@reddoorla/maintenance 0.95.1 → 0.97.0

package/dist/{selftest-VXTHRPRN.js → selftest-G4W3LIBQ.js}

@@ -1,24 +1,25 @@
-import {
-  operatorEmail
-} from "./chunk-5ML7FMBD.js";
 import {
   buildReportDataForSite,
   scoresFromRow
-} from "./chunk-WMBLR5VA.js";
-import "./chunk-BYGPUUCT.js";
-import "./chunk-YFAXOD7Z.js";
+} from "./chunk-PZZ6HM5T.js";
+import {
+  operatorEmail
+} from "./chunk-5ML7FMBD.js";
+import "./chunk-DRNZVORX.js";
+import "./chunk-UPE6D4AT.js";
 import {
   ELIGIBLE_STATUSES
 } from "./chunk-PZR4EBPY.js";
 import {
   isProbablyEmail,
   parseAddresses
-} from "./chunk-2ZAZ7ETT.js";
-import "./chunk-F3JWOPTG.js";
+} from "./chunk-LDHRIQUW.js";
+import "./chunk-TEMQPSCM.js";
+import "./chunk-ASLDCWBF.js";
 import "./chunk-VAD43MOR.js";
 import {
   fetchAttachmentBytes
-} from "./chunk-IY6256GK.js";
+} from "./chunk-YJBSB4LP.js";
 import {
   openBase,
   readAirtableConfig
@@ -26,23 +27,26 @@ import {
 import {
   prepareHeaderImage,
   renderReportEmail
-} from "./chunk-HTABUCF4.js";
+} from "./chunk-6THEZQLA.js";
 import "./chunk-GECESMVS.js";
 import "./chunk-KJGKZLCT.js";
 import "./chunk-BGTYPVLT.js";
 import {
   applyReportTypeHeadline
-} from "./chunk-5UINJNAJ.js";
+} from "./chunk-LZMAG73U.js";
+import {
+  listWebsites
+} from "./chunk-TC4GANMX.js";
 import {
-  listWebsites,
   siteSlug
-} from "./chunk-3Z6X3BHU.js";
+} from "./chunk-ICSRWW5Q.js";
+import "./chunk-RQJFGK3A.js";
 import {
   defaultResendClient
 } from "./chunk-WEKL2HYJ.js";
-import "./chunk-BI2VI6EM.js";
-import "./chunk-VSGMCCGQ.js";
-import "./chunk-C3IQQKXL.js";
+import "./chunk-YXWBM26P.js";
+import "./chunk-MMSMZC7S.js";
+import "./chunk-IOTOOTII.js";
 import "./chunk-RARREDQE.js";
 import "./chunk-6VAL7XJT.js";
 
@@ -172,4 +176,4 @@ async function runSelftestCommand(kind, site, opts) {
 export {
   runSelftestCommand
 };
-//# sourceMappingURL=selftest-VXTHRPRN.js.map
+//# sourceMappingURL=selftest-G4W3LIBQ.js.map

package/dist/{selftest-VXTHRPRN.js.map → selftest-G4W3LIBQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/recipes/selftest-email.ts","../src/cli/commands/selftest.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\nimport { openBase, readAirtableConfig } from \"../reports/airtable/client.js\";\nimport type { AirtableBase } from \"../reports/airtable/client.js\";\nimport { listWebsites, siteSlug } from \"../reports/airtable/websites.js\";\nimport { ELIGIBLE_STATUSES } from \"../reports/due.js\";\nimport type { WebsiteRow } from \"../reports/airtable/websites.js\";\nimport { fetchAttachmentBytes } from \"../reports/airtable/attachments.js\";\nimport { prepareHeaderImage } from \"../reports/maintenance-email/header-image.js\";\nimport { applyReportTypeHeadline } from \"../reports/header-image/index.js\";\nimport { buildReportDataForSite, scoresFromRow } from \"../reports/report-data.js\";\nimport { renderReportEmail } from \"../reports/send/render-email.js\";\nimport { defaultResendClient, type ResendClient } from \"../reports/send/resend.js\";\nimport { parseAddresses, isProbablyEmail } from \"../reports/send/orchestrate.js\";\nimport { operatorEmail } from \"../util/operator.js\";\nimport type { ReportType } from \"../reports/types.js\";\n\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\nconst REPLY_TO = \"info@reddoorla.com\";\n\nexport type SelftestEmailDeps = {\n  /** Airtable handle (read-only here). Defaults to the live base from credentials. */\n  base?: AirtableBase;\n  /** Resend client. Defaults to the real client. */\n  resend?: ResendClient;\n  /** Single-site slug. Mutually exclusive with `all`. */\n  site?: string;\n  /** All `maintenance` sites (one email each). Mutually exclusive with `site`. */\n  all?: boolean;\n  /** Report type to preview. Default \"Announcement\". */\n  type?: ReportType;\n  /** Raw `--to` (comma- or newline-separated). Default: the operator inbox. */\n  to?: string;\n  /** Render only; write reports/<slug>/selftest-<type>.html, never send. */\n  dryRun?: boolean;\n  /** Single timestamp driving the window + completedOn. */\n  now?: Date;\n};\n\nexport type SelftestEmailSiteResult =\n  | { site: string; status: \"sent\" | \"dry-run\"; subject: string; recipients: string[] }\n  | { site: string; status: \"skipped\"; reason: string }\n  | { site: string; status: \"error\"; message: string };\n\nexport type SelftestEmailResult = { results: SelftestEmailSiteResult[] };\n\n/** Resolve the recipient list: explicit `--to` (validated) else the operator default. */\nfunction resolveRecipients(to: string | undefined): string[] {\n  const operator = operatorEmail();\n  const parsed = to ? parseAddresses(to) : null;\n  const list = parsed ?? [operator];\n  for (const addr of list) {\n    if (!isProbablyEmail(addr)) {\n      throw Object.assign(new Error(`--to has a malformed address: ${addr}`), { exitCode: 2 });\n    }\n  }\n  return list;\n}\n\n/**\n * Send (or dry-render) a single report email per target site to the operator/`--to`, with NO\n * Airtable side effects (no draft, queue, or stamp). Mirrors the production render+send via the\n * shared `renderReportEmail` seam, so the preview matches a real send. One bad site never aborts\n * `--all` (per-site try/catch). Sites missing stored scores or a header image are skipped.\n */\nexport async function selftestEmail(deps: SelftestEmailDeps): Promise<SelftestEmailResult> {\n  const base = deps.base ?? openBase(readAirtableConfig());\n  const resend = deps.resend ?? defaultResendClient();\n  const type: ReportType = deps.type ?? \"Announcement\";\n  const now = deps.now ?? new Date();\n  const recipients = resolveRecipients(deps.to);\n\n  const websites = await listWebsites(base);\n  let targets: WebsiteRow[];\n  if (deps.all) {\n    // The report-eligible set (maintained + hosted-only), not a hard-coded \"maintained\" —\n    // the latter silently excluded hosting sites and implied a type↔status coupling that\n    // doesn't exist (the requested --type drives the rendered template; single-site mode\n    // applies no status filter at all).\n    targets = websites.filter((w) => w.status !== null && ELIGIBLE_STATUSES.has(w.status));\n  } else if (deps.site) {\n    const wanted = siteSlug(deps.site);\n    targets = websites.filter((w) => siteSlug(w.name) === wanted);\n  } else {\n    throw Object.assign(new Error(\"Provide a site slug or --all\"), { exitCode: 2 });\n  }\n\n  const results: SelftestEmailSiteResult[] = [];\n  for (const w of targets) {\n    try {\n      const scores = scoresFromRow(w);\n      if (!scores) {\n        results.push({ site: w.name, status: \"skipped\", reason: \"missing Lighthouse scores\" });\n        continue;\n      }\n      if (!w.headerImage) {\n        results.push({ site: w.name, status: \"skipped\", reason: \"no Header image\" });\n        continue;\n      }\n      const original = await fetchAttachmentBytes(w.headerImage.url);\n      // Mirror orchestrate.ts exactly: the stored header is the CLEAN plate, so the\n      // report type's headline has to be stamped on before downscaling. Omitting this\n      // step made every selftest preview ship a header with an EMPTY headline band —\n      // the one thing a preview exists to catch, silently wrong in the preview itself.\n      const withHeadline = await applyReportTypeHeadline(original.bytes, type);\n      const header = await prepareHeaderImage(withHeadline);\n      const slug = siteSlug(w.name);\n      const reportData = await buildReportDataForSite(w, type, now, { scores, header });\n      const { html, attachments, subject } = await renderReportEmail(reportData, {\n        header,\n        cidName: `${slug}-header`,\n      });\n\n      if (deps.dryRun) {\n        const path = `reports/${slug}/selftest-${type.toLowerCase()}.html`;\n        await mkdir(dirname(path), { recursive: true });\n        await writeFile(path, html, \"utf-8\");\n        results.push({ site: w.name, status: \"dry-run\", subject, recipients });\n        continue;\n      }\n\n      await resend.send({\n        from: FROM_ADDRESS,\n        to: recipients,\n        replyTo: REPLY_TO,\n        subject,\n        html,\n        attachments,\n      });\n      results.push({ site: w.name, status: \"sent\", subject, recipients });\n    } catch (err) {\n      results.push({\n        site: w.name,\n        status: \"error\",\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  return { results };\n}\n","import { selftestEmail, type SelftestEmailSiteResult } from \"../../recipes/selftest-email.js\";\nimport type { ReportType } from \"../../reports/types.js\";\n\nexport type SelftestCommandOptions = {\n  type?: string;\n  to?: string;\n  all?: boolean;\n  dryRun?: boolean;\n  cwd?: string;\n};\n\nconst TYPES: Record<string, ReportType> = {\n  announcement: \"Announcement\",\n  maintenance: \"Maintenance\",\n  testing: \"Testing\",\n  launch: \"Launch\",\n};\n\nfunction formatResult(r: SelftestEmailSiteResult): string {\n  if (r.status === \"skipped\") return `[${r.site}] skipped — ${r.reason}`;\n  if (r.status === \"error\") return `[${r.site}] error: ${r.message}`;\n  return `[${r.site}] ${r.status} — \"${r.subject}\" → ${r.recipients.join(\", \")}`;\n}\n\n/**\n * `selftest <kind> [site]` — operator self-tests. The only kind today is `email`: preview a\n * report email for one site (or `--all` maintenance sites) to the operator/`--to`, with no\n * Airtable side effects. Validates kind/type and the site-xor-all rule before doing any work.\n */\nexport async function runSelftestCommand(\n  kind: string,\n  site: string | undefined,\n  opts: SelftestCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (kind !== \"email\") {\n    return { output: `Unknown selftest kind '${kind}'. Supported: email`, code: 2 };\n  }\n  if (Boolean(site) === Boolean(opts.all)) {\n    return { output: \"Provide exactly one of <site> or --all.\", code: 2 };\n  }\n  const typeKey = (opts.type ?? \"announcement\").toLowerCase();\n  const type = TYPES[typeKey];\n  if (!type) {\n    return {\n      output: `Unknown --type '${opts.type}'. Supported: ${Object.keys(TYPES).join(\", \")}`,\n      code: 2,\n    };\n  }\n\n  try {\n    const { results } = await selftestEmail({\n      ...(site ? { site } : {}),\n      ...(opts.all ? { all: true } : {}),\n      type,\n      ...(opts.to ? { to: opts.to } : {}),\n      ...(opts.dryRun ? { dryRun: true } : {}),\n    });\n    const output =\n      results.length === 0 ? \"No matching sites.\" : results.map(formatResult).join(\"\\n\");\n    const code = results.some((r) => r.status === \"error\") ? 1 : 0;\n    return { output, code };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAgBxB,IAAM,eAAe;AACrB,IAAM,WAAW;AA6BjB,SAAS,kBAAkB,IAAkC;AAC3D,QAAM,WAAW,cAAc;AAC/B,QAAM,SAAS,KAAK,eAAe,EAAE,IAAI;AACzC,QAAM,OAAO,UAAU,CAAC,QAAQ;AAChC,aAAW,QAAQ,MAAM;AACvB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,YAAM,OAAO,OAAO,IAAI,MAAM,iCAAiC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,IACzF;AAAA,EACF;AACA,SAAO;AACT;AAQA,eAAsB,cAAc,MAAuD;AACzF,QAAM,OAAO,KAAK,QAAQ,SAAS,mBAAmB,CAAC;AACvD,QAAM,SAAS,KAAK,UAAU,oBAAoB;AAClD,QAAM,OAAmB,KAAK,QAAQ;AACtC,QAAM,MAAM,KAAK,OAAO,oBAAI,KAAK;AACjC,QAAM,aAAa,kBAAkB,KAAK,EAAE;AAE5C,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,MAAI;AACJ,MAAI,KAAK,KAAK;AAKZ,cAAU,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ,kBAAkB,IAAI,EAAE,MAAM,CAAC;AAAA,EACvF,WAAW,KAAK,MAAM;AACpB,UAAM,SAAS,SAAS,KAAK,IAAI;AACjC,cAAU,SAAS,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,MAAM;AAAA,EAC9D,OAAO;AACL,UAAM,OAAO,OAAO,IAAI,MAAM,8BAA8B,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,EAChF;AAEA,QAAM,UAAqC,CAAC;AAC5C,aAAW,KAAK,SAAS;AACvB,QAAI;AACF,YAAM,SAAS,cAAc,CAAC;AAC9B,UAAI,CAAC,QAAQ;AACX,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,QAAQ,4BAA4B,CAAC;AACrF;AAAA,MACF;AACA,UAAI,CAAC,EAAE,aAAa;AAClB,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,QAAQ,kBAAkB,CAAC;AAC3E;AAAA,MACF;AACA,YAAM,WAAW,MAAM,qBAAqB,EAAE,YAAY,GAAG;AAK7D,YAAM,eAAe,MAAM,wBAAwB,SAAS,OAAO,IAAI;AACvE,YAAM,SAAS,MAAM,mBAAmB,YAAY;AACpD,YAAM,OAAO,SAAS,EAAE,IAAI;AAC5B,YAAM,aAAa,MAAM,uBAAuB,GAAG,MAAM,KAAK,EAAE,QAAQ,OAAO,CAAC;AAChF,YAAM,EAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,kBAAkB,YAAY;AAAA,QACzE;AAAA,QACA,SAAS,GAAG,IAAI;AAAA,MAClB,CAAC;AAED,UAAI,KAAK,QAAQ;AACf,cAAM,OAAO,WAAW,IAAI,aAAa,KAAK,YAAY,CAAC;AAC3D,cAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9C,cAAM,UAAU,MAAM,MAAM,OAAO;AACnC,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,SAAS,WAAW,CAAC;AACrE;AAAA,MACF;AAEA,YAAM,OAAO,KAAK;AAAA,QAChB,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,cAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,QAAQ,SAAS,WAAW,CAAC;AAAA,IACpE,SAAS,KAAK;AACZ,cAAQ,KAAK;AAAA,QACX,MAAM,EAAE;AAAA,QACR,QAAQ;AAAA,QACR,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ;AACnB;;;ACjIA,IAAM,QAAoC;AAAA,EACxC,cAAc;AAAA,EACd,aAAa;AAAA,EACb,SAAS;AAAA,EACT,QAAQ;AACV;AAEA,SAAS,aAAa,GAAoC;AACxD,MAAI,EAAE,WAAW,UAAW,QAAO,IAAI,EAAE,IAAI,oBAAe,EAAE,MAAM;AACpE,MAAI,EAAE,WAAW,QAAS,QAAO,IAAI,EAAE,IAAI,YAAY,EAAE,OAAO;AAChE,SAAO,IAAI,EAAE,IAAI,KAAK,EAAE,MAAM,YAAO,EAAE,OAAO,YAAO,EAAE,WAAW,KAAK,IAAI,CAAC;AAC9E;AAOA,eAAsB,mBACpB,MACA,MACA,MAC2C;AAC3C,MAAI,SAAS,SAAS;AACpB,WAAO,EAAE,QAAQ,0BAA0B,IAAI,uBAAuB,MAAM,EAAE;AAAA,EAChF;AACA,MAAI,QAAQ,IAAI,MAAM,QAAQ,KAAK,GAAG,GAAG;AACvC,WAAO,EAAE,QAAQ,2CAA2C,MAAM,EAAE;AAAA,EACtE;AACA,QAAM,WAAW,KAAK,QAAQ,gBAAgB,YAAY;AAC1D,QAAM,OAAO,MAAM,OAAO;AAC1B,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,QAAQ,mBAAmB,KAAK,IAAI,iBAAiB,OAAO,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC;AAAA,MAClF,MAAM;AAAA,IACR;AAAA,EACF;AAEA,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,cAAc;AAAA,MACtC,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,MACvB,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,MAChC;AAAA,MACA,GAAI,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MACjC,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,IACxC,CAAC;AACD,UAAM,SACJ,QAAQ,WAAW,IAAI,uBAAuB,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AACnF,UAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,IAAI,IAAI;AAC7D,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}
+{"version":3,"sources":["../src/recipes/selftest-email.ts","../src/cli/commands/selftest.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\nimport { openBase, readAirtableConfig } from \"../reports/airtable/client.js\";\nimport type { AirtableBase } from \"../reports/airtable/client.js\";\nimport { listWebsites, siteSlug } from \"../reports/airtable/websites.js\";\nimport { ELIGIBLE_STATUSES } from \"../reports/due.js\";\nimport type { WebsiteRow } from \"../reports/airtable/websites.js\";\nimport { fetchAttachmentBytes } from \"../reports/airtable/attachments.js\";\nimport { prepareHeaderImage } from \"../reports/maintenance-email/header-image.js\";\nimport { applyReportTypeHeadline } from \"../reports/header-image/index.js\";\nimport { buildReportDataForSite, scoresFromRow } from \"../reports/report-data.js\";\nimport { renderReportEmail } from \"../reports/send/render-email.js\";\nimport { defaultResendClient, type ResendClient } from \"../reports/send/resend.js\";\nimport { parseAddresses, isProbablyEmail } from \"../reports/send/orchestrate.js\";\nimport { operatorEmail } from \"../util/operator.js\";\nimport type { ReportType } from \"../reports/types.js\";\n\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\nconst REPLY_TO = \"info@reddoorla.com\";\n\nexport type SelftestEmailDeps = {\n  /** Airtable handle (read-only here). Defaults to the live base from credentials. */\n  base?: AirtableBase;\n  /** Resend client. Defaults to the real client. */\n  resend?: ResendClient;\n  /** Single-site slug. Mutually exclusive with `all`. */\n  site?: string;\n  /** All `maintenance` sites (one email each). Mutually exclusive with `site`. */\n  all?: boolean;\n  /** Report type to preview. Default \"Announcement\". */\n  type?: ReportType;\n  /** Raw `--to` (comma- or newline-separated). Default: the operator inbox. */\n  to?: string;\n  /** Render only; write reports/<slug>/selftest-<type>.html, never send. */\n  dryRun?: boolean;\n  /** Single timestamp driving the window + completedOn. */\n  now?: Date;\n};\n\nexport type SelftestEmailSiteResult =\n  | { site: string; status: \"sent\" | \"dry-run\"; subject: string; recipients: string[] }\n  | { site: string; status: \"skipped\"; reason: string }\n  | { site: string; status: \"error\"; message: string };\n\nexport type SelftestEmailResult = { results: SelftestEmailSiteResult[] };\n\n/** Resolve the recipient list: explicit `--to` (validated) else the operator default. */\nfunction resolveRecipients(to: string | undefined): string[] {\n  const operator = operatorEmail();\n  const parsed = to ? parseAddresses(to) : null;\n  const list = parsed ?? [operator];\n  for (const addr of list) {\n    if (!isProbablyEmail(addr)) {\n      throw Object.assign(new Error(`--to has a malformed address: ${addr}`), { exitCode: 2 });\n    }\n  }\n  return list;\n}\n\n/**\n * Send (or dry-render) a single report email per target site to the operator/`--to`, with NO\n * Airtable side effects (no draft, queue, or stamp). Mirrors the production render+send via the\n * shared `renderReportEmail` seam, so the preview matches a real send. One bad site never aborts\n * `--all` (per-site try/catch). Sites missing stored scores or a header image are skipped.\n */\nexport async function selftestEmail(deps: SelftestEmailDeps): Promise<SelftestEmailResult> {\n  const base = deps.base ?? openBase(readAirtableConfig());\n  const resend = deps.resend ?? defaultResendClient();\n  const type: ReportType = deps.type ?? \"Announcement\";\n  const now = deps.now ?? new Date();\n  const recipients = resolveRecipients(deps.to);\n\n  const websites = await listWebsites(base);\n  let targets: WebsiteRow[];\n  if (deps.all) {\n    // The report-eligible set (maintained + hosted-only), not a hard-coded \"maintained\" —\n    // the latter silently excluded hosting sites and implied a type↔status coupling that\n    // doesn't exist (the requested --type drives the rendered template; single-site mode\n    // applies no status filter at all).\n    targets = websites.filter((w) => w.status !== null && ELIGIBLE_STATUSES.has(w.status));\n  } else if (deps.site) {\n    const wanted = siteSlug(deps.site);\n    targets = websites.filter((w) => siteSlug(w.name) === wanted);\n  } else {\n    throw Object.assign(new Error(\"Provide a site slug or --all\"), { exitCode: 2 });\n  }\n\n  const results: SelftestEmailSiteResult[] = [];\n  for (const w of targets) {\n    try {\n      const scores = scoresFromRow(w);\n      if (!scores) {\n        results.push({ site: w.name, status: \"skipped\", reason: \"missing Lighthouse scores\" });\n        continue;\n      }\n      if (!w.headerImage) {\n        results.push({ site: w.name, status: \"skipped\", reason: \"no Header image\" });\n        continue;\n      }\n      const original = await fetchAttachmentBytes(w.headerImage.url);\n      // Mirror orchestrate.ts exactly: the stored header is the CLEAN plate, so the\n      // report type's headline has to be stamped on before downscaling. Omitting this\n      // step made every selftest preview ship a header with an EMPTY headline band —\n      // the one thing a preview exists to catch, silently wrong in the preview itself.\n      const withHeadline = await applyReportTypeHeadline(original.bytes, type);\n      const header = await prepareHeaderImage(withHeadline);\n      const slug = siteSlug(w.name);\n      const reportData = await buildReportDataForSite(w, type, now, { scores, header });\n      const { html, attachments, subject } = await renderReportEmail(reportData, {\n        header,\n        cidName: `${slug}-header`,\n      });\n\n      if (deps.dryRun) {\n        const path = `reports/${slug}/selftest-${type.toLowerCase()}.html`;\n        await mkdir(dirname(path), { recursive: true });\n        await writeFile(path, html, \"utf-8\");\n        results.push({ site: w.name, status: \"dry-run\", subject, recipients });\n        continue;\n      }\n\n      await resend.send({\n        from: FROM_ADDRESS,\n        to: recipients,\n        replyTo: REPLY_TO,\n        subject,\n        html,\n        attachments,\n      });\n      results.push({ site: w.name, status: \"sent\", subject, recipients });\n    } catch (err) {\n      results.push({\n        site: w.name,\n        status: \"error\",\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  return { results };\n}\n","import { selftestEmail, type SelftestEmailSiteResult } from \"../../recipes/selftest-email.js\";\nimport type { ReportType } from \"../../reports/types.js\";\n\nexport type SelftestCommandOptions = {\n  type?: string;\n  to?: string;\n  all?: boolean;\n  dryRun?: boolean;\n  cwd?: string;\n};\n\nconst TYPES: Record<string, ReportType> = {\n  announcement: \"Announcement\",\n  maintenance: \"Maintenance\",\n  testing: \"Testing\",\n  launch: \"Launch\",\n};\n\nfunction formatResult(r: SelftestEmailSiteResult): string {\n  if (r.status === \"skipped\") return `[${r.site}] skipped — ${r.reason}`;\n  if (r.status === \"error\") return `[${r.site}] error: ${r.message}`;\n  return `[${r.site}] ${r.status} — \"${r.subject}\" → ${r.recipients.join(\", \")}`;\n}\n\n/**\n * `selftest <kind> [site]` — operator self-tests. The only kind today is `email`: preview a\n * report email for one site (or `--all` maintenance sites) to the operator/`--to`, with no\n * Airtable side effects. Validates kind/type and the site-xor-all rule before doing any work.\n */\nexport async function runSelftestCommand(\n  kind: string,\n  site: string | undefined,\n  opts: SelftestCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (kind !== \"email\") {\n    return { output: `Unknown selftest kind '${kind}'. Supported: email`, code: 2 };\n  }\n  if (Boolean(site) === Boolean(opts.all)) {\n    return { output: \"Provide exactly one of <site> or --all.\", code: 2 };\n  }\n  const typeKey = (opts.type ?? \"announcement\").toLowerCase();\n  const type = TYPES[typeKey];\n  if (!type) {\n    return {\n      output: `Unknown --type '${opts.type}'. Supported: ${Object.keys(TYPES).join(\", \")}`,\n      code: 2,\n    };\n  }\n\n  try {\n    const { results } = await selftestEmail({\n      ...(site ? { site } : {}),\n      ...(opts.all ? { all: true } : {}),\n      type,\n      ...(opts.to ? { to: opts.to } : {}),\n      ...(opts.dryRun ? { dryRun: true } : {}),\n    });\n    const output =\n      results.length === 0 ? \"No matching sites.\" : results.map(formatResult).join(\"\\n\");\n    const code = results.some((r) => r.status === \"error\") ? 1 : 0;\n    return { output, code };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAgBxB,IAAM,eAAe;AACrB,IAAM,WAAW;AA6BjB,SAAS,kBAAkB,IAAkC;AAC3D,QAAM,WAAW,cAAc;AAC/B,QAAM,SAAS,KAAK,eAAe,EAAE,IAAI;AACzC,QAAM,OAAO,UAAU,CAAC,QAAQ;AAChC,aAAW,QAAQ,MAAM;AACvB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,YAAM,OAAO,OAAO,IAAI,MAAM,iCAAiC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,IACzF;AAAA,EACF;AACA,SAAO;AACT;AAQA,eAAsB,cAAc,MAAuD;AACzF,QAAM,OAAO,KAAK,QAAQ,SAAS,mBAAmB,CAAC;AACvD,QAAM,SAAS,KAAK,UAAU,oBAAoB;AAClD,QAAM,OAAmB,KAAK,QAAQ;AACtC,QAAM,MAAM,KAAK,OAAO,oBAAI,KAAK;AACjC,QAAM,aAAa,kBAAkB,KAAK,EAAE;AAE5C,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,MAAI;AACJ,MAAI,KAAK,KAAK;AAKZ,cAAU,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ,kBAAkB,IAAI,EAAE,MAAM,CAAC;AAAA,EACvF,WAAW,KAAK,MAAM;AACpB,UAAM,SAAS,SAAS,KAAK,IAAI;AACjC,cAAU,SAAS,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,MAAM;AAAA,EAC9D,OAAO;AACL,UAAM,OAAO,OAAO,IAAI,MAAM,8BAA8B,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,EAChF;AAEA,QAAM,UAAqC,CAAC;AAC5C,aAAW,KAAK,SAAS;AACvB,QAAI;AACF,YAAM,SAAS,cAAc,CAAC;AAC9B,UAAI,CAAC,QAAQ;AACX,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,QAAQ,4BAA4B,CAAC;AACrF;AAAA,MACF;AACA,UAAI,CAAC,EAAE,aAAa;AAClB,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,QAAQ,kBAAkB,CAAC;AAC3E;AAAA,MACF;AACA,YAAM,WAAW,MAAM,qBAAqB,EAAE,YAAY,GAAG;AAK7D,YAAM,eAAe,MAAM,wBAAwB,SAAS,OAAO,IAAI;AACvE,YAAM,SAAS,MAAM,mBAAmB,YAAY;AACpD,YAAM,OAAO,SAAS,EAAE,IAAI;AAC5B,YAAM,aAAa,MAAM,uBAAuB,GAAG,MAAM,KAAK,EAAE,QAAQ,OAAO,CAAC;AAChF,YAAM,EAAE,MAAM,aAAa,QAAQ,IAAI,MAAM,kBAAkB,YAAY;AAAA,QACzE;AAAA,QACA,SAAS,GAAG,IAAI;AAAA,MAClB,CAAC;AAED,UAAI,KAAK,QAAQ;AACf,cAAM,OAAO,WAAW,IAAI,aAAa,KAAK,YAAY,CAAC;AAC3D,cAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9C,cAAM,UAAU,MAAM,MAAM,OAAO;AACnC,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,WAAW,SAAS,WAAW,CAAC;AACrE;AAAA,MACF;AAEA,YAAM,OAAO,KAAK;AAAA,QAChB,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,cAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,QAAQ,SAAS,WAAW,CAAC;AAAA,IACpE,SAAS,KAAK;AACZ,cAAQ,KAAK;AAAA,QACX,MAAM,EAAE;AAAA,QACR,QAAQ;AAAA,QACR,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ;AACnB;;;ACjIA,IAAM,QAAoC;AAAA,EACxC,cAAc;AAAA,EACd,aAAa;AAAA,EACb,SAAS;AAAA,EACT,QAAQ;AACV;AAEA,SAAS,aAAa,GAAoC;AACxD,MAAI,EAAE,WAAW,UAAW,QAAO,IAAI,EAAE,IAAI,oBAAe,EAAE,MAAM;AACpE,MAAI,EAAE,WAAW,QAAS,QAAO,IAAI,EAAE,IAAI,YAAY,EAAE,OAAO;AAChE,SAAO,IAAI,EAAE,IAAI,KAAK,EAAE,MAAM,YAAO,EAAE,OAAO,YAAO,EAAE,WAAW,KAAK,IAAI,CAAC;AAC9E;AAOA,eAAsB,mBACpB,MACA,MACA,MAC2C;AAC3C,MAAI,SAAS,SAAS;AACpB,WAAO,EAAE,QAAQ,0BAA0B,IAAI,uBAAuB,MAAM,EAAE;AAAA,EAChF;AACA,MAAI,QAAQ,IAAI,MAAM,QAAQ,KAAK,GAAG,GAAG;AACvC,WAAO,EAAE,QAAQ,2CAA2C,MAAM,EAAE;AAAA,EACtE;AACA,QAAM,WAAW,KAAK,QAAQ,gBAAgB,YAAY;AAC1D,QAAM,OAAO,MAAM,OAAO;AAC1B,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,QAAQ,mBAAmB,KAAK,IAAI,iBAAiB,OAAO,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC;AAAA,MAClF,MAAM;AAAA,IACR;AAAA,EACF;AAEA,MAAI;AACF,UAAM,EAAE,QAAQ,IAAI,MAAM,cAAc;AAAA,MACtC,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,MACvB,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,MAChC;AAAA,MACA,GAAI,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC;AAAA,MACjC,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,IACxC,CAAC;AACD,UAAM,SACJ,QAAQ,WAAW,IAAI,uBAAuB,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AACnF,UAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,IAAI,IAAI;AAC7D,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/site-create-ZU3ACBTO.js

@@ -0,0 +1,45 @@
+import {
+  getSiteBySlug,
+  insertSiteRows,
+  updateSiteIdentity
+} from "./chunk-BINFZQ2T.js";
+import "./chunk-LF2TJN4X.js";
+import "./chunk-ASLDCWBF.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-ICSRWW5Q.js";
+
+// src/db/site-create.ts
+var SLUG_TAKEN = /UNIQUE constraint failed: sites\.slug/;
+function makeSiteStore(db, now = () => /* @__PURE__ */ new Date()) {
+  return {
+    findBySlug: async (slug) => {
+      const row = await getSiteBySlug(db, slug);
+      if (!row) return null;
+      return {
+        id: row.id,
+        name: row.name,
+        // `rowFromJoined` maps a null url to "" — undo that, so "blank" means one thing.
+        url: row.url === "" ? null : row.url,
+        pointOfContact: row.pointOfContact,
+        gitRepo: row.gitRepo
+      };
+    },
+    create: async (site) => {
+      try {
+        await db.transaction().execute((trx) => insertSiteRows(trx, site, now().toISOString()));
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const causeMessage = err instanceof Error && err.cause instanceof Error ? err.cause.message : "";
+        if (SLUG_TAKEN.test(message) || SLUG_TAKEN.test(causeMessage)) {
+          throw Object.assign(new Error(message, { cause: err }), { code: "SLUG_TAKEN" });
+        }
+        throw err;
+      }
+    },
+    updateIdentity: (siteId, patch) => updateSiteIdentity(db, siteId, patch)
+  };
+}
+export {
+  makeSiteStore
+};
+//# sourceMappingURL=site-create-ZU3ACBTO.js.map

package/dist/site-create-ZU3ACBTO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/site-create.ts"],"sourcesContent":["/** #646 step 3: the Turso half of the Turso-native `ensure-site`.\n *\n *  Turso is the source of truth for a new site, so this is NOT a mirror: nothing\n *  shadows it and nothing converges it. It adapts `fleet-state`'s gated queries\n *  to the `SiteStore` the creator (`src/fleet/ensure-site.ts`) drives, and adds\n *  the one thing those queries cannot express on their own — the transaction.\n *\n *  It lives in its own module, exempt from the EXPLAIN gate, for a concrete\n *  reason: the gate runs every scenario against ONE shared `:memory:` libSQL\n *  client, and `client.transaction()` on an in-memory client hands its connection\n *  to the transaction and opens a fresh, EMPTY database for the next statement\n *  (verified 2026-09-17: the statement after a committed transaction failed with\n *  `no such table`). Every SQL statement this module issues is `insertSiteRows` /\n *  `updateSiteIdentity` / `getSiteBySlug`, which the gate plans directly.\n *\n *  The same hazard means any test driving `create` must use a `file:` database.\n */\nimport type { Db } from \"./client.js\";\nimport { getSiteBySlug, insertSiteRows, updateSiteIdentity } from \"./fleet-state.js\";\nimport type { SiteStore } from \"../fleet/ensure-site.js\";\n\n/** SQLite's message for the `sites.slug` UNIQUE index, as libSQL surfaces it. */\nconst SLUG_TAKEN = /UNIQUE constraint failed: sites\\.slug/;\n\nexport function makeSiteStore(db: Db, now: () => Date = () => new Date()): SiteStore {\n  return {\n    findBySlug: async (slug) => {\n      const row = await getSiteBySlug(db, slug);\n      if (!row) return null;\n      return {\n        id: row.id,\n        name: row.name,\n        // `rowFromJoined` maps a null url to \"\" — undo that, so \"blank\" means one thing.\n        url: row.url === \"\" ? null : row.url,\n        pointOfContact: row.pointOfContact,\n        gitRepo: row.gitRepo,\n      };\n    },\n    create: async (site) => {\n      try {\n        await db.transaction().execute((trx) => insertSiteRows(trx, site, now().toISOString()));\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        const causeMessage =\n          err instanceof Error && err.cause instanceof Error ? err.cause.message : \"\";\n        if (SLUG_TAKEN.test(message) || SLUG_TAKEN.test(causeMessage)) {\n          throw Object.assign(new Error(message, { cause: err }), { code: \"SLUG_TAKEN\" });\n        }\n        throw err;\n      }\n    },\n    updateIdentity: (siteId, patch) => updateSiteIdentity(db, siteId, patch),\n  };\n}\n"],"mappings":";;;;;;;;;;;AAsBA,IAAM,aAAa;AAEZ,SAAS,cAAc,IAAQ,MAAkB,MAAM,oBAAI,KAAK,GAAc;AACnF,SAAO;AAAA,IACL,YAAY,OAAO,SAAS;AAC1B,YAAM,MAAM,MAAM,cAAc,IAAI,IAAI;AACxC,UAAI,CAAC,IAAK,QAAO;AACjB,aAAO;AAAA,QACL,IAAI,IAAI;AAAA,QACR,MAAM,IAAI;AAAA;AAAA,QAEV,KAAK,IAAI,QAAQ,KAAK,OAAO,IAAI;AAAA,QACjC,gBAAgB,IAAI;AAAA,QACpB,SAAS,IAAI;AAAA,MACf;AAAA,IACF;AAAA,IACA,QAAQ,OAAO,SAAS;AACtB,UAAI;AACF,cAAM,GAAG,YAAY,EAAE,QAAQ,CAAC,QAAQ,eAAe,KAAK,MAAM,IAAI,EAAE,YAAY,CAAC,CAAC;AAAA,MACxF,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAM,eACJ,eAAe,SAAS,IAAI,iBAAiB,QAAQ,IAAI,MAAM,UAAU;AAC3E,YAAI,WAAW,KAAK,OAAO,KAAK,WAAW,KAAK,YAAY,GAAG;AAC7D,gBAAM,OAAO,OAAO,IAAI,MAAM,SAAS,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM,aAAa,CAAC;AAAA,QAChF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,gBAAgB,CAAC,QAAQ,UAAU,mBAAmB,IAAI,QAAQ,KAAK;AAAA,EACzE;AACF;","names":[]}

package/dist/site-lookup-DTOLJ4EA.js

@@ -0,0 +1,27 @@
+import {
+  TURSO_IS_AUTHORITATIVE
+} from "./chunk-WQLNUEZL.js";
+
+// src/forms/site-lookup.ts
+function makeSiteLookup(deps, strict = TURSO_IS_AUTHORITATIVE) {
+  return async (slug) => {
+    const hit = await deps.fromDb(slug);
+    if (hit) return hit;
+    if (strict) return null;
+    return deps.fromAirtable(slug);
+  };
+}
+function makeLazySiteLookup(deps, strict = TURSO_IS_AUTHORITATIVE) {
+  return makeSiteLookup(
+    {
+      fromDb: deps.fromDb,
+      fromAirtable: (slug) => deps.fromAirtable(deps.openAirtable(), slug)
+    },
+    strict
+  );
+}
+export {
+  makeLazySiteLookup,
+  makeSiteLookup
+};
+//# sourceMappingURL=site-lookup-DTOLJ4EA.js.map

package/dist/site-lookup-DTOLJ4EA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/forms/site-lookup.ts"],"sourcesContent":["/** Phase 2 (#539): the Turso-primary site lookup for form ingest.\n *\n *  The hot path reads Turso only — this is what retires the 08-17 outage class,\n *  where an Airtable quota outage made `getWebsiteBySlug` throw while the lead\n *  store itself was healthy. Airtable is consulted ONLY when Turso has no row\n *  for the slug: the new-site window, where a site launched since the last\n *  hourly sync exists in Airtable but not yet in Turso. Real traffic posts to\n *  real sites' endpoints, so that fallback fires for brand-new sites and\n *  garbage slugs — never per lead.\n *\n *  Error semantics, both deliberate:\n *  - A Turso failure propagates WITHOUT trying Airtable: the lead store is\n *    Turso, so if it is down the submission cannot persist anyway — a fallback\n *    row would only manufacture a lookup success the write path then wastes.\n *  - An Airtable failure during the fallback propagates too, which hands the\n *    lead to the dead-letter (Turso is up in that scenario) for replay once\n *    the lookup recovers.\n */\nimport type { WebsiteRow } from \"../reports/airtable/websites.js\";\nimport { TURSO_IS_AUTHORITATIVE } from \"../db/freeze.js\";\n\nexport type SiteLookupDeps = {\n  fromDb: (slug: string) => Promise<WebsiteRow | null>;\n  fromAirtable: (slug: string) => Promise<WebsiteRow | null>;\n};\n\nexport function makeSiteLookup(\n  deps: SiteLookupDeps,\n  /** #612. `true` = post-freeze: the Airtable fallback is not consulted at all,\n   *  so form ingest touches one store. Injected so both sides stay proven and\n   *  the freeze commit stays a one-line change. */\n  strict: boolean = TURSO_IS_AUTHORITATIVE,\n): (slug: string) => Promise<WebsiteRow | null> {\n  return async (slug) => {\n    const hit = await deps.fromDb(slug);\n    if (hit) return hit;\n    // Post-freeze the fallback is not just unnecessary, it is WRONG: Airtable is\n    // frozen, so a row it still holds and Turso does not is stale by definition,\n    // and resolving a lead against it would attach that lead to a site the\n    // system no longer believes in. A miss is an unknown slug, full stop.\n    //\n    // What made the fallback load-bearing was a site created directly in the\n    // Airtable UI, before the next hourly import. Nothing hand-creates rows\n    // after the freeze, and `ensure-site` inserts straight into Turso (#608),\n    // so the window it covered no longer exists either.\n    if (strict) return null;\n    return deps.fromAirtable(slug);\n  };\n}\n\n/**\n * #645. The same lookup, with the Airtable client built LAZILY inside the\n * fallback — the shape both real callers need, in one place so they cannot\n * drift.\n *\n * Laziness is load-bearing, not tidiness. `readAirtableConfig()` THROWS when the\n * PAT is unset, so constructing the base eagerly puts the whole Airtable layer\n * in front of a path that (under the freeze) never consults it. `form-ingest.mts`\n * learned this the expensive way — an eager base is what put Airtable in front of\n * every lead. `db replay-deadletters` had the same bug with a worse blast radius:\n * it opened the base at the top of the branch, so a missing Airtable credential\n * refused the recovery of leads that were already captured and waiting.\n *\n * Generic in the base type so this module stays the leaf it is — it imports no\n * Airtable client, only `WebsiteRow`.\n */\nexport function makeLazySiteLookup<TBase>(\n  deps: {\n    fromDb: (slug: string) => Promise<WebsiteRow | null>;\n    /** Constructs the Airtable base. Called ONLY from inside the fallback, and\n     *  therefore never at all while `strict` is on. */\n    openAirtable: () => TBase;\n    fromAirtable: (base: TBase, slug: string) => Promise<WebsiteRow | null>;\n  },\n  strict: boolean = TURSO_IS_AUTHORITATIVE,\n): (slug: string) => Promise<WebsiteRow | null> {\n  return makeSiteLookup(\n    {\n      fromDb: deps.fromDb,\n      fromAirtable: (slug) => deps.fromAirtable(deps.openAirtable(), slug),\n    },\n    strict,\n  );\n}\n"],"mappings":";;;;;AA0BO,SAAS,eACd,MAIA,SAAkB,wBAC4B;AAC9C,SAAO,OAAO,SAAS;AACrB,UAAM,MAAM,MAAM,KAAK,OAAO,IAAI;AAClC,QAAI,IAAK,QAAO;AAUhB,QAAI,OAAQ,QAAO;AACnB,WAAO,KAAK,aAAa,IAAI;AAAA,EAC/B;AACF;AAkBO,SAAS,mBACd,MAOA,SAAkB,wBAC4B;AAC9C,SAAO;AAAA,IACL;AAAA,MACE,QAAQ,KAAK;AAAA,MACb,cAAc,CAAC,SAAS,KAAK,aAAa,KAAK,aAAa,GAAG,IAAI;AAAA,IACrE;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/{site-mirror-WON4FTJ2.js → site-mirror-WR7ACXOV.js}

@@ -1,20 +1,21 @@
+import {
+  TURSO_IS_AUTHORITATIVE
+} from "./chunk-WQLNUEZL.js";
 import {
   mirrorHealthFields,
   mirrorSiteFields,
-  mirrorSiteInsert
-} from "./chunk-WVNDEYXL.js";
-import "./chunk-6R56OKJZ.js";
-import {
-  TURSO_IS_AUTHORITATIVE
-} from "./chunk-SVAAONYB.js";
-import "./chunk-F3JWOPTG.js";
+  mirrorSiteInsert,
+  siteRowExists
+} from "./chunk-BINFZQ2T.js";
+import "./chunk-LF2TJN4X.js";
+import "./chunk-ASLDCWBF.js";
 import "./chunk-VAD43MOR.js";
-import "./chunk-3Z6X3BHU.js";
+import "./chunk-ICSRWW5Q.js";
 import {
   openDb,
   readDbConfig
-} from "./chunk-VSGMCCGQ.js";
-import "./chunk-C3IQQKXL.js";
+} from "./chunk-MMSMZC7S.js";
+import "./chunk-IOTOOTII.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/db/site-mirror.ts
@@ -53,10 +54,23 @@ async function makeSiteMirror(open = () => openDb(readDbConfig()), strict = TURS
       return true;
     }),
     health: (siteId, fields) => run(siteId, "health", (d) => mirrorHealthFields(d, siteId, fields)),
-    site: (siteId, fields) => run(siteId, "site", (d) => mirrorSiteFields(d, siteId, fields))
+    site: (siteId, fields) => run(siteId, "site", (d) => mirrorSiteFields(d, siteId, fields)),
+    // Deliberately NOT routed through `run`: that helper logs a mirrored= line
+    // and, under strict, throws on anything but a clean write — both wrong for a
+    // read whose whole job is to answer a question. A failed probe answers
+    // "present" so the caller heals nothing it cannot see.
+    hasRow: async (siteId) => {
+      if (!db) return true;
+      try {
+        return await siteRowExists(db, siteId);
+      } catch (e) {
+        console.log(`SITE_MIRROR site=${siteId} op=hasRow unknown error=${e.message}`);
+        return true;
+      }
+    }
   };
 }
 export {
   makeSiteMirror
 };
-//# sourceMappingURL=site-mirror-WON4FTJ2.js.map
+//# sourceMappingURL=site-mirror-WR7ACXOV.js.map

package/dist/site-mirror-WR7ACXOV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/site-mirror.ts"],"sourcesContent":["/** #539 Phase 5: the Turso write-through for the ONE-OFF Websites writers.\n *\n *  Phase 3 mirrored the nightly sweep — the audit write-back, github-signals and\n *  the next-due dates. It did not touch the writers that run on their own\n *  schedule or on demand: the analytics soft-fail stamp, the Renovate\n *  auto-fix counter, the prismic-models verdict, `updateLaunched`, the\n *  forms notify target, and the SINGLE-SITE audit write-back (only the fleet\n *  path ever passed a mirror). Each of those reached Turso solely via the hourly\n *  sync, which stops existing at the freeze.\n *\n *  It lives in `src/db` rather than a feature folder because its callers span\n *  audits, recipes, CLI commands and the send path — no one feature owns it.\n *\n *  Deliberately UNLIKE `makeHealthMirrorBestEffort`, this never returns null.\n *  #585 is the reason: that factory returned null without creds and the\n *  dual-write silently no-opped in production for weeks, because a dead mirror\n *  and a healthy one produced identical output — the only tell was an ABSENT log\n *  suffix nobody was watching for. Here creds-absent is a state the mirror\n *  REPORTS, so a missing SITE_MIRROR line means the wiring is gone.\n */\nimport { openDb, readDbConfig, type Db } from \"./client.js\";\nimport {\n  mirrorHealthFields,\n  mirrorSiteFields,\n  mirrorSiteInsert,\n  siteRowExists,\n} from \"./fleet-state.js\";\nimport { TURSO_IS_AUTHORITATIVE } from \"./freeze.js\";\n\n/** Two ops because the Websites row is split across two Turso tables. Callers\n *  pass the EXACT FieldSet the Airtable writer returned, so the mirror can never\n *  carry a different payload than the write it shadows. */\nexport type SiteMirror = {\n  /** A row Airtable just CREATED, as Airtable echoed it back. `ensure-site` used\n   *  this until #646 step 3; it now creates sites in Turso directly\n   *  (`src/fleet/ensure-site.ts`), and neither this nor `hasRow` has a caller left\n   *  outside tests — both go with the Airtable layer in step 6.\n   *  Every other op is an UPDATE, which does nothing for a row that does not\n   *  exist yet — so without this a bootstrapped site is invisible to Turso and\n   *  every mirror the rest of the bootstrap fires reports `mirrored=missed`. */\n  created: (rec: { id: string; fields: Record<string, unknown> }) => Promise<void>;\n  /** Columns that live in `site_health`. */\n  health: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n  /** Columns that live in `sites`. */\n  site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n  /** #645. Does Turso hold a row for this site id? A pure READ, so it is the one\n   *  op here that neither logs a SITE_MIRROR line nor throws under the freeze —\n   *  `ensure-site` uses it to decide whether to heal, and a probe that threw\n   *  would sink the very command that repairs the gap. Creds-absent answers\n   *  `true` (\"assume present\"), so a mirror that cannot read can never provoke\n   *  a blind insert. */\n  hasRow: (siteId: string) => Promise<boolean>;\n};\n\n/** Build the one-off writers' mirror. Never throws and never returns null:\n *  Airtable is still authoritative through Phase 5, so a mirror problem must not\n *  cost the write it shadows — the hourly sync converges whatever this misses.\n *  `open` is injectable for tests. */\nexport async function makeSiteMirror(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n  /** #612. `true` = Turso is the store that must succeed, so every failure\n   *  throws instead of being logged and swallowed. Defaulted from the shipped\n   *  constant and injected by tests, so both sides stay proven. */\n  strict: boolean = TURSO_IS_AUTHORITATIVE,\n): Promise<SiteMirror> {\n  let db: Db | null = null;\n  let why = \"\";\n  try {\n    db = await open();\n  } catch (e) {\n    why = (e as Error).message;\n  }\n  // Frozen: refuse to hand back a mirror that cannot write. Failing at\n  // CONSTRUCTION rather than per write matters — a caller holding a\n  // working-looking mirror would run its whole batch before anyone noticed that\n  // nothing had persisted.\n  if (strict && !db) throw new Error(`SITE_MIRROR unavailable: ${why}`);\n\n  const run = async (siteId: string, op: string, work: (db: Db) => Promise<boolean>) => {\n    if (!db) {\n      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=absent reason=${why}`);\n      return;\n    }\n    // Every path below logs EXACTLY ONE line, then strict adds a throw. Logging\n    // first matters: a frozen run that fails should still leave the same trace\n    // in the run log that an unfrozen one would, not just a stack.\n    let matched: boolean;\n    try {\n      matched = await work(db);\n    } catch (e) {\n      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=0 error=${(e as Error).message}`);\n      if (strict) throw e;\n      return;\n    }\n    // `missed` is its own outcome: the UPDATE matched no row. Before the freeze\n    // that means the hourly sync has not imported this site yet — a transient,\n    // and reporting it as mirrored=1 would claim a write that never landed.\n    // After the freeze no importer exists, so an absent row stays absent: it is\n    // a bug, not a wait.\n    console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=${matched ? \"1\" : \"missed\"}`);\n    if (strict && !matched) {\n      throw new Error(`SITE_MIRROR site=${siteId} op=${op}: no such row in Turso`);\n    }\n  };\n\n  return {\n    // An INSERT always lands, so it reports 1 rather than routing a row count\n    // through `missed` — there was nothing to match in the first place.\n    created: (rec) =>\n      run(rec.id, \"created\", async (d) => {\n        await mirrorSiteInsert(d, rec, new Date().toISOString());\n        return true;\n      }),\n    health: (siteId, fields) => run(siteId, \"health\", (d) => mirrorHealthFields(d, siteId, fields)),\n    site: (siteId, fields) => run(siteId, \"site\", (d) => mirrorSiteFields(d, siteId, fields)),\n    // Deliberately NOT routed through `run`: that helper logs a mirrored= line\n    // and, under strict, throws on anything but a clean write — both wrong for a\n    // read whose whole job is to answer a question. A failed probe answers\n    // \"present\" so the caller heals nothing it cannot see.\n    hasRow: async (siteId) => {\n      if (!db) return true;\n      try {\n        return await siteRowExists(db, siteId);\n      } catch (e) {\n        console.log(`SITE_MIRROR site=${siteId} op=hasRow unknown error=${(e as Error).message}`);\n        return true;\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA0DA,eAAsB,eACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GAIrD,SAAkB,wBACG;AACrB,MAAI,KAAgB;AACpB,MAAI,MAAM;AACV,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,UAAO,EAAY;AAAA,EACrB;AAKA,MAAI,UAAU,CAAC,GAAI,OAAM,IAAI,MAAM,4BAA4B,GAAG,EAAE;AAEpE,QAAM,MAAM,OAAO,QAAgB,IAAY,SAAuC;AACpF,QAAI,CAAC,IAAI;AACP,cAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,2BAA2B,GAAG,EAAE;AAC/E;AAAA,IACF;AAIA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,KAAK,EAAE;AAAA,IACzB,SAAS,GAAG;AACV,cAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,qBAAsB,EAAY,OAAO,EAAE;AAC1F,UAAI,OAAQ,OAAM;AAClB;AAAA,IACF;AAMA,YAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,aAAa,UAAU,MAAM,QAAQ,EAAE;AACtF,QAAI,UAAU,CAAC,SAAS;AACtB,YAAM,IAAI,MAAM,oBAAoB,MAAM,OAAO,EAAE,wBAAwB;AAAA,IAC7E;AAAA,EACF;AAEA,SAAO;AAAA;AAAA;AAAA,IAGL,SAAS,CAAC,QACR,IAAI,IAAI,IAAI,WAAW,OAAO,MAAM;AAClC,YAAM,iBAAiB,GAAG,MAAK,oBAAI,KAAK,GAAE,YAAY,CAAC;AACvD,aAAO;AAAA,IACT,CAAC;AAAA,IACH,QAAQ,CAAC,QAAQ,WAAW,IAAI,QAAQ,UAAU,CAAC,MAAM,mBAAmB,GAAG,QAAQ,MAAM,CAAC;AAAA,IAC9F,MAAM,CAAC,QAAQ,WAAW,IAAI,QAAQ,QAAQ,CAAC,MAAM,iBAAiB,GAAG,QAAQ,MAAM,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKxF,QAAQ,OAAO,WAAW;AACxB,UAAI,CAAC,GAAI,QAAO;AAChB,UAAI;AACF,eAAO,MAAM,cAAc,IAAI,MAAM;AAAA,MACvC,SAAS,GAAG;AACV,gBAAQ,IAAI,oBAAoB,MAAM,4BAA6B,EAAY,OAAO,EAAE;AACxF,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{smoke-suite-7DGITCTZ.js → smoke-suite-WAUPI6EJ.js}

@@ -5,20 +5,21 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-LM2NHRCJ.js";
+} from "./chunk-DYTYPKFN.js";
 import {
   resolveSites
-} from "./chunk-Z2K4JPQ3.js";
+} from "./chunk-FP6HOW6J.js";
 import {
   smokeSuite
-} from "./chunk-DFKBTBO3.js";
-import "./chunk-R53VL3RI.js";
-import "./chunk-ZQV7UQNE.js";
+} from "./chunk-EN6CTBUN.js";
+import "./chunk-TJLKWQOX.js";
+import "./chunk-5CJVUPJU.js";
+import "./chunk-LUF52EIY.js";
 import "./chunk-Z3JXLULD.js";
 import "./chunk-LBYOLBW7.js";
 import "./chunk-RARREDQE.js";
 import "./chunk-XXTZBPUY.js";
-import "./chunk-AVEQUR44.js";
+import "./chunk-WMF5S2MB.js";
 
 // src/cli/commands/smoke-suite.ts
 import { resolve } from "path";
@@ -51,4 +52,4 @@ async function runSmokeSuiteCommand(site, opts) {
 export {
   runSmokeSuiteCommand
 };
-//# sourceMappingURL=smoke-suite-7DGITCTZ.js.map
+//# sourceMappingURL=smoke-suite-WAUPI6EJ.js.map

package/dist/{smoke-suite-7DGITCTZ.js.map → smoke-suite-WAUPI6EJ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/commands/smoke-suite.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { smokeSuite } from \"../../recipes/smoke-suite/index.js\";\nimport type { RecipeResult } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport { prepareFleetSites, appendSkipNotice, type SkippedSite } from \"../fleet/prepare-sites.js\";\nimport { runRecipeOverSites } from \"../fleet/run-recipe-over-sites.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\n\nexport type SmokeSuiteCommandOptions = {\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n};\n\nfunction formatResult(r: RecipeResult): string {\n  if (r.status === \"noop\") return `[${r.site}] noop: ${r.notes ?? \"\"}`;\n  if (r.status === \"failed\") return `[${r.site}] failed: ${r.notes ?? \"\"}`;\n  return `[${r.site}] applied: ${r.commits.length} commit(s)\\n${r.notes ?? \"\"}`;\n}\n\nexport async function runSmokeSuiteCommand(\n  site: string | undefined,\n  opts: SmokeSuiteCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  let skipped: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, { workdir });\n    sites = prep.prepared;\n    skipped = prep.skipped;\n  }\n\n  const results = await runRecipeOverSites(\"smoke-suite\", sites, (s) => smokeSuite(s));\n\n  const output = results.map(formatResult).join(\"\\n\");\n  const code = results.some((r) => r.status === \"failed\") ? 1 : 0;\n  return { output: appendSkipNotice(output, skipped), code };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AAcxB,SAAS,aAAa,GAAyB;AAC7C,MAAI,EAAE,WAAW,OAAQ,QAAO,IAAI,EAAE,IAAI,WAAW,EAAE,SAAS,EAAE;AAClE,MAAI,EAAE,WAAW,SAAU,QAAO,IAAI,EAAE,IAAI,aAAa,EAAE,SAAS,EAAE;AACtE,SAAO,IAAI,EAAE,IAAI,cAAc,EAAE,QAAQ,MAAM;AAAA,EAAe,EAAE,SAAS,EAAE;AAC7E;AAEA,eAAsB,qBACpB,MACA,MAC2C;AAC3C,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAEvD,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,MAAI,UAAyB,CAAC;AAC9B,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO,EAAE,QAAQ,CAAC;AACvD,YAAQ,KAAK;AACb,cAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,MAAM,mBAAmB,eAAe,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC;AAEnF,QAAM,SAAS,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AAClD,QAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,IAAI,IAAI;AAC9D,SAAO,EAAE,QAAQ,iBAAiB,QAAQ,OAAO,GAAG,KAAK;AAC3D;","names":[]}
+{"version":3,"sources":["../src/cli/commands/smoke-suite.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { smokeSuite } from \"../../recipes/smoke-suite/index.js\";\nimport type { RecipeResult } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport { prepareFleetSites, appendSkipNotice, type SkippedSite } from \"../fleet/prepare-sites.js\";\nimport { runRecipeOverSites } from \"../fleet/run-recipe-over-sites.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\n\nexport type SmokeSuiteCommandOptions = {\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n};\n\nfunction formatResult(r: RecipeResult): string {\n  if (r.status === \"noop\") return `[${r.site}] noop: ${r.notes ?? \"\"}`;\n  if (r.status === \"failed\") return `[${r.site}] failed: ${r.notes ?? \"\"}`;\n  return `[${r.site}] applied: ${r.commits.length} commit(s)\\n${r.notes ?? \"\"}`;\n}\n\nexport async function runSmokeSuiteCommand(\n  site: string | undefined,\n  opts: SmokeSuiteCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  let skipped: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, { workdir });\n    sites = prep.prepared;\n    skipped = prep.skipped;\n  }\n\n  const results = await runRecipeOverSites(\"smoke-suite\", sites, (s) => smokeSuite(s));\n\n  const output = results.map(formatResult).join(\"\\n\");\n  const code = results.some((r) => r.status === \"failed\") ? 1 : 0;\n  return { output: appendSkipNotice(output, skipped), code };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AAcxB,SAAS,aAAa,GAAyB;AAC7C,MAAI,EAAE,WAAW,OAAQ,QAAO,IAAI,EAAE,IAAI,WAAW,EAAE,SAAS,EAAE;AAClE,MAAI,EAAE,WAAW,SAAU,QAAO,IAAI,EAAE,IAAI,aAAa,EAAE,SAAS,EAAE;AACtE,SAAO,IAAI,EAAE,IAAI,cAAc,EAAE,QAAQ,MAAM;AAAA,EAAe,EAAE,SAAS,EAAE;AAC7E;AAEA,eAAsB,qBACpB,MACA,MAC2C;AAC3C,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAEvD,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,MAAI,UAAyB,CAAC;AAC9B,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO,EAAE,QAAQ,CAAC;AACvD,YAAQ,KAAK;AACb,cAAU,KAAK;AAAA,EACjB;AAEA,QAAM,UAAU,MAAM,mBAAmB,eAAe,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC;AAEnF,QAAM,SAAS,QAAQ,IAAI,YAAY,EAAE,KAAK,IAAI;AAClD,QAAM,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,IAAI,IAAI;AAC9D,SAAO,EAAE,QAAQ,iBAAiB,QAAQ,OAAO,GAAG,KAAK;AAC3D;","names":[]}

package/dist/{submissions-OVZPVBYG.js → submissions-2SHCFOKD.js}

@@ -10,7 +10,7 @@ function parseExtraFields(raw) {
   }
 }
 async function rescoreNewSubmissions(db, opts) {
-  const { listSubmissionsFiltered, rescoreSubmissionSpam } = await import("./submissions-3I3GAQAX.js");
+  const { listSubmissionsFiltered, rescoreSubmissionSpam } = await import("./submissions-JDZP35JM.js");
   const { classifySpam, SPAM_THRESHOLD } = await import("./spam-classifier-T5H4VTP6.js");
   const rows = [];
   const PAGE = 500;
@@ -40,10 +40,15 @@ async function rescoreNewSubmissions(db, opts) {
 }
 async function loadSiteNames() {
   try {
-    const { openBase, readAirtableConfig } = await import("./client-EPVO3FEH.js");
-    const { listWebsites } = await import("./websites-TB4TCAWM.js");
-    const sites = await listWebsites(openBase(readAirtableConfig()));
-    return new Map(sites.map((s) => [s.id, s.name]));
+    const { openDb, readDbConfig } = await import("./client-DGTO65WB.js");
+    const { listSites } = await import("./fleet-state-RJROYXKO.js");
+    const db = await openDb(readDbConfig());
+    try {
+      const sites = await listSites(db);
+      return new Map(sites.map((s) => [s.id, s.name]));
+    } finally {
+      await db.destroy();
+    }
   } catch (err) {
     console.error(`[submissions] site names unavailable \u2014 printing raw site ids: ${String(err)}`);
     return /* @__PURE__ */ new Map();
@@ -78,7 +83,7 @@ async function runSubmissionsCommand(action, opts) {
     return { output: "--apply and --dry-run conflict. Pick one.", code: 2 };
   }
   const apply = opts.apply === true;
-  const { openDb, readDbConfig } = await import("./client-G2WGWPCA.js");
+  const { openDb, readDbConfig } = await import("./client-DGTO65WB.js");
   const { SPAM_THRESHOLD } = await import("./spam-classifier-T5H4VTP6.js");
   const cfg = opts.url ? { url: opts.url } : readDbConfig();
   const db = await openDb(cfg);
@@ -119,4 +124,4 @@ export {
   rescoreNewSubmissions,
   runSubmissionsCommand
 };
-//# sourceMappingURL=submissions-OVZPVBYG.js.map
+//# sourceMappingURL=submissions-2SHCFOKD.js.map

package/dist/submissions-2SHCFOKD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/submissions.ts"],"sourcesContent":["import type { Db } from \"../../db/client.js\";\nimport type { SubmissionRow } from \"../../reports/submission-row.js\";\n\nexport type SubmissionsCommandOptions = {\n  /** Write the re-buckets. Without it the command is a DRY RUN (deliberate default —\n   *  this rewrites operator-visible triage state, so the table prints first). */\n  apply?: boolean;\n  /** Explicit dry run (the default). Conflicts with --apply. */\n  dryRun?: boolean;\n  /** Override the libSQL url (tests use \":memory:\"); otherwise read from env. */\n  url?: string;\n  cwd?: string;\n  verbose?: boolean;\n};\n\n/** Provenance marker appended to the NEW classifier reasons on every re-bucketed row,\n *  so a retro'd row is always distinguishable from one the classifier caught at ingest. */\nexport const RESCORE_REASON_MARKER = \"retro-rescore\";\n\nexport type RescoreFlagged = {\n  row: SubmissionRow;\n  newScore: number;\n  /** What --apply writes to spam_reason: the new verdict's reasons + RESCORE_REASON_MARKER. */\n  newReason: string;\n  /** True when --apply actually flipped the row (false in dry runs, or when the row\n   *  stopped being 'new' between the scan and the write). */\n  written: boolean;\n};\n\n/** extraFields is stored as a raw JSON string; the classifier wants the object. A\n *  null/garbage/non-object value degrades to {} — same blind-spot posture as ingest\n *  (classification never throws on stored data). */\nfunction parseExtraFields(raw: string | null): Record<string, unknown> {\n  if (!raw || raw.trim() === \"\") return {};\n  try {\n    const parsed: unknown = JSON.parse(raw);\n    return parsed !== null && typeof parsed === \"object\" && !Array.isArray(parsed)\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Core of `submissions rescore`, separated from the command wrapper so tests can run it\n * against a seeded :memory: db. Scans EVERY status='new' row (the pre-2026-07-15-tuning\n * backlog these rows predate), re-runs the CURRENT classifySpam over each — turnstile\n * \"unverifiable\", exactly what ingest passes when no token reaches verification — and\n * flags rows at/above SPAM_THRESHOLD. With `apply` it re-buckets each flagged row to\n * spam_auto, REPLACING spam_score/spam_reason with the new verdict (+ marker). The\n * classifier is the single source of truth: no scoring logic is duplicated here.\n */\nexport async function rescoreNewSubmissions(\n  db: Db,\n  opts: { apply: boolean },\n): Promise<{ scanned: number; flagged: RescoreFlagged[] }> {\n  const { listSubmissionsFiltered, rescoreSubmissionSpam } =\n    await import(\"../../db/submissions.js\");\n  const { classifySpam, SPAM_THRESHOLD } = await import(\"../../forms/spam-classifier.js\");\n\n  // Collect the WHOLE backlog before any write: --apply mutates rows out of the\n  // status='new' filter, so paging offset-wise while writing would skip rows.\n  const rows: SubmissionRow[] = [];\n  const PAGE = 500;\n  for (let offset = 0; ; offset += PAGE) {\n    const page = await listSubmissionsFiltered(db, { status: \"new\" }, { limit: PAGE, offset });\n    rows.push(...page);\n    if (page.length < PAGE) break;\n  }\n\n  const flagged: RescoreFlagged[] = [];\n  for (const row of rows) {\n    const verdict = classifySpam({\n      name: row.name,\n      email: row.email,\n      // message is optional on the classifier input; exactOptionalPropertyTypes\n      // forbids passing `undefined`, so spread only when present (form-ingest idiom).\n      ...(row.message !== null ? { message: row.message } : {}),\n      formType: row.formType,\n      extraFields: parseExtraFields(row.extraFields),\n      turnstile: \"unverifiable\",\n    });\n    if (verdict.score < SPAM_THRESHOLD) continue;\n    const newReason = [...verdict.reasons, RESCORE_REASON_MARKER].join(\",\");\n    const written = opts.apply\n      ? await rescoreSubmissionSpam(db, row.id, verdict.score, newReason)\n      : false;\n    flagged.push({ row, newScore: verdict.score, newReason, written });\n  }\n  return { scanned: rows.length, flagged };\n}\n\n/** site_id → display name for the table. Reads the roster from Turso (#646 step 4),\n *  which is also where the submissions themselves live — an Airtable read here could\n *  not name a `site_<ULID>` site at all. Soft-fails to an empty map (raw ids still\n *  print) so the re-score itself never depends on the name lookup. */\nasync function loadSiteNames(): Promise<Map<string, string>> {\n  try {\n    const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n    const { listSites } = await import(\"../../db/fleet-state.js\");\n    const db = await openDb(readDbConfig());\n    try {\n      const sites = await listSites(db);\n      return new Map(sites.map((s) => [s.id, s.name] as const));\n    } finally {\n      await db.destroy();\n    }\n  } catch (err) {\n    console.error(`[submissions] site names unavailable — printing raw site ids: ${String(err)}`);\n    return new Map();\n  }\n}\n\nfunction pad(v: string, width: number): string {\n  return v.length >= width ? v : v + \" \".repeat(width - v.length);\n}\n\nfunction formatTable(flagged: RescoreFlagged[], names: Map<string, string>): string {\n  const rows = flagged.map((f) => ({\n    site: names.get(f.row.siteId) ?? f.row.siteId,\n    email: f.row.email || \"(no email)\",\n    score: `${f.row.spamScore ?? \"—\"} → ${f.newScore}`,\n    reasons: f.newReason,\n  }));\n  const siteW = Math.max(4, ...rows.map((r) => r.site.length));\n  const emailW = Math.max(5, ...rows.map((r) => r.email.length));\n  const scoreW = Math.max(5, ...rows.map((r) => r.score.length));\n  const lines = [\n    `${pad(\"site\", siteW)}  ${pad(\"email\", emailW)}  ${pad(\"score\", scoreW)}  reasons`,\n    ...rows.map(\n      (r) =>\n        `${pad(r.site, siteW)}  ${pad(r.email, emailW)}  ${pad(r.score, scoreW)}  ${r.reasons}`,\n    ),\n  ];\n  return lines.join(\"\\n\");\n}\n\n/**\n * `submissions <action>` — operate on stored form submissions. The only action today is\n * `rescore`: re-run the CURRENT spam classifier over the status='new' backlog. Dry-run\n * by default; `--apply` writes. Only status='new' rows are ever touched.\n */\nexport async function runSubmissionsCommand(\n  action: string,\n  opts: SubmissionsCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (action !== \"rescore\") {\n    return { output: `unknown submissions action '${action}'. Use: rescore.`, code: 1 };\n  }\n  if (opts.apply && opts.dryRun) {\n    return { output: \"--apply and --dry-run conflict. Pick one.\", code: 2 };\n  }\n  const apply = opts.apply === true;\n\n  const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n  const { SPAM_THRESHOLD } = await import(\"../../forms/spam-classifier.js\");\n  const cfg = opts.url ? { url: opts.url } : readDbConfig();\n  const db = await openDb(cfg);\n\n  const { scanned, flagged } = await rescoreNewSubmissions(db, { apply });\n  if (flagged.length === 0) {\n    return {\n      output: `Scanned ${scanned} status='new' submission${scanned === 1 ? \"\" : \"s\"} — none score >= ${SPAM_THRESHOLD} under the current classifier. Nothing to re-bucket.`,\n      code: 0,\n    };\n  }\n\n  // Airtable is only consulted when there is a table to print.\n  const table = formatTable(flagged, await loadSiteNames());\n  const head = `Scanned ${scanned} status='new' submissions; ${flagged.length} score >= ${SPAM_THRESHOLD} under the current classifier:`;\n  if (!apply) {\n    return {\n      output: `${head}\\n\\n${table}\\n\\nDRY RUN — nothing was written. Re-run with --apply to re-bucket these ${flagged.length} rows to spam_auto.`,\n      code: 0,\n    };\n  }\n  const written = flagged.filter((f) => f.written).length;\n  const skipped = flagged.length - written;\n  const skippedNote =\n    skipped > 0\n      ? `\\n${skipped} row${skipped === 1 ? \"\" : \"s\"} skipped — no longer status='new' at write time (operator/ingest got there first).`\n      : \"\";\n  return {\n    output: `${head}\\n\\n${table}\\n\\nApplied: ${written} row${written === 1 ? \"\" : \"s\"} → spam_auto (new score + reasons written, '${RESCORE_REASON_MARKER}' marker appended).${skippedNote}`,\n    code: 0,\n  };\n}\n"],"mappings":";AAiBO,IAAM,wBAAwB;AAerC,SAAS,iBAAiB,KAA6C;AACrE,MAAI,CAAC,OAAO,IAAI,KAAK,MAAM,GAAI,QAAO,CAAC;AACvC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,WAAO,WAAW,QAAQ,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IACxE,SACD,CAAC;AAAA,EACP,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAWA,eAAsB,sBACpB,IACA,MACyD;AACzD,QAAM,EAAE,yBAAyB,sBAAsB,IACrD,MAAM,OAAO,2BAAyB;AACxC,QAAM,EAAE,cAAc,eAAe,IAAI,MAAM,OAAO,+BAAgC;AAItF,QAAM,OAAwB,CAAC;AAC/B,QAAM,OAAO;AACb,WAAS,SAAS,KAAK,UAAU,MAAM;AACrC,UAAM,OAAO,MAAM,wBAAwB,IAAI,EAAE,QAAQ,MAAM,GAAG,EAAE,OAAO,MAAM,OAAO,CAAC;AACzF,SAAK,KAAK,GAAG,IAAI;AACjB,QAAI,KAAK,SAAS,KAAM;AAAA,EAC1B;AAEA,QAAM,UAA4B,CAAC;AACnC,aAAW,OAAO,MAAM;AACtB,UAAM,UAAU,aAAa;AAAA,MAC3B,MAAM,IAAI;AAAA,MACV,OAAO,IAAI;AAAA;AAAA;AAAA,MAGX,GAAI,IAAI,YAAY,OAAO,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC;AAAA,MACvD,UAAU,IAAI;AAAA,MACd,aAAa,iBAAiB,IAAI,WAAW;AAAA,MAC7C,WAAW;AAAA,IACb,CAAC;AACD,QAAI,QAAQ,QAAQ,eAAgB;AACpC,UAAM,YAAY,CAAC,GAAG,QAAQ,SAAS,qBAAqB,EAAE,KAAK,GAAG;AACtE,UAAM,UAAU,KAAK,QACjB,MAAM,sBAAsB,IAAI,IAAI,IAAI,QAAQ,OAAO,SAAS,IAChE;AACJ,YAAQ,KAAK,EAAE,KAAK,UAAU,QAAQ,OAAO,WAAW,QAAQ,CAAC;AAAA,EACnE;AACA,SAAO,EAAE,SAAS,KAAK,QAAQ,QAAQ;AACzC;AAMA,eAAe,gBAA8C;AAC3D,MAAI;AACF,UAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,2BAAyB;AAC5D,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,QAAI;AACF,YAAM,QAAQ,MAAM,UAAU,EAAE;AAChC,aAAO,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAAA,IAC1D,UAAE;AACA,YAAM,GAAG,QAAQ;AAAA,IACnB;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,sEAAiE,OAAO,GAAG,CAAC,EAAE;AAC5F,WAAO,oBAAI,IAAI;AAAA,EACjB;AACF;AAEA,SAAS,IAAI,GAAW,OAAuB;AAC7C,SAAO,EAAE,UAAU,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,EAAE,MAAM;AAChE;AAEA,SAAS,YAAY,SAA2B,OAAoC;AAClF,QAAM,OAAO,QAAQ,IAAI,CAAC,OAAO;AAAA,IAC/B,MAAM,MAAM,IAAI,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI;AAAA,IACvC,OAAO,EAAE,IAAI,SAAS;AAAA,IACtB,OAAO,GAAG,EAAE,IAAI,aAAa,QAAG,WAAM,EAAE,QAAQ;AAAA,IAChD,SAAS,EAAE;AAAA,EACb,EAAE;AACF,QAAM,QAAQ,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AAC3D,QAAM,SAAS,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;AAC7D,QAAM,SAAS,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;AAC7D,QAAM,QAAQ;AAAA,IACZ,GAAG,IAAI,QAAQ,KAAK,CAAC,KAAK,IAAI,SAAS,MAAM,CAAC,KAAK,IAAI,SAAS,MAAM,CAAC;AAAA,IACvE,GAAG,KAAK;AAAA,MACN,CAAC,MACC,GAAG,IAAI,EAAE,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO;AAAA,IACzF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAOA,eAAsB,sBACpB,QACA,MAC2C;AAC3C,MAAI,WAAW,WAAW;AACxB,WAAO,EAAE,QAAQ,+BAA+B,MAAM,oBAAoB,MAAM,EAAE;AAAA,EACpF;AACA,MAAI,KAAK,SAAS,KAAK,QAAQ;AAC7B,WAAO,EAAE,QAAQ,6CAA6C,MAAM,EAAE;AAAA,EACxE;AACA,QAAM,QAAQ,KAAK,UAAU;AAE7B,QAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,+BAAgC;AACxE,QAAM,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,aAAa;AACxD,QAAM,KAAK,MAAM,OAAO,GAAG;AAE3B,QAAM,EAAE,SAAS,QAAQ,IAAI,MAAM,sBAAsB,IAAI,EAAE,MAAM,CAAC;AACtE,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,QAAQ,WAAW,OAAO,2BAA2B,YAAY,IAAI,KAAK,GAAG,yBAAoB,cAAc;AAAA,MAC/G,MAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,QAAQ,YAAY,SAAS,MAAM,cAAc,CAAC;AACxD,QAAM,OAAO,WAAW,OAAO,8BAA8B,QAAQ,MAAM,aAAa,cAAc;AACtG,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,QAAQ,GAAG,IAAI;AAAA;AAAA,EAAO,KAAK;AAAA;AAAA,6EAA6E,QAAQ,MAAM;AAAA,MACtH,MAAM;AAAA,IACR;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AACjD,QAAM,UAAU,QAAQ,SAAS;AACjC,QAAM,cACJ,UAAU,IACN;AAAA,EAAK,OAAO,OAAO,YAAY,IAAI,KAAK,GAAG,4FAC3C;AACN,SAAO;AAAA,IACL,QAAQ,GAAG,IAAI;AAAA;AAAA,EAAO,KAAK;AAAA;AAAA,WAAgB,OAAO,OAAO,YAAY,IAAI,KAAK,GAAG,oDAA+C,qBAAqB,sBAAsB,WAAW;AAAA,IACtL,MAAM;AAAA,EACR;AACF;","names":[]}

package/dist/{submissions-3I3GAQAX.js → submissions-JDZP35JM.js}

@@ -2,7 +2,7 @@ import {
   toFormType,
   toNotifyStatus,
   toStatus
-} from "./chunk-2SLED3NB.js";
+} from "./chunk-YDZ7XGPZ.js";
 import {
   SIGNUP_FORM_TYPES
 } from "./chunk-2OP4JKIQ.js";
@@ -28,7 +28,11 @@ function rowFromDb(r) {
     resendMessageId: r.resend_message_id,
     spamScore: typeof r.spam_score === "number" ? r.spam_score : null,
     spamReason: r.spam_reason,
-    fanoutStatus: r.fanout_status
+    fanoutStatus: r.fanout_status,
+    bounceType: r.bounce_type,
+    bounceSubType: r.bounce_subtype,
+    bounceMessage: r.bounce_message,
+    bounceAckAt: r.bounce_ack_at
   };
 }
 function newSubmissionId() {
@@ -62,7 +66,13 @@ async function createSubmission(db, input) {
     spam_score: input.spamScore ?? null,
     spam_reason: input.spamReason ?? null,
     // Always null at insert: the fan-out runs after the row exists (stampFanout).
-    fanout_status: null
+    fanout_status: null,
+    // Always null at insert too: a bounce is reported by a webhook minutes
+    // later, and the ack is an operator gesture after that (#783).
+    bounce_type: null,
+    bounce_subtype: null,
+    bounce_message: null,
+    bounce_ack_at: null
   }).execute();
   const created = await getSubmissionById(db, id);
   if (!created) throw new Error("createSubmission: row vanished after insert");
@@ -234,7 +244,11 @@ async function backfillSubmission(db, row) {
     resend_message_id: row.resendMessageId,
     spam_score: row.spamScore ?? null,
     spam_reason: row.spamReason ?? null,
-    fanout_status: row.fanoutStatus ?? null
+    fanout_status: row.fanoutStatus ?? null,
+    bounce_type: row.bounceType ?? null,
+    bounce_subtype: row.bounceSubType ?? null,
+    bounce_message: row.bounceMessage ?? null,
+    bounce_ack_at: row.bounceAckAt ?? null
   }).onConflict((oc) => oc.column("id").doNothing()).execute();
 }
 async function rescoreSubmissionSpam(db, id, score, reason) {
@@ -249,21 +263,47 @@ async function markFilteredAsRead(db, filter) {
   ).executeTakeFirst();
   return Number(res.numUpdatedRows);
 }
-async function markNotifyBouncedByMessageId(db, messageId) {
+async function markNotifyBouncedByMessageId(db, messageId, detail = null) {
   if (messageId === "") return false;
-  const res = await db.updateTable("submissions").set({ notify_status: "bounced" }).where("resend_message_id", "=", messageId).executeTakeFirst();
+  const res = await db.updateTable("submissions").set(
+    detail === null ? { notify_status: "bounced" } : {
+      notify_status: "bounced",
+      bounce_type: detail.type,
+      bounce_subtype: detail.subType,
+      bounce_message: detail.message
+    }
+  ).where("resend_message_id", "=", messageId).executeTakeFirst();
   if (Number(res.numUpdatedRows) > 0) return true;
   const existing = await db.selectFrom("submissions").select("id").where("resend_message_id", "=", messageId).executeTakeFirst();
   return existing !== void 0;
 }
+async function ackNotifyBounce(db, id, now) {
+  const res = await db.updateTable("submissions").set({ bounce_ack_at: now.toISOString() }).where("id", "=", id).where("notify_status", "=", "bounced").where("bounce_ack_at", "is", null).executeTakeFirst();
+  return Number(res.numUpdatedRows) > 0;
+}
 async function countNotifyBouncedBySite(db, sinceDate) {
-  const rows = await db.selectFrom("submissions").select(["site_id", (eb) => eb.fn.countAll().as("n")]).where("notify_status", "=", "bounced").where("submitted_at", ">=", sinceDate).groupBy("site_id").execute();
-  return new Map(rows.map((r) => [r.site_id, Number(r.n)]));
+  const rows = await db.selectFrom("submissions").select([
+    "site_id",
+    (eb) => eb.fn.countAll().as("n"),
+    // lower() is ASCII-only in SQLite, which is all this needs: the value is a
+    // Resend enum ("Permanent"/"Transient"/"Undetermined"). Matching it
+    // case-insensitively here keeps the SQL agreeing with isPermanentBounce.
+    sql`sum(case when lower(bounce_type) = 'permanent' then 1 else 0 end)`.as(
+      "permanent_n"
+    )
+  ]).where("notify_status", "=", "bounced").where("submitted_at", ">=", sinceDate).where("bounce_ack_at", "is", null).groupBy("site_id").execute();
+  return new Map(
+    rows.map((r) => [
+      r.site_id,
+      { total: Number(r.n) || 0, permanent: Number(r.permanent_n) || 0 }
+    ])
+  );
 }
 export {
   MIN_DUP_BODY_LEN,
   MIN_SIMILAR_TOKENS,
   SIMILARITY_THRESHOLD,
+  ackNotifyBounce,
   backfillSubmission,
   countAutoSpamSince,
   countNotifyBouncedBySite,
@@ -286,4 +326,4 @@ export {
   stampFanout,
   stampNotified
 };
-//# sourceMappingURL=submissions-3I3GAQAX.js.map
+//# sourceMappingURL=submissions-JDZP35JM.js.map