fluncle 0.234.0 → 0.236.0

package/bin/fluncle.mjs

@@ -622,7 +622,7 @@ function parseVersion(version) {
 var currentVersion;
 var init_version = __esm(() => {
   init_output();
-  currentVersion = "0.234.0".trim() ? "0.234.0".trim() : "0.1.0";
+  currentVersion = "0.236.0".trim() ? "0.236.0".trim() : "0.1.0";
 });
 
 // src/update-notifier.ts
@@ -2335,7 +2335,7 @@ function parseVersion2(version) {
 var currentVersion2, latestReleaseUrl = "https://api.github.com/repos/mauricekleine/fluncle/releases/latest";
 var init_version2 = __esm(() => {
   init_output();
-  currentVersion2 = "0.234.0".trim() ? "0.234.0".trim() : "0.1.0";
+  currentVersion2 = "0.236.0".trim() ? "0.236.0".trim() : "0.1.0";
 });
 
 // ../../packages/registry/src/index.ts
@@ -3059,6 +3059,28 @@ var init_src = __esm(() => {
       url: `${SITE}/robots.txt`,
       weights: { web: "tertiary" }
     },
+    {
+      apiFormat: "text/plain",
+      exposedContent: [
+        "RFC 9116 security.txt — where to send a vulnerability report, in the one place a researcher looks first"
+      ],
+      kind: "discovery",
+      name: "discovery.security-txt",
+      operatorNotes: "A static file, apps/web/public/.well-known/security.txt. It carries an `Expires` field the RFC requires a responder to keep in the future — when it lapses, a reporter reads the contact as stale. No probeConfig, exactly like robots.txt and llms.txt: a static asset the Worker never computes.",
+      route: "/.well-known/security.txt",
+      url: `${SITE}/.well-known/security.txt`,
+      weights: { web: "tertiary" }
+    },
+    {
+      apiFormat: "text/plain",
+      exposedContent: ["humans.txt — who made this, who is thanked, and what it is built with"],
+      kind: "discovery",
+      name: "discovery.humans",
+      operatorNotes: "A static file, apps/web/public/humans.txt — the human counterpart to robots.txt. Machine-fetched by convention, never browsed, which is why it sits under `discovery` beside robots.txt rather than as a web route.",
+      route: "/humans.txt",
+      url: `${SITE}/humans.txt`,
+      weights: { web: "tertiary" }
+    },
     {
       apiFormat: "text/markdown",
       discoveryUrl: `${SITE}/.well-known/api-catalog`,
@@ -3875,7 +3897,7 @@ var init_src = __esm(() => {
       ],
       kind: "cron",
       name: "cron.reconcile-hub-counts",
-      operatorNotes: "04:10 Amsterdam (after the 04:00 reach snapshot, before the 04:40 demand tick), a rave-02 host systemd timer (docs/agents/hermes/reconcile-hub-counts-timer/). The SELF-HEALING BACKSTOP under keystone 2's maintained hub counts: they are moved as DELTAS by every edge-writing path (recompute-from-truth measured 27,400 ms at 150k hosted vs ~200 ms for the delta form), and a maintained counter drifts silently — a missed write path, a non-atomic bulk op, or an out-of-band write (the catalogue-prune skill deletes tracks straight out of the database). Keystone 2's own rollout proved it on day one: the deploy-window skew left 44 artists / 3 albums / 1 label wrong until a manual reconcile. A bare trigger (the funnel-snapshot shape): fires the AGENT-tier reconcile_hub_counts op once and the Worker runs two statements per table — a grouped `UPDATE … FROM (… GROUP BY fk)` guarded by a counts-DIFFER predicate (so rowsAffected IS the corrected-row count) plus a zero-truth pass for an entity whose last track vanished. The artists source is PINNED to `track_artists JOIN tracks` so orphaned edges never count. Idempotent; zero LLM tokens; no new secret. The corrected-row numbers are the operator's DRIFT AUDIT — journalctl -u fluncle-reconcile-hub-counts.service | grep AUDIT. Source: docs/agents/hermes/scripts/reconcile-hub-counts.*.",
+      operatorNotes: "04:10 Amsterdam (after the 04:00 reach snapshot, before the 04:40 demand tick), a rave-02 host systemd timer (docs/agents/hermes/reconcile-hub-counts-timer/). The SELF-HEALING BACKSTOP under keystone 2's maintained hub counts: they are moved as DELTAS by every edge-writing path (recompute-from-truth measured 27,400 ms at 150k hosted vs ~200 ms for the delta form), and a maintained counter drifts silently — a missed write path, a non-atomic bulk op, or an out-of-band write (the catalogue-prune skill deletes tracks straight out of the database). Keystone 2's own rollout proved it on day one: the deploy-window skew left 44 artists / 3 albums / 1 label wrong until a manual reconcile. Walks the AGENT-tier reconcile_hub_counts op in bounded windows, one admitted database phase each: the Worker reads bounded keyset pages of entity rows beside their truth (never an aggregate inside a write transaction) and rewrites only disagreeing rows as compare-and-set point writes, so a concurrent maintained delta is never overwritten. The artists source is PINNED to `track_artists JOIN tracks` so orphaned edges never count. Idempotent; zero LLM tokens; no new secret. The corrected-row numbers are the operator's DRIFT AUDIT — journalctl -u fluncle-reconcile-hub-counts.service | grep AUDIT. Source: docs/agents/hermes/scripts/reconcile-hub-counts.*.",
       probeConfig: {
         cadenceMs: 24 * 60 * MINUTE_MS,
         cronName: "fluncle-reconcile-hub-counts",
@@ -10693,7 +10715,10 @@ var init_admin_artists = __esm(() => {
     path: "/admin/artists/rank",
     summary: "One tick of the similar-artists sweep (artist centroids + top-K edges)",
     tags: ["Admin"]
-  }).input(object({ limit: number3().int().min(1).max(1000).default(50) })).output(object({
+  }).input(object({
+    countRemaining: boolean3().default(false),
+    limit: number3().int().min(1).max(1000).default(50)
+  })).output(object({
     ok: literal(true),
     summary: object({
       centroidsComputed: number2(),
@@ -11408,7 +11433,7 @@ var init_admin_bios = __esm(() => {
 });
 
 // ../../packages/contracts/src/orpc/admin-catalogue.ts
-var CatalogueLensSchema, CapturePriorityReasonSchema, CatalogueMatchSchema, CatalogueTrackItemSchema, CatalogueSummarySchema, listCatalogueTracks, rankCatalogue, recordDemand, clearWrongAudio, requeueUnmatchedCaptures, requeueAnchor, flagWrongAudio, forceCapture, certifyTrack, setTrackDismissed, CaptureVerifyItemSchema, listUnverifiedCaptures, verifyCapture, CrawlPassSchema, CrawlPhaseInitializationSchema, CrawlPhaseInputSchema, CrawlPhaseOutputSchema, CrawlStatusSchema, crawlCatalogue, getCrawlStatus, ANCHOR_CANDIDATE_LIMIT = 100, ANCHOR_ARTIST_LIMIT = 20, ANCHOR_TEXT_MAX = 300, ANCHOR_ISRC_MAX = 64, ANCHOR_ID_MAX = 64, ANCHOR_URL_MAX = 2048, AnchorCandidateSchema, anchorTrack, DEEZER_CANDIDATE_LIMIT = 5, DEEZER_TEXT_MAX = 300, DEEZER_ISRC_MAX = 64, DEEZER_TRACK_ID_MAX = 32, DeezerIsrcCandidateSchema, resolveAnchor, resolveAnchorReview, setAnchorSearch, setAnchorApify, CaptureBudgetStateSchema, getCaptureBudget, setCaptureBudget, SpotifyAnchorBreakerStateSchema, getSpotifyAnchorBreaker, resetSpotifyAnchorBreaker, AppleBreakerStateSchema, resetAppleBreaker, adminCatalogueContract;
+var CatalogueLensSchema, CapturePriorityReasonSchema, CatalogueMatchSchema, CatalogueTrackItemSchema, CatalogueSummarySchema, listCatalogueTracks, rankCatalogue, recordDemand, clearWrongAudio, requeueUnmatchedCaptures, requeueAnchor, requeueIsrcRecovery, flagWrongAudio, forceCapture, certifyTrack, setTrackDismissed, CaptureVerifyItemSchema, listUnverifiedCaptures, verifyCapture, CrawlPassSchema, CrawlPhaseInitializationSchema, CrawlPhaseInputSchema, CrawlPhaseOutputSchema, CrawlStatusSchema, crawlCatalogue, getCrawlStatus, ANCHOR_CANDIDATE_LIMIT = 100, ANCHOR_ARTIST_LIMIT = 20, ANCHOR_TEXT_MAX = 300, ANCHOR_ISRC_MAX = 64, ANCHOR_ID_MAX = 64, ANCHOR_URL_MAX = 2048, AnchorCandidateSchema, anchorTrack, DEEZER_CANDIDATE_LIMIT = 5, DEEZER_TEXT_MAX = 300, DEEZER_ISRC_MAX = 64, DEEZER_TRACK_ID_MAX = 32, DeezerIsrcCandidateSchema, resolveAnchor, resolveAnchorReview, setAnchorSearch, setAnchorApify, CaptureBudgetStateSchema, getCaptureBudget, setCaptureBudget, SpotifyAnchorBreakerStateSchema, getSpotifyAnchorBreaker, resetSpotifyAnchorBreaker, AppleBreakerStateSchema, resetAppleBreaker, adminCatalogueContract;
 var init_admin_catalogue = __esm(() => {
   init_dist3();
   init_zod();
@@ -11537,6 +11562,21 @@ var init_admin_catalogue = __esm(() => {
     summary: "Clear named rows' anchor re-ask backoff so the next tick retries them (operator)",
     tags: ["Admin"]
   }).input(object({ trackIds: array(string2().min(1)).min(1).max(250) })).output(object({ ok: literal(true), requeued: number2() }));
+  requeueIsrcRecovery = oc.route({
+    method: "POST",
+    operationId: "requeueIsrcRecovery",
+    path: "/admin/catalogue/isrc-recovery/requeue",
+    summary: "Clear Deezer-empty ISRC-recovery stamps from a named window (operator)",
+    tags: ["Admin"]
+  }).input(object({
+    dryRun: boolean2().default(true),
+    since: string2().regex(/^\d{4}-\d{2}-\d{2}(T\d{2}:\d{2}:\d{2}(\.\d{1,3})?Z)?$/, "since must be an ISO date (2026-09-09) or instant (2026-09-09T00:00:00.000Z)")
+  })).output(object({
+    dryRun: boolean2(),
+    matched: number2(),
+    ok: literal(true),
+    requeued: number2()
+  }));
   flagWrongAudio = oc.route({
     method: "POST",
     operationId: "flagWrongAudio",
@@ -11909,6 +11949,7 @@ var init_admin_catalogue = __esm(() => {
     rank_catalogue: rankCatalogue,
     record_demand: recordDemand,
     requeue_anchor: requeueAnchor,
+    requeue_isrc_recovery: requeueIsrcRecovery,
     requeue_unmatched_captures: requeueUnmatchedCaptures,
     reset_apple_breaker: resetAppleBreaker,
     reset_spotify_anchor_breaker: resetSpotifyAnchorBreaker,
@@ -12282,7 +12323,8 @@ var init_admin_projections = __esm(() => {
     processed: CountSchema,
     scheduled: CountSchema,
     status: ProjectionStatusSchema.optional(),
-    target: ProjectionTargetSchema
+    target: ProjectionTargetSchema,
+    trackSourceMarkersPending: boolean2().optional()
   }));
   setProjectionCutover = oc.route({
     method: "PUT",
@@ -13226,7 +13268,7 @@ var init_admin_operation_receipts = __esm(() => {
 });
 
 // ../../packages/contracts/src/orpc/admin-health.ts
-var HEALTH_SNAPSHOT_PRODUCER_MAX = 64, HEALTH_SNAPSHOT_PRODUCER_PATTERN, ServiceHealthStatusSchema, HealthCheckSchema, recordHealth, adminHealthContract;
+var HEALTH_SNAPSHOT_PRODUCER_MAX = 64, HEALTH_SNAPSHOT_PRODUCER_PATTERN, HEALTH_SNAPSHOT_CHECKS_MAX = 128, HEALTH_SNAPSHOT_SERVICE_MAX = 64, ServiceHealthStatusSchema, HealthCheckSchema, recordHealth, adminHealthContract;
 var init_admin_health = __esm(() => {
   init_dist3();
   init_zod();
@@ -13236,7 +13278,7 @@ var init_admin_health = __esm(() => {
   HealthCheckSchema = object({
     latencyMs: number2().int().nullable(),
     message: string2().nullable(),
-    service: string2().min(1),
+    service: string2().min(1).max(HEALTH_SNAPSHOT_SERVICE_MAX),
     status: ServiceHealthStatusSchema,
     transitioned: boolean2()
   }).meta({ id: "HealthCheck" });
@@ -13248,7 +13290,7 @@ var init_admin_health = __esm(() => {
     tags: ["Admin"]
   }).input(object({
     at: string2().max(64).datetime({ offset: true }),
-    checks: array(HealthCheckSchema),
+    checks: array(HealthCheckSchema).max(HEALTH_SNAPSHOT_CHECKS_MAX),
     operationKey: string2().min(1).max(OPERATION_RECEIPT_KEY_MAX).regex(OPERATION_RECEIPT_KEY_PATTERN).optional(),
     producer: string2().max(HEALTH_SNAPSHOT_PRODUCER_MAX).regex(HEALTH_SNAPSHOT_PRODUCER_PATTERN).optional(),
     requestDigest: string2().regex(OPERATION_RECEIPT_REQUEST_DIGEST_PATTERN).optional()
@@ -13263,24 +13305,34 @@ var init_admin_health = __esm(() => {
 });
 
 // ../../packages/contracts/src/orpc/admin-hub-counts.ts
-var HubCountsTableResultSchema, reconcileHubCounts, adminHubCountsContract;
+var HubCountsTableResultSchema, HubCountsReconcileCursorSchema, reconcileHubCounts, adminHubCountsContract;
 var init_admin_hub_counts = __esm(() => {
   init_dist3();
   init_zod();
   HubCountsTableResultSchema = object({
-    corrected: number2()
+    corrected: number2(),
+    deferred: number2()
   }).meta({ id: "HubCountsTableResult" });
+  HubCountsReconcileCursorSchema = object({
+    afterId: string2().min(1).max(512).nullable(),
+    table: _enum(["labels", "albums", "artists"])
+  }).meta({ id: "HubCountsReconcileCursor" });
   reconcileHubCounts = oc.route({
     method: "POST",
     operationId: "reconcileHubCounts",
     path: "/admin/hub-counts/reconcile",
     summary: "Reconcile the maintained hub counts against truth and report the corrected rows",
     tags: ["Admin"]
-  }).input(object({})).output(object({
+  }).input(object({
+    cursor: HubCountsReconcileCursorSchema.optional(),
+    pageLimit: number2().int().min(1).max(20).optional()
+  })).output(object({
     albums: HubCountsTableResultSchema,
     artists: HubCountsTableResultSchema,
     labels: HubCountsTableResultSchema,
+    next: HubCountsReconcileCursorSchema.nullable(),
     ok: literal(true),
+    pages: number2(),
     tookMs: number2()
   }));
   adminHubCountsContract = {
@@ -17199,10 +17251,10 @@ async function resolveDeezerSearch(track) {
     return;
   }
   try {
-    const query = `artist:"${artist}" track:"${stripVersionSuffix(track.title.trim())}"`;
+    const query = `${artist} ${stripVersionSuffix(track.title.trim())}`;
     const response = await fetch(`https://api.deezer.com/search?q=${encodeURIComponent(query)}`);
     const body = await response.json();
-    const hit = (body.data ?? []).find((item) => item.preview && versionMatches(track.title, item.title ?? "") && baseTitleMatches(track.title, item.title ?? "") && durationAgrees(track.durationMs, item.duration));
+    const hit = (body.data ?? []).find((item) => item.preview && normalize(item.artist?.name ?? "").includes(normalize(artist)) && versionMatches(track.title, item.title ?? "") && baseTitleMatches(track.title, item.title ?? "") && durationAgrees(track.durationMs, item.duration));
     return downloadPreview(hit?.preview, "deezer:search");
   } catch {
     return;
@@ -18474,6 +18526,9 @@ async function requeueAnchorCommand(trackIds) {
     trackIds
   });
 }
+async function requeueIsrcRecoveryCommand(input) {
+  return adminApiPost("/api/v1/admin/catalogue/isrc-recovery/requeue", input);
+}
 async function forceCaptureCommand(trackId) {
   return adminApiPost("/api/v1/admin/catalogue/force-capture", {
     trackId
@@ -18601,7 +18656,10 @@ async function resolveArtistCommand(artistId) {
 }
 async function rankArtistsCommand(options) {
   const limit = options.limit ? Number.parseInt(options.limit, 10) : undefined;
-  const response = await adminApiPost("/api/v1/admin/artists/rank", limit ? { limit } : {});
+  const response = await adminApiPost("/api/v1/admin/artists/rank", {
+    ...limit ? { limit } : {},
+    ...options.countRemaining ? { countRemaining: true } : {}
+  });
   return { summary: response.summary };
 }
 async function backfillArtistImagesCommand(limit, dryRun, cursor) {
@@ -22127,6 +22185,18 @@ JSON field reference:
     }
     console.log(`Re-queued ${requeued} of ${trackIds.length} row(s) \u2014 the next anchor tick picks them up at their real priority.`);
   });
+  catalogue.command("requeue-isrc-recovery").description("Clear Deezer-empty ISRC-recovery stamps from a window (dry-run; --apply to take)").requiredOption("--since <iso>", "Inclusive lower bound on the stamp (2026-09-09)").option("--apply", "Actually clear the stamps (default is a dry-run count)", false).option("--json", "Print JSON", false).action(async (options) => {
+    await Promise.resolve().then(() => init_admin_catalogue2());
+    const result = await requeueIsrcRecoveryCommand({
+      dryRun: options.apply !== true,
+      since: options.since
+    });
+    if (options.json) {
+      printJson({ ok: true, ...result });
+      return;
+    }
+    console.log(result.dryRun ? `DRY RUN \u2014 ${result.matched} row(s) stamped Deezer-empty since ${options.since}. Re-run with --apply to clear them.` : `Cleared ${result.requeued} of ${result.matched} row(s) \u2014 the next isrc-recovery tick asks them again.`);
+  });
   catalogue.command("requeue-unmatched").description("Re-queue terminal-unmatched captures after a matcher improvement (operator)").option("--json", "Print JSON", false).action(async (options) => {
     await Promise.resolve().then(() => init_admin_catalogue2());
     const { requeued, skippedVetoed } = await requeueUnmatchedCommand();
@@ -24529,7 +24599,10 @@ async function runGalaxies(slug, options, commands) {
   }
 }
 async function runArtistsRank(options, rankArtistsCommand) {
-  const { summary } = await rankArtistsCommand({ limit: options.limit });
+  const { summary } = await rankArtistsCommand({
+    countRemaining: !options.json,
+    limit: options.limit
+  });
   if (options.json) {
     printJson({ ok: true, summary });
     return;

package/package.json

@@ -31,5 +31,5 @@
     "url": "git+https://github.com/mauricekleine/fluncle.git"
   },
   "type": "module",
-  "version": "0.234.0"
+  "version": "0.236.0"
 }