cursedbelt 2.8.0 → 3.0.0

package/dist/server/incidents/channels.js

@@ -1,358 +0,0 @@
-/**
- * How an incident reaches the owner. Three channels, and a hard rule about which
- * incidents are allowed which.
- *
- * ── The severity split is the feature ───────────────────────────────────────
- * The owner asked for "an email and a text message about blocking issues like
- * these (can't deploy, can't ingest files)". A warning that texts him is a
- * warning that gets the channel muted, and a muted channel puts him back where
- * this whole unit started — finding out days later, by accident. So: in-app for
- * everything, email + text for `blocking` only, and `notifier.ts` is the only
- * place that decision is made.
- *
- * ── 🔴 "Sent" is a claim; this module deals in evidence ─────────────────────
- * `fleet/rules/automation-over-documentation.md` — *"treat 'I could not prove it
- * worked' as a failure rather than a pass"*. Both remote channels here can
- * succeed loudly and deliver nothing:
- *
- *  - **iMessage.** `osascript` exits 0 the moment Messages accepts the string.
- *    Whether anything left the machine is a separate question, and the answer is
- *    in `~/Library/Messages/chat.db` — so {@link createTextChannel} reads back
- *    an outgoing row with `is_sent = 1` before it will call the send delivered.
- *    Without that read it is `unproven`, which is NOT success.
- *  - **Email.** The fleet's mailer is best-effort by contract and returns
- *    `false` on both "mail is off here" and "SES refused". That is right for a
- *    signup mail and wrong for an outage alert, so the result is carried, not
- *    swallowed, and the console shows it on the incident.
- *
- * ── Why the text channel is AppleScript and not an SMS API ──────────────────
- * Measured on this Mac, 2026-08-20, while building this: neither IAM user the
- * console holds can call SES (`satellite-cloud` and `satellite-console-prod`
- * both answer `AccessDenied` on `ses:GetSendQuota`), and the Gmail refresh token
- * in `openclaw-digest.env` is revoked (`invalid_grant`). Messages.app is signed
- * in, has an enabled iMessage account, and its Automation grant is already in
- * place — one `osascript` reached the owner's phone in under a second with
- * `is_sent = 1, is_delivered = 1` in `chat.db`. It costs nothing, needs no
- * credential, and — the property that decides it — **it does not depend on the
- * prod box**, which is exactly the thing most likely to be down when an alert
- * matters. An SMS provider would have been a new bill and a new secret to reach
- * the same phone less reliably.
- */
-// ── text: iMessage from this Mac ──────────────────────────────────────────────
-/**
- * The AppleScript, as a file-less `osascript -` script taking `argv`, so no part
- * of the message is ever interpolated into source. A message containing a quote
- * would otherwise be a syntax error at best.
- *
- * It walks the accounts by index inside a `try` rather than asking for
- * `1st account whose service type = iMessage`: on this Mac four of the six
- * accounts throw `-1728` on any property access, and the `whose` form propagates
- * that instead of skipping them (measured 2026-08-20 — the clean-looking form is
- * the one that does not work).
- */
-const SEND_SCRIPT = `on run argv
-	set targetHandle to item 1 of argv
-	set msg to item 2 of argv
-	tell application "Messages"
-		set n to (count of accounts)
-		repeat with i from 1 to n
-			try
-				set acct to account i
-				if (service type of acct) is iMessage and (enabled of acct) then
-					send msg to participant targetHandle of acct
-					return "sent"
-				end if
-			end try
-		end repeat
-	end tell
-	return "no-imessage-account"
-end run`;
-/**
- * What macOS has actually decided about this process talking to Messages.
- *
- * The user's TCC database is readable with Full Disk Access, which this Mac's
- * agents have, and it is the only place the answer exists — `osascript` reports
- * a timeout, not a refusal. Unreadable ⇒ `unknown`, never a guess.
- */
-async function automationDecision() {
-    try {
-        const { Database } = await import("bun:sqlite");
-        const { homedir } = await import("node:os");
-        const { join } = await import("node:path");
-        const db = new Database(join(homedir(), "Library", "Application Support", "com.apple.TCC", "TCC.db"), { readonly: true });
-        try {
-            const row = db
-                .prepare(`SELECT auth_value FROM access
-						WHERE service = 'kTCCServiceAppleEvents'
-							AND indirect_object_identifier = 'com.apple.MobileSMS'
-							AND client LIKE '%bun%'
-						ORDER BY last_modified DESC LIMIT 1`)
-                .get();
-            if (!row)
-                return "unknown";
-            return row.auth_value === 0 ? "denied" : "allowed";
-        }
-        finally {
-            db.close();
-        }
-    }
-    catch {
-        return "unknown";
-    }
-}
-/** Apple's epoch is 2001-01-01; `message.date` is nanoseconds since then. */
-const APPLE_EPOCH_OFFSET_S = 978_307_200;
-const appleTimeNow = () => (Date.now() / 1000 - APPLE_EPOCH_OFFSET_S) * 1e9;
-const defaultSend = async (handle, body) => {
-    const proc = Bun.spawn(["osascript", "-", handle, body], {
-        stdin: new TextEncoder().encode(SEND_SCRIPT),
-        stdout: "pipe",
-        stderr: "pipe",
-    });
-    const [out, err, code] = await Promise.all([
-        new Response(proc.stdout).text(),
-        new Response(proc.stderr).text(),
-        proc.exited,
-    ]);
-    const trimmed = out.trim();
-    if (code !== 0) {
-        // 🔴 Two different macOS errors mean the same thing, and neither says so.
-        // `-1743` is an outright refusal. `-1712` is an AppleEvent TIMEOUT, which
-        // is what a DAEMON gets: the consent prompt is raised against the launchd
-        // job's responsible process, nobody answers it, and the event times out.
-        // Measured on this Mac 2026-08-21 — the console's first send produced
-        // `-1712`, and `TCC.db` had a fresh `kTCCServiceAppleEvents` row for
-        // `bun.exe → com.apple.MobileSMS` with `auth_value = 0` stamped at the same
-        // minute. So the raw error is a red herring and the decision is a FACT that
-        // can be read, which is what `automationDecision` does. Naming the state
-        // beats printing an error code nobody can act on.
-        const looksLikeTcc = err.includes("-1743") ||
-            err.includes("-1712") ||
-            err.toLowerCase().includes("not authorized");
-        if (looksLikeTcc) {
-            const decision = await automationDecision();
-            return {
-                ok: false,
-                detail: decision === "denied"
-                    ? "macOS has Automation access to Messages DENIED for this console's daemon. Turn it back on in System Settings ▸ Privacy & Security ▸ Automation (the entry is 'bun'), then press Send a test."
-                    : "macOS did not grant Automation access to Messages — a consent prompt was raised against a background daemon and nothing answered it. Approve it in System Settings ▸ Privacy & Security ▸ Automation, then press Send a test.",
-            };
-        }
-        return { ok: false, detail: `osascript exited ${code}: ${err.trim().slice(0, 200)}` };
-    }
-    if (trimmed !== "sent") {
-        return { ok: false, detail: `Messages has no enabled iMessage account (${trimmed})` };
-    }
-    return { ok: true, detail: "Messages accepted the send" };
-};
-const defaultProveSent = async (sinceAppleTime) => {
-    try {
-        const { Database } = await import("bun:sqlite");
-        const { homedir } = await import("node:os");
-        const { join } = await import("node:path");
-        // Read-only, and never written: this is Apple's database, not ours.
-        const db = new Database(join(homedir(), "Library", "Messages", "chat.db"), {
-            readonly: true,
-        });
-        try {
-            const row = db
-                .prepare("SELECT COUNT(*) AS n FROM message WHERE is_from_me = 1 AND is_sent = 1 AND date > ?")
-                .get(sinceAppleTime);
-            return (row?.n ?? 0) > 0;
-        }
-        finally {
-            db.close();
-        }
-    }
-    catch {
-        // Full Disk Access is not granted, or the schema moved. We cannot prove
-        // anything — which is `unproven`, and the caller must not read it as a send
-        // that failed OR as one that worked.
-        return null;
-    }
-};
-/**
- * Text the owner from this Mac, and prove it left. Mac-only by construction; the
- * prod deployment of the console never registers it (see `notifier.ts`).
- */
-export function createTextChannel(options) {
-    const send = options.send ?? defaultSend;
-    const prove = options.proveSent ?? defaultProveSent;
-    const timeoutMs = options.proofTimeoutMs ?? 8_000;
-    return {
-        key: "text",
-        label: "Text message (iMessage from this Mac)",
-        async send(message) {
-            if (message.severity !== "blocking") {
-                return { channel: "text", outcome: "skipped", detail: "not a blocking incident" };
-            }
-            const before = appleTimeNow();
-            const attempt = await send(options.handle, `${message.subject}\n\n${message.text}`);
-            if (!attempt.ok)
-                return { channel: "text", outcome: "failed", detail: attempt.detail };
-            const deadline = Date.now() + timeoutMs;
-            let proofAvailable = true;
-            while (Date.now() < deadline) {
-                const proved = await prove(before);
-                if (proved === null) {
-                    proofAvailable = false;
-                    break;
-                }
-                if (proved) {
-                    return { channel: "text", outcome: "delivered", detail: "chat.db shows it sent" };
-                }
-                await Bun.sleep(500);
-            }
-            return {
-                channel: "text",
-                outcome: "unproven",
-                detail: proofAvailable
-                    ? `Messages accepted it but no sent row appeared within ${Math.round(timeoutMs / 1000)}s`
-                    : "Messages accepted it; chat.db is unreadable (Full Disk Access), so delivery is unproven",
-            };
-        },
-    };
-}
-export function createEmailChannel(options) {
-    return {
-        key: "email",
-        label: `Email to ${options.to}`,
-        async send(message) {
-            if (message.severity !== "blocking") {
-                return { channel: "email", outcome: "skipped", detail: "not a blocking incident" };
-            }
-            try {
-                const ok = await options.send({
-                    to: options.to,
-                    subject: message.subject,
-                    text: message.text,
-                    html: message.html ?? `<pre>${escapeHtml(message.text)}</pre>`,
-                    template: "fleet.incident",
-                });
-                return ok
-                    ? { channel: "email", outcome: "delivered", detail: "accepted by the mailer" }
-                    : {
-                        channel: "email",
-                        outcome: "failed",
-                        detail: options.unavailableHint ?? "the mailer declined to send",
-                    };
-            }
-            catch (err) {
-                return {
-                    channel: "email",
-                    outcome: "failed",
-                    detail: err instanceof Error ? err.message.slice(0, 200) : String(err),
-                };
-            }
-        },
-    };
-}
-/**
- * Email, sent by SOMEBODY ELSE. The Mac cannot reach SES (see the module
- * header), and the prod box can — so the local console hands the message to the
- * prod console over the wire the two already share.
- *
- * 🔴 It is a fallback and never the only path. The failure mode it cannot cover
- * is the one where prod is down, which is precisely when an alert matters most —
- * that case belongs to the text channel, which runs entirely on this Mac.
- */
-export function createRelayEmailChannel(options) {
-    const doFetch = options.fetchImpl ?? fetch;
-    return {
-        key: "email",
-        label: "Email (relayed through the prod console)",
-        async send(message) {
-            if (message.severity !== "blocking") {
-                return { channel: "email", outcome: "skipped", detail: "not a blocking incident" };
-            }
-            try {
-                const res = await doFetch(options.url, {
-                    method: "POST",
-                    headers: {
-                        "content-type": "application/json",
-                        authorization: `Bearer ${options.token}`,
-                        ...(options.edgeHeaders?.() ?? {}),
-                    },
-                    body: JSON.stringify({
-                        subject: message.subject,
-                        text: message.text,
-                        html: message.html,
-                    }),
-                    // 🔴 `manual`, so an edge redirect is a FAILURE rather than a
-                    // successful fetch of a login page. Following it is what turned an
-                    // Access refusal into a 200 and a wrong diagnosis.
-                    redirect: "manual",
-                    signal: AbortSignal.timeout(options.timeoutMs ?? 15_000),
-                });
-                if (res.status >= 300 && res.status < 400) {
-                    return {
-                        channel: "email",
-                        outcome: "failed",
-                        detail: `the request was redirected (${res.status}) before it reached the console — ` +
-                            "an edge access gate is refusing it, so the service-token headers are missing or expired",
-                    };
-                }
-                if (!res.ok) {
-                    return {
-                        channel: "email",
-                        outcome: "failed",
-                        detail: `the prod console answered ${res.status}`,
-                    };
-                }
-                const body = (await res.json().catch(() => null));
-                return body?.sent
-                    ? { channel: "email", outcome: "delivered", detail: "sent by the prod console" }
-                    : {
-                        channel: "email",
-                        outcome: "failed",
-                        // The relaying host is the only one that knows why, so it says so.
-                        detail: body?.reason
-                            ? `the prod console could not send it: ${body.reason}`
-                            : "the prod console accepted the request but its mailer declined, and gave no reason",
-                    };
-            }
-            catch (err) {
-                return {
-                    channel: "email",
-                    outcome: "failed",
-                    detail: `could not reach the prod console: ${err instanceof Error ? err.message.slice(0, 160) : String(err)}`,
-                };
-            }
-        },
-    };
-}
-// ── in-app ────────────────────────────────────────────────────────────────────
-/**
- * The in-app channel is the fleet's EXISTING notification primitive
- * (`cursedbelt/server/notifications` over `cwip/notifications`), not a second
- * inbox. Pass its `notify` and the incident's fingerprint becomes the
- * notification's `groupKey`, so the database's partial unique index coalesces
- * repeats for free — the same guarantee the store makes, enforced a second time
- * one layer down.
- */
-export function createInAppChannel(options) {
-    return {
-        key: "in-app",
-        label: "The console's notification bell",
-        async send(message) {
-            try {
-                await options.notify({
-                    title: message.subject,
-                    body: message.text,
-                    groupKey: options.groupKeyOf(message),
-                    severity: message.severity,
-                });
-                return { channel: "in-app", outcome: "delivered", detail: "filed in the inbox" };
-            }
-            catch (err) {
-                return {
-                    channel: "in-app",
-                    outcome: "failed",
-                    detail: err instanceof Error ? err.message.slice(0, 200) : String(err),
-                };
-            }
-        },
-    };
-}
-const escapeHtml = (s) => s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
-//# sourceMappingURL=channels.js.map

package/dist/server/incidents/channels.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../../src/server/incidents/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAqCH,iFAAiF;AAEjF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;QAgBZ,CAAC;AAET;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACJ,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,QAAQ,CACtB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,eAAe,EAAE,QAAQ,CAAC,EAC5E,EAAE,QAAQ,EAAE,IAAI,EAAE,CAClB,CAAC;QACF,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,EAAE;iBACZ,OAAO,CACP;;;;0CAIqC,CACrC;iBACA,GAAG,EAAmC,CAAC;YACzC,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,CAAC;gBAAS,CAAC;YACV,EAAE,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,6EAA6E;AAC7E,MAAM,oBAAoB,GAAG,WAAW,CAAC;AACzC,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,oBAAoB,CAAC,GAAG,GAAG,CAAC;AAiBpF,MAAM,WAAW,GAAG,KAAK,EACxB,MAAc,EACd,IAAY,EAC+B,EAAE;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QACxD,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;QAC5C,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,MAAM;KACd,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;QAChC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;QAChC,IAAI,CAAC,MAAM;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QAChB,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,qEAAqE;QACrE,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,kDAAkD;QAClD,MAAM,YAAY,GACjB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC5C,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EACL,QAAQ,KAAK,QAAQ;oBACpB,CAAC,CAAC,8LAA8L;oBAChM,CAAC,CAAC,+NAA+N;aACnO,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,OAAO,GAAG,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,cAAsB,EAA2B,EAAE;IAClF,IAAI,CAAC;QACJ,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,oEAAoE;QACpE,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE;YAC1E,QAAQ,EAAE,IAAI;SACd,CAAC,CAAC;QACH,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,EAAE;iBACZ,OAAO,CACP,qFAAqF,CACrF;iBACA,GAAG,CAAC,cAAc,CAAyB,CAAC;YAC9C,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACV,EAAE,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,wEAAwE;QACxE,4EAA4E;QAC5E,qCAAqC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IAElD,OAAO;QACN,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,uCAAuC;QAC9C,KAAK,CAAC,IAAI,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACrC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YACnF,CAAC;YACD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAEvF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,cAAc,GAAG,IAAI,CAAC;YAC1B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACrB,cAAc,GAAG,KAAK,CAAC;oBACvB,MAAM;gBACP,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;gBACnF,CAAC;gBACD,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,cAAc;oBACrB,CAAC,CAAC,wDAAwD,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;oBACzF,CAAC,CAAC,yFAAyF;aAC5F,CAAC;QACH,CAAC;KACD,CAAC;AACH,CAAC;AAyBD,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC9D,OAAO;QACN,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,YAAY,OAAO,CAAC,EAAE,EAAE;QAC/B,KAAK,CAAC,IAAI,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YACpF,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;oBAC7B,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,QAAQ,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;oBAC9D,QAAQ,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;gBACH,OAAO,EAAE;oBACR,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,wBAAwB,EAAE;oBAC9E,CAAC,CAAC;wBACA,OAAO,EAAE,OAAO;wBAChB,OAAO,EAAE,QAAQ;wBACjB,MAAM,EAAE,OAAO,CAAC,eAAe,IAAI,6BAA6B;qBAChE,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO;oBACN,OAAO,EAAE,OAAO;oBAChB,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACtE,CAAC;YACH,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAoBvC;IACA,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,OAAO;QACN,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,0CAA0C;QACjD,KAAK,CAAC,IAAI,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YACpF,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;oBACtC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACR,cAAc,EAAE,kBAAkB;wBAClC,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;wBACxC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC;qBAClC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;qBAClB,CAAC;oBACF,8DAA8D;oBAC9D,mEAAmE;oBACnE,mDAAmD;oBACnD,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;iBACxD,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBAC3C,OAAO;wBACN,OAAO,EAAE,OAAO;wBAChB,OAAO,EAAE,QAAQ;wBACjB,MAAM,EACL,+BAA+B,GAAG,CAAC,MAAM,oCAAoC;4BAC7E,yFAAyF;qBAC1F,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACb,OAAO;wBACN,OAAO,EAAE,OAAO;wBAChB,OAAO,EAAE,QAAQ;wBACjB,MAAM,EAAE,6BAA6B,GAAG,CAAC,MAAM,EAAE;qBACjD,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAGxC,CAAC;gBACT,OAAO,IAAI,EAAE,IAAI;oBAChB,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,0BAA0B,EAAE;oBAChF,CAAC,CAAC;wBACA,OAAO,EAAE,OAAO;wBAChB,OAAO,EAAE,QAAQ;wBACjB,mEAAmE;wBACnE,MAAM,EAAE,IAAI,EAAE,MAAM;4BACnB,CAAC,CAAC,uCAAuC,IAAI,CAAC,MAAM,EAAE;4BACtD,CAAC,CAAC,mFAAmF;qBACtF,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO;oBACN,OAAO,EAAE,OAAO;oBAChB,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,qCACP,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAC9D,EAAE;iBACF,CAAC;YACH,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OASlC;IACA,OAAO;QACN,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,iCAAiC;QACxC,KAAK,CAAC,IAAI,CAAC,OAAO;YACjB,IAAI,CAAC;gBACJ,MAAM,OAAO,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,OAAO,CAAC,OAAO;oBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;oBACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC1B,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;YAClF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO;oBACN,OAAO,EAAE,QAAQ;oBACjB,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACtE,CAAC;YACH,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CACxC,CAAC,CAAC,OAAO,CACR,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CACL,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAW,CACvF,CAAC"}

package/dist/server/incidents/checks.d.ts

@@ -1,62 +0,0 @@
-/**
- * The check contract and the sweep that runs it.
- *
- * A check is a pure-ish function from "the machine" to "the conditions that are
- * true right now". It does not know whether any of them are new, it never
- * notifies, and it cannot resolve anything — all three belong to the store, so
- * that one implementation of the dedupe rule covers every detector anybody adds
- * later. Adding a detector is therefore a function and a row, not a design.
- *
- * ── 🔴 A check that FAILS resolves nothing ──────────────────────────────────
- * This is the invariant the whole feature's credibility rests on. If a detector
- * throws — its command is missing, the disk it stats is unmounted, a fetch times
- * out — the sweep records the failure and SKIPS the reconcile for that check.
- * Reconciling would have handed the store an empty report set, and an empty
- * report set from an authoritative check means "all clear", which would send the
- * owner a cheerful "cleared: production is down" the moment the detector broke.
- * The same reasoning applies one level up, in `runIncidentSweep`'s return value:
- * a sweep reports its own failures so the console can show a detector that has
- * stopped working, rather than showing an empty incident list and looking calm.
- */
-import type { IncidentStore } from "./store";
-import type { IncidentReport, IncidentTransitions } from "./types";
-export interface IncidentCheck {
-    /** Stable key. Owns every incident it has ever opened — see `reconcile`. */
-    readonly key: string;
-    /** The app or service this check speaks for: `binary-server`, `station`, `orch`. */
-    readonly source: string;
-    /**
-     * Every `kind` this check can produce. Declaring them is what lets a run that
-     * finds nothing RESOLVE its own past incidents — see `ReconcileOptions`.
-     * A kind missing from this list can be opened but never automatically cleared,
-     * so the list is not optional decoration.
-     */
-    readonly kinds: readonly string[];
-    /** Human name, for the console's detector table. */
-    readonly label: string;
-    run: () => Promise<IncidentReport[]> | IncidentReport[];
-}
-export interface CheckOutcome {
-    key: string;
-    label: string;
-    /** `ok` when it ran, whatever it found. `failed` when it threw. */
-    status: "ok" | "failed";
-    reported: number;
-    durationMs: number;
-    error?: string;
-}
-export interface SweepResult {
-    at: number;
-    outcomes: CheckOutcome[];
-    transitions: IncidentTransitions;
-}
-/**
- * Run every check once, reconcile each one's results independently, and return
- * the union of the transitions plus a per-check outcome.
- *
- * Checks run in PARALLEL (they are mostly I/O — a stat, a fetch, a sqlite read)
- * but reconcile in SERIES against one sqlite handle, which keeps the store's
- * writes single-threaded without needing a transaction across unrelated checks.
- */
-export declare function runIncidentSweep(store: IncidentStore, checks: readonly IncidentCheck[], now?: number): Promise<SweepResult>;
-//# sourceMappingURL=checks.d.ts.map

package/dist/server/incidents/checks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../src/server/incidents/checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,YAAY;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,WAAW,EAAE,mBAAmB,CAAC;CACjC;AASD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACrC,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,SAAS,aAAa,EAAE,EAChC,GAAG,GAAE,MAAmB,GACtB,OAAO,CAAC,WAAW,CAAC,CA4CtB"}

package/dist/server/incidents/checks.js

@@ -1,56 +0,0 @@
-const emptyTransitions = () => ({
-    opened: [],
-    escalated: [],
-    resolved: [],
-    unchanged: [],
-});
-/**
- * Run every check once, reconcile each one's results independently, and return
- * the union of the transitions plus a per-check outcome.
- *
- * Checks run in PARALLEL (they are mostly I/O — a stat, a fetch, a sqlite read)
- * but reconcile in SERIES against one sqlite handle, which keeps the store's
- * writes single-threaded without needing a transaction across unrelated checks.
- */
-export async function runIncidentSweep(store, checks, now = Date.now()) {
-    const settled = await Promise.all(checks.map(async (check) => {
-        const started = Date.now();
-        try {
-            const reports = await check.run();
-            return { check, reports, error: null, durationMs: Date.now() - started };
-        }
-        catch (err) {
-            return {
-                check,
-                reports: [],
-                error: err instanceof Error ? err.message.slice(0, 300) : String(err),
-                durationMs: Date.now() - started,
-            };
-        }
-    }));
-    const transitions = emptyTransitions();
-    const outcomes = [];
-    for (const { check, reports, error, durationMs } of settled) {
-        outcomes.push({
-            key: check.key,
-            label: check.label,
-            status: error ? "failed" : "ok",
-            reported: reports.length,
-            durationMs,
-            ...(error ? { error } : {}),
-        });
-        // The invariant in the header: a failed check reconciles nothing at all.
-        if (error)
-            continue;
-        const t = store.reconcile(check.key, reports, {
-            namespaces: check.kinds.map((k) => `${check.source}:${k}:`),
-            now,
-        });
-        transitions.opened.push(...t.opened);
-        transitions.escalated.push(...t.escalated);
-        transitions.resolved.push(...t.resolved);
-        transitions.unchanged.push(...t.unchanged);
-    }
-    return { at: now, outcomes, transitions };
-}
-//# sourceMappingURL=checks.js.map

package/dist/server/incidents/checks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../../src/server/incidents/checks.ts"],"names":[],"mappings":"AAwDA,MAAM,gBAAgB,GAAG,GAAwB,EAAE,CAAC,CAAC;IACpD,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,EAAE;CACb,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,KAAoB,EACpB,MAAgC,EAChC,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAqB,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO;gBACN,KAAK;gBACL,OAAO,EAAE,EAAsB;gBAC/B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACrE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aAChC,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CACF,CAAC;IAEF,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,OAAO,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3B,CAAC,CAAC;QACH,yEAAyE;QACzE,IAAI,KAAK;YAAE,SAAS;QAEpB,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE;YAC7C,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC;YAC3D,GAAG;SACH,CAAC,CAAC;QACH,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3C,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAC3C,CAAC"}

package/dist/server/incidents/index.d.ts

@@ -1,52 +0,0 @@
-/**
- * `cursedbelt/server/incidents` — the fleet's ONE owner-alert primitive: a
- * condition that is true for a while, told to the owner exactly once, and told
- * to him again when it clears.
- *
- * ── Why it exists (the owner, 2026-08-13) ───────────────────────────────────
- * *"I found out from an agent my collection uploads were stuck … there are
- * probably all kinds of possible problems I miss over time, such as every orch
- * task failing to deploy and live sites falling over 10 commits behind."*
- * The incident behind it: 42 videos / 35 GB sat in the collections dropzone and
- * every scheduled ingest failed all 42 with EPIPE against binary-server, while
- * binary-server logged that it was under its 12 GB disk reserve — and the
- * dropzone deletes originals once they reach the catalog. Nothing told him. Two
- * separate deterministic checks would each have caught it on the first run.
- *
- * ── Why it is HERE and not in `satellite-kit` ───────────────────────────────
- * The queued task suggested satellite-kit ("beside the metrics buffer"), and
- * that would have been wrong for one measurable reason: **binary-server is one
- * of the three apps the owner named, it is a different repo, and it depends on
- * `cursedbelt` and `cwip` — not on satellite-kit.** Putting the engine in the
- * kit would have meant bs either growing its own copy or growing a dependency on
- * the satellites' internal kit, and the first of those is the drift this whole
- * queue exists to end. The fleet-shaped DETECTORS (the deploy ledger, launchd,
- * backups) are satellite-shaped and do live in the kit; the engine is here.
- *
- * ── The four pieces ─────────────────────────────────────────────────────────
- *  - {@link createIncidentStore} — one row per condition, and `reconcile`, which
- *    is the entire dedupe guarantee. Nothing else in the system decides whether
- *    something is new.
- *  - {@link runIncidentSweep} — runs checks; a check that THROWS resolves
- *    nothing, so a broken detector can never announce that an outage is over.
- *  - channels — in-app (the fleet's existing notification centre), email, and a
- *    text message from this Mac that reads `chat.db` back to prove it left.
- *  - {@link createIncidentNotifier} — composes the three-sentence message and
- *    sends it on OPEN, on ESCALATE and on RESOLVE. Never on an observation.
- *
- * ```ts
- * const store = createIncidentStore(db);
- * const notifier = createIncidentNotifier({ store, channels });
- * const result = await runIncidentSweep(store, checks);
- * await notifier.announce(result.transitions);   // usually sends nothing
- * ```
- */
-export { type ChannelMessage, type ChannelOutcome, type ChannelResult, createEmailChannel, createInAppChannel, createRelayEmailChannel, createTextChannel, type EmailChannelOptions, type IncidentChannel, type SendEmail, type TextChannelOptions, } from "./channels";
-export { type CheckOutcome, type IncidentCheck, runIncidentSweep, type SweepResult, } from "./checks";
-export { INCIDENT_MIGRATIONS, INCIDENTS_TABLE } from "./migrations";
-export { type AnnounceResult, composeOpened, composeResolved, type CreateNotifierOptions, createIncidentNotifier, type IncidentNotifier, } from "./notifier";
-export { createIncidentReporter, type IncidentReporter, type IncidentReporterOptions, } from "./reporter";
-export { type IncidentRoutesOptions, mountIncidentMachineRoutes, mountIncidentOwnerRoutes, } from "./routes";
-export { assertNoContent, createIncidentStore, type IncidentStore, type ReconcileOptions, } from "./store";
-export { fingerprint, type Incident, type IncidentFact, type IncidentReport, type IncidentSeverity, type IncidentState, type IncidentTransitions, } from "./types";
-//# sourceMappingURL=index.d.ts.map

package/dist/server/incidents/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/incidents/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,kBAAkB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,WAAW,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACN,KAAK,cAAc,EACnB,aAAa,EACb,eAAe,EACf,KAAK,qBAAqB,EAC1B,sBAAsB,EACtB,KAAK,gBAAgB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,KAAK,qBAAqB,EAC1B,0BAA0B,EAC1B,wBAAwB,GACxB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACrB,MAAM,SAAS,CAAC;AACjB,OAAO,EACN,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,mBAAmB,GACxB,MAAM,SAAS,CAAC"}

package/dist/server/incidents/index.js

@@ -1,52 +0,0 @@
-/**
- * `cursedbelt/server/incidents` — the fleet's ONE owner-alert primitive: a
- * condition that is true for a while, told to the owner exactly once, and told
- * to him again when it clears.
- *
- * ── Why it exists (the owner, 2026-08-13) ───────────────────────────────────
- * *"I found out from an agent my collection uploads were stuck … there are
- * probably all kinds of possible problems I miss over time, such as every orch
- * task failing to deploy and live sites falling over 10 commits behind."*
- * The incident behind it: 42 videos / 35 GB sat in the collections dropzone and
- * every scheduled ingest failed all 42 with EPIPE against binary-server, while
- * binary-server logged that it was under its 12 GB disk reserve — and the
- * dropzone deletes originals once they reach the catalog. Nothing told him. Two
- * separate deterministic checks would each have caught it on the first run.
- *
- * ── Why it is HERE and not in `satellite-kit` ───────────────────────────────
- * The queued task suggested satellite-kit ("beside the metrics buffer"), and
- * that would have been wrong for one measurable reason: **binary-server is one
- * of the three apps the owner named, it is a different repo, and it depends on
- * `cursedbelt` and `cwip` — not on satellite-kit.** Putting the engine in the
- * kit would have meant bs either growing its own copy or growing a dependency on
- * the satellites' internal kit, and the first of those is the drift this whole
- * queue exists to end. The fleet-shaped DETECTORS (the deploy ledger, launchd,
- * backups) are satellite-shaped and do live in the kit; the engine is here.
- *
- * ── The four pieces ─────────────────────────────────────────────────────────
- *  - {@link createIncidentStore} — one row per condition, and `reconcile`, which
- *    is the entire dedupe guarantee. Nothing else in the system decides whether
- *    something is new.
- *  - {@link runIncidentSweep} — runs checks; a check that THROWS resolves
- *    nothing, so a broken detector can never announce that an outage is over.
- *  - channels — in-app (the fleet's existing notification centre), email, and a
- *    text message from this Mac that reads `chat.db` back to prove it left.
- *  - {@link createIncidentNotifier} — composes the three-sentence message and
- *    sends it on OPEN, on ESCALATE and on RESOLVE. Never on an observation.
- *
- * ```ts
- * const store = createIncidentStore(db);
- * const notifier = createIncidentNotifier({ store, channels });
- * const result = await runIncidentSweep(store, checks);
- * await notifier.announce(result.transitions);   // usually sends nothing
- * ```
- */
-export { createEmailChannel, createInAppChannel, createRelayEmailChannel, createTextChannel, } from "./channels";
-export { runIncidentSweep, } from "./checks";
-export { INCIDENT_MIGRATIONS, INCIDENTS_TABLE } from "./migrations";
-export { composeOpened, composeResolved, createIncidentNotifier, } from "./notifier";
-export { createIncidentReporter, } from "./reporter";
-export { mountIncidentMachineRoutes, mountIncidentOwnerRoutes, } from "./routes";
-export { assertNoContent, createIncidentStore, } from "./store";
-export { fingerprint, } from "./types";
-//# sourceMappingURL=index.js.map

package/dist/server/incidents/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/incidents/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,EAIN,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,GAKjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAGN,gBAAgB,GAEhB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAEN,aAAa,EACb,eAAe,EAEf,sBAAsB,GAEtB,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,sBAAsB,GAGtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEN,0BAA0B,EAC1B,wBAAwB,GACxB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,eAAe,EACf,mBAAmB,GAGnB,MAAM,SAAS,CAAC;AACjB,OAAO,EACN,WAAW,GAOX,MAAM,SAAS,CAAC"}

package/dist/server/incidents/migrations.d.ts

@@ -1,21 +0,0 @@
-import type { Migration } from "../migration/types";
-/** The one table this primitive owns. */
-export declare const INCIDENTS_TABLE = "incidents";
-/**
- * ONE row per CONDITION, keyed by its fingerprint — not one row per observation.
- *
- * That is the whole dedupe design expressed as a schema: a poller that notices
- * the same broken thing 288 times a day cannot produce 288 rows, because there
- * is nowhere to put them. `seen_count` and `last_seen` absorb the repetition,
- * and the notification columns record that the owner was told ONCE.
- *
- * 🔴 **Never retention-managed.** Every other telemetry table in this package
- * is capped or aged out; this one is not, and must not be declared as a
- * retention target. An incident is the record of something having gone wrong on
- * a fleet whose owner's stated problem is *"I missed this for a long time"* —
- * the row that answers "has this happened before?" six months later is the
- * expensive one to have thrown away. The table is bounded by reality instead:
- * a fingerprint is stable, so a recurring problem re-uses its row forever.
- */
-export declare const INCIDENT_MIGRATIONS: readonly Migration[];
-//# sourceMappingURL=migrations.d.ts.map

package/dist/server/incidents/migrations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/server/incidents/migrations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,yCAAyC;AACzC,eAAO,MAAM,eAAe,cAAc,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,SAAS,EA2CnD,CAAC"}