fluncle 0.234.0 → 0.235.0

package/bin/fluncle.mjs

@@ -622,7 +622,7 @@ function parseVersion(version) {
 var currentVersion;
 var init_version = __esm(() => {
   init_output();
-  currentVersion = "0.234.0".trim() ? "0.234.0".trim() : "0.1.0";
+  currentVersion = "0.235.0".trim() ? "0.235.0".trim() : "0.1.0";
 });
 
 // src/update-notifier.ts
@@ -2335,7 +2335,7 @@ function parseVersion2(version) {
 var currentVersion2, latestReleaseUrl = "https://api.github.com/repos/mauricekleine/fluncle/releases/latest";
 var init_version2 = __esm(() => {
   init_output();
-  currentVersion2 = "0.234.0".trim() ? "0.234.0".trim() : "0.1.0";
+  currentVersion2 = "0.235.0".trim() ? "0.235.0".trim() : "0.1.0";
 });
 
 // ../../packages/registry/src/index.ts
@@ -3059,6 +3059,28 @@ var init_src = __esm(() => {
       url: `${SITE}/robots.txt`,
       weights: { web: "tertiary" }
     },
+    {
+      apiFormat: "text/plain",
+      exposedContent: [
+        "RFC 9116 security.txt — where to send a vulnerability report, in the one place a researcher looks first"
+      ],
+      kind: "discovery",
+      name: "discovery.security-txt",
+      operatorNotes: "A static file, apps/web/public/.well-known/security.txt. It carries an `Expires` field the RFC requires a responder to keep in the future — when it lapses, a reporter reads the contact as stale. No probeConfig, exactly like robots.txt and llms.txt: a static asset the Worker never computes.",
+      route: "/.well-known/security.txt",
+      url: `${SITE}/.well-known/security.txt`,
+      weights: { web: "tertiary" }
+    },
+    {
+      apiFormat: "text/plain",
+      exposedContent: ["humans.txt — who made this, who is thanked, and what it is built with"],
+      kind: "discovery",
+      name: "discovery.humans",
+      operatorNotes: "A static file, apps/web/public/humans.txt — the human counterpart to robots.txt. Machine-fetched by convention, never browsed, which is why it sits under `discovery` beside robots.txt rather than as a web route.",
+      route: "/humans.txt",
+      url: `${SITE}/humans.txt`,
+      weights: { web: "tertiary" }
+    },
     {
       apiFormat: "text/markdown",
       discoveryUrl: `${SITE}/.well-known/api-catalog`,
@@ -3875,7 +3897,7 @@ var init_src = __esm(() => {
       ],
       kind: "cron",
       name: "cron.reconcile-hub-counts",
-      operatorNotes: "04:10 Amsterdam (after the 04:00 reach snapshot, before the 04:40 demand tick), a rave-02 host systemd timer (docs/agents/hermes/reconcile-hub-counts-timer/). The SELF-HEALING BACKSTOP under keystone 2's maintained hub counts: they are moved as DELTAS by every edge-writing path (recompute-from-truth measured 27,400 ms at 150k hosted vs ~200 ms for the delta form), and a maintained counter drifts silently — a missed write path, a non-atomic bulk op, or an out-of-band write (the catalogue-prune skill deletes tracks straight out of the database). Keystone 2's own rollout proved it on day one: the deploy-window skew left 44 artists / 3 albums / 1 label wrong until a manual reconcile. A bare trigger (the funnel-snapshot shape): fires the AGENT-tier reconcile_hub_counts op once and the Worker runs two statements per table — a grouped `UPDATE … FROM (… GROUP BY fk)` guarded by a counts-DIFFER predicate (so rowsAffected IS the corrected-row count) plus a zero-truth pass for an entity whose last track vanished. The artists source is PINNED to `track_artists JOIN tracks` so orphaned edges never count. Idempotent; zero LLM tokens; no new secret. The corrected-row numbers are the operator's DRIFT AUDIT — journalctl -u fluncle-reconcile-hub-counts.service | grep AUDIT. Source: docs/agents/hermes/scripts/reconcile-hub-counts.*.",
+      operatorNotes: "04:10 Amsterdam (after the 04:00 reach snapshot, before the 04:40 demand tick), a rave-02 host systemd timer (docs/agents/hermes/reconcile-hub-counts-timer/). The SELF-HEALING BACKSTOP under keystone 2's maintained hub counts: they are moved as DELTAS by every edge-writing path (recompute-from-truth measured 27,400 ms at 150k hosted vs ~200 ms for the delta form), and a maintained counter drifts silently — a missed write path, a non-atomic bulk op, or an out-of-band write (the catalogue-prune skill deletes tracks straight out of the database). Keystone 2's own rollout proved it on day one: the deploy-window skew left 44 artists / 3 albums / 1 label wrong until a manual reconcile. Walks the AGENT-tier reconcile_hub_counts op in bounded windows, one admitted database phase each: the Worker reads bounded keyset pages of entity rows beside their truth (never an aggregate inside a write transaction) and rewrites only disagreeing rows as compare-and-set point writes, so a concurrent maintained delta is never overwritten. The artists source is PINNED to `track_artists JOIN tracks` so orphaned edges never count. Idempotent; zero LLM tokens; no new secret. The corrected-row numbers are the operator's DRIFT AUDIT — journalctl -u fluncle-reconcile-hub-counts.service | grep AUDIT. Source: docs/agents/hermes/scripts/reconcile-hub-counts.*.",
       probeConfig: {
         cadenceMs: 24 * 60 * MINUTE_MS,
         cronName: "fluncle-reconcile-hub-counts",
@@ -10693,7 +10715,10 @@ var init_admin_artists = __esm(() => {
     path: "/admin/artists/rank",
     summary: "One tick of the similar-artists sweep (artist centroids + top-K edges)",
     tags: ["Admin"]
-  }).input(object({ limit: number3().int().min(1).max(1000).default(50) })).output(object({
+  }).input(object({
+    countRemaining: boolean3().default(false),
+    limit: number3().int().min(1).max(1000).default(50)
+  })).output(object({
     ok: literal(true),
     summary: object({
       centroidsComputed: number2(),
@@ -12282,7 +12307,8 @@ var init_admin_projections = __esm(() => {
     processed: CountSchema,
     scheduled: CountSchema,
     status: ProjectionStatusSchema.optional(),
-    target: ProjectionTargetSchema
+    target: ProjectionTargetSchema,
+    trackSourceMarkersPending: boolean2().optional()
   }));
   setProjectionCutover = oc.route({
     method: "PUT",
@@ -13226,7 +13252,7 @@ var init_admin_operation_receipts = __esm(() => {
 });
 
 // ../../packages/contracts/src/orpc/admin-health.ts
-var HEALTH_SNAPSHOT_PRODUCER_MAX = 64, HEALTH_SNAPSHOT_PRODUCER_PATTERN, ServiceHealthStatusSchema, HealthCheckSchema, recordHealth, adminHealthContract;
+var HEALTH_SNAPSHOT_PRODUCER_MAX = 64, HEALTH_SNAPSHOT_PRODUCER_PATTERN, HEALTH_SNAPSHOT_CHECKS_MAX = 128, HEALTH_SNAPSHOT_SERVICE_MAX = 64, ServiceHealthStatusSchema, HealthCheckSchema, recordHealth, adminHealthContract;
 var init_admin_health = __esm(() => {
   init_dist3();
   init_zod();
@@ -13236,7 +13262,7 @@ var init_admin_health = __esm(() => {
   HealthCheckSchema = object({
     latencyMs: number2().int().nullable(),
     message: string2().nullable(),
-    service: string2().min(1),
+    service: string2().min(1).max(HEALTH_SNAPSHOT_SERVICE_MAX),
     status: ServiceHealthStatusSchema,
     transitioned: boolean2()
   }).meta({ id: "HealthCheck" });
@@ -13248,7 +13274,7 @@ var init_admin_health = __esm(() => {
     tags: ["Admin"]
   }).input(object({
     at: string2().max(64).datetime({ offset: true }),
-    checks: array(HealthCheckSchema),
+    checks: array(HealthCheckSchema).max(HEALTH_SNAPSHOT_CHECKS_MAX),
     operationKey: string2().min(1).max(OPERATION_RECEIPT_KEY_MAX).regex(OPERATION_RECEIPT_KEY_PATTERN).optional(),
     producer: string2().max(HEALTH_SNAPSHOT_PRODUCER_MAX).regex(HEALTH_SNAPSHOT_PRODUCER_PATTERN).optional(),
     requestDigest: string2().regex(OPERATION_RECEIPT_REQUEST_DIGEST_PATTERN).optional()
@@ -13263,24 +13289,34 @@ var init_admin_health = __esm(() => {
 });
 
 // ../../packages/contracts/src/orpc/admin-hub-counts.ts
-var HubCountsTableResultSchema, reconcileHubCounts, adminHubCountsContract;
+var HubCountsTableResultSchema, HubCountsReconcileCursorSchema, reconcileHubCounts, adminHubCountsContract;
 var init_admin_hub_counts = __esm(() => {
   init_dist3();
   init_zod();
   HubCountsTableResultSchema = object({
-    corrected: number2()
+    corrected: number2(),
+    deferred: number2()
   }).meta({ id: "HubCountsTableResult" });
+  HubCountsReconcileCursorSchema = object({
+    afterId: string2().min(1).max(512).nullable(),
+    table: _enum(["labels", "albums", "artists"])
+  }).meta({ id: "HubCountsReconcileCursor" });
   reconcileHubCounts = oc.route({
     method: "POST",
     operationId: "reconcileHubCounts",
     path: "/admin/hub-counts/reconcile",
     summary: "Reconcile the maintained hub counts against truth and report the corrected rows",
     tags: ["Admin"]
-  }).input(object({})).output(object({
+  }).input(object({
+    cursor: HubCountsReconcileCursorSchema.optional(),
+    pageLimit: number2().int().min(1).max(20).optional()
+  })).output(object({
     albums: HubCountsTableResultSchema,
     artists: HubCountsTableResultSchema,
     labels: HubCountsTableResultSchema,
+    next: HubCountsReconcileCursorSchema.nullable(),
     ok: literal(true),
+    pages: number2(),
     tookMs: number2()
   }));
   adminHubCountsContract = {
@@ -18601,7 +18637,10 @@ async function resolveArtistCommand(artistId) {
 }
 async function rankArtistsCommand(options) {
   const limit = options.limit ? Number.parseInt(options.limit, 10) : undefined;
-  const response = await adminApiPost("/api/v1/admin/artists/rank", limit ? { limit } : {});
+  const response = await adminApiPost("/api/v1/admin/artists/rank", {
+    ...limit ? { limit } : {},
+    ...options.countRemaining ? { countRemaining: true } : {}
+  });
   return { summary: response.summary };
 }
 async function backfillArtistImagesCommand(limit, dryRun, cursor) {
@@ -24529,7 +24568,10 @@ async function runGalaxies(slug, options, commands) {
   }
 }
 async function runArtistsRank(options, rankArtistsCommand) {
-  const { summary } = await rankArtistsCommand({ limit: options.limit });
+  const { summary } = await rankArtistsCommand({
+    countRemaining: !options.json,
+    limit: options.limit
+  });
   if (options.json) {
     printJson({ ok: true, summary });
     return;

package/package.json

@@ -31,5 +31,5 @@
     "url": "git+https://github.com/mauricekleine/fluncle.git"
   },
   "type": "module",
-  "version": "0.234.0"
+  "version": "0.235.0"
 }