@reddoorla/maintenance 0.96.0 → 0.97.0

package/README.md

@@ -158,7 +158,7 @@ Installs the matching harness used to rebuild a site against a live reference (a
 ```bash
 reddoor-maint match-harness --ref https://client.webflow.io
 reddoor-maint match-harness acme --ref https://acme.webflow.io --cand http://localhost:4173
-reddoor-maint match-harness --fleet airtable --ref https://client.webflow.io --matrix 1440,834,390
+reddoor-maint match-harness --fleet turso --ref https://client.webflow.io --matrix 1440,834,390
 ```
 
 `--ref` is **required**. The harness gates against a live reference; with no reference it can only ever report an absence of errors, so the recipe refuses instead of installing something that goes green on nothing. `--cand` defaults to `http://localhost:5173` and `--matrix` to `1440,834,390`.
@@ -419,10 +419,10 @@ Nothing is written and nothing is sent.
 0. **Prereq: refresh Lighthouse scores on each Websites row.** From each site's checkout:
 
    ```bash
-   reddoor-maint audit lighthouse --write-airtable
+   reddoor-maint audit lighthouse --write-back
    ```
 
-   This runs Lighthouse and writes the 4 scores directly to the matching Websites row (slug auto-derived from `package.json#name`; pass `--write-airtable=<slug>` to override), along with a `Last lighthouse audit at` timestamp. The report orchestrator copies these into the new Reports row — drafting a report for a site missing scores fails with a clear error.
+   This runs Lighthouse and writes the 4 scores directly to the matching Websites row (slug auto-derived from `package.json#name`; pass `--write-back=<slug>` to override), along with a `Last lighthouse audit at` timestamp. The report orchestrator copies these into the new Reports row — drafting a report for a site missing scores fails with a clear error.
 
 1. **Draft overdue reports**
 
@@ -481,10 +481,9 @@ This repo's Netlify site hosts the whole dashboard + forms surface: the Resend d
 | `PROSPECT_EDIT_TOKEN`                              | Shared secret gating `POST /api/audit-report/:token/overrides`, where an operator's edits to a prospect report are saved — the SAME value is set on the marketing site, which proxies the save. Generate with `openssl rand -base64 32`. **Fails closed**: absent → every save 503s, which looks like a broken editor. Leading/trailing whitespace from a paste is tolerated, and warned about in the function logs                                  |
 | `DASHBOARD_PASSWORD`                               | Basic-auth password gating the cockpit, per-site dashboards, and every action endpoint — the dashboard is unauthable without it                                                                                                                                                                                                                                                                                                                      |
 | `DASHBOARD_BASE_URL`                               | Public base URL of this deploy (e.g. `https://<your-site>.netlify.app`) — used to build absolute links such as report approve URLs                                                                                                                                                                                                                                                                                                                   |
-| `RENOVATE_TOKEN`                                   | GitHub PAT with `actions:write` — powers the dashboard's "Trigger Renovate" button (the button 502s without it)                                                                                                                                                                                                                                                                                                                                      |
-| `GH_TOKEN`                                         | GitHub token for the dashboard's request-path REST calls (fleet-refresh dispatch + GitHub-sourced signals)                                                                                                                                                                                                                                                                                                                                           |
+| `GH_TOKEN`                                         | GitHub token for the dashboard's request-path REST calls, with `actions:write` — the "Trigger Renovate" button, the fleet-refresh and prospect-audit dispatches (each answers 503 `not-configured` without it), plus GitHub-sourced signals. The only name these functions read: `RENOVATE_TOKEN` was retired with the operator PAT                                                                                                                  |
 
-> The first seven vars cover the webhook + forms ingest (`TURNSTILE_SECRET_KEY` optional); `PROSPECT_EDIT_TOKEN` is needed only to SAVE edits to a prospect report (serving one needs no secret beyond its URL token); `DASHBOARD_PASSWORD` / `DASHBOARD_BASE_URL` / `RENOVATE_TOKEN` / `GH_TOKEN` are additionally required by the operator **dashboard** this same deploy serves (cockpit at `/`, per-site at `/s/:slug`).
+> The first seven vars cover the webhook + forms ingest (`TURNSTILE_SECRET_KEY` optional); `PROSPECT_EDIT_TOKEN` is needed only to SAVE edits to a prospect report (serving one needs no secret beyond its URL token); `DASHBOARD_PASSWORD` / `DASHBOARD_BASE_URL` / `GH_TOKEN` are additionally required by the operator **dashboard** this same deploy serves (cockpit at `/`, per-site at `/s/:slug`).
 
 **3. Trigger a deploy** (Deploys → Trigger deploy → Deploy site). When it goes green, curl the health endpoint:
 

package/dist/{announce-45HVP4J4.js → announce-5ZD2SBGD.js}

@@ -1,24 +1,25 @@
 import {
   scoresFromRow
-} from "./chunk-44SDGPGQ.js";
+} from "./chunk-PZZ6HM5T.js";
 import {
   fetchGaUsers,
   fetchSearch,
   readGaConfig,
   refreshHeaderImage
-} from "./chunk-72FJZ6LO.js";
+} from "./chunk-DRNZVORX.js";
 import {
+  createReportDraft,
+  findReportForPeriod,
   queueDraft
-} from "./chunk-YFAXOD7Z.js";
+} from "./chunk-UPE6D4AT.js";
 import {
-  createDraft,
-  findReportByPeriod,
   updateReportScores
-} from "./chunk-F3JWOPTG.js";
+} from "./chunk-TEMQPSCM.js";
+import "./chunk-ASLDCWBF.js";
 import "./chunk-VAD43MOR.js";
 import {
   uploadAttachment
-} from "./chunk-IY6256GK.js";
+} from "./chunk-YJBSB4LP.js";
 import {
   openBase,
   readAirtableConfig
@@ -32,23 +33,26 @@ import {
   resolveCopy
 } from "./chunk-KJGKZLCT.js";
 import "./chunk-BGTYPVLT.js";
-import "./chunk-MZZDMBDT.js";
+import "./chunk-LZMAG73U.js";
 import {
-  listWebsites,
-  siteSlug,
   updateAnalyticsHealth
-} from "./chunk-KN52PM63.js";
+} from "./chunk-TC4GANMX.js";
+import {
+  siteSlug
+} from "./chunk-ICSRWW5Q.js";
+import "./chunk-RQJFGK3A.js";
 import "./chunk-RARREDQE.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/recipes/announce.ts
 var GA_WINDOW_DAYS = 30;
 async function announce(deps) {
-  const base = deps?.base ?? openBase(readAirtableConfig());
-  const now = deps?.now ?? /* @__PURE__ */ new Date();
-  const websites = await listWebsites(base);
+  const base = deps.base ?? openBase(readAirtableConfig());
+  const now = deps.now ?? /* @__PURE__ */ new Date();
+  const writer = deps.reportMirror;
+  const websites = await deps.roster();
   let targets = websites.filter((w) => w.status === "maintained");
-  if (deps?.site) {
+  if (deps.site) {
     const wanted = siteSlug(deps.site);
     targets = targets.filter((w) => siteSlug(w.name) === wanted);
   }
@@ -61,8 +65,8 @@ async function announce(deps) {
         results.push({ site: w.name, status: "skipped-no-scores" });
         continue;
       }
-      if (deps?.refreshHeader !== false) {
-        await refreshHeaderImage(w, deps?.refreshHeader ?? {});
+      if (deps.refreshHeader !== false) {
+        await refreshHeaderImage(w, deps.refreshHeader ?? {});
       }
       const periodEnd = now;
       const periodStart = new Date(now.getTime() - GA_WINDOW_DAYS * 24 * 60 * 60 * 1e3);
@@ -82,17 +86,17 @@ async function announce(deps) {
             w.id,
             gaResult.softFailed || searchResult.softFailed ? now.toISOString() : null
           );
-          await deps?.siteMirror?.health(w.id, fields);
+          await deps.siteMirror?.health(w.id, fields);
         } catch (e) {
           console.warn(`\u26A0 analytics-health write skipped for ${w.name}: ${e.message}`);
         }
       }
       let report;
       let statusKind;
-      const existing = await findReportByPeriod(base, w.id, "Announcement", period);
+      const existing = await findReportForPeriod(writer, w.id, "Announcement", period);
       if (existing) {
         await updateReportScores(base, existing.id, scores, now, enrichment);
-        await deps?.reportMirror?.patch(existing.id, {
+        await writer.patch(existing.id, {
           lighthouse_performance: scores.performance,
           lighthouse_accessibility: scores.accessibility,
           lighthouse_best_practices: scores.bestPractices,
@@ -106,11 +110,9 @@ async function announce(deps) {
         report = existing;
         statusKind = "reused";
       } else {
-        report = await createDraft(
-          base,
-          draftInputFor(w, scores, now, period, enrichment),
-          deps?.reportMirror?.created
-        );
+        report = await createReportDraft(draftInputFor(w, scores, now, period, enrichment), {
+          create: writer.create
+        });
         statusKind = "drafted";
       }
       const slug = siteSlug(w.name);
@@ -141,7 +143,7 @@ async function announce(deps) {
           `${slug}-${now.toISOString().slice(0, 10)}.html`,
           "text/html"
         );
-        await deps?.reportMirror?.body(report.id, html);
+        await writer.body(report.id, html);
       } catch (uploadErr) {
         console.warn(
           `\u26A0 Announcement preview upload skipped for ${w.name}: ${uploadErr instanceof Error ? uploadErr.message : String(uploadErr)}`
@@ -150,7 +152,7 @@ async function announce(deps) {
       const queue = await queueDraft(
         base,
         { id: report.id, siteId: w.id, reportType: "Announcement" },
-        deps?.reportMirror
+        writer
       );
       const recipientMissing = !(w.reportRecipientsTo && w.reportRecipientsTo.trim());
       results.push({
@@ -203,11 +205,17 @@ function formatAnnounceResult(result) {
   return result.results.map(formatSiteResult).join("\n");
 }
 async function runAnnounceCommand(site, _opts) {
-  const { makeReportMirror } = await import("./report-mirror-KKZZ6RMZ.js");
-  const { makeSiteMirror } = await import("./site-mirror-H2FYMN55.js");
+  const { makeReportMirror } = await import("./report-mirror-4QM57LMS.js");
+  const { makeSiteMirror } = await import("./site-mirror-WR7ACXOV.js");
   const reportMirror = await makeReportMirror();
   const siteMirror = await makeSiteMirror();
-  const result = await announce({ ...site ? { site } : {}, reportMirror, siteMirror });
+  const { readFleetRoster } = await import("./roster-GDNSIRAK.js");
+  const result = await announce({
+    ...site ? { site } : {},
+    roster: () => readFleetRoster(),
+    reportMirror,
+    siteMirror
+  });
   const hadError = result.results.some((r) => r.status === "error");
   return { output: formatAnnounceResult(result), code: hadError ? 1 : 0 };
 }
@@ -215,4 +223,4 @@ export {
   formatAnnounceResult,
   runAnnounceCommand
 };
-//# sourceMappingURL=announce-45HVP4J4.js.map
+//# sourceMappingURL=announce-5ZD2SBGD.js.map

package/dist/announce-5ZD2SBGD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recipes/announce.ts","../src/cli/commands/announce.ts"],"sourcesContent":["import { openBase, readAirtableConfig } from \"../reports/airtable/client.js\";\nimport type { AirtableBase } from \"../reports/airtable/client.js\";\nimport { siteSlug, updateAnalyticsHealth } from \"../reports/airtable/websites.js\";\nimport type { WebsiteRow } from \"../reports/airtable/websites.js\";\nimport { readGaConfig } from \"../reports/ga/config.js\";\nimport { updateReportScores, type ReportEnrichment } from \"../reports/airtable/reports.js\";\nimport { createReportDraft, findReportForPeriod } from \"../reports/create-report.js\";\nimport type { DraftInput } from \"../reports/draft-fields.js\";\nimport type { ReportMirror } from \"../reports/report-mirror.js\";\nimport type { SiteMirror } from \"../db/site-mirror.js\";\nimport { queueDraft } from \"../reports/queue.js\";\nimport { uploadAttachment } from \"../reports/airtable/attachments.js\";\nimport { renderReportHtml } from \"../reports/render.js\";\nimport { resolveCopy } from \"../reports/copy.js\";\nimport { fetchGaUsers, fetchSearch, refreshHeaderImage } from \"../reports/draft.js\";\nimport type { RefreshHeaderDeps } from \"../reports/draft.js\";\nimport { announcementSiteExtras } from \"../reports/announcement-email/template.js\";\nimport type { LighthouseScores } from \"../reports/types.js\";\nimport { defaultReportSubject } from \"../reports/subject.js\";\nimport { scoresFromRow } from \"../reports/report-data.js\";\n\nexport type AnnounceSiteResult =\n  | {\n      site: string;\n      status: \"drafted\" | \"reused\";\n      reportId: string;\n      recipientMissing: boolean;\n      /** False when a higher-or-equal-tier report was already queued (single-queue rule). */\n      queued: boolean;\n    }\n  | { site: string; status: \"skipped-no-scores\" }\n  | { site: string; status: \"error\"; message: string };\n\nexport type AnnounceResult = { results: AnnounceSiteResult[] };\n\n/** The traffic/search lookback window (days) the announcement reports on. The trend compares it\n *  against the equal-length prior window, and the email labels it \"vs the previous N days\". */\nconst GA_WINDOW_DAYS = 30;\n\nexport type AnnounceDeps = {\n  /** Airtable handle. Defaults to opening the live base from credentials. */\n  base?: AirtableBase;\n  /** When set, restrict to the single site whose slug matches. Default: all maintenance sites. */\n  site?: string;\n  /** Single timestamp driving the period key, render, draft, and preview filename. */\n  now?: Date;\n  /**\n   * Header-image refresh, matching `draftReportForSite`'s opt-out shape: UNSET means\n   * refresh (the production default), `false` skips it so unit suites don't launch a\n   * browser. Announce previously never refreshed at all, so a site whose stored header\n   * predated a plate change kept announcing with the old one until its next\n   * Maintenance/Testing draft happened to heal it.\n   */\n  refreshHeader?: RefreshHeaderDeps | false;\n  /** Every site in the fleet, read from TURSO (#646 step 4) — the Airtable\n   *  roster this replaces could not see a `site_<ULID>` site, so a site created\n   *  since step 3 was never announced. Required, not defaulted: every unit test\n   *  calls `announce` with a fake base, and a default would open a real libSQL\n   *  handle from inside the suite. The CLI composition root wires\n   *  `readFleetRoster`. */\n  roster: () => Promise<WebsiteRow[]>;\n  /** #539 Phase 5, and since #646 step 4 the store that MINTS and holds the\n   *  report row: the created row (or a reused row's refreshed scores), the\n   *  rendered body, and the queue flag. Required for the same reason `roster`\n   *  is — a default would open a real libSQL handle from inside the suite. */\n  reportMirror: ReportMirror;\n  /** #539 Phase 5: the Websites-row twin — announce stamps `Analytics soft-fail\n   *  at` on the SITE row, a different Turso table from the report. */\n  siteMirror?: SiteMirror;\n};\n\n/**\n * Draft the monthly-report ANNOUNCEMENT email for every `maintenance` site (or one,\n * via `deps.site`). Airtable-driven and fleet-wide: unlike `launch`, it runs no audits\n * and takes no `Site`/inventory object — it reads the Lighthouse scores already stored\n * on each Websites row. DRAFTS ONLY; the M3 approve loop sends.\n *\n * One bad site must never abort the run: each site is wrapped in its own try/catch that\n * records an `error` result and continues.\n */\nexport async function announce(deps: AnnounceDeps): Promise<AnnounceResult> {\n  const base = deps.base ?? openBase(readAirtableConfig());\n  const now = deps.now ?? new Date();\n  const writer = deps.reportMirror;\n\n  const websites = await deps.roster();\n  let targets = websites.filter((w) => w.status === \"maintained\");\n  if (deps.site) {\n    const wanted = siteSlug(deps.site);\n    targets = targets.filter((w) => siteSlug(w.name) === wanted);\n  }\n\n  const period = now.toISOString().slice(0, 7);\n  const results: AnnounceSiteResult[] = [];\n\n  for (const w of targets) {\n    try {\n      const scores = scoresFromRow(w);\n      if (scores === null) {\n        results.push({ site: w.name, status: \"skipped-no-scores\" });\n        continue;\n      }\n\n      // Refresh BEFORE the render so a queued announcement always has a current header\n      // stored — the send re-reads the attachment, so a stale one here reaches the\n      // client. Best-effort by construction: refreshHeaderImage returns false and never\n      // throws, so a capture failure leaves the stored image and the draft continues.\n      if (deps.refreshHeader !== false) {\n        await refreshHeaderImage(w, deps.refreshHeader ?? {});\n      }\n\n      // Traffic + search snapshot over a ~30-day window ending now (fetchPeriodUsers derives\n      // the equal-length previous window for the trend). Reuses the report pipeline's\n      // soft-failing enrichment: GA/search unconfigured or an API error leaves the numbers\n      // null and the email simply omits the traffic section — it never blocks the draft.\n      const periodEnd = now;\n      const periodStart = new Date(now.getTime() - GA_WINDOW_DAYS * 24 * 60 * 60 * 1000);\n      const gaResult = await fetchGaUsers(w, periodStart, periodEnd);\n      const searchResult = await fetchSearch(w, periodStart, periodEnd);\n      const gaUsers = gaResult.value;\n      const search = searchResult.value;\n      const enrichment: ReportEnrichment = {\n        ...(gaUsers ? { gaUsersCurrent: gaUsers.current, gaUsersPrevious: gaUsers.previous } : {}),\n        ...(search ? { searchFoundPage1: search.foundOnPage1 } : {}),\n        ...(search?.foundOnPage1 && search.position !== null\n          ? { searchPosition: search.position }\n          : {}),\n      };\n\n      // Record this site's GA/Search enrichment health for the per-site analytics-failure\n      // signal (cockpit/digest) — exactly as the `--due` draft path does. Without this, an\n      // announcement-time GA outage hides the traffic block with NO operator signal (it reads\n      // identically to \"site has no GA configured\"). Set the timestamp on a soft-fail, clear\n      // it on a clean enrichment so the signal self-heals. Best-effort: the column is\n      // operator-added, so until it exists the write throws — which must not break the draft.\n      if (readGaConfig() !== null && Boolean(w.ga4PropertyId || w.searchQuery)) {\n        try {\n          const fields = await updateAnalyticsHealth(\n            base,\n            w.id,\n            gaResult.softFailed || searchResult.softFailed ? now.toISOString() : null,\n          );\n          // Mirror the EXACT FieldSet Airtable got — see draft.ts.\n          await deps.siteMirror?.health(w.id, fields);\n        } catch (e) {\n          console.warn(`⚠ analytics-health write skipped for ${w.name}: ${(e as Error).message}`);\n        }\n      }\n\n      // Dedupe: reuse an existing Announcement row for this (site, period) rather than\n      // stacking a second draft. The reuse path refreshes the stored scores + traffic/search\n      // (and Completed on) so the eventually-sent email — which reads the row — isn't stale.\n      // The create path writes them via createDraft.\n      let report;\n      let statusKind: \"drafted\" | \"reused\";\n      const existing = await findReportForPeriod(writer, w.id, \"Announcement\", period);\n      if (existing) {\n        await updateReportScores(base, existing.id, scores, now, enrichment);\n        // Mirror the SAME refresh: the reuse path exists so the eventually-sent\n        // email is not stale, and the console reads those numbers too.\n        await writer.patch(existing.id, {\n          lighthouse_performance: scores.performance,\n          lighthouse_accessibility: scores.accessibility,\n          lighthouse_best_practices: scores.bestPractices,\n          lighthouse_seo: scores.seo,\n          completed_on: now.toISOString().slice(0, 10),\n          ...(enrichment.gaUsersCurrent !== undefined\n            ? { ga_users_current: enrichment.gaUsersCurrent }\n            : {}),\n          ...(enrichment.gaUsersPrevious !== undefined\n            ? { ga_users_previous: enrichment.gaUsersPrevious }\n            : {}),\n          ...(enrichment.searchFoundPage1 !== undefined\n            ? { search_found_page1: enrichment.searchFoundPage1 ? 1 : 0 }\n            : {}),\n          ...(enrichment.searchPosition !== undefined\n            ? { search_position: enrichment.searchPosition }\n            : {}),\n        });\n        report = existing;\n        statusKind = \"reused\";\n      } else {\n        // #646 step 4: minted and written in Turso (`report_<ULID>`). The\n        // Airtable Reports row this replaces is skipped, not written — see\n        // `createReportDraft`.\n        report = await createReportDraft(draftInputFor(w, scores, now, period, enrichment), {\n          create: writer.create,\n        });\n        statusKind = \"drafted\";\n      }\n\n      const slug = siteSlug(w.name);\n      const { html } = await renderReportHtml({\n        siteName: w.name,\n        siteUrl: w.url,\n        reportType: \"Announcement\",\n        completedOn: now,\n        lighthouse: scores,\n        gaUsersCurrent: gaUsers?.current,\n        gaUsersPrevious: gaUsers?.previous,\n        gaPeriodDays: GA_WINDOW_DAYS,\n        searchPosition: search?.foundOnPage1 ? (search.position ?? undefined) : undefined,\n        lastTestedDate: null,\n        commentary: null,\n        copy: resolveCopy(w),\n        headerImageCid: `${slug}-header`,\n        // cadence (the client's go-forward pace, \"None\" omitted) + default-on improvement\n        // callouts. Shared with the send re-render via announcementSiteExtras so the sent\n        // email matches this reviewed preview.\n        ...announcementSiteExtras(w),\n      });\n\n      // A preview-upload hiccup must NOT fail the site — log and continue.\n      try {\n        await uploadAttachment(\n          report.id,\n          \"Rendered HTML\",\n          html,\n          `${slug}-${now.toISOString().slice(0, 10)}.html`,\n          \"text/html\",\n        );\n        // Store the same body in Turso — the console's preview route reads it\n        // there, not from the Airtable attachment (whose URL expires).\n        await writer.body(report.id, html);\n      } catch (uploadErr) {\n        console.warn(\n          `⚠ Announcement preview upload skipped for ${w.name}: ${\n            uploadErr instanceof Error ? uploadErr.message : String(uploadErr)\n          }`,\n        );\n      }\n\n      // Critical: NOT wrapped — without queueing, the draft never enters the approve queue,\n      // so a failure here must surface as an error result for the site. queueDraft also\n      // supersedes any lower-tier (Maintenance/Testing) drafts queued for this site, and\n      // stands down if an equal-or-higher report is already queued (single-queue rule).\n      const queue = await queueDraft(\n        base,\n        { id: report.id, siteId: w.id, reportType: \"Announcement\" },\n        writer,\n      );\n\n      const recipientMissing = !(w.reportRecipientsTo && w.reportRecipientsTo.trim());\n      results.push({\n        site: w.name,\n        status: statusKind,\n        reportId: report.id,\n        recipientMissing,\n        queued: queue.queued,\n      });\n    } catch (err) {\n      results.push({\n        site: w.name,\n        status: \"error\",\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  return { results };\n}\n\n/** Build the Announcement `DraftInput`. Announcements have no period window and no prior\n *  maintenance test, so periodStart/periodEnd/completedOn all collapse to `now` and\n *  `lastTestedDate` is null. The subject override gives the email a purpose-built line. */\nfunction draftInputFor(\n  w: WebsiteRow,\n  scores: LighthouseScores,\n  now: Date,\n  period: string,\n  enrichment: ReportEnrichment,\n): DraftInput {\n  return {\n    reportId: `${w.name} — Announcement — ${now.toISOString().slice(0, 10)}`,\n    siteId: w.id,\n    reportType: \"Announcement\",\n    period,\n    periodStart: now,\n    periodEnd: now,\n    completedOn: now,\n    lighthouse: scores,\n    lastTestedDate: null,\n    subjectOverride: defaultReportSubject({\n      name: w.name,\n      url: w.url,\n      type: \"Announcement\",\n      date: now,\n    }),\n    ...enrichment,\n  };\n}\n","import { announce, type AnnounceResult, type AnnounceSiteResult } from \"../../recipes/announce.js\";\n\nexport type AnnounceCommandOptions = {\n  cwd?: string;\n};\n\nfunction formatSiteResult(r: AnnounceSiteResult): string {\n  if (r.status === \"skipped-no-scores\") return `[${r.site}] skipped-no-scores`;\n  if (r.status === \"error\") return `[${r.site}] error: ${r.message}`;\n  const note = r.recipientMissing ? \" ⚠ recipient missing\" : \"\";\n  return `[${r.site}] ${r.status}${note}`;\n}\n\nexport function formatAnnounceResult(result: AnnounceResult): string {\n  if (result.results.length === 0) return \"No maintenance sites to announce.\";\n  return result.results.map(formatSiteResult).join(\"\\n\");\n}\n\n/**\n * `announce [site]` — Airtable-driven and fleet-wide. Draft the monthly-report\n * announcement email for every `maintenance` site (or one, when `site` is given) into\n * the M3 approve queue. Never sends; the operator approves each draft and the next send\n * run delivers it. Reads the Lighthouse scores already stored on each Websites row —\n * no audits are run.\n */\nexport async function runAnnounceCommand(\n  site: string | undefined,\n  _opts: AnnounceCommandOptions,\n): Promise<{ output: string; code: number }> {\n  // #539 Phase 5: the create-side Turso dual-write is wired HERE rather than\n  // inside `announce`, so a unit suite calling the recipe with a fake base can\n  // never open a real libSQL handle (and, with TURSO_* exported locally, write\n  // into production).\n  const { makeReportMirror } = await import(\"../../reports/report-mirror.js\");\n  const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n  const reportMirror = await makeReportMirror();\n  const siteMirror = await makeSiteMirror();\n  // #646 step 4: the fleet roster comes from Turso — an Airtable roster cannot\n  // see a `site_<ULID>` site, so one created since step 3 was never announced.\n  const { readFleetRoster } = await import(\"../../fleet/roster.js\");\n  const result = await announce({\n    ...(site ? { site } : {}),\n    roster: () => readFleetRoster(),\n    reportMirror,\n    siteMirror,\n  });\n  const hadError = result.results.some((r) => r.status === \"error\");\n  return { output: formatAnnounceResult(result), code: hadError ? 1 : 0 };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,IAAM,iBAAiB;AA2CvB,eAAsB,SAAS,MAA6C;AAC1E,QAAM,OAAO,KAAK,QAAQ,SAAS,mBAAmB,CAAC;AACvD,QAAM,MAAM,KAAK,OAAO,oBAAI,KAAK;AACjC,QAAM,SAAS,KAAK;AAEpB,QAAM,WAAW,MAAM,KAAK,OAAO;AACnC,MAAI,UAAU,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,YAAY;AAC9D,MAAI,KAAK,MAAM;AACb,UAAM,SAAS,SAAS,KAAK,IAAI;AACjC,cAAU,QAAQ,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,MAAM;AAAA,EAC7D;AAEA,QAAM,SAAS,IAAI,YAAY,EAAE,MAAM,GAAG,CAAC;AAC3C,QAAM,UAAgC,CAAC;AAEvC,aAAW,KAAK,SAAS;AACvB,QAAI;AACF,YAAM,SAAS,cAAc,CAAC;AAC9B,UAAI,WAAW,MAAM;AACnB,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,oBAAoB,CAAC;AAC1D;AAAA,MACF;AAMA,UAAI,KAAK,kBAAkB,OAAO;AAChC,cAAM,mBAAmB,GAAG,KAAK,iBAAiB,CAAC,CAAC;AAAA,MACtD;AAMA,YAAM,YAAY;AAClB,YAAM,cAAc,IAAI,KAAK,IAAI,QAAQ,IAAI,iBAAiB,KAAK,KAAK,KAAK,GAAI;AACjF,YAAM,WAAW,MAAM,aAAa,GAAG,aAAa,SAAS;AAC7D,YAAM,eAAe,MAAM,YAAY,GAAG,aAAa,SAAS;AAChE,YAAM,UAAU,SAAS;AACzB,YAAM,SAAS,aAAa;AAC5B,YAAM,aAA+B;AAAA,QACnC,GAAI,UAAU,EAAE,gBAAgB,QAAQ,SAAS,iBAAiB,QAAQ,SAAS,IAAI,CAAC;AAAA,QACxF,GAAI,SAAS,EAAE,kBAAkB,OAAO,aAAa,IAAI,CAAC;AAAA,QAC1D,GAAI,QAAQ,gBAAgB,OAAO,aAAa,OAC5C,EAAE,gBAAgB,OAAO,SAAS,IAClC,CAAC;AAAA,MACP;AAQA,UAAI,aAAa,MAAM,QAAQ,QAAQ,EAAE,iBAAiB,EAAE,WAAW,GAAG;AACxE,YAAI;AACF,gBAAM,SAAS,MAAM;AAAA,YACnB;AAAA,YACA,EAAE;AAAA,YACF,SAAS,cAAc,aAAa,aAAa,IAAI,YAAY,IAAI;AAAA,UACvE;AAEA,gBAAM,KAAK,YAAY,OAAO,EAAE,IAAI,MAAM;AAAA,QAC5C,SAAS,GAAG;AACV,kBAAQ,KAAK,6CAAwC,EAAE,IAAI,KAAM,EAAY,OAAO,EAAE;AAAA,QACxF;AAAA,MACF;AAMA,UAAI;AACJ,UAAI;AACJ,YAAM,WAAW,MAAM,oBAAoB,QAAQ,EAAE,IAAI,gBAAgB,MAAM;AAC/E,UAAI,UAAU;AACZ,cAAM,mBAAmB,MAAM,SAAS,IAAI,QAAQ,KAAK,UAAU;AAGnE,cAAM,OAAO,MAAM,SAAS,IAAI;AAAA,UAC9B,wBAAwB,OAAO;AAAA,UAC/B,0BAA0B,OAAO;AAAA,UACjC,2BAA2B,OAAO;AAAA,UAClC,gBAAgB,OAAO;AAAA,UACvB,cAAc,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,UAC3C,GAAI,WAAW,mBAAmB,SAC9B,EAAE,kBAAkB,WAAW,eAAe,IAC9C,CAAC;AAAA,UACL,GAAI,WAAW,oBAAoB,SAC/B,EAAE,mBAAmB,WAAW,gBAAgB,IAChD,CAAC;AAAA,UACL,GAAI,WAAW,qBAAqB,SAChC,EAAE,oBAAoB,WAAW,mBAAmB,IAAI,EAAE,IAC1D,CAAC;AAAA,UACL,GAAI,WAAW,mBAAmB,SAC9B,EAAE,iBAAiB,WAAW,eAAe,IAC7C,CAAC;AAAA,QACP,CAAC;AACD,iBAAS;AACT,qBAAa;AAAA,MACf,OAAO;AAIL,iBAAS,MAAM,kBAAkB,cAAc,GAAG,QAAQ,KAAK,QAAQ,UAAU,GAAG;AAAA,UAClF,QAAQ,OAAO;AAAA,QACjB,CAAC;AACD,qBAAa;AAAA,MACf;AAEA,YAAM,OAAO,SAAS,EAAE,IAAI;AAC5B,YAAM,EAAE,KAAK,IAAI,MAAM,iBAAiB;AAAA,QACtC,UAAU,EAAE;AAAA,QACZ,SAAS,EAAE;AAAA,QACX,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,gBAAgB,SAAS;AAAA,QACzB,iBAAiB,SAAS;AAAA,QAC1B,cAAc;AAAA,QACd,gBAAgB,QAAQ,eAAgB,OAAO,YAAY,SAAa;AAAA,QACxE,gBAAgB;AAAA,QAChB,YAAY;AAAA,QACZ,MAAM,YAAY,CAAC;AAAA,QACnB,gBAAgB,GAAG,IAAI;AAAA;AAAA;AAAA;AAAA,QAIvB,GAAG,uBAAuB,CAAC;AAAA,MAC7B,CAAC;AAGD,UAAI;AACF,cAAM;AAAA,UACJ,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA,GAAG,IAAI,IAAI,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,UACzC;AAAA,QACF;AAGA,cAAM,OAAO,KAAK,OAAO,IAAI,IAAI;AAAA,MACnC,SAAS,WAAW;AAClB,gBAAQ;AAAA,UACN,kDAA6C,EAAE,IAAI,KACjD,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS,CACnE;AAAA,QACF;AAAA,MACF;AAMA,YAAM,QAAQ,MAAM;AAAA,QAClB;AAAA,QACA,EAAE,IAAI,OAAO,IAAI,QAAQ,EAAE,IAAI,YAAY,eAAe;AAAA,QAC1D;AAAA,MACF;AAEA,YAAM,mBAAmB,EAAE,EAAE,sBAAsB,EAAE,mBAAmB,KAAK;AAC7E,cAAQ,KAAK;AAAA,QACX,MAAM,EAAE;AAAA,QACR,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,QAAQ,MAAM;AAAA,MAChB,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,cAAQ,KAAK;AAAA,QACX,MAAM,EAAE;AAAA,QACR,QAAQ;AAAA,QACR,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ;AACnB;AAKA,SAAS,cACP,GACA,QACA,KACA,QACA,YACY;AACZ,SAAO;AAAA,IACL,UAAU,GAAG,EAAE,IAAI,+BAAqB,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,IACtE,QAAQ,EAAE;AAAA,IACV,YAAY;AAAA,IACZ;AAAA,IACA,aAAa;AAAA,IACb,WAAW;AAAA,IACX,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,gBAAgB;AAAA,IAChB,iBAAiB,qBAAqB;AAAA,MACpC,MAAM,EAAE;AAAA,MACR,KAAK,EAAE;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAAA,IACD,GAAG;AAAA,EACL;AACF;;;AC5RA,SAAS,iBAAiB,GAA+B;AACvD,MAAI,EAAE,WAAW,oBAAqB,QAAO,IAAI,EAAE,IAAI;AACvD,MAAI,EAAE,WAAW,QAAS,QAAO,IAAI,EAAE,IAAI,YAAY,EAAE,OAAO;AAChE,QAAM,OAAO,EAAE,mBAAmB,8BAAyB;AAC3D,SAAO,IAAI,EAAE,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI;AACvC;AAEO,SAAS,qBAAqB,QAAgC;AACnE,MAAI,OAAO,QAAQ,WAAW,EAAG,QAAO;AACxC,SAAO,OAAO,QAAQ,IAAI,gBAAgB,EAAE,KAAK,IAAI;AACvD;AASA,eAAsB,mBACpB,MACA,OAC2C;AAK3C,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAAgC;AAC1E,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,QAAM,eAAe,MAAM,iBAAiB;AAC5C,QAAM,aAAa,MAAM,eAAe;AAGxC,QAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,sBAAuB;AAChE,QAAM,SAAS,MAAM,SAAS;AAAA,IAC5B,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,IACvB,QAAQ,MAAM,gBAAgB;AAAA,IAC9B;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,WAAW,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO;AAChE,SAAO,EAAE,QAAQ,qBAAqB,MAAM,GAAG,MAAM,WAAW,IAAI,EAAE;AACxE;","names":[]}

package/dist/attachments-JFGFQRXQ.js

@@ -0,0 +1,10 @@
+import {
+  fetchAttachmentBytes,
+  uploadAttachment
+} from "./chunk-YJBSB4LP.js";
+import "./chunk-RQJFGK3A.js";
+export {
+  fetchAttachmentBytes,
+  uploadAttachment
+};
+//# sourceMappingURL=attachments-JFGFQRXQ.js.map

package/dist/{blux-RUFMNOUJ.js → blux-NXQLMS4W.js}

@@ -1,13 +1,13 @@
+import {
+  assetRef,
+  richText
+} from "./chunk-UWJZXL2D.js";
 import {
   FROZEN_PAGE_TYPE,
   extractMapConfig,
   frozenPageCustomType,
   makeIsMapMount
 } from "./chunk-DRDAEELJ.js";
-import {
-  assetRef,
-  richText
-} from "./chunk-UWJZXL2D.js";
 import {
   CDN_HOSTS,
   collectAssetUrls
@@ -4767,4 +4767,4 @@ ${lines.join("\n")}`,
 export {
   runBluxCommand
 };
-//# sourceMappingURL=blux-RUFMNOUJ.js.map
+//# sourceMappingURL=blux-NXQLMS4W.js.map

package/dist/{bump-deps-EL3TKMIL.js → bump-deps-775VLDYB.js}

@@ -5,19 +5,19 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-SHGIDTYF.js";
+} from "./chunk-DYTYPKFN.js";
 import {
   resolveSites
-} from "./chunk-H445EH33.js";
+} from "./chunk-FP6HOW6J.js";
 import {
   bumpDeps
-} from "./chunk-VEIIUCYL.js";
-import "./chunk-SQ4FSNYL.js";
+} from "./chunk-TV76A6GN.js";
+import "./chunk-LUF52EIY.js";
 import "./chunk-Z3JXLULD.js";
 import "./chunk-LBYOLBW7.js";
 import "./chunk-RARREDQE.js";
 import "./chunk-XXTZBPUY.js";
-import "./chunk-EASYCD6F.js";
+import "./chunk-WMF5S2MB.js";
 
 // src/cli/commands/bump-deps.ts
 import { resolve } from "path";
@@ -57,4 +57,4 @@ async function runBumpDepsCommand(site, opts) {
 export {
   runBumpDepsCommand
 };
-//# sourceMappingURL=bump-deps-EL3TKMIL.js.map
+//# sourceMappingURL=bump-deps-775VLDYB.js.map

package/dist/{chunk-IMYL67JV.js → chunk-3RLDX3Q2.js}

@@ -1,6 +1,3 @@
-import {
-  withRecipe
-} from "./chunk-SQ4FSNYL.js";
 import {
   ALL_TEMPLATES,
   RENOVATE_ACTION_CONFIG,
@@ -8,10 +5,13 @@ import {
   templatesByName,
   withRenovatePinsFrom
 } from "./chunk-SLFG7Y76.js";
+import {
+  withRecipe
+} from "./chunk-LUF52EIY.js";
 import {
   listTrackedFiles,
   removeFromIndex
-} from "./chunk-EASYCD6F.js";
+} from "./chunk-WMF5S2MB.js";
 
 // src/recipes/sync-configs.ts
 import { readFile, writeFile, mkdir } from "fs/promises";
@@ -229,4 +229,4 @@ export {
   planTemplateDiffs,
   syncConfigs
 };
-//# sourceMappingURL=chunk-IMYL67JV.js.map
+//# sourceMappingURL=chunk-3RLDX3Q2.js.map

package/dist/{chunk-CA6ADGOC.js → chunk-6PGXKN6F.js}

@@ -1,6 +1,6 @@
 import {
   withRecipe
-} from "./chunk-SQ4FSNYL.js";
+} from "./chunk-LUF52EIY.js";
 import {
   bumpDep,
   readPackageJson,
@@ -150,4 +150,4 @@ export {
   selfCaretRange,
   onboard
 };
-//# sourceMappingURL=chunk-CA6ADGOC.js.map
+//# sourceMappingURL=chunk-6PGXKN6F.js.map

package/dist/{chunk-Y5BVR4HW.js → chunk-6THEZQLA.js}

@@ -9,10 +9,10 @@ import {
 } from "./chunk-KJGKZLCT.js";
 import {
   applyReportTypeHeadline
-} from "./chunk-MZZDMBDT.js";
+} from "./chunk-LZMAG73U.js";
 import {
   siteSlug
-} from "./chunk-KN52PM63.js";
+} from "./chunk-ICSRWW5Q.js";
 
 // src/reports/send/render-email.ts
 function toInlineAttachment(a) {
@@ -143,4 +143,4 @@ export {
   renderReportFromRow,
   windowDays
 };
-//# sourceMappingURL=chunk-Y5BVR4HW.js.map
+//# sourceMappingURL=chunk-6THEZQLA.js.map

package/dist/chunk-ASLDCWBF.js

@@ -0,0 +1,41 @@
+// src/reports/report-row.ts
+var REPORT_TYPES = ["Maintenance", "Testing", "Launch", "Announcement"];
+function toReportType(raw) {
+  if (raw && REPORT_TYPES.includes(raw)) return raw;
+  if (raw)
+    console.warn(`[reports] unknown Report type ${JSON.stringify(raw)} \u2014 treating as Maintenance`);
+  return "Maintenance";
+}
+function isPendingApproval(r) {
+  return r.draftReady && !r.approvedToSend && r.sentAt === null;
+}
+function parseAutoEvidence(raw) {
+  if (typeof raw !== "string" || !raw.trim()) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+  const out = {};
+  for (const [field, v] of Object.entries(parsed)) {
+    if (!v || typeof v !== "object") continue;
+    const o = v;
+    if (o.result !== "pass" && o.result !== "fail" && o.result !== "unknown" && o.result !== "n/a")
+      continue;
+    out[field] = {
+      result: o.result,
+      checkedAt: typeof o.checkedAt === "string" ? o.checkedAt : null,
+      note: typeof o.note === "string" ? o.note : ""
+    };
+  }
+  return Object.keys(out).length > 0 ? out : null;
+}
+
+export {
+  toReportType,
+  isPendingApproval,
+  parseAutoEvidence
+};
+//# sourceMappingURL=chunk-ASLDCWBF.js.map

package/dist/chunk-ASLDCWBF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/report-row.ts"],"sourcesContent":["/**\n * The report-row model and its pure, vendor-neutral coercers.\n *\n * `ReportRow` is what BOTH readers return — `mapRow` over an Airtable record\n * (`src/reports/airtable/reports.ts`) and the Turso report reader in\n * `src/db/fleet-state.ts`. Moved out of the Airtable module in #539 Phase 6\n * step 1 (#646) so the Turso read path does not depend on the directory Phase 6\n * deletes. `src/reports/airtable/reports.ts` re-exports every name.\n */\nimport type { ReportType, LighthouseScores } from \"./types.js\";\nimport type { EvidenceRecord } from \"./auto-tick.js\";\n\nconst REPORT_TYPES: readonly ReportType[] = [\"Maintenance\", \"Testing\", \"Launch\", \"Announcement\"];\n\n/** Coerce the Airtable `Report type` (a single-select string) to a known\n *  ReportType. A bare `as ReportType` cast is a compile-time lie: if the\n *  single-select gains an unexpected option, the bad value flows to render.ts,\n *  where `reportType === \"Launch\"` silently falls through to the Maintenance\n *  template. Validate at the boundary; warn + default to \"Maintenance\" so an\n *  unknown type is VISIBLE in the logs rather than silently mis-templated. */\nexport function toReportType(raw: string | undefined): ReportType {\n  if (raw && (REPORT_TYPES as readonly string[]).includes(raw)) return raw as ReportType;\n  if (raw)\n    console.warn(`[reports] unknown Report type ${JSON.stringify(raw)} — treating as Maintenance`);\n  return \"Maintenance\";\n}\n\nexport type DeliveryStatus = \"pending\" | \"delivered\" | \"bounced\" | \"complained\";\n\nexport type ReportRow = {\n  id: string;\n  reportId: string;\n  siteId: string;\n  reportType: ReportType;\n  /** UTC `YYYY-MM` recurrence key (idempotency for search-before-create). Null on legacy rows. */\n  period: string | null;\n  periodStart: string | null;\n  periodEnd: string | null;\n  completedOn: string | null;\n  lighthouse: LighthouseScores | null;\n  gaUsersCurrent: number | null;\n  gaUsersPrevious: number | null;\n  searchFoundPage1: boolean | null;\n  searchPosition: number | null;\n  lastTestedDate: string | null;\n  commentary: string | null;\n  subjectOverride: string | null;\n  draftReady: boolean;\n  approvedToSend: boolean;\n  sentAt: string | null;\n  approvedAt: string | null;\n  approvedBy: string | null;\n  deliveryStatus: DeliveryStatus;\n  renderedHtmlAttachment: { url: string; filename: string } | null;\n  /** Read out of the Resend response and stored in a hidden field; needed for webhook reconciliation. */\n  resendMessageId: string | null;\n  /** The 12 operator-checklist checkboxes, keyed by their Airtable column name (ALL_CHECKLIST_FIELDS);\n   *  missing/false cells read false. Maintenance/Testing reports gate approve+send on the relevant\n   *  subset (see src/reports/checklist.ts). */\n  checklist: Record<string, boolean>;\n  /** Snapshot of the auto-tick evidence at draft time, keyed by checklist field → evidence\n   *  record. Null when the report predates auto-tick or carried no auto-checked items. This is the\n   *  health gate's source of truth: `isHealthGateClear`/`gatingHealth` (src/reports/checklist.ts)\n   *  read these evidence records, NOT the checklist booleans — and also drive the dashboard badges. */\n  autoEvidence: Record<string, EvidenceRecord> | null;\n  /** Logged send-anyway override (Phase 10). When `sendOverride` is true AND `overrideReason` is\n   *  non-empty, the health gate is bypassed for THIS report; `overrideBy`/`overrideAt` are the\n   *  audit trail (parallel to approvedBy/approvedAt). Missing cells read false/null. */\n  sendOverride: boolean;\n  overrideReason: string | null;\n  overrideBy: string | null;\n  overrideAt: string | null;\n};\n\n/**\n * The \"Ready for your yes\" gate: Draft ready ∧ ¬Approved to send ∧ Sent at BLANK.\n * The single source of truth for \"pending the operator's approval\" — `listPendingApproval`,\n * `runDigest`'s ready-list, the per-site dashboard, and the fleet cockpit all key off this\n * one predicate so the surfaces can't drift.\n */\nexport function isPendingApproval(r: ReportRow): boolean {\n  return r.draftReady && !r.approvedToSend && r.sentAt === null;\n}\n\n/**\n * Parse the `Checklist auto-evidence` JSON field → a field→EvidenceRecord map, or null when\n * absent/malformed. Permissive on inner shape (it's display-only — a bad blob just yields null,\n * never throws), mirroring `parseNotifyRouting`.\n */\nexport function parseAutoEvidence(raw: unknown): Record<string, EvidenceRecord> | null {\n  if (typeof raw !== \"string\" || !raw.trim()) return null;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) return null;\n  // Validate each entry's inner shape (it drives display) — drop any record whose `result` isn't\n  // one of the four literals, and coerce `note`/`checkedAt` to safe types. A garbage blob yields\n  // null rather than a record that would render \"auto: undefined\" on the dashboard.\n  const out: Record<string, EvidenceRecord> = {};\n  for (const [field, v] of Object.entries(parsed as Record<string, unknown>)) {\n    if (!v || typeof v !== \"object\") continue;\n    const o = v as Record<string, unknown>;\n    if (o.result !== \"pass\" && o.result !== \"fail\" && o.result !== \"unknown\" && o.result !== \"n/a\")\n      continue;\n    out[field] = {\n      result: o.result,\n      checkedAt: typeof o.checkedAt === \"string\" ? o.checkedAt : null,\n      note: typeof o.note === \"string\" ? o.note : \"\",\n    };\n  }\n  return Object.keys(out).length > 0 ? out : null;\n}\n"],"mappings":";AAYA,IAAM,eAAsC,CAAC,eAAe,WAAW,UAAU,cAAc;AAQxF,SAAS,aAAa,KAAqC;AAChE,MAAI,OAAQ,aAAmC,SAAS,GAAG,EAAG,QAAO;AACrE,MAAI;AACF,YAAQ,KAAK,iCAAiC,KAAK,UAAU,GAAG,CAAC,iCAA4B;AAC/F,SAAO;AACT;AAuDO,SAAS,kBAAkB,GAAuB;AACvD,SAAO,EAAE,cAAc,CAAC,EAAE,kBAAkB,EAAE,WAAW;AAC3D;AAOO,SAAS,kBAAkB,KAAqD;AACrF,MAAI,OAAO,QAAQ,YAAY,CAAC,IAAI,KAAK,EAAG,QAAO;AACnD,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AAI3E,QAAM,MAAsC,CAAC;AAC7C,aAAW,CAAC,OAAO,CAAC,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC1E,QAAI,CAAC,KAAK,OAAO,MAAM,SAAU;AACjC,UAAM,IAAI;AACV,QAAI,EAAE,WAAW,UAAU,EAAE,WAAW,UAAU,EAAE,WAAW,aAAa,EAAE,WAAW;AACvF;AACF,QAAI,KAAK,IAAI;AAAA,MACX,QAAQ,EAAE;AAAA,MACV,WAAW,OAAO,EAAE,cAAc,WAAW,EAAE,YAAY;AAAA,MAC3D,MAAM,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,IAC9C;AAAA,EACF;AACA,SAAO,OAAO,KAAK,GAAG,EAAE,SAAS,IAAI,MAAM;AAC7C;","names":[]}

package/dist/{chunk-DVJNYPFR.js → chunk-AYDQQBNG.js}

@@ -1,6 +1,6 @@
 import {
   withRecipe
-} from "./chunk-SQ4FSNYL.js";
+} from "./chunk-LUF52EIY.js";
 import {
   readPackageJson,
   writePackageJson
@@ -96,4 +96,4 @@ async function convertToPnpm(site, opts = {}) {
 export {
   convertToPnpm
 };
-//# sourceMappingURL=chunk-DVJNYPFR.js.map
+//# sourceMappingURL=chunk-AYDQQBNG.js.map

package/dist/{chunk-GEUC5VGM.js → chunk-BINFZQ2T.js}

@@ -5,11 +5,11 @@ import {
   mapWebsiteRecord,
   scheduleColumnFor,
   siteValueFor
-} from "./chunk-UIITN37J.js";
+} from "./chunk-LF2TJN4X.js";
 import {
   parseAutoEvidence,
   toReportType
-} from "./chunk-F3JWOPTG.js";
+} from "./chunk-ASLDCWBF.js";
 import {
   MAINTENANCE_CHECKLIST,
   TESTING_CHECKLIST
@@ -22,7 +22,7 @@ import {
   toPrismicModelsVerdict,
   toVerdict,
   trimToNull
-} from "./chunk-KN52PM63.js";
+} from "./chunk-ICSRWW5Q.js";
 
 // src/db/fleet-state.ts
 import { sql } from "kysely";
@@ -199,6 +199,35 @@ async function mirrorHealthFields(db, siteId, fields) {
   const res = await db.updateTable("site_health").set(patch).where("site_id", "=", siteId).executeTakeFirst();
   return res.numUpdatedRows > 0n;
 }
+async function insertSiteRows(db, site, computedAt) {
+  await db.insertInto("sites").values({
+    id: site.id,
+    slug: site.slug,
+    name: site.name,
+    status: site.status,
+    url: site.url,
+    point_of_contact: site.pointOfContact,
+    git_repo: site.gitRepo,
+    require_turnstile: 0
+  }).execute();
+  await db.insertInto("site_health").values({ site_id: site.id }).execute();
+  await db.insertInto("site_schedule").values({
+    site_id: site.id,
+    next_maintenance_at: null,
+    next_testing_at: null,
+    computed_at: computedAt
+  }).execute();
+}
+async function updateSiteIdentity(db, siteId, patch) {
+  const set = {};
+  if (patch.name !== void 0) set.name = patch.name;
+  if (patch.url !== void 0) set.url = patch.url;
+  if (patch.pointOfContact !== void 0) set.point_of_contact = patch.pointOfContact;
+  if (patch.gitRepo !== void 0) set.git_repo = patch.gitRepo;
+  if (Object.keys(set).length === 0) return true;
+  const res = await db.updateTable("sites").set(set).where("id", "=", siteId).executeTakeFirst();
+  return res.numUpdatedRows > 0n;
+}
 async function mirrorScheduleFields(db, siteId, fields, computedAt) {
   const patch = {};
   for (const [field, value] of Object.entries(fields)) {
@@ -332,6 +361,10 @@ async function listReportsForSite(db, siteId) {
   const rows = await db.selectFrom("reports").select(REPORT_LIST_COLUMNS).select(HAS_RENDERED_HTML).where("site_id", "=", siteId).orderBy("period_start", "desc").orderBy("id").execute();
   return rows.map((r) => reportRowFromDb(r, r.has_rendered_html !== 0));
 }
+async function listSendableReports(db) {
+  const rows = await db.selectFrom("reports").select(REPORT_LIST_COLUMNS).select(HAS_RENDERED_HTML).where("draft_ready", "=", 1).where("approved_to_send", "=", 1).where("sent_at", "is", null).orderBy("period_start", "desc").orderBy("id").execute();
+  return rows.map((r) => reportRowFromDb(r, r.has_rendered_html !== 0));
+}
 async function mirrorReportPatch(db, reportId, patch) {
   if (Object.keys(patch).length === 0) return true;
   const res = await db.updateTable("reports").set(patch).where("id", "=", reportId).executeTakeFirst();
@@ -343,6 +376,9 @@ async function mirrorReportInsert(db, rec) {
   void _rh;
   await db.insertInto("reports").values(row).onConflict((oc) => oc.column("id").doUpdateSet(rowSansHtml)).execute();
 }
+async function insertReportRow(db, rec) {
+  await db.insertInto("reports").values(mapReportRecord(rec, null)).execute();
+}
 async function storeRenderedHtml(db, reportId, html) {
   await db.updateTable("reports").set({ rendered_html: html }).where("id", "=", reportId).execute();
 }
@@ -350,6 +386,10 @@ async function getReportById(db, id) {
   const r = await db.selectFrom("reports").selectAll().where("id", "=", id).executeTakeFirst();
   return r ? reportRowFromDb(r, r.rendered_html !== null) : null;
 }
+async function findReportByMessageId(db, messageId) {
+  const r = await db.selectFrom("reports").select(REPORT_LIST_COLUMNS).select(HAS_RENDERED_HTML).where("resend_message_id", "=", messageId).limit(1).executeTakeFirst();
+  return r ? reportRowFromDb(r, r.has_rendered_html !== 0) : null;
+}
 async function getReportHtml(db, id) {
   const r = await db.selectFrom("reports").select(["rendered_html", "report_id"]).where("id", "=", id).executeTakeFirst();
   if (!r || r.rendered_html === null) return null;
@@ -361,6 +401,8 @@ export {
   mirrorSiteFields,
   mirrorSiteInsert,
   mirrorHealthFields,
+  insertSiteRows,
+  updateSiteIdentity,
   mirrorScheduleFields,
   getSiteBySlug,
   siteRowExists,
@@ -369,10 +411,13 @@ export {
   REPORT_LIST_COLUMNS,
   listAllReports,
   listReportsForSite,
+  listSendableReports,
   mirrorReportPatch,
   mirrorReportInsert,
+  insertReportRow,
   storeRenderedHtml,
   getReportById,
+  findReportByMessageId,
   getReportHtml
 };
-//# sourceMappingURL=chunk-GEUC5VGM.js.map
+//# sourceMappingURL=chunk-BINFZQ2T.js.map