@reddoorla/maintenance 0.47.0 → 0.50.0

package/dist/index.js

@@ -939,13 +939,348 @@ async function a11yAudit(ctx) {
   }
 }
 
+// src/audits/domain.ts
+import { promises as dnsPromises } from "dns";
+import tls from "tls";
+var MS_PER_DAY = 24 * 60 * 60 * 1e3;
+async function checkDomain(url, deps) {
+  let host;
+  try {
+    host = new URL(url).hostname;
+  } catch {
+    return { resolved: false, certDaysRemaining: null };
+  }
+  try {
+    await deps.lookup(host);
+  } catch {
+    return { resolved: false, certDaysRemaining: null };
+  }
+  let validTo;
+  try {
+    validTo = await deps.certValidTo(host);
+  } catch {
+    validTo = null;
+  }
+  if (!validTo || Number.isNaN(validTo.getTime()))
+    return { resolved: true, certDaysRemaining: null };
+  return {
+    resolved: true,
+    certDaysRemaining: Math.floor((validTo.getTime() - deps.now.getTime()) / MS_PER_DAY)
+  };
+}
+function defaultDomainDeps(now) {
+  return {
+    lookup: async (host) => {
+      await dnsPromises.lookup(host);
+    },
+    certValidTo: (host) => new Promise((resolvePromise) => {
+      const socket = tls.connect(
+        { host, port: 443, servername: host, timeout: 1e4, rejectUnauthorized: true },
+        () => {
+          const cert = socket.authorized ? socket.getPeerCertificate() : null;
+          socket.end();
+          const validTo = cert && cert.valid_to ? new Date(cert.valid_to) : null;
+          resolvePromise(validTo);
+        }
+      );
+      socket.on("error", () => resolvePromise(null));
+      socket.on("timeout", () => {
+        socket.destroy();
+        resolvePromise(null);
+      });
+    }),
+    now
+  };
+}
+async function domainAudit(ctx) {
+  const { site } = ctx;
+  const label = siteLabel(site);
+  if (!site.deployedUrl) {
+    return { audit: "domain", site: label, status: "skip", summary: "no deployed URL" };
+  }
+  const now = ctx.now ?? /* @__PURE__ */ new Date();
+  const deps = ctx.domainDeps ?? defaultDomainDeps(now);
+  const check = await checkDomain(site.deployedUrl, deps);
+  const checkedAt = now.toISOString();
+  const status = check.resolved && check.certDaysRemaining !== null && check.certDaysRemaining > 14 ? "pass" : "warn";
+  const summary = !check.resolved ? "did not resolve" : check.certDaysRemaining === null ? "resolved, no usable TLS cert" : `resolved, cert ${check.certDaysRemaining}d remaining`;
+  return {
+    audit: "domain",
+    site: label,
+    status,
+    summary,
+    details: { resolved: check.resolved, certDaysRemaining: check.certDaysRemaining, checkedAt }
+  };
+}
+
+// src/audits/route-discovery.ts
+var DEFAULT_CAP = 15;
+function parseSitemapUrls(xml) {
+  const out = [];
+  const re = /<loc>\s*([^<\s]+)\s*<\/loc>/gi;
+  let m;
+  while ((m = re.exec(xml)) !== null) {
+    const url = m[1];
+    if (url) out.push(url.trim());
+  }
+  return out;
+}
+function parseHtmlLinks(html, baseUrl) {
+  const out = /* @__PURE__ */ new Set();
+  const re = /<a\b[^>]*\bhref\s*=\s*["']([^"']+)["']/gi;
+  let m;
+  while ((m = re.exec(html)) !== null) {
+    const href = m[1];
+    if (!href || href.startsWith("#") || /^(mailto:|tel:|javascript:)/i.test(href)) continue;
+    try {
+      const u = new URL(href, baseUrl);
+      if (u.origin !== new URL(baseUrl).origin) continue;
+      out.add(u.pathname);
+    } catch {
+    }
+  }
+  return [...out];
+}
+function family(pathname) {
+  return pathname.split("/").filter(Boolean)[0] ?? "";
+}
+function sampleRoutePaths(urlsOrPaths, cap = DEFAULT_CAP) {
+  const seen = /* @__PURE__ */ new Set(["/"]);
+  const buckets = /* @__PURE__ */ new Map();
+  for (const raw of urlsOrPaths) {
+    let pathname;
+    try {
+      pathname = raw.startsWith("/") ? new URL(raw, "https://x.invalid").pathname : new URL(raw).pathname;
+    } catch {
+      continue;
+    }
+    if (pathname === "/") continue;
+    if (seen.has(pathname)) continue;
+    seen.add(pathname);
+    const fam = family(pathname);
+    const arr = buckets.get(fam) ?? [];
+    arr.push(pathname);
+    buckets.set(fam, arr);
+  }
+  const result = ["/"];
+  const families = [...buckets.values()];
+  let guard = 0;
+  while (result.length < cap && families.some((f) => f.length > 0) && guard++ < 1e4) {
+    for (const fam of families) {
+      if (result.length >= cap) break;
+      const next = fam.shift();
+      if (next) result.push(next);
+    }
+  }
+  return result;
+}
+function familyCountsOf(paths) {
+  const counts = {};
+  for (const p of paths) {
+    const key = p === "/" ? "/" : `/${family(p)}`;
+    counts[key] = (counts[key] ?? 0) + 1;
+  }
+  return counts;
+}
+async function discoverRoutes(deployedUrl, deps, cap = DEFAULT_CAP) {
+  const origin = new URL(deployedUrl).origin;
+  const abs = (paths) => paths.map((p) => new URL(p, origin).href);
+  const sitemapXml = await deps.fetchText(new URL("/sitemap.xml", origin).href);
+  if (sitemapXml) {
+    const urls = parseSitemapUrls(sitemapXml);
+    if (urls.length > 0) {
+      const paths = sampleRoutePaths(urls, cap);
+      return { routes: abs(paths), source: "sitemap", familyCounts: familyCountsOf(paths) };
+    }
+  }
+  const homeHtml = await deps.fetchText(origin);
+  if (homeHtml) {
+    const links = parseHtmlLinks(homeHtml, origin);
+    if (links.length > 0) {
+      const paths = sampleRoutePaths(links, cap);
+      return { routes: abs(paths), source: "homepage-links", familyCounts: familyCountsOf(paths) };
+    }
+  }
+  return { routes: [new URL("/", origin).href], source: "root-only", familyCounts: { "/": 1 } };
+}
+
+// src/audits/browser.ts
+function isBroken(status) {
+  return status === null || status >= 400;
+}
+function summarizeBrowser(routes, links, familyCounts) {
+  const desktopChecks = routes.flatMap((r) => r.desktop);
+  const mobileChecks = routes.flatMap((r) => r.mobile);
+  const desktopOk = routes.length > 0 && routes.every((r) => r.desktop.length > 0 && r.desktop.every((d) => d.ok));
+  const mobileOk = routes.length > 0 && routes.every((r) => r.mobile.length > 0 && r.mobile.every((m) => m.ok));
+  const brokenLinks = links.filter((l) => isBroken(l.status)).length;
+  const linksOk = links.length > 0 && brokenLinks === 0;
+  const engines = [...new Set(desktopChecks.map((d) => d.engine))];
+  const devices2 = [...new Set(mobileChecks.map((m) => m.device))];
+  const families = Object.entries(familyCounts).map(([f, n]) => f === "/" ? "/" : `${f} \xD7${n}`).join(", ");
+  const note = `${routes.length} routes (${families}); desktop ${engines.join("/") || "\u2014"}; mobile ${devices2.join("/") || "\u2014"}; ${links.length} links, ${brokenLinks} broken`;
+  return { desktopOk, mobileOk, linksOk, brokenLinks, routesChecked: routes.length, note };
+}
+async function browserAudit(ctx) {
+  const { site } = ctx;
+  const label = siteLabel(site);
+  if (!site.deployedUrl) {
+    return { audit: "browser", site: label, status: "skip", summary: "no deployed URL" };
+  }
+  const now = ctx.now ?? /* @__PURE__ */ new Date();
+  const discoverDeps = ctx.discoverDeps ?? defaultDiscoverDeps();
+  const runner = ctx.browserRunner ?? await defaultBrowserRunner();
+  try {
+    const discovered = await discoverRoutes(site.deployedUrl, discoverDeps);
+    const routeResults = await runner.probe(discovered.routes);
+    const internalLinks = [...new Set(routeResults.flatMap((r) => r.links))];
+    const linkResults = await runner.checkLinks(internalLinks);
+    const summary = summarizeBrowser(
+      routeResults,
+      linkResults,
+      discovered.familyCounts ?? familyCountsOf(discovered.routes)
+    );
+    const status = summary.desktopOk && summary.mobileOk && summary.linksOk ? "pass" : "warn";
+    return {
+      audit: "browser",
+      site: label,
+      status,
+      summary: summary.note,
+      details: { ...summary, checkedAt: now.toISOString() }
+    };
+  } finally {
+    await runner.close?.();
+  }
+}
+function defaultDiscoverDeps() {
+  return {
+    fetchText: async (url) => {
+      try {
+        const res = await fetch(url, { redirect: "follow" });
+        if (!res.ok) return null;
+        return await res.text();
+      } catch {
+        return null;
+      }
+    }
+  };
+}
+var DESKTOP_VIEWPORT = { width: 1366, height: 900 };
+var PAGE_TIMEOUT_MS = 3e4;
+async function defaultBrowserRunner() {
+  const { chromium, firefox, webkit, devices: devices2 } = await import("@playwright/test");
+  const desktopEngines = [
+    { engine: "chromium", type: chromium },
+    { engine: "firefox", type: firefox },
+    { engine: "webkit", type: webkit }
+  ];
+  const mobileTargets = [
+    { device: "Pixel 7", descriptor: devices2["Pixel 7"] },
+    { device: "iPhone 14", descriptor: devices2["iPhone 14"] }
+  ];
+  return {
+    async probe(urls) {
+      const results = [];
+      const browsers = await Promise.all(desktopEngines.map((e) => e.type.launch()));
+      const mobileBrowsers = await Promise.all(mobileTargets.map(() => chromium.launch()));
+      try {
+        for (const url of urls) {
+          const desktop = [];
+          const linkSet = /* @__PURE__ */ new Set();
+          for (let i = 0; i < desktopEngines.length; i++) {
+            const engine = desktopEngines[i].engine;
+            const browser = browsers[i];
+            const ctx = await browser.newContext({ viewport: DESKTOP_VIEWPORT });
+            const page = await ctx.newPage();
+            const errors = [];
+            page.on("pageerror", (e) => errors.push(String(e)));
+            let ok = false;
+            try {
+              const resp = await page.goto(url, {
+                waitUntil: "domcontentloaded",
+                timeout: PAGE_TIMEOUT_MS
+              });
+              const hasMain = await page.locator("main, [role=main]").first().isVisible().catch(() => false);
+              ok = !!resp && resp.ok() && errors.length === 0 && hasMain;
+              if (engine === "chromium") {
+                const hrefs = await page.evaluate("Array.from(document.querySelectorAll('a[href]')).map((a) => a.href)").catch(() => []);
+                const origin = new URL(url).origin;
+                for (const h of hrefs) {
+                  try {
+                    if (new URL(h).origin === origin) linkSet.add(new URL(h).href);
+                  } catch {
+                  }
+                }
+              }
+            } catch {
+              ok = false;
+            } finally {
+              await ctx.close().catch(() => {
+              });
+            }
+            desktop.push({ engine, ok });
+          }
+          const mobile = [];
+          for (let i = 0; i < mobileTargets.length; i++) {
+            const { device, descriptor } = mobileTargets[i];
+            const browser = mobileBrowsers[i];
+            const ctx = await browser.newContext({ ...descriptor });
+            const page = await ctx.newPage();
+            const errors = [];
+            page.on("pageerror", (e) => errors.push(String(e)));
+            let ok = false;
+            try {
+              const resp = await page.goto(url, {
+                waitUntil: "domcontentloaded",
+                timeout: PAGE_TIMEOUT_MS
+              });
+              const overflow = await page.evaluate("document.documentElement.scrollWidth > window.innerWidth + 2").catch(() => true);
+              ok = !!resp && resp.ok() && errors.length === 0 && !overflow;
+            } catch {
+              ok = false;
+            } finally {
+              await ctx.close().catch(() => {
+              });
+            }
+            mobile.push({ device, ok });
+          }
+          results.push({ url, desktop, mobile, links: [...linkSet] });
+        }
+      } finally {
+        await Promise.all([...browsers, ...mobileBrowsers].map((b) => b.close().catch(() => {
+        })));
+      }
+      return results;
+    },
+    async checkLinks(urls) {
+      const out = [];
+      for (const url of urls) {
+        let status;
+        try {
+          let res = await fetch(url, { method: "HEAD", redirect: "follow" });
+          if (res.status === 405 || res.status === 501) {
+            res = await fetch(url, { method: "GET", redirect: "follow" });
+          }
+          status = res.status;
+        } catch {
+          status = null;
+        }
+        out.push({ url, status });
+      }
+      return out;
+    }
+  };
+}
+
 // src/audits/index.ts
 var REGISTRY = {
   deps: depsAudit,
   lint: lintAudit,
   security: securityAudit,
   lighthouse: lighthouseAudit,
-  a11y: a11yAudit
+  a11y: a11yAudit,
+  domain: domainAudit,
+  browser: browserAudit
 };
 var ALL_AUDIT_NAMES = Object.keys(REGISTRY);
 var DEFAULT_AUDIT_TIMEOUT_MS = 3e4;
@@ -2557,6 +2892,16 @@ function isHttpUrl(s) {
   }
   return parsed.protocol === "http:" || parsed.protocol === "https:";
 }
+function isNetlifyAppUrl(s) {
+  let parsed;
+  try {
+    parsed = new URL(s);
+  } catch {
+    return false;
+  }
+  const host = parsed.hostname.toLowerCase();
+  return host === "netlify.app" || host.endsWith(".netlify.app");
+}
 
 // src/inventory/json.ts
 function validate(raw) {
@@ -2646,6 +2991,10 @@ var ACTIVE_STATUSES = /* @__PURE__ */ new Set([
   "maintenance",
   "launch period"
 ]);
+var FREQUENCIES = ["None", "Monthly", "Quarterly", "Yearly"];
+function toFrequency(raw) {
+  return typeof raw === "string" && FREQUENCIES.includes(raw) ? raw : "None";
+}
 function mapRow(rec) {
   const f = rec.fields;
   const attachments = f["Header image"] ?? [];
@@ -2656,8 +3005,8 @@ function mapRow(rec) {
     url: String(f["url"] ?? ""),
     status: f["Status"] ?? null,
     pointOfContact: f["point of contact"] ?? null,
-    maintenanceFreq: f["maintenence freq"] ?? "None",
-    testingFreq: f["testing freq"] ?? "None",
+    maintenanceFreq: toFrequency(f["maintenence freq"]),
+    testingFreq: toFrequency(f["testing freq"]),
     maintenanceDay: f["maintenance day"] ?? null,
     testingDay: f["testing day"] ?? null,
     ga4PropertyId: f["GA4 property ID"] ?? null,
@@ -2680,6 +3029,14 @@ function mapRow(rec) {
     securityVulnsHigh: f["Security Vulns High"] ?? null,
     securityVulnsModerate: f["Security Vulns Moderate"] ?? null,
     securityVulnsLow: f["Security Vulns Low"] ?? null,
+    lastSecurityAuditAt: f["Last security audit at"] ?? null,
+    certDaysRemaining: f["Cert days remaining"] ?? null,
+    domainCheckedAt: f["Domain checked at"] ?? null,
+    crossbrowserOk: typeof f["Crossbrowser OK"] === "boolean" ? f["Crossbrowser OK"] : null,
+    mobileOk: typeof f["Mobile OK"] === "boolean" ? f["Mobile OK"] : null,
+    linksOk: typeof f["Links OK"] === "boolean" ? f["Links OK"] : null,
+    brokenLinks: typeof f["Broken links"] === "number" ? f["Broken links"] : null,
+    browserCheckedAt: f["Browser checked at"] ?? null,
     copyIntro: trimToNull(f["Copy \u2014 Intro"]),
     copyContact: trimToNull(f["Copy \u2014 Contact"]),
     copyFooter: trimToNull(f["Copy \u2014 Footer"]),
@@ -2785,15 +3142,10 @@ var DEFAULT_COPY = {
   ],
   announceHeading: "YOUR ONGOING SITE CARE",
   announceBody: "We've completed a full test of your site and set it up for ongoing care to keep it fast, secure, and healthy. Here's what you can expect from us going forward:",
-  announceCadenceHeading: "WHAT TO EXPECT",
-  announceTestingLabel: "Full site testing",
-  announceMaintenanceLabel: "Routine maintenance",
-  announcePreviewLabel: "From your latest full site test:",
-  announceScoreNote: "These are independent Google Lighthouse scores, each out of 100 \u2014 higher is better.",
   announceImprovementResend: "Your contact forms now deliver straight to your inbox through reliable infrastructure, so no inquiry slips through the cracks.",
   announceImprovementSvelte5: "We've modernized your site to the latest framework \u2014 it's faster, more secure, and built to last.",
   announceCadence: "After each one we'll send you a short report like this \u2014 there's nothing you need to do.",
-  announceOpenDoor: "And if you'd ever like to expand the scope, add features, or freshen anything up, just reply \u2014 we'd love to help."
+  announceOpenDoor: "And if you'd ever like to expand the scope, add features, or freshen anything up, just let us know."
 };
 function override(v) {
   if (typeof v !== "string") return null;
@@ -2883,70 +3235,118 @@ function safeUrl(raw) {
   return "#";
 }
 
-// src/reports/maintenance-email/template.ts
+// src/reports/email-sections.ts
 var escapeXml = escapeHtml;
+var RED = "#C00";
+var GREY = "#757575";
+var BORDER = "#CCCCCC";
+var TREND_UP = "#2E7D32";
+var TREND_NEUTRAL = GREY;
 var CHECK_PNG = `cid:${CHECK_CID}`;
-var BLURRED_TESTS = `cid:${BLURRED_CID}`;
-function fmtDate(d) {
-  if (!d || Number.isNaN(d.getTime())) return "";
-  const mm = String(d.getUTCMonth() + 1).padStart(2, "0");
-  const dd = String(d.getUTCDate()).padStart(2, "0");
-  const yyyy = d.getUTCFullYear();
-  return `${mm}.${dd}.${yyyy}`;
-}
 function fmtUsers(n) {
   return n.toLocaleString("en-US");
 }
-var TREND_UP = "#2E7D32";
-var TREND_NEUTRAL = "#757575";
-function trendText(color, text) {
-  return `<mj-text color="${color}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${text}</mj-text>`;
+function checklistRowsSection(rows, opts) {
+  return rows.map((label, i) => {
+    const isLast = i === rows.length - 1;
+    const border = isLast ? "" : ` border-bottom="solid ${BORDER} 1px"`;
+    const lastPad = isLast ? ` padding-bottom="${opts.lastPaddingBottom}"` : "";
+    return `
+    <mj-section background-color="${opts.background}" padding="0px"${lastPad}>
+      <mj-group>
+        <mj-column padding-left="0px" width="90%"${border}>
+          <mj-text height="25px" padding-left="0px" color="${GREY}" padding-top="20px" padding-bottom="7.5px" font-size="16px">${escapeXml(label)}</mj-text>
+        </mj-column>
+        <mj-column width="10%"${border} padding-top="15px">
+          <mj-image align="right" padding-right="0px" width="20px" height="20px" padding-top="2.5px" padding-bottom="15px" src="${CHECK_PNG}" />
+        </mj-column>
+      </mj-group>
+    </mj-section>`;
+  }).join("");
+}
+var LIGHTHOUSE_ROWS = [
+  { label: "Performance", key: "performance", range: "Acceptable 50\u201389 // Ideal 90\u2013100" },
+  { label: "Readability (A11y)", key: "accessibility", range: "Acceptable 80\u201399 // Ideal 100" },
+  { label: "Best Practices", key: "bestPractices", range: "Acceptable 60\u201379 // Ideal 80\u2013100" },
+  { label: "Site Structure", key: "seo", range: "Acceptable 50\u201389 // Ideal 90\u2013100" }
+];
+function lighthouseScoresSection(lighthouse2, opts = {}) {
+  const background = opts.background ?? "#F4F4F4";
+  const sectionPad = opts.pad ? ` padding-top="${opts.pad}" padding-bottom="${opts.pad}"` : "";
+  const labelTop = opts.pad ?? "55px";
+  const footnoteBottom = opts.pad ? "0px" : "36px";
+  const rows = LIGHTHOUSE_ROWS.map(
+    ({ label, key, range }, i) => `
+        <mj-text color="${RED}" font-size="20px" font-weight="300" padding-top="25px">${label}</mj-text>
+        <mj-text color="${RED}" font-size="44px" font-weight="400" padding-top="0px">${lighthouse2[key]}</mj-text>
+        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">${range}</mj-text>${i < LIGHTHOUSE_ROWS.length - 1 ? `
+        <mj-divider border-width="1px" border-style="solid" border-color="${BORDER}" padding="0" />` : ""}`
+  ).join("");
+  return `
+    <mj-section background-color="${background}"${sectionPad}>
+      <mj-column>
+        <mj-text color="${RED}" font-size="20px" font-weight="700" padding-top="${labelTop}">LIGHTHOUSE SCORES*</mj-text>${rows}
+        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="${footnoteBottom}" line-height="20px">*A Lighthouse score is a numerical measure provided by Google's Lighthouse tool, which evaluates various aspects of a web page's quality.</mj-text>
+      </mj-column>
+    </mj-section>`;
 }
 function analyticsTrendLine(cur, prev) {
   if (cur === void 0 || prev === void 0) {
-    return trendText(TREND_NEUTRAL, `Last Period: ${prev !== void 0 ? fmtUsers(prev) : "\u2014"}`);
+    return trendLine(TREND_NEUTRAL, `Last Period: ${prev !== void 0 ? fmtUsers(prev) : "\u2014"}`);
   }
   if (prev === 0) {
-    return cur > 0 ? trendText(TREND_UP, "\u25B2 New this period (0 last period)") : trendText(TREND_NEUTRAL, "Last Period: 0");
+    return cur > 0 ? trendLine(TREND_UP, "\u25B2 New this period (0 last period)") : trendLine(TREND_NEUTRAL, "Last Period: 0");
   }
   const pct = Math.round((cur - prev) / prev * 100);
   const range = `(${fmtUsers(prev)} \u2192 ${fmtUsers(cur)})`;
-  if (pct > 0) return trendText(TREND_UP, `\u25B2 ${pct}% vs last period ${range}`);
-  if (pct < 0) return trendText(TREND_NEUTRAL, `\u25BC ${Math.abs(pct)}% vs last period ${range}`);
-  return trendText(TREND_NEUTRAL, `No change vs last period (${fmtUsers(prev)})`);
+  if (pct > 0) return trendLine(TREND_UP, `\u25B2 ${pct}% vs last period ${range}`);
+  if (pct < 0) return trendLine(TREND_NEUTRAL, `\u25BC ${Math.abs(pct)}% vs last period ${range}`);
+  return trendLine(TREND_NEUTRAL, `No change vs last period (${fmtUsers(prev)})`);
+}
+function trendLine(color, text) {
+  return `<mj-text color="${color}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${text}</mj-text>`;
+}
+function footnoteLine(text) {
+  return `<mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="36px" line-height="20px">${text}</mj-text>`;
+}
+function analyticsSection(opts) {
+  const users = opts.current !== void 0 ? fmtUsers(opts.current) : "\u2014";
+  const body = (opts.bodyLines ?? []).map((l) => trendLine(TREND_NEUTRAL, l)).join("\n        ");
+  const footnotes = (opts.footnoteLines ?? []).map(footnoteLine).join("\n        ");
+  const sectionPad = opts.pad ? ` padding-top="${opts.pad}" padding-bottom="${opts.pad}"` : "";
+  const labelTop = opts.pad ?? "75px";
+  return `
+    <mj-section background-color="${opts.background}"${sectionPad}>
+      <mj-column>
+        <mj-text color="${RED}" font-size="20px" font-weight="700" padding-top="${labelTop}">ANALYTICS</mj-text>
+        <mj-text color="${RED}" font-size="44px" font-weight="400">${users} Users</mj-text>
+        ${analyticsTrendLine(opts.current, opts.previous)}
+        ${body}
+        ${footnotes}
+      </mj-column>
+    </mj-section>`;
+}
+
+// src/reports/maintenance-email/template.ts
+var escapeXml2 = escapeHtml;
+var BLURRED_TESTS = `cid:${BLURRED_CID}`;
+function fmtDate(d) {
+  if (!d || Number.isNaN(d.getTime())) return "";
+  const mm = String(d.getUTCMonth() + 1).padStart(2, "0");
+  const dd = String(d.getUTCDate()).padStart(2, "0");
+  const yyyy = d.getUTCFullYear();
+  return `${mm}.${dd}.${yyyy}`;
 }
 function maintenanceChecksSection(copy, searchPosition) {
   const googleLabel = searchPosition !== void 0 ? `Page 1 Google Result (#${searchPosition})` : copy.maintenanceChecks[3] ?? "";
   const rows = copy.maintenanceChecks.map((label, i) => i === 3 ? googleLabel : label);
-  return rows.map(
-    (label, i) => `
-    <mj-section background-color="white" padding="0px"${i === rows.length - 1 ? ' padding-bottom="36px"' : ""}>
-      <mj-group>
-        <mj-column padding-left="0px" width="90%"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""}>
-          <mj-text height="25px" padding-left="0px" color="#757575" padding-top="20px" padding-bottom="7.5px" font-size="16px">${escapeXml(label)}</mj-text>
-        </mj-column>
-        <mj-column width="10%"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""} padding-top="15px">
-          <mj-image align="right" padding-right="0px" width="20px" height="20px" padding-top="2.5px" padding-bottom="15px" src="${CHECK_PNG}" />
-        </mj-column>
-      </mj-group>
-    </mj-section>`
-  ).join("");
+  return checklistRowsSection(rows, { background: "white", lastPaddingBottom: "36px" });
 }
 function testingChecklistSection(copy) {
-  const rows = copy.testingChecklist;
-  return rows.map(
-    (label, i) => `
-    <mj-section background-color="#F4F4F4" padding="0px"${i === rows.length - 1 ? ' padding-bottom="60px"' : ""}>
-      <mj-group>
-        <mj-column width="90%" padding-left="0px"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""}>
-          <mj-text height="25px" padding-left="0px" color="#757575" padding-top="20px" padding-bottom="7.5px" font-size="16px">${escapeXml(label)}</mj-text>
-        </mj-column>
-        <mj-column width="10%"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""} padding-top="15px">
-          <mj-image align="right" padding-right="0px" width="20px" height="20px" padding-top="2.5px" padding-bottom="15px" src="${CHECK_PNG}" />
-        </mj-column>
-      </mj-group>
-    </mj-section>`
-  ).join("");
+  return checklistRowsSection(copy.testingChecklist, {
+    background: "#F4F4F4",
+    lastPaddingBottom: "60px"
+  });
 }
 function maintenanceTestingPlaceholder(lastTested) {
   return `
@@ -2966,7 +3366,7 @@ function testingIntroSection(copy) {
     <mj-section background-color="#F4F4F4">
       <mj-column>
         <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">TESTING</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml(copy.testingIntro)}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml2(copy.testingIntro)}</mj-text>
       </mj-column>
     </mj-section>`;
 }
@@ -2974,8 +3374,8 @@ function commentarySection(text, copy) {
   return `
     <mj-section background-color="white">
       <mj-column>
-        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="55px">${escapeXml(copy.notesHeader)}</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml(text).replace(/\r\n?|\n/g, "<br/>")}</mj-text>
+        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="55px">${escapeXml2(copy.notesHeader)}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml2(text).replace(/\r\n?|\n/g, "<br/>")}</mj-text>
       </mj-column>
     </mj-section>`;
 }
@@ -2984,8 +3384,8 @@ function hasHeaderDims(data) {
 }
 function headerImageTag(data) {
   const src = `cid:${data.headerImageCid}`;
-  const alt = `${escapeXml(data.siteName)} maintenance report`;
-  const href = isHttpUrl(data.siteUrl) ? escapeXml(data.siteUrl) : "#";
+  const alt = `${escapeXml2(data.siteName)} maintenance report`;
+  const href = isHttpUrl(data.siteUrl) ? escapeXml2(data.siteUrl) : "#";
   if (hasHeaderDims(data)) {
     return `<mj-image href="${href}" src="${src}" alt="${alt}" width="${data.headerWidth}px" css-class="rd-header" container-background-color="${data.headerBgColor}" />`;
   }
@@ -2998,7 +3398,7 @@ function headerStyleBlock(data) {
 function buildMjml(data) {
   const copy = data.copy ?? DEFAULT_COPY;
   const isTesting = data.reportType === "Testing";
-  const previewText = `Checked up on ${escapeXml(data.siteName)}`;
+  const previewText = `Checked up on ${escapeXml2(data.siteName)}`;
   return `<mjml>
   <mj-head>
     <mj-attributes>
@@ -3020,52 +3420,30 @@ function buildMjml(data) {
         <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">COMPLETED ON</mj-text>
         <mj-text color="#C00" font-size="44px" font-weight="400">${fmtDate(data.completedOn)}</mj-text>
         <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">MAINTENANCE CHECKS</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml(copy.maintenanceIntro)}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml2(copy.maintenanceIntro)}</mj-text>
       </mj-column>
     </mj-section>
     ${maintenanceChecksSection(copy, data.searchPosition)}
-    <mj-section background-color="#F4F4F4">
-      <mj-column>
-        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="55px">LIGHTHOUSE SCORES*</mj-text>
-        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Performance</mj-text>
-        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.performance}</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 50\u201389 // Ideal 90\u2013100</mj-text>
-        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Readability (A11y)</mj-text>
-        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.accessibility}</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 80\u201399 // Ideal 100</mj-text>
-        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Best Practices</mj-text>
-        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.bestPractices}</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 60\u201379 // Ideal 80\u201392</mj-text>
-        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Site Structure</mj-text>
-        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.seo}</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 50\u201389 // Ideal 90\u2013100</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="36px" line-height="20px">*A Lighthouse score is a numerical measure provided by Google's Lighthouse tool, which evaluates various aspects of a web page's quality.</mj-text>
-      </mj-column>
-    </mj-section>
-    <mj-section background-color="white">
-      <mj-column>
-        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">ANALYTICS</mj-text>
-        <mj-text color="#C00" font-size="44px" font-weight="400">${data.gaUsersCurrent !== void 0 ? fmtUsers(data.gaUsersCurrent) : "\u2014"} Users</mj-text>
-        ${analyticsTrendLine(data.gaUsersCurrent, data.gaUsersPrevious)}
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="36px" line-height="20px">${escapeXml(copy.seoCta)}</mj-text>
-      </mj-column>
-    </mj-section>
+    ${lighthouseScoresSection(data.lighthouse)}
+    ${analyticsSection({
+    current: data.gaUsersCurrent,
+    previous: data.gaUsersPrevious,
+    background: "white",
+    footnoteLines: [escapeXml2(copy.seoCta)]
+  })}
     ${isTesting ? testingIntroSection(copy) + testingChecklistSection(copy) : maintenanceTestingPlaceholder(data.lastTestedDate)}
     ${data.commentary ? commentarySection(data.commentary, copy) : ""}
     <mj-section background-color="white">
       <mj-column padding-top="36px">
         <mj-text color="#C00" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="36px" line-height="36px">Any questions, concerns or requests?</mj-text>
         ${copy.contact.map(
-    (line, i) => i === copy.contact.length - 1 ? `<mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" padding-top="0px" line-height="30px" padding-bottom="36px">${escapeXml(line)}</mj-text>` : `<mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml(line)}</mj-text>`
+    (line, i) => i === copy.contact.length - 1 ? `<mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" padding-top="0px" line-height="30px" padding-bottom="36px">${escapeXml2(line)}</mj-text>` : `<mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml2(line)}</mj-text>`
   ).join("\n        ")}
         <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml(copy.footerOrg)}. All rights reserved.</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml2(copy.footerOrg)}. All rights reserved.</mj-text>
         <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
         ${[copy.footerOrg, ...copy.footerAddress].map(
-    (line) => `<mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml(line)}</mj-text>`
+    (line) => `<mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(line)}</mj-text>`
   ).join("\n        ")}
       </mj-column>
     </mj-section>
@@ -3074,22 +3452,22 @@ function buildMjml(data) {
 }
 
 // src/reports/launch-email/template.ts
-var RED = "#C00";
-var GREY = "#757575";
+var RED2 = "#C00";
+var GREY2 = "#757575";
 function buildLaunchMjml(data) {
   const copy = data.copy ?? DEFAULT_COPY;
-  const previewText = `${escapeXml(data.siteName)} is live`;
+  const previewText = `${escapeXml2(data.siteName)} is live`;
   const setupRows = copy.launchSetupItems.map(
     (item) => `
-      <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="4px" padding-bottom="4px">\u2022 ${escapeXml(item)}</mj-text>`
+      <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="4px" padding-bottom="4px">\u2022 ${escapeXml2(item)}</mj-text>`
   ).join("");
   const contactRows = copy.contact.map(
     (line) => `
-      <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml(line)}</mj-text>`
+      <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml2(line)}</mj-text>`
   ).join("");
   const footerAddressRows = copy.footerAddress.map(
     (line) => `
-      <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml(line)}</mj-text>`
+      <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(line)}</mj-text>`
   ).join("");
   return `<mjml>
   <mj-head>
@@ -3107,20 +3485,20 @@ function buildLaunchMjml(data) {
     </mj-section>
     <mj-section background-color="white">
       <mj-column>
-        <mj-text color="${RED}" font-size="20px" font-weight="700" padding-top="75px">${escapeXml(copy.launchHeading)}</mj-text>
-        <mj-text color="${RED}" font-size="44px" font-weight="400">${fmtDate(data.completedOn)}</mj-text>
-        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="20px">${escapeXml(copy.launchBody)}</mj-text>
+        <mj-text color="${RED2}" font-size="20px" font-weight="700" padding-top="75px">${escapeXml2(copy.launchHeading)}</mj-text>
+        <mj-text color="${RED2}" font-size="44px" font-weight="400">${fmtDate(data.completedOn)}</mj-text>
+        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="20px">${escapeXml2(copy.launchBody)}</mj-text>
         ${setupRows}
       </mj-column>
     </mj-section>
     <mj-section background-color="white">
       <mj-column padding-top="36px">
-        <mj-text color="${RED}" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="36px" line-height="36px">Any questions, concerns or requests?</mj-text>
+        <mj-text color="${RED2}" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="36px" line-height="36px">Any questions, concerns or requests?</mj-text>
         ${contactRows}
         <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml(copy.footerOrg)}. All rights reserved.</mj-text>
-        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
-        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml(copy.footerOrg)}</mj-text>
+        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml2(copy.footerOrg)}. All rights reserved.</mj-text>
+        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
+        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(copy.footerOrg)}</mj-text>
         ${footerAddressRows}
       </mj-column>
     </mj-section>
@@ -3134,18 +3512,14 @@ var FREQ_PHRASE = {
   Quarterly: "every quarter",
   Yearly: "every year"
 };
-var RED2 = "#C00";
-var GREY2 = "#757575";
-var CHECK_PNG2 = `cid:${CHECK_CID}`;
-function fmtVisitors(n) {
-  return n.toLocaleString("en-US");
+var RED3 = "#C00";
+var GREY3 = "#757575";
+var SECTION_PAD = "40px";
+function sectionLabel(text) {
+  return `<mj-text color="${RED3}" font-size="20px" font-weight="700" padding-top="0px">${escapeXml2(text)}</mj-text>`;
 }
-function visitorTrend(cur, prev) {
-  if (cur === void 0 || prev === void 0 || prev === 0) return null;
-  const pct = Math.round((cur - prev) / prev * 100);
-  if (pct > 0) return `\u25B2 ${pct}% vs the previous month`;
-  if (pct < 0) return `\u25BC ${Math.abs(pct)}% vs the previous month`;
-  return "No change vs the previous month";
+function bodyLine(text, paddingTop = "8px") {
+  return `<mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="${paddingTop}">${escapeXml2(text)}</mj-text>`;
 }
 function announcementSiteExtras(site) {
   return {
@@ -3153,83 +3527,68 @@ function announcementSiteExtras(site) {
     improvements: { resendForms: true, svelte5: true }
   };
 }
-var SCORE_PREVIEW = [
-  { label: "Performance", key: "performance" },
-  { label: "Readability (A11y)", key: "accessibility" },
-  { label: "Best Practices", key: "bestPractices" },
-  { label: "Site Structure", key: "seo" }
-];
 function buildAnnouncementMjml(data) {
   const copy = data.copy ?? DEFAULT_COPY;
   const previewText = "Your monthly report from Reddoor";
+  const cad = data.cadence;
+  const hasMaint = Boolean(cad && cad.maintenance !== "None");
+  const hasTesting = Boolean(cad && cad.testing !== "None");
   const improvementItems = [];
   if (data.improvements?.resendForms) improvementItems.push(copy.announceImprovementResend);
   if (data.improvements?.svelte5) improvementItems.push(copy.announceImprovementSvelte5);
-  const improvementsSection = improvementItems.length > 0 ? `
-    <mj-section background-color="white">
+  const hasImpr = improvementItems.length > 0;
+  const BANDS = ["white", "#F4F4F4"];
+  let bandN = 0;
+  const nextBg = () => BANDS[bandN++ % 2];
+  const introBg = nextBg();
+  const maintBg = hasMaint ? nextBg() : "";
+  const testBg = hasTesting ? nextBg() : "";
+  const lighthouseBg = nextBg();
+  const analyticsBg = nextBg();
+  const improvementsBg = hasImpr ? nextBg() : "";
+  const contactBg = nextBg();
+  const maintenanceSection = cad && cad.maintenance !== "None" ? `
+    <mj-section background-color="${maintBg}" padding-top="${SECTION_PAD}" padding-bottom="0px">
       <mj-column>
-        <mj-text color="${RED2}" font-size="20px" font-weight="700" padding-top="36px">RECENT IMPROVEMENTS</mj-text>
-        ${improvementItems.map(
-    (item) => `
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="4px" padding-bottom="4px">\u2022 ${escapeXml(item)}</mj-text>`
-  ).join("")}
+        ${sectionLabel("MAINTENANCE CHECKS")}
+        ${bodyLine(`${copy.maintenanceIntro} We do this ${FREQ_PHRASE[cad.maintenance]}.${cad.testing === "None" ? ` ${copy.announceCadence}` : ""}`)}
       </mj-column>
-    </mj-section>` : "";
-  const cad = data.cadence;
-  const cadenceBlocks = [];
-  if (cad && cad.testing !== "None")
-    cadenceBlocks.push({
-      line: `${copy.announceTestingLabel} \u2014 ${FREQ_PHRASE[cad.testing]}`,
-      checks: copy.testingChecklist
-    });
-  if (cad && cad.maintenance !== "None")
-    cadenceBlocks.push({
-      line: `${copy.announceMaintenanceLabel} \u2014 ${FREQ_PHRASE[cad.maintenance]}`,
-      checks: copy.maintenanceChecks
-    });
-  const cadenceSection = cadenceBlocks.length > 0 ? `
-    <mj-section background-color="white">
+    </mj-section>${checklistRowsSection(copy.maintenanceChecks, {
+    background: maintBg,
+    lastPaddingBottom: SECTION_PAD
+  })}` : "";
+  const testingSection = cad && cad.testing !== "None" ? `
+    <mj-section background-color="${testBg}" padding-top="${SECTION_PAD}" padding-bottom="0px">
       <mj-column>
-        <mj-text color="${RED2}" font-size="20px" font-weight="700" padding-top="36px">${escapeXml(copy.announceCadenceHeading)}</mj-text>
-        ${cadenceBlocks.map(
-    (b) => `
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="400" line-height="24px" padding-top="12px" padding-bottom="2px">\u2022 ${escapeXml(b.line)}</mj-text>${b.checks.map(
-      (c) => `
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="14px" font-weight="300" line-height="22px" padding-top="1px" padding-bottom="0px" padding-left="16px">${escapeXml(c)} <img src="${CHECK_PNG2}" alt="\u2713" width="14" height="14" style="vertical-align:middle;display:inline-block;margin-left:2px;" /></mj-text>`
-    ).join("")}`
-  ).join("")}
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="14px">${escapeXml(copy.announceCadence)}</mj-text>
+        ${sectionLabel("TESTING")}
+        ${bodyLine(`${copy.testingIntro} We run a full test ${FREQ_PHRASE[cad.testing]}. ${copy.announceCadence}`)}
       </mj-column>
-    </mj-section>` : "";
-  const scoreRows = SCORE_PREVIEW.map(
-    ({ label, key }) => `
-        <mj-text color="${RED2}" font-size="20px" font-weight="300" padding-top="25px">${label}</mj-text>
-        <mj-text color="${RED2}" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse[key]}</mj-text>`
-  ).join("");
-  const scoreNote = copy.announceScoreNote ? `
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" font-style="italic" line-height="18px" padding-top="16px">${escapeXml(copy.announceScoreNote)}</mj-text>` : "";
-  const trend = visitorTrend(data.gaUsersCurrent, data.gaUsersPrevious);
-  const trafficRows = [];
-  if (data.gaUsersCurrent !== void 0)
-    trafficRows.push(`
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="8px"><span style="color:${RED2};font-size:22px;font-weight:400;">${escapeXml(fmtVisitors(data.gaUsersCurrent))}</span> visitors in the last month${trend ? ` \u2014 ${escapeXml(trend)}` : ""}</mj-text>`);
-  if (data.searchPosition !== void 0)
-    trafficRows.push(`
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="4px">Page 1 Google result (#${data.searchPosition}) for your brand search</mj-text>`);
-  const trafficSection = trafficRows.length > 0 ? `
-    <mj-section background-color="white">
+    </mj-section>${checklistRowsSection(copy.testingChecklist, {
+    background: testBg,
+    lastPaddingBottom: SECTION_PAD
+  })}` : "";
+  const analytics = analyticsSection({
+    current: data.gaUsersCurrent,
+    previous: data.gaUsersPrevious,
+    background: analyticsBg,
+    pad: SECTION_PAD,
+    bodyLines: data.searchPosition !== void 0 ? [`Page 1 Google result (#${data.searchPosition}) for your brand search`] : []
+  });
+  const improvementsSection = hasImpr ? `
+    <mj-section background-color="${improvementsBg}" padding-top="${SECTION_PAD}" padding-bottom="${SECTION_PAD}">
       <mj-column>
-        <mj-text color="${RED2}" font-size="20px" font-weight="700" padding-top="36px">TRAFFIC &amp; SEARCH</mj-text>
-        ${trafficRows.join("")}
+        ${sectionLabel("RECENT IMPROVEMENTS")}
+        ${improvementItems.map((item) => bodyLine(item)).join("\n        ")}
+        ${bodyLine(copy.announceOpenDoor, "16px")}
       </mj-column>
     </mj-section>` : "";
   const contactRows = copy.contact.map(
     (line) => `
-      <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml(line)}</mj-text>`
+      <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml2(line)}</mj-text>`
   ).join("");
   const footerAddressRows = copy.footerAddress.map(
     (line) => `
-      <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml(line)}</mj-text>`
+      <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(line)}</mj-text>`
   ).join("");
   return `<mjml>
   <mj-head>
@@ -3238,42 +3597,33 @@ function buildAnnouncementMjml(data) {
       <mj-section padding-left="11%" padding-right="11%"/>
       <mj-image padding="0px" />
     </mj-attributes>
-    <mj-preview>${escapeXml(previewText)}</mj-preview>
+    <mj-preview>${escapeXml2(previewText)}</mj-preview>
     ${headerStyleBlock(data)}
   </mj-head>
   <mj-body background-color="white">
     <mj-section background-color="#F4F4F4" padding-top="0px" padding-bottom="0px" padding-left="0px" padding-right="0px">
       <mj-column>${headerImageTag(data)}</mj-column>
     </mj-section>
-    <mj-section background-color="white">
+    <mj-section background-color="${introBg}" padding-top="${SECTION_PAD}" padding-bottom="${SECTION_PAD}">
       <mj-column>
-        <mj-text color="${RED2}" font-size="20px" font-weight="700" padding-top="75px">${escapeXml(copy.announceHeading)}</mj-text>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="20px">Prepared for ${escapeXml(data.siteName)}</mj-text>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="8px">${escapeXml(copy.announceBody)}</mj-text>
+        ${sectionLabel(copy.announceHeading)}
+        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="20px">Prepared for ${escapeXml2(data.siteName)}</mj-text>
+        ${bodyLine(copy.announceBody)}
       </mj-column>
     </mj-section>
-    ${cadenceSection}
+    ${maintenanceSection}
+    ${testingSection}
+    ${lighthouseScoresSection(data.lighthouse, { background: lighthouseBg, pad: SECTION_PAD })}
+    ${analytics}
     ${improvementsSection}
-    <mj-section background-color="#F4F4F4">
+    <mj-section background-color="${contactBg}" padding-top="${SECTION_PAD}" padding-bottom="${SECTION_PAD}">
       <mj-column>
-        <mj-text color="${RED2}" font-size="20px" font-weight="700" padding-top="55px">${escapeXml(copy.announcePreviewLabel)}</mj-text>
-        ${scoreRows}${scoreNote}
-      </mj-column>
-    </mj-section>
-    ${trafficSection}
-    <mj-section background-color="white">
-      <mj-column>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="36px">${escapeXml(copy.announceOpenDoor)}</mj-text>
-      </mj-column>
-    </mj-section>
-    <mj-section background-color="white">
-      <mj-column padding-top="36px">
-        <mj-text color="${RED2}" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="36px" line-height="36px">Any questions, concerns or requests?</mj-text>
+        <mj-text color="${RED3}" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="0px" line-height="36px">Any questions, concerns or requests?</mj-text>
         ${contactRows}
         <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml(copy.footerOrg)}. All rights reserved.</mj-text>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml(copy.footerOrg)}</mj-text>
+        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml2(copy.footerOrg)}. All rights reserved.</mj-text>
+        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
+        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(copy.footerOrg)}</mj-text>
         ${footerAddressRows}
       </mj-column>
     </mj-section>
@@ -3366,9 +3716,32 @@ function mapRow2(rec) {
     deliveryStatus: f["Delivery status"] ?? "pending",
     renderedHtmlAttachment: html,
     resendMessageId: f["Resend message ID"] ?? null,
-    checklist: Object.fromEntries(ALL_CHECKLIST_FIELDS.map((name) => [name, Boolean(f[name])]))
+    checklist: Object.fromEntries(ALL_CHECKLIST_FIELDS.map((name) => [name, Boolean(f[name])])),
+    autoEvidence: parseAutoEvidence(f["Checklist auto-evidence"])
   };
 }
+function parseAutoEvidence(raw) {
+  if (typeof raw !== "string" || !raw.trim()) return null;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+  const out = {};
+  for (const [field, v] of Object.entries(parsed)) {
+    if (!v || typeof v !== "object") continue;
+    const o = v;
+    if (o.result !== "pass" && o.result !== "fail" && o.result !== "unknown") continue;
+    out[field] = {
+      result: o.result,
+      checkedAt: typeof o.checkedAt === "string" ? o.checkedAt : null,
+      note: typeof o.note === "string" ? o.note : ""
+    };
+  }
+  return Object.keys(out).length > 0 ? out : null;
+}
 function lighthouseFromFields(f) {
   const p = f["Lighthouse \u2014 Performance"];
   const a = f["Lighthouse \u2014 Accessibility"];
@@ -3402,6 +3775,10 @@ async function createDraft(base, input) {
   if (input.searchPosition !== void 0) fields["Search position"] = input.searchPosition;
   if (input.period !== void 0) fields["Period"] = input.period;
   if (input.subjectOverride !== void 0) fields["Subject override"] = input.subjectOverride;
+  for (const field of input.checklistTicks ?? []) fields[field] = true;
+  if (input.autoEvidence && Object.keys(input.autoEvidence).length > 0) {
+    fields["Checklist auto-evidence"] = JSON.stringify(input.autoEvidence);
+  }
   const created = await base(REPORTS_TABLE).create([{ fields }]);
   const rec = created[0];
   if (!rec) throw new Error("Airtable create returned no records");
@@ -3443,6 +3820,145 @@ async function stampSent(base, recordId, sentAt, messageId) {
   ]);
 }
 
+// src/reports/queue.ts
+var REPORT_TIER = {
+  Maintenance: 1,
+  Testing: 2,
+  Announcement: 3,
+  Launch: 3
+};
+function reportTier(type) {
+  return REPORT_TIER[type];
+}
+async function queueDraft(base, report) {
+  const newTier = reportTier(report.reportType);
+  const others = (await listReportsForSite(base, report.siteId)).filter(isPendingApproval).filter((r) => r.id !== report.id);
+  const blocker = others.find((r) => reportTier(r.reportType) >= newTier);
+  if (blocker) {
+    await setDraftReady(base, report.id, false);
+    return { queued: false, blockedBy: blocker.reportType, supersededIds: [] };
+  }
+  const supersededIds = [];
+  for (const r of others) {
+    await setDraftReady(base, r.id, false);
+    supersededIds.push(r.id);
+  }
+  await setDraftReady(base, report.id, true);
+  return { queued: true, supersededIds };
+}
+
+// src/reports/auto-tick.ts
+var STALE_DAYS = 3;
+var MS_PER_DAY2 = 24 * 60 * 60 * 1e3;
+function isFresh(checkedAt, now) {
+  if (!checkedAt) return false;
+  const t = new Date(checkedAt).getTime();
+  if (Number.isNaN(t)) return false;
+  return now.getTime() - t <= STALE_DAYS * MS_PER_DAY2;
+}
+var CERT_MIN_DAYS = 14;
+function autoTickChecklist(site, reportType, now, signals) {
+  const out = /* @__PURE__ */ new Map();
+  const fields = new Set(checklistFor(reportType).map((i) => i.field));
+  if (fields.has("Maint: Google Indexed")) {
+    const g = googleEvidence(now, signals.search);
+    if (g) out.set("Maint: Google Indexed", g);
+  }
+  if (fields.has("Maint: Security Updates")) {
+    const s = securityEvidence(site, now);
+    if (s) out.set("Maint: Security Updates", s);
+  }
+  if (fields.has("Maint: Domain, DNS & SSL")) {
+    const d = domainEvidence(site, now);
+    if (d) out.set("Maint: Domain, DNS & SSL", d);
+  }
+  if (fields.has("Test: Desktop Browsers")) {
+    const e = browserEvidence(
+      site.crossbrowserOk,
+      site,
+      now,
+      "Desktop renders cleanly",
+      "render errors"
+    );
+    if (e) out.set("Test: Desktop Browsers", e);
+  }
+  if (fields.has("Test: Mobile Browsers")) {
+    const e = browserEvidence(
+      site.mobileOk,
+      site,
+      now,
+      "Mobile renders cleanly",
+      "overflow/errors"
+    );
+    if (e) out.set("Test: Mobile Browsers", e);
+  }
+  if (fields.has("Test: Links & Navigation")) {
+    const broken = site.brokenLinks;
+    const failNote = broken && broken > 0 ? `${broken} broken link(s)` : "broken links / nav";
+    const e = browserEvidence(site.linksOk, site, now, "All internal links resolve", failNote);
+    if (e) out.set("Test: Links & Navigation", e);
+  }
+  return out;
+}
+function browserEvidence(ok, site, now, passNote, failNote) {
+  if (ok === null || !site.browserCheckedAt) return null;
+  const at = site.browserCheckedAt;
+  if (!isFresh(at, now)) {
+    return { result: "unknown", checkedAt: at, note: "Browser check is stale (>3d)" };
+  }
+  return ok ? { result: "pass", checkedAt: at, note: passNote } : { result: "fail", checkedAt: at, note: failNote };
+}
+function securityEvidence(site, now) {
+  const crit = site.securityVulnsCritical;
+  const high = site.securityVulnsHigh;
+  if (crit === null || high === null || !site.lastSecurityAuditAt) return null;
+  const at = site.lastSecurityAuditAt;
+  if (!isFresh(at, now)) {
+    return { result: "unknown", checkedAt: at, note: "Security audit is stale (>3d)" };
+  }
+  if (crit === 0 && high === 0) {
+    return { result: "pass", checkedAt: at, note: "No known critical/high vulnerabilities" };
+  }
+  return { result: "fail", checkedAt: at, note: `${crit} critical / ${high} high vuln(s)` };
+}
+function googleEvidence(now, search) {
+  const at = now.toISOString();
+  if (search.softFailed) {
+    return { result: "unknown", checkedAt: at, note: "Search Console unavailable this run" };
+  }
+  if (search.value === null) return null;
+  if (search.value.foundOnPage1) {
+    const pos2 = search.value.position;
+    return {
+      result: "pass",
+      checkedAt: at,
+      note: `Page 1 on Google${pos2 !== null ? ` (#${pos2})` : ""}`
+    };
+  }
+  const pos = search.value.position;
+  return {
+    result: "fail",
+    checkedAt: at,
+    note: `Not on page 1${pos !== null ? ` (avg #${pos})` : ""}`
+  };
+}
+function domainEvidence(site, now) {
+  if (!site.url || isNetlifyAppUrl(site.url)) return null;
+  if (!site.domainCheckedAt) return null;
+  const at = site.domainCheckedAt;
+  if (!isFresh(site.domainCheckedAt, now)) {
+    return { result: "unknown", checkedAt: at, note: "Domain check is stale (>3d)" };
+  }
+  const days = site.certDaysRemaining;
+  if (days === null) {
+    return { result: "fail", checkedAt: at, note: "Did not resolve, or no valid TLS cert" };
+  }
+  if (days <= CERT_MIN_DAYS) {
+    return { result: "fail", checkedAt: at, note: `TLS cert expires in ${days}d` };
+  }
+  return { result: "pass", checkedAt: at, note: `Custom domain, valid cert (${days}d left)` };
+}
+
 // src/reports/airtable/attachments.ts
 function looksLikeHtml(bytes) {
   const start = bytes[0] === 239 && bytes[1] === 187 && bytes[2] === 191 ? 3 : 0;
@@ -3514,7 +4030,7 @@ import { readFileSync as readFileSync3 } from "fs";
 import { JWT } from "google-auth-library";
 import { BetaAnalyticsDataClient } from "@google-analytics/data";
 var ANALYTICS_READONLY = "https://www.googleapis.com/auth/analytics.readonly";
-var MS_PER_DAY = 864e5;
+var MS_PER_DAY3 = 864e5;
 function ymd2(d) {
   return d.toISOString().slice(0, 10);
 }
@@ -3527,9 +4043,9 @@ async function fetchPeriodUsers(query, periodStart, periodEnd) {
     subject: query.subject
   });
   const client = new BetaAnalyticsDataClient({ authClient });
-  const lengthDays = Math.round((periodEnd.getTime() - periodStart.getTime()) / MS_PER_DAY);
-  const prevEnd = new Date(periodStart.getTime() - MS_PER_DAY);
-  const prevStart = new Date(prevEnd.getTime() - lengthDays * MS_PER_DAY);
+  const lengthDays = Math.round((periodEnd.getTime() - periodStart.getTime()) / MS_PER_DAY3);
+  const prevEnd = new Date(periodStart.getTime() - MS_PER_DAY3);
+  const prevStart = new Date(prevEnd.getTime() - lengthDays * MS_PER_DAY3);
   const property = `properties/${query.propertyId}`;
   const run = async (start, end) => {
     const [resp] = await client.runReport({
@@ -3653,7 +4169,7 @@ async function draftReportForSite(base, siteRow, reportType, options = {}) {
   const periodStart = base !== null ? await derivePeriodStart(base, siteRow, reportType, today) : daysAgo(today, 30);
   const periodEnd = today;
   const completedOn = today;
-  const lastTestedDate = reportType === "Maintenance" && siteRow.testingDay ? new Date(siteRow.testingDay) : null;
+  const lastTestedDate = reportType === "Maintenance" && siteRow.lastLighthouseAuditAt ? new Date(siteRow.lastLighthouseAuditAt) : null;
   const gaResult = base !== null ? await fetchGaUsers(siteRow, periodStart, periodEnd) : NO_ENRICHMENT;
   const searchResult = base !== null ? await fetchSearch(siteRow, periodStart, periodEnd) : NO_ENRICHMENT;
   const gaUsers = gaResult.value;
@@ -3681,13 +4197,28 @@ async function draftReportForSite(base, siteRow, reportType, options = {}) {
     const path = options.previewPath ?? `reports/${slug}/draft.html`;
     await mkdir3(dirname6(path), { recursive: true });
     await writeFile10(path, html, "utf-8");
-    return { reportRow: null, htmlPath: path, html, softFailures };
+    return { reportRow: null, htmlPath: path, html, softFailures, queued: null, supersededIds: [] };
   }
   if (base === null) throw new Error("base required when previewOnly=false");
   if (options.completeRowId) {
-    await finishDraftRow(base, options.completeRowId, slug, periodEnd, html);
-    return { reportRow: options.existingRow ?? null, htmlPath: null, html, softFailures };
+    await uploadDraftHtml(options.completeRowId, slug, periodEnd, html);
+    const outcome2 = await queueDraft(base, {
+      id: options.completeRowId,
+      siteId: siteRow.id,
+      reportType
+    });
+    return {
+      reportRow: options.existingRow ?? null,
+      htmlPath: null,
+      html,
+      softFailures,
+      queued: outcome2.queued,
+      supersededIds: outcome2.supersededIds
+    };
   }
+  const evidence = autoTickChecklist(siteRow, reportType, completedOn, { search: searchResult });
+  const checklistTicks = [...evidence.entries()].filter(([, e]) => e.result === "pass").map(([field]) => field);
+  const autoEvidence = Object.fromEntries(evidence);
   const reportId = `${siteRow.name} \u2014 ${reportType} \u2014 ${periodEnd.toISOString().slice(0, 10)}`;
   const created = await createDraft(base, {
     reportId,
@@ -3701,15 +4232,28 @@ async function draftReportForSite(base, siteRow, reportType, options = {}) {
     lastTestedDate,
     ...gaUsers ? { gaUsersCurrent: gaUsers.current, gaUsersPrevious: gaUsers.previous } : {},
     ...search ? { searchFoundPage1: search.foundOnPage1 } : {},
-    ...search?.foundOnPage1 && search.position !== null ? { searchPosition: search.position } : {}
+    ...search?.foundOnPage1 && search.position !== null ? { searchPosition: search.position } : {},
+    checklistTicks,
+    autoEvidence
+  });
+  await uploadDraftHtml(created.id, slug, periodEnd, html);
+  const outcome = await queueDraft(base, {
+    id: created.id,
+    siteId: siteRow.id,
+    reportType
   });
-  await finishDraftRow(base, created.id, slug, periodEnd, html);
-  return { reportRow: created, htmlPath: null, html, softFailures };
+  return {
+    reportRow: created,
+    htmlPath: null,
+    html,
+    softFailures,
+    queued: outcome.queued,
+    supersededIds: outcome.supersededIds
+  };
 }
-async function finishDraftRow(base, rowId, slug, periodEnd, html) {
+async function uploadDraftHtml(rowId, slug, periodEnd, html) {
   const htmlFilename = `${slug}-${periodEnd.toISOString().slice(0, 10)}.html`;
   await uploadAttachment(rowId, "Rendered HTML", html, htmlFilename, "text/html");
-  await setDraftReady(base, rowId, true);
 }
 var NO_ENRICHMENT = { value: null, softFailed: false };
 async function fetchGaUsers(siteRow, periodStart, periodEnd) {
@@ -3973,42 +4517,39 @@ async function sendOne(client, base, site, report) {
     headerHeight: header.displayHeight,
     headerBgColor: header.placeholderColor,
     // Announcement-only: re-derive cadence + improvements from the site row so the SENT email
-    // keeps its WHAT TO EXPECT section + improvement callouts. Without this the send-time
-    // re-render drops them entirely (they're not stored on the Reports row). Ignored by the
-    // other report templates.
+    // keeps its cadence copy + improvement callouts. Without this the send-time re-render drops
+    // them entirely (they're not stored on the Reports row). Ignored by the other templates.
     ...report.reportType === "Announcement" ? announcementSiteExtras(site) : {}
   });
   const reportDate = report.completedOn ? new Date(report.completedOn) : /* @__PURE__ */ new Date();
   const subject = report.subjectOverride ?? `${site.name} \u2014 ${monthYear(reportDate)} ${report.reportType} Report`;
+  const attachments = [
+    toInlineAttachment({
+      bytes: header.bytes,
+      filename: `${cidName}.jpg`,
+      contentType: header.contentType,
+      cid: cidName
+    })
+  ];
+  for (const img of [bundled.check, bundled.blurred]) {
+    if (html.includes(`cid:${img.cid}`)) {
+      attachments.push(
+        toInlineAttachment({
+          bytes: img.bytes,
+          filename: img.filename,
+          contentType: img.contentType,
+          cid: img.cid
+        })
+      );
+    }
+  }
   const payload = {
     from: FROM_ADDRESS,
     to,
     replyTo: REPLY_TO,
     subject,
     html,
-    attachments: [
-      toInlineAttachment({
-        bytes: header.bytes,
-        filename: `${cidName}.jpg`,
-        contentType: header.contentType,
-        cid: cidName
-      }),
-      // Bundled images referenced via cid:rd-check-png / cid:rd-blurred-tests-jpg
-      // in the template. Attached inline so the email is self-contained — no
-      // external CDN dependency, no image-blocked broken icons in webmail.
-      toInlineAttachment({
-        bytes: bundled.check.bytes,
-        filename: bundled.check.filename,
-        contentType: bundled.check.contentType,
-        cid: bundled.check.cid
-      }),
-      toInlineAttachment({
-        bytes: bundled.blurred.bytes,
-        filename: bundled.blurred.filename,
-        contentType: bundled.blurred.contentType,
-        cid: bundled.blurred.cid
-      })
-    ],
+    attachments,
     // Stable across retries of the same row — if Airtable stamping fails after a
     // successful Resend, the next --send-ready replays with the same key and
     // Resend returns the original message id rather than sending a duplicate.
@@ -4205,7 +4746,9 @@ function checklistBlock(r) {
   const url = `/api/reports/${encodeURIComponent(r.id)}/checklist`;
   const boxes = items.map((item) => {
     const checked = r.checklist[item.field] === true ? " checked" : "";
-    return `<label class="check-item"><input type="checkbox" class="checklist-checkbox" data-checklist-report-id="${rid}" data-field="${escapeHtml(item.field)}" data-checklist-url="${escapeHtml(url)}"${checked} /> ${escapeHtml(item.label)}</label>`;
+    const ev = r.autoEvidence?.[item.field];
+    const badge = ev ? ev.result === "pass" ? ` <span class="auto-badge auto-pass" title="${escapeHtml(ev.note)}">auto \u2713</span>` : ` <span class="auto-badge auto-amber" title="${escapeHtml(ev.note)}">auto: ${escapeHtml(ev.note)}</span>` : "";
+    return `<label class="check-item"><input type="checkbox" class="checklist-checkbox" data-checklist-report-id="${rid}" data-field="${escapeHtml(item.field)}" data-checklist-url="${escapeHtml(url)}"${checked} /> ${escapeHtml(item.label)}${badge}</label>`;
   }).join("");
   return `<div class="checklist" data-checklist-for="${rid}">${boxes}</div>`;
 }
@@ -4332,6 +4875,9 @@ button.approve:disabled { opacity: 0.6; cursor: default; }
 .checklist { display: flex; flex-wrap: wrap; gap: 0.25rem 1.25rem; margin: 0.5rem 0 0.25rem 0.25rem; }
 .check-item { display: flex; align-items: center; gap: 0.4rem; font-size: 0.9rem; }
 .check-item input { margin: 0; }
+.auto-badge { font-size: 0.72rem; border-radius: 0.25rem; padding: 0 0.35rem; white-space: nowrap; }
+.auto-pass { background: #e6f4ea; color: #137333; }
+.auto-amber { background: #fef7e0; color: #b06000; }
 .pill { font-size: 0.75rem; padding: 0.1rem 0.5rem; border-radius: 999px; font-weight: 700; }
 .subm-list { list-style: none; padding: 0; margin: 0; }
 .subm-item { padding: 0.6rem 0; border-bottom: 1px solid #eee; }