@reddoorla/maintenance 0.55.0 → 0.57.0

package/dist/index.js

@@ -1,4758 +1,103 @@
-// src/audits/util/spawn.ts
-import { spawn } from "child_process";
-import { StringDecoder } from "string_decoder";
-var TRUNCATION_MARKER = "\n\u2026[output truncated]";
-function makeSpawn(internals = {}) {
-  const spawnImpl = internals.spawnImpl ?? spawn;
-  const killImpl = internals.killImpl ?? ((pid, sig) => process.kill(pid, sig));
-  const killGraceMs = internals.killGraceMs ?? 5e3;
-  const maxOutputBytes = internals.maxOutputBytes ?? 10 * 1024 * 1024;
-  return (cmd, args, opts = {}) => new Promise((resolve, reject) => {
-    const streaming = opts.streaming === true;
-    const child = spawnImpl(cmd, [...args], {
-      cwd: opts.cwd,
-      env: opts.env ?? process.env,
-      stdio: streaming ? ["ignore", "inherit", "inherit"] : ["ignore", "pipe", "pipe"],
-      // Detach ONLY when a timeout can fire: the child then leads its own
-      // process group, so the timeout can kill the WHOLE tree (vite, and
-      // Chromium under lhci/playwright) via process.kill(-pid), not just the
-      // npx/pnpm wrapper. Without it, killing the wrapper orphaned the
-      // grandchildren — a zombie vite squatting its port, Chrome left running.
-      // We do NOT detach timeout-less streaming calls (pnpm install/up):
-      // detaching gains nothing there (no timeout → no group-kill) and would
-      // break terminal Ctrl-C, which only reaches the foreground group — i.e.
-      // it would re-orphan the very children this guards. We never unref() the
-      // child since we still await it.
-      detached: opts.timeoutMs !== void 0
-    });
-    const cap = (acc, chunk) => {
-      if (acc.length >= maxOutputBytes) return acc;
-      const next = acc + chunk;
-      return next.length > maxOutputBytes ? next.slice(0, maxOutputBytes) + TRUNCATION_MARKER : next;
-    };
-    let stdout = "";
-    let stderr = "";
-    const outDecoder = new StringDecoder("utf-8");
-    const errDecoder = new StringDecoder("utf-8");
-    if (!streaming) {
-      child.stdout?.on(
-        "data",
-        (chunk) => stdout = cap(stdout, outDecoder.write(chunk))
-      );
-      child.stderr?.on(
-        "data",
-        (chunk) => stderr = cap(stderr, errDecoder.write(chunk))
-      );
-    }
-    const killGroup = (sig) => {
-      if (child.pid === void 0) return;
-      try {
-        killImpl(-child.pid, sig);
-      } catch {
-      }
-    };
-    let killTimer;
-    const timer = opts.timeoutMs ? setTimeout(() => {
-      killGroup("SIGTERM");
-      killTimer = setTimeout(() => killGroup("SIGKILL"), killGraceMs);
-      killTimer.unref();
-      reject(new Error(`spawn timeout after ${opts.timeoutMs}ms: ${cmd}`));
-    }, opts.timeoutMs) : void 0;
-    const clearTimers = () => {
-      if (timer) clearTimeout(timer);
-      if (killTimer) clearTimeout(killTimer);
-    };
-    child.on("error", (err) => {
-      clearTimers();
-      reject(err);
-    });
-    child.on("close", (code) => {
-      clearTimers();
-      if (!streaming) {
-        stdout = cap(stdout, outDecoder.end());
-        stderr = cap(stderr, errDecoder.end());
-      }
-      resolve({ code: code ?? -1, stdout, stderr });
-    });
-  });
-}
-var defaultSpawn = makeSpawn();
-
-// src/audits/deps.ts
-import { readFile } from "fs/promises";
-import { join as join2 } from "path";
-
-// src/util/site.ts
-function siteLabel(site) {
-  return site.name || site.path;
-}
-
-// src/configs/baseline-versions.ts
-var baselineVersions = {
-  // SvelteKit core
-  svelte: "^5.55.10",
-  "@sveltejs/kit": "^2.61.1",
-  "@sveltejs/adapter-netlify": "^6.0.4",
-  "@sveltejs/adapter-auto": "^7.0.1",
-  "@sveltejs/vite-plugin-svelte": "^7.1.2",
-  "svelte-check": "^4.4.8",
-  // Build tooling
-  vite: "^8.0.14",
-  vitest: "^4.1.7",
-  typescript: "^6.0.3",
-  // Tailwind 4
-  tailwindcss: "^4.3.0",
-  "@tailwindcss/vite": "^4.3.0",
-  // Prismic
-  "@prismicio/client": "^7.21.8",
-  "@prismicio/svelte": "^2.2.1",
-  "@slicemachine/adapter-sveltekit": "^0.3.96",
-  "slice-machine-ui": "^2.21.3",
-  // Test tooling
-  "@playwright/test": "^1.60.0",
-  "@axe-core/playwright": "^4.11.3",
-  "@lhci/cli": "^0.15.1",
-  // Lint
-  eslint: "^10.4.0",
-  "eslint-plugin-svelte": "^3.18.0",
-  "eslint-config-prettier": "^10.1.8",
-  prettier: "^3.8.3",
-  "prettier-plugin-svelte": "^4.0.1",
-  "typescript-eslint": "^8.60.0",
-  "@eslint/js": "^10.0.1",
-  globals: "^17.6.0",
-  // Misc
-  "@lucide/svelte": "^1.17.0",
-  "@zerodevx/svelte-img": "^2.1.2"
-};
-
-// src/audits/deps-outdated.ts
-import { stat } from "fs/promises";
-import { join } from "path";
-async function exists(path) {
-  try {
-    await stat(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function majorOf(version) {
-  const head = version.replace(/^[\^~]/, "").split(".")[0] ?? "0";
-  const n = Number.parseInt(head, 10);
-  return Number.isNaN(n) ? 0 : n;
-}
-async function scanOutdated(sitePath, spawn2) {
-  if (!await exists(join(sitePath, "pnpm-lock.yaml"))) return null;
-  try {
-    if (!await exists(join(sitePath, "node_modules"))) {
-      const install = await spawn2("pnpm", ["install", "--frozen-lockfile"], {
-        cwd: sitePath,
-        timeoutMs: 18e4
-      });
-      if (install.code !== 0) return null;
-    }
-    const res = await spawn2("pnpm", ["outdated", "--json"], {
-      cwd: sitePath,
-      timeoutMs: 6e4
-    });
-    const parsed = JSON.parse(res.stdout || "{}");
-    const entries = Object.values(parsed);
-    return {
-      outdated: entries.length,
-      major: entries.filter((e) => e.current && e.latest && majorOf(e.latest) > majorOf(e.current)).length
-    };
-  } catch {
-    return null;
-  }
-}
-
-// src/audits/deps.ts
-function stripCaret(range) {
-  return range.replace(/^[\^~]/, "");
-}
-function isComparableRange(spec) {
-  return /^[\^~]?\d/.test(spec.trim());
-}
-function parseSemver(v) {
-  const cleaned = stripCaret(v).split("-")[0] ?? "0.0.0";
-  const parts = cleaned.split(".").map((n) => Number.parseInt(n, 10));
-  return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0];
-}
-function compareSemver(actual, baseline) {
-  const [aMajor, aMinor, aPatch] = parseSemver(actual);
-  const [bMajor, bMinor, bPatch] = parseSemver(baseline);
-  if (aMajor > bMajor) return "newer";
-  if (aMajor < bMajor) return "major";
-  if (aMinor > bMinor) return "newer";
-  if (aMinor < bMinor) return "minor";
-  if (aPatch > bPatch) return "newer";
-  if (aPatch < bPatch) return "patch";
-  return "same";
-}
-async function depsAudit(ctx) {
-  const pkgPath = join2(ctx.site.path, "package.json");
-  let pkgRaw;
-  try {
-    pkgRaw = await readFile(pkgPath, "utf-8");
-  } catch (err) {
-    return {
-      audit: "deps",
-      site: siteLabel(ctx.site),
-      status: "skip",
-      summary: `no package.json at ${pkgPath}`,
-      details: { error: String(err) }
-    };
-  }
-  let pkg;
-  try {
-    pkg = JSON.parse(pkgRaw);
-  } catch (err) {
-    return {
-      audit: "deps",
-      site: siteLabel(ctx.site),
-      status: "fail",
-      summary: `package.json is not valid JSON: ${err.message}`,
-      details: { error: String(err) }
-    };
-  }
-  const installed = {
-    ...pkg.dependencies ?? {},
-    ...pkg.devDependencies ?? {}
-  };
-  const entries = [];
-  for (const [name, baseline] of Object.entries(baselineVersions)) {
-    const actual = installed[name];
-    if (!actual) continue;
-    if (!isComparableRange(actual)) continue;
-    entries.push({
-      pkg: name,
-      baseline,
-      actual,
-      drift: compareSemver(actual, baseline)
-    });
-  }
-  const anyMajor = entries.some((d) => d.drift === "major");
-  const anyMinor = entries.some((d) => d.drift === "minor");
-  const anyNewer = entries.some((d) => d.drift === "newer");
-  const status = anyMajor ? "fail" : anyMinor || anyNewer ? "warn" : "pass";
-  const driftSummary = status === "pass" ? `all ${entries.length} tracked deps in line with baseline` : status === "warn" ? `${entries.filter((d) => d.drift !== "same").length} of ${entries.length} tracked deps drifted` : `${entries.filter((d) => d.drift === "major").length} deps lagging by a major version`;
-  const outdated = await scanOutdated(ctx.site.path, ctx.spawn ?? defaultSpawn);
-  const summary = outdated ? `${driftSummary}; ${outdated.outdated} outdated install(s) (${outdated.major} major)` : driftSummary;
-  return {
-    audit: "deps",
-    site: siteLabel(ctx.site),
-    status,
-    summary,
-    details: { entries, outdated }
-  };
-}
-
-// src/audits/lint.ts
-import { existsSync } from "fs";
-import { readFile as readFile2 } from "fs/promises";
-import { join as join3 } from "path";
-import { ESLint } from "eslint";
-import { check as prettierCheck, resolveConfig as prettierResolveConfig } from "prettier";
-import { glob } from "tinyglobby";
-var TARGET_GLOBS = ["**/*.{ts,js,svelte}"];
-var IGNORE = ["node_modules/**", "dist/**", ".svelte-kit/**", "build/**", ".netlify/**"];
-async function listFiles(cwd) {
-  return glob(TARGET_GLOBS, { cwd, ignore: IGNORE, absolute: false });
-}
-async function lintAudit(ctx) {
-  const { site } = ctx;
-  const configPath = join3(site.path, "eslint.config.js");
-  if (!existsSync(configPath)) {
-    return {
-      audit: "lint",
-      site: siteLabel(site),
-      status: "skip",
-      summary: "no eslint config at site root"
-    };
-  }
-  const eslint2 = new ESLint({
-    cwd: site.path,
-    overrideConfigFile: configPath,
-    errorOnUnmatchedPattern: false
-  });
-  const relFiles = await listFiles(site.path);
-  const eslintResults = await eslint2.lintFiles(relFiles);
-  const eslintErrors = eslintResults.reduce((n, r) => n + r.errorCount, 0);
-  const eslintWarnings = eslintResults.reduce((n, r) => n + r.warningCount, 0);
-  const prettierUnformatted = [];
-  for (const rel of relFiles) {
-    const absForResolve = join3(site.path, rel);
-    const source = await readFile2(absForResolve, "utf-8");
-    const options = await prettierResolveConfig(absForResolve) ?? {};
-    const ok = await prettierCheck(source, { ...options, filepath: absForResolve });
-    if (!ok) prettierUnformatted.push(rel);
-  }
-  const status = eslintErrors > 0 || prettierUnformatted.length > 0 ? "fail" : eslintWarnings > 0 ? "warn" : "pass";
-  const summary = status === "pass" ? `lint clean across ${relFiles.length} files` : `${eslintErrors} eslint errors, ${eslintWarnings} warnings, ${prettierUnformatted.length} unformatted`;
-  return {
-    audit: "lint",
-    site: siteLabel(site),
-    status,
-    summary,
-    details: {
-      eslintErrors,
-      eslintWarnings,
-      prettierUnformatted,
-      files: relFiles.length
-    }
-  };
-}
-
-// src/audits/security.ts
-function classify(v) {
-  if (v.critical > 0 || v.high > 0) return "fail";
-  if (v.moderate > 0 || v.low > 0) return "warn";
-  return "pass";
-}
-function normalizeSeverity(s) {
-  if (s === "low" || s === "moderate" || s === "high" || s === "critical") return s;
-  return "low";
-}
-function extractAdvisoriesFromPnpm(parsed) {
-  const out = [];
-  for (const a of Object.values(parsed.advisories ?? {})) {
-    if (!a) continue;
-    out.push({
-      module: a.module_name ?? "unknown",
-      severity: normalizeSeverity(a.severity),
-      title: a.title ?? "(no title)",
-      ...a.cves ? { cves: a.cves } : {},
-      ...a.url ? { url: a.url } : {}
-    });
-  }
-  return out;
-}
-function resolveNpmAdvisoryRoot(startName, vulnerabilities) {
-  const seen = /* @__PURE__ */ new Set();
-  let current = startName;
-  while (!seen.has(current)) {
-    seen.add(current);
-    const entry = vulnerabilities[current];
-    if (!entry || !Array.isArray(entry.via)) return { rootName: current };
-    const detailed = entry.via.find(
-      (e) => typeof e === "object" && e !== null
-    );
-    if (detailed) return { rootName: current, detail: detailed };
-    const next = entry.via.find((e) => typeof e === "string");
-    if (!next || next === current) return { rootName: current };
-    current = next;
-  }
-  return { rootName: current };
-}
-function extractAdvisoriesFromNpm(parsed) {
-  const vulnerabilities = parsed.vulnerabilities ?? {};
-  const roots = /* @__PURE__ */ new Map();
-  for (const [name, v] of Object.entries(vulnerabilities)) {
-    if (!v) continue;
-    const { rootName, detail } = resolveNpmAdvisoryRoot(name, vulnerabilities);
-    if (roots.has(rootName)) continue;
-    const rootEntry = vulnerabilities[rootName];
-    const severity = normalizeSeverity(rootEntry?.severity ?? v.severity);
-    const title = detail?.title ?? rootName;
-    const url = detail?.url;
-    roots.set(rootName, {
-      module: rootEntry?.name ?? rootName,
-      severity,
-      title,
-      ...url ? { url } : {}
-    });
-  }
-  return [...roots.values()];
-}
-async function runAuditTool(spawn2, cmd, args, cwd) {
-  let raw;
-  try {
-    raw = await spawn2(cmd, args, { cwd });
-  } catch (err) {
-    const e = err;
-    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) return { kind: "missing" };
-    return { kind: "error", reason: `spawn failed: ${String(err).slice(0, 200)}` };
-  }
-  if (raw.code !== 0 && raw.code !== 1) {
-    return {
-      kind: "error",
-      reason: `exit ${raw.code}${raw.stderr ? `: ${raw.stderr.slice(0, 150)}` : ""}`
-    };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw.stdout || "{}");
-  } catch (err) {
-    return { kind: "error", reason: `unparseable JSON: ${String(err).slice(0, 100)}` };
-  }
-  const errEnvelope = parsed.error;
-  if (errEnvelope && typeof errEnvelope === "object") {
-    return { kind: "error", reason: errEnvelope.code ?? "error envelope returned" };
-  }
-  const vulnsMeta = parsed.metadata?.vulnerabilities;
-  if (!vulnsMeta || Object.keys(vulnsMeta).length === 0) {
-    return { kind: "error", reason: "no metadata.vulnerabilities in output" };
-  }
-  return { kind: "ok", parsed };
-}
-async function securityAudit(ctx) {
-  const spawn2 = ctx.spawn ?? defaultSpawn;
-  const site = ctx.site;
-  const label = siteLabel(site);
-  let used = "pnpm audit";
-  let result = await runAuditTool(spawn2, "pnpm", ["audit", "--json", "--prod"], site.path);
-  if (result.kind !== "ok") {
-    const pnpmReason = result.kind === "missing" ? "not installed" : result.reason;
-    const npmResult = await runAuditTool(
-      spawn2,
-      "npm",
-      ["audit", "--json", "--omit=dev"],
-      site.path
-    );
-    if (npmResult.kind === "ok") {
-      result = npmResult;
-      used = "npm audit";
-    } else {
-      const npmReason = npmResult.kind === "missing" ? "not installed" : npmResult.reason;
-      return {
-        audit: "security",
-        site: label,
-        status: "skip",
-        summary: `cannot run audit \u2014 pnpm: ${pnpmReason}; npm: ${npmReason}`
-      };
-    }
-  }
-  const parsed = result.parsed;
-  const counts = {
-    low: parsed.metadata?.vulnerabilities?.low ?? 0,
-    moderate: parsed.metadata?.vulnerabilities?.moderate ?? 0,
-    high: parsed.metadata?.vulnerabilities?.high ?? 0,
-    critical: parsed.metadata?.vulnerabilities?.critical ?? 0
-  };
-  const advisories = used === "pnpm audit" ? extractAdvisoriesFromPnpm(parsed) : extractAdvisoriesFromNpm(parsed);
-  const status = classify(counts);
-  const total = counts.low + counts.moderate + counts.high + counts.critical;
-  const summary = status === "pass" ? `${used}: 0 vulnerabilities` : `${used}: ${total} vulnerabilities (${counts.critical}C/${counts.high}H/${counts.moderate}M/${counts.low}L)`;
-  return {
-    audit: "security",
-    site: label,
-    status,
-    summary,
-    details: { counts, advisories }
-  };
-}
-
-// src/audits/lighthouse.ts
-import { readFile as readFile4, writeFile, mkdtemp, rm, readdir } from "fs/promises";
-import { tmpdir } from "os";
-import { join as join5 } from "path";
-
-// src/configs/lighthouse.ts
-var lighthouseConfig = {
-  ci: {
-    collect: {
-      url: ["http://localhost:5173/dev/a11y-fixtures"],
-      // `npm run vite:dev` works on both pnpm and npm sites — pnpm respects
-      // the `run` form too. Keeps this config portable across the fleet
-      // while sites transition to pnpm.
-      startServerCommand: "npm run vite:dev",
-      startServerReadyPattern: "ready in",
-      startServerReadyTimeout: 12e4,
-      numberOfRuns: 1,
-      settings: {
-        preset: "desktop",
-        skipAudits: ["uses-http2"]
-      }
-    },
-    assert: {
-      assertions: {
-        "categories:accessibility": ["error", { minScore: 0.95 }],
-        "categories:best-practices": ["error", { minScore: 0.9 }],
-        "categories:seo": ["error", { minScore: 0.9 }],
-        "categories:performance": ["warn", { minScore: 0.7 }]
-      }
-    },
-    upload: {
-      target: "temporary-public-storage"
-    }
-  }
-};
-
-// src/audits/util/site-config.ts
-import { readFile as readFile3 } from "fs/promises";
-import { join as join4 } from "path";
-async function readSiteConfig(sitePath) {
-  let raw;
-  try {
-    raw = await readFile3(join4(sitePath, "package.json"), "utf-8");
-  } catch {
-    return {};
-  }
-  let pkg;
-  try {
-    pkg = JSON.parse(raw);
-  } catch {
-    return {};
-  }
-  if (!pkg || typeof pkg !== "object") return {};
-  const cfg = pkg.reddoor;
-  if (!cfg || typeof cfg !== "object") return {};
-  const out = {};
-  const url = cfg.lighthouseUrl;
-  if (typeof url === "string" && url.length > 0) {
-    out.lighthouseUrl = url;
-  }
-  return out;
-}
-
-// src/util/free-port.ts
-import { createServer } from "net";
-async function findFreePort() {
-  return new Promise((resolve, reject) => {
-    const server = createServer();
-    server.unref();
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const addr = server.address();
-      if (typeof addr === "object" && addr) {
-        const port = addr.port;
-        server.close(() => resolve(port));
-      } else {
-        server.close();
-        reject(new Error("findFreePort: could not determine assigned port from socket"));
-      }
-    });
-  });
-}
-function withFreePort(url, port) {
-  const u = new URL(url);
-  u.hostname = "localhost";
-  u.port = String(port);
-  return u.toString();
-}
-
-// src/audits/lighthouse.ts
-async function readJsonMaybe(path) {
-  try {
-    const raw = await readFile4(path, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-async function readLhrEntries(resultsDir) {
-  const files = await readdir(resultsDir).catch(() => []);
-  const entries = [];
-  for (const f of files) {
-    if (!f.startsWith("lhr-") || !f.endsWith(".json")) continue;
-    const lhr = await readJsonMaybe(join5(resultsDir, f));
-    if (!lhr || !lhr.categories) continue;
-    const summary = {};
-    for (const [k, v] of Object.entries(lhr.categories)) {
-      if (typeof v?.score === "number") summary[k] = v.score;
-    }
-    entries.push({ url: lhr.requestedUrl, summary });
-  }
-  return entries;
-}
-function averageSummaries(entries) {
-  if (entries.length === 0) return {};
-  const sums = {};
-  const counts = {};
-  for (const e of entries) {
-    for (const [k, v] of Object.entries(e.summary ?? {})) {
-      if (typeof v !== "number") continue;
-      sums[k] = (sums[k] ?? 0) + v;
-      counts[k] = (counts[k] ?? 0) + 1;
-    }
-  }
-  const out = {};
-  for (const k of Object.keys(sums)) {
-    const total = sums[k] ?? 0;
-    const count = counts[k] ?? 1;
-    out[k] = total / count;
-  }
-  return out;
-}
-function categoryFromAssertion(a) {
-  const colonIdx = a.name.indexOf(":");
-  return colonIdx >= 0 ? a.name.slice(colonIdx + 1) : a.name;
-}
-function messageForAssertion(a) {
-  const actual = typeof a.actual === "number" ? a.actual.toFixed(2) : "n/a";
-  return `${a.name} ${a.operator} ${a.expected} (actual: ${actual})`;
-}
-async function parseLhciResults(resultsDir, label, raw) {
-  const manifest = await readLhrEntries(resultsDir);
-  if (manifest.length === 0) {
-    return {
-      audit: "lighthouse",
-      site: label,
-      status: "fail",
-      summary: `lighthouse: no lhr-*.json written (exit ${raw.code})${raw.stderr ? ` \u2014 ${raw.stderr.slice(0, 200)}` : ""}`
-    };
-  }
-  const assertionResults = await readJsonMaybe(join5(resultsDir, "assertion-results.json")) ?? [];
-  const failed = assertionResults.filter((a) => !a.passed);
-  const assertions = failed.map((a) => ({
-    category: categoryFromAssertion(a),
-    level: a.level,
-    message: messageForAssertion(a)
-  }));
-  const anyError = assertions.some((a) => a.level === "error");
-  const anyWarn = assertions.some((a) => a.level === "warn");
-  const status = anyError ? "fail" : anyWarn ? "warn" : "pass";
-  const normalized = {
-    summary: averageSummaries(manifest),
-    assertionsFailed: failed.length,
-    assertions
-  };
-  const summary = status === "pass" ? "lighthouse: all categories passing" : `lighthouse: ${failed.length} assertion(s) failed`;
-  return { audit: "lighthouse", site: label, status, summary, details: normalized };
-}
-async function checkoutLighthouse(spawn2, site, label) {
-  const siteCfg = await readSiteConfig(site.path);
-  const port = await findFreePort();
-  const baseUrl = siteCfg.lighthouseUrl ?? lighthouseConfig.ci.collect.url[0];
-  const resolvedConfig = {
-    ...lighthouseConfig,
-    ci: {
-      ...lighthouseConfig.ci,
-      collect: {
-        ...lighthouseConfig.ci.collect,
-        url: [withFreePort(baseUrl, port)],
-        startServerCommand: `npm run vite:dev -- --port ${port} --strictPort`
-      }
-    }
-  };
-  const configDir = await mkdtemp(join5(tmpdir(), "reddoor-lhci-"));
-  const configPath = join5(configDir, "lighthouserc.json");
-  await writeFile(configPath, JSON.stringify(resolvedConfig), "utf-8");
-  const resultsDir = join5(site.path, ".lighthouseci");
-  await rm(resultsDir, { recursive: true, force: true });
-  let raw;
-  try {
-    raw = await spawn2("npx", ["--yes", "@lhci/cli", "autorun", `--config=${configPath}`], {
-      cwd: site.path,
-      timeoutMs: 5 * 6e4
-    });
-  } catch (err) {
-    await rm(configDir, { recursive: true, force: true });
-    const e = err;
-    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
-      return {
-        audit: "lighthouse",
-        site: label,
-        status: "skip",
-        summary: "npx/@lhci/cli not available"
-      };
-    }
-    throw err;
-  }
-  await rm(configDir, { recursive: true, force: true });
-  return parseLhciResults(resultsDir, label, raw);
-}
-async function deployedLighthouse(spawn2, deployedUrl, label) {
-  const workDir = await mkdtemp(join5(tmpdir(), "reddoor-lh-deployed-"));
-  const resolvedConfig = {
-    ci: {
-      // Deliberately NOT spread from lighthouseConfig.ci.collect: deployed mode
-      // must omit startServerCommand and the dev-server settings entirely.
-      collect: {
-        url: [deployedUrl],
-        // 3 runs to damp Lighthouse's run-to-run variance; parseLhciResults
-        // averages the lhr files. (Median is a tracked future refinement.)
-        numberOfRuns: 3,
-        settings: { preset: "desktop", skipAudits: ["uses-http2"] }
-      },
-      assert: lighthouseConfig.ci.assert,
-      upload: { target: "filesystem", outputDir: join5(workDir, "lhci-report") }
-    }
-  };
-  const configPath = join5(workDir, "lighthouserc.json");
-  await writeFile(configPath, JSON.stringify(resolvedConfig), "utf-8");
-  const resultsDir = join5(workDir, ".lighthouseci");
-  let raw;
-  try {
-    raw = await spawn2("npx", ["--yes", "@lhci/cli", "autorun", `--config=${configPath}`], {
-      cwd: workDir,
-      // 3 serial cold runs of a slow deployed site (lhci's own maxWaitForLoad
-      // ~45-60s each) + first-use Chrome download can plausibly exceed 3 min →
-      // SIGTERM → no lhr-*.json → spurious "no scores". Match the 5-min budget
-      // the checkout path already gives (erp-industrials nightly flake,
-      // morning-brief 2026-06-10 MEDIUM-F).
-      timeoutMs: 5 * 6e4
-    });
-  } catch (err) {
-    await rm(workDir, { recursive: true, force: true });
-    const e = err;
-    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
-      return {
-        audit: "lighthouse",
-        site: label,
-        status: "skip",
-        summary: "npx/@lhci/cli not available"
-      };
-    }
-    throw err;
-  }
-  try {
-    return await parseLhciResults(resultsDir, label, raw);
-  } finally {
-    await rm(workDir, { recursive: true, force: true });
-  }
-}
-async function lighthouseAudit(ctx) {
-  const spawn2 = ctx.spawn ?? defaultSpawn;
-  const site = ctx.site;
-  const label = siteLabel(site);
-  return site.deployedUrl ? deployedLighthouse(spawn2, site.deployedUrl, label) : checkoutLighthouse(spawn2, site, label);
-}
-
-// src/audits/a11y.ts
-import { readFile as readFile5, writeFile as writeFile2, mkdtemp as mkdtemp2, rm as rm2 } from "fs/promises";
-import { join as join6 } from "path";
-
-// src/configs/playwright-a11y.ts
-import { defineConfig, devices } from "@playwright/test";
-var a11yRoutes = [
-  { path: "/dev/a11y-fixtures", name: "a11y fixtures" },
-  { path: "/dev/animate-in", name: "animate-in demo" }
-];
-var smokeRoutes = [{ path: "/", name: "home" }];
-var playwrightA11yConfig = defineConfig({
-  testDir: "tests",
-  testMatch: /.*\.spec\.ts$/,
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
-  reporter: process.env.CI ? "github" : "list",
-  use: {
-    baseURL: "http://localhost:5173",
-    trace: "on-first-retry"
-  },
-  projects: [
-    {
-      name: "chromium",
-      use: { ...devices["Desktop Chrome"] }
-    }
-  ],
-  webServer: {
-    // Portable across pnpm and npm sites — pnpm respects `npm run` too.
-    command: "npm run vite:dev",
-    url: "http://localhost:5173/dev/a11y-fixtures",
-    reuseExistingServer: !process.env.CI,
-    timeout: 12e4
-  }
-});
-
-// src/audits/a11y.ts
-var RESULTS_REL = ".reddoor-a11y/results.json";
-async function readJsonMaybe2(path) {
-  try {
-    const raw = await readFile5(path, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-function buildPlaywrightConfig(port, sitePath) {
-  return `import { defineConfig } from "@playwright/test";
-
-export default defineConfig({
-  testDir: ".",
-  testMatch: /.*\\.spec\\.ts$/,
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
-  reporter: process.env.CI ? "github" : "list",
-  use: {
-    baseURL: "http://localhost:${port}",
-    trace: "on-first-retry",
-  },
-  webServer: {
-    // --strictPort: refuse to bump to a different port if ours is taken,
-    //   so the audit fails loudly instead of probing a zombie.
-    // reuseExistingServer:false: never reuse \u2014 we control the lifecycle.
-    // cwd: playwright's default webServer.cwd is the config file's
-    //   directory. Our config lives in /tmp so without this override,
-    //   "npm run vite:dev" tries to read /tmp/.../package.json and
-    //   ENOENTs before vite ever starts. Caltex 2026-05-28 (0.10.5).
-    command: "npm run vite:dev -- --port ${port} --strictPort",
-    url: "http://localhost:${port}/dev/a11y-fixtures",
-    cwd: ${JSON.stringify(sitePath)},
-    reuseExistingServer: false,
-    timeout: 120_000,
-  },
-});
-`;
-}
-function buildSpec() {
-  return `import { test, expect } from "@playwright/test";
-import AxeBuilder from "@axe-core/playwright";
-import { mkdir, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
-
-const pages = ${JSON.stringify(a11yRoutes)};
-const smokePages = ${JSON.stringify(smokeRoutes)};
-const OUTPUT = process.env.REDDOOR_A11Y_OUTPUT;
-
-// Playwright's default per-test timeout is 30s. We loop through every
-// configured route in a single test, so the budget needs to scale.
-test.setTimeout(5 * 60_000);
-
-test("a11y + hydration across configured routes", async ({ page }) => {
-  const violations = [];
-
-  // Capture uncaught client-side exceptions across every route we visit. A page
-  // that builds + SSRs cleanly can still throw on hydrate and blank itself
-  // (data-dynamiq: a Svelte 4->5 run() referenced a $state declared after it) --
-  // axe never sees that, so we listen for it directly and tag the route in scope.
-  let currentRoute = "";
-  page.on("pageerror", (err) => {
-    violations.push({
-      id: "client-error",
-      impact: "critical",
-      route: currentRoute,
-      help: String(err && err.message ? err.message : err),
-    });
-  });
-
-  for (const { path, name } of pages) {
-    currentRoute = name;
-    await page.goto(path);
-    // Snap CSS transitions/animations to their resting state before axe runs.
-    // AnimateIn-style fixtures transition opacity 0->1; sampling mid-transition
-    // makes axe compute color-contrast against semi-transparent text, yielding a
-    // flaky "serious" color-contrast violation (~1/3 of runs on /dev/animate-in).
-    // Disabling transitions/animations forces the final, rendered state
-    // deterministically -- which is also what users (and prefers-reduced-motion
-    // users) actually see, so it's the correct thing to assert.
-    await page.addStyleTag({
-      content: "*,*::before,*::after{transition:none!important;animation:none!important;}",
-    });
-    const results = await new AxeBuilder({ page })
-      .withTags(["wcag2a","wcag2aa","wcag21a","wcag21aa","wcag22aa"])
-      .analyze();
-    for (const v of results.violations) {
-      violations.push({
-        id: v.id,
-        impact: v.impact ?? "moderate",
-        route: name,
-        help: v.help,
-        helpUrl: v.helpUrl,
-        nodes: v.nodes.map((n) => ({ html: n.html, target: n.target })),
-      });
-    }
-  }
-
-  // Hydration smoke check: load real routes (the homepage) and fail on any
-  // uncaught client-side error. No axe here -- real routes carry pre-existing
-  // a11y debt we don't gate on; we only assert they don't crash on hydrate.
-  // HTTP/SSR errors don't fire 'pageerror', so a data-less CI homepage that
-  // renders empty-but-valid won't false-fail -- only a real client crash does.
-  for (const { path, name } of smokePages) {
-    currentRoute = name;
-    await page.goto(path);
-    // Let hydration + first effects run so a TDZ/ReferenceError surfaces.
-    await page.waitForTimeout(2000);
-  }
-
-  const byImpact = {};
-  for (const v of violations) {
-    byImpact[v.impact] = (byImpact[v.impact] ?? 0) + 1;
-  }
-  if (OUTPUT) {
-    await mkdir(dirname(OUTPUT), { recursive: true });
-    await writeFile(
-      OUTPUT,
-      JSON.stringify({ totalViolations: violations.length, byImpact, violations }, null, 2),
-    );
-  }
-  expect(violations).toEqual([]);
-});
-`;
-}
-async function a11yAudit(ctx) {
-  const spawn2 = ctx.spawn ?? defaultSpawn;
-  const site = ctx.site;
-  const label = siteLabel(site);
-  const specDir = await mkdtemp2(join6(site.path, ".reddoor-a11y-spec-"));
-  try {
-    const specPath = join6(specDir, "a11y.spec.ts");
-    await writeFile2(specPath, buildSpec(), "utf-8");
-    const port = await findFreePort();
-    const configPath = join6(specDir, "playwright.config.ts");
-    await writeFile2(configPath, buildPlaywrightConfig(port, site.path), "utf-8");
-    const resultsPath = join6(site.path, RESULTS_REL);
-    await rm2(join6(site.path, ".reddoor-a11y"), { recursive: true, force: true });
-    let raw;
-    try {
-      raw = await spawn2(
-        "npx",
-        ["--yes", "playwright", "test", `--config=${configPath}`, "--reporter=line", specPath],
-        {
-          cwd: site.path,
-          env: { ...process.env, REDDOOR_A11Y_OUTPUT: resultsPath },
-          // playwright on a cold tree downloads Chrome, boots the site's dev
-          // server, and runs axe over every configured route. The shared 30 s
-          // default in runAudits is fine for deps/lint/security but starves
-          // playwright (mirrors the lighthouse fix shipped earlier).
-          timeoutMs: 5 * 6e4
-        }
-      );
-    } catch (err) {
-      const e = err;
-      if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
-        return {
-          audit: "a11y",
-          site: label,
-          status: "skip",
-          summary: "npx/playwright not available"
-        };
-      }
-      throw err;
-    }
-    const artifact = await readJsonMaybe2(resultsPath);
-    if (!artifact) {
-      return {
-        audit: "a11y",
-        site: label,
-        status: "fail",
-        summary: `a11y: no results written (exit ${raw.code})${raw.stderr ? ` \u2014 ${raw.stderr.slice(0, 200)}` : ""}`
-      };
-    }
-    const hasSerious = (artifact.byImpact.serious ?? 0) > 0 || (artifact.byImpact.critical ?? 0) > 0;
-    const hasAny = artifact.totalViolations > 0;
-    const status = hasSerious ? "fail" : hasAny ? "warn" : "pass";
-    const summary = status === "pass" ? `a11y: 0 violations across ${a11yRoutes.length} routes (+${smokeRoutes.length} hydration smoke)` : `a11y: ${artifact.totalViolations} violations`;
-    return {
-      audit: "a11y",
-      site: label,
-      status,
-      summary,
-      details: artifact
-    };
-  } finally {
-    await rm2(specDir, { recursive: true, force: true });
-  }
-}
-
-// src/audits/domain.ts
-import { promises as dnsPromises } from "dns";
-import tls from "tls";
-var MS_PER_DAY = 24 * 60 * 60 * 1e3;
-async function checkDomain(url, deps) {
-  let host;
-  try {
-    host = new URL(url).hostname;
-  } catch {
-    return { resolved: false, certDaysRemaining: null };
-  }
-  try {
-    await deps.lookup(host);
-  } catch {
-    return { resolved: false, certDaysRemaining: null };
-  }
-  let validTo;
-  try {
-    validTo = await deps.certValidTo(host);
-  } catch {
-    validTo = null;
-  }
-  if (!validTo || Number.isNaN(validTo.getTime()))
-    return { resolved: true, certDaysRemaining: null };
-  return {
-    resolved: true,
-    certDaysRemaining: Math.floor((validTo.getTime() - deps.now.getTime()) / MS_PER_DAY)
-  };
-}
-function defaultDomainDeps(now) {
-  return {
-    lookup: async (host) => {
-      await dnsPromises.lookup(host);
-    },
-    certValidTo: (host) => new Promise((resolvePromise) => {
-      const socket = tls.connect(
-        { host, port: 443, servername: host, timeout: 1e4, rejectUnauthorized: true },
-        () => {
-          const cert = socket.authorized ? socket.getPeerCertificate() : null;
-          socket.end();
-          const validTo = cert && cert.valid_to ? new Date(cert.valid_to) : null;
-          resolvePromise(validTo);
-        }
-      );
-      socket.on("error", () => resolvePromise(null));
-      socket.on("timeout", () => {
-        socket.destroy();
-        resolvePromise(null);
-      });
-    }),
-    now
-  };
-}
-async function domainAudit(ctx) {
-  const { site } = ctx;
-  const label = siteLabel(site);
-  if (!site.deployedUrl) {
-    return { audit: "domain", site: label, status: "skip", summary: "no deployed URL" };
-  }
-  const now = ctx.now ?? /* @__PURE__ */ new Date();
-  const deps = ctx.domainDeps ?? defaultDomainDeps(now);
-  const check = await checkDomain(site.deployedUrl, deps);
-  const checkedAt = now.toISOString();
-  const status = check.resolved && check.certDaysRemaining !== null && check.certDaysRemaining > 14 ? "pass" : "warn";
-  const summary = !check.resolved ? "did not resolve" : check.certDaysRemaining === null ? "resolved, no usable TLS cert" : `resolved, cert ${check.certDaysRemaining}d remaining`;
-  return {
-    audit: "domain",
-    site: label,
-    status,
-    summary,
-    details: { resolved: check.resolved, certDaysRemaining: check.certDaysRemaining, checkedAt }
-  };
-}
-
-// src/audits/route-discovery.ts
-var DEFAULT_CAP = 15;
-function parseSitemapUrls(xml) {
-  const out = [];
-  const re = /<loc>\s*([^<\s]+)\s*<\/loc>/gi;
-  let m;
-  while ((m = re.exec(xml)) !== null) {
-    const url = m[1];
-    if (url) out.push(url.trim());
-  }
-  return out;
-}
-function parseHtmlLinks(html, baseUrl) {
-  const out = /* @__PURE__ */ new Set();
-  const re = /<a\b[^>]*\bhref\s*=\s*["']([^"']+)["']/gi;
-  let m;
-  while ((m = re.exec(html)) !== null) {
-    const href = m[1];
-    if (!href || href.startsWith("#") || /^(mailto:|tel:|javascript:)/i.test(href)) continue;
-    try {
-      const u = new URL(href, baseUrl);
-      if (u.origin !== new URL(baseUrl).origin) continue;
-      out.add(u.pathname);
-    } catch {
-    }
-  }
-  return [...out];
-}
-function family(pathname) {
-  return pathname.split("/").filter(Boolean)[0] ?? "";
-}
-function sampleRoutePaths(urlsOrPaths, cap = DEFAULT_CAP) {
-  const seen = /* @__PURE__ */ new Set(["/"]);
-  const buckets = /* @__PURE__ */ new Map();
-  for (const raw of urlsOrPaths) {
-    let pathname;
-    try {
-      pathname = raw.startsWith("/") ? new URL(raw, "https://x.invalid").pathname : new URL(raw).pathname;
-    } catch {
-      continue;
-    }
-    if (pathname === "/") continue;
-    if (seen.has(pathname)) continue;
-    seen.add(pathname);
-    const fam = family(pathname);
-    const arr = buckets.get(fam) ?? [];
-    arr.push(pathname);
-    buckets.set(fam, arr);
-  }
-  const result = ["/"];
-  const families = [...buckets.values()];
-  let guard = 0;
-  while (result.length < cap && families.some((f) => f.length > 0) && guard++ < 1e4) {
-    for (const fam of families) {
-      if (result.length >= cap) break;
-      const next = fam.shift();
-      if (next) result.push(next);
-    }
-  }
-  return result;
-}
-function familyCountsOf(paths) {
-  const counts = {};
-  for (const p of paths) {
-    const key = p === "/" ? "/" : `/${family(p)}`;
-    counts[key] = (counts[key] ?? 0) + 1;
-  }
-  return counts;
-}
-async function discoverRoutes(deployedUrl, deps, cap = DEFAULT_CAP) {
-  const origin = new URL(deployedUrl).origin;
-  const abs = (paths) => paths.map((p) => new URL(p, origin).href);
-  const sitemapXml = await deps.fetchText(new URL("/sitemap.xml", origin).href);
-  if (sitemapXml) {
-    const urls = parseSitemapUrls(sitemapXml);
-    if (urls.length > 0) {
-      const paths = sampleRoutePaths(urls, cap);
-      return { routes: abs(paths), source: "sitemap", familyCounts: familyCountsOf(paths) };
-    }
-  }
-  const homeHtml = await deps.fetchText(origin);
-  if (homeHtml) {
-    const links = parseHtmlLinks(homeHtml, origin);
-    if (links.length > 0) {
-      const paths = sampleRoutePaths(links, cap);
-      return { routes: abs(paths), source: "homepage-links", familyCounts: familyCountsOf(paths) };
-    }
-  }
-  return { routes: [new URL("/", origin).href], source: "root-only", familyCounts: { "/": 1 } };
-}
-
-// src/audits/browser.ts
-function isBroken(status) {
-  return status === null || status >= 400;
-}
-function summarizeBrowser(routes, links, familyCounts) {
-  const desktopChecks = routes.flatMap((r) => r.desktop);
-  const mobileChecks = routes.flatMap((r) => r.mobile);
-  const desktopOk = routes.length > 0 && routes.every((r) => r.desktop.length > 0 && r.desktop.every((d) => d.ok));
-  const mobileOk = routes.length > 0 && routes.every((r) => r.mobile.length > 0 && r.mobile.every((m) => m.ok));
-  const brokenLinks = links.filter((l) => isBroken(l.status)).length;
-  const linksOk = links.length > 0 && brokenLinks === 0;
-  const engines = [...new Set(desktopChecks.map((d) => d.engine))];
-  const devices2 = [...new Set(mobileChecks.map((m) => m.device))];
-  const families = Object.entries(familyCounts).map(([f, n]) => f === "/" ? "/" : `${f} \xD7${n}`).join(", ");
-  const note = `${routes.length} routes (${families}); desktop ${engines.join("/") || "\u2014"}; mobile ${devices2.join("/") || "\u2014"}; ${links.length} links, ${brokenLinks} broken`;
-  return { desktopOk, mobileOk, linksOk, brokenLinks, routesChecked: routes.length, note };
-}
-async function browserAudit(ctx) {
-  const { site } = ctx;
-  const label = siteLabel(site);
-  if (!site.deployedUrl) {
-    return { audit: "browser", site: label, status: "skip", summary: "no deployed URL" };
-  }
-  const now = ctx.now ?? /* @__PURE__ */ new Date();
-  const discoverDeps = ctx.discoverDeps ?? defaultDiscoverDeps();
-  const runner = ctx.browserRunner ?? await defaultBrowserRunner();
-  try {
-    const discovered = await discoverRoutes(site.deployedUrl, discoverDeps);
-    const routeResults = await runner.probe(discovered.routes);
-    const internalLinks = [...new Set(routeResults.flatMap((r) => r.links))];
-    const linkResults = await runner.checkLinks(internalLinks);
-    const summary = summarizeBrowser(
-      routeResults,
-      linkResults,
-      discovered.familyCounts ?? familyCountsOf(discovered.routes)
-    );
-    const status = summary.desktopOk && summary.mobileOk && summary.linksOk ? "pass" : "warn";
-    return {
-      audit: "browser",
-      site: label,
-      status,
-      summary: summary.note,
-      details: { ...summary, checkedAt: now.toISOString() }
-    };
-  } finally {
-    await runner.close?.();
-  }
-}
-var FETCH_TIMEOUT_MS = 1e4;
-function defaultDiscoverDeps() {
-  return {
-    fetchText: async (url) => {
-      try {
-        const res = await fetch(url, {
-          redirect: "follow",
-          signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
-        });
-        if (!res.ok) return null;
-        return await res.text();
-      } catch {
-        return null;
-      }
-    }
-  };
-}
-var DESKTOP_VIEWPORT = { width: 1366, height: 900 };
-var PAGE_TIMEOUT_MS = 3e4;
-async function defaultBrowserRunner() {
-  const { chromium, firefox, webkit, devices: devices2 } = await import("@playwright/test");
-  const desktopEngines = [
-    { engine: "chromium", type: chromium },
-    { engine: "firefox", type: firefox },
-    { engine: "webkit", type: webkit }
-  ];
-  const mobileTargets = [
-    { device: "Pixel 7", descriptor: devices2["Pixel 7"] },
-    { device: "iPhone 14", descriptor: devices2["iPhone 14"] }
-  ];
-  return {
-    async probe(urls) {
-      const results = [];
-      const browsers = await Promise.all(desktopEngines.map((e) => e.type.launch()));
-      const mobileBrowsers = await Promise.all(mobileTargets.map(() => chromium.launch()));
-      try {
-        for (const url of urls) {
-          const desktop = [];
-          const linkSet = /* @__PURE__ */ new Set();
-          for (let i = 0; i < desktopEngines.length; i++) {
-            const engine = desktopEngines[i].engine;
-            const browser = browsers[i];
-            const ctx = await browser.newContext({ viewport: DESKTOP_VIEWPORT });
-            const page = await ctx.newPage();
-            const errors = [];
-            page.on("pageerror", (e) => errors.push(String(e)));
-            let ok = false;
-            try {
-              const resp = await page.goto(url, {
-                waitUntil: "domcontentloaded",
-                timeout: PAGE_TIMEOUT_MS
-              });
-              const hasMain = await page.locator("main, [role=main]").first().isVisible().catch(() => false);
-              ok = !!resp && resp.ok() && errors.length === 0 && hasMain;
-              if (engine === "chromium") {
-                const hrefs = await page.evaluate("Array.from(document.querySelectorAll('a[href]')).map((a) => a.href)").catch(() => []);
-                const origin = new URL(url).origin;
-                for (const h of hrefs) {
-                  try {
-                    if (new URL(h).origin === origin) linkSet.add(new URL(h).href);
-                  } catch {
-                  }
-                }
-              }
-            } catch {
-              ok = false;
-            } finally {
-              await ctx.close().catch(() => {
-              });
-            }
-            desktop.push({ engine, ok });
-          }
-          const mobile = [];
-          for (let i = 0; i < mobileTargets.length; i++) {
-            const { device, descriptor } = mobileTargets[i];
-            const browser = mobileBrowsers[i];
-            const ctx = await browser.newContext({ ...descriptor });
-            const page = await ctx.newPage();
-            const errors = [];
-            page.on("pageerror", (e) => errors.push(String(e)));
-            let ok = false;
-            try {
-              const resp = await page.goto(url, {
-                waitUntil: "domcontentloaded",
-                timeout: PAGE_TIMEOUT_MS
-              });
-              const overflow = await page.evaluate("document.documentElement.scrollWidth > window.innerWidth + 2").catch(() => true);
-              ok = !!resp && resp.ok() && errors.length === 0 && !overflow;
-            } catch {
-              ok = false;
-            } finally {
-              await ctx.close().catch(() => {
-              });
-            }
-            mobile.push({ device, ok });
-          }
-          results.push({ url, desktop, mobile, links: [...linkSet] });
-        }
-      } finally {
-        await Promise.all([...browsers, ...mobileBrowsers].map((b) => b.close().catch(() => {
-        })));
-      }
-      return results;
-    },
-    async checkLinks(urls) {
-      const out = [];
-      for (const url of urls) {
-        let status;
-        try {
-          let res = await fetch(url, {
-            method: "HEAD",
-            redirect: "follow",
-            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
-          });
-          if (res.status === 405 || res.status === 501) {
-            res = await fetch(url, {
-              method: "GET",
-              redirect: "follow",
-              signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
-            });
-          }
-          status = res.status;
-        } catch {
-          status = null;
-        }
-        out.push({ url, status });
-      }
-      return out;
-    }
-  };
-}
-
-// src/audits/index.ts
-var REGISTRY = {
-  deps: depsAudit,
-  lint: lintAudit,
-  security: securityAudit,
-  lighthouse: lighthouseAudit,
-  a11y: a11yAudit,
-  domain: domainAudit,
-  browser: browserAudit
-};
-var ALL_AUDIT_NAMES = Object.keys(REGISTRY);
-var DEFAULT_AUDIT_TIMEOUT_MS = 3e4;
-function timedSpawn(timeoutMs) {
-  return (cmd, args, opts = {}) => defaultSpawn(cmd, args, { ...opts, timeoutMs: opts.timeoutMs ?? timeoutMs });
-}
-async function runOneAudit(site, name) {
-  if (!(name in REGISTRY)) throw new Error(`unknown audit: ${name}`);
-  const spawn2 = timedSpawn(DEFAULT_AUDIT_TIMEOUT_MS);
-  const label = site.name || site.path;
-  try {
-    return await REGISTRY[name]({ site, spawn: spawn2 });
-  } catch (err) {
-    return {
-      audit: name,
-      site: label,
-      status: "fail",
-      summary: `${name}: unexpected error \u2014 ${String(err)}`
-    };
-  }
-}
-async function runAudits(site, which) {
-  const names = which ?? ALL_AUDIT_NAMES;
-  for (const n of names) {
-    if (!(n in REGISTRY)) throw new Error(`unknown audit: ${n}`);
-  }
-  return Promise.all(names.map((n) => runOneAudit(site, n)));
-}
-async function runAuditsAcross(sites, which) {
-  const all = await Promise.all(sites.map((s) => runAudits(s, which)));
-  return all.flat();
-}
-
-// src/recipes/sync-configs.ts
-import { readFile as readFile6, writeFile as writeFile3, mkdir } from "fs/promises";
-import { join as join7, dirname } from "path";
-
-// src/recipes/sync-configs/templates.ts
-var eslint = {
-  config: "eslint",
-  path: "eslint.config.js",
-  contents: `import { createEslintConfig } from "@reddoorla/maintenance/configs/eslint";
-import svelteConfig from "./svelte.config.js";
-
-export default createEslintConfig({ svelteConfig });
-`
-};
-var prettier = {
-  config: "prettier",
-  path: ".prettierrc.json",
-  contents: `{
-  "trailingComma": "all",
-  "singleQuote": false,
-  "printWidth": 100,
-  "plugins": ["prettier-plugin-svelte"]
-}
-`
-};
-var prettierIgnore = {
-  config: "prettier-ignore",
-  path: ".prettierignore",
-  contents: `pnpm-lock.yaml
-.svelte-kit/
-build/
-.netlify/
-dist/
-`
-};
-var lighthouse = {
-  config: "lighthouse",
-  path: "lighthouserc.json",
-  contents: `${JSON.stringify(
-    {
-      $note: "Generated by @reddoorla/maintenance sync-configs; edit src/configs/lighthouse.ts in the package instead.",
-      extends: "@reddoorla/maintenance/configs/lighthouse"
-    },
-    null,
-    2
-  )}
-`
-};
-var playwrightA11y = {
-  config: "playwright-a11y",
-  path: "playwright.config.ts",
-  contents: `export { default } from "@reddoorla/maintenance/configs/playwright-a11y";
-`
-};
-var svelte = {
-  config: "svelte",
-  path: "svelte.config.js",
-  contents: `import { createSvelteConfig } from "@reddoorla/maintenance/configs/svelte";
-import adapter from "@sveltejs/adapter-netlify";
-
-/** @type {import('@sveltejs/kit').Config} */
-export default createSvelteConfig({
-  kit: { adapter: adapter({ edge: false, split: false }) },
-});
-`
-};
-var ci = {
-  config: "ci",
-  path: ".github/workflows/ci.yml",
-  contents: `name: ci
-on:
-  pull_request:
-  push:
-    branches: [main]
-jobs:
-  ci:
-    uses: reddoorla/.github/.github/workflows/ci.yml@78c4da64b675f0f474961f12715f2a4c09d46eb5 # v1.0.0
-`
-};
-var renovateAction = {
-  config: "renovate-action",
-  path: ".github/workflows/renovate.yml",
-  contents: `name: renovate
-on:
-  schedule:
-    - cron: "0 7 * * 1"
-  workflow_dispatch:
-jobs:
-  renovate:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: renovatebot/github-action@v46.1.14
-        with:
-          token: \${{ secrets.RENOVATE_TOKEN }}
-        env:
-          RENOVATE_REPOSITORIES: \${{ github.repository }}
-`
-};
-var renovateConfig = {
-  config: "renovate-config",
-  path: "renovate.json",
-  contents: `{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["github>reddoorla/.github:renovate-config"]
-}
-`
-};
-var netlify = {
-  config: "netlify",
-  path: "netlify.toml",
-  contents: `[build]
-    command = "pnpm build"
-    publish = "build/"
-    functions = "functions/"
-
-[build.environment]
-    NODE_VERSION = "22"
-    COREPACK_INTEGRITY_KEYS = "0"
-
-# Baseline security headers for all responses. CSP is emitted per-response by
-# SvelteKit (see \`kit.csp\` in svelte.config.js) so it is intentionally omitted
-# here to avoid conflicting duplicates.
-[[headers]]
-    for = "/*"
-    [headers.values]
-        Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
-        X-Content-Type-Options = "nosniff"
-        X-Frame-Options = "SAMEORIGIN"
-        Referrer-Policy = "strict-origin-when-cross-origin"
-        Permissions-Policy = "camera=(), microphone=(), geolocation=(), interest-cohort=()"
-        Cross-Origin-Opener-Policy = "same-origin"
-
-[[headers]]
-    for = "/favicon.png"
-    [headers.values]
-        Cache-Control = "public, max-age=31536000, immutable"
-
-[[headers]]
-    for = "/_app/immutable/*"
-    [headers.values]
-        Cache-Control = "public, max-age=31536000, immutable"
-`
-};
-var ALL_TEMPLATES = [
-  eslint,
-  prettier,
-  prettierIgnore,
-  lighthouse,
-  playwrightA11y,
-  svelte,
-  ci,
-  renovateAction,
-  renovateConfig,
-  netlify
-];
-function templatesByName(which) {
-  return ALL_TEMPLATES.filter((t) => which.includes(t.config));
-}
-
-// src/recipes/sync-configs/gitignore.ts
-var MANAGED_MARKER = "# canonical entries from @reddoorla/maintenance sync-configs";
-var CANONICAL_GITIGNORE_ENTRIES = [
-  "node_modules/",
-  "build/",
-  "dist/",
-  ".svelte-kit/",
-  "coverage/",
-  ".vitest-cache/",
-  "playwright-report/",
-  "test-results/",
-  ".lighthouseci/",
-  ".tsbuildinfo",
-  ".env",
-  ".env.*",
-  "!.env.example",
-  ".DS_Store",
-  "*.log",
-  ".vercel/",
-  ".netlify/",
-  ".reddoor-a11y/",
-  // The a11y audit's transient spec dir, written inside the checkout and
-  // normally cleaned, but a timeout-SIGKILL of the parent orphans it. Ignored
-  // fleet-wide so it never dirties a self-updating repo's tree (2026-06-10 M-D).
-  ".reddoor-a11y-spec-*/"
-];
-function stripLeadingSlash(s) {
-  return s.startsWith("/") ? s.slice(1) : s;
-}
-function stripTrailingSlash(s) {
-  return s.endsWith("/") ? s.slice(0, -1) : s;
-}
-function normalizePresence(line) {
-  return stripTrailingSlash(stripLeadingSlash(line.trim()));
-}
-function presentSet(existing) {
-  const set = /* @__PURE__ */ new Set();
-  for (const raw of existing.split(/\r?\n/)) {
-    const trimmed = raw.trim();
-    if (!trimmed) continue;
-    if (trimmed.startsWith("#")) continue;
-    set.add(normalizePresence(trimmed));
-  }
-  return set;
-}
-function mergeGitignore(existing, canonical) {
-  if (existing === null) {
-    const body = [MANAGED_MARKER, ...canonical].join("\n") + "\n";
-    return { content: body, added: [...canonical] };
-  }
-  const present = presentSet(existing);
-  const added = [];
-  for (const entry of canonical) {
-    const norm = normalizePresence(entry);
-    if (!present.has(norm)) {
-      added.push(entry);
-      present.add(norm);
-    }
-  }
-  if (added.length === 0) {
-    return { content: existing, added: [] };
-  }
-  let base = existing;
-  if (!base.endsWith("\n")) base += "\n";
-  const block = ["", MANAGED_MARKER, ...added].join("\n") + "\n";
-  return { content: base + block, added };
-}
-function findTrackedArtifacts(tracked, canonical) {
-  const dirEntries = [];
-  for (const raw of canonical) {
-    const t = raw.trim();
-    if (!t) continue;
-    if (t.startsWith("!")) continue;
-    if (/[*?[]/.test(t)) continue;
-    const noLead = stripLeadingSlash(t);
-    if (!noLead.endsWith("/")) continue;
-    const name = stripTrailingSlash(noLead);
-    if (!name) continue;
-    dirEntries.push(name);
-  }
-  const matched = [];
-  for (const path of tracked) {
-    for (const dir of dirEntries) {
-      if (path === dir || path.startsWith(dir + "/")) {
-        matched.push(path);
-        break;
-      }
-    }
-  }
-  return matched;
-}
-
-// src/util/git.ts
-import { execFile } from "child_process";
-import { promisify } from "util";
-var exec = promisify(execFile);
-async function git(cwd, args) {
-  return exec("git", args, { cwd, env: process.env });
-}
-function branchName(recipe, when = /* @__PURE__ */ new Date()) {
-  const compact = when.toISOString().replace(/[-:.]/g, "");
-  return `maint/${recipe}-${compact}`;
-}
-async function currentBranch(cwd) {
-  const { stdout } = await git(cwd, ["rev-parse", "--abbrev-ref", "HEAD"]);
-  return stdout.trim();
-}
-async function isWorkingTreeClean(cwd) {
-  const { stdout } = await git(cwd, ["status", "--porcelain"]);
-  return stdout.trim().length === 0;
-}
-async function createBranch(cwd, name) {
-  await git(cwd, ["checkout", "-b", name]);
-}
-async function checkoutBranch(cwd, name) {
-  await git(cwd, ["checkout", name]);
-}
-async function forceCheckoutBranch(cwd, name) {
-  await git(cwd, ["checkout", "-f", name]);
-}
-async function deleteBranch(cwd, name) {
-  await git(cwd, ["branch", "-D", name]);
-}
-async function stageAll(cwd) {
-  await git(cwd, ["add", "-A"]);
-}
-async function listTrackedFiles(cwd) {
-  const { stdout } = await git(cwd, ["ls-files"]);
-  return stdout.split("\n").map((l) => l.trim()).filter((l) => l.length > 0);
-}
-async function removeFromIndex(cwd, paths) {
-  if (paths.length === 0) return;
-  await git(cwd, ["rm", "-r", "--cached", "--", ...paths]);
-}
-async function commit(cwd, message) {
-  await stageAll(cwd);
-  const { stdout: status } = await git(cwd, ["status", "--porcelain"]);
-  if (status.trim().length === 0) return null;
-  await git(cwd, ["commit", "-m", message]);
-  const { stdout: sha } = await git(cwd, ["rev-parse", "HEAD"]);
-  return sha.trim();
-}
-
-// src/recipes/_with-recipe.ts
-async function withRecipe(body) {
-  const label = siteLabel(body.site);
-  if (body.checkTreeFirst && !await isWorkingTreeClean(body.site.path)) {
-    throw new Error(`refusing to run: working tree is not clean at ${body.site.path}`);
-  }
-  const planned = await body.plan();
-  if (planned.kind === "noop") {
-    return {
-      recipe: body.name,
-      site: label,
-      status: "noop",
-      commits: [],
-      ...planned.notes ? { notes: planned.notes } : {}
-    };
-  }
-  if (planned.kind === "failed") {
-    return {
-      recipe: body.name,
-      site: label,
-      status: "failed",
-      commits: [],
-      notes: planned.notes
-    };
-  }
-  if (!body.checkTreeFirst && !await isWorkingTreeClean(body.site.path)) {
-    throw new Error(`refusing to run: working tree is not clean at ${body.site.path}`);
-  }
-  let original = null;
-  try {
-    original = await currentBranch(body.site.path);
-  } catch {
-    original = null;
-  }
-  const branch = branchName(body.name);
-  await createBranch(body.site.path, branch);
-  const restoreOriginal = async () => {
-    if (original === null || original === branch) return;
-    try {
-      await checkoutBranch(body.site.path, original);
-    } catch (err) {
-      console.warn(
-        `warning: could not restore branch ${original} after ${body.name}: ${err instanceof Error ? err.message : String(err)}`
-      );
-    }
-  };
-  const restoreAfterFailure = async () => {
-    if (original === null || original === branch) return;
-    try {
-      await forceCheckoutBranch(body.site.path, original);
-    } catch (err) {
-      console.warn(
-        `warning: could not force-restore branch ${original} after failed ${body.name}: ${err instanceof Error ? err.message : String(err)}`
-      );
-      return;
-    }
-    try {
-      await deleteBranch(body.site.path, branch);
-    } catch (err) {
-      console.warn(
-        `warning: could not delete recipe branch ${branch} after failed ${body.name}: ${err instanceof Error ? err.message : String(err)}`
-      );
-    }
-  };
-  const shas = [];
-  let result;
-  try {
-    result = await body.apply(planned.plan, {
-      cwd: body.site.path,
-      branch,
-      commit: async (msg) => {
-        const sha = await commit(body.site.path, msg);
-        if (sha) shas.push(sha);
-        return sha;
-      }
-    });
-  } catch (err) {
-    await restoreAfterFailure();
-    throw err;
-  }
-  if (result.kind === "failed") {
-    await restoreAfterFailure();
-    return {
-      recipe: body.name,
-      site: label,
-      status: "failed",
-      commits: shas,
-      notes: result.notes
-    };
-  }
-  if (shas.length === 0) {
-    await restoreOriginal();
-  }
-  const notes = result.notes ? `${result.notes}; branch: ${branch}` : `branch: ${branch}`;
-  return {
-    recipe: body.name,
-    site: label,
-    status: shas.length > 0 ? "applied" : "noop",
-    commits: shas,
-    notes
-  };
-}
-
-// src/recipes/sync-configs.ts
-var GITIGNORE_CONFIG = "gitignore";
-var SVELTE_CONFIG = "svelte";
-var NETLIFY_CONFIG = "netlify";
-function isSvelteConfigCompliant(contents) {
-  return contents.includes("createSvelteConfig") && contents.includes("@sveltejs/adapter-netlify");
-}
-var SECURITY_HEADER_RE = /Strict-Transport-Security|Content-Security-Policy|X-Frame-Options|X-Content-Type-Options|Referrer-Policy|Permissions-Policy|Cross-Origin-Opener-Policy/i;
-function isNetlifyConfigCompliant(contents) {
-  return contents.includes("[[headers]]") && SECURITY_HEADER_RE.test(contents);
-}
-async function readMaybe(path) {
-  try {
-    return await readFile6(path, "utf-8");
-  } catch {
-    return null;
-  }
-}
-async function planTemplateDiffs(cwd, templates) {
-  const diffs = [];
-  for (const t of templates) {
-    const existing = await readMaybe(join7(cwd, t.path));
-    if (existing === t.contents) continue;
-    if (t.config === SVELTE_CONFIG && existing !== null && isSvelteConfigCompliant(existing)) {
-      continue;
-    }
-    if (t.config === NETLIFY_CONFIG && existing !== null && isNetlifyConfigCompliant(existing)) {
-      continue;
-    }
-    diffs.push(t);
-  }
-  return diffs;
-}
-async function planGitignore(cwd) {
-  const existing = await readMaybe(join7(cwd, ".gitignore"));
-  const merge = mergeGitignore(existing, CANONICAL_GITIGNORE_ENTRIES);
-  const tracked = await listTrackedFiles(cwd);
-  const toUntrack = findTrackedArtifacts(tracked, CANONICAL_GITIGNORE_ENTRIES);
-  if (merge.added.length === 0 && toUntrack.length === 0) return { kind: "noop" };
-  return { kind: "apply", content: merge.content, toUntrack, added: merge.added };
-}
-async function applyGitignore(cwd, plan) {
-  await writeFile3(join7(cwd, ".gitignore"), plan.content, "utf-8");
-  if (plan.toUntrack.length > 0) {
-    await removeFromIndex(cwd, plan.toUntrack);
-  }
-}
-async function syncConfigs(site, opts = {}) {
-  const requested = opts.which ?? ALL_TEMPLATES.map((t) => t.config).concat(GITIGNORE_CONFIG);
-  const templateNames = requested.filter((c) => c !== GITIGNORE_CONFIG);
-  const templates = templatesByName(templateNames);
-  const includeGitignore = requested.includes(GITIGNORE_CONFIG);
-  return withRecipe({
-    name: "sync-configs",
-    site,
-    plan: async () => {
-      const templateDiffs = await planTemplateDiffs(site.path, templates);
-      const gitignorePlan = includeGitignore ? await planGitignore(site.path) : { kind: "noop" };
-      if (templateDiffs.length === 0 && gitignorePlan.kind === "noop") {
-        return { kind: "noop", notes: "all targeted configs already match" };
-      }
-      return { kind: "apply", plan: { templateDiffs, gitignorePlan } };
-    },
-    apply: async ({ templateDiffs, gitignorePlan }, { commit: commit2 }) => {
-      for (const t of templateDiffs) {
-        const dest = join7(site.path, t.path);
-        await mkdir(dirname(dest), { recursive: true });
-        await writeFile3(dest, t.contents, "utf-8");
-        await commit2(`chore: sync ${t.config} config from @reddoorla/maintenance`);
-      }
-      if (gitignorePlan.kind === "apply") {
-        await applyGitignore(site.path, gitignorePlan);
-        await commit2(`chore: sync gitignore from @reddoorla/maintenance`);
-      }
-      return { kind: "ok" };
-    }
-  });
-}
-
-// src/recipes/bump-deps.ts
-import { stat as stat2 } from "fs/promises";
-import { join as join8 } from "path";
-async function exists2(path) {
-  try {
-    await stat2(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function outdatedFlagsForGroup(group) {
-  if (group === "major") return ["--latest"];
-  if (group === "minor") return [];
-  return ["--depth", "0"];
-}
-function upFlagsForGroup(group) {
-  if (group === "major") return ["--latest"];
-  return [];
-}
-async function bumpDeps(site, opts = {}) {
-  const group = opts.group ?? "minor";
-  const spawn2 = opts.spawn ?? defaultSpawn;
-  return withRecipe({
-    name: "bump-deps",
-    site,
-    // pnpm install (in plan) mutates the lockfile, so the clean-tree check
-    // MUST happen first — otherwise a desynced-lockfile resync would silently
-    // land on top of whatever else was in the tree.
-    checkTreeFirst: true,
-    plan: async () => {
-      const hasPnpmLock = await exists2(join8(site.path, "pnpm-lock.yaml"));
-      if (!hasPnpmLock) {
-        const hasNpmLock = await exists2(join8(site.path, "package-lock.json"));
-        const hasYarnLock = await exists2(join8(site.path, "yarn.lock"));
-        if (hasNpmLock || hasYarnLock) {
-          const competing = hasNpmLock ? "package-lock.json" : "yarn.lock";
-          return {
-            kind: "failed",
-            notes: `site has ${competing} but no pnpm-lock.yaml \u2014 run convert-to-pnpm first`
-          };
-        }
-      }
-      await spawn2("pnpm", ["install"], { cwd: site.path, streaming: true });
-      const outdated = await spawn2(
-        "pnpm",
-        ["outdated", "--json", ...outdatedFlagsForGroup(group)],
-        { cwd: site.path }
-      );
-      let parsed;
-      try {
-        parsed = JSON.parse(outdated.stdout || "{}");
-      } catch {
-        parsed = {};
-      }
-      if (Object.keys(parsed).length === 0) {
-        return { kind: "noop", notes: `pnpm outdated reported nothing for group=${group}` };
-      }
-      return { kind: "apply", plan: { group } };
-    },
-    apply: async ({ group: g }, { commit: commit2, cwd }) => {
-      await spawn2("pnpm", ["up", ...upFlagsForGroup(g)], { cwd, streaming: true });
-      await commit2(`chore(deps): bump dependencies (${g})`);
-      return { kind: "ok" };
-    }
-  });
-}
-
-// src/recipes/svelte-5/index.ts
-import { join as join14 } from "path";
-
-// src/util/pkg.ts
-import { readFile as readFile7, writeFile as writeFile4 } from "fs/promises";
-async function readPackageJson(path) {
-  const raw = await readFile7(path, "utf-8");
-  return JSON.parse(raw);
-}
-function detectIndentFromContent(raw) {
-  const match = raw.match(/\n([ \t]+)"/);
-  return match ? match[1] ?? "  " : "  ";
-}
-async function writePackageJson(path, pkg) {
-  let indent = "  ";
-  try {
-    const existing = await readFile7(path, "utf-8");
-    indent = detectIndentFromContent(existing);
-  } catch {
-  }
-  const content = JSON.stringify(pkg, null, indent) + "\n";
-  await writeFile4(path, content, "utf-8");
-}
-function bumpDep(pkg, name, version, opts = {}) {
-  const mode = opts.mode ?? "ensure";
-  const next = {
-    ...pkg
-  };
-  if (pkg.dependencies) {
-    next.dependencies = { ...pkg.dependencies };
-  }
-  if (pkg.devDependencies) {
-    next.devDependencies = { ...pkg.devDependencies };
-  }
-  if (next.dependencies && name in next.dependencies) {
-    if (next.dependencies[name] === version) return pkg;
-    next.dependencies[name] = version;
-    return next;
-  }
-  if (next.devDependencies && name in next.devDependencies) {
-    if (next.devDependencies[name] === version) return pkg;
-    next.devDependencies[name] = version;
-    return next;
-  }
-  if (mode === "bump-only") return pkg;
-  next.devDependencies = { ...next.devDependencies ?? {}, [name]: version };
-  return next;
-}
-
-// src/recipes/svelte-5/step-bump-versions.ts
-import { join as join9 } from "path";
-var SVELTE_5_VERSIONS = {
-  svelte: "^5.55.5",
-  "@sveltejs/kit": "^2.59.0",
-  "@sveltejs/vite-plugin-svelte": "^7.0.0",
-  "@sveltejs/adapter-netlify": "^6.0.4",
-  "@sveltejs/adapter-auto": "^7.0.0",
-  vite: "^8.0.10",
-  "svelte-check": "^4.4.7",
-  typescript: "^6.0.3",
-  "typescript-svelte-plugin": "^0.3.52"
-};
-async function bumpToSvelte5Versions(cwd) {
-  const pkgPath = join9(cwd, "package.json");
-  const pkg = await readPackageJson(pkgPath);
-  let next = pkg;
-  for (const [name, version] of Object.entries(SVELTE_5_VERSIONS)) {
-    next = bumpDep(next, name, version, { mode: "bump-only" });
-  }
-  if (next === pkg) return false;
-  await writePackageJson(pkgPath, next);
-  return true;
-}
-
-// src/recipes/svelte-5/step-svelte-config.ts
-import { readFile as readFile8, writeFile as writeFile5 } from "fs/promises";
-import { join as join10 } from "path";
-var VITE_PLUGIN_PKG = "@sveltejs/vite-plugin-svelte";
-var IMPORT_FROM_VITE_PLUGIN = new RegExp(
-  String.raw`^import\s+\{\s*([^}]+?)\s*\}\s+from\s+["']` + VITE_PLUGIN_PKG.replace(/[/]/g, "\\/") + String.raw`["'];?[ \t]*\n`,
-  "m"
-);
-function dropVitePreprocessImport(source) {
-  return source.replace(IMPORT_FROM_VITE_PLUGIN, (full, names) => {
-    const remaining = names.split(",").map((n) => n.trim()).filter((n) => n.length > 0 && n !== "vitePreprocess");
-    if (remaining.length === 0) return "";
-    return `import { ${remaining.join(", ")} } from "${VITE_PLUGIN_PKG}";
-`;
-  });
-}
-function findMatchingParen(source, openIdx) {
-  if (source[openIdx] !== "(") return -1;
-  let depth = 0;
-  for (let i = openIdx; i < source.length; i++) {
-    const ch = source[i];
-    if (ch === "(") depth++;
-    else if (ch === ")") {
-      depth--;
-      if (depth === 0) return i;
-    }
-  }
-  return -1;
-}
-function dropPreprocessKey(source) {
-  const startRe = /^(\s*)preprocess:\s*vitePreprocess\(/m;
-  const m = startRe.exec(source);
-  if (!m) return source;
-  const indent = m[1] ?? "";
-  const parenOpenAbs = m.index + m[0].length - 1;
-  const parenCloseAbs = findMatchingParen(source, parenOpenAbs);
-  if (parenCloseAbs < 0) return source;
-  let tailIdx = parenCloseAbs + 1;
-  while (tailIdx < source.length && /[ \t,]/.test(source[tailIdx] ?? "")) tailIdx++;
-  if (source[tailIdx] === "\n") tailIdx++;
-  return source.slice(0, m.index) + source.slice(tailIdx).replace(new RegExp(`^${indent}\\n`), "");
-}
-async function migrateSvelteConfig(cwd) {
-  const path = join10(cwd, "svelte.config.js");
-  let src;
-  try {
-    src = await readFile8(path, "utf-8");
-  } catch {
-    return false;
-  }
-  let next = src;
-  next = dropPreprocessKey(next);
-  next = dropVitePreprocessImport(next);
-  if (next === src) return false;
-  await writeFile5(path, next, "utf-8");
-  return true;
-}
-
-// src/recipes/svelte-5/step-svelte-migrate.ts
-async function runSvelteMigrate(cwd, spawn2 = defaultSpawn) {
-  try {
-    const { code, stderr } = await spawn2(
-      "npx",
-      ["--yes", "svelte-migrate", "svelte-5", "--no-install"],
-      { cwd, timeoutMs: 5 * 6e4 }
-    );
-    if (code !== 0) {
-      return { ran: false, stderr };
-    }
-    return { ran: true, stderr };
-  } catch (err) {
-    const e = err;
-    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
-      return { ran: false, stderr: "npx unavailable" };
-    }
-    throw err;
-  }
-}
-
-// src/recipes/svelte-5/step-tailwind-upgrade.ts
-import { join as join11 } from "path";
-async function upgradeTailwind(cwd, spawn2 = defaultSpawn) {
-  const pkg = await readPackageJson(join11(cwd, "package.json"));
-  const tailwindVersion = pkg.devDependencies?.tailwindcss ?? pkg.dependencies?.tailwindcss;
-  if (!tailwindVersion) return { ran: false, reason: "tailwindcss not installed" };
-  if (/^\^?4\./.test(tailwindVersion)) return { ran: false, reason: "already on tailwind 4.x" };
-  try {
-    const { code, stderr } = await spawn2("npx", ["--yes", "@tailwindcss/upgrade", "--force"], {
-      cwd,
-      timeoutMs: 5 * 6e4
-    });
-    if (code !== 0) return { ran: false, reason: stderr.slice(0, 200) };
-    return { ran: true };
-  } catch (err) {
-    const e = err;
-    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
-      return { ran: false, reason: "npx unavailable" };
-    }
-    throw err;
-  }
-}
-
-// src/recipes/svelte-5/step-gotchas.ts
-import { readFile as readFile9, writeFile as writeFile6 } from "fs/promises";
-import { join as join12 } from "path";
-import { glob as glob2 } from "tinyglobby";
-
-// src/recipes/svelte-5/codemods/on-event-to-handler.ts
-var SCRIPT_BLOCK = /<script\b[^>]*>[\s\S]*?<\/script>/g;
-var SIMPLE_ON_EVENT = /\bon:([a-z]+)(?=\s*=)/g;
-var MODIFIER_EVENT = /\bon:[a-z]+\|[a-zA-Z]+(?=\s*=)/g;
-function flagEventModifiers(source) {
-  const insertions = [];
-  let m;
-  MODIFIER_EVENT.lastIndex = 0;
-  while ((m = MODIFIER_EVENT.exec(source)) !== null) {
-    const tagStart = source.lastIndexOf("<", m.index);
-    if (tagStart === -1) continue;
-    const prevLineEnd = tagStart - 1;
-    if (prevLineEnd >= 0) {
-      const prevLineStart = source.lastIndexOf("\n", prevLineEnd - 1) + 1;
-      const prevLine = source.slice(prevLineStart, prevLineEnd + 1);
-      if (/<!--\s*@migration-task/.test(prevLine)) continue;
-    }
-    const lineStart = source.lastIndexOf("\n", tagStart - 1) + 1;
-    const indent = source.slice(lineStart, tagStart);
-    const safeIndent = /^[ \t]*$/.test(indent) ? indent : "";
-    insertions.push({ tagStart, indent: safeIndent, modifier: m[0] });
-  }
-  let out = source;
-  for (let i = insertions.length - 1; i >= 0; i--) {
-    const { tagStart, indent, modifier } = insertions[i];
-    const comment = `<!-- @migration-task: Svelte 5 removed event modifier syntax (\`${modifier}\`). Rewrite inline, e.g. onclick={(e) => { e.preventDefault(); ... }}. -->
-${indent}`;
-    out = out.slice(0, tagStart) + comment + out.slice(tagStart);
-  }
-  return out;
-}
-function onEventToHandler(source) {
-  const masked = [];
-  const placeholder = (i) => ` SCRIPT_${i} `;
-  const intermediate = source.replace(SCRIPT_BLOCK, (match) => {
-    masked.push(match);
-    return placeholder(masked.length - 1);
-  });
-  let processed = intermediate.replace(SIMPLE_ON_EVENT, (_full, name) => `on${name}`);
-  processed = flagEventModifiers(processed);
-  let out = processed;
-  masked.forEach((blk, i) => {
-    out = out.replace(placeholder(i), blk);
-  });
-  return out;
-}
-
-// src/recipes/svelte-5/codemods/dollar-props.ts
-var SCRIPT_BLOCK2 = /<script\b([^>]*)>([\s\S]*?)<\/script>/;
-var EXPORT_LET = /^\s*export\s+let\s+(\w+)\s*(?::\s*([^=;\n]+))?\s*(?:=\s*([^;\n]+))?;?\s*$/gm;
-function transformScript(scriptBody, isTs) {
-  const props = [];
-  const cleaned = scriptBody.replace(
-    EXPORT_LET,
-    (_full, name, type, defaultExpr) => {
-      props.push({
-        name,
-        type: type?.trim(),
-        defaultExpr: defaultExpr?.trim()
-      });
-      return "";
-    }
-  );
-  if (props.length === 0) return { body: scriptBody, changed: false };
-  const destructured = props.map((p) => p.defaultExpr ? `${p.name} = ${p.defaultExpr}` : p.name).join(", ");
-  let decl;
-  if (isTs) {
-    const typeSig = props.map((p) => {
-      const optional = p.defaultExpr ? "?" : "";
-      return `${p.name}${optional}: ${p.type ?? "unknown"}`;
-    }).join("; ");
-    decl = `  let { ${destructured} }: { ${typeSig} } = $props();`;
-  } else {
-    decl = `  let { ${destructured} } = $props();`;
-  }
-  const next = cleaned.replace(/^(\s*)/, (m) => `${m}${decl}
-`);
-  return { body: next, changed: true };
-}
-function exportLetToProps(source) {
-  const match = source.match(SCRIPT_BLOCK2);
-  if (!match) return source;
-  const attrs = match[1] ?? "";
-  const inner = match[2] ?? "";
-  const isTs = /\blang=["']ts["']/.test(attrs);
-  const { body, changed } = transformScript(inner, isTs);
-  if (!changed) return source;
-  return source.replace(SCRIPT_BLOCK2, (full) => full.replace(inner, body));
-}
-
-// src/util/svelte-source.ts
-function findStringEnd(source, openIdx) {
-  const quote = source[openIdx];
-  let i = openIdx + 1;
-  while (i < source.length) {
-    const ch = source[i];
-    if (ch === "\\") {
-      i += 2;
-      continue;
-    }
-    if (ch === quote) return i;
-    i++;
-  }
-  return -1;
-}
-
-// src/recipes/svelte-5/codemods/dollar-restprops.ts
-function removeInterfaceBlock(source) {
-  const re = /^\s*interface\s+\$\$Props\s*\{/m;
-  let out = source;
-  while (true) {
-    const match = re.exec(out);
-    if (!match) return out;
-    const openBraceIdx = match.index + match[0].length - 1;
-    let depth = 1;
-    let i = openBraceIdx + 1;
-    while (i < out.length && depth > 0) {
-      const ch = out[i];
-      if (ch === "{") depth++;
-      else if (ch === "}") depth--;
-      i++;
-    }
-    if (depth !== 0) return out;
-    let endIdx = i;
-    while (endIdx < out.length && /[ \t]/.test(out[endIdx] ?? "")) endIdx++;
-    if (out[endIdx] === "\n") endIdx++;
-    out = out.slice(0, match.index) + out.slice(endIdx);
-  }
-}
-function maskStringLiterals(source) {
-  const strings = [];
-  let out = "";
-  let i = 0;
-  while (i < source.length) {
-    const ch = source[i];
-    if (ch === '"' || ch === "'" || ch === "`") {
-      const closeIdx = findStringEnd(source, i);
-      if (closeIdx === -1) {
-        out += source.slice(i);
-        break;
-      }
-      const literal = source.slice(i, closeIdx + 1);
-      out += `__RDMNT_STR_${strings.length}__`;
-      strings.push(literal);
-      i = closeIdx + 1;
-    } else {
-      out += ch;
-      i++;
-    }
-  }
-  return {
-    masked: out,
-    restore: (s) => s.replace(/__RDMNT_STR_(\d+)__/g, (_full, idx) => strings[Number(idx)] ?? "")
-  };
-}
-var PROPS_DECL = /let\s*\{([^}]*)\}\s*(?::\s*\{([^}]*)\})?\s*=\s*\$props\(\)\s*;?/;
-function injectRestIntoProps(scriptBody) {
-  const match = scriptBody.match(PROPS_DECL);
-  if (!match) return scriptBody;
-  const destructured = match[1] ?? "";
-  if (/\.\.\.\s*\w+/.test(destructured)) return scriptBody;
-  const trimmed = destructured.trim().replace(/,\s*$/, "");
-  const newDestructured = trimmed === "" ? " ...rest " : ` ${trimmed}, ...rest `;
-  let replacement;
-  if (match[2] !== void 0) {
-    const typeBody = match[2];
-    const hasIndexSig = /\[\s*key\s*:\s*string\s*\]\s*:/.test(typeBody);
-    const newTypeBody = hasIndexSig ? typeBody : `${typeBody.trimEnd().replace(/;?\s*$/, "")}; [key: string]: unknown `;
-    replacement = `let {${newDestructured}}: {${newTypeBody}} = $props();`;
-  } else {
-    replacement = `let {${newDestructured}} = $props();`;
-  }
-  return scriptBody.replace(PROPS_DECL, replacement);
-}
-var SCRIPT_BLOCK3 = /<script\b([^>]*)>([\s\S]*?)<\/script>/;
-var HAS_PROPS_CALL = /\$props\(\s*\)/;
-function removeDollarRestProps(source) {
-  const next = removeInterfaceBlock(source);
-  const scriptMatch = next.match(SCRIPT_BLOCK3);
-  if (!scriptMatch) return next;
-  if (!HAS_PROPS_CALL.test(scriptMatch[2] ?? "")) {
-    return next;
-  }
-  const scriptInner = scriptMatch[2] ?? "";
-  const { masked, restore } = maskStringLiterals(scriptInner);
-  let processed = injectRestIntoProps(masked);
-  processed = processed.replace(/\$\$restProps/g, "rest");
-  const restoredInner = restore(processed);
-  const newScriptBlock = scriptMatch[0].replace(scriptInner, () => restoredInner);
-  const before = next.slice(0, scriptMatch.index);
-  const after = next.slice(scriptMatch.index + scriptMatch[0].length);
-  return before.replace(/\$\$restProps/g, "rest") + newScriptBlock + after.replace(/\$\$restProps/g, "rest");
-}
-
-// src/recipes/svelte-5/codemods/state-effect-sync.ts
-var PATTERN = /let\s+(\w+)\s*=\s*\$state\(\s*([^)]+?)\s*\)\s*;[ \t\r\n]*\$effect\(\s*\(\s*\)\s*=>\s*\{\s*\w+\s*;\s*\1\s*=\s*([^;}]+?)\s*;?\s*\}\s*\)\s*;?/g;
-function stateEffectSyncToDerived(source) {
-  return source.replace(PATTERN, (full, name, initExpr, effectExpr) => {
-    if (initExpr.trim() !== effectExpr.trim()) return full;
-    return `let ${name} = $derived(${initExpr.trim()});`;
-  });
-}
-
-// src/recipes/svelte-5/codemods/dollar-props-class.ts
-var PROPS_DESTRUCTURE = /let\s*\{([\s\S]*?)\}(\s*:\s*\{([\s\S]*?)\})?\s*=\s*\$props\(\)/;
-var HAS_DOLLAR_PROPS_CLASS = /\$\$props\.class\b/;
-var DOLLAR_PROPS_CLASS_GLOBAL = /\$\$props\.class\b/g;
-var DOLLAR_PROPS_ANY = /\$\$props\b/;
-var SCRIPT_BLOCK4 = /<script\b[^>]*>[\s\S]*?<\/script>/g;
-var MIGRATION_TASK = /^<!--\s*@migration-task[\s\S]*?-->\s*\n?/gm;
-var IDENT = "className";
-function maskScripts(source) {
-  const blocks = [];
-  const masked = source.replace(SCRIPT_BLOCK4, (m) => {
-    blocks.push(m);
-    return `__SCRIPT_${blocks.length - 1}__`;
-  });
-  return { masked, blocks };
-}
-function restoreScripts(masked, blocks) {
-  let out = masked;
-  blocks.forEach((blk, i) => {
-    out = out.replace(`__SCRIPT_${i}__`, blk);
-  });
-  return out;
-}
-function dollarPropsClass(source) {
-  const { masked } = maskScripts(source);
-  if (!HAS_DOLLAR_PROPS_CLASS.test(masked)) return source;
-  if (!PROPS_DESTRUCTURE.test(source)) return source;
-  let updated = source.replace(PROPS_DESTRUCTURE, (full, body, typeAnno, typeBody) => {
-    if (/\bclass\s*:/.test(body)) return full;
-    const cleanBody = body.trim().replace(/,\s*$/, "").trim();
-    const newBody = cleanBody ? `${cleanBody}, class: ${IDENT} = ""` : `class: ${IDENT} = ""`;
-    if (typeAnno) {
-      const cleanType = (typeBody ?? "").trim().replace(/;\s*$/, "").trim();
-      const newType = cleanType ? `${cleanType}; class?: string` : `class?: string`;
-      return `let { ${newBody} }: { ${newType} } = $props()`;
-    }
-    return `let { ${newBody} } = $props()`;
-  });
-  const reMasked = maskScripts(updated);
-  const templateRewritten = reMasked.masked.replace(DOLLAR_PROPS_CLASS_GLOBAL, IDENT);
-  updated = restoreScripts(templateRewritten, reMasked.blocks);
-  const stripped = updated.replace(MIGRATION_TASK, "");
-  if (!DOLLAR_PROPS_ANY.test(stripped)) {
-    updated = stripped;
-  }
-  return updated;
-}
-
-// src/recipes/svelte-5/codemods/legacy-reactive.ts
-var SCRIPT_BLOCK5 = /<script\b([^>]*)>([\s\S]*?)<\/script>/g;
-var SIMPLE_REACTIVE = /^([ \t]*)\$:\s*(\w+)\s*=\s*([^;\n]+);?[ \t]*$/gm;
-var BLOCK_REACTIVE_HEAD = /(^|\n)([ \t]*)\$:\s*\{/g;
-function findMatchingClose(source, openIdx) {
-  let depth = 0;
-  let i = openIdx;
-  while (i < source.length) {
-    const ch = source[i];
-    if (ch === '"' || ch === "'" || ch === "`") {
-      const closeStr = findStringEnd(source, i);
-      if (closeStr === -1) return -1;
-      i = closeStr + 1;
-      continue;
-    }
-    if (ch === "/") {
-      const next = source[i + 1];
-      if (next === "/") {
-        const eol = source.indexOf("\n", i + 2);
-        i = eol === -1 ? source.length : eol;
-        continue;
-      }
-      if (next === "*") {
-        const end = source.indexOf("*/", i + 2);
-        if (end === -1) return -1;
-        i = end + 2;
-        continue;
-      }
-    }
-    if (ch === "{") depth++;
-    else if (ch === "}") {
-      depth--;
-      if (depth === 0) return i;
-    }
-    i++;
-  }
-  return -1;
-}
-var MIGRATION_MARKER = "// @migration-task: $effect won't trigger UI updates on plain `let` bindings \u2014 refine mutated locals to $state or split into per-variable $derived.";
-function transformBlocks(body) {
-  const out = [];
-  let last = 0;
-  BLOCK_REACTIVE_HEAD.lastIndex = 0;
-  let m;
-  while ((m = BLOCK_REACTIVE_HEAD.exec(body)) !== null) {
-    const leadingNewline = m[1] ?? "";
-    const indent = m[2] ?? "";
-    const headEnd = m.index + m[0].length;
-    const openBraceIdx = headEnd - 1;
-    const closeBraceIdx = findMatchingClose(body, openBraceIdx);
-    if (closeBraceIdx === -1) continue;
-    out.push(body.slice(last, m.index));
-    out.push(leadingNewline);
-    const blockBody = body.slice(openBraceIdx + 1, closeBraceIdx);
-    out.push(`${indent}${MIGRATION_MARKER}
-`);
-    out.push(`${indent}$effect(() => {${blockBody}});`);
-    last = closeBraceIdx + 1;
-    BLOCK_REACTIVE_HEAD.lastIndex = last;
-  }
-  out.push(body.slice(last));
-  return out.join("");
-}
-function transformSimple(body) {
-  return body.replace(SIMPLE_REACTIVE, (_full, indent, name, expr) => {
-    return `${indent}let ${name} = $derived(${expr.trim()});`;
-  });
-}
-function legacyReactiveToRunes(source) {
-  return source.replace(SCRIPT_BLOCK5, (full, _attrs, body) => {
-    let next = transformBlocks(body);
-    next = transformSimple(next);
-    if (next === body) return full;
-    return full.replace(body, next);
-  });
-}
-
-// src/recipes/svelte-5/step-gotchas.ts
-var SVELTE_GLOBS = ["src/**/*.svelte"];
-var IGNORE2 = ["node_modules/**", ".svelte-kit/**", "build/**"];
-var CODEMODS = [
-  onEventToHandler,
-  exportLetToProps,
-  removeDollarRestProps,
-  stateEffectSyncToDerived,
-  dollarPropsClass,
-  legacyReactiveToRunes
-];
-async function planGotchaCodemods(cwd) {
-  const changes = [];
-  const relPaths = await glob2(SVELTE_GLOBS, { cwd, ignore: IGNORE2, absolute: false });
-  for (const rel of relPaths) {
-    const path = join12(cwd, rel);
-    const before = await readFile9(path, "utf-8");
-    const after = CODEMODS.reduce((s, fn) => fn(s), before);
-    if (after !== before) changes.push({ rel, after });
-  }
-  return changes;
-}
-async function applyGotchaCodemods(cwd) {
-  const changes = await planGotchaCodemods(cwd);
-  for (const c of changes) {
-    await writeFile6(join12(cwd, c.rel), c.after, "utf-8");
-  }
-  return { filesChanged: changes.length };
-}
-
-// src/recipes/svelte-5/step-verify.ts
-async function verifyMigration(cwd, spawn2 = defaultSpawn) {
-  let install;
-  try {
-    install = await spawn2("pnpm", ["install"], { cwd, timeoutMs: 10 * 6e4 });
-  } catch {
-    install = { skipped: true };
-  }
-  let check;
-  try {
-    check = await spawn2("pnpm", ["run", "check"], { cwd, timeoutMs: 5 * 6e4 });
-  } catch {
-    check = { skipped: true };
-  }
-  return { install, check };
-}
-
-// src/recipes/svelte-5/step-summary.ts
-import { writeFile as writeFile7 } from "fs/promises";
-import { join as join13 } from "path";
-async function writeMigrationSummary(input) {
-  const lines = [
-    `# Svelte 4 \u2192 5 migration summary`,
-    ``,
-    `Generated by @reddoorla/maintenance.`,
-    ``,
-    `- svelte-migrate run: ${input.svelteMigrateRan ? "yes" : "no"}`,
-    `- @tailwindcss/upgrade run: ${input.tailwindUpgraded ? "yes" : "no"}`,
-    `- .svelte files touched by gotcha codemods: ${input.filesChangedByCodemods}`,
-    ``,
-    `Next steps:`,
-    `- Run \`pnpm run check\` and resolve any remaining warnings.`,
-    `- Spot-check rune migrations in components that use \`reactive\` statements.`,
-    `- Verify Playwright a11y tests still pass.`
-  ];
-  const content = lines.join("\n") + "\n";
-  const path = join13(input.cwd, "MIGRATION_SVELTE_5.md");
-  await writeFile7(path, content, "utf-8");
-  return path;
-}
-
-// src/recipes/svelte-5/index.ts
-async function alreadyOnSvelte5(cwd) {
-  try {
-    const pkg = await readPackageJson(join14(cwd, "package.json"));
-    const v = pkg.devDependencies?.svelte ?? pkg.dependencies?.svelte;
-    return !!v && /^\^?5\./.test(v);
-  } catch {
-    return false;
-  }
-}
-async function upgradeSvelte4to5(site, opts = {}) {
-  const spawn2 = opts.spawn ?? defaultSpawn;
-  return withRecipe({
-    name: "svelte-4-to-5",
-    site,
-    plan: async () => {
-      if (await alreadyOnSvelte5(site.path)) {
-        return { kind: "noop", notes: "site already declares svelte ^5.x" };
-      }
-      return { kind: "apply", plan: true };
-    },
-    apply: async (_plan, { commit: commit2, cwd }) => {
-      const bumped = await bumpToSvelte5Versions(cwd);
-      if (bumped) {
-        await commit2("chore(svelte5): bump svelte/kit/vite/vite-plugin-svelte");
-      }
-      const configChanged = await migrateSvelteConfig(cwd);
-      if (configChanged) {
-        await commit2("refactor(svelte5): migrate svelte.config.js (drop vitePreprocess)");
-      }
-      const migrate = await runSvelteMigrate(cwd, spawn2);
-      if (migrate.ran) {
-        await commit2("refactor(svelte5): run official svelte-migrate codemod");
-      }
-      const tw = await upgradeTailwind(cwd, spawn2);
-      if (tw.ran) {
-        await commit2("chore(svelte5): tailwindcss 3 \u2192 4 upgrade");
-      }
-      const codemods = await applyGotchaCodemods(cwd);
-      if (codemods.filesChanged > 0) {
-        await commit2(`refactor(svelte5): apply gotcha codemods (${codemods.filesChanged} files)`);
-      }
-      await verifyMigration(cwd, spawn2);
-      await commit2("chore(svelte5): pnpm install + check");
-      await writeMigrationSummary({
-        cwd,
-        filesChangedByCodemods: codemods.filesChanged,
-        svelteMigrateRan: migrate.ran,
-        tailwindUpgraded: tw.ran
-      });
-      await commit2("docs(svelte5): add MIGRATION_SVELTE_5.md summary");
-      return { kind: "ok" };
-    }
-  });
-}
-
-// src/recipes/svelte-codemods.ts
-import { writeFile as writeFile8 } from "fs/promises";
-import { join as join15 } from "path";
-async function svelteCodemods(site) {
-  return withRecipe({
-    name: "svelte-codemods",
-    site,
-    plan: async () => {
-      const changes = await planGotchaCodemods(site.path);
-      if (changes.length === 0) {
-        return { kind: "noop", notes: "no codemod targets matched" };
-      }
-      return { kind: "apply", plan: changes };
-    },
-    apply: async (changes, { commit: commit2, cwd }) => {
-      for (const c of changes) {
-        await writeFile8(join15(cwd, c.rel), c.after, "utf-8");
-      }
-      await commit2(`refactor(svelte5): apply codemods (${changes.length} files)`);
-      return { kind: "ok" };
-    }
-  });
-}
-
-// src/recipes/convert-to-pnpm.ts
-import { rm as rm3, stat as stat3 } from "fs/promises";
-import { join as join16 } from "path";
-
-// src/recipes/convert-to-pnpm/script-rewrites.ts
-function rewriteScriptForPnpm(script) {
-  let out = script;
-  out = out.replace(/\bnpm run(?=\s)/g, "pnpm run");
-  out = out.replace(/\bnpx(?=\s)/g, "pnpm dlx");
-  return out;
-}
-function rewriteScriptsForPnpm(scripts) {
-  const next = {};
-  let changedCount = 0;
-  for (const [name, value] of Object.entries(scripts)) {
-    const rewritten = rewriteScriptForPnpm(value);
-    next[name] = rewritten;
-    if (rewritten !== value) changedCount++;
-  }
-  return { scripts: next, changedCount };
-}
-
-// src/recipes/convert-to-pnpm.ts
-var DEFAULT_PNPM_VERSION = "10.33.1";
-async function exists3(path) {
-  try {
-    await stat3(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function convertToPnpm(site, opts = {}) {
-  const spawn2 = opts.spawn ?? defaultSpawn;
-  const pnpmVersion = opts.pnpmVersion ?? DEFAULT_PNPM_VERSION;
-  const pnpmLockPath = join16(site.path, "pnpm-lock.yaml");
-  const npmLockPath = join16(site.path, "package-lock.json");
-  const yarnLockPath = join16(site.path, "yarn.lock");
-  return withRecipe({
-    name: "convert-to-pnpm",
-    site,
-    plan: async () => {
-      if (await exists3(pnpmLockPath)) {
-        return { kind: "noop", notes: "site already has pnpm-lock.yaml" };
-      }
-      const hasNpmLock = await exists3(npmLockPath);
-      const hasYarnLock = await exists3(yarnLockPath);
-      if (!hasNpmLock && !hasYarnLock) {
-        return {
-          kind: "noop",
-          notes: "no convertible lockfile (package-lock.json or yarn.lock) at site root"
-        };
-      }
-      return { kind: "apply", plan: { hasNpmLock, hasYarnLock } };
-    },
-    apply: async ({ hasNpmLock, hasYarnLock }, { commit: commit2, cwd }) => {
-      if (hasNpmLock) await rm3(npmLockPath, { force: true });
-      if (hasYarnLock) await rm3(yarnLockPath, { force: true });
-      const sourceLock = hasNpmLock ? "package-lock.json" : "yarn.lock";
-      await commit2(`chore(pnpm): remove ${sourceLock}`);
-      const pkgPath = join16(cwd, "package.json");
-      const pkg = await readPackageJson(pkgPath);
-      const next = { ...pkg, packageManager: `pnpm@${pnpmVersion}` };
-      if (pkg.scripts && typeof pkg.scripts === "object") {
-        const { scripts: rewritten, changedCount } = rewriteScriptsForPnpm(
-          pkg.scripts
-        );
-        if (changedCount > 0) {
-          next.scripts = rewritten;
-        }
-      }
-      await writePackageJson(pkgPath, next);
-      await commit2("chore(pnpm): pin packageManager + rewrite npm scripts");
-      await rm3(join16(cwd, "node_modules"), { recursive: true, force: true });
-      const installResult = await spawn2("pnpm", ["install"], { cwd, streaming: true });
-      if (installResult.code !== 0) {
-        return { kind: "failed", notes: `pnpm install failed (exit ${installResult.code})` };
-      }
-      await commit2("chore(pnpm): add pnpm-lock.yaml");
-      return { kind: "ok" };
-    }
-  });
-}
-
-// src/recipes/onboard.ts
-import { stat as stat4 } from "fs/promises";
-import { join as join18 } from "path";
-
-// src/util/self-version.ts
-import { readFileSync, existsSync as existsSync2 } from "fs";
-import { fileURLToPath } from "url";
-import { dirname as dirname2, join as join17 } from "path";
-function selfPackageVersion(callerImportMetaUrl) {
-  try {
-    let dir = dirname2(fileURLToPath(callerImportMetaUrl));
-    while (true) {
-      const candidate = join17(dir, "package.json");
-      if (existsSync2(candidate)) {
-        const raw = readFileSync(candidate, "utf-8");
-        const pkg = JSON.parse(raw);
-        if (pkg.name === "@reddoorla/maintenance") {
-          return pkg.version ?? "0.0.0";
-        }
-      }
-      const parent = dirname2(dir);
-      if (parent === dir) return "0.0.0";
-      dir = parent;
-    }
-  } catch {
-    return "0.0.0";
-  }
-}
-function selfCaretRange(callerImportMetaUrl) {
-  return `^${selfPackageVersion(callerImportMetaUrl)}`;
-}
-
-// src/recipes/onboard.ts
-var PACKAGE_NAME = "@reddoorla/maintenance";
-var AUDIT_DEP_NAMES = {
-  lighthouse: ["@lhci/cli"],
-  a11y: ["@playwright/test", "@axe-core/playwright"]
-};
-var FRAMEWORK_DEP_NAMES = ["@sveltejs/adapter-netlify"];
-var FRAMEWORK_DEPS = FRAMEWORK_DEP_NAMES.map(
-  (name) => {
-    const version = baselineVersions[name];
-    if (!version) {
-      throw new Error(
-        `baseline-versions is missing framework dep "${name}" \u2014 add it to src/configs/baseline-versions.ts`
-      );
-    }
-    return { name, version };
-  }
-);
-var AUDIT_DEPS = Object.fromEntries(
-  Object.entries(AUDIT_DEP_NAMES).map(([audit, names]) => [
-    audit,
-    names.map((name) => {
-      const version = baselineVersions[name];
-      if (!version) {
-        throw new Error(
-          `baseline-versions is missing audit dep "${name}" \u2014 add it to src/configs/baseline-versions.ts`
-        );
-      }
-      return { name, version };
-    })
-  ])
-);
-async function exists4(path) {
-  try {
-    await stat4(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function isDeclared(pkg, name) {
-  return Boolean(pkg.dependencies?.[name] ?? pkg.devDependencies?.[name]);
-}
-async function onboard(site, opts = {}) {
-  const spawn2 = opts.spawn ?? defaultSpawn;
-  const audits = opts.audits ?? ["lighthouse", "a11y"];
-  const packageVersion = opts.packageVersion ?? selfCaretRange(import.meta.url);
-  return withRecipe({
-    name: "onboard",
-    site,
-    plan: async () => {
-      if (!await exists4(join18(site.path, "pnpm-lock.yaml"))) {
-        return {
-          kind: "failed",
-          notes: "no pnpm-lock.yaml at site root \u2014 run convert-to-pnpm first"
-        };
-      }
-      const pkgPath = join18(site.path, "package.json");
-      const pkg = await readPackageJson(pkgPath);
-      const toAdd = [];
-      if (!isDeclared(pkg, PACKAGE_NAME)) {
-        toAdd.push({ name: PACKAGE_NAME, version: packageVersion });
-      }
-      for (const dep of FRAMEWORK_DEPS) {
-        if (!isDeclared(pkg, dep.name)) toAdd.push(dep);
-      }
-      for (const audit of audits) {
-        for (const dep of AUDIT_DEPS[audit]) {
-          if (!isDeclared(pkg, dep.name)) toAdd.push(dep);
-        }
-      }
-      if (toAdd.length === 0) {
-        return {
-          kind: "noop",
-          notes: `site already has ${PACKAGE_NAME}, framework deps, and audit deps (${audits.join("+")})`
-        };
-      }
-      return { kind: "apply", plan: { pkg, toAdd } };
-    },
-    apply: async ({ pkg, toAdd }, { commit: commit2, cwd }) => {
-      const pkgPath = join18(cwd, "package.json");
-      let next = pkg;
-      for (const dep of toAdd) {
-        next = bumpDep(next, dep.name, dep.version);
-      }
-      await writePackageJson(pkgPath, next);
-      const installResult = await spawn2("pnpm", ["install"], { cwd, streaming: true });
-      if (installResult.code !== 0) {
-        return {
-          kind: "failed",
-          notes: `pnpm install failed (exit ${installResult.code})`
-        };
-      }
-      await commit2(`chore(reddoor): onboard with ${PACKAGE_NAME} ${packageVersion}`);
-      return {
-        kind: "ok",
-        notes: `Added ${toAdd.length} dep(s): ${toAdd.map((d) => d.name).join(", ")}`
-      };
-    }
-  });
-}
-
-// src/recipes/a11y-fixtures-page/index.ts
-import { access, mkdir as mkdir2, writeFile as writeFile9 } from "fs/promises";
-import { dirname as dirname3, join as join19 } from "path";
-
-// src/recipes/a11y-fixtures-page/template.ts
-var A11Y_FIXTURES_PAGE_RELATIVE = "src/routes/dev/a11y-fixtures/+page.svelte";
-var A11Y_FIXTURES_PAGE_TEMPLATE = `<svelte:head>
-  <title>a11y fixtures \u2014 Reddoor</title>
-  <meta
-    name="description"
-    content="Reddoor accessibility fixtures \u2014 semantic landmarks, heading hierarchy, and a stable target for @lhci/cli and Playwright + axe-core coverage. Not linked from the public site."
-  />
-</svelte:head>
-
-<main>
-  <header>
-    <h1>Accessibility fixtures</h1>
-    <p>
-      This page exists so <code>@lhci/cli</code> and Playwright + axe-core have a
-      stable target with predictable a11y characteristics. It is not linked from
-      the public site.
-    </p>
-  </header>
-
-  <section aria-labelledby="landmarks-heading">
-    <h2 id="landmarks-heading">Landmarks</h2>
-    <p>
-      A single <code>main</code> wraps the page; sections each declare
-      <code>aria-labelledby</code> matched to their heading id so screen readers
-      and axe both see a clean outline.
-    </p>
-  </section>
-
-  <section aria-labelledby="links-heading">
-    <h2 id="links-heading">Links</h2>
-    <p>
-      <a href="/">Back to home</a> \u2014 relative link with descriptive visible text,
-      so no <code>aria-label</code> override is needed.
-    </p>
-  </section>
-</main>
-`;
-
-// src/recipes/a11y-fixtures-page/index.ts
-async function fileExists(path) {
-  try {
-    await access(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function a11yFixturesPage(site) {
-  const target = join19(site.path, A11Y_FIXTURES_PAGE_RELATIVE);
-  return withRecipe({
-    name: "a11y-fixtures-page",
-    site,
-    plan: async () => {
-      if (await fileExists(target)) {
-        return { kind: "noop", notes: `${A11Y_FIXTURES_PAGE_RELATIVE} already exists` };
-      }
-      return { kind: "apply", plan: { target } };
-    },
-    apply: async (planned, { commit: commit2 }) => {
-      await mkdir2(dirname3(planned.target), { recursive: true });
-      await writeFile9(planned.target, A11Y_FIXTURES_PAGE_TEMPLATE, "utf-8");
-      await commit2("feat: add /dev/a11y-fixtures starter route");
-      return { kind: "ok" };
-    }
-  });
-}
-
-// src/recipes/init.ts
-function recipeStep(name, fn) {
-  return {
-    name,
-    run: async (site) => ({ kind: "recipe", result: await fn(site) })
-  };
-}
-var DEFAULT_INIT_STEPS = [
-  recipeStep("convert-to-pnpm", convertToPnpm),
-  recipeStep("onboard", onboard),
-  recipeStep("sync-configs", syncConfigs),
-  recipeStep("svelte-codemods", svelteCodemods),
-  recipeStep("a11y-fixtures-page", a11yFixturesPage),
-  {
-    name: "audit",
-    run: async (site) => ({ kind: "audit", results: await runAudits(site) })
-  }
-];
-async function init(site, opts = {}) {
-  const steps = opts.steps ?? DEFAULT_INIT_STEPS;
-  const out = [];
-  for (const step of steps) {
-    let result;
-    try {
-      result = await step.run(site);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      out.push({ name: step.name, result: { kind: "error", message } });
-      return { site: siteLabel(site), steps: out, complete: false };
-    }
-    out.push({ name: step.name, result });
-    if (result.kind === "recipe" && result.result.status === "failed") {
-      return { site: siteLabel(site), steps: out, complete: false };
-    }
-  }
-  return { site: siteLabel(site), steps: out, complete: true };
-}
-
-// src/recipes/index.ts
-var ALL_RECIPE_NAMES = [
-  "sync-configs",
-  "bump-deps",
-  "svelte-4-to-5",
-  "svelte-codemods",
-  "convert-to-pnpm",
-  "onboard",
-  "a11y-fixtures-page",
-  "self-updating",
-  "init"
-];
-function isRecipeName(value) {
-  return ALL_RECIPE_NAMES.includes(value);
-}
-
-// src/inventory/local.ts
-import { basename } from "path";
-function localPath(path, opts = {}) {
-  const site = { path, name: opts.name || basename(path) };
-  return async () => [site];
-}
-
-// src/inventory/json.ts
-import { readFile as readFile10 } from "fs/promises";
-import { isAbsolute } from "path";
-
-// src/util/url.ts
-function isHttpUrl(s) {
-  let parsed;
-  try {
-    parsed = new URL(s);
-  } catch {
-    return false;
-  }
-  return parsed.protocol === "http:" || parsed.protocol === "https:";
-}
-function isNetlifyAppUrl(s) {
-  let parsed;
-  try {
-    parsed = new URL(s);
-  } catch {
-    return false;
-  }
-  const host = parsed.hostname.toLowerCase();
-  return host === "netlify.app" || host.endsWith(".netlify.app");
-}
-
-// src/inventory/json.ts
-function validate(raw) {
-  if (!Array.isArray(raw)) {
-    throw new Error("inventory JSON must be an array of sites");
-  }
-  return raw.map((entry, i) => {
-    if (!entry || typeof entry !== "object") {
-      throw new Error(`inventory entry ${i} is not an object`);
-    }
-    const e = entry;
-    if (typeof e.path !== "string" || e.path.length === 0) {
-      throw new Error(`inventory entry ${i} is missing required field: path`);
-    }
-    if (!isAbsolute(e.path)) {
-      throw new Error(
-        `inventory entry ${i}: path must be absolute (got "${e.path}"). Relative paths are rejected so cwd at invocation can't change which site is targeted.`
-      );
-    }
-    const site = { path: e.path };
-    if (typeof e.name === "string") site.name = e.name;
-    if (typeof e.repoUrl === "string") site.repoUrl = e.repoUrl;
-    if (typeof e.gitRepo === "string") site.gitRepo = e.gitRepo;
-    if (typeof e.deployedUrl === "string") {
-      if (isHttpUrl(e.deployedUrl)) {
-        site.deployedUrl = e.deployedUrl;
-      } else {
-        console.warn(
-          `[inventory] entry ${i}: ignoring deployedUrl that is not http(s): ${JSON.stringify(e.deployedUrl)}`
-        );
-      }
-    }
-    if (typeof e.meta === "object" && e.meta !== null) {
-      site.meta = e.meta;
-    }
-    return site;
-  });
-}
-function fromJsonFile(path) {
-  return async () => {
-    const text = await readFile10(path, "utf-8");
-    let raw;
-    try {
-      raw = JSON.parse(text);
-    } catch (e) {
-      throw new Error(`could not parse inventory file ${path}: ${e.message}`, {
-        cause: e
-      });
-    }
-    return validate(raw);
-  };
-}
-
-// src/reports/airtable/websites.ts
-var WEBSITES_TABLE = "Websites";
-function siteSlug(name) {
-  return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
-}
-function trimToNull(raw) {
-  if (typeof raw !== "string") return null;
-  const trimmed = raw.trim();
-  return trimmed.length > 0 ? trimmed : null;
-}
-function parseNotifyRouting(raw) {
-  if (typeof raw !== "string") return null;
-  const trimmed = raw.trim();
-  if (!trimmed) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(trimmed);
-  } catch {
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-  const o = parsed;
-  if (typeof o.field !== "string" || !o.field.trim()) return null;
-  if (!o.routes || typeof o.routes !== "object" || Array.isArray(o.routes)) return null;
-  const routing = {
-    field: o.field,
-    routes: o.routes
-  };
-  if (o.default !== void 0) routing.default = o.default;
-  if (Array.isArray(o.cc)) routing.cc = o.cc.filter((x) => typeof x === "string");
-  return routing;
-}
-var ACTIVE_STATUSES = /* @__PURE__ */ new Set([
-  "maintenance",
-  "launch period"
-]);
-var FREQUENCIES = ["None", "Monthly", "Quarterly", "Yearly"];
-function toFrequency(raw) {
-  return typeof raw === "string" && FREQUENCIES.includes(raw) ? raw : "None";
-}
-function mapRow(rec) {
-  const f = rec.fields;
-  const attachments = f["Header image"] ?? [];
-  const header = attachments[0] ?? null;
-  return {
-    id: rec.id,
-    name: String(f["Name"] ?? ""),
-    url: String(f["url"] ?? ""),
-    status: f["Status"] ?? null,
-    pointOfContact: f["point of contact"] ?? null,
-    maintenanceFreq: toFrequency(f["maintenence freq"]),
-    testingFreq: toFrequency(f["testing freq"]),
-    maintenanceDay: f["maintenance day"] ?? null,
-    testingDay: f["testing day"] ?? null,
-    ga4PropertyId: f["GA4 property ID"] ?? null,
-    searchQuery: f["Search query"] ?? null,
-    searchConsoleProperty: f["Search Console property"] ?? null,
-    analyticsSoftFailAt: f["Analytics soft-fail at"] ?? null,
-    gitRepo: f["Git repo"] ?? null,
-    reportRecipientsTo: f["Report recipients (To)"] ?? null,
-    reportRecipientsCc: f["Report recipients (CC)"] ?? null,
-    headerImage: header,
-    pScore: f["pScore"] ?? null,
-    rScore: f["rScore"] ?? null,
-    bpScore: f["bpScore"] ?? null,
-    seoScore: f["seoScore"] ?? null,
-    lastLighthouseAuditAt: f["Last lighthouse audit at"] ?? null,
-    a11yViolations: f["A11y Violations"] ?? null,
-    depsDrifted: f["Deps Drifted"] ?? null,
-    depsMajorBehind: f["Deps Major Behind"] ?? null,
-    depsOutdated: f["Deps Outdated"] ?? null,
-    securityVulnsCritical: f["Security Vulns Critical"] ?? null,
-    securityVulnsHigh: f["Security Vulns High"] ?? null,
-    securityVulnsModerate: f["Security Vulns Moderate"] ?? null,
-    securityVulnsLow: f["Security Vulns Low"] ?? null,
-    lastSecurityAuditAt: f["Last security audit at"] ?? null,
-    securityAdvisories: parseSecurityAdvisories(f["Security advisories"]),
-    certDaysRemaining: f["Cert days remaining"] ?? null,
-    domainCheckedAt: f["Domain checked at"] ?? null,
-    crossbrowserOk: typeof f["Crossbrowser OK"] === "boolean" ? f["Crossbrowser OK"] : null,
-    mobileOk: typeof f["Mobile OK"] === "boolean" ? f["Mobile OK"] : null,
-    linksOk: typeof f["Links OK"] === "boolean" ? f["Links OK"] : null,
-    brokenLinks: typeof f["Broken links"] === "number" ? f["Broken links"] : null,
-    browserCheckedAt: f["Browser checked at"] ?? null,
-    copyIntro: trimToNull(f["Copy \u2014 Intro"]),
-    copyContact: trimToNull(f["Copy \u2014 Contact"]),
-    copyFooter: trimToNull(f["Copy \u2014 Footer"]),
-    launchedAt: f["Launched at"] ?? null,
-    newsletterWebhook: trimToNull(f["Newsletter Webhook"]),
-    notifyRouting: parseNotifyRouting(f["Notify Routing"]),
-    mailchimpApiKey: trimToNull(f["Mailchimp API Key"]),
-    mailchimpAudienceId: trimToNull(f["Mailchimp Audience ID"]),
-    renovateFailingCis: f["Renovate Failing CIs"] ?? null,
-    defaultBranchCi: f["Default Branch CI"] ?? null,
-    lastCommitAt: f["Last Commit At"] ?? null,
-    githubSignalsAt: f["GitHub Signals At"] ?? null
-  };
-}
-async function listWebsites(base) {
-  const out = [];
-  await base(WEBSITES_TABLE).select({ pageSize: 100 }).eachPage((records, fetchNextPage) => {
-    for (const rec of records) out.push(mapRow({ id: rec.id, fields: rec.fields }));
-    fetchNextPage();
-  });
-  return out;
-}
-var SEVERITY_RANK = {
-  critical: 0,
-  high: 1,
-  moderate: 2,
-  low: 3
-};
-function normalizeSecurityAdvisory(raw) {
-  if (!raw || typeof raw !== "object") return null;
-  const e = raw;
-  const module = typeof e["module"] === "string" ? e["module"] : null;
-  const severity = e["severity"];
-  if (module === null) return null;
-  if (severity !== "low" && severity !== "moderate" && severity !== "high" && severity !== "critical")
-    return null;
-  const cves = Array.isArray(e["cves"]) ? e["cves"].filter((c) => typeof c === "string") : [];
-  return {
-    module,
-    severity,
-    title: typeof e["title"] === "string" ? e["title"] : "",
-    cves,
-    url: typeof e["url"] === "string" ? e["url"] : null
-  };
-}
-function parseSecurityAdvisories(raw) {
-  if (typeof raw !== "string" || raw.trim() === "") return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (!Array.isArray(parsed)) return null;
-  return parsed.map(normalizeSecurityAdvisory).filter((a) => a !== null);
-}
-async function updateAnalyticsHealth(base, recordId, at) {
-  const fields = { "Analytics soft-fail at": at };
-  await base(WEBSITES_TABLE).update([{ id: recordId, fields }]);
-}
-async function updateLaunched(base, recordId, at) {
-  const fields = { Status: "maintenance", "Launched at": at };
-  await base(WEBSITES_TABLE).update([{ id: recordId, fields }]);
-}
-
-// src/inventory/airtable.ts
-function fromAirtableBase(base, opts = {}) {
-  return async () => {
-    const workdir = opts.workdir ?? process.env.REDDOOR_FLEET_WORKDIR;
-    if (!workdir) {
-      throw new Error(
-        "fromAirtableBase requires `workdir` option or REDDOOR_FLEET_WORKDIR env (sites need a local path)"
-      );
-    }
-    const websites = await listWebsites(base);
-    return websites.filter((w) => w.status !== null && ACTIVE_STATUSES.has(w.status) && w.url.length > 0).flatMap((w) => {
-      const slug = siteSlug(w.name);
-      if (slug.length === 0) {
-        console.warn(
-          `[inventory] skipping "${w.name}" (row ${w.id}): Name has no slug-able characters (empty slug)`
-        );
-        return [];
-      }
-      const site = {
-        path: `${workdir}/${slug}`,
-        name: slug,
-        meta: { airtableRowId: w.id, displayName: w.name }
-      };
-      if (isHttpUrl(w.url)) {
-        site.deployedUrl = w.url;
-      } else {
-        console.warn(
-          `[inventory] skipping deployed audit for "${w.name}": url is not http(s): ${JSON.stringify(w.url)}`
-        );
-      }
-      if (w.gitRepo) site.gitRepo = w.gitRepo;
-      return [site];
-    });
-  };
-}
-
-// src/reports/draft.ts
-import { mkdir as mkdir3, writeFile as writeFile10 } from "fs/promises";
-import { dirname as dirname6 } from "path";
-
-// src/reports/render.ts
-import mjml2html from "mjml";
-
-// src/reports/copy.ts
-var DEFAULT_COPY = {
-  maintenanceIntro: "Includes checking the hosting, DNS, Content Management System (CMS, if applicable), search indexing and security of the site for major flaws and updating as necessary.",
-  maintenanceChecks: [
-    "Deploy & Function Health",
-    "CMS Checked",
-    "Domain, DNS & SSL",
-    "Google Indexed",
-    "Security Updates",
-    "Uptime Checked"
-  ],
-  testingIntro: "Testing includes checks similar to those at launch: testing on common browsers and operating systems, at different screen sizes, and checking every function, and updating all packages for performance rather than just those needed for security.",
-  testingChecklist: [
-    "Desktop Browsers",
-    "Mobile Browsers",
-    "Page Titles & Meta",
-    "Links & Navigation",
-    "Form Functionality",
-    "Interactions & Animations",
-    "Tested After Updates"
-  ],
-  notesHeader: "NOTES",
-  seoCta: "Contact us if you are interested in more in-depth data or have questions about SEO.",
-  contact: ["Just hit reply.", "We're here to help in any way we can."],
-  footerOrg: "Reddoor Creative, LLC",
-  footerAddress: ["29027 Dapper Dan", "Fair Oaks Ranch, TX 78015"],
-  launchHeading: "LAUNCHED",
-  launchBody: "Your site is live. We've set it up on the Reddoor stack with hosting, security, and automatic maintenance so it stays fast and healthy. Here's what's in place:",
-  launchSetupItems: [
-    "Hosting, DNS, and SSL configured",
-    "Continuous integration + automatic dependency updates",
-    "Analytics and uptime monitoring"
-  ],
-  announceHeading: "YOUR ONGOING SITE CARE",
-  announceBody: "We've completed a full test of your site and set it up for ongoing care to keep it fast, secure, and healthy. Here's what you can expect from us going forward:",
-  announceImprovementResend: "Your contact forms now deliver straight to your inbox through reliable infrastructure, so no inquiry slips through the cracks.",
-  announceImprovementSvelte5: "We've modernized your site to the latest framework \u2014 it's faster, more secure, and built to last.",
-  announceCadence: "After each one we'll send you a short report like this \u2014 there's nothing you need to do.",
-  announceOpenDoor: "And if you'd ever like to expand the scope, add features, or freshen anything up, just let us know."
-};
-function override(v) {
-  if (typeof v !== "string") return null;
-  const t = v.trim();
-  return t.length > 0 ? t : null;
-}
-function splitLines(s) {
-  return s.split(/\r?\n/).filter((l) => l.trim().length > 0);
-}
-function resolveCopy(site) {
-  const intro = override(site.copyIntro);
-  const contact = override(site.copyContact);
-  const footer = override(site.copyFooter);
-  const footerLines = footer ? splitLines(footer) : null;
-  return {
-    ...DEFAULT_COPY,
-    maintenanceIntro: intro ?? DEFAULT_COPY.maintenanceIntro,
-    contact: contact ? splitLines(contact) : DEFAULT_COPY.contact,
-    footerOrg: footerLines?.[0] ?? DEFAULT_COPY.footerOrg,
-    footerAddress: footerLines ? footerLines.slice(1) : DEFAULT_COPY.footerAddress
-  };
-}
-
-// src/reports/maintenance-email/assets/index.ts
-import { readFile as readFile11 } from "fs/promises";
-import { existsSync as existsSync3 } from "fs";
-import { dirname as dirname4, join as join20 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var CHECK_CID = "rd-check-png";
-var BLURRED_CID = "rd-blurred-tests-jpg";
-var cachedAssetsDir = null;
-function resolveAssetsDir() {
-  if (cachedAssetsDir) return cachedAssetsDir;
-  let dir = dirname4(fileURLToPath2(import.meta.url));
-  while (true) {
-    const srcCandidate = join20(dir, "src", "reports", "maintenance-email", "assets", "check.png");
-    if (existsSync3(srcCandidate)) {
-      cachedAssetsDir = dirname4(srcCandidate);
-      return cachedAssetsDir;
-    }
-    const distCandidate = join20(dir, "dist", "reports", "maintenance-email", "assets", "check.png");
-    if (existsSync3(distCandidate)) {
-      cachedAssetsDir = dirname4(distCandidate);
-      return cachedAssetsDir;
-    }
-    const parent = dirname4(dir);
-    if (parent === dir) {
-      throw new Error(
-        `loadBundledImages: could not locate maintenance-email assets dir by walking up from ${fileURLToPath2(import.meta.url)}. Checked both src/ and dist/ layouts.`
-      );
-    }
-    dir = parent;
-  }
-}
-async function loadBundledImages() {
-  const assetsDir = resolveAssetsDir();
-  const [check, blurred] = await Promise.all([
-    readFile11(join20(assetsDir, "check.png")),
-    readFile11(join20(assetsDir, "blurredTests.jpg"))
-  ]);
-  return {
-    check: {
-      bytes: new Uint8Array(check),
-      contentType: "image/png",
-      cid: CHECK_CID,
-      filename: "check.png"
-    },
-    blurred: {
-      bytes: new Uint8Array(blurred),
-      contentType: "image/jpeg",
-      cid: BLURRED_CID,
-      filename: "blurredTests.jpg"
-    }
-  };
-}
-
-// src/util/html.ts
-function escapeHtml(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-}
-function safeUrl(raw) {
-  try {
-    const u = new URL(raw);
-    if (u.protocol === "http:" || u.protocol === "https:") return raw;
-  } catch {
-  }
-  return "#";
-}
-
-// src/reports/email-sections.ts
-var escapeXml = escapeHtml;
-var RED = "#C00";
-var GREY = "#757575";
-var BORDER = "#CCCCCC";
-var TREND_UP = "#2E7D32";
-var TREND_NEUTRAL = GREY;
-var CHECK_PNG = `cid:${CHECK_CID}`;
-function fmtUsers(n) {
-  return n.toLocaleString("en-US");
-}
-function checklistRowsSection(rows, opts) {
-  return rows.map((label, i) => {
-    const isLast = i === rows.length - 1;
-    const border = isLast ? "" : ` border-bottom="solid ${BORDER} 1px"`;
-    const lastPad = isLast ? ` padding-bottom="${opts.lastPaddingBottom}"` : "";
-    return `
-    <mj-section background-color="${opts.background}" padding="0px"${lastPad}>
-      <mj-group>
-        <mj-column padding-left="0px" width="90%"${border}>
-          <mj-text height="25px" padding-left="0px" color="${GREY}" padding-top="20px" padding-bottom="7.5px" font-size="16px">${escapeXml(label)}</mj-text>
-        </mj-column>
-        <mj-column width="10%"${border} padding-top="15px">
-          <mj-image align="right" padding-right="0px" width="20px" height="20px" padding-top="2.5px" padding-bottom="15px" src="${CHECK_PNG}" />
-        </mj-column>
-      </mj-group>
-    </mj-section>`;
-  }).join("");
-}
-var LIGHTHOUSE_ROWS = [
-  { label: "Performance", key: "performance", range: "Acceptable 50\u201389 // Ideal 90\u2013100" },
-  { label: "Readability (A11y)", key: "accessibility", range: "Acceptable 80\u201399 // Ideal 100" },
-  { label: "Best Practices", key: "bestPractices", range: "Acceptable 60\u201379 // Ideal 80\u2013100" },
-  { label: "Site Structure", key: "seo", range: "Acceptable 50\u201389 // Ideal 90\u2013100" }
-];
-function lighthouseScoresSection(lighthouse2, opts = {}) {
-  const background = opts.background ?? "#F4F4F4";
-  const sectionPad = opts.pad ? ` padding-top="${opts.pad}" padding-bottom="${opts.pad}"` : "";
-  const labelTop = opts.pad ?? "55px";
-  const footnoteBottom = opts.pad ? "0px" : "36px";
-  const rows = LIGHTHOUSE_ROWS.map(
-    ({ label, key, range }, i) => `
-        <mj-text color="${RED}" font-size="20px" font-weight="300" padding-top="25px">${label}</mj-text>
-        <mj-text color="${RED}" font-size="44px" font-weight="400" padding-top="0px">${lighthouse2[key]}</mj-text>
-        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">${range}</mj-text>${i < LIGHTHOUSE_ROWS.length - 1 ? `
-        <mj-divider border-width="1px" border-style="solid" border-color="${BORDER}" padding="0" />` : ""}`
-  ).join("");
-  return `
-    <mj-section background-color="${background}"${sectionPad}>
-      <mj-column>
-        <mj-text color="${RED}" font-size="20px" font-weight="700" padding-top="${labelTop}">LIGHTHOUSE SCORES*</mj-text>${rows}
-        <mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="${footnoteBottom}" line-height="20px">*A Lighthouse score is a numerical measure provided by Google's Lighthouse tool, which evaluates various aspects of a web page's quality.</mj-text>
-      </mj-column>
-    </mj-section>`;
-}
-function analyticsTrendLine(cur, prev) {
-  if (cur === void 0 || prev === void 0) {
-    return trendLine(TREND_NEUTRAL, `Last Period: ${prev !== void 0 ? fmtUsers(prev) : "\u2014"}`);
-  }
-  if (prev === 0) {
-    return cur > 0 ? trendLine(TREND_UP, "\u25B2 New this period (0 last period)") : trendLine(TREND_NEUTRAL, "Last Period: 0");
-  }
-  const pct = Math.round((cur - prev) / prev * 100);
-  const range = `(${fmtUsers(prev)} \u2192 ${fmtUsers(cur)})`;
-  if (pct > 0) return trendLine(TREND_UP, `\u25B2 ${pct}% vs last period ${range}`);
-  if (pct < 0) return trendLine(TREND_NEUTRAL, `\u25BC ${Math.abs(pct)}% vs last period ${range}`);
-  return trendLine(TREND_NEUTRAL, `No change vs last period (${fmtUsers(prev)})`);
-}
-function trendLine(color, text) {
-  return `<mj-text color="${color}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${text}</mj-text>`;
-}
-function footnoteLine(text) {
-  return `<mj-text color="${GREY}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="36px" line-height="20px">${text}</mj-text>`;
-}
-function analyticsSection(opts) {
-  const users = opts.current !== void 0 ? fmtUsers(opts.current) : "\u2014";
-  const body = (opts.bodyLines ?? []).map((l) => trendLine(TREND_NEUTRAL, l)).join("\n        ");
-  const footnotes = (opts.footnoteLines ?? []).map(footnoteLine).join("\n        ");
-  const sectionPad = opts.pad ? ` padding-top="${opts.pad}" padding-bottom="${opts.pad}"` : "";
-  const labelTop = opts.pad ?? "75px";
-  return `
-    <mj-section background-color="${opts.background}"${sectionPad}>
-      <mj-column>
-        <mj-text color="${RED}" font-size="20px" font-weight="700" padding-top="${labelTop}">ANALYTICS</mj-text>
-        <mj-text color="${RED}" font-size="44px" font-weight="400">${users} Users</mj-text>
-        ${analyticsTrendLine(opts.current, opts.previous)}
-        ${body}
-        ${footnotes}
-      </mj-column>
-    </mj-section>`;
-}
-
-// src/reports/maintenance-email/template.ts
-var escapeXml2 = escapeHtml;
-var BLURRED_TESTS = `cid:${BLURRED_CID}`;
-function fmtDate(d) {
-  if (!d || Number.isNaN(d.getTime())) return "";
-  const mm = String(d.getUTCMonth() + 1).padStart(2, "0");
-  const dd = String(d.getUTCDate()).padStart(2, "0");
-  const yyyy = d.getUTCFullYear();
-  return `${mm}.${dd}.${yyyy}`;
-}
-function maintenanceChecksSection(copy, searchPosition) {
-  const googleLabel = searchPosition !== void 0 ? `Page 1 Google Result (#${searchPosition})` : copy.maintenanceChecks[3] ?? "";
-  const rows = copy.maintenanceChecks.map((label, i) => i === 3 ? googleLabel : label);
-  return checklistRowsSection(rows, { background: "white", lastPaddingBottom: "36px" });
-}
-function testingChecklistSection(copy) {
-  return checklistRowsSection(copy.testingChecklist, {
-    background: "#F4F4F4",
-    lastPaddingBottom: "60px"
-  });
-}
-function maintenanceTestingPlaceholder(lastTested) {
-  return `
-    <mj-section background-color="#F4F4F4">
-      <mj-column>
-        <mj-image href="mailto:info@reddoorla.com" src="${BLURRED_TESTS}" />
-      </mj-column>
-    </mj-section>
-    <mj-section background-color="#F4F4F4" padding-top="0px">
-      <mj-column>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">Last Tested: ${fmtDate(lastTested)}</mj-text>
-      </mj-column>
-    </mj-section>`;
-}
-function testingIntroSection(copy) {
-  return `
-    <mj-section background-color="#F4F4F4">
-      <mj-column>
-        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">TESTING</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml2(copy.testingIntro)}</mj-text>
-      </mj-column>
-    </mj-section>`;
-}
-function commentarySection(text, copy) {
-  return `
-    <mj-section background-color="white">
-      <mj-column>
-        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="55px">${escapeXml2(copy.notesHeader)}</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml2(text).replace(/\r\n?|\n/g, "<br/>")}</mj-text>
-      </mj-column>
-    </mj-section>`;
-}
-function hasHeaderDims(data) {
-  return Boolean(data.headerWidth && data.headerHeight && data.headerBgColor);
-}
-function headerImageTag(data) {
-  const src = `cid:${data.headerImageCid}`;
-  const alt = `${escapeXml2(data.siteName)} maintenance report`;
-  const href = isHttpUrl(data.siteUrl) ? escapeXml2(data.siteUrl) : "#";
-  if (hasHeaderDims(data)) {
-    return `<mj-image href="${href}" src="${src}" alt="${alt}" width="${data.headerWidth}px" css-class="rd-header" container-background-color="${data.headerBgColor}" />`;
-  }
-  return `<mj-image href="${href}" src="${src}" alt="${alt}" />`;
-}
-function headerStyleBlock(data) {
-  if (!hasHeaderDims(data)) return "";
-  return `<mj-style>.rd-header img { height: auto !important; aspect-ratio: ${data.headerWidth} / ${data.headerHeight}; }</mj-style>`;
-}
-function buildMjml(data) {
-  const copy = data.copy ?? DEFAULT_COPY;
-  const isTesting = data.reportType === "Testing";
-  const previewText = `Checked up on ${escapeXml2(data.siteName)}`;
-  return `<mjml>
-  <mj-head>
-    <mj-attributes>
-      <mj-text font-family="helvetica, sans-serif" padding-left="5px" padding-right="5px" />
-      <mj-section padding-left="11%" padding-right="11%"/>
-      <mj-image padding="0px" />
-    </mj-attributes>
-    <mj-preview>${previewText}</mj-preview>
-    ${headerStyleBlock(data)}
-  </mj-head>
-  <mj-body background-color="white">
-    <mj-section background-color="#F4F4F4" padding-top="0px" padding-bottom="0px" padding-left="0px" padding-right="0px">
-      <mj-column>
-        ${headerImageTag(data)}
-      </mj-column>
-    </mj-section>
-    <mj-section background-color="white">
-      <mj-column>
-        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">COMPLETED ON</mj-text>
-        <mj-text color="#C00" font-size="44px" font-weight="400">${fmtDate(data.completedOn)}</mj-text>
-        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">MAINTENANCE CHECKS</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${escapeXml2(copy.maintenanceIntro)}</mj-text>
-      </mj-column>
-    </mj-section>
-    ${maintenanceChecksSection(copy, data.searchPosition)}
-    ${lighthouseScoresSection(data.lighthouse)}
-    ${analyticsSection({
-    current: data.gaUsersCurrent,
-    previous: data.gaUsersPrevious,
-    background: "white",
-    footnoteLines: [escapeXml2(copy.seoCta)]
-  })}
-    ${isTesting ? testingIntroSection(copy) + testingChecklistSection(copy) : maintenanceTestingPlaceholder(data.lastTestedDate)}
-    ${data.commentary ? commentarySection(data.commentary, copy) : ""}
-    <mj-section background-color="white">
-      <mj-column padding-top="36px">
-        <mj-text color="#C00" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="36px" line-height="36px">Any questions, concerns or requests?</mj-text>
-        ${copy.contact.map(
-    (line, i) => i === copy.contact.length - 1 ? `<mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" padding-top="0px" line-height="30px" padding-bottom="36px">${escapeXml2(line)}</mj-text>` : `<mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml2(line)}</mj-text>`
-  ).join("\n        ")}
-        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml2(copy.footerOrg)}. All rights reserved.</mj-text>
-        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
-        ${[copy.footerOrg, ...copy.footerAddress].map(
-    (line) => `<mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(line)}</mj-text>`
-  ).join("\n        ")}
-      </mj-column>
-    </mj-section>
-  </mj-body>
-</mjml>`;
-}
-
-// src/reports/launch-email/template.ts
-var RED2 = "#C00";
-var GREY2 = "#757575";
-function buildLaunchMjml(data) {
-  const copy = data.copy ?? DEFAULT_COPY;
-  const previewText = `${escapeXml2(data.siteName)} is live`;
-  const setupRows = copy.launchSetupItems.map(
-    (item) => `
-      <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="4px" padding-bottom="4px">\u2022 ${escapeXml2(item)}</mj-text>`
-  ).join("");
-  const contactRows = copy.contact.map(
-    (line) => `
-      <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml2(line)}</mj-text>`
-  ).join("");
-  const footerAddressRows = copy.footerAddress.map(
-    (line) => `
-      <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(line)}</mj-text>`
-  ).join("");
-  return `<mjml>
-  <mj-head>
-    <mj-attributes>
-      <mj-text font-family="helvetica, sans-serif" padding-left="5px" padding-right="5px" />
-      <mj-section padding-left="11%" padding-right="11%"/>
-      <mj-image padding="0px" />
-    </mj-attributes>
-    <mj-preview>${previewText}</mj-preview>
-    ${headerStyleBlock(data)}
-  </mj-head>
-  <mj-body background-color="white">
-    <mj-section background-color="#F4F4F4" padding-top="0px" padding-bottom="0px" padding-left="0px" padding-right="0px">
-      <mj-column>${headerImageTag(data)}</mj-column>
-    </mj-section>
-    <mj-section background-color="white">
-      <mj-column>
-        <mj-text color="${RED2}" font-size="20px" font-weight="700" padding-top="75px">${escapeXml2(copy.launchHeading)}</mj-text>
-        <mj-text color="${RED2}" font-size="44px" font-weight="400">${fmtDate(data.completedOn)}</mj-text>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="20px">${escapeXml2(copy.launchBody)}</mj-text>
-        ${setupRows}
-      </mj-column>
-    </mj-section>
-    <mj-section background-color="white">
-      <mj-column padding-top="36px">
-        <mj-text color="${RED2}" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="36px" line-height="36px">Any questions, concerns or requests?</mj-text>
-        ${contactRows}
-        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml2(copy.footerOrg)}. All rights reserved.</mj-text>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
-        <mj-text color="${GREY2}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(copy.footerOrg)}</mj-text>
-        ${footerAddressRows}
-      </mj-column>
-    </mj-section>
-  </mj-body>
-</mjml>`;
-}
-
-// src/reports/announcement-email/template.ts
-var FREQ_PHRASE = {
-  Monthly: "every month",
-  Quarterly: "every quarter",
-  Yearly: "every year"
-};
-var RED3 = "#C00";
-var GREY3 = "#757575";
-var SECTION_PAD = "40px";
-function sectionLabel(text) {
-  return `<mj-text color="${RED3}" font-size="20px" font-weight="700" padding-top="0px">${escapeXml2(text)}</mj-text>`;
-}
-function bodyLine(text, paddingTop = "8px") {
-  return `<mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="${paddingTop}">${escapeXml2(text)}</mj-text>`;
-}
-function announcementSiteExtras(site) {
-  return {
-    cadence: { maintenance: site.maintenanceFreq, testing: site.testingFreq },
-    improvements: { resendForms: true, svelte5: true }
-  };
-}
-function buildAnnouncementMjml(data) {
-  const copy = data.copy ?? DEFAULT_COPY;
-  const previewText = "Your monthly report from Reddoor";
-  const cad = data.cadence;
-  const hasMaint = Boolean(cad && cad.maintenance !== "None");
-  const hasTesting = Boolean(cad && cad.testing !== "None");
-  const improvementItems = [];
-  if (data.improvements?.resendForms) improvementItems.push(copy.announceImprovementResend);
-  if (data.improvements?.svelte5) improvementItems.push(copy.announceImprovementSvelte5);
-  const hasImpr = improvementItems.length > 0;
-  const BANDS = ["white", "#F4F4F4"];
-  let bandN = 0;
-  const nextBg = () => BANDS[bandN++ % 2];
-  const introBg = nextBg();
-  const maintBg = hasMaint ? nextBg() : "";
-  const testBg = hasTesting ? nextBg() : "";
-  const lighthouseBg = nextBg();
-  const analyticsBg = nextBg();
-  const improvementsBg = hasImpr ? nextBg() : "";
-  const contactBg = nextBg();
-  const maintenanceSection = cad && cad.maintenance !== "None" ? `
-    <mj-section background-color="${maintBg}" padding-top="${SECTION_PAD}" padding-bottom="0px">
-      <mj-column>
-        ${sectionLabel("MAINTENANCE CHECKS")}
-        ${bodyLine(`${copy.maintenanceIntro} We do this ${FREQ_PHRASE[cad.maintenance]}.${cad.testing === "None" ? ` ${copy.announceCadence}` : ""}`)}
-      </mj-column>
-    </mj-section>${checklistRowsSection(copy.maintenanceChecks, {
-    background: maintBg,
-    lastPaddingBottom: SECTION_PAD
-  })}` : "";
-  const testingSection = cad && cad.testing !== "None" ? `
-    <mj-section background-color="${testBg}" padding-top="${SECTION_PAD}" padding-bottom="0px">
-      <mj-column>
-        ${sectionLabel("TESTING")}
-        ${bodyLine(`${copy.testingIntro} We run a full test ${FREQ_PHRASE[cad.testing]}. ${copy.announceCadence}`)}
-      </mj-column>
-    </mj-section>${checklistRowsSection(copy.testingChecklist, {
-    background: testBg,
-    lastPaddingBottom: SECTION_PAD
-  })}` : "";
-  const analytics = analyticsSection({
-    current: data.gaUsersCurrent,
-    previous: data.gaUsersPrevious,
-    background: analyticsBg,
-    pad: SECTION_PAD,
-    bodyLines: data.searchPosition !== void 0 ? [`Page 1 Google result (#${data.searchPosition}) for your brand search`] : []
-  });
-  const improvementsSection = hasImpr ? `
-    <mj-section background-color="${improvementsBg}" padding-top="${SECTION_PAD}" padding-bottom="${SECTION_PAD}">
-      <mj-column>
-        ${sectionLabel("RECENT IMPROVEMENTS")}
-        ${improvementItems.map((item) => bodyLine(item)).join("\n        ")}
-        ${bodyLine(copy.announceOpenDoor, "16px")}
-      </mj-column>
-    </mj-section>` : "";
-  const contactRows = copy.contact.map(
-    (line) => `
-      <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">${escapeXml2(line)}</mj-text>`
-  ).join("");
-  const footerAddressRows = copy.footerAddress.map(
-    (line) => `
-      <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(line)}</mj-text>`
-  ).join("");
-  return `<mjml>
-  <mj-head>
-    <mj-attributes>
-      <mj-text font-family="helvetica, sans-serif" padding-left="5px" padding-right="5px" />
-      <mj-section padding-left="11%" padding-right="11%"/>
-      <mj-image padding="0px" />
-    </mj-attributes>
-    <mj-preview>${escapeXml2(previewText)}</mj-preview>
-    ${headerStyleBlock(data)}
-  </mj-head>
-  <mj-body background-color="white">
-    <mj-section background-color="#F4F4F4" padding-top="0px" padding-bottom="0px" padding-left="0px" padding-right="0px">
-      <mj-column>${headerImageTag(data)}</mj-column>
-    </mj-section>
-    <mj-section background-color="${introBg}" padding-top="${SECTION_PAD}" padding-bottom="${SECTION_PAD}">
-      <mj-column>
-        ${sectionLabel(copy.announceHeading)}
-        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px" padding-top="20px">Prepared for ${escapeXml2(data.siteName)}</mj-text>
-        ${bodyLine(copy.announceBody)}
-      </mj-column>
-    </mj-section>
-    ${maintenanceSection}
-    ${testingSection}
-    ${lighthouseScoresSection(data.lighthouse, { background: lighthouseBg, pad: SECTION_PAD })}
-    ${analytics}
-    ${improvementsSection}
-    <mj-section background-color="${contactBg}" padding-top="${SECTION_PAD}" padding-bottom="${SECTION_PAD}">
-      <mj-column>
-        <mj-text color="${RED3}" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="0px" line-height="36px">Any questions, concerns or requests?</mj-text>
-        ${contactRows}
-        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
-        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getUTCFullYear()} ${escapeXml2(copy.footerOrg)}. All rights reserved.</mj-text>
-        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
-        <mj-text color="${GREY3}" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">${escapeXml2(copy.footerOrg)}</mj-text>
-        ${footerAddressRows}
-      </mj-column>
-    </mj-section>
-  </mj-body>
-</mjml>`;
-}
-
-// src/reports/render.ts
-async function renderReportHtml(data) {
-  const mjml = data.reportType === "Launch" ? buildLaunchMjml(data) : data.reportType === "Announcement" ? buildAnnouncementMjml(data) : buildMjml(data);
-  const out = await mjml2html(mjml, { validationLevel: "strict" });
-  return { html: out.html, warnings: out.errors ?? [] };
-}
-
-// src/reports/checklist.ts
-var MAINTENANCE_CHECKLIST = [
-  { key: "deploy", label: "Deploy & Function Health", field: "Maint: Deploy & Function Health" },
-  { key: "cms", label: "CMS Checked", field: "Maint: CMS Checked" },
-  { key: "domain", label: "Domain, DNS & SSL", field: "Maint: Domain, DNS & SSL" },
-  { key: "google", label: "Google Indexed", field: "Maint: Google Indexed" },
-  { key: "security", label: "Security Updates", field: "Maint: Security Updates" },
-  { key: "uptime", label: "Uptime Checked", field: "Maint: Uptime Checked" }
-];
-var TESTING_CHECKLIST = [
-  { key: "desktop", label: "Desktop Browsers", field: "Test: Desktop Browsers" },
-  { key: "mobile", label: "Mobile Browsers", field: "Test: Mobile Browsers" },
-  { key: "titles", label: "Page Titles & Meta", field: "Test: Page Titles & Meta" },
-  { key: "links", label: "Links & Navigation", field: "Test: Links & Navigation" },
-  { key: "forms", label: "Form Functionality", field: "Test: Form Functionality" },
-  {
-    key: "interactions",
-    label: "Interactions & Animations",
-    field: "Test: Interactions & Animations"
-  },
-  // `field` keeps its original Airtable column name ("…Verified After Updates") even though
-  // the client-facing label is now "Tested After Updates" — the column holds operator data,
-  // so renaming the label is display-only and avoids a live-base column migration.
-  { key: "updates", label: "Tested After Updates", field: "Test: Verified After Updates" }
-];
-var ALL_CHECKLIST_FIELDS = [...MAINTENANCE_CHECKLIST, ...TESTING_CHECKLIST].map(
-  (i) => i.field
-);
-function checklistFor(type) {
-  if (type === "Maintenance") return MAINTENANCE_CHECKLIST;
-  if (type === "Testing") return [...MAINTENANCE_CHECKLIST, ...TESTING_CHECKLIST];
-  return [];
-}
-function isChecklistComplete(report) {
-  return checklistFor(report.reportType).every((i) => report.checklist[i.field] === true);
-}
-
-// src/reports/airtable/reports.ts
-var REPORTS_TABLE = "Reports";
-var REPORT_TYPES = ["Maintenance", "Testing", "Launch", "Announcement"];
-function toReportType(raw) {
-  if (raw && REPORT_TYPES.includes(raw)) return raw;
-  if (raw)
-    console.warn(`[reports] unknown Report type ${JSON.stringify(raw)} \u2014 treating as Maintenance`);
-  return "Maintenance";
-}
-function isPendingApproval(r) {
-  return r.draftReady && !r.approvedToSend && r.sentAt === null;
-}
-function mapRow2(rec) {
-  const f = rec.fields;
-  const linkSites = f["Site"] ?? [];
-  const html = (f["Rendered HTML"] ?? [])[0] ?? null;
-  return {
-    id: rec.id,
-    reportId: String(f["Report ID"] ?? ""),
-    siteId: linkSites[0] ?? "",
-    reportType: toReportType(f["Report type"]),
-    period: f["Period"] ?? null,
-    periodStart: f["Period start"] ?? null,
-    periodEnd: f["Period end"] ?? null,
-    completedOn: f["Completed on"] ?? null,
-    lighthouse: lighthouseFromFields(f),
-    gaUsersCurrent: f["GA users (period)"] ?? null,
-    gaUsersPrevious: f["GA users (prev period)"] ?? null,
-    searchFoundPage1: typeof f["Search found page 1"] === "boolean" ? f["Search found page 1"] : null,
-    searchPosition: f["Search position"] ?? null,
-    lastTestedDate: f["Last tested date"] ?? null,
-    commentary: f["Commentary"] ?? null,
-    subjectOverride: f["Subject override"] ?? null,
-    draftReady: Boolean(f["Draft ready"]),
-    approvedToSend: Boolean(f["Approved to send"]),
-    sentAt: f["Sent at"] ?? null,
-    approvedAt: f["Approved At"] ?? null,
-    approvedBy: f["Approved By"] ?? null,
-    deliveryStatus: f["Delivery status"] ?? "pending",
-    renderedHtmlAttachment: html,
-    resendMessageId: f["Resend message ID"] ?? null,
-    checklist: Object.fromEntries(ALL_CHECKLIST_FIELDS.map((name) => [name, Boolean(f[name])])),
-    autoEvidence: parseAutoEvidence(f["Checklist auto-evidence"])
-  };
-}
-function parseAutoEvidence(raw) {
-  if (typeof raw !== "string" || !raw.trim()) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    return null;
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
-  const out = {};
-  for (const [field, v] of Object.entries(parsed)) {
-    if (!v || typeof v !== "object") continue;
-    const o = v;
-    if (o.result !== "pass" && o.result !== "fail" && o.result !== "unknown") continue;
-    out[field] = {
-      result: o.result,
-      checkedAt: typeof o.checkedAt === "string" ? o.checkedAt : null,
-      note: typeof o.note === "string" ? o.note : ""
-    };
-  }
-  return Object.keys(out).length > 0 ? out : null;
-}
-function lighthouseFromFields(f) {
-  const p = f["Lighthouse \u2014 Performance"];
-  const a = f["Lighthouse \u2014 Accessibility"];
-  const b = f["Lighthouse \u2014 Best Practices"];
-  const s = f["Lighthouse \u2014 SEO"];
-  if (typeof p !== "number" || typeof a !== "number" || typeof b !== "number" || typeof s !== "number")
-    return null;
-  return { performance: p, accessibility: a, bestPractices: b, seo: s };
-}
-function ymd(d) {
-  return d.toISOString().slice(0, 10);
-}
-async function createDraft(base, input) {
-  const fields = {
-    "Report ID": input.reportId,
-    Site: [input.siteId],
-    "Report type": input.reportType,
-    "Period start": ymd(input.periodStart),
-    "Period end": ymd(input.periodEnd),
-    "Completed on": ymd(input.completedOn),
-    "Lighthouse \u2014 Performance": input.lighthouse.performance,
-    "Lighthouse \u2014 Accessibility": input.lighthouse.accessibility,
-    "Lighthouse \u2014 Best Practices": input.lighthouse.bestPractices,
-    "Lighthouse \u2014 SEO": input.lighthouse.seo,
-    "Delivery status": "pending"
-  };
-  if (input.lastTestedDate) fields["Last tested date"] = ymd(input.lastTestedDate);
-  if (input.gaUsersCurrent !== void 0) fields["GA users (period)"] = input.gaUsersCurrent;
-  if (input.gaUsersPrevious !== void 0) fields["GA users (prev period)"] = input.gaUsersPrevious;
-  if (input.searchFoundPage1 !== void 0) fields["Search found page 1"] = input.searchFoundPage1;
-  if (input.searchPosition !== void 0) fields["Search position"] = input.searchPosition;
-  if (input.period !== void 0) fields["Period"] = input.period;
-  if (input.subjectOverride !== void 0) fields["Subject override"] = input.subjectOverride;
-  for (const field of input.checklistTicks ?? []) fields[field] = true;
-  if (input.autoEvidence && Object.keys(input.autoEvidence).length > 0) {
-    fields["Checklist auto-evidence"] = JSON.stringify(input.autoEvidence);
-  }
-  const created = await base(REPORTS_TABLE).create([{ fields }]);
-  const rec = created[0];
-  if (!rec) throw new Error("Airtable create returned no records");
-  return mapRow2({ id: rec.id, fields: rec.fields });
-}
-async function setDraftReady(base, recordId, ready) {
-  await base(REPORTS_TABLE).update([{ id: recordId, fields: { "Draft ready": ready } }]);
-}
-async function listSendableReports(base) {
-  const out = [];
-  await base(REPORTS_TABLE).select({
-    filterByFormula: "AND({Draft ready} = TRUE(), {Approved to send} = TRUE(), {Sent at} = BLANK())",
-    pageSize: 100
-  }).eachPage((records, fetchNextPage) => {
-    for (const rec of records) out.push(mapRow2({ id: rec.id, fields: rec.fields }));
-    fetchNextPage();
-  });
-  return out;
-}
-async function listAllReports(base) {
-  const out = [];
-  await base(REPORTS_TABLE).select({ pageSize: 100 }).eachPage((records, fetchNextPage) => {
-    for (const rec of records) out.push(mapRow2({ id: rec.id, fields: rec.fields }));
-    fetchNextPage();
-  });
-  return out;
-}
-async function listReportsForSite(base, siteId) {
-  return (await listAllReports(base)).filter((r) => r.siteId === siteId);
-}
-async function stampSent(base, recordId, sentAt, messageId) {
-  const fields = { "Sent at": sentAt.toISOString() };
-  if (messageId !== null) fields["Resend message ID"] = messageId;
-  await base(REPORTS_TABLE).update([
-    {
-      id: recordId,
-      fields
-    }
-  ]);
-}
-
-// src/reports/queue.ts
-var REPORT_TIER = {
-  Maintenance: 1,
-  Testing: 2,
-  Announcement: 3,
-  Launch: 3
-};
-function reportTier(type) {
-  return REPORT_TIER[type];
-}
-async function queueDraft(base, report) {
-  const newTier = reportTier(report.reportType);
-  const others = (await listReportsForSite(base, report.siteId)).filter(isPendingApproval).filter((r) => r.id !== report.id);
-  const blocker = others.find((r) => reportTier(r.reportType) >= newTier);
-  if (blocker) {
-    await setDraftReady(base, report.id, false);
-    return { queued: false, blockedBy: blocker.reportType, supersededIds: [] };
-  }
-  const supersededIds = [];
-  for (const r of others) {
-    await setDraftReady(base, r.id, false);
-    supersededIds.push(r.id);
-  }
-  await setDraftReady(base, report.id, true);
-  return { queued: true, supersededIds };
-}
-
-// src/reports/auto-tick.ts
-var STALE_DAYS = 3;
-var MS_PER_DAY2 = 24 * 60 * 60 * 1e3;
-function isFresh(checkedAt, now) {
-  if (!checkedAt) return false;
-  const t = new Date(checkedAt).getTime();
-  if (Number.isNaN(t)) return false;
-  return now.getTime() - t <= STALE_DAYS * MS_PER_DAY2;
-}
-var CERT_MIN_DAYS = 14;
-function autoTickChecklist(site, reportType, now, signals) {
-  const out = /* @__PURE__ */ new Map();
-  const fields = new Set(checklistFor(reportType).map((i) => i.field));
-  if (fields.has("Maint: Google Indexed")) {
-    const g = googleEvidence(now, signals.search);
-    if (g) out.set("Maint: Google Indexed", g);
-  }
-  if (fields.has("Maint: Security Updates")) {
-    const s = securityEvidence(site, now);
-    if (s) out.set("Maint: Security Updates", s);
-  }
-  if (fields.has("Maint: Domain, DNS & SSL")) {
-    const d = domainEvidence(site, now);
-    if (d) out.set("Maint: Domain, DNS & SSL", d);
-  }
-  if (fields.has("Test: Desktop Browsers")) {
-    const e = browserEvidence(
-      site.crossbrowserOk,
-      site,
-      now,
-      "Desktop renders cleanly",
-      "render errors"
-    );
-    if (e) out.set("Test: Desktop Browsers", e);
-  }
-  if (fields.has("Test: Mobile Browsers")) {
-    const e = browserEvidence(
-      site.mobileOk,
-      site,
-      now,
-      "Mobile renders cleanly",
-      "overflow/errors"
-    );
-    if (e) out.set("Test: Mobile Browsers", e);
-  }
-  if (fields.has("Test: Links & Navigation")) {
-    const broken = site.brokenLinks;
-    const failNote = broken && broken > 0 ? `${broken} broken link(s)` : "broken links / nav";
-    const e = browserEvidence(site.linksOk, site, now, "All internal links resolve", failNote);
-    if (e) out.set("Test: Links & Navigation", e);
-  }
-  return out;
-}
-function browserEvidence(ok, site, now, passNote, failNote) {
-  if (ok === null || !site.browserCheckedAt) return null;
-  const at = site.browserCheckedAt;
-  if (!isFresh(at, now)) {
-    return { result: "unknown", checkedAt: at, note: "Browser check is stale (>3d)" };
-  }
-  return ok ? { result: "pass", checkedAt: at, note: passNote } : { result: "fail", checkedAt: at, note: failNote };
-}
-function securityEvidence(site, now) {
-  const crit = site.securityVulnsCritical;
-  const high = site.securityVulnsHigh;
-  if (crit === null || high === null || !site.lastSecurityAuditAt) return null;
-  const at = site.lastSecurityAuditAt;
-  if (!isFresh(at, now)) {
-    return { result: "unknown", checkedAt: at, note: "Security audit is stale (>3d)" };
-  }
-  if (crit === 0 && high === 0) {
-    return { result: "pass", checkedAt: at, note: "No known critical/high vulnerabilities" };
-  }
-  return { result: "fail", checkedAt: at, note: `${crit} critical / ${high} high vuln(s)` };
-}
-function googleEvidence(now, search) {
-  const at = now.toISOString();
-  if (search.softFailed) {
-    return { result: "unknown", checkedAt: at, note: "Search Console unavailable this run" };
-  }
-  if (search.value === null) return null;
-  if (search.value.foundOnPage1) {
-    const pos2 = search.value.position;
-    return {
-      result: "pass",
-      checkedAt: at,
-      note: `Page 1 on Google${pos2 !== null ? ` (#${pos2})` : ""}`
-    };
-  }
-  const pos = search.value.position;
-  return {
-    result: "fail",
-    checkedAt: at,
-    note: `Not on page 1${pos !== null ? ` (avg #${pos})` : ""}`
-  };
-}
-function domainEvidence(site, now) {
-  if (!site.url || isNetlifyAppUrl(site.url)) return null;
-  if (!site.domainCheckedAt) return null;
-  const at = site.domainCheckedAt;
-  if (!isFresh(site.domainCheckedAt, now)) {
-    return { result: "unknown", checkedAt: at, note: "Domain check is stale (>3d)" };
-  }
-  const days = site.certDaysRemaining;
-  if (days === null) {
-    return { result: "fail", checkedAt: at, note: "Did not resolve, or no valid TLS cert" };
-  }
-  if (days <= CERT_MIN_DAYS) {
-    return { result: "fail", checkedAt: at, note: `TLS cert expires in ${days}d` };
-  }
-  return { result: "pass", checkedAt: at, note: `Custom domain, valid cert (${days}d left)` };
-}
-
-// src/reports/airtable/attachments.ts
-function looksLikeHtml(bytes) {
-  const start = bytes[0] === 239 && bytes[1] === 187 && bytes[2] === 191 ? 3 : 0;
-  const head = Buffer.from(bytes.slice(start, start + 64)).toString("ascii").replace(/^[\s]+/, "").toLowerCase();
-  return head.startsWith("<!doctype html") || head.startsWith("<html") || head.startsWith("<head");
-}
-async function fetchAttachmentBytes(url) {
-  const res = await fetch(url);
-  if (!res.ok) {
-    throw new Error(
-      `Failed to fetch Airtable attachment ${res.status} ${res.statusText} (url=${url})`
-    );
-  }
-  const contentType = res.headers.get("content-type") ?? "application/octet-stream";
-  const ab = await res.arrayBuffer();
-  const bytes = new Uint8Array(ab);
-  const isImageType = contentType.toLowerCase().startsWith("image/");
-  if (!isImageType && looksLikeHtml(bytes)) {
-    throw new Error(
-      `Airtable attachment did not return image data (content-type="${contentType}", body looks like an HTML page \u2014 the signed URL may have expired) (url=${url})`
-    );
-  }
-  return { bytes, contentType };
-}
-async function uploadAttachment(recordId, fieldName, body, filename, contentType) {
-  const apiKey = process.env.AIRTABLE_PAT;
-  const baseId = process.env.AIRTABLE_BASE_ID;
-  if (!apiKey || !baseId) {
-    throw new Error("AIRTABLE_PAT and AIRTABLE_BASE_ID must be set");
-  }
-  const base64 = typeof body === "string" ? Buffer.from(body, "utf-8").toString("base64") : Buffer.from(body).toString("base64");
-  const payload = { contentType, file: base64, filename };
-  const url = `https://content.airtable.com/v0/${baseId}/${recordId}/${encodeURIComponent(fieldName)}/uploadAttachment`;
-  const res = await fetch(url, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${apiKey}`,
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify(payload)
-  });
-  if (!res.ok) {
-    throw new Error(`Airtable upload failed: ${res.status} ${res.statusText} ${await res.text()}`);
-  }
-}
-
-// src/reports/ga/config.ts
-import { dirname as dirname5, join as join22 } from "path";
-
-// src/util/credentials.ts
-import { readFileSync as readFileSync2 } from "fs";
-import { homedir } from "os";
-import { join as join21 } from "path";
-function defaultCredentialsPath() {
-  const base = process.env.XDG_CONFIG_HOME ?? join21(homedir(), ".config");
-  return join21(base, "reddoor-maint", "credentials.env");
-}
-
-// src/reports/ga/config.ts
-function readGaConfig() {
-  const subject = process.env.GA_SUBJECT?.trim();
-  if (!subject) return null;
-  const keyPath = process.env.GA_SA_KEY_PATH?.trim() || join22(dirname5(defaultCredentialsPath()), "ga-service-account.json");
-  return { subject, keyPath };
-}
-
-// src/reports/ga/client.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { JWT } from "google-auth-library";
-import { BetaAnalyticsDataClient } from "@google-analytics/data";
-var ANALYTICS_READONLY = "https://www.googleapis.com/auth/analytics.readonly";
-var MS_PER_DAY3 = 864e5;
-function ymd2(d) {
-  return d.toISOString().slice(0, 10);
-}
-async function fetchPeriodUsers(query, periodStart, periodEnd) {
-  const key = JSON.parse(readFileSync3(query.keyPath, "utf8"));
-  const authClient = new JWT({
-    email: key.client_email,
-    key: key.private_key,
-    scopes: [ANALYTICS_READONLY],
-    subject: query.subject
-  });
-  const client = new BetaAnalyticsDataClient({ authClient });
-  const lengthDays = Math.round((periodEnd.getTime() - periodStart.getTime()) / MS_PER_DAY3);
-  const prevEnd = new Date(periodStart.getTime() - MS_PER_DAY3);
-  const prevStart = new Date(prevEnd.getTime() - lengthDays * MS_PER_DAY3);
-  const property = `properties/${query.propertyId}`;
-  const run = async (start, end) => {
-    const [resp] = await client.runReport({
-      property,
-      dateRanges: [{ startDate: ymd2(start), endDate: ymd2(end) }],
-      metrics: [{ name: "activeUsers" }]
-    });
-    const raw = resp.rows?.[0]?.metricValues?.[0]?.value ?? "0";
-    const n = Number.parseInt(raw, 10);
-    return Number.isFinite(n) ? n : 0;
-  };
-  const current = await run(periodStart, periodEnd);
-  const previous = await run(prevStart, prevEnd);
-  return { current, previous };
-}
-
-// src/reports/search/client.ts
-import { readFileSync as readFileSync4 } from "fs";
-import { JWT as JWT2 } from "google-auth-library";
-var WEBMASTERS_READONLY = "https://www.googleapis.com/auth/webmasters.readonly";
-var SC_BASE = "https://searchconsole.googleapis.com/webmasters/v3";
-var PAGE_1_MAX_POSITION = 10;
-var BRAND_QUERY_ROW_LIMIT = 100;
-function bareHost(s) {
-  return s.trim().replace(/^sc-domain:/i, "").replace(/^https?:\/\//i, "").split("/")[0].replace(/^www\./i, "").toLowerCase();
-}
-function resolvePropertyCandidates(entries, host) {
-  const target = bareHost(host);
-  const matches = entries.filter((e) => bareHost(e.siteUrl) === target).map((e) => e.siteUrl);
-  const domains = matches.filter((s) => s.toLowerCase().startsWith("sc-domain:"));
-  const prefixes = matches.filter((s) => !s.toLowerCase().startsWith("sc-domain:"));
-  return [...domains, ...prefixes];
-}
-function ymd3(d) {
-  return d.toISOString().slice(0, 10);
-}
-function pickBrandQuery(rows) {
-  let best;
-  for (const r of rows) {
-    if (typeof r.position !== "number") continue;
-    const impressions = r.impressions ?? 0;
-    if (best === void 0 || impressions > best.impressions || impressions === best.impressions && r.position < best.position) {
-      best = { position: r.position, impressions };
-    }
-  }
-  return best?.position;
-}
-function selectBrandPosition(rows, exactQuery) {
-  const want = exactQuery.toLowerCase();
-  const exact = rows.find(
-    (r) => typeof r.position === "number" && (r.keys?.[0] ?? "").toLowerCase() === want
-  );
-  if (exact) return exact.position;
-  return pickBrandQuery(rows);
-}
-async function fetchSearchPresence(q, periodStart, periodEnd) {
-  const key = JSON.parse(readFileSync4(q.keyPath, "utf8"));
-  const jwt = new JWT2({
-    email: key.client_email,
-    key: key.private_key,
-    scopes: [WEBMASTERS_READONLY],
-    subject: q.subject
-  });
-  const explicit = q.property?.trim();
-  let candidates;
-  if (explicit) {
-    candidates = [explicit];
-  } else {
-    const list = await jwt.request({
-      url: `${SC_BASE}/sites`,
-      method: "GET"
-    });
-    candidates = resolvePropertyCandidates(list.data.siteEntry ?? [], q.host);
-    if (candidates.length === 0) return { foundOnPage1: false, position: null };
-  }
-  for (const property of candidates) {
-    const res = await jwt.request({
-      url: `${SC_BASE}/sites/${encodeURIComponent(property)}/searchAnalytics/query`,
-      method: "POST",
-      data: {
-        startDate: ymd3(periodStart),
-        endDate: ymd3(periodEnd),
-        dimensions: ["query"],
-        dimensionFilterGroups: [
-          {
-            filters: [
-              { dimension: "query", operator: "contains", expression: q.query.toLowerCase() }
-            ]
-          }
-        ],
-        rowLimit: BRAND_QUERY_ROW_LIMIT
-      }
-    });
-    const pos = selectBrandPosition(res.data.rows ?? [], q.query.toLowerCase());
-    if (typeof pos === "number") {
-      return { foundOnPage1: pos <= PAGE_1_MAX_POSITION, position: Math.max(1, Math.round(pos)) };
-    }
-  }
-  return { foundOnPage1: false, position: null };
-}
-
-// src/reports/draft.ts
-function scoresFromWebsite(siteRow) {
-  const { pScore, rScore, bpScore, seoScore } = siteRow;
-  if (pScore === null || rScore === null || bpScore === null || seoScore === null) {
-    throw new Error(
-      `Site '${siteRow.name}' is missing one or more Lighthouse scores on the Websites row (pScore, rScore, bpScore, seoScore). Run 'reddoor-maint audit lighthouse' from the site's checkout and paste the four numbers into Airtable, then retry.`
-    );
-  }
-  return { performance: pScore, accessibility: rScore, bestPractices: bpScore, seo: seoScore };
-}
-function daysAgo(today, n) {
-  const out = new Date(today);
-  out.setUTCDate(out.getUTCDate() - n);
-  return out;
-}
-async function draftReportForSite(base, siteRow, reportType, options = {}) {
-  const scores = scoresFromWebsite(siteRow);
-  const today = /* @__PURE__ */ new Date();
-  const slug = siteSlug(siteRow.name);
-  const periodStart = base !== null ? await derivePeriodStart(base, siteRow, reportType, today) : daysAgo(today, 30);
-  const periodEnd = today;
-  const completedOn = today;
-  const lastTestedDate = reportType === "Maintenance" && siteRow.lastLighthouseAuditAt ? new Date(siteRow.lastLighthouseAuditAt) : null;
-  const gaResult = base !== null ? await fetchGaUsers(siteRow, periodStart, periodEnd) : NO_ENRICHMENT;
-  const searchResult = base !== null ? await fetchSearch(siteRow, periodStart, periodEnd) : NO_ENRICHMENT;
-  const gaUsers = gaResult.value;
-  const search = searchResult.value;
-  const softFailures = [
-    ...gaResult.softFailed ? ["ga"] : [],
-    ...searchResult.softFailed ? ["search"] : []
-  ];
-  const cidName = `${slug}-header`;
-  const { html } = await renderReportHtml({
-    siteName: siteRow.name,
-    siteUrl: siteRow.url,
-    reportType,
-    completedOn,
-    lighthouse: scores,
-    gaUsersCurrent: gaUsers?.current,
-    gaUsersPrevious: gaUsers?.previous,
-    searchPosition: search?.foundOnPage1 ? search.position ?? void 0 : void 0,
-    lastTestedDate,
-    commentary: null,
-    copy: resolveCopy(siteRow),
-    headerImageCid: cidName
-  });
-  if (options.previewOnly) {
-    const path = options.previewPath ?? `reports/${slug}/draft.html`;
-    await mkdir3(dirname6(path), { recursive: true });
-    await writeFile10(path, html, "utf-8");
-    return { reportRow: null, htmlPath: path, html, softFailures, queued: null, supersededIds: [] };
-  }
-  if (base === null) throw new Error("base required when previewOnly=false");
-  if (readGaConfig() !== null && Boolean(siteRow.ga4PropertyId || siteRow.searchQuery)) {
-    try {
-      await updateAnalyticsHealth(
-        base,
-        siteRow.id,
-        softFailures.length > 0 ? today.toISOString() : null
-      );
-    } catch (e) {
-      console.warn(`\u26A0 analytics-health write skipped for ${siteRow.name}: ${e.message}`);
-    }
-  }
-  if (options.completeRowId) {
-    await uploadDraftHtml(options.completeRowId, slug, periodEnd, html);
-    const outcome2 = await queueDraft(base, {
-      id: options.completeRowId,
-      siteId: siteRow.id,
-      reportType
-    });
-    return {
-      reportRow: options.existingRow ?? null,
-      htmlPath: null,
-      html,
-      softFailures,
-      queued: outcome2.queued,
-      supersededIds: outcome2.supersededIds
-    };
-  }
-  const evidence = autoTickChecklist(siteRow, reportType, completedOn, { search: searchResult });
-  const checklistTicks = [...evidence.entries()].filter(([, e]) => e.result === "pass").map(([field]) => field);
-  const autoEvidence = Object.fromEntries(evidence);
-  const reportId = `${siteRow.name} \u2014 ${reportType} \u2014 ${periodEnd.toISOString().slice(0, 10)}`;
-  const created = await createDraft(base, {
-    reportId,
-    siteId: siteRow.id,
-    reportType,
-    period: options.period ?? periodEnd.toISOString().slice(0, 7),
-    periodStart,
-    periodEnd,
-    completedOn,
-    lighthouse: scores,
-    lastTestedDate,
-    ...gaUsers ? { gaUsersCurrent: gaUsers.current, gaUsersPrevious: gaUsers.previous } : {},
-    ...search ? { searchFoundPage1: search.foundOnPage1 } : {},
-    ...search?.foundOnPage1 && search.position !== null ? { searchPosition: search.position } : {},
-    checklistTicks,
-    autoEvidence
-  });
-  await uploadDraftHtml(created.id, slug, periodEnd, html);
-  const outcome = await queueDraft(base, {
-    id: created.id,
-    siteId: siteRow.id,
-    reportType
-  });
-  return {
-    reportRow: created,
-    htmlPath: null,
-    html,
-    softFailures,
-    queued: outcome.queued,
-    supersededIds: outcome.supersededIds
-  };
-}
-async function uploadDraftHtml(rowId, slug, periodEnd, html) {
-  const htmlFilename = `${slug}-${periodEnd.toISOString().slice(0, 10)}.html`;
-  await uploadAttachment(rowId, "Rendered HTML", html, htmlFilename, "text/html");
-}
-var NO_ENRICHMENT = { value: null, softFailed: false };
-async function fetchGaUsers(siteRow, periodStart, periodEnd) {
-  const cfg = readGaConfig();
-  if (!cfg || !siteRow.ga4PropertyId) return NO_ENRICHMENT;
-  try {
-    const value = await fetchPeriodUsers(
-      { propertyId: siteRow.ga4PropertyId, subject: cfg.subject, keyPath: cfg.keyPath },
-      periodStart,
-      periodEnd
-    );
-    return { value, softFailed: false };
-  } catch (e) {
-    console.warn(`\u26A0 GA skipped for ${siteRow.name}: ${e.message}`);
-    return { value: null, softFailed: true };
-  }
-}
-async function fetchSearch(siteRow, periodStart, periodEnd) {
-  const cfg = readGaConfig();
-  if (!cfg || !siteRow.searchQuery) return NO_ENRICHMENT;
-  try {
-    const value = await fetchSearchPresence(
-      {
-        keyPath: cfg.keyPath,
-        subject: cfg.subject,
-        property: siteRow.searchConsoleProperty ?? void 0,
-        host: siteRow.url,
-        query: siteRow.searchQuery
-      },
-      periodStart,
-      periodEnd
-    );
-    return { value, softFailed: false };
-  } catch (e) {
-    console.warn(`\u26A0 Search presence skipped for ${siteRow.name}: ${e.message}`);
-    return { value: null, softFailed: true };
-  }
-}
-async function derivePeriodStart(base, siteRow, reportType, today) {
-  const prior = await listReportsForSite(base, siteRow.id);
-  const sameType = prior.filter((r) => r.reportType === reportType && r.periodEnd).map((r) => r.periodEnd).sort();
-  const latest = sameType[sameType.length - 1];
-  if (!latest) return daysAgo(today, 30);
-  const start = new Date(latest);
-  start.setUTCDate(start.getUTCDate() + 1);
-  return start;
-}
-
-// src/reports/airtable/client.ts
-import Airtable from "airtable";
-
-// src/reports/airtable/throttle.ts
-function createMinIntervalThrottle(opts) {
-  const { minIntervalMs, now, delay } = opts;
-  return function wrap(fn) {
-    let chain = Promise.resolve();
-    let last = Number.NEGATIVE_INFINITY;
-    return (...args) => {
-      chain = chain.then(async () => {
-        const wait = minIntervalMs - (now() - last);
-        if (wait > 0) await delay(wait);
-        last = now();
-        fn(...args);
-      }).catch(() => {
-      });
-    };
-  };
-}
-function applyThrottle(base, opts) {
-  const real = base._base?.runAction;
-  if (typeof real !== "function") return base;
-  const wrap = createMinIntervalThrottle(opts);
-  const throttled = wrap(real.bind(base._base));
-  base._base.runAction = throttled;
-  base.runAction = throttled;
-  return base;
-}
-
-// src/reports/airtable/client.ts
-var MIN_REQUEST_INTERVAL_MS = 220;
-function missing(name) {
-  return Object.assign(
-    new Error(
-      `${name} not set. Export it in your shell or put it in ${defaultCredentialsPath()} as ${name}=...`
-    ),
-    { exitCode: 2 }
-  );
-}
-function readAirtableConfig() {
-  const apiKey = process.env.AIRTABLE_PAT;
-  const baseId = process.env.AIRTABLE_BASE_ID;
-  if (!apiKey) throw missing("AIRTABLE_PAT");
-  if (!baseId) throw missing("AIRTABLE_BASE_ID");
-  return { apiKey, baseId };
-}
-function openBase(cfg) {
-  const base = new Airtable({ apiKey: cfg.apiKey }).base(cfg.baseId);
-  return applyThrottle(base, {
-    minIntervalMs: MIN_REQUEST_INTERVAL_MS,
-    now: () => Date.now(),
-    delay: (ms) => new Promise((resolve) => setTimeout(resolve, ms))
-  });
-}
-
-// src/reports/maintenance-email/header-image.ts
-import sharp from "sharp";
-var DEFAULT_DISPLAY_WIDTH = 600;
-var RETINA_SCALE = 2;
-var JPEG_QUALITY = 82;
-function channelToHex(value) {
-  return Math.max(0, Math.min(255, Math.round(value))).toString(16).padStart(2, "0");
-}
-async function prepareHeaderImage(bytes, options = {}) {
-  const requestedDisplayWidth = options.displayWidth ?? DEFAULT_DISPLAY_WIDTH;
-  const input = Buffer.from(bytes);
-  const meta = await sharp(input).metadata();
-  const origWidth = meta.width;
-  const origHeight = meta.height;
-  if (!origWidth || !origHeight) {
-    throw new Error("prepareHeaderImage: could not read source image dimensions");
-  }
-  const displayWidth = Math.min(requestedDisplayWidth, origWidth);
-  const displayHeight = Math.round(displayWidth * origHeight / origWidth);
-  const targetSourceWidth = Math.min(origWidth, displayWidth * RETINA_SCALE);
-  const out = await sharp(input).resize({ width: targetSourceWidth, withoutEnlargement: true }).flatten({ background: "#ffffff" }).jpeg({ quality: JPEG_QUALITY }).toBuffer();
-  const { dominant } = await sharp(out).stats();
-  const placeholderColor = `#${channelToHex(dominant.r)}${channelToHex(dominant.g)}${channelToHex(dominant.b)}`;
-  return {
-    bytes: new Uint8Array(out),
-    contentType: "image/jpeg",
-    displayWidth,
-    displayHeight,
-    placeholderColor
-  };
-}
-
-// src/reports/send/resend.ts
-import { Resend } from "resend";
-function defaultResendClient() {
-  const key = process.env.RESEND_API_KEY;
-  if (!key) throw Object.assign(new Error("RESEND_API_KEY not set"), { exitCode: 2 });
-  const resend = new Resend(key);
-  return {
-    async send(input) {
-      const payload = {
-        from: input.from,
-        to: input.to,
-        subject: input.subject,
-        html: input.html
-      };
-      if (input.cc) payload.cc = input.cc;
-      if (input.replyTo) payload.replyTo = input.replyTo;
-      if (input.attachments) payload.attachments = input.attachments;
-      const options = {};
-      if (input.idempotencyKey) options.idempotencyKey = input.idempotencyKey;
-      const { data, error } = await resend.emails.send(payload, options);
-      if (error) throw new Error(`Resend error: ${error.message}`);
-      if (!data?.id) throw new Error("Resend returned no message id");
-      return { messageId: data.id };
-    }
-  };
-}
-
-// src/reports/send/idempotency.ts
-function isIdempotencyConflict(err) {
-  const message = err instanceof Error ? err.message : String(err);
-  if (/idempotency key has been used/i.test(message)) return true;
-  const e = err;
-  if (e.name === "invalid_idempotent_request") return true;
-  if (e.statusCode === 409) return true;
-  return false;
-}
+import {
+  DEFAULT_INIT_STEPS,
+  a11yFixturesPage,
+  init
+} from "./chunk-XO2RUYVM.js";
+import {
+  svelteCodemods
+} from "./chunk-FUD4I2ZW.js";
+import {
+  onboard,
+  selfCaretRange,
+  selfPackageVersion
+} from "./chunk-ZYBOT5PM.js";
+import {
+  findDueReports
+} from "./chunk-WVRPOXKH.js";
+import {
+  draftReportForSite
+} from "./chunk-W3G7XFBZ.js";
+import "./chunk-6LIWDIXU.js";
+import {
+  sendApprovedReports
+} from "./chunk-5L2QXUTU.js";
+import "./chunk-OGGRFBL4.js";
+import {
+  BLURRED_CID,
+  CHECK_CID,
+  loadBundledImages,
+  renderReportHtml
+} from "./chunk-BWLUNY7L.js";
+import {
+  checklistFor,
+  escapeHtml,
+  isChecklistComplete,
+  isPendingApproval,
+  safeUrl
+} from "./chunk-OCS7SZUZ.js";
+import {
+  bumpDeps
+} from "./chunk-D3DQFC32.js";
+import {
+  upgradeSvelte4to5
+} from "./chunk-O65I7G7G.js";
+import "./chunk-OQPMZ6BM.js";
+import {
+  convertToPnpm
+} from "./chunk-2X322ZES.js";
+import {
+  syncConfigs
+} from "./chunk-JNXCDUYB.js";
+import "./chunk-CASCWQQX.js";
+import "./chunk-XKOZUVK2.js";
+import "./chunk-OTGB6YQO.js";
+import {
+  ALL_AUDIT_NAMES,
+  a11yAudit,
+  depsAudit,
+  lighthouseAudit,
+  lintAudit,
+  runAudits,
+  runAuditsAcross,
+  securityAudit
+} from "./chunk-4PY4I5OR.js";
+import "./chunk-LKGVSM2O.js";
+import {
+  fromJsonFile,
+  localPath
+} from "./chunk-FDIFTIXC.js";
+import "./chunk-HVOOCK6L.js";
+import "./chunk-XXTZBPUY.js";
+import "./chunk-XTK5VIQB.js";
+import {
+  fromAirtableBase
+} from "./chunk-JQG222CI.js";
+import "./chunk-U5SZ4FOP.js";
+import {
+  SEVERITY_RANK,
+  siteSlug
+} from "./chunk-CLVTVDOU.js";
+import "./chunk-HN6I2XWI.js";
+import "./chunk-WEKL2HYJ.js";
+import "./chunk-6VAL7XJT.js";
+import "./chunk-EYODPUHV.js";
+import "./chunk-LYCKN7ZR.js";
+import "./chunk-QTHKOIFJ.js";
 
-// src/reports/send/orchestrate.ts
-var FROM_ADDRESS = "Reddoor Reports <reports@reddoorla.com>";
-var REPLY_TO = "info@reddoorla.com";
-var MONTHS = [
-  "January",
-  "February",
-  "March",
-  "April",
-  "May",
-  "June",
-  "July",
-  "August",
-  "September",
-  "October",
-  "November",
-  "December"
+// src/recipes/index.ts
+var ALL_RECIPE_NAMES = [
+  "sync-configs",
+  "bump-deps",
+  "svelte-4-to-5",
+  "svelte-codemods",
+  "convert-to-pnpm",
+  "onboard",
+  "a11y-fixtures-page",
+  "self-updating",
+  "init"
 ];
-function monthYear(d) {
-  return `${MONTHS[d.getUTCMonth()]} ${d.getUTCFullYear()}`;
-}
-function toInlineAttachment(a) {
-  return {
-    filename: a.filename,
-    content: Buffer.from(a.bytes).toString("base64"),
-    contentType: a.contentType,
-    inlineContentId: a.cid
-  };
-}
-async function sendApprovedReports(options = {}) {
-  const base = openBase(readAirtableConfig());
-  const client = options.resend ?? defaultResendClient();
-  const sendable = await listSendableReports(base);
-  if (sendable.length === 0) return { output: "No reports ready to send.", code: 0 };
-  const websites = await listWebsites(base);
-  const sites = new Map(websites.map((w) => [w.id, w]));
-  const lines = [];
-  let anyFailed = false;
-  for (const report of sendable) {
-    const site = sites.get(report.siteId);
-    if (!site) {
-      lines.push(`\u2717 ${report.reportId} \u2014 Site row not found for id=${report.siteId}`);
-      anyFailed = true;
-      continue;
-    }
-    try {
-      const messageId = await sendOne(client, base, site, report);
-      lines.push(`\u2713 sent: ${report.reportId} (${messageId})`);
-      if (report.reportType === "Launch") {
-        try {
-          await updateLaunched(base, site.id, (/* @__PURE__ */ new Date()).toISOString());
-          lines.push(`  \u21B3 launched: ${site.name} flipped to maintenance`);
-        } catch (e) {
-          lines.push(`  \u26A0 launch flip failed for ${site.name}: ${e.message}`);
-        }
-      }
-    } catch (e) {
-      lines.push(`\u2717 ${report.reportId} \u2014 ${e.message}`);
-      anyFailed = true;
-    }
-  }
-  return { output: lines.join("\n"), code: anyFailed ? 1 : 0 };
-}
-async function sendOne(client, base, site, report) {
-  if (!isChecklistComplete(report)) {
-    const items = checklistFor(report.reportType);
-    const done = items.filter((i) => report.checklist[i.field] === true).length;
-    throw new Error(
-      `Report ${report.reportId} checklist incomplete \u2014 ${done}/${items.length} items checked`
-    );
-  }
-  if (!site.headerImage) {
-    throw new Error(`Site '${site.name}' has no Header image set on the Websites row`);
-  }
-  if (!report.lighthouse) {
-    throw new Error(
-      `Report ${report.reportId} has no Lighthouse scores \u2014 all four cells (Lighthouse \u2014 Performance / Accessibility / Best Practices / SEO) must be numeric on the Reports row; one non-numeric or blank cell nulls all four`
-    );
-  }
-  const explicitTo = parseAddresses(site.reportRecipientsTo);
-  const fallbackTo = parseAddresses(site.pointOfContact);
-  const to = explicitTo ?? fallbackTo ?? [];
-  if (to.length === 0) {
-    throw new Error(
-      `Site '${site.name}' has no recipients (Report recipients (To) AND point of contact are both empty)`
-    );
-  }
-  for (const addr of to) {
-    if (!isProbablyEmail(addr)) {
-      throw new Error(
-        `Site '${site.name}' recipient is malformed: ${addr} \u2014 use a bare address only (no \`Name <addr>\` display-name syntax); fix Report recipients (To) or point of contact in Airtable`
-      );
-    }
-  }
-  const cc = parseAddresses(site.reportRecipientsCc);
-  if (cc) {
-    for (const addr of cc) {
-      if (!isProbablyEmail(addr)) {
-        throw new Error(
-          `Site '${site.name}' CC is malformed: ${addr} \u2014 fix Report recipients (CC) in Airtable`
-        );
-      }
-    }
-  }
-  const original = await fetchAttachmentBytes(site.headerImage.url);
-  const header = await prepareHeaderImage(original.bytes);
-  const bundled = await loadBundledImages();
-  const slug = siteSlug(site.name);
-  const cidName = `${slug}-header`;
-  const { html } = await renderReportHtml({
-    siteName: site.name,
-    siteUrl: site.url,
-    reportType: report.reportType,
-    completedOn: report.completedOn ? new Date(report.completedOn) : /* @__PURE__ */ new Date(),
-    lighthouse: report.lighthouse,
-    gaUsersCurrent: report.gaUsersCurrent ?? void 0,
-    gaUsersPrevious: report.gaUsersPrevious ?? void 0,
-    searchPosition: report.searchFoundPage1 && report.searchPosition !== null ? report.searchPosition : void 0,
-    lastTestedDate: report.lastTestedDate ? new Date(report.lastTestedDate) : null,
-    commentary: report.commentary,
-    copy: resolveCopy(site),
-    headerImageCid: cidName,
-    headerWidth: header.displayWidth,
-    headerHeight: header.displayHeight,
-    headerBgColor: header.placeholderColor,
-    // Announcement-only: re-derive cadence + improvements from the site row so the SENT email
-    // keeps its cadence copy + improvement callouts. Without this the send-time re-render drops
-    // them entirely (they're not stored on the Reports row). Ignored by the other templates.
-    ...report.reportType === "Announcement" ? announcementSiteExtras(site) : {}
-  });
-  const reportDate = report.completedOn ? new Date(report.completedOn) : /* @__PURE__ */ new Date();
-  const subject = report.subjectOverride ?? `${site.name} \u2014 ${monthYear(reportDate)} ${report.reportType} Report`;
-  const attachments = [
-    toInlineAttachment({
-      bytes: header.bytes,
-      filename: `${cidName}.jpg`,
-      contentType: header.contentType,
-      cid: cidName
-    })
-  ];
-  for (const img of [bundled.check, bundled.blurred]) {
-    if (html.includes(`cid:${img.cid}`)) {
-      attachments.push(
-        toInlineAttachment({
-          bytes: img.bytes,
-          filename: img.filename,
-          contentType: img.contentType,
-          cid: img.cid
-        })
-      );
-    }
-  }
-  const payload = {
-    from: FROM_ADDRESS,
-    to,
-    replyTo: REPLY_TO,
-    subject,
-    html,
-    attachments,
-    // Stable across retries of the same row — if Airtable stamping fails after a
-    // successful Resend, the next --send-ready replays with the same key and
-    // Resend returns the original message id rather than sending a duplicate.
-    idempotencyKey: `report:${report.id}`
-  };
-  if (cc) payload.cc = cc;
-  let result;
-  try {
-    result = await client.send(payload);
-  } catch (err) {
-    if (isIdempotencyConflict(err)) {
-      await stampSent(base, report.id, /* @__PURE__ */ new Date(), null);
-      console.log(`\u21BB already sent (idempotency conflict), stamped: ${report.reportId}`);
-      return "idempotent-conflict";
-    }
-    throw err;
-  }
-  await stampSent(base, report.id, /* @__PURE__ */ new Date(), result.messageId);
-  return result.messageId;
-}
-function parseAddresses(field) {
-  if (!field) return null;
-  const seen = /* @__PURE__ */ new Set();
-  const list = [];
-  for (const raw of field.split(/[,\n]/)) {
-    const trimmed = raw.trim().toLowerCase();
-    if (!trimmed) continue;
-    if (seen.has(trimmed)) continue;
-    seen.add(trimmed);
-    list.push(trimmed);
-  }
-  return list.length > 0 ? list : null;
-}
-function isProbablyEmail(s) {
-  const at = s.indexOf("@");
-  if (at < 1 || at !== s.lastIndexOf("@")) return false;
-  const local = s.slice(0, at);
-  const domain = s.slice(at + 1);
-  if (!local || !domain) return false;
-  if (!domain.includes(".")) return false;
-  if (/\s/.test(s)) return false;
-  return true;
-}
-
-// src/reports/due.ts
-var ELIGIBLE_STATUSES = /* @__PURE__ */ new Set([
-  "in development",
-  "launch period",
-  "maintenance",
-  "hosting"
-]);
-var MONTHS2 = {
-  Monthly: 1,
-  Quarterly: 3,
-  Yearly: 12
-};
-function addMonths(d, n) {
-  const out = new Date(d);
-  const day = out.getUTCDate();
-  out.setUTCDate(1);
-  out.setUTCMonth(out.getUTCMonth() + n);
-  const lastDayOfTargetMonth = new Date(
-    Date.UTC(out.getUTCFullYear(), out.getUTCMonth() + 1, 0)
-  ).getUTCDate();
-  out.setUTCDate(Math.min(day, lastDayOfTargetMonth));
-  return out;
-}
-function startOfDay(d) {
-  const out = new Date(d);
-  out.setUTCHours(0, 0, 0, 0);
-  return out;
-}
-function lastSentForType(reports, siteId, type) {
-  const candidates = reports.filter((r) => r.siteId === siteId && r.reportType === type && r.sentAt !== null).map((r) => r.sentAt).sort();
-  return candidates[candidates.length - 1] ?? null;
-}
-function findDueReports(websites, reports, today) {
-  const out = [];
-  const todayStart = startOfDay(today);
-  for (const site of websites) {
-    if (site.status !== null && !ELIGIBLE_STATUSES.has(site.status)) continue;
-    for (const type of ["Maintenance", "Testing"]) {
-      const rawFreq = type === "Maintenance" ? site.maintenanceFreq : site.testingFreq;
-      const freq = typeof rawFreq === "string" ? rawFreq.trim() : rawFreq;
-      if (freq === "None" || freq === "") continue;
-      if (!(freq in MONTHS2)) {
-        console.warn(
-          `\u26A0 ${site.name}: unrecognized ${type === "Maintenance" ? "maintenance" : "testing"} frequency '${rawFreq}' \u2014 not scheduling; fix the Airtable value`
-        );
-        continue;
-      }
-      const lastSent = lastSentForType(reports, site.id, type);
-      const fallback = type === "Maintenance" ? site.maintenanceDay : site.testingDay;
-      const baseIso = lastSent ?? fallback;
-      if (!baseIso) {
-        out.push({ site, reportType: type, dueDate: todayStart, lastSent });
-        continue;
-      }
-      const dueDate = addMonths(new Date(baseIso), MONTHS2[freq]);
-      if (todayStart.getTime() >= startOfDay(dueDate).getTime()) {
-        out.push({ site, reportType: type, dueDate, lastSent });
-      }
-    }
-  }
-  return out;
+function isRecipeName(value) {
+  return ALL_RECIPE_NAMES.includes(value);
 }
 
 // src/dashboard/relative-time.ts
@@ -5027,8 +372,8 @@ function spamScreenSection(totals, submissions, now) {
 }
 function setupSection(site) {
   const { score, total } = onboardingStatus(site);
-  const missing2 = missingOnboarding(site);
-  const detail = missing2.length === 0 ? `<span class="setup-ok">complete</span>` : `<span class="setup-missing">Missing: ${escapeHtml(missing2.join(", "))}</span>`;
+  const missing = missingOnboarding(site);
+  const detail = missing.length === 0 ? `<span class="setup-ok">complete</span>` : `<span class="setup-missing">Missing: ${escapeHtml(missing.join(", "))}</span>`;
   return `<div class="setup-line">Setup ${score}/${total} \u2014 ${detail}</div>`;
 }
 function detailRow(label, value) {
@@ -5243,9 +588,9 @@ function card(site) {
   const name = escapeHtml(site.name);
   const href = `/s/${escapeHtml(siteSlug(site.name))}`;
   const onboarding = onboardingStatus(site);
-  const missing2 = missingOnboarding(site);
+  const missing = missingOnboarding(site);
   const setupTitle = escapeHtml(
-    missing2.length === 0 ? "Setup complete" : `Missing: ${missing2.join(", ")}`
+    missing.length === 0 ? "Setup complete" : `Missing: ${missing.join(", ")}`
   );
   const audited = relativeTimeFromNow(site.lastLighthouseAuditAt);
   const safeSiteUrl = escapeHtml(safeUrl(site.url));