@reddoorla/maintenance 0.96.0 → 0.98.0

package/dist/report-RC5LGPU3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/alerts/analytics-health.ts","../src/cli/commands/report.ts"],"sourcesContent":["import { escapeHtml } from \"../util/html.js\";\n\n/**\n * The GA/Search enrichment outcome of one `report --due` draft run, aggregated\n * across the sites it drafted. `softFailedSites` is how many drafted sites had GA\n * OR Search enrichment ERROR (not \"not configured\" — that's a legitimate skip);\n * `configuredSites` is how many drafted sites had analytics configured at all\n * (the subject is set AND the site has a GA4 property or a search query). The ratio\n * is what distinguishes a fleet-wide subject outage from a single transient blip.\n */\nexport type AnalyticsRunHealth = {\n  softFailedSites: number;\n  configuredSites: number;\n};\n\nexport type AnalyticsAlert = { fire: boolean; reason: string };\n\n/** A lone failure never alerts — that's a per-site config issue, not the shared-\n *  subject SPOF. Two-plus AND a majority of configured sites is the fleet signature. */\nconst MIN_FAILED_SITES = 2;\n\n/**\n * Decide whether a draft run's GA/Search soft-failures look FLEET-WIDE — i.e. the\n * one impersonated subject (`GA_SUBJECT`) lost access — rather than one site's\n * transient blip. PURE. Fires when at least {@link MIN_FAILED_SITES} configured\n * sites failed AND they are a majority (≥ half) of the analytics-configured sites\n * this run. With <2 configured sites it can't distinguish a SPOF from a one-off, so\n * it never fires (at fleet scale there are always many configured sites).\n */\nexport function assessAnalyticsAlert(h: AnalyticsRunHealth): AnalyticsAlert {\n  const { softFailedSites, configuredSites } = h;\n  const fire =\n    configuredSites >= 2 &&\n    softFailedSites >= MIN_FAILED_SITES &&\n    softFailedSites * 2 >= configuredSites;\n  const reason = fire\n    ? `${softFailedSites} of ${configuredSites} analytics-configured sites had GA/Search enrichment fail this run — the shared GA_SUBJECT likely lost access (an offboarded user, revoked property access, or a botched role-account cutover). Reports were drafted with BLANK analytics.`\n    : \"\";\n  return { fire, reason };\n}\n\n/**\n * Compose the operator alert email for a fleet-wide analytics failure. PURE — the\n * caller (the `report --due` cron) sends it best-effort via Resend only when\n * {@link assessAnalyticsAlert} fires. `dashboardUrl` is the fleet homepage link.\n */\nexport function composeAnalyticsAlertEmail(\n  h: AnalyticsRunHealth,\n  dashboardUrl: string,\n): { subject: string; html: string } {\n  const subject = `⚠ Fleet analytics enrichment failing — ${h.softFailedSites}/${h.configuredSites} sites`;\n  const { reason } = assessAnalyticsAlert(h);\n  const html = `<p><strong>${escapeHtml(reason)}</strong></p>\n<p>This usually means the Google Workspace user the service account impersonates can no longer read the GA4 / Search Console properties. Reports still send — but with blank analytics — until the subject is restored.</p>\n<p>Next step: follow the GA/Search subject runbook (<code>docs/runbooks/ga-search-role-account-cutover.md</code>) to restore or move the subject, then re-run <code>reddoor-maint report --due</code> and confirm the warning clears.</p>\n<p><a href=\"${escapeHtml(dashboardUrl)}\">Open the fleet dashboard →</a></p>`;\n  return { subject, html };\n}\n","import { openBase, readAirtableConfig, type AirtableBase } from \"../../reports/airtable/client.js\";\nimport {\n  listWebsites,\n  siteSlug,\n  updateNextDueDates,\n  type WebsiteRow,\n} from \"../../reports/airtable/websites.js\";\nimport { listAllReports, type ReportRow } from \"../../reports/airtable/reports.js\";\nimport { findDueReports, nextDueDate, reportPeriodKey } from \"../../reports/due.js\";\nimport { draftReportForSite } from \"../../reports/draft.js\";\nimport { reportTier } from \"../../reports/queue.js\";\nimport { readGaConfig } from \"../../reports/ga/config.js\";\nimport {\n  assessAnalyticsAlert,\n  composeAnalyticsAlertEmail,\n  type AnalyticsRunHealth,\n} from \"../../alerts/analytics-health.js\";\nimport type { ReportType } from \"../../reports/types.js\";\nimport type { ScheduleMirror } from \"../../audits/health-mirror.js\";\nimport type { ReportMirror } from \"../../reports/report-mirror.js\";\nimport type { SiteMirror } from \"../../db/site-mirror.js\";\nimport { operatorEmail } from \"../../util/operator.js\";\n\nexport type ReportCommandOptions = {\n  due?: boolean;\n  preview?: boolean;\n  enrich?: boolean;\n  sendReady?: boolean;\n  digest?: boolean;\n  rerender?: string;\n  type?: string;\n  cwd?: string;\n};\n\n/**\n * Summary line for a drafted report, reflecting the single-queue outcome. `queued === false`\n * means a higher-or-equal-tier report was already pending for the site, so this draft was\n * created but deliberately left OUT of the approve queue. A non-empty `supersededIds` means it\n * un-queued that many lower-tier drafts. `null` is the previewOnly path (no Airtable queue).\n */\nfunction draftLine(\n  reportId: string | undefined,\n  queued: boolean | null,\n  supersededIds: string[],\n  verb = \"drafted\",\n): string {\n  const id = reportId ?? \"(unknown)\";\n  if (queued === false) {\n    return `• ${verb} but NOT queued: ${id} — a higher-or-equal-tier report is already pending approval`;\n  }\n  const sup =\n    supersededIds.length > 0\n      ? ` (superseded ${supersededIds.length} lower-tier draft${supersededIds.length > 1 ? \"s\" : \"\"})`\n      : \"\";\n  return `✓ ${verb}: ${id}${sup}`;\n}\n\n/**\n * Parse the single-site `--type` flag. Only Maintenance and Testing are draftable\n * this way — Launch has the `launch <site>` command and Announcement has\n * `announce <site>`, each with its own purpose-built flow. Case-insensitive;\n * defaults to Maintenance (the historical single-site behaviour). Throws an\n * exitCode-2 usage error on anything else. PURE.\n */\nexport function parseSingleSiteReportType(raw: string | undefined): ReportType {\n  if (raw === undefined || raw.trim() === \"\") return \"Maintenance\";\n  const norm = raw.trim().toLowerCase();\n  if (norm === \"maintenance\") return \"Maintenance\";\n  if (norm === \"testing\") return \"Testing\";\n  const hint =\n    norm === \"launch\"\n      ? \" — use the `launch <site>` command\"\n      : norm === \"announcement\"\n        ? \" — use the `announce <site>` command\"\n        : \"\";\n  throw Object.assign(\n    new Error(`--type must be Maintenance or Testing (got ${JSON.stringify(raw)})${hint}`),\n    { exitCode: 2 },\n  );\n}\n\n/** Dashboard origin for digest /s/<slug> links. DASHBOARD_BASE_URL overrides the\n *  production default; the trailing slash (if any) is trimmed by runDigest. */\nfunction dashboardBaseUrl(): string {\n  return process.env.DASHBOARD_BASE_URL?.trim() || \"https://reddoor-maintenance.netlify.app\";\n}\n\nexport async function runReportCommand(\n  slug: string | undefined,\n  opts: ReportCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (opts.digest) {\n    const { runDigest } = await import(\"../../reports/digest.js\");\n    return runDigest({ baseUrl: dashboardBaseUrl() });\n  }\n\n  if (opts.sendReady) {\n    const { sendApprovedReports } = await import(\"../../reports/send/orchestrate.js\");\n    // #539 Phase 5: a Launch send flips Status + stamps `Launched at` on the\n    // Websites row; #643 retired the hourly sync, so these mirrors are the ONLY\n    // way either write reaches Turso.\n    const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n    const { mirrorWrite } = await import(\"../../db/freeze.js\");\n    const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n    const { mirrorReportPatch } = await import(\"../../db/fleet-state.js\");\n    return sendApprovedReports({\n      siteMirror: await makeSiteMirror(),\n      // stampSent's Turso shadow, routed through mirrorWrite so the freeze\n      // switch owns the semantics: strict rethrows and the send loop reds the\n      // run. Mirrors stampSent exactly — the 409 replay path leaves Airtable's\n      // `Resend message ID` untouched, so the shadow omits it there too. The\n      // row count is handed through (#647): a stamp for a report row Turso\n      // never held is `missed`, not a green no-op.\n      reportSentMirror: (reportId, sentAt, messageId) =>\n        mirrorWrite(`stamp-sent ${reportId}`, async () => {\n          const db = await openDb(readDbConfig());\n          return mirrorReportPatch(db, reportId, {\n            sent_at: sentAt.toISOString(),\n            ...(messageId !== null ? { resend_message_id: messageId } : {}),\n          });\n        }),\n    });\n  }\n\n  // Refresh ONE unsent report's stored body so the console preview reflects\n  // commentary edited after drafting. Runs here rather than in a Netlify\n  // function because rendering needs sharp — see rerender.ts.\n  if (opts.rerender) {\n    const { rerenderReport, formatRerenderResult } = await import(\"../../reports/send/rerender.js\");\n    const { renderReportFromRow } = await import(\"../../reports/send/render-from-row.js\");\n    const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n    const { getReportById, getSiteById, storeRenderedHtml } =\n      await import(\"../../db/fleet-state.js\");\n    const { loadHeaderImage } = await import(\"../../db/header-images.js\");\n    const { fetchAttachmentBytes } = await import(\"../../reports/airtable/attachments.js\");\n    const db = await openDb(readDbConfig());\n    const result = await rerenderReport(\n      {\n        getReport: (id) => getReportById(db, id),\n        getSite: (id) => getSiteById(db, id),\n        loadHeaderPlate: async (id) => (await loadHeaderImage(db, id))?.bytes ?? null,\n        fetchAirtableHeader: async (url) => (await fetchAttachmentBytes(url)).bytes,\n        render: (site, report, plate) => renderReportFromRow(site, report, plate),\n        store: (id, html) => storeRenderedHtml(db, id, html),\n      },\n      opts.rerender,\n    );\n    // Exit 1 on anything but a render, so a dispatched run that refused is RED\n    // rather than a green run that silently changed nothing.\n    return { output: formatRerenderResult(result), code: result.status === \"rendered\" ? 0 : 1 };\n  }\n\n  if (opts.due) {\n    return runDueDraft();\n  }\n\n  if (slug) {\n    // Validate the type BEFORE any Airtable access so a bad --type fails fast (and\n    // without needing credentials).\n    const reportType = parseSingleSiteReportType(opts.type);\n    return runSingleSiteDraft(slug, {\n      previewOnly: Boolean(opts.preview),\n      enrich: Boolean(opts.enrich),\n      reportType,\n    });\n  }\n\n  throw Object.assign(\n    new Error(\n      \"Usage: reddoor-maint report [<slug>] [--type <Maintenance|Testing>] [--due] [--preview] [--enrich] [--send-ready] [--digest]\",\n    ),\n    {\n      exitCode: 2,\n    },\n  );\n}\n\nasync function runDueDraft(): Promise<{ output: string; code: number }> {\n  const base = openBase(readAirtableConfig());\n  // Phase 3 dual-write (#539): mirror real next-due writes into site_schedule.\n  // Null when libSQL creds are absent — the Airtable path is unchanged.\n  const { makeScheduleMirrorBestEffort } = await import(\"../../audits/health-mirror.js\");\n  // Phase 5 dual-write (#539): mirror this batch's report writes — the created\n  // rows, their bodies, and the queue flags. Unlike the schedule mirror this is\n  // never null — creds-absent is reported on the REPORT_MIRROR line rather than\n  // being indistinguishable from success, the failure mode that hid #585.\n  const { makeReportMirror } = await import(\"../../reports/report-mirror.js\");\n  const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n  const result = await draftDueReports(\n    base,\n    new Date(),\n    await makeScheduleMirrorBestEffort(),\n    await makeReportMirror(),\n    await makeSiteMirror(),\n  );\n  await alertOnFleetAnalyticsFailure(result.health);\n  return { output: result.output, code: result.code };\n}\n\n/** Best-effort: when a draft run's GA/Search soft-failures look FLEET-WIDE (the shared\n *  GA_SUBJECT lost access — see assessAnalyticsAlert), email the operator one alert.\n *  NEVER throws — a Resend or config hiccup must not fail the nightly draft cron; the\n *  per-site `⚠ GA skipped` warnings + the run-output line still carry the signal. The\n *  daily idempotency key dedupes multiple runs in one day (Resend dedupes 24h). */\nasync function alertOnFleetAnalyticsFailure(health: AnalyticsRunHealth): Promise<void> {\n  if (!assessAnalyticsAlert(health).fire) return;\n  try {\n    const to = operatorEmail();\n    const { subject, html } = composeAnalyticsAlertEmail(health, dashboardBaseUrl());\n    const { defaultResendClient } = await import(\"../../reports/send/resend.js\");\n    await defaultResendClient().send({\n      from: \"Reddoor Reports <reports@reddoorla.com>\",\n      to: [to],\n      subject,\n      html,\n      idempotencyKey: `analytics-alert-${new Date().toISOString().slice(0, 10)}`,\n    });\n    console.warn(`⚠ ${subject} — operator alerted (${to})`);\n  } catch (e) {\n    console.warn(`⚠ analytics-failure alert send failed: ${(e as Error).message}`);\n  }\n}\n\n/**\n * Write each site's code-computed next-maintenance / next-testing date back to Airtable\n * (date-only, or null when there's no schedule), so the \"next\" dates shown there derive\n * from the SAME `nextDueDate` the scheduler uses — replacing the old Airtable formula +\n * automation. Best-effort and per-site isolated: a missing `Next … at` column or one bad\n * row warns and is skipped, never aborting the nightly draft run.\n *\n * The diff-guard (#539 Phase 3): a site whose computed dates equal what its row\n * already holds is SKIPPED — before it, every one of the 44 sites got a nightly\n * write while only the handful whose schedule actually moved needed one (a\n * never-maintained site re-wrote null over null forever). This also scopes the\n * write to maintained sites by construction: no schedule → computed null →\n * equal to the stored null → skipped. Each real write dual-writes through\n * `scheduleMirror` into site_schedule (null mirror = Turso creds absent; the\n * hourly sync converges either way). The NEXT_DUE_WRITE line is observability,\n * not a CI gate — nothing greps it yet.\n */\nexport async function writeNextDueDates(\n  base: AirtableBase,\n  websites: WebsiteRow[],\n  reports: ReportRow[],\n  today: Date,\n  scheduleMirror: ScheduleMirror | null = null,\n): Promise<void> {\n  const ymd = (d: Date | null): string | null => (d ? d.toISOString().slice(0, 10) : null);\n  let wrote = 0;\n  let skipped = 0;\n  let failed = 0;\n  let mirrored = 0;\n  let mirrorFailed = 0;\n  let mirrorMissed = 0;\n  for (const site of websites) {\n    // The whole per-site body sits in ONE try — compute included — so a bad\n    // row can only cost its own write, exactly the pre-diff-guard blast radius.\n    try {\n      const maintenanceAt = ymd(nextDueDate(site, reports, \"Maintenance\", today));\n      const testingAt = ymd(nextDueDate(site, reports, \"Testing\", today));\n      if (maintenanceAt === site.nextMaintenanceAt && testingAt === site.nextTestingAt) {\n        skipped++;\n        continue;\n      }\n      const fields = await updateNextDueDates(base, site.id, { maintenanceAt, testingAt });\n      wrote++;\n      if (scheduleMirror) {\n        try {\n          // false = the UPDATE matched no site_schedule row (site created in\n          // Airtable since the last hourly import) — missed, not mirrored.\n          if (await scheduleMirror(site.id, fields, today.toISOString())) mirrored++;\n          else mirrorMissed++;\n        } catch (e) {\n          mirrorFailed++;\n          console.warn(`⚠ [schedule-mirror] ${site.name}: ${(e as Error).message}`);\n        }\n      }\n    } catch (e) {\n      failed++;\n      console.warn(`⚠ next-due write skipped for ${site.name}: ${(e as Error).message}`);\n    }\n  }\n  // failed= keeps a write outage visible: without it wrote+skipped silently\n  // undercounts, and a FULL outage prints wrote=0 skipped=0 — indistinguishable\n  // from an empty fleet.\n  // A null mirror writes nothing and throws nothing, so its only trace used to\n  // be an ABSENT suffix — which reads exactly like a healthy run. `mirror=absent`\n  // states it instead. Counters stay off in that case deliberately: `mirrored=0`\n  // would claim a write that returned nothing, not one that was never attempted.\n  const mirrorNote = scheduleMirror\n    ? ` mirrored=${mirrored} mirror_failed=${mirrorFailed} mirror_missed=${mirrorMissed}`\n    : \" mirror=absent\";\n  console.log(`NEXT_DUE_WRITE wrote=${wrote} skipped=${skipped} failed=${failed}${mirrorNote}`);\n}\n\nexport async function draftDueReports(\n  base: AirtableBase,\n  today: Date,\n  scheduleMirror: ScheduleMirror | null = null,\n  /** #539 Phase 5: Turso write-through for rows this batch CREATES. Forwarded\n   *  to every draftReportForSite call — the nightly batch is the only unattended\n   *  creator of report rows, so a dropped pass-through leaves each new draft\n   *  invisible to the Turso-backed console. */\n  reportMirror?: ReportMirror,\n  /** #539 Phase 5: the Websites-row twin — drafting stamps `Analytics soft-fail\n   *  at` on the SITE row, a different Turso table from the report. */\n  siteMirror?: SiteMirror,\n): Promise<{ output: string; code: number; health: AnalyticsRunHealth }> {\n  const mirrorOpt = {\n    ...(reportMirror ? { reportMirror } : {}),\n    ...(siteMirror ? { siteMirror } : {}),\n  };\n  const websites = await listWebsites(base);\n  // ONE unfiltered fetch for the whole fleet. Per-site queries can't be pushed to\n  // Airtable anyway (linked-record fields aren't formula-filterable by record id),\n  // and findDueReports + the period guard below match on siteId in memory.\n  const reports = await listAllReports(base);\n\n  // Refresh every site's code-owned next-due dates first, so they stay current even on\n  // a run where nothing is due (the early return below).\n  await writeNextDueDates(base, websites, reports, today, scheduleMirror);\n\n  const due = findDueReports(websites, reports, today);\n\n  // GA/Search enrichment is configured globally (the impersonation subject) AND\n  // per-site (a GA4 property or a search query). `gaConfigured` is the global half;\n  // the per-site half is checked as each draft runs, to build the fleet-wide\n  // analytics-failure alert's denominator (see alertOnFleetAnalyticsFailure).\n  const gaConfigured = readGaConfig() !== null;\n  // Truthy (not `!== null`) to mirror fetchGaUsers/fetchSearch's own gate exactly\n  // (`!siteRow.ga4PropertyId`), so an empty-string cell counts as not-configured in\n  // BOTH places and can't inflate the alert denominator.\n  const isAnalyticsConfigured = (s: WebsiteRow): boolean =>\n    gaConfigured && Boolean(s.ga4PropertyId || s.searchQuery);\n\n  if (due.length === 0) {\n    return {\n      output: \"No reports due.\",\n      code: 0,\n      health: { softFailedSites: 0, configuredSites: 0 },\n    };\n  }\n\n  const lines: string[] = [];\n  let softFailedSites = 0;\n  let searchDefaultMisses = 0;\n  let searchPropertiesMissing = 0;\n  let gaConfiguredSites = 0;\n  let skipped = 0;\n  for (const item of due) {\n    // Idempotency: a re-run must not re-draft a (site, type) already drafted this\n    // recurrence. The dueDate's YYYY-MM is the stable per-cycle key. Match against the\n    // reports we already fetched — no extra query on the hot path.\n    const period = reportPeriodKey(item.dueDate);\n    const existing = reports.find(\n      (r) => r.siteId === item.site.id && r.reportType === item.reportType && r.period === period,\n    );\n\n    // A row already exists for THIS period. Two cases:\n    //   - Draft ready → truly done, skip (the idempotent re-run path).\n    //   - NOT ready → a crash between createDraft and setDraftReady wedged it: the\n    //     row exists (so we never re-draft) yet it's never sendable (listSendable\n    //     needs Draft ready). COMPLETE it in place instead of skipping forever —\n    //     re-render → re-upload the HTML → flip Draft ready on the EXISTING row.\n    if (existing) {\n      if (existing.draftReady) {\n        skipped++;\n        lines.push(`• skipped (already drafted ${period}): ${item.site.name} ${item.reportType}`);\n        continue;\n      }\n      // A not-ready row is normally a crash between createDraft and setDraftReady — re-complete\n      // it in place. BUT queueDraft also clears Draft ready on rows it supersedes/blocks, and\n      // those must NOT be re-completed: doing so would re-render and APPEND a duplicate HTML\n      // attachment every nightly run, only to be re-blocked. Distinguish the two: if a\n      // higher-or-equal-tier report is still pending for this site, this row was intentionally\n      // un-queued (not crashed) — skip it until the blocker is sent/approved or the month rolls.\n      const blockedByPending = reports.some(\n        (r) =>\n          r.siteId === item.site.id &&\n          r.id !== existing.id &&\n          r.sentAt === null &&\n          r.draftReady &&\n          reportTier(r.reportType) >= reportTier(item.reportType),\n      );\n      if (blockedByPending) {\n        skipped++;\n        lines.push(\n          `• skipped (superseded — a higher-or-equal-tier report is pending): ${item.site.name} ${item.reportType}`,\n        );\n        continue;\n      }\n      try {\n        const result = await draftReportForSite(base, item.site, item.reportType, {\n          period,\n          completeRowId: existing.id,\n          existingRow: existing,\n          ...mirrorOpt,\n        });\n        existing.draftReady = result.queued === true;\n        lines.push(\n          draftLine(\n            result.reportRow?.reportId ?? existing.reportId,\n            result.queued,\n            result.supersededIds,\n            \"completed half-made draft\",\n          ),\n        );\n        if (isAnalyticsConfigured(item.site)) gaConfiguredSites++;\n        if (result.softFailures.length > 0) softFailedSites++;\n        if (result.searchDefaultMissed) searchDefaultMisses++;\n        if (result.searchPropertyMissing) searchPropertiesMissing++;\n      } catch (e) {\n        lines.push(`✗ failed: ${item.site.name} ${item.reportType} — ${(e as Error).message}`);\n      }\n      continue;\n    }\n\n    // Pile-up guard: don't accrue a fresh new-period draft every recurrence for a\n    // site nobody ever approves. The period key follows the DUE month, so each\n    // recurrence wants a new (later-period) draft — but if a PRIOR draft is still\n    // pending approval, a new one just stacks. Skip creating the new one while an\n    // earlier-period draft for this (site, type) sits ready-but-unsent.\n    //\n    // `r.draftReady` is load-bearing: a draft a higher tier SUPERSEDED has\n    // draftReady=false and never gets a Sent at, so without this clause it would\n    // match (sentAt null + earlier period) and block EVERY future draft for the\n    // site forever. Pending-approval means draftReady=true AND sentAt=null.\n    const pendingEarlier = reports.find(\n      (r) =>\n        r.siteId === item.site.id &&\n        r.reportType === item.reportType &&\n        r.draftReady &&\n        r.sentAt === null &&\n        r.period !== null &&\n        r.period < period,\n    );\n    if (pendingEarlier) {\n      skipped++;\n      lines.push(\n        `• skipped: ${item.site.name} ${item.reportType} already has an unsent ${pendingEarlier.period} draft pending approval`,\n      );\n      continue;\n    }\n\n    try {\n      // Pass the SAME key the guard searches by, so the stamped Period always\n      // matches a future run's reportPeriodKey(dueDate) — even if this run lags\n      // into a later month than the dueDate.\n      const result = await draftReportForSite(base, item.site, item.reportType, {\n        period,\n        ...mirrorOpt,\n      });\n      lines.push(draftLine(result.reportRow?.reportId, result.queued, result.supersededIds));\n      // Keep the in-memory snapshot current so the guard's `.some()` check on the\n      // NEXT iteration of this same run catches a row we JUST created — rather than\n      // relying on findDueReports never emitting two items for the same (site, type).\n      if (result.reportRow) reports.push(result.reportRow);\n      // Count sites (not individual GA/Search failures) so a fleet-wide enrichment\n      // outage is one obvious line at the bottom, not 200 buried console.warns.\n      if (isAnalyticsConfigured(item.site)) gaConfiguredSites++;\n      if (result.softFailures.length > 0) softFailedSites++;\n      if (result.searchDefaultMissed) searchDefaultMisses++;\n      if (result.searchPropertyMissing) searchPropertiesMissing++;\n    } catch (e) {\n      lines.push(`✗ failed: ${item.site.name} ${item.reportType} — ${(e as Error).message}`);\n    }\n  }\n  if (skipped > 0) {\n    lines.push(`• ${skipped} already drafted or pending this period`);\n  }\n  if (softFailedSites > 0) {\n    lines.push(\n      `⚠ ${softFailedSites} site${softFailedSites === 1 ? \"\" : \"s\"} had GA/Search enrichment fail — drafted with blank analytics; check the logs above`,\n    );\n  }\n  if (searchDefaultMisses > 0) {\n    lines.push(\n      `⚑ ${searchDefaultMisses} site${searchDefaultMisses === 1 ? \"\" : \"s\"} returned no Search Console data for their name — set an explicit \"Search query\" in Airtable to track brand presence.`,\n    );\n  }\n  if (searchPropertiesMissing > 0) {\n    lines.push(\n      `⚑ ${searchPropertiesMissing} site${searchPropertiesMissing === 1 ? \"\" : \"s\"} matched NO Search Console property — verify the domain property exists and the service account has access (a \"Search query\" change cannot fix this).`,\n    );\n  }\n  return {\n    output: lines.join(\"\\n\"),\n    code: lines.some((l) => l.startsWith(\"✗\")) ? 1 : 0,\n    health: { softFailedSites, configuredSites: gaConfiguredSites },\n  };\n}\n\nasync function runSingleSiteDraft(\n  slug: string,\n  opts: { previewOnly: boolean; enrich: boolean; reportType: ReportType },\n): Promise<{ output: string; code: number }> {\n  const base = openBase(readAirtableConfig());\n  const websites = await listWebsites(base);\n  const site = websites.find((w) => siteSlug(w.name) === slug);\n  if (!site) {\n    throw Object.assign(new Error(`No Websites row matched slug \"${slug}\"`), { exitCode: 2 });\n  }\n  // Phase 5 dual-write (#539) — but only on the path that actually creates a\n  // row. A preview writes nothing to Airtable, so opening a libSQL handle for\n  // it would be pure cost (and `report --preview` is the one draft path that\n  // deliberately does no store IO at all).\n  const reportMirror = opts.previewOnly\n    ? null\n    : await (await import(\"../../reports/report-mirror.js\")).makeReportMirror();\n  const siteMirror = opts.previewOnly\n    ? null\n    : await (await import(\"../../db/site-mirror.js\")).makeSiteMirror();\n  const result = await draftReportForSite(opts.previewOnly ? null : base, site, opts.reportType, {\n    previewOnly: opts.previewOnly,\n    // Only forced on. Left undefined, draftReportForSite keeps its default\n    // (enrich iff there is a base), so the real drafting path is untouched.\n    ...(opts.enrich ? { enrich: true } : {}),\n    ...(reportMirror ? { reportMirror } : {}),\n    ...(siteMirror ? { siteMirror } : {}),\n  });\n  if (opts.previewOnly) {\n    return { output: `Preview written to ${result.htmlPath}`, code: 0 };\n  }\n  return {\n    output: draftLine(\n      result.reportRow?.reportId,\n      result.queued,\n      result.supersededIds,\n      \"Draft created\",\n    ),\n    code: 0,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,IAAM,mBAAmB;AAUlB,SAAS,qBAAqB,GAAuC;AAC1E,QAAM,EAAE,iBAAiB,gBAAgB,IAAI;AAC7C,QAAM,OACJ,mBAAmB,KACnB,mBAAmB,oBACnB,kBAAkB,KAAK;AACzB,QAAM,SAAS,OACX,GAAG,eAAe,OAAO,eAAe,oPACxC;AACJ,SAAO,EAAE,MAAM,OAAO;AACxB;AAOO,SAAS,2BACd,GACA,cACmC;AACnC,QAAM,UAAU,oDAA0C,EAAE,eAAe,IAAI,EAAE,eAAe;AAChG,QAAM,EAAE,OAAO,IAAI,qBAAqB,CAAC;AACzC,QAAM,OAAO,cAAc,WAAW,MAAM,CAAC;AAAA;AAAA;AAAA,cAGjC,WAAW,YAAY,CAAC;AACpC,SAAO,EAAE,SAAS,KAAK;AACzB;;;ACjBA,SAAS,UACP,UACA,QACA,eACA,OAAO,WACC;AACR,QAAM,KAAK,YAAY;AACvB,MAAI,WAAW,OAAO;AACpB,WAAO,UAAK,IAAI,oBAAoB,EAAE;AAAA,EACxC;AACA,QAAM,MACJ,cAAc,SAAS,IACnB,gBAAgB,cAAc,MAAM,oBAAoB,cAAc,SAAS,IAAI,MAAM,EAAE,MAC3F;AACN,SAAO,UAAK,IAAI,KAAK,EAAE,GAAG,GAAG;AAC/B;AASO,SAAS,0BAA0B,KAAqC;AAC7E,MAAI,QAAQ,UAAa,IAAI,KAAK,MAAM,GAAI,QAAO;AACnD,QAAM,OAAO,IAAI,KAAK,EAAE,YAAY;AACpC,MAAI,SAAS,cAAe,QAAO;AACnC,MAAI,SAAS,UAAW,QAAO;AAC/B,QAAM,OACJ,SAAS,WACL,4CACA,SAAS,iBACP,8CACA;AACR,QAAM,OAAO;AAAA,IACX,IAAI,MAAM,8CAA8C,KAAK,UAAU,GAAG,CAAC,IAAI,IAAI,EAAE;AAAA,IACrF,EAAE,UAAU,EAAE;AAAA,EAChB;AACF;AAIA,SAAS,mBAA2B;AAClC,SAAO,QAAQ,IAAI,oBAAoB,KAAK,KAAK;AACnD;AAEA,eAAsB,iBACpB,MACA,MAC2C;AAC3C,MAAI,KAAK,QAAQ;AACf,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,sBAAyB;AAC5D,WAAO,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;AAAA,EAClD;AAEA,MAAI,KAAK,WAAW;AAClB,UAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,2BAAmC;AAIhF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,UAAM,EAAE,YAAY,IAAI,MAAM,OAAO,sBAAoB;AACzD,UAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,2BAAyB;AACpE,WAAO,oBAAoB;AAAA,MACzB,YAAY,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOjC,kBAAkB,CAAC,UAAU,QAAQ,cACnC,YAAY,cAAc,QAAQ,IAAI,YAAY;AAChD,cAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,eAAO,kBAAkB,IAAI,UAAU;AAAA,UACrC,SAAS,OAAO,YAAY;AAAA,UAC5B,GAAI,cAAc,OAAO,EAAE,mBAAmB,UAAU,IAAI,CAAC;AAAA,QAC/D,CAAC;AAAA,MACH,CAAC;AAAA,IACL,CAAC;AAAA,EACH;AAKA,MAAI,KAAK,UAAU;AACjB,UAAM,EAAE,gBAAgB,qBAAqB,IAAI,MAAM,OAAO,wBAAgC;AAC9F,UAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,+BAAuC;AACpF,UAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,UAAM,EAAE,eAAe,aAAa,kBAAkB,IACpD,MAAM,OAAO,2BAAyB;AACxC,UAAM,EAAE,gBAAgB,IAAI,MAAM,OAAO,6BAA2B;AACpE,UAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,2BAAuC;AACrF,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,QACE,WAAW,CAAC,OAAO,cAAc,IAAI,EAAE;AAAA,QACvC,SAAS,CAAC,OAAO,YAAY,IAAI,EAAE;AAAA,QACnC,iBAAiB,OAAO,QAAQ,MAAM,gBAAgB,IAAI,EAAE,IAAI,SAAS;AAAA,QACzE,qBAAqB,OAAO,SAAS,MAAM,qBAAqB,GAAG,GAAG;AAAA,QACtE,QAAQ,CAAC,MAAM,QAAQ,UAAU,oBAAoB,MAAM,QAAQ,KAAK;AAAA,QACxE,OAAO,CAAC,IAAI,SAAS,kBAAkB,IAAI,IAAI,IAAI;AAAA,MACrD;AAAA,MACA,KAAK;AAAA,IACP;AAGA,WAAO,EAAE,QAAQ,qBAAqB,MAAM,GAAG,MAAM,OAAO,WAAW,aAAa,IAAI,EAAE;AAAA,EAC5F;AAEA,MAAI,KAAK,KAAK;AACZ,WAAO,YAAY;AAAA,EACrB;AAEA,MAAI,MAAM;AAGR,UAAM,aAAa,0BAA0B,KAAK,IAAI;AACtD,WAAO,mBAAmB,MAAM;AAAA,MAC9B,aAAa,QAAQ,KAAK,OAAO;AAAA,MACjC,QAAQ,QAAQ,KAAK,MAAM;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,OAAO;AAAA,IACX,IAAI;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,eAAe,cAAyD;AACtE,QAAM,OAAO,SAAS,mBAAmB,CAAC;AAG1C,QAAM,EAAE,6BAA6B,IAAI,MAAM,OAAO,6BAA+B;AAKrF,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAAgC;AAC1E,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA,oBAAI,KAAK;AAAA,IACT,MAAM,6BAA6B;AAAA,IACnC,MAAM,iBAAiB;AAAA,IACvB,MAAM,eAAe;AAAA,EACvB;AACA,QAAM,6BAA6B,OAAO,MAAM;AAChD,SAAO,EAAE,QAAQ,OAAO,QAAQ,MAAM,OAAO,KAAK;AACpD;AAOA,eAAe,6BAA6B,QAA2C;AACrF,MAAI,CAAC,qBAAqB,MAAM,EAAE,KAAM;AACxC,MAAI;AACF,UAAM,KAAK,cAAc;AACzB,UAAM,EAAE,SAAS,KAAK,IAAI,2BAA2B,QAAQ,iBAAiB,CAAC;AAC/E,UAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,sBAA8B;AAC3E,UAAM,oBAAoB,EAAE,KAAK;AAAA,MAC/B,MAAM;AAAA,MACN,IAAI,CAAC,EAAE;AAAA,MACP;AAAA,MACA;AAAA,MACA,gBAAgB,oBAAmB,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,IAC1E,CAAC;AACD,YAAQ,KAAK,UAAK,OAAO,6BAAwB,EAAE,GAAG;AAAA,EACxD,SAAS,GAAG;AACV,YAAQ,KAAK,+CAA2C,EAAY,OAAO,EAAE;AAAA,EAC/E;AACF;AAmBA,eAAsB,kBACpB,MACA,UACA,SACA,OACA,iBAAwC,MACzB;AACf,QAAM,MAAM,CAAC,MAAmC,IAAI,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI;AACnF,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,MAAI,SAAS;AACb,MAAI,WAAW;AACf,MAAI,eAAe;AACnB,MAAI,eAAe;AACnB,aAAW,QAAQ,UAAU;AAG3B,QAAI;AACF,YAAM,gBAAgB,IAAI,YAAY,MAAM,SAAS,eAAe,KAAK,CAAC;AAC1E,YAAM,YAAY,IAAI,YAAY,MAAM,SAAS,WAAW,KAAK,CAAC;AAClE,UAAI,kBAAkB,KAAK,qBAAqB,cAAc,KAAK,eAAe;AAChF;AACA;AAAA,MACF;AACA,YAAM,SAAS,MAAM,mBAAmB,MAAM,KAAK,IAAI,EAAE,eAAe,UAAU,CAAC;AACnF;AACA,UAAI,gBAAgB;AAClB,YAAI;AAGF,cAAI,MAAM,eAAe,KAAK,IAAI,QAAQ,MAAM,YAAY,CAAC,EAAG;AAAA,cAC3D;AAAA,QACP,SAAS,GAAG;AACV;AACA,kBAAQ,KAAK,4BAAuB,KAAK,IAAI,KAAM,EAAY,OAAO,EAAE;AAAA,QAC1E;AAAA,MACF;AAAA,IACF,SAAS,GAAG;AACV;AACA,cAAQ,KAAK,qCAAgC,KAAK,IAAI,KAAM,EAAY,OAAO,EAAE;AAAA,IACnF;AAAA,EACF;AAQA,QAAM,aAAa,iBACf,aAAa,QAAQ,kBAAkB,YAAY,kBAAkB,YAAY,KACjF;AACJ,UAAQ,IAAI,wBAAwB,KAAK,YAAY,OAAO,WAAW,MAAM,GAAG,UAAU,EAAE;AAC9F;AAEA,eAAsB,gBACpB,MACA,OACA,iBAAwC,MAKxC,cAGA,YACuE;AACvE,QAAM,YAAY;AAAA,IAChB,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACvC,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,EACrC;AACA,QAAM,WAAW,MAAM,aAAa,IAAI;AAIxC,QAAM,UAAU,MAAM,eAAe,IAAI;AAIzC,QAAM,kBAAkB,MAAM,UAAU,SAAS,OAAO,cAAc;AAEtE,QAAM,MAAM,eAAe,UAAU,SAAS,KAAK;AAMnD,QAAM,eAAe,aAAa,MAAM;AAIxC,QAAM,wBAAwB,CAAC,MAC7B,gBAAgB,QAAQ,EAAE,iBAAiB,EAAE,WAAW;AAE1D,MAAI,IAAI,WAAW,GAAG;AACpB,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ,EAAE,iBAAiB,GAAG,iBAAiB,EAAE;AAAA,IACnD;AAAA,EACF;AAEA,QAAM,QAAkB,CAAC;AACzB,MAAI,kBAAkB;AACtB,MAAI,sBAAsB;AAC1B,MAAI,0BAA0B;AAC9B,MAAI,oBAAoB;AACxB,MAAI,UAAU;AACd,aAAW,QAAQ,KAAK;AAItB,UAAM,SAAS,gBAAgB,KAAK,OAAO;AAC3C,UAAM,WAAW,QAAQ;AAAA,MACvB,CAAC,MAAM,EAAE,WAAW,KAAK,KAAK,MAAM,EAAE,eAAe,KAAK,cAAc,EAAE,WAAW;AAAA,IACvF;AAQA,QAAI,UAAU;AACZ,UAAI,SAAS,YAAY;AACvB;AACA,cAAM,KAAK,mCAA8B,MAAM,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE;AACxF;AAAA,MACF;AAOA,YAAM,mBAAmB,QAAQ;AAAA,QAC/B,CAAC,MACC,EAAE,WAAW,KAAK,KAAK,MACvB,EAAE,OAAO,SAAS,MAClB,EAAE,WAAW,QACb,EAAE,cACF,WAAW,EAAE,UAAU,KAAK,WAAW,KAAK,UAAU;AAAA,MAC1D;AACA,UAAI,kBAAkB;AACpB;AACA,cAAM;AAAA,UACJ,gFAAsE,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU;AAAA,QACzG;AACA;AAAA,MACF;AACA,UAAI;AACF,cAAM,SAAS,MAAM,mBAAmB,MAAM,KAAK,MAAM,KAAK,YAAY;AAAA,UACxE;AAAA,UACA,eAAe,SAAS;AAAA,UACxB,aAAa;AAAA,UACb,GAAG;AAAA,QACL,CAAC;AACD,iBAAS,aAAa,OAAO,WAAW;AACxC,cAAM;AAAA,UACJ;AAAA,YACE,OAAO,WAAW,YAAY,SAAS;AAAA,YACvC,OAAO;AAAA,YACP,OAAO;AAAA,YACP;AAAA,UACF;AAAA,QACF;AACA,YAAI,sBAAsB,KAAK,IAAI,EAAG;AACtC,YAAI,OAAO,aAAa,SAAS,EAAG;AACpC,YAAI,OAAO,oBAAqB;AAChC,YAAI,OAAO,sBAAuB;AAAA,MACpC,SAAS,GAAG;AACV,cAAM,KAAK,kBAAa,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,WAAO,EAAY,OAAO,EAAE;AAAA,MACvF;AACA;AAAA,IACF;AAYA,UAAM,iBAAiB,QAAQ;AAAA,MAC7B,CAAC,MACC,EAAE,WAAW,KAAK,KAAK,MACvB,EAAE,eAAe,KAAK,cACtB,EAAE,cACF,EAAE,WAAW,QACb,EAAE,WAAW,QACb,EAAE,SAAS;AAAA,IACf;AACA,QAAI,gBAAgB;AAClB;AACA,YAAM;AAAA,QACJ,mBAAc,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,0BAA0B,eAAe,MAAM;AAAA,MAChG;AACA;AAAA,IACF;AAEA,QAAI;AAIF,YAAM,SAAS,MAAM,mBAAmB,MAAM,KAAK,MAAM,KAAK,YAAY;AAAA,QACxE;AAAA,QACA,GAAG;AAAA,MACL,CAAC;AACD,YAAM,KAAK,UAAU,OAAO,WAAW,UAAU,OAAO,QAAQ,OAAO,aAAa,CAAC;AAIrF,UAAI,OAAO,UAAW,SAAQ,KAAK,OAAO,SAAS;AAGnD,UAAI,sBAAsB,KAAK,IAAI,EAAG;AACtC,UAAI,OAAO,aAAa,SAAS,EAAG;AACpC,UAAI,OAAO,oBAAqB;AAChC,UAAI,OAAO,sBAAuB;AAAA,IACpC,SAAS,GAAG;AACV,YAAM,KAAK,kBAAa,KAAK,KAAK,IAAI,IAAI,KAAK,UAAU,WAAO,EAAY,OAAO,EAAE;AAAA,IACvF;AAAA,EACF;AACA,MAAI,UAAU,GAAG;AACf,UAAM,KAAK,UAAK,OAAO,yCAAyC;AAAA,EAClE;AACA,MAAI,kBAAkB,GAAG;AACvB,UAAM;AAAA,MACJ,UAAK,eAAe,QAAQ,oBAAoB,IAAI,KAAK,GAAG;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,sBAAsB,GAAG;AAC3B,UAAM;AAAA,MACJ,UAAK,mBAAmB,QAAQ,wBAAwB,IAAI,KAAK,GAAG;AAAA,IACtE;AAAA,EACF;AACA,MAAI,0BAA0B,GAAG;AAC/B,UAAM;AAAA,MACJ,UAAK,uBAAuB,QAAQ,4BAA4B,IAAI,KAAK,GAAG;AAAA,IAC9E;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ,MAAM,KAAK,IAAI;AAAA,IACvB,MAAM,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,QAAG,CAAC,IAAI,IAAI;AAAA,IACjD,QAAQ,EAAE,iBAAiB,iBAAiB,kBAAkB;AAAA,EAChE;AACF;AAEA,eAAe,mBACb,MACA,MAC2C;AAC3C,QAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,QAAM,OAAO,SAAS,KAAK,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAC3D,MAAI,CAAC,MAAM;AACT,UAAM,OAAO,OAAO,IAAI,MAAM,iCAAiC,IAAI,GAAG,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,EAC1F;AAKA,QAAM,eAAe,KAAK,cACtB,OACA,OAAO,MAAM,OAAO,6BAAgC,GAAG,iBAAiB;AAC5E,QAAM,aAAa,KAAK,cACpB,OACA,OAAO,MAAM,OAAO,2BAAyB,GAAG,eAAe;AACnE,QAAM,SAAS,MAAM,mBAAmB,KAAK,cAAc,OAAO,MAAM,MAAM,KAAK,YAAY;AAAA,IAC7F,aAAa,KAAK;AAAA;AAAA;AAAA,IAGlB,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,IACtC,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,IACvC,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,EACrC,CAAC;AACD,MAAI,KAAK,aAAa;AACpB,WAAO,EAAE,QAAQ,sBAAsB,OAAO,QAAQ,IAAI,MAAM,EAAE;AAAA,EACpE;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,OAAO,WAAW;AAAA,MAClB,OAAO;AAAA,MACP,OAAO;AAAA,MACP;AAAA,IACF;AAAA,IACA,MAAM;AAAA,EACR;AACF;","names":[]}

package/dist/report-mirror-KKZZ6RMZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/reports/report-mirror.ts"],"sourcesContent":["/** #539 Phase 5: the Turso write-through for the Reports write surface.\n *\n *  Before this, the only report mirrors were UPDATEs on the request path\n *  (approve, override, delivery status, commentary). Everything the DRAFTING\n *  path writes — the row itself, the rendered body, the queue flag, a re-run's\n *  refreshed scores — reached Turso only via the hourly sync. Two of those are\n *  visible to the operator today: a fresh draft's row does not exist, and its\n *  preview route answers \"No rendered body stored\" for up to an hour. At the\n *  freeze they stop being windows.\n *\n *  Deliberately UNLIKE `makeHealthMirrorBestEffort`, this never returns null.\n *  #585 is the reason: Phase 3's next-due mirror silently no-opped in production\n *  for weeks because the factory returned null without creds, and a dead\n *  dual-write then looked exactly like a healthy one — the only tell was an\n *  ABSENT log suffix nobody was watching for. Here creds-absent is a state the\n *  mirror REPORTS, so every write emits one REPORT_MIRROR line and an absent\n *  line means the wiring is gone, not that conditions were quiet.\n */\nimport { openDb, readDbConfig, type Db } from \"../db/client.js\";\nimport {\n  mirrorReportInsert,\n  mirrorReportPatch,\n  storeRenderedHtml,\n  type ReportMirrorPatch,\n} from \"../db/fleet-state.js\";\nimport type { CreatedDraftMirror } from \"./airtable/reports.js\";\nimport { TURSO_IS_AUTHORITATIVE } from \"../db/freeze.js\";\n\n/** The three shapes a report write takes. Injected as ONE object rather than\n *  three parameters because they share a db handle and always travel together:\n *  a caller holding `created` but not `body` produces exactly the half-mirrored\n *  state (row present, preview 404) this module exists to prevent. */\nexport type ReportMirror = {\n  /** A row Airtable just CREATED, as Airtable echoed it back. */\n  created: CreatedDraftMirror;\n  /** A freshly rendered body for an existing row. */\n  body: (reportId: string, html: string) => Promise<void>;\n  /** Columns just written to an existing row. */\n  patch: (reportId: string, patch: ReportMirrorPatch) => Promise<void>;\n};\n\n/** Build the drafting-path mirror. Never throws and never returns null:\n *  Airtable is still authoritative through Phase 5, so a mirror problem must\n *  not cost a draft the operator is waiting on — the hourly sync converges\n *  whatever this misses. `open` is injectable for tests. */\nexport async function makeReportMirror(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n  /** #612. `true` = Turso is the store that must succeed, so every failure\n   *  throws instead of being logged and swallowed. Defaulted from the shipped\n   *  constant and injected by tests, so both sides stay proven. */\n  strict: boolean = TURSO_IS_AUTHORITATIVE,\n): Promise<ReportMirror> {\n  let db: Db | null = null;\n  let why = \"\";\n  try {\n    db = await open();\n  } catch (e) {\n    why = (e as Error).message;\n  }\n  // Frozen: refuse to hand back a mirror that cannot write — see makeSiteMirror\n  // for why this fails at construction rather than per write.\n  if (strict && !db) throw new Error(`REPORT_MIRROR unavailable: ${why}`);\n\n  const run = async (\n    reportId: string,\n    op: string,\n    /** `false` = the UPDATE matched no row; void = a writer that reports no count. */\n    work: (db: Db) => Promise<void | boolean>,\n  ) => {\n    if (!db) {\n      console.log(`REPORT_MIRROR report=${reportId} op=${op} mirrored=absent reason=${why}`);\n      return;\n    }\n    // Every path below logs EXACTLY ONE line, then strict adds a throw — the\n    // run log reads the same in both worlds, not just a stack.\n    let matched: boolean;\n    try {\n      matched = (await work(db)) !== false;\n    } catch (e) {\n      console.log(\n        `REPORT_MIRROR report=${reportId} op=${op} mirrored=0 error=${(e as Error).message}`,\n      );\n      if (strict) throw e;\n      return;\n    }\n    // `missed` is its own outcome (#647), the same one `makeSiteMirror` already\n    // reports: the UPDATE matched no row. Before the freeze the hourly sync\n    // would import the row — a transient; after it no importer exists, so an\n    // absent row stays absent and reporting mirrored=1 would claim a write\n    // that never landed.\n    console.log(`REPORT_MIRROR report=${reportId} op=${op} mirrored=${matched ? \"1\" : \"missed\"}`);\n    if (strict && !matched) {\n      throw new Error(`REPORT_MIRROR report=${reportId} op=${op}: no such row in Turso`);\n    }\n  };\n\n  return {\n    created: (rec) => run(rec.id, \"created\", (d) => mirrorReportInsert(d, rec)),\n    body: (reportId, html) => run(reportId, \"body\", (d) => storeRenderedHtml(d, reportId, html)),\n    patch: (reportId, patch) =>\n      run(reportId, \"patch\", (d) => mirrorReportPatch(d, reportId, patch)),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA6CA,eAAsB,iBACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GAIrD,SAAkB,wBACK;AACvB,MAAI,KAAgB;AACpB,MAAI,MAAM;AACV,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,UAAO,EAAY;AAAA,EACrB;AAGA,MAAI,UAAU,CAAC,GAAI,OAAM,IAAI,MAAM,8BAA8B,GAAG,EAAE;AAEtE,QAAM,MAAM,OACV,UACA,IAEA,SACG;AACH,QAAI,CAAC,IAAI;AACP,cAAQ,IAAI,wBAAwB,QAAQ,OAAO,EAAE,2BAA2B,GAAG,EAAE;AACrF;AAAA,IACF;AAGA,QAAI;AACJ,QAAI;AACF,gBAAW,MAAM,KAAK,EAAE,MAAO;AAAA,IACjC,SAAS,GAAG;AACV,cAAQ;AAAA,QACN,wBAAwB,QAAQ,OAAO,EAAE,qBAAsB,EAAY,OAAO;AAAA,MACpF;AACA,UAAI,OAAQ,OAAM;AAClB;AAAA,IACF;AAMA,YAAQ,IAAI,wBAAwB,QAAQ,OAAO,EAAE,aAAa,UAAU,MAAM,QAAQ,EAAE;AAC5F,QAAI,UAAU,CAAC,SAAS;AACtB,YAAM,IAAI,MAAM,wBAAwB,QAAQ,OAAO,EAAE,wBAAwB;AAAA,IACnF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ,IAAI,IAAI,IAAI,WAAW,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAAA,IAC1E,MAAM,CAAC,UAAU,SAAS,IAAI,UAAU,QAAQ,CAAC,MAAM,kBAAkB,GAAG,UAAU,IAAI,CAAC;AAAA,IAC3F,OAAO,CAAC,UAAU,UAChB,IAAI,UAAU,SAAS,CAAC,MAAM,kBAAkB,GAAG,UAAU,KAAK,CAAC;AAAA,EACvE;AACF;","names":[]}

package/dist/screenouts-7P5GOZMV.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/db/screenouts.ts"],"sourcesContent":["import { sql } from \"kysely\";\nimport type { Db } from \"./client.js\";\n\nexport type ScreenOutReason = \"honeypot\" | \"too-fast\";\nexport type ScreenOutTotals = { honeypot: number; tooFast: number; markedSpam: number };\n\nconst COLUMN: Record<ScreenOutReason, \"honeypot\" | \"too_fast\"> = {\n  honeypot: \"honeypot\",\n  \"too-fast\": \"too_fast\",\n};\n\n/** Atomically increment the caught counter for a reason on the (site, date) bucket.\n *  ON CONFLICT keeps the count exact — no read-modify-write race, no duplicate\n *  buckets. A swallowed failure must never error a screened bot (caller's job). */\nexport async function recordScreenOut(\n  db: Db,\n  siteId: string,\n  reason: ScreenOutReason,\n  date: string,\n): Promise<void> {\n  const col = COLUMN[reason];\n  await sql`\n    INSERT INTO spam_screenouts (site_id, date, ${sql.ref(col)})\n    VALUES (${siteId}, ${date}, 1)\n    ON CONFLICT (site_id, date) DO UPDATE SET ${sql.ref(col)} = ${sql.ref(col)} + 1\n  `.execute(db);\n}\n\n/** Per-site spam totals over the window `>= sinceDate`.\n *\n *  `honeypot`/`tooFast` are summed from the ingest-time `spam_screenouts` buckets\n *  (bots screened BEFORE storage — there's no row to count, so an atomic counter\n *  is the right source).\n *\n *  `markedSpam` is DERIVED from the submissions table — a live `COUNT(*) WHERE\n *  status = 'spam'` — NOT a mutable counter. A counter incremented on every\n *  →spam transition double-counts when an operator re-marks a submission\n *  (spam → new → spam) and can never self-correct an un-mark; counting the rows\n *  themselves is exact and idempotent. Windowed by `submitted_at` so it's\n *  arrival-dated, matching the honeypot/too-fast buckets (which key on the\n *  screen = arrival day). The legacy `marked_spam` column is no longer read. */\nexport async function listScreenOutsSince(\n  db: Db,\n  sinceDate: string,\n): Promise<Map<string, ScreenOutTotals>> {\n  const screenoutRows = await db\n    .selectFrom(\"spam_screenouts\")\n    .select((eb) => [\n      \"site_id\",\n      eb.fn.sum<number>(\"honeypot\").as(\"honeypot\"),\n      eb.fn.sum<number>(\"too_fast\").as(\"too_fast\"),\n    ])\n    .where(\"date\", \">=\", sinceDate)\n    .groupBy(\"site_id\")\n    .execute();\n\n  const markedSpamRows = await db\n    .selectFrom(\"submissions\")\n    .select((eb) => [\"site_id\", eb.fn.countAll<number>().as(\"marked_spam\")])\n    .where(\"status\", \"=\", \"spam\")\n    .where(\"submitted_at\", \">=\", sinceDate)\n    .groupBy(\"site_id\")\n    .execute();\n\n  const out = new Map<string, ScreenOutTotals>();\n  for (const r of screenoutRows) {\n    out.set(r.site_id, {\n      honeypot: Number(r.honeypot) || 0,\n      tooFast: Number(r.too_fast) || 0,\n      markedSpam: 0,\n    });\n  }\n  for (const r of markedSpamRows) {\n    const totals = out.get(r.site_id) ?? { honeypot: 0, tooFast: 0, markedSpam: 0 };\n    totals.markedSpam = Number(r.marked_spam) || 0;\n    out.set(r.site_id, totals);\n  }\n  return out;\n}\n\n/** The ISO date (YYYY-MM-DD) `days` before `now`, for the window queries.\n *  Verbatim from the Airtable module so the windows match exactly. */\nexport function screenOutsSince(now: Date, days: number): string {\n  const d = new Date(now.getTime() - days * 24 * 60 * 60 * 1000);\n  return d.toISOString().slice(0, 10);\n}\n\n/** Set the (site, date) bucket to exact totals. Replace-upsert (DO UPDATE SET col\n *  = excluded.col) so re-running the backfill is idempotent. The caller pre-sums\n *  duplicate same-day Airtable buckets in JS before calling this. */\nexport async function backfillScreenoutBucket(\n  db: Db,\n  b: { siteId: string; date: string; honeypot: number; tooFast: number; markedSpam: number },\n): Promise<void> {\n  await sql`\n    INSERT INTO spam_screenouts (site_id, date, honeypot, too_fast, marked_spam)\n    VALUES (${b.siteId}, ${b.date}, ${b.honeypot}, ${b.tooFast}, ${b.markedSpam})\n    ON CONFLICT (site_id, date) DO UPDATE SET\n      honeypot = excluded.honeypot,\n      too_fast = excluded.too_fast,\n      marked_spam = excluded.marked_spam\n  `.execute(db);\n}\n"],"mappings":";AAAA,SAAS,WAAW;AAMpB,IAAM,SAA2D;AAAA,EAC/D,UAAU;AAAA,EACV,YAAY;AACd;AAKA,eAAsB,gBACpB,IACA,QACA,QACA,MACe;AACf,QAAM,MAAM,OAAO,MAAM;AACzB,QAAM;AAAA,kDAC0C,IAAI,IAAI,GAAG,CAAC;AAAA,cAChD,MAAM,KAAK,IAAI;AAAA,gDACmB,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC;AAAA,IAC1E,QAAQ,EAAE;AACd;AAeA,eAAsB,oBACpB,IACA,WACuC;AACvC,QAAM,gBAAgB,MAAM,GACzB,WAAW,iBAAiB,EAC5B,OAAO,CAAC,OAAO;AAAA,IACd;AAAA,IACA,GAAG,GAAG,IAAY,UAAU,EAAE,GAAG,UAAU;AAAA,IAC3C,GAAG,GAAG,IAAY,UAAU,EAAE,GAAG,UAAU;AAAA,EAC7C,CAAC,EACA,MAAM,QAAQ,MAAM,SAAS,EAC7B,QAAQ,SAAS,EACjB,QAAQ;AAEX,QAAM,iBAAiB,MAAM,GAC1B,WAAW,aAAa,EACxB,OAAO,CAAC,OAAO,CAAC,WAAW,GAAG,GAAG,SAAiB,EAAE,GAAG,aAAa,CAAC,CAAC,EACtE,MAAM,UAAU,KAAK,MAAM,EAC3B,MAAM,gBAAgB,MAAM,SAAS,EACrC,QAAQ,SAAS,EACjB,QAAQ;AAEX,QAAM,MAAM,oBAAI,IAA6B;AAC7C,aAAW,KAAK,eAAe;AAC7B,QAAI,IAAI,EAAE,SAAS;AAAA,MACjB,UAAU,OAAO,EAAE,QAAQ,KAAK;AAAA,MAChC,SAAS,OAAO,EAAE,QAAQ,KAAK;AAAA,MAC/B,YAAY;AAAA,IACd,CAAC;AAAA,EACH;AACA,aAAW,KAAK,gBAAgB;AAC9B,UAAM,SAAS,IAAI,IAAI,EAAE,OAAO,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,YAAY,EAAE;AAC9E,WAAO,aAAa,OAAO,EAAE,WAAW,KAAK;AAC7C,QAAI,IAAI,EAAE,SAAS,MAAM;AAAA,EAC3B;AACA,SAAO;AACT;AAIO,SAAS,gBAAgB,KAAW,MAAsB;AAC/D,QAAM,IAAI,IAAI,KAAK,IAAI,QAAQ,IAAI,OAAO,KAAK,KAAK,KAAK,GAAI;AAC7D,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACpC;AAKA,eAAsB,wBACpB,IACA,GACe;AACf,QAAM;AAAA;AAAA,cAEM,EAAE,MAAM,KAAK,EAAE,IAAI,KAAK,EAAE,QAAQ,KAAK,EAAE,OAAO,KAAK,EAAE,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA,IAK3E,QAAQ,EAAE;AACd;","names":[]}

package/dist/site-mirror-H2FYMN55.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/db/site-mirror.ts"],"sourcesContent":["/** #539 Phase 5: the Turso write-through for the ONE-OFF Websites writers.\n *\n *  Phase 3 mirrored the nightly sweep — the audit write-back, github-signals and\n *  the next-due dates. It did not touch the writers that run on their own\n *  schedule or on demand: the analytics soft-fail stamp, the Renovate\n *  auto-fix counter, the prismic-models verdict, `updateLaunched`, the\n *  forms notify target, and the SINGLE-SITE audit write-back (only the fleet\n *  path ever passed a mirror). Each of those reached Turso solely via the hourly\n *  sync, which stops existing at the freeze.\n *\n *  It lives in `src/db` rather than a feature folder because its callers span\n *  audits, recipes, CLI commands and the send path — no one feature owns it.\n *\n *  Deliberately UNLIKE `makeHealthMirrorBestEffort`, this never returns null.\n *  #585 is the reason: that factory returned null without creds and the\n *  dual-write silently no-opped in production for weeks, because a dead mirror\n *  and a healthy one produced identical output — the only tell was an ABSENT log\n *  suffix nobody was watching for. Here creds-absent is a state the mirror\n *  REPORTS, so a missing SITE_MIRROR line means the wiring is gone.\n */\nimport { openDb, readDbConfig, type Db } from \"./client.js\";\nimport {\n  mirrorHealthFields,\n  mirrorSiteFields,\n  mirrorSiteInsert,\n  siteRowExists,\n} from \"./fleet-state.js\";\nimport { TURSO_IS_AUTHORITATIVE } from \"./freeze.js\";\n\n/** Two ops because the Websites row is split across two Turso tables. Callers\n *  pass the EXACT FieldSet the Airtable writer returned, so the mirror can never\n *  carry a different payload than the write it shadows. */\nexport type SiteMirror = {\n  /** A row Airtable just CREATED, as Airtable echoed it back (`ensure-site`).\n   *  Every other op is an UPDATE, which does nothing for a row that does not\n   *  exist yet — so without this a bootstrapped site is invisible to Turso and\n   *  every mirror the rest of the bootstrap fires reports `mirrored=missed`. */\n  created: (rec: { id: string; fields: Record<string, unknown> }) => Promise<void>;\n  /** Columns that live in `site_health`. */\n  health: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n  /** Columns that live in `sites`. */\n  site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n  /** #645. Does Turso hold a row for this site id? A pure READ, so it is the one\n   *  op here that neither logs a SITE_MIRROR line nor throws under the freeze —\n   *  `ensure-site` uses it to decide whether to heal, and a probe that threw\n   *  would sink the very command that repairs the gap. Creds-absent answers\n   *  `true` (\"assume present\"), so a mirror that cannot read can never provoke\n   *  a blind insert. */\n  hasRow: (siteId: string) => Promise<boolean>;\n};\n\n/** Build the one-off writers' mirror. Never throws and never returns null:\n *  Airtable is still authoritative through Phase 5, so a mirror problem must not\n *  cost the write it shadows — the hourly sync converges whatever this misses.\n *  `open` is injectable for tests. */\nexport async function makeSiteMirror(\n  open: () => Promise<Db> = () => openDb(readDbConfig()),\n  /** #612. `true` = Turso is the store that must succeed, so every failure\n   *  throws instead of being logged and swallowed. Defaulted from the shipped\n   *  constant and injected by tests, so both sides stay proven. */\n  strict: boolean = TURSO_IS_AUTHORITATIVE,\n): Promise<SiteMirror> {\n  let db: Db | null = null;\n  let why = \"\";\n  try {\n    db = await open();\n  } catch (e) {\n    why = (e as Error).message;\n  }\n  // Frozen: refuse to hand back a mirror that cannot write. Failing at\n  // CONSTRUCTION rather than per write matters — a caller holding a\n  // working-looking mirror would run its whole batch before anyone noticed that\n  // nothing had persisted.\n  if (strict && !db) throw new Error(`SITE_MIRROR unavailable: ${why}`);\n\n  const run = async (siteId: string, op: string, work: (db: Db) => Promise<boolean>) => {\n    if (!db) {\n      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=absent reason=${why}`);\n      return;\n    }\n    // Every path below logs EXACTLY ONE line, then strict adds a throw. Logging\n    // first matters: a frozen run that fails should still leave the same trace\n    // in the run log that an unfrozen one would, not just a stack.\n    let matched: boolean;\n    try {\n      matched = await work(db);\n    } catch (e) {\n      console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=0 error=${(e as Error).message}`);\n      if (strict) throw e;\n      return;\n    }\n    // `missed` is its own outcome: the UPDATE matched no row. Before the freeze\n    // that means the hourly sync has not imported this site yet — a transient,\n    // and reporting it as mirrored=1 would claim a write that never landed.\n    // After the freeze no importer exists, so an absent row stays absent: it is\n    // a bug, not a wait.\n    console.log(`SITE_MIRROR site=${siteId} op=${op} mirrored=${matched ? \"1\" : \"missed\"}`);\n    if (strict && !matched) {\n      throw new Error(`SITE_MIRROR site=${siteId} op=${op}: no such row in Turso`);\n    }\n  };\n\n  return {\n    // An INSERT always lands, so it reports 1 rather than routing a row count\n    // through `missed` — there was nothing to match in the first place.\n    created: (rec) =>\n      run(rec.id, \"created\", async (d) => {\n        await mirrorSiteInsert(d, rec, new Date().toISOString());\n        return true;\n      }),\n    health: (siteId, fields) => run(siteId, \"health\", (d) => mirrorHealthFields(d, siteId, fields)),\n    site: (siteId, fields) => run(siteId, \"site\", (d) => mirrorSiteFields(d, siteId, fields)),\n    // Deliberately NOT routed through `run`: that helper logs a mirrored= line\n    // and, under strict, throws on anything but a clean write — both wrong for a\n    // read whose whole job is to answer a question. A failed probe answers\n    // \"present\" so the caller heals nothing it cannot see.\n    hasRow: async (siteId) => {\n      if (!db) return true;\n      try {\n        return await siteRowExists(db, siteId);\n      } catch (e) {\n        console.log(`SITE_MIRROR site=${siteId} op=hasRow unknown error=${(e as Error).message}`);\n        return true;\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuDA,eAAsB,eACpB,OAA0B,MAAM,OAAO,aAAa,CAAC,GAIrD,SAAkB,wBACG;AACrB,MAAI,KAAgB;AACpB,MAAI,MAAM;AACV,MAAI;AACF,SAAK,MAAM,KAAK;AAAA,EAClB,SAAS,GAAG;AACV,UAAO,EAAY;AAAA,EACrB;AAKA,MAAI,UAAU,CAAC,GAAI,OAAM,IAAI,MAAM,4BAA4B,GAAG,EAAE;AAEpE,QAAM,MAAM,OAAO,QAAgB,IAAY,SAAuC;AACpF,QAAI,CAAC,IAAI;AACP,cAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,2BAA2B,GAAG,EAAE;AAC/E;AAAA,IACF;AAIA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,KAAK,EAAE;AAAA,IACzB,SAAS,GAAG;AACV,cAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,qBAAsB,EAAY,OAAO,EAAE;AAC1F,UAAI,OAAQ,OAAM;AAClB;AAAA,IACF;AAMA,YAAQ,IAAI,oBAAoB,MAAM,OAAO,EAAE,aAAa,UAAU,MAAM,QAAQ,EAAE;AACtF,QAAI,UAAU,CAAC,SAAS;AACtB,YAAM,IAAI,MAAM,oBAAoB,MAAM,OAAO,EAAE,wBAAwB;AAAA,IAC7E;AAAA,EACF;AAEA,SAAO;AAAA;AAAA;AAAA,IAGL,SAAS,CAAC,QACR,IAAI,IAAI,IAAI,WAAW,OAAO,MAAM;AAClC,YAAM,iBAAiB,GAAG,MAAK,oBAAI,KAAK,GAAE,YAAY,CAAC;AACvD,aAAO;AAAA,IACT,CAAC;AAAA,IACH,QAAQ,CAAC,QAAQ,WAAW,IAAI,QAAQ,UAAU,CAAC,MAAM,mBAAmB,GAAG,QAAQ,MAAM,CAAC;AAAA,IAC9F,MAAM,CAAC,QAAQ,WAAW,IAAI,QAAQ,QAAQ,CAAC,MAAM,iBAAiB,GAAG,QAAQ,MAAM,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKxF,QAAQ,OAAO,WAAW;AACxB,UAAI,CAAC,GAAI,QAAO;AAChB,UAAI;AACF,eAAO,MAAM,cAAc,IAAI,MAAM;AAAA,MACvC,SAAS,GAAG;AACV,gBAAQ,IAAI,oBAAoB,MAAM,4BAA6B,EAAY,OAAO,EAAE;AACxF,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/submissions-II5J35QM.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cli/commands/submissions.ts"],"sourcesContent":["import type { Db } from \"../../db/client.js\";\nimport type { SubmissionRow } from \"../../reports/submission-row.js\";\n\nexport type SubmissionsCommandOptions = {\n  /** Write the re-buckets. Without it the command is a DRY RUN (deliberate default —\n   *  this rewrites operator-visible triage state, so the table prints first). */\n  apply?: boolean;\n  /** Explicit dry run (the default). Conflicts with --apply. */\n  dryRun?: boolean;\n  /** Override the libSQL url (tests use \":memory:\"); otherwise read from env. */\n  url?: string;\n  cwd?: string;\n  verbose?: boolean;\n};\n\n/** Provenance marker appended to the NEW classifier reasons on every re-bucketed row,\n *  so a retro'd row is always distinguishable from one the classifier caught at ingest. */\nexport const RESCORE_REASON_MARKER = \"retro-rescore\";\n\nexport type RescoreFlagged = {\n  row: SubmissionRow;\n  newScore: number;\n  /** What --apply writes to spam_reason: the new verdict's reasons + RESCORE_REASON_MARKER. */\n  newReason: string;\n  /** True when --apply actually flipped the row (false in dry runs, or when the row\n   *  stopped being 'new' between the scan and the write). */\n  written: boolean;\n};\n\n/** extraFields is stored as a raw JSON string; the classifier wants the object. A\n *  null/garbage/non-object value degrades to {} — same blind-spot posture as ingest\n *  (classification never throws on stored data). */\nfunction parseExtraFields(raw: string | null): Record<string, unknown> {\n  if (!raw || raw.trim() === \"\") return {};\n  try {\n    const parsed: unknown = JSON.parse(raw);\n    return parsed !== null && typeof parsed === \"object\" && !Array.isArray(parsed)\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Core of `submissions rescore`, separated from the command wrapper so tests can run it\n * against a seeded :memory: db. Scans EVERY status='new' row (the pre-2026-07-15-tuning\n * backlog these rows predate), re-runs the CURRENT classifySpam over each — turnstile\n * \"unverifiable\", exactly what ingest passes when no token reaches verification — and\n * flags rows at/above SPAM_THRESHOLD. With `apply` it re-buckets each flagged row to\n * spam_auto, REPLACING spam_score/spam_reason with the new verdict (+ marker). The\n * classifier is the single source of truth: no scoring logic is duplicated here.\n */\nexport async function rescoreNewSubmissions(\n  db: Db,\n  opts: { apply: boolean },\n): Promise<{ scanned: number; flagged: RescoreFlagged[] }> {\n  const { listSubmissionsFiltered, rescoreSubmissionSpam } =\n    await import(\"../../db/submissions.js\");\n  const { classifySpam, SPAM_THRESHOLD } = await import(\"../../forms/spam-classifier.js\");\n\n  // Collect the WHOLE backlog before any write: --apply mutates rows out of the\n  // status='new' filter, so paging offset-wise while writing would skip rows.\n  const rows: SubmissionRow[] = [];\n  const PAGE = 500;\n  for (let offset = 0; ; offset += PAGE) {\n    const page = await listSubmissionsFiltered(db, { status: \"new\" }, { limit: PAGE, offset });\n    rows.push(...page);\n    if (page.length < PAGE) break;\n  }\n\n  const flagged: RescoreFlagged[] = [];\n  for (const row of rows) {\n    const verdict = classifySpam({\n      name: row.name,\n      email: row.email,\n      // message is optional on the classifier input; exactOptionalPropertyTypes\n      // forbids passing `undefined`, so spread only when present (form-ingest idiom).\n      ...(row.message !== null ? { message: row.message } : {}),\n      formType: row.formType,\n      extraFields: parseExtraFields(row.extraFields),\n      turnstile: \"unverifiable\",\n    });\n    if (verdict.score < SPAM_THRESHOLD) continue;\n    const newReason = [...verdict.reasons, RESCORE_REASON_MARKER].join(\",\");\n    const written = opts.apply\n      ? await rescoreSubmissionSpam(db, row.id, verdict.score, newReason)\n      : false;\n    flagged.push({ row, newScore: verdict.score, newReason, written });\n  }\n  return { scanned: rows.length, flagged };\n}\n\n/** site_id → display name for the table. Soft-fails to an empty map (raw rec ids still\n *  print) so the re-score itself never depends on Airtable being reachable. */\nasync function loadSiteNames(): Promise<Map<string, string>> {\n  try {\n    const { openBase, readAirtableConfig } = await import(\"../../reports/airtable/client.js\");\n    const { listWebsites } = await import(\"../../reports/airtable/websites.js\");\n    const sites = await listWebsites(openBase(readAirtableConfig()));\n    return new Map(sites.map((s) => [s.id, s.name] as const));\n  } catch (err) {\n    console.error(`[submissions] site names unavailable — printing raw site ids: ${String(err)}`);\n    return new Map();\n  }\n}\n\nfunction pad(v: string, width: number): string {\n  return v.length >= width ? v : v + \" \".repeat(width - v.length);\n}\n\nfunction formatTable(flagged: RescoreFlagged[], names: Map<string, string>): string {\n  const rows = flagged.map((f) => ({\n    site: names.get(f.row.siteId) ?? f.row.siteId,\n    email: f.row.email || \"(no email)\",\n    score: `${f.row.spamScore ?? \"—\"} → ${f.newScore}`,\n    reasons: f.newReason,\n  }));\n  const siteW = Math.max(4, ...rows.map((r) => r.site.length));\n  const emailW = Math.max(5, ...rows.map((r) => r.email.length));\n  const scoreW = Math.max(5, ...rows.map((r) => r.score.length));\n  const lines = [\n    `${pad(\"site\", siteW)}  ${pad(\"email\", emailW)}  ${pad(\"score\", scoreW)}  reasons`,\n    ...rows.map(\n      (r) =>\n        `${pad(r.site, siteW)}  ${pad(r.email, emailW)}  ${pad(r.score, scoreW)}  ${r.reasons}`,\n    ),\n  ];\n  return lines.join(\"\\n\");\n}\n\n/**\n * `submissions <action>` — operate on stored form submissions. The only action today is\n * `rescore`: re-run the CURRENT spam classifier over the status='new' backlog. Dry-run\n * by default; `--apply` writes. Only status='new' rows are ever touched.\n */\nexport async function runSubmissionsCommand(\n  action: string,\n  opts: SubmissionsCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (action !== \"rescore\") {\n    return { output: `unknown submissions action '${action}'. Use: rescore.`, code: 1 };\n  }\n  if (opts.apply && opts.dryRun) {\n    return { output: \"--apply and --dry-run conflict. Pick one.\", code: 2 };\n  }\n  const apply = opts.apply === true;\n\n  const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n  const { SPAM_THRESHOLD } = await import(\"../../forms/spam-classifier.js\");\n  const cfg = opts.url ? { url: opts.url } : readDbConfig();\n  const db = await openDb(cfg);\n\n  const { scanned, flagged } = await rescoreNewSubmissions(db, { apply });\n  if (flagged.length === 0) {\n    return {\n      output: `Scanned ${scanned} status='new' submission${scanned === 1 ? \"\" : \"s\"} — none score >= ${SPAM_THRESHOLD} under the current classifier. Nothing to re-bucket.`,\n      code: 0,\n    };\n  }\n\n  // Airtable is only consulted when there is a table to print.\n  const table = formatTable(flagged, await loadSiteNames());\n  const head = `Scanned ${scanned} status='new' submissions; ${flagged.length} score >= ${SPAM_THRESHOLD} under the current classifier:`;\n  if (!apply) {\n    return {\n      output: `${head}\\n\\n${table}\\n\\nDRY RUN — nothing was written. Re-run with --apply to re-bucket these ${flagged.length} rows to spam_auto.`,\n      code: 0,\n    };\n  }\n  const written = flagged.filter((f) => f.written).length;\n  const skipped = flagged.length - written;\n  const skippedNote =\n    skipped > 0\n      ? `\\n${skipped} row${skipped === 1 ? \"\" : \"s\"} skipped — no longer status='new' at write time (operator/ingest got there first).`\n      : \"\";\n  return {\n    output: `${head}\\n\\n${table}\\n\\nApplied: ${written} row${written === 1 ? \"\" : \"s\"} → spam_auto (new score + reasons written, '${RESCORE_REASON_MARKER}' marker appended).${skippedNote}`,\n    code: 0,\n  };\n}\n"],"mappings":";AAiBO,IAAM,wBAAwB;AAerC,SAAS,iBAAiB,KAA6C;AACrE,MAAI,CAAC,OAAO,IAAI,KAAK,MAAM,GAAI,QAAO,CAAC;AACvC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,WAAO,WAAW,QAAQ,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,IACxE,SACD,CAAC;AAAA,EACP,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAWA,eAAsB,sBACpB,IACA,MACyD;AACzD,QAAM,EAAE,yBAAyB,sBAAsB,IACrD,MAAM,OAAO,2BAAyB;AACxC,QAAM,EAAE,cAAc,eAAe,IAAI,MAAM,OAAO,+BAAgC;AAItF,QAAM,OAAwB,CAAC;AAC/B,QAAM,OAAO;AACb,WAAS,SAAS,KAAK,UAAU,MAAM;AACrC,UAAM,OAAO,MAAM,wBAAwB,IAAI,EAAE,QAAQ,MAAM,GAAG,EAAE,OAAO,MAAM,OAAO,CAAC;AACzF,SAAK,KAAK,GAAG,IAAI;AACjB,QAAI,KAAK,SAAS,KAAM;AAAA,EAC1B;AAEA,QAAM,UAA4B,CAAC;AACnC,aAAW,OAAO,MAAM;AACtB,UAAM,UAAU,aAAa;AAAA,MAC3B,MAAM,IAAI;AAAA,MACV,OAAO,IAAI;AAAA;AAAA;AAAA,MAGX,GAAI,IAAI,YAAY,OAAO,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC;AAAA,MACvD,UAAU,IAAI;AAAA,MACd,aAAa,iBAAiB,IAAI,WAAW;AAAA,MAC7C,WAAW;AAAA,IACb,CAAC;AACD,QAAI,QAAQ,QAAQ,eAAgB;AACpC,UAAM,YAAY,CAAC,GAAG,QAAQ,SAAS,qBAAqB,EAAE,KAAK,GAAG;AACtE,UAAM,UAAU,KAAK,QACjB,MAAM,sBAAsB,IAAI,IAAI,IAAI,QAAQ,OAAO,SAAS,IAChE;AACJ,YAAQ,KAAK,EAAE,KAAK,UAAU,QAAQ,OAAO,WAAW,QAAQ,CAAC;AAAA,EACnE;AACA,SAAO,EAAE,SAAS,KAAK,QAAQ,QAAQ;AACzC;AAIA,eAAe,gBAA8C;AAC3D,MAAI;AACF,UAAM,EAAE,UAAU,mBAAmB,IAAI,MAAM,OAAO,sBAAkC;AACxF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,wBAAoC;AAC1E,UAAM,QAAQ,MAAM,aAAa,SAAS,mBAAmB,CAAC,CAAC;AAC/D,WAAO,IAAI,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAAA,EAC1D,SAAS,KAAK;AACZ,YAAQ,MAAM,sEAAiE,OAAO,GAAG,CAAC,EAAE;AAC5F,WAAO,oBAAI,IAAI;AAAA,EACjB;AACF;AAEA,SAAS,IAAI,GAAW,OAAuB;AAC7C,SAAO,EAAE,UAAU,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,EAAE,MAAM;AAChE;AAEA,SAAS,YAAY,SAA2B,OAAoC;AAClF,QAAM,OAAO,QAAQ,IAAI,CAAC,OAAO;AAAA,IAC/B,MAAM,MAAM,IAAI,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI;AAAA,IACvC,OAAO,EAAE,IAAI,SAAS;AAAA,IACtB,OAAO,GAAG,EAAE,IAAI,aAAa,QAAG,WAAM,EAAE,QAAQ;AAAA,IAChD,SAAS,EAAE;AAAA,EACb,EAAE;AACF,QAAM,QAAQ,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AAC3D,QAAM,SAAS,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;AAC7D,QAAM,SAAS,KAAK,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC;AAC7D,QAAM,QAAQ;AAAA,IACZ,GAAG,IAAI,QAAQ,KAAK,CAAC,KAAK,IAAI,SAAS,MAAM,CAAC,KAAK,IAAI,SAAS,MAAM,CAAC;AAAA,IACvE,GAAG,KAAK;AAAA,MACN,CAAC,MACC,GAAG,IAAI,EAAE,MAAM,KAAK,CAAC,KAAK,IAAI,EAAE,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO;AAAA,IACzF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAOA,eAAsB,sBACpB,QACA,MAC2C;AAC3C,MAAI,WAAW,WAAW;AACxB,WAAO,EAAE,QAAQ,+BAA+B,MAAM,oBAAoB,MAAM,EAAE;AAAA,EACpF;AACA,MAAI,KAAK,SAAS,KAAK,QAAQ;AAC7B,WAAO,EAAE,QAAQ,6CAA6C,MAAM,EAAE;AAAA,EACxE;AACA,QAAM,QAAQ,KAAK,UAAU;AAE7B,QAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,+BAAgC;AACxE,QAAM,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,aAAa;AACxD,QAAM,KAAK,MAAM,OAAO,GAAG;AAE3B,QAAM,EAAE,SAAS,QAAQ,IAAI,MAAM,sBAAsB,IAAI,EAAE,MAAM,CAAC;AACtE,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,QAAQ,WAAW,OAAO,2BAA2B,YAAY,IAAI,KAAK,GAAG,yBAAoB,cAAc;AAAA,MAC/G,MAAM;AAAA,IACR;AAAA,EACF;AAGA,QAAM,QAAQ,YAAY,SAAS,MAAM,cAAc,CAAC;AACxD,QAAM,OAAO,WAAW,OAAO,8BAA8B,QAAQ,MAAM,aAAa,cAAc;AACtG,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,MACL,QAAQ,GAAG,IAAI;AAAA;AAAA,EAAO,KAAK;AAAA;AAAA,6EAA6E,QAAQ,MAAM;AAAA,MACtH,MAAM;AAAA,IACR;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AACjD,QAAM,UAAU,QAAQ,SAAS;AACjC,QAAM,cACJ,UAAU,IACN;AAAA,EAAK,OAAO,OAAO,YAAY,IAAI,KAAK,GAAG,4FAC3C;AACN,SAAO;AAAA,IACL,QAAQ,GAAG,IAAI;AAAA;AAAA,EAAO,KAAK;AAAA;AAAA,WAAgB,OAAO,OAAO,YAAY,IAAI,KAAK,GAAG,oDAA+C,qBAAqB,sBAAsB,WAAW;AAAA,IACtL,MAAM;AAAA,EACR;AACF;","names":[]}

package/dist/write-audits-to-airtable-BIK6LNVC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}