE,YAAY,YAAY,EAAE;AAAA,IAC5D;AAAA,IACA,OAAO,OAAO,EAAE,YAAY,YAAY,GAAG,EAAE,QAAQ,IAAI,MAAM;AAE7D,UAAI,WAAY,OAAM,GAAG,aAAa,EAAE,OAAO,KAAK,CAAC;AACrD,UAAI,YAAa,OAAM,GAAG,cAAc,EAAE,OAAO,KAAK,CAAC;AACvD,YAAM,aAAa,aAAa,sBAAsB;AACtD,YAAM,OAAO,uBAAuB,UAAU,EAAE;AAIhD,YAAM,UAAU,KAAK,KAAK,cAAc;AACxC,YAAM,MAAM,MAAM,gBAAgB,OAAO;AACzC,YAAM,OAAwB,EAAE,GAAG,KAAK,gBAAgB,QAAQ,WAAW,GAAG;AAE9E,UAAI,IAAI,WAAW,OAAO,IAAI,YAAY,UAAU;AAClD,cAAM,EAAE,SAAS,WAAW,aAAa,IAAI;AAAA,UAC3C,IAAI;AAAA,QACN;AACA,YAAI,eAAe,GAAG;AACpB,eAAK,UAAU;AAAA,QACjB;AAAA,MACF;AAEA,YAAM,iBAAiB,SAAS,IAAI;AACpC,YAAM,OAAO,uDAAuD;AAOpE,YAAM,GAAG,KAAK,KAAK,cAAc,GAAG,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAGpE,YAAM,gBAAgB,MAAM,MAAM,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAK,WAAW,KAAK,CAAC;AAC/E,UAAI,cAAc,SAAS,GAAG;AAC5B,eAAO,EAAE,MAAM,UAAU,OAAO,6BAA6B,cAAc,IAAI,IAAI;AAAA,MACrF;AAEA,YAAM,OAAO,iCAAiC;AAC9C,aAAO,EAAE,MAAM,KAAK;AAAA,IACtB;AAAA,EACF,CAAC;AACH;","names":[]}

package/dist/{chunk-WVNDEYXL.js → chunk-BINFZQ2T.js}

@@ -5,11 +5,11 @@ import {
   mapWebsiteRecord,
   scheduleColumnFor,
   siteValueFor
-} from "./chunk-6R56OKJZ.js";
+} from "./chunk-LF2TJN4X.js";
 import {
   parseAutoEvidence,
   toReportType
-} from "./chunk-F3JWOPTG.js";
+} from "./chunk-ASLDCWBF.js";
 import {
   MAINTENANCE_CHECKLIST,
   TESTING_CHECKLIST
@@ -22,7 +22,7 @@ import {
   toPrismicModelsVerdict,
   toVerdict,
   trimToNull
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-ICSRWW5Q.js";
 
 // src/db/fleet-state.ts
 import { sql } from "kysely";
@@ -199,6 +199,35 @@ async function mirrorHealthFields(db, siteId, fields) {
   const res = await db.updateTable("site_health").set(patch).where("site_id", "=", siteId).executeTakeFirst();
   return res.numUpdatedRows > 0n;
 }
+async function insertSiteRows(db, site, computedAt) {
+  await db.insertInto("sites").values({
+    id: site.id,
+    slug: site.slug,
+    name: site.name,
+    status: site.status,
+    url: site.url,
+    point_of_contact: site.pointOfContact,
+    git_repo: site.gitRepo,
+    require_turnstile: 0
+  }).execute();
+  await db.insertInto("site_health").values({ site_id: site.id }).execute();
+  await db.insertInto("site_schedule").values({
+    site_id: site.id,
+    next_maintenance_at: null,
+    next_testing_at: null,
+    computed_at: computedAt
+  }).execute();
+}
+async function updateSiteIdentity(db, siteId, patch) {
+  const set = {};
+  if (patch.name !== void 0) set.name = patch.name;
+  if (patch.url !== void 0) set.url = patch.url;
+  if (patch.pointOfContact !== void 0) set.point_of_contact = patch.pointOfContact;
+  if (patch.gitRepo !== void 0) set.git_repo = patch.gitRepo;
+  if (Object.keys(set).length === 0) return true;
+  const res = await db.updateTable("sites").set(set).where("id", "=", siteId).executeTakeFirst();
+  return res.numUpdatedRows > 0n;
+}
 async function mirrorScheduleFields(db, siteId, fields, computedAt) {
   const patch = {};
   for (const [field, value] of Object.entries(fields)) {
@@ -218,6 +247,10 @@ async function getSiteBySlug(db, slug) {
   const r = await joined(db).where("sites.slug", "=", slug).executeTakeFirst();
   return r ? rowFromJoined(r) : null;
 }
+async function siteRowExists(db, siteId) {
+  const r = await db.selectFrom("sites").select("id").where("id", "=", siteId).executeTakeFirst();
+  return r !== void 0;
+}
 async function getSiteById(db, id) {
   const r = await joined(db).where("sites.id", "=", id).executeTakeFirst();
   return r ? rowFromJoined(r) : null;
@@ -328,9 +361,14 @@ async function listReportsForSite(db, siteId) {
   const rows = await db.selectFrom("reports").select(REPORT_LIST_COLUMNS).select(HAS_RENDERED_HTML).where("site_id", "=", siteId).orderBy("period_start", "desc").orderBy("id").execute();
   return rows.map((r) => reportRowFromDb(r, r.has_rendered_html !== 0));
 }
+async function listSendableReports(db) {
+  const rows = await db.selectFrom("reports").select(REPORT_LIST_COLUMNS).select(HAS_RENDERED_HTML).where("draft_ready", "=", 1).where("approved_to_send", "=", 1).where("sent_at", "is", null).orderBy("period_start", "desc").orderBy("id").execute();
+  return rows.map((r) => reportRowFromDb(r, r.has_rendered_html !== 0));
+}
 async function mirrorReportPatch(db, reportId, patch) {
-  if (Object.keys(patch).length === 0) return;
-  await db.updateTable("reports").set(patch).where("id", "=", reportId).execute();
+  if (Object.keys(patch).length === 0) return true;
+  const res = await db.updateTable("reports").set(patch).where("id", "=", reportId).executeTakeFirst();
+  return res.numUpdatedRows > 0n;
 }
 async function mirrorReportInsert(db, rec) {
   const row = mapReportRecord(rec, null);
@@ -338,6 +376,9 @@ async function mirrorReportInsert(db, rec) {
   void _rh;
   await db.insertInto("reports").values(row).onConflict((oc) => oc.column("id").doUpdateSet(rowSansHtml)).execute();
 }
+async function insertReportRow(db, rec) {
+  await db.insertInto("reports").values(mapReportRecord(rec, null)).execute();
+}
 async function storeRenderedHtml(db, reportId, html) {
   await db.updateTable("reports").set({ rendered_html: html }).where("id", "=", reportId).execute();
 }
@@ -345,6 +386,10 @@ async function getReportById(db, id) {
   const r = await db.selectFrom("reports").selectAll().where("id", "=", id).executeTakeFirst();
   return r ? reportRowFromDb(r, r.rendered_html !== null) : null;
 }
+async function findReportByMessageId(db, messageId) {
+  const r = await db.selectFrom("reports").select(REPORT_LIST_COLUMNS).select(HAS_RENDERED_HTML).where("resend_message_id", "=", messageId).limit(1).executeTakeFirst();
+  return r ? reportRowFromDb(r, r.has_rendered_html !== 0) : null;
+}
 async function getReportHtml(db, id) {
   const r = await db.selectFrom("reports").select(["rendered_html", "report_id"]).where("id", "=", id).executeTakeFirst();
   if (!r || r.rendered_html === null) return null;
@@ -356,17 +401,23 @@ export {
   mirrorSiteFields,
   mirrorSiteInsert,
   mirrorHealthFields,
+  insertSiteRows,
+  updateSiteIdentity,
   mirrorScheduleFields,
   getSiteBySlug,
+  siteRowExists,
   getSiteById,
   listSites,
   REPORT_LIST_COLUMNS,
   listAllReports,
   listReportsForSite,
+  listSendableReports,
   mirrorReportPatch,
   mirrorReportInsert,
+  insertReportRow,
   storeRenderedHtml,
   getReportById,
+  findReportByMessageId,
   getReportHtml
 };
-//# sourceMappingURL=chunk-WVNDEYXL.js.map
+//# sourceMappingURL=chunk-BINFZQ2T.js.map

package/dist/chunk-BINFZQ2T.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/fleet-state.ts"],"sourcesContent":["/** Phase 2 of the Airtable → Turso migration (#539): the fleet-state READ layer.\n *\n *  Returns the exact `WebsiteRow` shape the Airtable module returns, so every\n *  repoint is an import-only swap at a composition root — the same trick\n *  listSubmissionsForSite used for the hybrid-db cutover. The raw values live\n *  in `sites`/`site_health`/`site_schedule` (written by the importer / hourly\n *  sync); coercion to `WebsiteRow` happens HERE, reusing the same coercers the\n *  Airtable module's `mapRow` applies (`toVerdict`, `toFrequency`,\n *  `parseNotifyRouting`, `parseSecurityAdvisories`, `trimToNull`) so there is one\n *  truth for each. Those live in `src/fleet/site-row.ts` — outside the Airtable\n *  directory Phase 6 deletes (#646 step 1; pinned by\n *  tests/db/no-airtable-value-imports.test.ts).\n *\n *  The equivalence instrument (tests/db/fleet-state.test.ts) pins this module\n *  to `mapRow` field-by-field: for a fixture record, `mapRow(rec)` must deep-\n *  equal the row read back through here after an import. A new WebsiteRow\n *  field fails that test until this module carries it.\n *\n *  `headerImage` is the ONE deliberate exception (design D5): Airtable stopped\n *  being its source — the bytes belong in `sites.header_image*`. Those columns\n *  ARE now written: the header-image CLI dual-writes on every generation and the\n *  one-shot backfill copied the rest, so as of 2026-08-25 production carries a\n *  BLOB for 12 of the 13 maintained sites (the 13th, LA Homelessness Youth, has\n *  no header image in Airtable either — its reports are blocked at approve for\n *  exactly that). An earlier version of this comment said the columns were empty\n *  fleet-wide; that was true when written and is no longer.\n *\n *  The `url` is \"\" because the bytes live in the row itself, not behind a signed\n *  URL — which is why `url` is NOT a usable handle. A consumer that needs the\n *  image calls `loadHeaderImage(db, siteId)` for the bytes; the send path still\n *  fetches the Airtable attachment, and moving it over is its own change.\n */\nimport { sql, type Selectable, type Updateable } from \"kysely\";\nimport type { Db } from \"./client.js\";\nimport type { ReportsTable, SiteHealthTable, SiteScheduleTable, SitesTable } from \"./schema.js\";\nimport {\n  SITE_FIELDS,\n  siteValueFor,\n  healthColumnFor,\n  scheduleColumnFor,\n  mapReportRecord,\n  mapWebsiteRecord,\n  type RawRecord,\n} from \"./import-airtable.js\";\nimport type { AirtableCellValue } from \"../reports/airtable/websites.js\";\nimport {\n  toReportType,\n  parseAutoEvidence,\n  type ReportRow,\n  type DeliveryStatus,\n} from \"../reports/report-row.js\";\nimport { MAINTENANCE_CHECKLIST, TESTING_CHECKLIST } from \"../reports/checklist.js\";\nimport { canonicalizeStatus } from \"../fleet/site-status.js\";\nimport {\n  parseNotifyRouting,\n  parseSecurityAdvisories,\n  toFrequency,\n  toPrismicModelsVerdict,\n  toVerdict,\n  trimToNull,\n  type WebsiteRow,\n} from \"../fleet/site-row.js\";\n\ntype JoinedRow = Record<string, unknown>;\n\nconst str = (v: unknown): string | null => (typeof v === \"string\" ? v : null);\nconst num = (v: unknown): number | null => (typeof v === \"number\" ? v : null);\n/** Stored 1/0/null (importer's b01n) → boolean | null. */\nconst bool = (v: unknown): boolean | null => (typeof v === \"number\" ? v !== 0 : null);\n\n/** Stored JSON array (importer-normalized) → the trimmed string[] mapRow yields. */\nfunction parseAwc(raw: unknown): string[] {\n  if (typeof raw !== \"string\" || raw.trim() === \"\") return [];\n  try {\n    const parsed: unknown = JSON.parse(raw);\n    if (!Array.isArray(parsed)) return [];\n    return parsed\n      .filter((x): x is string => typeof x === \"string\")\n      .map((s) => s.trim())\n      .filter(Boolean);\n  } catch {\n    return [];\n  }\n}\n\nfunction rowFromJoined(r: JoinedRow): WebsiteRow {\n  const name = String(r.name ?? \"\");\n  const headerFilename = str(r.header_image_filename);\n  const headerType = str(r.header_image_type);\n  return {\n    id: String(r.id),\n    name,\n    url: str(r.url) ?? \"\",\n    // `sites.status` holds the RAW Airtable cell (the importer stores it verbatim\n    // so the hourly parity check compares raw-to-raw). Canonicalizing HERE — the\n    // twin of mapRow's seam — is what keeps the #558 equivalence instrument green.\n    status: canonicalizeStatus(r.status),\n    statusRaw: str(r.status),\n    pointOfContact: str(r.point_of_contact),\n    maintenanceFreq: toFrequency(r.maintenance_freq, `${name} maintenance`),\n    testingFreq: toFrequency(r.testing_freq, `${name} testing`),\n    maintenanceFreqRaw: str(r.maintenance_freq),\n    testingFreqRaw: str(r.testing_freq),\n    maintenanceDay: str(r.maintenance_day),\n    testingDay: str(r.testing_day),\n    ga4PropertyId: str(r.ga4_property_id),\n    searchQuery: str(r.search_query),\n    searchConsoleProperty: str(r.search_console_property),\n    analyticsSoftFailAt: str(r.analytics_soft_fail_at),\n    gitRepo: str(r.git_repo),\n    reportRecipientsTo: str(r.report_recipients_to),\n    reportRecipientsCc: str(r.report_recipients_cc),\n    acceptedWatchConditions: parseAwc(r.accepted_watch_conditions),\n    headerImage:\n      headerFilename !== null && headerType !== null\n        ? { url: \"\", filename: headerFilename, type: headerType }\n        : null,\n    pScore: num(r.p_score),\n    rScore: num(r.r_score),\n    bpScore: num(r.bp_score),\n    seoScore: num(r.seo_score),\n    lastLighthouseAuditAt: str(r.lighthouse_at),\n    a11yViolations: num(r.a11y_violations),\n    depsDrifted: num(r.deps_drifted),\n    depsMajorBehind: num(r.deps_major_behind),\n    depsOutdated: num(r.deps_outdated),\n    depsMajorOutdated: num(r.deps_major_outdated),\n    securityVulnsCritical: num(r.vulns_critical),\n    securityVulnsHigh: num(r.vulns_high),\n    securityVulnsModerate: num(r.vulns_moderate),\n    securityVulnsLow: num(r.vulns_low),\n    securityAutoFixAttempts: num(r.auto_fix_attempts),\n    lastSecurityAuditAt: str(r.security_audit_at),\n    securityAdvisories: parseSecurityAdvisories(r.security_advisories),\n    certDaysRemaining: num(r.cert_days_remaining),\n    domainCheckedAt: str(r.domain_checked_at),\n    netlifyId: trimToNull(r.netlify_id),\n    deployStatus: str(r.deploy_status),\n    lastDeployAt: str(r.last_deploy_at),\n    deployLogUrl: str(r.deploy_log_url),\n    deployCheckedAt: str(r.deploy_checked_at),\n    functionHealth: toVerdict(r.function_health),\n    cmsReachable: toVerdict(r.cms_reachable),\n    turnstileWidget: toVerdict(r.turnstile_widget),\n    functionHealthCheckedAt: str(r.function_health_checked_at),\n    crossbrowserOk: bool(r.crossbrowser_ok),\n    mobileOk: bool(r.mobile_ok),\n    linksOk: bool(r.links_ok),\n    brokenLinks: num(r.broken_links),\n    browserCheckedAt: str(r.browser_checked_at),\n    reachableOk: toVerdict(r.uptime_reachable),\n    titleMetaOk: toVerdict(r.titles_meta_ok),\n    copyIntro: trimToNull(r.copy_intro),\n    copyContact: trimToNull(r.copy_contact),\n    copyFooter: trimToNull(r.copy_footer),\n    launchedAt: str(r.launched_at),\n    newsletterWebhook: trimToNull(r.newsletter_webhook),\n    notifyRouting: parseNotifyRouting(r.notify_routing),\n    notifyRoutingRaw: trimToNull(r.notify_routing),\n    mailchimpApiKey: trimToNull(r.mailchimp_api_key),\n    mailchimpAudienceId: trimToNull(r.mailchimp_audience_id),\n    requireTurnstile: typeof r.require_turnstile === \"number\" ? r.require_turnstile !== 0 : false,\n    renovateFailingCis: num(r.renovate_failing_cis),\n    defaultBranchCi: str(r.default_branch_ci),\n    lastCommitAt: str(r.last_commit_at),\n    githubSignalsAt: str(r.github_signals_at),\n    smokeOk: toVerdict(r.smoke_ok),\n    lastSmokeAt: str(r.last_smoke_at),\n    formE2eOk: toVerdict(r.form_e2e_ok),\n    formE2eCheckedAt: str(r.form_e2e_checked_at),\n    prismicModels: toPrismicModelsVerdict(r.prismic_models),\n    prismicModelsCheckedAt: str(r.prismic_models_checked_at),\n    prismicModelsDrift: str(r.prismic_models_drift),\n    prismicAckUntil: str(r.prismic_ack_until),\n    nextMaintenanceAt: str(r.next_maintenance_at),\n    nextTestingAt: str(r.next_testing_at),\n  };\n}\n\n/** Every sites column EXCEPT the header-image BLOB. Since the 2026-08-24\n *  backfill, header_image holds 0.7–3.5 MB JPEGs — a selectAll would haul\n *  megabytes into every site lookup (per LEAD on the ingest path, ×44 on the\n *  fleet list) and Turso bills the bytes. WebsiteRow only needs the metadata\n *  columns; the bytes have their own dedicated readers when a consumer wants\n *  them. Kept in lockstep with SitesTable by the blob-exclusion test. */\nconst SITE_COLUMNS = [\n  \"sites.id\",\n  \"sites.slug\",\n  \"sites.name\",\n  \"sites.url\",\n  \"sites.status\",\n  \"sites.point_of_contact\",\n  \"sites.maintenance_freq\",\n  \"sites.testing_freq\",\n  \"sites.maintenance_day\",\n  \"sites.testing_day\",\n  \"sites.ga4_property_id\",\n  \"sites.search_query\",\n  \"sites.search_console_property\",\n  \"sites.git_repo\",\n  \"sites.netlify_id\",\n  \"sites.report_recipients_to\",\n  \"sites.report_recipients_cc\",\n  \"sites.copy_intro\",\n  \"sites.copy_contact\",\n  \"sites.copy_footer\",\n  \"sites.newsletter_webhook\",\n  \"sites.mailchimp_api_key\",\n  \"sites.mailchimp_audience_id\",\n  \"sites.notify_routing\",\n  \"sites.require_turnstile\",\n  \"sites.accepted_watch_conditions\",\n  \"sites.prismic_ack_until\",\n  \"sites.launched_at\",\n  \"sites.header_image_filename\",\n  \"sites.header_image_type\",\n  \"sites.header_image_generated_at\",\n  \"sites.legacy\",\n] as const;\n\n/** The three-table join every read composes from. site_health/site_schedule\n *  rows are upserted alongside sites by the importer, but LEFT JOIN anyway —\n *  a site row must never vanish from a surface because a health row is absent. */\nfunction joined(db: Db) {\n  return db\n    .selectFrom(\"sites\")\n    .leftJoin(\"site_health\", \"site_health.site_id\", \"sites.id\")\n    .leftJoin(\"site_schedule\", \"site_schedule.site_id\", \"sites.id\")\n    .select(SITE_COLUMNS)\n    .selectAll([\"site_health\", \"site_schedule\"]);\n}\n\n/** Write-through for the site-detail editor (Phase 2): after the Airtable\n *  write (still the Phase 2 source of truth), mirror the same cell into\n *  `sites` so a Turso-reading page renders the edit immediately instead of\n *  waiting for the next hourly sync. The column mapping is the IMPORTER's own\n *  map — one truth — and the value gets the importer's empty-clears-to-null\n *  semantics. Throws on a column the importer doesn't claim (the lockstep\n *  test makes that unreachable for the editor's allowlist); the caller treats\n *  a mirror failure as non-fatal — the hourly sync converges it.\n *\n *  Handles the non-text columns too (`Require Turnstile` is a checkbox,\n *  `Accepted Watch Conditions` a multi-select): the coercion is NOT repeated\n *  here, it is delegated to the importer's own `siteValueFor`. That delegation\n *  is the whole safety property — parity compares raw-to-raw, so a mirror that\n *  stored `\"true\"` where the importer stores `1` would red every hourly run. */\nexport async function mirrorSiteField(\n  db: Db,\n  siteId: string,\n  airtableColumn: string,\n  value: AirtableCellValue,\n): Promise<void> {\n  await mirrorSiteFields(db, siteId, { [airtableColumn]: value });\n}\n\n/** The multi-column form, and where the work actually happens (#539 Phase 5).\n *\n *  `updateLaunched` is why it exists: it flips `Status` AND stamps `Launched at`\n *  in one Airtable update, and mirroring those as two separate UPDATEs would\n *  open a window where Turso says a site is maintained but never launched.\n *\n *  Same contract as {@link mirrorHealthFields}, deliberately — it takes the\n *  EXACT FieldSet just written to Airtable (the writers return it, so the mirror\n *  cannot carry a different payload), and returns whether a `sites` row matched:\n *  a site the hourly sync hasn't imported yet updates 0 rows → false, so the\n *  caller can count it honestly instead of claiming it mirrored. An empty\n *  FieldSet runs no SQL and returns true — nothing to mirror is not a miss. */\nexport async function mirrorSiteFields(\n  db: Db,\n  siteId: string,\n  fields: Record<string, unknown>,\n): Promise<boolean> {\n  const patch: Record<string, string | number | null> = {};\n  for (const [airtableColumn, value] of Object.entries(fields)) {\n    const col = SITE_FIELDS[airtableColumn];\n    if (!col)\n      throw new Error(`mirrorSiteFields: importer claims no sites column for '${airtableColumn}'`);\n    // Empty text still clears to null (the importer's `s()` does the same); the\n    // non-text columns get their own coercion inside siteValueFor.\n    patch[col] = siteValueFor(col, value);\n  }\n  if (Object.keys(patch).length === 0) return true;\n  const res = await db\n    .updateTable(\"sites\")\n    .set(patch as Updateable<SitesTable>)\n    .where(\"id\", \"=\", siteId)\n    .executeTakeFirst();\n  // kysely/libSQL reports numUpdatedRows as a BigInt — compare in BigInt.\n  return res.numUpdatedRows > 0n;\n}\n\n/** Mirror a NEWLY CREATED Airtable Websites record into Turso (#539 Phase 5).\n *\n *  Since #646 step 3 a new site is created in Turso by {@link insertSiteRows}\n *  instead; this survives as the #645 heal's ADOPT — an Airtable site with no\n *  Turso row is inserted under its own `rec` id by `ensure-site`.\n *\n *  `ensure-site` CREATES a row, and every other site mirror is an UPDATE, which\n *  does nothing at all for a row that does not exist yet — so a site\n *  bootstrapped at 09:05 was invisible until the 09:20 sync, and every mirror\n *  the rest of the bootstrap fired reported `mirrored=missed` with nothing to\n *  update.\n *\n *  Maps with the IMPORTER's own `mapWebsiteRecord`, which is also exactly what\n *  parity diffs against: that delegation is what makes the mirrored rows\n *  parity-clean by construction rather than by a column list someone has to\n *  remember to extend.\n *\n *  All THREE rows, not just `sites`. Parity reverse-checks `site_health` and\n *  `site_schedule` per site and reports a missing one as `(row) ABSENT`, and a\n *  later `mirrorHealthFields` would return `missed` forever with no row to hit.\n *\n *  Upserts rather than inserts because `ensure-site` is re-run to RESUME a\n *  bootstrap. The header_image* columns survive that by construction —\n *  `mapWebsiteRecord` does not carry them (Airtable stopped being their source,\n *  design D5), so the conflict branch cannot blank a stored plate whose bytes\n *  live in no other store. */\nexport async function mirrorSiteInsert(db: Db, rec: RawRecord, computedAt: string): Promise<void> {\n  const { site, health, schedule } = mapWebsiteRecord(rec, computedAt);\n  await db\n    .insertInto(\"sites\")\n    .values(site)\n    .onConflict((oc) => oc.column(\"id\").doUpdateSet(site))\n    .execute();\n  await db\n    .insertInto(\"site_health\")\n    .values(health)\n    .onConflict((oc) => oc.column(\"site_id\").doUpdateSet(health))\n    .execute();\n  await db\n    .insertInto(\"site_schedule\")\n    .values(schedule)\n    .onConflict((oc) => oc.column(\"site_id\").doUpdateSet(schedule))\n    .execute();\n}\n\n/** Write-through mirror for the nightly health writers (#539 Phase 3). Takes\n *  the EXACT FieldSet just written to Airtable (updateAuditFields /\n *  updateGitHubSignals return it), so the mirror can never carry a different\n *  payload than the Airtable write it shadows. Resolution + coercion come from\n *  the importer's healthColumnFor — one truth; an Airtable column no\n *  site_health column claims throws (same contract as mirrorSiteField).\n *  Partial by design: absent fields stay untouched, matching\n *  updateGitHubSignals' deliberate omission of a null lastCommitAt. Returns\n *  whether a site_health row matched: a site the hourly sync hasn't imported\n *  yet updates 0 rows → false, so the caller can count it honestly\n *  (mirror_missed) instead of claiming it mirrored — it still converges on the\n *  next sync, like every mirror. An empty FieldSet runs no SQL and returns\n *  true: nothing to mirror is not a miss. */\nexport async function mirrorHealthFields(\n  db: Db,\n  siteId: string,\n  fields: Record<string, unknown>,\n): Promise<boolean> {\n  // Per-column value types (number vs text) are guaranteed by healthColumnFor's\n  // coercion — the numeric/text split lives there, once — so the patch builds\n  // untyped and casts at the .set() boundary (the importer's own idiom).\n  const patch: Record<string, string | number | null> = {};\n  for (const [field, value] of Object.entries(fields)) {\n    const m = healthColumnFor(field);\n    if (!m)\n      throw new Error(`mirrorHealthFields: importer claims no site_health column for '${field}'`);\n    patch[m.col] = m.coerce(value);\n  }\n  if (Object.keys(patch).length === 0) return true;\n  const res = await db\n    .updateTable(\"site_health\")\n    .set(patch as Updateable<SiteHealthTable>)\n    .where(\"site_id\", \"=\", siteId)\n    .executeTakeFirst();\n  // kysely/libSQL reports numUpdatedRows as a BigInt — compare in BigInt.\n  return res.numUpdatedRows > 0n;\n}\n\n/** A site as the Turso-native creator INSERTS it (#646 step 3). Only the columns\n *  `ensure-site` owns; everything else starts at its schema default (null, or 0\n *  for `require_turnstile`) exactly as an imported Airtable row with blank cells\n *  did. */\nexport type NewSiteRow = {\n  id: string;\n  slug: string;\n  name: string;\n  status: string;\n  url: string | null;\n  pointOfContact: string | null;\n  gitRepo: string | null;\n};\n\n/** Insert a brand-new site's three rows: `sites`, `site_health`, `site_schedule`.\n *\n *  Plain INSERTs, not upserts — the id was just minted, so a conflict on any of\n *  the three primary keys, or on `sites.slug`, means something is wrong and must\n *  fail loudly rather than overwrite. Atomicity is the CALLER's: `src/db/site-\n *  create.ts` runs this inside one transaction (a Kysely `Transaction` is a\n *  `Db`), so a failure on the third insert leaves none of the three behind.\n *  Why all three: every reader LEFT JOINs the companions, but the nightly health\n *  and schedule writers are UPDATEs, and under the freeze an UPDATE that matches\n *  no row throws (`mirrored=missed`). */\nexport async function insertSiteRows(db: Db, site: NewSiteRow, computedAt: string): Promise<void> {\n  await db\n    .insertInto(\"sites\")\n    .values({\n      id: site.id,\n      slug: site.slug,\n      name: site.name,\n      status: site.status,\n      url: site.url,\n      point_of_contact: site.pointOfContact,\n      git_repo: site.gitRepo,\n      require_turnstile: 0,\n    })\n    .execute();\n  await db.insertInto(\"site_health\").values({ site_id: site.id }).execute();\n  await db\n    .insertInto(\"site_schedule\")\n    .values({\n      site_id: site.id,\n      next_maintenance_at: null,\n      next_testing_at: null,\n      computed_at: computedAt,\n    })\n    .execute();\n}\n\n/** The columns `ensure-site` may change on an EXISTING site: its fill-blanks\n *  inputs and the `--name` retitle. `slug` is absent BY TYPE — it is the stable\n *  external handle (URLs, `/api/forms/:slug`, deployed sites) and no rename may\n *  move it (operator decision 2026-09-17). */\nexport type SiteIdentityPatch = {\n  name?: string;\n  url?: string;\n  pointOfContact?: string;\n  gitRepo?: string;\n};\n\n/** Apply a {@link SiteIdentityPatch} to one `sites` row by PK. Returns whether a\n *  row matched; an empty patch runs no SQL and returns true (nothing to write is\n *  not a miss) — the same contract as {@link mirrorSiteFields}. */\nexport async function updateSiteIdentity(\n  db: Db,\n  siteId: string,\n  patch: SiteIdentityPatch,\n): Promise<boolean> {\n  const set: Updateable<SitesTable> = {};\n  if (patch.name !== undefined) set.name = patch.name;\n  if (patch.url !== undefined) set.url = patch.url;\n  if (patch.pointOfContact !== undefined) set.point_of_contact = patch.pointOfContact;\n  if (patch.gitRepo !== undefined) set.git_repo = patch.gitRepo;\n  if (Object.keys(set).length === 0) return true;\n  const res = await db.updateTable(\"sites\").set(set).where(\"id\", \"=\", siteId).executeTakeFirst();\n  return res.numUpdatedRows > 0n;\n}\n\n/** The site_schedule twin of {@link mirrorHealthFields}, for the nightly\n *  next-due write-back. `computedAt` stamps when THIS computation ran — the\n *  hourly sync overwrites it with its own import stamp, same as every mirrored\n *  value. Empty fields → full no-op (no lone computed_at stamp for a write\n *  that carried nothing). Same return contract as mirrorHealthFields: false\n *  when the UPDATE matched no site_schedule row (site not yet imported), true\n *  otherwise — including the empty-fields no-op. */\nexport async function mirrorScheduleFields(\n  db: Db,\n  siteId: string,\n  fields: Record<string, unknown>,\n  computedAt: string,\n): Promise<boolean> {\n  const patch: Record<string, string | null> = {};\n  for (const [field, value] of Object.entries(fields)) {\n    const m = scheduleColumnFor(field);\n    if (!m)\n      throw new Error(\n        `mirrorScheduleFields: importer claims no site_schedule column for '${field}'`,\n      );\n    patch[m.col] = m.coerce(value);\n  }\n  if (Object.keys(patch).length === 0) return true;\n  patch.computed_at = computedAt;\n  const res = await db\n    .updateTable(\"site_schedule\")\n    .set(patch as Updateable<SiteScheduleTable>)\n    .where(\"site_id\", \"=\", siteId)\n    .executeTakeFirst();\n  return res.numUpdatedRows > 0n;\n}\n\n/** Same contract as the Airtable getWebsiteBySlug: slug is siteSlug(Name),\n *  precomputed into the UNIQUE sites.slug column at import time. */\nexport async function getSiteBySlug(db: Db, slug: string): Promise<WebsiteRow | null> {\n  const r = await joined(db).where(\"sites.slug\", \"=\", slug).executeTakeFirst();\n  return r ? rowFromJoined(r as JoinedRow) : null;\n}\n\n/** #645. Does `sites` hold this row at all? One column, no join, no row mapping —\n *  `getSiteById` would answer the same question (its joins are LEFT, so a site\n *  missing its site_health/site_schedule companions still resolves) but it pays\n *  for a full `rowFromJoined` to return a boolean, and it would tie the heal's\n *  decision to whatever that mapper does next. `sites.id` is the PK and it is\n *  exactly what `mirrorSiteInsert` conflicts on. */\nexport async function siteRowExists(db: Db, siteId: string): Promise<boolean> {\n  const r = await db.selectFrom(\"sites\").select(\"id\").where(\"id\", \"=\", siteId).executeTakeFirst();\n  return r !== undefined;\n}\n\n/** By Airtable rec id (the PK) — approve-report's lookup shape. */\nexport async function getSiteById(db: Db, id: string): Promise<WebsiteRow | null> {\n  const r = await joined(db).where(\"sites.id\", \"=\", id).executeTakeFirst();\n  return r ? rowFromJoined(r as JoinedRow) : null;\n}\n\n/** Same contract as the Airtable listWebsites: every site, one row each.\n *  Name-ordered for determinism (Airtable returned table order; no consumer\n *  is order-sensitive — the cockpit groups and sorts itself). */\nexport async function listSites(db: Db): Promise<WebsiteRow[]> {\n  const rows = await joined(db).orderBy(\"sites.name\").execute();\n  return rows.map((r) => rowFromJoined(r as JoinedRow));\n}\n\n// ————————————————————————— reports —————————————————————————\n\n/** stable checklist key → Airtable column name. The importer stores stable keys\n *  (mapReportRecord); `ReportRow.checklist` exposes Airtable column names — one\n *  derived map, built from the checklist definitions themselves. */\nconst CHECKLIST_FIELD_BY_KEY: ReadonlyMap<string, string> = new Map(\n  [...MAINTENANCE_CHECKLIST, ...TESTING_CHECKLIST].map((i) => [i.key, i.field]),\n);\n\nfunction checklistFromStored(raw: string | null): Record<string, boolean> {\n  let stored: Record<string, unknown> = {};\n  if (typeof raw === \"string\" && raw.trim() !== \"\") {\n    try {\n      const parsed: unknown = JSON.parse(raw);\n      if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed))\n        stored = parsed as Record<string, unknown>;\n    } catch {\n      // fall through to all-false — a bad blob must not throw the page\n    }\n  }\n  const out: Record<string, boolean> = {};\n  for (const [key, field] of CHECKLIST_FIELD_BY_KEY) out[field] = Boolean(stored[key]);\n  return out;\n}\n\n/**\n * `hasRenderedHtml` is passed separately rather than read off `r`, because the\n * list read deliberately does not fetch the body (see REPORT_LIST_COLUMNS) and\n * only ever needed its null-ness. Taking it as an argument means a list row and a\n * full row are both honest inputs, and nothing here can start depending on body\n * CONTENT without the type changing to say so.\n */\nfunction reportRowFromDb(\n  r: Omit<Selectable<ReportsTable>, \"rendered_html\">,\n  hasRenderedHtml: boolean,\n): ReportRow {\n  const p = r.lighthouse_performance;\n  const a = r.lighthouse_accessibility;\n  const b = r.lighthouse_best_practices;\n  const seo = r.lighthouse_seo;\n  const lighthouse =\n    typeof p === \"number\" &&\n    typeof a === \"number\" &&\n    typeof b === \"number\" &&\n    typeof seo === \"number\"\n      ? { performance: p, accessibility: a, bestPractices: b, seo }\n      : null;\n  return {\n    id: r.id,\n    reportId: r.report_id ?? \"\",\n    siteId: r.site_id ?? \"\",\n    reportType: toReportType(r.report_type ?? undefined),\n    period: r.period,\n    periodStart: r.period_start,\n    periodEnd: r.period_end,\n    completedOn: r.completed_on,\n    lighthouse,\n    gaUsersCurrent: r.ga_users_current,\n    gaUsersPrevious: r.ga_users_previous,\n    searchFoundPage1: bool(r.search_found_page1),\n    searchPosition: r.search_position,\n    lastTestedDate: r.last_tested_date,\n    commentary: r.commentary,\n    subjectOverride: r.subject_override,\n    draftReady: r.draft_ready !== 0,\n    approvedToSend: r.approved_to_send !== 0,\n    sentAt: r.sent_at,\n    approvedAt: r.approved_at,\n    approvedBy: r.approved_by,\n    deliveryStatus: (r.delivery_status ?? \"pending\") as DeliveryStatus,\n    // The body lives IN the row (rendered_html) — the link points at the\n    // dashboard's own preview route instead of an EXPIRING Airtable signed URL.\n    // Strictly better for the operator: the old link 404'd once the URL aged out.\n    renderedHtmlAttachment: hasRenderedHtml\n      ? { url: `/api/reports/${r.id}/preview`, filename: `${r.report_id ?? r.id}.html` }\n      : null,\n    resendMessageId: r.resend_message_id,\n    checklist: checklistFromStored(r.checklist),\n    autoEvidence: parseAutoEvidence(r.checklist_auto_evidence),\n    sendOverride: r.send_override !== 0,\n    overrideReason: r.override_reason,\n    overrideBy: r.override_by,\n    overrideAt: r.override_at,\n  };\n}\n\n/** Every reports column EXCEPT the rendered_html body — the exact hazard\n *  SITE_COLUMNS guards against on `sites`, on the table where it currently costs\n *  more. Live, all 16 reports carry a body: 1.17 MB total, avg 73 KB. A list read\n *  wants the body only to know WHETHER there is one, so `has_rendered_html`\n *  computes that in SQL and the bytes stay in the database. Kept in lockstep with\n *  ReportsTable by the body-exclusion test. */\nexport const REPORT_LIST_COLUMNS = [\n  \"id\",\n  \"site_id\",\n  \"report_id\",\n  \"report_type\",\n  \"period\",\n  \"period_start\",\n  \"period_end\",\n  \"completed_on\",\n  \"lighthouse_performance\",\n  \"lighthouse_accessibility\",\n  \"lighthouse_best_practices\",\n  \"lighthouse_seo\",\n  \"ga_users_current\",\n  \"ga_users_previous\",\n  \"search_found_page1\",\n  \"search_position\",\n  \"last_tested_date\",\n  \"commentary\",\n  \"subject_override\",\n  \"draft_ready\",\n  \"approved_to_send\",\n  \"approved_at\",\n  \"approved_by\",\n  \"send_override\",\n  \"override_reason\",\n  \"override_by\",\n  \"override_at\",\n  \"sent_at\",\n  \"delivery_status\",\n  \"resend_message_id\",\n  \"checklist\",\n  \"checklist_auto_evidence\",\n] as const;\n\n/** The one thing a list read still needs from the body: whether there IS one.\n *  Computed in SQLite so the bytes never cross the wire. */\nconst HAS_RENDERED_HTML = sql<number>`(rendered_html is not null)`.as(\"has_rendered_html\");\n\n/** Same contract as the Airtable listAllReports. Newest-period-first (Airtable\n *  returned manual table order; every consumer filters/sorts itself). */\nexport async function listAllReports(db: Db): Promise<ReportRow[]> {\n  const rows = await db\n    .selectFrom(\"reports\")\n    .select(REPORT_LIST_COLUMNS)\n    .select(HAS_RENDERED_HTML)\n    .orderBy(\"period_start\", \"desc\")\n    .orderBy(\"id\")\n    .execute();\n  return rows.map((r) => reportRowFromDb(r, r.has_rendered_html !== 0));\n}\n\n/** Same contract as the Airtable listReportsForSite — served by idx_reports_site.\n *  Body-free for the same reason as listAllReports: the site-detail page renders\n *  a link, never the HTML. */\nexport async function listReportsForSite(db: Db, siteId: string): Promise<ReportRow[]> {\n  const rows = await db\n    .selectFrom(\"reports\")\n    .select(REPORT_LIST_COLUMNS)\n    .select(HAS_RENDERED_HTML)\n    .where(\"site_id\", \"=\", siteId)\n    .orderBy(\"period_start\", \"desc\")\n    .orderBy(\"id\")\n    .execute();\n  return rows.map((r) => reportRowFromDb(r, r.has_rendered_html !== 0));\n}\n\n/** Same contract as the Airtable `listSendableReports`: the send queue —\n *  `Draft ready` ∧ `Approved to send` ∧ `Sent at` BLANK, which is exactly the\n *  filterByFormula that reader sends. Airtable evaluated the predicate server-side;\n *  here it is a WHERE, so the three-part rule is stated once, in SQL, and\n *  tests/reports/send/sendable-predicate.test.ts drives every combination of the\n *  three columns through it.\n *\n *  Body-free like the other list reads: the send renders from the row, and\n *  `rendered_html` is fetched separately by the paths that want the stored body.\n *  It scans `reports` (16 rows, ~44/month) exactly as `listAllReports` does, and\n *  the query-plan gate carries that as a named allowance rather than a silent one. */\nexport async function listSendableReports(db: Db): Promise<ReportRow[]> {\n  const rows = await db\n    .selectFrom(\"reports\")\n    .select(REPORT_LIST_COLUMNS)\n    .select(HAS_RENDERED_HTML)\n    .where(\"draft_ready\", \"=\", 1)\n    .where(\"approved_to_send\", \"=\", 1)\n    .where(\"sent_at\", \"is\", null)\n    .orderBy(\"period_start\", \"desc\")\n    .orderBy(\"id\")\n    .execute();\n  return rows.map((r) => reportRowFromDb(r, r.has_rendered_html !== 0));\n}\n\n/** Columns a report writer mirrors after its Airtable write (same pattern as\n *  mirrorSiteField): the approve/override flow, the resend-webhook's delivery\n *  status, and — since #539 Phase 5 — the drafting path's queue flag and a\n *  re-run's refreshed scores.\n *\n *  `rendered_html` stays deliberately OUT even though the drafting path now\n *  writes it: bodies go through `storeRenderedHtml`, so a request handler\n *  holding a patch cannot accidentally write megabytes of HTML. */\nexport type ReportMirrorPatch = Partial<\n  Pick<\n    ReportsTable,\n    | \"approved_to_send\"\n    | \"approved_at\"\n    | \"approved_by\"\n    | \"send_override\"\n    | \"override_reason\"\n    | \"override_by\"\n    | \"override_at\"\n    | \"delivery_status\"\n    // Phase 4 report review: the console edits commentary and re-renders the\n    // page immediately after the write, so the mirror has to carry it or the\n    // operator sees their own save as a no-op until the next hourly sync.\n    | \"commentary\"\n    // Phase 5 drafting path. `draft_ready` is the queue flag `queueDraft`\n    // writes — for the new draft AND for every row it supersedes, so without it\n    // the console shows a site with two queued reports until the next sync.\n    | \"draft_ready\"\n    // A re-run (announce/launch reuse) refreshes an existing row's scores so the\n    // eventually-sent email is not stale; the console reads the same numbers.\n    | \"lighthouse_performance\"\n    | \"lighthouse_accessibility\"\n    | \"lighthouse_best_practices\"\n    | \"lighthouse_seo\"\n    | \"ga_users_current\"\n    | \"ga_users_previous\"\n    | \"search_found_page1\"\n    | \"search_position\"\n    | \"completed_on\"\n    // #643 (the freeze): the send batch mirrors its own `Sent at` stamp. These\n    // used to stay out because the hourly sync converged them; that sync is\n    // retired, and the console's already-sent guards (approve, the commentary\n    // lock, re-render) read `sent_at` from Turso — an unmirrored stamp would\n    // disarm all three for every post-flip send.\n    | \"sent_at\"\n    | \"resend_message_id\"\n  >\n>;\n\n/** Mirror an Airtable report write into Turso so the page re-render after an\n *  approve/override/bounce shows the new state immediately. Callers route\n *  failures through `mirrorWrite`, which decides fatal vs swallowed by the\n *  freeze switch; an empty patch is a no-op, never invalid SQL.\n *\n *  Returns whether the UPDATE matched a row (#647). Same contract as\n *  `mirrorSiteFields`: this module has no error policy of its own, so the\n *  count is REPORTED and the boundary (`mirrorWrite`, `makeReportMirror`)\n *  decides what a miss means — logged before the freeze, fatal after it, when\n *  no importer exists to converge a row that was never inserted. Discarding\n *  the count is what let a stamp for a row Turso never held mirror\n *  \"successfully\". An empty patch reports `true`: nothing to write is not a\n *  miss. */\nexport async function mirrorReportPatch(\n  db: Db,\n  reportId: string,\n  patch: ReportMirrorPatch,\n): Promise<boolean> {\n  if (Object.keys(patch).length === 0) return true;\n  const res = await db\n    .updateTable(\"reports\")\n    .set(patch)\n    .where(\"id\", \"=\", reportId)\n    .executeTakeFirst();\n  // kysely/libSQL reports numUpdatedRows as a BigInt — compare in BigInt.\n  return res.numUpdatedRows > 0n;\n}\n\n/** Mirror a NEWLY CREATED Airtable Reports record into Turso (#539 Phase 5).\n *\n *  Every other report mirror is an UPDATE, which silently does nothing for a row\n *  that does not exist yet — so a draft created at 09:05 was invisible to the\n *  Turso-backed console until the 09:20 sync. Takes the raw record Airtable\n *  echoed back from the create, and maps it with the IMPORTER's own\n *  `mapReportRecord`: parity diffs Turso against exactly that function, so\n *  delegating is what makes the mirrored row parity-clean by construction rather\n *  than by a column list someone has to remember to extend.\n *\n *  Upsert, not insert, and the conflict branch drops `rendered_html` for the\n *  same reason the importer's does: the body is written later by a separate\n *  sharp-bearing step, so a re-mirror carrying null would blank a render that\n *  had already succeeded. */\nexport async function mirrorReportInsert(db: Db, rec: RawRecord): Promise<void> {\n  const row = mapReportRecord(rec, null);\n  const { rendered_html: _rh, ...rowSansHtml } = row;\n  void _rh;\n  await db\n    .insertInto(\"reports\")\n    .values(row)\n    .onConflict((oc) => oc.column(\"id\").doUpdateSet(rowSansHtml))\n    .execute();\n}\n\n/** Insert a BRAND-NEW report row (#646 step 4). The report id was just minted\n *  (`report_<ULID>`), Turso owns the row, and no Airtable record exists for it.\n *\n *  A plain INSERT, deliberately not `mirrorReportInsert`'s upsert: that one\n *  resolves a conflict because it re-mirrors a record Airtable already holds,\n *  whereas a conflict HERE means the freshly minted id already exists — which\n *  must fail loudly, never silently overwrite a report. Same reasoning as\n *  `insertSiteRows`.\n *\n *  Maps with the importer's `mapReportRecord`, like the create mirror it replaces:\n *  the parity harness diffs Turso against exactly that function, so a drafted row\n *  is parity-clean by construction rather than by a second column list. The caller\n *  builds the record's fields with `draftFields` (`src/reports/draft-fields.ts`),\n *  whose keys are that mapper's own vocabulary. */\nexport async function insertReportRow(db: Db, rec: RawRecord): Promise<void> {\n  await db.insertInto(\"reports\").values(mapReportRecord(rec, null)).execute();\n}\n\n/**\n * Store a freshly rendered report body, replacing whatever was there.\n *\n * Deliberately NOT part of `ReportMirrorPatch`: that patch is the request path's\n * write-through (approve, override, delivery status), and a rendered body is\n * produced by a batch job with sharp, never by a dashboard POST. Keeping it out\n * means a handler cannot accidentally write megabytes of HTML from a request.\n *\n * It REPLACES unconditionally. The importer's `when-missing` mode skips a report\n * that already has a body — correct for an import, wrong here: a refresh whose\n * entire purpose is showing the newest commentary must overwrite.\n */\nexport async function storeRenderedHtml(db: Db, reportId: string, html: string): Promise<void> {\n  await db.updateTable(\"reports\").set({ rendered_html: html }).where(\"id\", \"=\", reportId).execute();\n}\n\n/** By rec id (the PK) — approve-report's read. */\nexport async function getReportById(db: Db, id: string): Promise<ReportRow | null> {\n  const r = await db.selectFrom(\"reports\").selectAll().where(\"id\", \"=\", id).executeTakeFirst();\n  return r ? reportRowFromDb(r, r.rendered_html !== null) : null;\n}\n\n/** By Resend message id — the resend-webhook's report lookup (#539 Phase 6 step 2,\n *  #646). Same contract as the Airtable `findReportByMessageId` it replaces: the\n *  first matching row, or null. Served by idx_reports_resend_message (0027), and\n *  body-free like the list reads — the webhook needs the row's id and current\n *  delivery status, never the HTML. `resend_message_id` is stamped by the send\n *  path's `reportSentMirror` (#643) and was imported for historical rows. */\nexport async function findReportByMessageId(db: Db, messageId: string): Promise<ReportRow | null> {\n  const r = await db\n    .selectFrom(\"reports\")\n    .select(REPORT_LIST_COLUMNS)\n    .select(HAS_RENDERED_HTML)\n    .where(\"resend_message_id\", \"=\", messageId)\n    .limit(1)\n    .executeTakeFirst();\n  return r ? reportRowFromDb(r, r.has_rendered_html !== 0) : null;\n}\n\n/** The preview route's read: the stored rendered body, or null when the report\n *  has none (imported while its signed URL was expired, or predates rendering). */\nexport async function getReportHtml(\n  db: Db,\n  id: string,\n): Promise<{ html: string; reportId: string | null } | null> {\n  const r = await db\n    .selectFrom(\"reports\")\n    .select([\"rendered_html\", \"report_id\"])\n    .where(\"id\", \"=\", id)\n    .executeTakeFirst();\n  if (!r || r.rendered_html === null) return null;\n  return { html: r.rendered_html, reportId: r.report_id };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,SAAS,WAA6C;AAiCtD,IAAM,MAAM,CAAC,MAA+B,OAAO,MAAM,WAAW,IAAI;AACxE,IAAM,MAAM,CAAC,MAA+B,OAAO,MAAM,WAAW,IAAI;AAExE,IAAM,OAAO,CAAC,MAAgC,OAAO,MAAM,WAAW,MAAM,IAAI;AAGhF,SAAS,SAAS,KAAwB;AACxC,MAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,MAAM,GAAI,QAAO,CAAC;AAC1D,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,QAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO,CAAC;AACpC,WAAO,OACJ,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,EAChD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AAAA,EACnB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAEA,SAAS,cAAc,GAA0B;AAC/C,QAAM,OAAO,OAAO,EAAE,QAAQ,EAAE;AAChC,QAAM,iBAAiB,IAAI,EAAE,qBAAqB;AAClD,QAAM,aAAa,IAAI,EAAE,iBAAiB;AAC1C,SAAO;AAAA,IACL,IAAI,OAAO,EAAE,EAAE;AAAA,IACf;AAAA,IACA,KAAK,IAAI,EAAE,GAAG,KAAK;AAAA;AAAA;AAAA;AAAA,IAInB,QAAQ,mBAAmB,EAAE,MAAM;AAAA,IACnC,WAAW,IAAI,EAAE,MAAM;AAAA,IACvB,gBAAgB,IAAI,EAAE,gBAAgB;AAAA,IACtC,iBAAiB,YAAY,EAAE,kBAAkB,GAAG,IAAI,cAAc;AAAA,IACtE,aAAa,YAAY,EAAE,cAAc,GAAG,IAAI,UAAU;AAAA,IAC1D,oBAAoB,IAAI,EAAE,gBAAgB;AAAA,IAC1C,gBAAgB,IAAI,EAAE,YAAY;AAAA,IAClC,gBAAgB,IAAI,EAAE,eAAe;AAAA,IACrC,YAAY,IAAI,EAAE,WAAW;AAAA,IAC7B,eAAe,IAAI,EAAE,eAAe;AAAA,IACpC,aAAa,IAAI,EAAE,YAAY;AAAA,IAC/B,uBAAuB,IAAI,EAAE,uBAAuB;AAAA,IACpD,qBAAqB,IAAI,EAAE,sBAAsB;AAAA,IACjD,SAAS,IAAI,EAAE,QAAQ;AAAA,IACvB,oBAAoB,IAAI,EAAE,oBAAoB;AAAA,IAC9C,oBAAoB,IAAI,EAAE,oBAAoB;AAAA,IAC9C,yBAAyB,SAAS,EAAE,yBAAyB;AAAA,IAC7D,aACE,mBAAmB,QAAQ,eAAe,OACtC,EAAE,KAAK,IAAI,UAAU,gBAAgB,MAAM,WAAW,IACtD;AAAA,IACN,QAAQ,IAAI,EAAE,OAAO;AAAA,IACrB,QAAQ,IAAI,EAAE,OAAO;AAAA,IACrB,SAAS,IAAI,EAAE,QAAQ;AAAA,IACvB,UAAU,IAAI,EAAE,SAAS;AAAA,IACzB,uBAAuB,IAAI,EAAE,aAAa;AAAA,IAC1C,gBAAgB,IAAI,EAAE,eAAe;AAAA,IACrC,aAAa,IAAI,EAAE,YAAY;AAAA,IAC/B,iBAAiB,IAAI,EAAE,iBAAiB;AAAA,IACxC,cAAc,IAAI,EAAE,aAAa;AAAA,IACjC,mBAAmB,IAAI,EAAE,mBAAmB;AAAA,IAC5C,uBAAuB,IAAI,EAAE,cAAc;AAAA,IAC3C,mBAAmB,IAAI,EAAE,UAAU;AAAA,IACnC,uBAAuB,IAAI,EAAE,cAAc;AAAA,IAC3C,kBAAkB,IAAI,EAAE,SAAS;AAAA,IACjC,yBAAyB,IAAI,EAAE,iBAAiB;AAAA,IAChD,qBAAqB,IAAI,EAAE,iBAAiB;AAAA,IAC5C,oBAAoB,wBAAwB,EAAE,mBAAmB;AAAA,IACjE,mBAAmB,IAAI,EAAE,mBAAmB;AAAA,IAC5C,iBAAiB,IAAI,EAAE,iBAAiB;AAAA,IACxC,WAAW,WAAW,EAAE,UAAU;AAAA,IAClC,cAAc,IAAI,EAAE,aAAa;AAAA,IACjC,cAAc,IAAI,EAAE,cAAc;AAAA,IAClC,cAAc,IAAI,EAAE,cAAc;AAAA,IAClC,iBAAiB,IAAI,EAAE,iBAAiB;AAAA,IACxC,gBAAgB,UAAU,EAAE,eAAe;AAAA,IAC3C,cAAc,UAAU,EAAE,aAAa;AAAA,IACvC,iBAAiB,UAAU,EAAE,gBAAgB;AAAA,IAC7C,yBAAyB,IAAI,EAAE,0BAA0B;AAAA,IACzD,gBAAgB,KAAK,EAAE,eAAe;AAAA,IACtC,UAAU,KAAK,EAAE,SAAS;AAAA,IAC1B,SAAS,KAAK,EAAE,QAAQ;AAAA,IACxB,aAAa,IAAI,EAAE,YAAY;AAAA,IAC/B,kBAAkB,IAAI,EAAE,kBAAkB;AAAA,IAC1C,aAAa,UAAU,EAAE,gBAAgB;AAAA,IACzC,aAAa,UAAU,EAAE,cAAc;AAAA,IACvC,WAAW,WAAW,EAAE,UAAU;AAAA,IAClC,aAAa,WAAW,EAAE,YAAY;AAAA,IACtC,YAAY,WAAW,EAAE,WAAW;AAAA,IACpC,YAAY,IAAI,EAAE,WAAW;AAAA,IAC7B,mBAAmB,WAAW,EAAE,kBAAkB;AAAA,IAClD,eAAe,mBAAmB,EAAE,cAAc;AAAA,IAClD,kBAAkB,WAAW,EAAE,cAAc;AAAA,IAC7C,iBAAiB,WAAW,EAAE,iBAAiB;AAAA,IAC/C,qBAAqB,WAAW,EAAE,qBAAqB;AAAA,IACvD,kBAAkB,OAAO,EAAE,sBAAsB,WAAW,EAAE,sBAAsB,IAAI;AAAA,IACxF,oBAAoB,IAAI,EAAE,oBAAoB;AAAA,IAC9C,iBAAiB,IAAI,EAAE,iBAAiB;AAAA,IACxC,cAAc,IAAI,EAAE,cAAc;AAAA,IAClC,iBAAiB,IAAI,EAAE,iBAAiB;AAAA,IACxC,SAAS,UAAU,EAAE,QAAQ;AAAA,IAC7B,aAAa,IAAI,EAAE,aAAa;AAAA,IAChC,WAAW,UAAU,EAAE,WAAW;AAAA,IAClC,kBAAkB,IAAI,EAAE,mBAAmB;AAAA,IAC3C,eAAe,uBAAuB,EAAE,cAAc;AAAA,IACtD,wBAAwB,IAAI,EAAE,yBAAyB;AAAA,IACvD,oBAAoB,IAAI,EAAE,oBAAoB;AAAA,IAC9C,iBAAiB,IAAI,EAAE,iBAAiB;AAAA,IACxC,mBAAmB,IAAI,EAAE,mBAAmB;AAAA,IAC5C,eAAe,IAAI,EAAE,eAAe;AAAA,EACtC;AACF;AAQA,IAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKA,SAAS,OAAO,IAAQ;AACtB,SAAO,GACJ,WAAW,OAAO,EAClB,SAAS,eAAe,uBAAuB,UAAU,EACzD,SAAS,iBAAiB,yBAAyB,UAAU,EAC7D,OAAO,YAAY,EACnB,UAAU,CAAC,eAAe,eAAe,CAAC;AAC/C;AAgBA,eAAsB,gBACpB,IACA,QACA,gBACA,OACe;AACf,QAAM,iBAAiB,IAAI,QAAQ,EAAE,CAAC,cAAc,GAAG,MAAM,CAAC;AAChE;AAcA,eAAsB,iBACpB,IACA,QACA,QACkB;AAClB,QAAM,QAAgD,CAAC;AACvD,aAAW,CAAC,gBAAgB,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC5D,UAAM,MAAM,YAAY,cAAc;AACtC,QAAI,CAAC;AACH,YAAM,IAAI,MAAM,0DAA0D,cAAc,GAAG;AAG7F,UAAM,GAAG,IAAI,aAAa,KAAK,KAAK;AAAA,EACtC;AACA,MAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO;AAC5C,QAAM,MAAM,MAAM,GACf,YAAY,OAAO,EACnB,IAAI,KAA+B,EACnC,MAAM,MAAM,KAAK,MAAM,EACvB,iBAAiB;AAEpB,SAAO,IAAI,iBAAiB;AAC9B;AA4BA,eAAsB,iBAAiB,IAAQ,KAAgB,YAAmC;AAChG,QAAM,EAAE,MAAM,QAAQ,SAAS,IAAI,iBAAiB,KAAK,UAAU;AACnE,QAAM,GACH,WAAW,OAAO,EAClB,OAAO,IAAI,EACX,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,YAAY,IAAI,CAAC,EACpD,QAAQ;AACX,QAAM,GACH,WAAW,aAAa,EACxB,OAAO,MAAM,EACb,WAAW,CAAC,OAAO,GAAG,OAAO,SAAS,EAAE,YAAY,MAAM,CAAC,EAC3D,QAAQ;AACX,QAAM,GACH,WAAW,eAAe,EAC1B,OAAO,QAAQ,EACf,WAAW,CAAC,OAAO,GAAG,OAAO,SAAS,EAAE,YAAY,QAAQ,CAAC,EAC7D,QAAQ;AACb;AAeA,eAAsB,mBACpB,IACA,QACA,QACkB;AAIlB,QAAM,QAAgD,CAAC;AACvD,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACnD,UAAM,IAAI,gBAAgB,KAAK;AAC/B,QAAI,CAAC;AACH,YAAM,IAAI,MAAM,kEAAkE,KAAK,GAAG;AAC5F,UAAM,EAAE,GAAG,IAAI,EAAE,OAAO,KAAK;AAAA,EAC/B;AACA,MAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO;AAC5C,QAAM,MAAM,MAAM,GACf,YAAY,aAAa,EACzB,IAAI,KAAoC,EACxC,MAAM,WAAW,KAAK,MAAM,EAC5B,iBAAiB;AAEpB,SAAO,IAAI,iBAAiB;AAC9B;AA0BA,eAAsB,eAAe,IAAQ,MAAkB,YAAmC;AAChG,QAAM,GACH,WAAW,OAAO,EAClB,OAAO;AAAA,IACN,IAAI,KAAK;AAAA,IACT,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,QAAQ,KAAK;AAAA,IACb,KAAK,KAAK;AAAA,IACV,kBAAkB,KAAK;AAAA,IACvB,UAAU,KAAK;AAAA,IACf,mBAAmB;AAAA,EACrB,CAAC,EACA,QAAQ;AACX,QAAM,GAAG,WAAW,aAAa,EAAE,OAAO,EAAE,SAAS,KAAK,GAAG,CAAC,EAAE,QAAQ;AACxE,QAAM,GACH,WAAW,eAAe,EAC1B,OAAO;AAAA,IACN,SAAS,KAAK;AAAA,IACd,qBAAqB;AAAA,IACrB,iBAAiB;AAAA,IACjB,aAAa;AAAA,EACf,CAAC,EACA,QAAQ;AACb;AAgBA,eAAsB,mBACpB,IACA,QACA,OACkB;AAClB,QAAM,MAA8B,CAAC;AACrC,MAAI,MAAM,SAAS,OAAW,KAAI,OAAO,MAAM;AAC/C,MAAI,MAAM,QAAQ,OAAW,KAAI,MAAM,MAAM;AAC7C,MAAI,MAAM,mBAAmB,OAAW,KAAI,mBAAmB,MAAM;AACrE,MAAI,MAAM,YAAY,OAAW,KAAI,WAAW,MAAM;AACtD,MAAI,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAC1C,QAAM,MAAM,MAAM,GAAG,YAAY,OAAO,EAAE,IAAI,GAAG,EAAE,MAAM,MAAM,KAAK,MAAM,EAAE,iBAAiB;AAC7F,SAAO,IAAI,iBAAiB;AAC9B;AASA,eAAsB,qBACpB,IACA,QACA,QACA,YACkB;AAClB,QAAM,QAAuC,CAAC;AAC9C,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACnD,UAAM,IAAI,kBAAkB,KAAK;AACjC,QAAI,CAAC;AACH,YAAM,IAAI;AAAA,QACR,sEAAsE,KAAK;AAAA,MAC7E;AACF,UAAM,EAAE,GAAG,IAAI,EAAE,OAAO,KAAK;AAAA,EAC/B;AACA,MAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO;AAC5C,QAAM,cAAc;AACpB,QAAM,MAAM,MAAM,GACf,YAAY,eAAe,EAC3B,IAAI,KAAsC,EAC1C,MAAM,WAAW,KAAK,MAAM,EAC5B,iBAAiB;AACpB,SAAO,IAAI,iBAAiB;AAC9B;AAIA,eAAsB,cAAc,IAAQ,MAA0C;AACpF,QAAM,IAAI,MAAM,OAAO,EAAE,EAAE,MAAM,cAAc,KAAK,IAAI,EAAE,iBAAiB;AAC3E,SAAO,IAAI,cAAc,CAAc,IAAI;AAC7C;AAQA,eAAsB,cAAc,IAAQ,QAAkC;AAC5E,QAAM,IAAI,MAAM,GAAG,WAAW,OAAO,EAAE,OAAO,IAAI,EAAE,MAAM,MAAM,KAAK,MAAM,EAAE,iBAAiB;AAC9F,SAAO,MAAM;AACf;AAGA,eAAsB,YAAY,IAAQ,IAAwC;AAChF,QAAM,IAAI,MAAM,OAAO,EAAE,EAAE,MAAM,YAAY,KAAK,EAAE,EAAE,iBAAiB;AACvE,SAAO,IAAI,cAAc,CAAc,IAAI;AAC7C;AAKA,eAAsB,UAAU,IAA+B;AAC7D,QAAM,OAAO,MAAM,OAAO,EAAE,EAAE,QAAQ,YAAY,EAAE,QAAQ;AAC5D,SAAO,KAAK,IAAI,CAAC,MAAM,cAAc,CAAc,CAAC;AACtD;AAOA,IAAM,yBAAsD,IAAI;AAAA,EAC9D,CAAC,GAAG,uBAAuB,GAAG,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC;AAC9E;AAEA,SAAS,oBAAoB,KAA6C;AACxE,MAAI,SAAkC,CAAC;AACvC,MAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,MAAM,IAAI;AAChD,QAAI;AACF,YAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,UAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM;AAC/D,iBAAS;AAAA,IACb,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,KAAK,KAAK,KAAK,uBAAwB,KAAI,KAAK,IAAI,QAAQ,OAAO,GAAG,CAAC;AACnF,SAAO;AACT;AASA,SAAS,gBACP,GACA,iBACW;AACX,QAAM,IAAI,EAAE;AACZ,QAAM,IAAI,EAAE;AACZ,QAAM,IAAI,EAAE;AACZ,QAAM,MAAM,EAAE;AACd,QAAM,aACJ,OAAO,MAAM,YACb,OAAO,MAAM,YACb,OAAO,MAAM,YACb,OAAO,QAAQ,WACX,EAAE,aAAa,GAAG,eAAe,GAAG,eAAe,GAAG,IAAI,IAC1D;AACN,SAAO;AAAA,IACL,IAAI,EAAE;AAAA,IACN,UAAU,EAAE,aAAa;AAAA,IACzB,QAAQ,EAAE,WAAW;AAAA,IACrB,YAAY,aAAa,EAAE,eAAe,MAAS;AAAA,IACnD,QAAQ,EAAE;AAAA,IACV,aAAa,EAAE;AAAA,IACf,WAAW,EAAE;AAAA,IACb,aAAa,EAAE;AAAA,IACf;AAAA,IACA,gBAAgB,EAAE;AAAA,IAClB,iBAAiB,EAAE;AAAA,IACnB,kBAAkB,KAAK,EAAE,kBAAkB;AAAA,IAC3C,gBAAgB,EAAE;AAAA,IAClB,gBAAgB,EAAE;AAAA,IAClB,YAAY,EAAE;AAAA,IACd,iBAAiB,EAAE;AAAA,IACnB,YAAY,EAAE,gBAAgB;AAAA,IAC9B,gBAAgB,EAAE,qBAAqB;AAAA,IACvC,QAAQ,EAAE;AAAA,IACV,YAAY,EAAE;AAAA,IACd,YAAY,EAAE;AAAA,IACd,gBAAiB,EAAE,mBAAmB;AAAA;AAAA;AAAA;AAAA,IAItC,wBAAwB,kBACpB,EAAE,KAAK,gBAAgB,EAAE,EAAE,YAAY,UAAU,GAAG,EAAE,aAAa,EAAE,EAAE,QAAQ,IAC/E;AAAA,IACJ,iBAAiB,EAAE;AAAA,IACnB,WAAW,oBAAoB,EAAE,SAAS;AAAA,IAC1C,cAAc,kBAAkB,EAAE,uBAAuB;AAAA,IACzD,cAAc,EAAE,kBAAkB;AAAA,IAClC,gBAAgB,EAAE;AAAA,IAClB,YAAY,EAAE;AAAA,IACd,YAAY,EAAE;AAAA,EAChB;AACF;AAQO,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIA,IAAM,oBAAoB,iCAAyC,GAAG,mBAAmB;AAIzF,eAAsB,eAAe,IAA8B;AACjE,QAAM,OAAO,MAAM,GAChB,WAAW,SAAS,EACpB,OAAO,mBAAmB,EAC1B,OAAO,iBAAiB,EACxB,QAAQ,gBAAgB,MAAM,EAC9B,QAAQ,IAAI,EACZ,QAAQ;AACX,SAAO,KAAK,IAAI,CAAC,MAAM,gBAAgB,GAAG,EAAE,sBAAsB,CAAC,CAAC;AACtE;AAKA,eAAsB,mBAAmB,IAAQ,QAAsC;AACrF,QAAM,OAAO,MAAM,GAChB,WAAW,SAAS,EACpB,OAAO,mBAAmB,EAC1B,OAAO,iBAAiB,EACxB,MAAM,WAAW,KAAK,MAAM,EAC5B,QAAQ,gBAAgB,MAAM,EAC9B,QAAQ,IAAI,EACZ,QAAQ;AACX,SAAO,KAAK,IAAI,CAAC,MAAM,gBAAgB,GAAG,EAAE,sBAAsB,CAAC,CAAC;AACtE;AAaA,eAAsB,oBAAoB,IAA8B;AACtE,QAAM,OAAO,MAAM,GAChB,WAAW,SAAS,EACpB,OAAO,mBAAmB,EAC1B,OAAO,iBAAiB,EACxB,MAAM,eAAe,KAAK,CAAC,EAC3B,MAAM,oBAAoB,KAAK,CAAC,EAChC,MAAM,WAAW,MAAM,IAAI,EAC3B,QAAQ,gBAAgB,MAAM,EAC9B,QAAQ,IAAI,EACZ,QAAQ;AACX,SAAO,KAAK,IAAI,CAAC,MAAM,gBAAgB,GAAG,EAAE,sBAAsB,CAAC,CAAC;AACtE;AA+DA,eAAsB,kBACpB,IACA,UACA,OACkB;AAClB,MAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO;AAC5C,QAAM,MAAM,MAAM,GACf,YAAY,SAAS,EACrB,IAAI,KAAK,EACT,MAAM,MAAM,KAAK,QAAQ,EACzB,iBAAiB;AAEpB,SAAO,IAAI,iBAAiB;AAC9B;AAgBA,eAAsB,mBAAmB,IAAQ,KAA+B;AAC9E,QAAM,MAAM,gBAAgB,KAAK,IAAI;AACrC,QAAM,EAAE,eAAe,KAAK,GAAG,YAAY,IAAI;AAC/C,OAAK;AACL,QAAM,GACH,WAAW,SAAS,EACpB,OAAO,GAAG,EACV,WAAW,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,YAAY,WAAW,CAAC,EAC3D,QAAQ;AACb;AAgBA,eAAsB,gBAAgB,IAAQ,KAA+B;AAC3E,QAAM,GAAG,WAAW,SAAS,EAAE,OAAO,gBAAgB,KAAK,IAAI,CAAC,EAAE,QAAQ;AAC5E;AAcA,eAAsB,kBAAkB,IAAQ,UAAkB,MAA6B;AAC7F,QAAM,GAAG,YAAY,SAAS,EAAE,IAAI,EAAE,eAAe,KAAK,CAAC,EAAE,MAAM,MAAM,KAAK,QAAQ,EAAE,QAAQ;AAClG;AAGA,eAAsB,cAAc,IAAQ,IAAuC;AACjF,QAAM,IAAI,MAAM,GAAG,WAAW,SAAS,EAAE,UAAU,EAAE,MAAM,MAAM,KAAK,EAAE,EAAE,iBAAiB;AAC3F,SAAO,IAAI,gBAAgB,GAAG,EAAE,kBAAkB,IAAI,IAAI;AAC5D;AAQA,eAAsB,sBAAsB,IAAQ,WAA8C;AAChG,QAAM,IAAI,MAAM,GACb,WAAW,SAAS,EACpB,OAAO,mBAAmB,EAC1B,OAAO,iBAAiB,EACxB,MAAM,qBAAqB,KAAK,SAAS,EACzC,MAAM,CAAC,EACP,iBAAiB;AACpB,SAAO,IAAI,gBAAgB,GAAG,EAAE,sBAAsB,CAAC,IAAI;AAC7D;AAIA,eAAsB,cACpB,IACA,IAC2D;AAC3D,QAAM,IAAI,MAAM,GACb,WAAW,SAAS,EACpB,OAAO,CAAC,iBAAiB,WAAW,CAAC,EACrC,MAAM,MAAM,KAAK,EAAE,EACnB,iBAAiB;AACpB,MAAI,CAAC,KAAK,EAAE,kBAAkB,KAAM,QAAO;AAC3C,SAAO,EAAE,MAAM,EAAE,eAAe,UAAU,EAAE,UAAU;AACxD;","names":[]}

package/dist/{chunk-2NQUCS7O.js → chunk-BIYQN7FH.js}

@@ -46,6 +46,8 @@ async function readSiteConfig(sitePath) {
     const clean = routes.filter((r) => typeof r === "string").map((r) => r.trim()).filter((r) => r.length > 0);
     if (clean.length > 0) out.a11yRoutes = clean;
   }
+  const gate = cfg.gateServer;
+  if (gate === "dev" || gate === "preview") out.gateServer = gate;
   return out;
 }
 
@@ -240,4 +242,4 @@ export {
   readSiteConfig,
   lighthouseAudit
 };
-//# sourceMappingURL=chunk-2NQUCS7O.js.map
+//# sourceMappingURL=chunk-BIYQN7FH.js.map