cursedbelt 2.7.0 → 3.0.0

package/dist/server/incidents/routes.js

@@ -1,203 +0,0 @@
-import { assertNoContent } from "./store";
-const noStore = { "cache-control": "no-store" };
-/** Long enough for three real sentences, short enough that nobody pastes a log in. */
-const MAX_FIELD = 600;
-const MAX_REPORTS = 100;
-const str = (v, fallback = "") => typeof v === "string" ? v.slice(0, MAX_FIELD) : fallback;
-/** Parse one posted report defensively. Throws with a usable message. */
-function parseReport(raw) {
-    if (!raw || typeof raw !== "object")
-        throw new Error("each report must be an object");
-    const r = raw;
-    const severity = r.severity === "blocking" ? "blocking" : "warning";
-    const report = {
-        source: str(r.source),
-        kind: str(r.kind),
-        subject: str(r.subject),
-        severity,
-        title: str(r.title),
-        whatBroke: str(r.whatBroke),
-        whatItBlocks: str(r.whatItBlocks),
-        whatToDo: str(r.whatToDo),
-        ...(r.facts && typeof r.facts === "object"
-            ? { facts: r.facts }
-            : {}),
-    };
-    for (const field of ["source", "kind", "subject", "title", "whatBroke"]) {
-        if (!report[field])
-            throw new Error(`report is missing "${field}"`);
-    }
-    // The privacy gate, applied to off-box input before it can reach a phone.
-    assertNoContent(report);
-    return report;
-}
-/**
- * The OWNER's surface: the list, the acks, the health strip, the manual sweep,
- * the channel test. Mount it INSIDE the app's session gate.
- */
-export function mountIncidentOwnerRoutes(app, options, basePath = "/incidents") {
-    const { store } = options;
-    const guard = async (c) => (await options.authorize(c)) ? null : c.json({ error: "forbidden" }, 403);
-    app.get(`${basePath}`, async (c) => {
-        const denied = await guard(c);
-        if (denied)
-            return denied;
-        const state = c.req.query("state");
-        const incidents = store.list({
-            state: state === "all"
-                ? undefined
-                : state === "resolved"
-                    ? "resolved"
-                    : state === "open"
-                        ? "open"
-                        : "active",
-            limit: Number(c.req.query("limit") ?? 200),
-        });
-        return c.json({ incidents }, 200, noStore);
-    });
-    app.post(`${basePath}/:fingerprint/ack`, async (c) => {
-        const denied = await guard(c);
-        if (denied)
-            return denied;
-        const ok = store.acknowledge(decodeURIComponent(c.req.param("fingerprint")));
-        return c.json({ ok }, ok ? 200 : 404, noStore);
-    });
-    app.get(`${basePath}/health`, async (c) => {
-        const denied = await guard(c);
-        if (denied)
-            return denied;
-        return c.json({
-            channels: (options.channelsOf?.() ?? options.notifier?.channels ?? []).map((ch) => ({
-                key: ch.key,
-                label: ch.label,
-            })),
-            lastSweep: options.lastSweep?.() ?? null,
-            sweepable: Boolean(options.sweep),
-        }, 200, noStore);
-    });
-    if (options.sweep) {
-        app.post(`${basePath}/sweep`, async (c) => {
-            const denied = await guard(c);
-            if (denied)
-                return denied;
-            const result = await options.sweep?.();
-            if (!result)
-                return c.json({ error: "no detectors on this host" }, 400, noStore);
-            const announced = options.notifier ? await options.notifier.announce(result.transitions) : [];
-            return c.json({ result, announced }, 200, noStore);
-        });
-    }
-    if (options.channelsOf) {
-        app.post(`${basePath}/test/:channel`, async (c) => {
-            const denied = await guard(c);
-            if (denied)
-                return denied;
-            const key = c.req.param("channel");
-            const channel = options.channelsOf?.().find((ch) => ch.key === key);
-            if (!channel)
-                return c.json({ error: `no channel "${key}" on this host` }, 404, noStore);
-            // Sent at `blocking` because that is the severity whose delivery matters —
-            // a test that exercises the in-app path and skips the phone proves nothing.
-            const result = await channel.send({
-                severity: "blocking",
-                subject: "[test] fleet incident alerts",
-                text: "This is the console proving the channel works. Nothing is wrong. No action needed.",
-            });
-            return c.json({ result }, 200, noStore);
-        });
-    }
-}
-/**
- * The MACHINE doors: `POST /report`, which another service beats its findings
- * into, and `POST /relay-email`, which a host that cannot send mail hands a
- * message to. Both carry a shared bearer.
- *
- * 🔴 **Mount this BEFORE the session gate, and never call it with `authorize`
- * expecting it to matter — it registers no route a browser should reach.**
- * Mounting the two together inside a cookie gate is the trap this split exists
- * to make impossible: every beat from binary-server and orch came back
- * `{"error":"unauthorized"}` from the gate, so no log line in this module said
- * anything was wrong and the console rendered a perfectly calm, empty board.
- * A reporter cannot report the failure to reach the reporting door.
- *
- * Keeping them in one function also risked the opposite mistake — registering
- * the owner's `GET /incidents` outside the gate, where Hono's first-match would
- * have shadowed the real one for ever.
- */
-export function mountIncidentMachineRoutes(app, options, basePath = "/incidents") {
-    const { store } = options;
-    if (options.reporterToken) {
-        app.post(`${basePath}/report`, async (c) => {
-            const header = c.req.header("authorization") ?? "";
-            const presented = header.startsWith("Bearer ") ? header.slice(7) : "";
-            // Length-first compare then constant-time-ish equality; the token is a
-            // shared secret between our own daemons, not a user credential.
-            if (presented.length !== options.reporterToken?.length ||
-                presented !== options.reporterToken) {
-                return c.json({ error: "forbidden" }, 403, noStore);
-            }
-            const body = (await c.req.json().catch(() => null));
-            const checkKey = str(body?.checkKey);
-            const source = str(body?.source);
-            const rawReports = Array.isArray(body?.reports) ? body.reports : null;
-            if (!checkKey || !source || !rawReports) {
-                return c.json({ error: "checkKey, source and reports[] are required" }, 400, noStore);
-            }
-            if (rawReports.length > MAX_REPORTS) {
-                return c.json({ error: `at most ${MAX_REPORTS} reports per call` }, 400, noStore);
-            }
-            let reports;
-            try {
-                reports = rawReports.map(parseReport);
-            }
-            catch (err) {
-                return c.json({ error: err instanceof Error ? err.message : "bad report" }, 400, noStore);
-            }
-            // A reporter declares the kinds it is authoritative for, exactly as a
-            // local check does — without them a remote service could never clear its
-            // own incidents, and every transient blip would stay red forever.
-            const kinds = Array.isArray(body?.kinds)
-                ? body.kinds.filter((k) => typeof k === "string")
-                : [...new Set(reports.map((r) => r.kind))];
-            const transitions = store.reconcile(checkKey, reports, {
-                namespaces: kinds.map((k) => `${source}:${k}:`),
-            });
-            const announced = options.notifier ? await options.notifier.announce(transitions) : [];
-            return c.json({
-                opened: transitions.opened.length,
-                escalated: transitions.escalated.length,
-                resolved: transitions.resolved.length,
-                unchanged: transitions.unchanged.length,
-                announced,
-            }, 200, noStore);
-        });
-    }
-    if (options.relayEmail) {
-        app.post(`${basePath}/relay-email`, async (c) => {
-            const header = c.req.header("authorization") ?? "";
-            const presented = header.startsWith("Bearer ") ? header.slice(7) : "";
-            if (!options.reporterToken ||
-                presented.length !== options.reporterToken.length ||
-                presented !== options.reporterToken) {
-                return c.json({ error: "forbidden" }, 403, noStore);
-            }
-            const body = (await c.req.json().catch(() => null));
-            const subject = str(body?.subject);
-            const text = typeof body?.text === "string" ? body.text.slice(0, 4000) : "";
-            if (!subject || !text)
-                return c.json({ error: "subject and text required" }, 400, noStore);
-            // 🔴 The REASON crosses the wire, not just the boolean. `{sent:false}`
-            // alone made the local console report "the prod console accepted the
-            // request but its mailer declined" — true, useless, and indistinguishable
-            // between "mail is off on that host" and "SES refused the address". The
-            // relay is the only place that knows.
-            const outcome = await options.relayEmail?.({
-                subject,
-                text,
-                ...(typeof body?.html === "string" ? { html: body.html.slice(0, 20_000) } : {}),
-            });
-            return c.json({ sent: Boolean(outcome?.sent), ...(outcome?.reason ? { reason: outcome.reason } : {}) }, 200, noStore);
-        });
-    }
-}
-//# sourceMappingURL=routes.js.map

package/dist/server/incidents/routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/server/incidents/routes.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAE,eAAe,EAAsB,MAAM,SAAS,CAAC;AAI9D,MAAM,OAAO,GAAG,EAAE,eAAe,EAAE,UAAU,EAAW,CAAC;AAEzD,sFAAsF;AACtF,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,WAAW,GAAG,GAAG,CAAC;AA2BxB,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,QAAQ,GAAG,EAAE,EAAU,EAAE,CACjD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAE1D,yEAAyE;AACzE,SAAS,WAAW,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtF,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,QAAQ,GAAqB,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,MAAM,GAAmB;QAC9B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACjB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACvB,QAAQ;QACR,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnB,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3B,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QACjC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YACzC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAgC,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAU,EAAE,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,0EAA0E;IAC1E,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACvC,GAAS,EACT,OAA8B,EAC9B,QAAQ,GAAG,YAAY;IAEvB,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAE1B,MAAM,KAAK,GAAG,KAAK,EAAE,CAAiD,EAA4B,EAAE,CACnG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAE3E,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;YAC5B,KAAK,EACJ,KAAK,KAAK,KAAK;gBACd,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,KAAK,UAAU;oBACrB,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,KAAK,KAAK,MAAM;wBACjB,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,QAAQ;YACd,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACnF,GAAG,EAAE,EAAE,CAAC,GAAG;gBACX,KAAK,EAAE,EAAE,CAAC,KAAK;aACf,CAAC,CAAC;YACH,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,IAAI;YACxC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;SACjC,EACD,GAAG,EACH,OAAO,CACP,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACjD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,GAAG,gBAAgB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACzF,2EAA2E;YAC3E,4EAA4E;YAC5E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjC,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,8BAA8B;gBACvC,IAAI,EAAE,oFAAoF;aAC1F,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CACzC,GAAS,EACT,OAA2F,EAC3F,QAAQ,GAAG,YAAY;IAEvB,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,uEAAuE;YACvE,gEAAgE;YAChE,IACC,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,MAAM;gBAClD,SAAS,KAAK,OAAO,CAAC,aAAa,EAClC,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAK1C,CAAC;YACT,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACtE,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBACzC,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,6CAA6C,EAAE,EACxD,GAAG,EACH,OAAO,CACP,CAAC;YACH,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,WAAW,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,OAAyB,CAAC;YAC9B,IAAI,CAAC;gBACJ,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,EAC5D,GAAG,EACH,OAAO,CACP,CAAC;YACH,CAAC;YACD,sEAAsE;YACtE,yEAAyE;YACzE,kEAAkE;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;gBACvC,CAAC,CAAE,IAAI,CAAC,KAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAC7E,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE;gBACtD,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,OAAO,CAAC,CAAC,IAAI,CACZ;gBACC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM;gBACjC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM;gBACvC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM;gBACrC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM;gBACvC,SAAS;aACT,EACD,GAAG,EACH,OAAO,CACP,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IACC,CAAC,OAAO,CAAC,aAAa;gBACtB,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,MAAM;gBACjD,SAAS,KAAK,OAAO,CAAC,aAAa,EAClC,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAI1C,CAAC;YACT,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3F,uEAAuE;YACvE,qEAAqE;YACrE,0EAA0E;YAC1E,wEAAwE;YACxE,sCAAsC;YACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC1C,OAAO;gBACP,IAAI;gBACJ,GAAG,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACxF,GAAG,EACH,OAAO,CACP,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;AACF,CAAC"}

package/dist/server/incidents/store.d.ts

@@ -1,76 +0,0 @@
-/**
- * The incident store, and the reconcile step that is the whole dedupe promise.
- *
- * ── The one rule ────────────────────────────────────────────────────────────
- * `reconcile()` is the ONLY way an incident changes state, and it is what
- * decides whether anything is notified. A detector hands it the complete set of
- * conditions that are true RIGHT NOW; the store diffs that against what it
- * already holds. Three things can come out of the diff — opened, escalated,
- * resolved — and everything else is a counter bump that notifies nobody.
- * Because the diff is set-shaped rather than event-shaped, a poller running
- * every five minutes for a week produces exactly two messages about one broken
- * thing: one when it broke, one when it was fixed.
- *
- * 🔴 The subtle half is the RESOLVE, and it is where a naive version of this
- * lies to its owner. A detector that throws, times out, or is not registered on
- * this host reports nothing — and "reported nothing" must never be read as
- * "everything it watches is fixed", or a crashed detector cheerfully announces
- * that an outage is over. Two things prevent that: `reconcile` only ever
- * resolves fingerprints belonging to the check it was called for AND inside the
- * namespaces that check declares it is authoritative for, and `runIncidentSweep`
- * (`checks.ts`) does not call `reconcile` at all for a check that threw.
- *
- * ── Where the file lives ────────────────────────────────────────────────────
- * Whatever `Database` the caller opens. The console keeps it in an incidents
- * database of its own under the host's app-data root, deliberately NOT in the
- * metrics database: metrics are capped, regenerable telemetry that trims on write, and
- * an incident is a governed record whose whole value is that it survives — most
- * of all across the restart a deploy of the console itself performs.
- */
-import type { Database } from "bun:sqlite";
-import { type Incident, type IncidentReport, type IncidentTransitions } from "./types";
-/**
- * The privacy gate, enforced rather than reviewed. `facts` is for numbers —
- * bytes free, items failed, commits behind — and a string slipping in there is
- * how a file name reaches an SMS. See the header of `types.ts`.
- *
- * It throws rather than sanitising, because a detector author meets the failure
- * in their own test run, which is the only moment the mistake is cheap.
- */
-export declare function assertNoContent(report: IncidentReport): void;
-export interface ReconcileOptions {
-    /**
-     * The `source:kind:` prefixes this check is authoritative for on this run.
-     * Resolving is confined to them, so one detector can never resolve another's
-     * incidents — and a check that RAN and found nothing can still clear its own,
-     * which a report list alone cannot express (an empty array is
-     * indistinguishable from "did not run"). `runIncidentSweep` derives these
-     * from the check's declared `kinds`; omitted, they fall back to whatever the
-     * reports mention, which is the safe direction to be wrong in.
-     */
-    namespaces?: string[];
-    now?: number;
-}
-export interface IncidentStore {
-    readonly db: Database;
-    /** Newest activity first. `state: "active"` means open + acknowledged. */
-    list: (opts?: {
-        state?: Incident["state"] | "active";
-        limit?: number;
-    }) => Incident[];
-    get: (fp: string) => Incident | null;
-    /** The dedupe engine. See the module header. */
-    reconcile: (checkKey: string, reports: IncidentReport[], opts?: ReconcileOptions) => IncidentTransitions;
-    /** Record that the OPEN notification for these fingerprints went out. */
-    markNotified: (fps: string[], result: string, now?: number) => void;
-    /** Record that the RESOLVED notification went out. */
-    markResolvedNotified: (fps: string[], now?: number) => void;
-    /** The owner has seen it: stop counting it as needing attention, keep it listed. */
-    acknowledge: (fp: string, now?: number) => boolean;
-}
-/**
- * Open the store over an existing database. The caller owns the `Database` (and
- * its lifetime) — this primitive owns one table in it.
- */
-export declare function createIncidentStore(db: Database): IncidentStore;
-//# sourceMappingURL=store.d.ts.map

package/dist/server/incidents/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/server/incidents/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3C,OAAO,EAEN,KAAK,QAAQ,EAEb,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,MAAM,SAAS,CAAC;AAgDjB;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAU5D;AAED,MAAM,WAAW,gBAAgB;IAChC;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,0EAA0E;IAC1E,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,QAAQ,EAAE,CAAC;IACtF,GAAG,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC;IACrC,gDAAgD;IAChD,SAAS,EAAE,CACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EAAE,EACzB,IAAI,CAAC,EAAE,gBAAgB,KACnB,mBAAmB,CAAC;IACzB,yEAAyE;IACzE,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpE,sDAAsD;IACtD,oBAAoB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,oFAAoF;IACpF,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;CACnD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,GAAG,aAAa,CAyL/D"}

package/dist/server/incidents/store.js

@@ -1,177 +0,0 @@
-import { runMigrations } from "../migration/runner";
-import { INCIDENT_MIGRATIONS, INCIDENTS_TABLE } from "./migrations";
-import { fingerprint, } from "./types";
-const toIncident = (r) => ({
-    fingerprint: r.fingerprint,
-    source: r.source,
-    kind: r.kind,
-    subject: r.subject,
-    severity: r.severity === "blocking" ? "blocking" : "warning",
-    state: r.state === "open" ? "open" : r.state === "acknowledged" ? "acknowledged" : "resolved",
-    title: r.title,
-    whatBroke: r.what_broke,
-    whatItBlocks: r.what_it_blocks,
-    whatToDo: r.what_to_do,
-    facts: r.facts_json ? JSON.parse(r.facts_json) : undefined,
-    firstSeen: r.first_seen,
-    lastSeen: r.last_seen,
-    seenCount: r.seen_count,
-    episodes: r.episodes,
-    acknowledgedAt: r.acknowledged_at,
-    resolvedAt: r.resolved_at,
-    notifiedAt: r.notified_at,
-    notifyResult: r.notify_result,
-    resolvedNotifiedAt: r.resolved_notified_at,
-});
-/**
- * The privacy gate, enforced rather than reviewed. `facts` is for numbers —
- * bytes free, items failed, commits behind — and a string slipping in there is
- * how a file name reaches an SMS. See the header of `types.ts`.
- *
- * It throws rather than sanitising, because a detector author meets the failure
- * in their own test run, which is the only moment the mistake is cheap.
- */
-export function assertNoContent(report) {
-    for (const [key, value] of Object.entries(report.facts ?? {})) {
-        if (typeof value === "number" || typeof value === "boolean" || value === null)
-            continue;
-        throw new Error(`incident ${fingerprint(report)}: fact "${key}" is a ${typeof value}. ` +
-            "facts take numbers, booleans and null only — a string here is how private " +
-            "content reaches a text message. Put the words in whatBroke / whatItBlocks / " +
-            "whatToDo, which a detector's author writes and reviews.");
-    }
-}
-/**
- * Open the store over an existing database. The caller owns the `Database` (and
- * its lifetime) — this primitive owns one table in it.
- */
-export function createIncidentStore(db) {
-    runMigrations(db, INCIDENT_MIGRATIONS);
-    const selectOne = db.prepare(`SELECT * FROM ${INCIDENTS_TABLE} WHERE fingerprint = ?`);
-    const insert = db.prepare(`INSERT INTO ${INCIDENTS_TABLE} (
-			fingerprint, source, check_key, kind, subject, severity, state, title,
-			what_broke, what_it_blocks, what_to_do, facts_json,
-			first_seen, last_seen, seen_count, episodes
-		) VALUES (?, ?, ?, ?, ?, ?, 'open', ?, ?, ?, ?, ?, ?, ?, 1, 1)`);
-    /** A NEW episode of a fingerprint that had resolved. Counters restart; `episodes` does not. */
-    const reopen = db.prepare(`UPDATE ${INCIDENTS_TABLE} SET
-			state = 'open', severity = ?, title = ?, what_broke = ?, what_it_blocks = ?,
-			what_to_do = ?, facts_json = ?, first_seen = ?, last_seen = ?, seen_count = 1,
-			episodes = episodes + 1, acknowledged_at = NULL, resolved_at = NULL,
-			notified_at = NULL, notify_result = NULL, resolved_notified_at = NULL
-		WHERE fingerprint = ?`);
-    /**
-     * Observed again. The words and the facts are REFRESHED — the numbers move,
-     * and "17 GB free" must not stay frozen at whatever it was on Tuesday — but
-     * nothing about the lifecycle moves, so no transition is emitted and nothing
-     * is sent. This statement is the dedupe, in one place.
-     */
-    const touch = db.prepare(`UPDATE ${INCIDENTS_TABLE} SET
-			last_seen = ?, seen_count = seen_count + 1, title = ?, what_broke = ?,
-			what_it_blocks = ?, what_to_do = ?, facts_json = ?, severity = ?
-		WHERE fingerprint = ?`);
-    const resolveStmt = db.prepare(`UPDATE ${INCIDENTS_TABLE} SET state = 'resolved', resolved_at = ? WHERE fingerprint = ?`);
-    const store = {
-        db,
-        list(opts = {}) {
-            const limit = opts.limit ?? 200;
-            if (opts.state === "active") {
-                return db
-                    .prepare(`SELECT * FROM ${INCIDENTS_TABLE} WHERE state IN ('open','acknowledged')
-								ORDER BY last_seen DESC LIMIT ?`)
-                    .all(limit).map(toIncident);
-            }
-            if (opts.state) {
-                return db
-                    .prepare(`SELECT * FROM ${INCIDENTS_TABLE} WHERE state = ? ORDER BY last_seen DESC LIMIT ?`)
-                    .all(opts.state, limit).map(toIncident);
-            }
-            return db
-                .prepare(`SELECT * FROM ${INCIDENTS_TABLE} ORDER BY last_seen DESC LIMIT ?`)
-                .all(limit).map(toIncident);
-        },
-        get(fp) {
-            const row = selectOne.get(fp);
-            return row ? toIncident(row) : null;
-        },
-        reconcile(checkKey, reports, opts = {}) {
-            const now = opts.now ?? Date.now();
-            const out = { opened: [], escalated: [], resolved: [], unchanged: [] };
-            const seen = new Set();
-            for (const report of reports) {
-                assertNoContent(report);
-                const fp = fingerprint(report);
-                seen.add(fp);
-                const facts = report.facts ? JSON.stringify(report.facts) : null;
-                const existing = selectOne.get(fp);
-                if (!existing) {
-                    insert.run(fp, report.source, checkKey, report.kind, report.subject, report.severity, report.title, report.whatBroke, report.whatItBlocks, report.whatToDo, facts, now, now);
-                    const opened = store.get(fp);
-                    if (opened)
-                        out.opened.push(opened);
-                    continue;
-                }
-                if (existing.state === "resolved") {
-                    reopen.run(report.severity, report.title, report.whatBroke, report.whatItBlocks, report.whatToDo, facts, now, now, fp);
-                    const reopened = store.get(fp);
-                    if (reopened)
-                        out.opened.push(reopened);
-                    continue;
-                }
-                // Still open, or acknowledged. The one thing left that can be worth a
-                // message is a WARNING that has become BLOCKING, because that changes
-                // which channels the incident is entitled to. Everything else is noise.
-                const escalating = existing.severity !== "blocking" && report.severity === "blocking";
-                touch.run(now, report.title, report.whatBroke, report.whatItBlocks, report.whatToDo, facts, report.severity, fp);
-                const current = store.get(fp);
-                if (!current)
-                    continue;
-                if (escalating)
-                    out.escalated.push(current);
-                else
-                    out.unchanged.push(current);
-            }
-            const prefixes = opts.namespaces ?? [
-                ...new Set(reports.map((r) => `${r.source}:${r.kind}:`)),
-            ];
-            const candidates = db
-                .prepare(`SELECT * FROM ${INCIDENTS_TABLE} WHERE check_key = ? AND state IN ('open','acknowledged')`)
-                .all(checkKey);
-            for (const row of candidates) {
-                if (seen.has(row.fingerprint))
-                    continue;
-                // Outside the namespaces this run is authoritative for — leave it alone.
-                // With no namespaces at all (a check that declared none and reported
-                // none) nothing resolves, which is the correct reading of "I have no
-                // idea" rather than "everything is fine".
-                if (!prefixes.some((p) => row.fingerprint.startsWith(p)))
-                    continue;
-                resolveStmt.run(now, row.fingerprint);
-                const resolved = store.get(row.fingerprint);
-                if (resolved)
-                    out.resolved.push(resolved);
-            }
-            return out;
-        },
-        markNotified(fps, result, now = Date.now()) {
-            const stmt = db.prepare(`UPDATE ${INCIDENTS_TABLE} SET notified_at = ?, notify_result = ? WHERE fingerprint = ?`);
-            for (const fp of fps)
-                stmt.run(now, result, fp);
-        },
-        markResolvedNotified(fps, now = Date.now()) {
-            const stmt = db.prepare(`UPDATE ${INCIDENTS_TABLE} SET resolved_notified_at = ? WHERE fingerprint = ?`);
-            for (const fp of fps)
-                stmt.run(now, fp);
-        },
-        acknowledge(fp, now = Date.now()) {
-            const row = selectOne.get(fp);
-            if (!row || row.state !== "open")
-                return false;
-            db.prepare(`UPDATE ${INCIDENTS_TABLE} SET state = 'acknowledged', acknowledged_at = ?
-					WHERE fingerprint = ?`).run(now, fp);
-            return true;
-        },
-    };
-    return store;
-}
-//# sourceMappingURL=store.js.map

package/dist/server/incidents/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/server/incidents/store.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACN,WAAW,GAKX,MAAM,SAAS,CAAC;AAyBjB,MAAM,UAAU,GAAG,CAAC,CAAM,EAAY,EAAE,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,WAAW;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,OAAO,EAAE,CAAC,CAAC,OAAO;IAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;IAC5D,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU;IAC7F,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,YAAY,EAAE,CAAC,CAAC,cAAc;IAC9B,QAAQ,EAAE,CAAC,CAAC,UAAU;IACtB,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAkC,CAAC,CAAC,CAAC,SAAS;IAC5F,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,QAAQ,EAAE,CAAC,CAAC,SAAS;IACrB,SAAS,EAAE,CAAC,CAAC,UAAU;IACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ;IACpB,cAAc,EAAE,CAAC,CAAC,eAAe;IACjC,UAAU,EAAE,CAAC,CAAC,WAAW;IACzB,UAAU,EAAE,CAAC,CAAC,WAAW;IACzB,YAAY,EAAE,CAAC,CAAC,aAAa;IAC7B,kBAAkB,EAAE,CAAC,CAAC,oBAAoB;CAC1C,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAsB;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QACxF,MAAM,IAAI,KAAK,CACd,YAAY,WAAW,CAAC,MAAM,CAAC,WAAW,GAAG,UAAU,OAAO,KAAK,IAAI;YACtE,4EAA4E;YAC5E,8EAA8E;YAC9E,yDAAyD,CAC1D,CAAC;IACH,CAAC;AACF,CAAC;AAmCD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAY;IAC/C,aAAa,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,eAAe,wBAAwB,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,eAAe;;;;iEAIQ,CAAC,CAAC;IAClE,+FAA+F;IAC/F,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,eAAe;;;;;wBAK5B,CAAC,CAAC;IACzB;;;;;OAKG;IACH,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,eAAe;;;wBAG3B,CAAC,CAAC;IACzB,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAC7B,UAAU,eAAe,gEAAgE,CACzF,CAAC;IAEF,MAAM,KAAK,GAAkB;QAC5B,EAAE;QAEF,IAAI,CAAC,IAAI,GAAG,EAAE;YACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC;YAChC,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OACC,EAAE;qBACA,OAAO,CACP,iBAAiB,eAAe;wCACC,CACjC;qBACA,GAAG,CAAC,KAAK,CACX,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnB,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,OACC,EAAE;qBACA,OAAO,CACP,iBAAiB,eAAe,kDAAkD,CAClF;qBACA,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CACvB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnB,CAAC;YACD,OACC,EAAE;iBACA,OAAO,CAAC,iBAAiB,eAAe,kCAAkC,CAAC;iBAC3E,GAAG,CAAC,KAAK,CACX,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnB,CAAC;QAED,GAAG,CAAC,EAAE;YACL,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAe,CAAC;YAC5C,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrC,CAAC;QAED,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACnC,MAAM,GAAG,GAAwB,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAE/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,eAAe,CAAC,MAAM,CAAC,CAAC;gBACxB,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACb,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAe,CAAC;gBAEjD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACf,MAAM,CAAC,GAAG,CACT,EAAE,EACF,MAAM,CAAC,MAAM,EACb,QAAQ,EACR,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,QAAQ,EACf,KAAK,EACL,GAAG,EACH,GAAG,CACH,CAAC;oBACF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC7B,IAAI,MAAM;wBAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACpC,SAAS;gBACV,CAAC;gBAED,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACnC,MAAM,CAAC,GAAG,CACT,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,QAAQ,EACf,KAAK,EACL,GAAG,EACH,GAAG,EACH,EAAE,CACF,CAAC;oBACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/B,IAAI,QAAQ;wBAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACxC,SAAS;gBACV,CAAC;gBAED,sEAAsE;gBACtE,sEAAsE;gBACtE,wEAAwE;gBACxE,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC;gBACtF,KAAK,CAAC,GAAG,CACR,GAAG,EACH,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,QAAQ,EACf,KAAK,EACL,MAAM,CAAC,QAAQ,EACf,EAAE,CACF,CAAC;gBACF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,IAAI,UAAU;oBAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;oBACvC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI;gBACnC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;aACxD,CAAC;YACF,MAAM,UAAU,GAAG,EAAE;iBACnB,OAAO,CACP,iBAAiB,eAAe,2DAA2D,CAC3F;iBACA,GAAG,CAAC,QAAQ,CAAU,CAAC;YACzB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;oBAAE,SAAS;gBACxC,yEAAyE;gBACzE,qEAAqE;gBACrE,qEAAqE;gBACrE,0CAA0C;gBAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBACnE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC5C,IAAI,QAAQ;oBAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC;YAED,OAAO,GAAG,CAAC;QACZ,CAAC;QAED,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACtB,UAAU,eAAe,+DAA+D,CACxF,CAAC;YACF,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;YACzC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACtB,UAAU,eAAe,qDAAqD,CAC9E,CAAC;YACF,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,WAAW,CAAC,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;YAC/B,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAe,CAAC;YAC5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC/C,EAAE,CAAC,OAAO,CACT,UAAU,eAAe;2BACF,CACvB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACf,OAAO,IAAI,CAAC;QACb,CAAC;KACD,CAAC;IAEF,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/server/incidents/types.d.ts

@@ -1,108 +0,0 @@
-/**
- * The incident contract — what a detector reports, and what the store keeps.
- *
- * ── Why an INCIDENT and not an event (2026-08-13, the owner) ────────────────
- * "auto notifying me once per incident (it needs to avoid sending me the same
- * problem over and over in duplicated notifications if it's polling for
- * problems)". A poller that re-sends every five minutes is the failure mode
- * that gets the whole feature muted, which puts him back where he started but
- * with more noise. So the unit of this module is a *condition that is true for
- * a while*, identified by a stable {@link fingerprint}, with a lifecycle —
- * and a notification is attached to a TRANSITION of that lifecycle, never to
- * an observation. Observing the same broken thing for the ninth hour running
- * bumps a counter and sends nothing.
- *
- * ── 🔴 An incident carries WHAT failed, never the content ───────────────────
- * These messages go to a phone and to an inbox, and several apps on this fleet
- * are private (notes) or zero-knowledge by construction (vault). A file name,
- * a note title or a vault key in an SMS is a leak by a different door. So the
- * shape below has no free-form payload: `subject` is a stable IDENTIFIER (an
- * app key, a launchd label, a queue name), the three human fields are written
- * by the detector's own author, and {@link IncidentReport.facts} takes NUMBERS
- * and enum-ish strings only. `assertNoContent` in `store.ts` enforces the last
- * one at write time rather than trusting a reviewer.
- */
-/** How loud an incident is. There are only two, on purpose — see `notifier.ts`. */
-export type IncidentSeverity = 
-/** The owner's own examples: "can't deploy, can't ingest files". Email AND text. */
-"blocking"
-/** Worth knowing, in-app only. A warning that texts him is a warning that mutes the channel. */
- | "warning";
-/** Where an incident is in its life. */
-export type IncidentState = 
-/** Still true, not yet dealt with. */
-"open"
-/** Still true; the owner has seen it and does not want to be told again. */
- | "acknowledged"
-/** No longer reported by its detector. */
- | "resolved";
-/** A fact attached to an incident. Numbers and enum-ish strings only — see the header. */
-export type IncidentFact = number | boolean | null;
-/**
- * One condition, as a detector reports it. The detector does NOT decide whether
- * this is new, whether to notify, or what the current state is — that is the
- * store's job, and keeping it there is the whole dedupe guarantee.
- */
-export interface IncidentReport {
-    /** Which app or service noticed it: `binary-server`, `station`, `orch`. */
-    source: string;
-    /** The detector that produced it, e.g. `disk-below-reserve`. Stable across runs. */
-    kind: string;
-    /**
-     * WHAT the condition is about, as a stable identifier — an app key, a launchd
-     * label, a queue name. Never a file name, a title, or anything a person typed.
-     */
-    subject: string;
-    severity: IncidentSeverity;
-    /** One line, for a notification subject and a table row. Names the app. */
-    title: string;
-    /** ELI5: what actually broke. Assume he does not know what your daemon is. */
-    whatBroke: string;
-    /** ELI5: what it stops him doing. This is the sentence that earns the text message. */
-    whatItBlocks: string;
-    /** ELI5: what to do about it. A runnable command carries its own `cd` (fleet rule). */
-    whatToDo: string;
-    /** Numbers only — bytes free, items failed, commits behind. See the header. */
-    facts?: Record<string, IncidentFact>;
-}
-/** A stored incident: a report, plus everything the store knows about its life. */
-export interface Incident extends IncidentReport {
-    fingerprint: string;
-    state: IncidentState;
-    /** Epoch ms of the first observation of this episode. */
-    firstSeen: number;
-    /** Epoch ms of the most recent observation. */
-    lastSeen: number;
-    /** How many sweeps have observed it in this episode. */
-    seenCount: number;
-    /** How many times this fingerprint has opened, ever. A flapper is visible. */
-    episodes: number;
-    acknowledgedAt: number | null;
-    resolvedAt: number | null;
-    /** When the OPEN notification went out, and what happened to each channel. */
-    notifiedAt: number | null;
-    notifyResult: string | null;
-    /** When the RESOLVED notification went out. */
-    resolvedNotifiedAt: number | null;
-}
-/**
- * What one sweep changed. Only these three lists produce notifications — an
- * incident merely observed again appears in none of them.
- */
-export interface IncidentTransitions {
-    /** Newly true, or true again after a resolve. Notify. */
-    opened: Incident[];
-    /** Was a warning, is now blocking. Notify — the channel set changed. */
-    escalated: Incident[];
-    /** No longer reported. Notify once, so "is it fixed?" is answered without asking. */
-    resolved: Incident[];
-    /** Observed again while already open. **Never notified.** Here so a test can see it. */
-    unchanged: Incident[];
-}
-/**
- * A stable identity for a condition. Deliberately NOT a hash of the message:
- * an author who improves the wording of `whatToDo` must not thereby re-alert
- * the owner about a problem he already knows about.
- */
-export declare function fingerprint(report: Pick<IncidentReport, "source" | "kind" | "subject">): string;
-//# sourceMappingURL=types.d.ts.map

package/dist/server/incidents/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/server/incidents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,mFAAmF;AACnF,MAAM,MAAM,gBAAgB;AAC3B,oFAAoF;AAClF,UAAU;AACZ,gGAAgG;GAC9F,SAAS,CAAC;AAEb,wCAAwC;AACxC,MAAM,MAAM,aAAa;AACxB,sCAAsC;AACpC,MAAM;AACR,4EAA4E;GAC1E,cAAc;AAChB,0CAA0C;GACxC,UAAU,CAAC;AAEd,0FAA0F;AAC1F,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEnD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC9B,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,YAAY,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACrC;AAED,mFAAmF;AACnF,MAAM,WAAW,QAAS,SAAQ,cAAc;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,aAAa,CAAC;IACrB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,yDAAyD;IACzD,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,wEAAwE;IACxE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,qFAAqF;IACrF,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,wFAAwF;IACxF,SAAS,EAAE,QAAQ,EAAE,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAE/F"}

package/dist/server/incidents/types.js

@@ -1,33 +0,0 @@
-/**
- * The incident contract — what a detector reports, and what the store keeps.
- *
- * ── Why an INCIDENT and not an event (2026-08-13, the owner) ────────────────
- * "auto notifying me once per incident (it needs to avoid sending me the same
- * problem over and over in duplicated notifications if it's polling for
- * problems)". A poller that re-sends every five minutes is the failure mode
- * that gets the whole feature muted, which puts him back where he started but
- * with more noise. So the unit of this module is a *condition that is true for
- * a while*, identified by a stable {@link fingerprint}, with a lifecycle —
- * and a notification is attached to a TRANSITION of that lifecycle, never to
- * an observation. Observing the same broken thing for the ninth hour running
- * bumps a counter and sends nothing.
- *
- * ── 🔴 An incident carries WHAT failed, never the content ───────────────────
- * These messages go to a phone and to an inbox, and several apps on this fleet
- * are private (notes) or zero-knowledge by construction (vault). A file name,
- * a note title or a vault key in an SMS is a leak by a different door. So the
- * shape below has no free-form payload: `subject` is a stable IDENTIFIER (an
- * app key, a launchd label, a queue name), the three human fields are written
- * by the detector's own author, and {@link IncidentReport.facts} takes NUMBERS
- * and enum-ish strings only. `assertNoContent` in `store.ts` enforces the last
- * one at write time rather than trusting a reviewer.
- */
-/**
- * A stable identity for a condition. Deliberately NOT a hash of the message:
- * an author who improves the wording of `whatToDo` must not thereby re-alert
- * the owner about a problem he already knows about.
- */
-export function fingerprint(report) {
-    return `${report.source}:${report.kind}:${report.subject}`;
-}
-//# sourceMappingURL=types.js.map

package/dist/server/incidents/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/server/incidents/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAqFH;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAA2D;IACtF,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;AAC5D,CAAC"}