@reddoorla/maintenance 0.11.2 → 0.12.1

package/dist/index.d.ts

@@ -420,4 +420,31 @@ declare function renderSiteDashboardHtml(site: WebsiteRow, reports: ReportRow[])
  */
 declare function verifyDashboardToken(provided: string | null | undefined, expected: string | null): boolean;
 
-export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, localPath, onboard, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, svelteCodemods, upgradeSvelte4to5, verifyDashboardToken };
+/**
+ * Render the fleet homepage as a single HTML document. Pure function:
+ * no Airtable access, no env reads, no I/O. The Netlify function handler
+ * filters the Websites rows (drops anything without a dashboardToken — those
+ * aren't on the Reddoor stack), sorts, and hands here. Same style vocabulary
+ * as renderSiteDashboardHtml so the two pages feel like one product.
+ */
+declare function renderFleetHomeHtml(sites: WebsiteRow[]): string;
+
+/**
+ * Verify an `Authorization: Basic <base64>` header against the configured
+ * dashboard password. Username is intentionally ignored — operators may
+ * type anything when the browser prompts; only the password gates entry.
+ *
+ * Returns false for any of:
+ * - missing/empty Authorization header
+ * - non-Basic auth scheme
+ * - malformed base64 or payload (no colon to split user:password)
+ * - wrong password
+ * - expected password missing (DASHBOARD_PASSWORD not configured)
+ *
+ * Wrong-password compare is constant-time; lengths are checked first
+ * (timingSafeEqual throws on mismatch, and the length itself doesn't
+ * leak — operator's password length is fixed per deploy).
+ */
+declare function verifyBasicAuth(authHeader: string | null | undefined, expectedPassword: string | null): boolean;
+
+export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, localPath, onboard, renderFleetHomeHtml, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, svelteCodemods, upgradeSvelte4to5, verifyBasicAuth, verifyDashboardToken };

package/dist/index.js

@@ -2626,11 +2626,11 @@ async function uploadAttachment(recordId, fieldName, body, filename, contentType
 }
 
 // src/reports/draft.ts
-function scoresFromWebsite(siteRow) {
-  const { pScore, rScore, bpScore, seoScore } = siteRow;
+function scoresFromWebsite(siteRow2) {
+  const { pScore, rScore, bpScore, seoScore } = siteRow2;
   if (pScore === null || rScore === null || bpScore === null || seoScore === null) {
     throw new Error(
-      `Site '${siteRow.name}' is missing one or more Lighthouse scores on the Websites row (pScore, rScore, bpScore, seoScore). Run 'reddoor-maint audit lighthouse' from the site's checkout and paste the four numbers into Airtable, then retry.`
+      `Site '${siteRow2.name}' is missing one or more Lighthouse scores on the Websites row (pScore, rScore, bpScore, seoScore). Run 'reddoor-maint audit lighthouse' from the site's checkout and paste the four numbers into Airtable, then retry.`
     );
   }
   return { performance: pScore, accessibility: rScore, bestPractices: bpScore, seo: seoScore };
@@ -2640,18 +2640,18 @@ function daysAgo(today, n) {
   out.setDate(out.getDate() - n);
   return out;
 }
-async function draftReportForSite(base, siteRow, reportType, options = {}) {
-  const scores = scoresFromWebsite(siteRow);
+async function draftReportForSite(base, siteRow2, reportType, options = {}) {
+  const scores = scoresFromWebsite(siteRow2);
   const today = /* @__PURE__ */ new Date();
-  const slug = siteSlug(siteRow.name);
-  const periodStart = base !== null ? await derivePeriodStart(base, siteRow, reportType, today) : daysAgo(today, 30);
+  const slug = siteSlug(siteRow2.name);
+  const periodStart = base !== null ? await derivePeriodStart(base, siteRow2, reportType, today) : daysAgo(today, 30);
   const periodEnd = today;
   const completedOn = today;
-  const lastTestedDate = reportType === "Maintenance" && siteRow.testingDay ? new Date(siteRow.testingDay) : null;
+  const lastTestedDate = reportType === "Maintenance" && siteRow2.testingDay ? new Date(siteRow2.testingDay) : null;
   const cidName = `${slug}-header`;
   const { html } = await renderReportHtml({
-    siteName: siteRow.name,
-    siteUrl: siteRow.url,
+    siteName: siteRow2.name,
+    siteUrl: siteRow2.url,
     reportType,
     completedOn,
     lighthouse: scores,
@@ -2668,10 +2668,10 @@ async function draftReportForSite(base, siteRow, reportType, options = {}) {
     return { reportRow: null, htmlPath: path, html };
   }
   if (base === null) throw new Error("base required when previewOnly=false");
-  const reportId = `${siteRow.name} \u2014 ${reportType} \u2014 ${periodEnd.toISOString().slice(0, 10)}`;
+  const reportId = `${siteRow2.name} \u2014 ${reportType} \u2014 ${periodEnd.toISOString().slice(0, 10)}`;
   const created = await createDraft(base, {
     reportId,
-    siteId: siteRow.id,
+    siteId: siteRow2.id,
     reportType,
     periodStart,
     periodEnd,
@@ -2684,8 +2684,8 @@ async function draftReportForSite(base, siteRow, reportType, options = {}) {
   await setDraftReady(base, created.id, true);
   return { reportRow: created, htmlPath: null, html };
 }
-async function derivePeriodStart(base, siteRow, reportType, today) {
-  const prior = await listReportsForSite(base, siteRow.id);
+async function derivePeriodStart(base, siteRow2, reportType, today) {
+  const prior = await listReportsForSite(base, siteRow2.id);
   const sameType = prior.filter((r) => r.reportType === reportType && r.periodEnd).map((r) => r.periodEnd).sort();
   const latest = sameType[sameType.length - 1];
   return latest ? new Date(latest) : daysAgo(today, 30);
@@ -3017,6 +3017,101 @@ function verifyDashboardToken(provided, expected) {
   if (provided.length !== expected.length) return false;
   return timingSafeEqual(Buffer.from(provided, "utf-8"), Buffer.from(expected, "utf-8"));
 }
+
+// src/dashboard/fleet-render.ts
+function escapeHtml2(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function safeUrl2(raw) {
+  try {
+    const u = new URL(raw);
+    if (u.protocol === "http:" || u.protocol === "https:") return raw;
+  } catch {
+  }
+  return "#";
+}
+function scoreCell(value) {
+  const display = value === null ? "\u2014" : String(value);
+  return `<td class="score">${escapeHtml2(display)}</td>`;
+}
+function siteHrefCell(site) {
+  const name = escapeHtml2(site.name);
+  const token = site.dashboardToken ?? "";
+  const href = `/s/${escapeHtml2(siteSlug(site.name))}?t=${escapeHtml2(token)}`;
+  return `<td class="site"><a href="${href}">${name}</a></td>`;
+}
+function siteRow(site) {
+  return `<tr>
+    ${siteHrefCell(site)}
+    <td><a href="${escapeHtml2(safeUrl2(site.url))}" class="url" target="_blank" rel="noopener">${escapeHtml2(site.url)}</a></td>
+    ${scoreCell(site.pScore)}
+    ${scoreCell(site.rScore)}
+    ${scoreCell(site.bpScore)}
+    ${scoreCell(site.seoScore)}
+  </tr>`;
+}
+var STYLES2 = `
+:root { color-scheme: light dark; }
+body { font: 16px/1.5 system-ui, -apple-system, sans-serif; max-width: 1100px; margin: 2rem auto; padding: 0 1rem; color: #1a1a1a; }
+@media (prefers-color-scheme: dark) { body { color: #e8e8e8; background: #111; } a { color: #6cb6ff; } }
+h1 { margin: 0 0 0.25rem; font-size: 1.75rem; }
+.meta { color: #666; margin-bottom: 2rem; }
+table { width: 100%; border-collapse: collapse; font-size: 0.95rem; }
+th { text-align: left; padding: 0.5rem; font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.05em; color: #666; border-bottom: 2px solid #ddd; }
+@media (prefers-color-scheme: dark) { th { border-color: #333; } }
+td { padding: 0.65rem 0.5rem; border-bottom: 1px solid #eee; }
+@media (prefers-color-scheme: dark) { td { border-color: #2a2a2a; } }
+td.site a { font-weight: 500; }
+td.url { color: #666; font-size: 0.85rem; }
+td.score { text-align: right; font-variant-numeric: tabular-nums; min-width: 3.5rem; }
+.empty { color: #999; padding: 2rem; text-align: center; border: 1px dashed #ccc; border-radius: 6px; }
+`;
+function renderFleetHomeHtml(sites) {
+  const body = sites.length === 0 ? `<div class="empty">No sites to display.</div>` : `<table>
+          <thead><tr>
+            <th>Site</th>
+            <th>URL</th>
+            <th>Perf</th>
+            <th>A11y</th>
+            <th>BP</th>
+            <th>SEO</th>
+          </tr></thead>
+          <tbody>${sites.map(siteRow).join("")}</tbody>
+        </table>`;
+  return `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Reddoor maintenance \u2014 fleet</title>
+  <style>${STYLES2}</style>
+</head>
+<body>
+  <h1>Reddoor fleet</h1>
+  <div class="meta">${sites.length} site${sites.length === 1 ? "" : "s"} on the Reddoor stack.</div>
+  ${body}
+</body>
+</html>`;
+}
+
+// src/dashboard/basic-auth.ts
+import { timingSafeEqual as timingSafeEqual2 } from "crypto";
+function verifyBasicAuth(authHeader, expectedPassword) {
+  if (!authHeader || !expectedPassword) return false;
+  const match = /^basic\s+(.+)$/i.exec(authHeader.trim());
+  if (!match) return false;
+  let decoded;
+  try {
+    decoded = Buffer.from(match[1], "base64").toString("utf-8");
+  } catch {
+    return false;
+  }
+  const colonIdx = decoded.indexOf(":");
+  if (colonIdx === -1) return false;
+  const provided = decoded.slice(colonIdx + 1);
+  if (provided.length !== expectedPassword.length) return false;
+  return timingSafeEqual2(Buffer.from(provided, "utf-8"), Buffer.from(expectedPassword, "utf-8"));
+}
 export {
   ALL_AUDIT_NAMES,
   ALL_RECIPE_NAMES,
@@ -3039,6 +3134,7 @@ export {
   loadBundledImages,
   localPath,
   onboard,
+  renderFleetHomeHtml,
   renderReportHtml,
   renderSiteDashboardHtml,
   runAudits,
@@ -3050,6 +3146,7 @@ export {
   svelteCodemods,
   syncConfigs,
   upgradeSvelte4to5,
+  verifyBasicAuth,
   verifyDashboardToken
 };
 //# sourceMappingURL=index.js.map