@reddoorla/maintenance 0.6.8 → 0.8.0

package/dist/cli/bin.js

@@ -1,8 +1,742 @@
 #!/usr/bin/env node
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 
-// src/cli/bin.ts
-import { dirname as dirname2 } from "path";
+// src/reports/airtable/client.ts
+var client_exports = {};
+__export(client_exports, {
+  openBase: () => openBase,
+  readAirtableConfig: () => readAirtableConfig
+});
+import Airtable from "airtable";
+function readAirtableConfig() {
+  const apiKey = process.env.AIRTABLE_PAT;
+  const baseId = process.env.AIRTABLE_BASE_ID;
+  if (!apiKey) throw Object.assign(new Error("AIRTABLE_PAT not set"), { exitCode: 2 });
+  if (!baseId) throw Object.assign(new Error("AIRTABLE_BASE_ID not set"), { exitCode: 2 });
+  return { apiKey, baseId };
+}
+function openBase(cfg) {
+  return new Airtable({ apiKey: cfg.apiKey }).base(cfg.baseId);
+}
+var init_client = __esm({
+  "src/reports/airtable/client.ts"() {
+    "use strict";
+  }
+});
+
+// src/reports/airtable/websites.ts
+var websites_exports = {};
+__export(websites_exports, {
+  WEBSITES_TABLE: () => WEBSITES_TABLE,
+  getWebsiteBySlug: () => getWebsiteBySlug,
+  listWebsites: () => listWebsites,
+  siteSlug: () => siteSlug,
+  updateScores: () => updateScores
+});
+function siteSlug(name) {
+  return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+}
+function mapRow(rec) {
+  const f = rec.fields;
+  const attachments = f["Header image"] ?? [];
+  const header = attachments[0] ?? null;
+  return {
+    id: rec.id,
+    name: String(f["Name"] ?? ""),
+    url: String(f["url"] ?? ""),
+    status: f["Status"] ?? null,
+    pointOfContact: f["point of contact"] ?? null,
+    maintenanceFreq: f["maintenence freq"] ?? "None",
+    testingFreq: f["testing freq"] ?? "None",
+    maintenanceDay: f["maintenance day"] ?? null,
+    testingDay: f["testing day"] ?? null,
+    ga4PropertyId: f["GA4 property ID"] ?? null,
+    reportRecipientsTo: f["Report recipients (To)"] ?? null,
+    reportRecipientsCc: f["Report recipients (CC)"] ?? null,
+    headerImage: header,
+    pScore: f["pScore"] ?? null,
+    rScore: f["rScore"] ?? null,
+    bpScore: f["bpScore"] ?? null,
+    seoScore: f["seoScore"] ?? null,
+    lastLighthouseAuditAt: f["Last lighthouse audit at"] ?? null
+  };
+}
+async function listWebsites(base) {
+  const out = [];
+  await base(WEBSITES_TABLE).select({ pageSize: 100 }).eachPage((records, fetchNextPage) => {
+    for (const rec of records) out.push(mapRow({ id: rec.id, fields: rec.fields }));
+    fetchNextPage();
+  });
+  return out;
+}
+async function getWebsiteBySlug(base, slug) {
+  const all = await listWebsites(base);
+  return all.find((w) => siteSlug(w.name) === slug) ?? null;
+}
+async function updateScores(base, recordId, scores) {
+  const fields = {
+    pScore: scores.performance,
+    rScore: scores.accessibility,
+    bpScore: scores.bestPractices,
+    seoScore: scores.seo,
+    "Last lighthouse audit at": (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await base(WEBSITES_TABLE).update([{ id: recordId, fields }]);
+}
+var WEBSITES_TABLE;
+var init_websites = __esm({
+  "src/reports/airtable/websites.ts"() {
+    "use strict";
+    WEBSITES_TABLE = "Websites";
+  }
+});
+
+// src/inventory/airtable.ts
+var airtable_exports = {};
+__export(airtable_exports, {
+  fromAirtableBase: () => fromAirtableBase
+});
+function fromAirtableBase(base, opts = {}) {
+  return async () => {
+    const workdir = opts.workdir ?? process.env.REDDOOR_FLEET_WORKDIR;
+    if (!workdir) {
+      throw new Error(
+        "fromAirtableBase requires `workdir` option or REDDOOR_FLEET_WORKDIR env (sites need a local path)"
+      );
+    }
+    const websites = await listWebsites(base);
+    return websites.filter((w) => w.maintenanceFreq !== "None" || w.testingFreq !== "None").map((w) => {
+      const slug = siteSlug(w.name);
+      const site = {
+        path: `${workdir}/${slug}`,
+        name: slug,
+        meta: { airtableRowId: w.id, displayName: w.name }
+      };
+      if (w.url) site.repoUrl = w.url;
+      return site;
+    });
+  };
+}
+var init_airtable = __esm({
+  "src/inventory/airtable.ts"() {
+    "use strict";
+    init_websites();
+  }
+});
+
+// src/audits/lighthouse-airtable.ts
+var lighthouse_airtable_exports = {};
+__export(lighthouse_airtable_exports, {
+  lighthouseScoresFromResult: () => lighthouseScoresFromResult,
+  resolveSlugFromCwd: () => resolveSlugFromCwd
+});
+import { readFile as readFile6 } from "fs/promises";
+import { join as join6 } from "path";
+function lighthouseScoresFromResult(result) {
+  if (result.audit !== "lighthouse") {
+    throw new Error(`Expected a 'lighthouse' AuditResult, got '${result.audit}'`);
+  }
+  const details = result.details ?? {};
+  const summary = details.summary ?? {};
+  const toPct = (n) => typeof n === "number" && !Number.isNaN(n) ? Math.round(n * 100) : 0;
+  return {
+    performance: toPct(summary["performance"]),
+    accessibility: toPct(summary["accessibility"]),
+    bestPractices: toPct(summary["best-practices"]),
+    seo: toPct(summary["seo"])
+  };
+}
+async function resolveSlugFromCwd(cwd) {
+  try {
+    const pkgPath = join6(cwd, "package.json");
+    const raw = await readFile6(pkgPath, "utf-8");
+    const pkg = JSON.parse(raw);
+    if (!pkg.name) throw new Error("package.json has no 'name' field");
+    return siteSlug(pkg.name);
+  } catch (e) {
+    throw new Error(
+      `Could not derive site slug from ${cwd}/package.json: ${e.message}. Pass --write-airtable=<slug> explicitly.`,
+      { cause: e }
+    );
+  }
+}
+var init_lighthouse_airtable = __esm({
+  "src/audits/lighthouse-airtable.ts"() {
+    "use strict";
+    init_websites();
+  }
+});
+
+// src/reports/airtable/reports.ts
+function mapRow2(rec) {
+  const f = rec.fields;
+  const linkSites = f["Site"] ?? [];
+  const html = (f["Rendered HTML"] ?? [])[0] ?? null;
+  return {
+    id: rec.id,
+    reportId: String(f["Report ID"] ?? ""),
+    siteId: linkSites[0] ?? "",
+    reportType: f["Report type"] ?? "Maintenance",
+    periodStart: f["Period start"] ?? null,
+    periodEnd: f["Period end"] ?? null,
+    completedOn: f["Completed on"] ?? null,
+    lighthouse: lighthouseFromFields(f),
+    gaUsersCurrent: f["GA users (period)"] ?? null,
+    gaUsersPrevious: f["GA users (prev period)"] ?? null,
+    lastTestedDate: f["Last tested date"] ?? null,
+    commentary: f["Commentary"] ?? null,
+    subjectOverride: f["Subject override"] ?? null,
+    draftReady: Boolean(f["Draft ready"]),
+    approvedToSend: Boolean(f["Approved to send"]),
+    sentAt: f["Sent at"] ?? null,
+    deliveryStatus: f["Delivery status"] ?? "pending",
+    renderedHtmlAttachment: html,
+    resendMessageId: f["Resend message ID"] ?? null
+  };
+}
+function lighthouseFromFields(f) {
+  const p = f["Lighthouse \u2014 Performance"];
+  const a = f["Lighthouse \u2014 Accessibility"];
+  const b = f["Lighthouse \u2014 Best Practices"];
+  const s = f["Lighthouse \u2014 SEO"];
+  if (typeof p !== "number" || typeof a !== "number" || typeof b !== "number" || typeof s !== "number")
+    return null;
+  return { performance: p, accessibility: a, bestPractices: b, seo: s };
+}
+function ymd(d) {
+  return d.toISOString().slice(0, 10);
+}
+function escapeFormulaString(s) {
+  return s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+async function createDraft(base, input) {
+  const fields = {
+    "Report ID": input.reportId,
+    Site: [input.siteId],
+    "Report type": input.reportType,
+    "Period start": ymd(input.periodStart),
+    "Period end": ymd(input.periodEnd),
+    "Completed on": ymd(input.completedOn),
+    "Lighthouse \u2014 Performance": input.lighthouse.performance,
+    "Lighthouse \u2014 Accessibility": input.lighthouse.accessibility,
+    "Lighthouse \u2014 Best Practices": input.lighthouse.bestPractices,
+    "Lighthouse \u2014 SEO": input.lighthouse.seo,
+    "Delivery status": "pending"
+  };
+  if (input.lastTestedDate) fields["Last tested date"] = ymd(input.lastTestedDate);
+  const created = await base(REPORTS_TABLE).create([{ fields }]);
+  const rec = created[0];
+  if (!rec) throw new Error("Airtable create returned no records");
+  return mapRow2({ id: rec.id, fields: rec.fields });
+}
+async function setDraftReady(base, recordId, ready) {
+  await base(REPORTS_TABLE).update([{ id: recordId, fields: { "Draft ready": ready } }]);
+}
+async function listSendableReports(base) {
+  const out = [];
+  await base(REPORTS_TABLE).select({
+    filterByFormula: "AND({Draft ready} = TRUE(), {Approved to send} = TRUE(), {Sent at} = BLANK())",
+    pageSize: 100
+  }).eachPage((records, fetchNextPage) => {
+    for (const rec of records) out.push(mapRow2({ id: rec.id, fields: rec.fields }));
+    fetchNextPage();
+  });
+  return out;
+}
+async function listReportsForSite(base, siteId) {
+  const safeId = escapeFormulaString(siteId);
+  const out = [];
+  await base(REPORTS_TABLE).select({
+    filterByFormula: `FIND(",${safeId},", "," & ARRAYJOIN({Site}, ",") & ",") > 0`,
+    pageSize: 100
+  }).eachPage((records, fetchNextPage) => {
+    for (const rec of records) out.push(mapRow2({ id: rec.id, fields: rec.fields }));
+    fetchNextPage();
+  });
+  return out;
+}
+async function stampSent(base, recordId, sentAt, messageId) {
+  await base(REPORTS_TABLE).update([
+    {
+      id: recordId,
+      fields: {
+        "Sent at": sentAt.toISOString(),
+        "Resend message ID": messageId
+      }
+    }
+  ]);
+}
+var REPORTS_TABLE;
+var init_reports = __esm({
+  "src/reports/airtable/reports.ts"() {
+    "use strict";
+    REPORTS_TABLE = "Reports";
+  }
+});
+
+// src/reports/maintenance-email/assets/index.ts
+import { readFile as readFile12 } from "fs/promises";
+import { dirname as dirname2, join as join20 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
+async function loadBundledImages() {
+  const [check, blurred] = await Promise.all([
+    readFile12(join20(here, "check.png")),
+    readFile12(join20(here, "blurredTests.jpg"))
+  ]);
+  return {
+    check: {
+      bytes: new Uint8Array(check),
+      contentType: "image/png",
+      cid: CHECK_CID,
+      filename: "check.png"
+    },
+    blurred: {
+      bytes: new Uint8Array(blurred),
+      contentType: "image/jpeg",
+      cid: BLURRED_CID,
+      filename: "blurredTests.jpg"
+    }
+  };
+}
+var here, CHECK_CID, BLURRED_CID;
+var init_assets = __esm({
+  "src/reports/maintenance-email/assets/index.ts"() {
+    "use strict";
+    here = dirname2(fileURLToPath2(import.meta.url));
+    CHECK_CID = "rd-check-png";
+    BLURRED_CID = "rd-blurred-tests-jpg";
+  }
+});
+
+// src/reports/maintenance-email/template.ts
+function fmtDate(d) {
+  if (!d) return "";
+  const mm = String(d.getUTCMonth() + 1).padStart(2, "0");
+  const dd = String(d.getUTCDate()).padStart(2, "0");
+  const yyyy = d.getUTCFullYear();
+  return `${mm}.${dd}.${yyyy}`;
+}
+function fmtUsers(n) {
+  return n.toLocaleString("en-US");
+}
+function maintenanceChecksSection() {
+  const rows = [
+    "Reviewed Logs",
+    "CMS Checked",
+    "DNS Checked",
+    "Google Indexed",
+    "Reviewed Certificate",
+    "Security Updates"
+  ];
+  return rows.map(
+    (label, i) => `
+    <mj-section background-color="white" padding="0px"${i === rows.length - 1 ? ' padding-bottom="36px"' : ""}>
+      <mj-group>
+        <mj-column padding-left="0px" width="90%"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""}>
+          <mj-text height="25px" padding-left="0px" color="#757575" padding-top="20px" padding-bottom="7.5px" font-size="16px">${label}</mj-text>
+        </mj-column>
+        <mj-column width="10%"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""} padding-top="15px">
+          <mj-image align="right" padding-right="0px" width="20px" height="20px" padding-top="2.5px" padding-bottom="15px" src="${CHECK_PNG}" />
+        </mj-column>
+      </mj-group>
+    </mj-section>`
+  ).join("");
+}
+function testingChecklistSection() {
+  const rows = [
+    "Desktop Browsers",
+    "Mobile Browsers",
+    "Package Updates",
+    "Bottlenecks",
+    "Form Functionality",
+    "Animation Functionality"
+  ];
+  return rows.map(
+    (label, i) => `
+    <mj-section background-color="#F4F4F4" padding="0px"${i === rows.length - 1 ? ' padding-bottom="60px"' : ""}>
+      <mj-group>
+        <mj-column width="90%" padding-left="0px"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""}>
+          <mj-text height="25px" padding-left="0px" color="#757575" padding-top="20px" padding-bottom="7.5px" font-size="16px">${label}</mj-text>
+        </mj-column>
+        <mj-column width="10%"${i < rows.length - 1 ? ' border-bottom="solid #CCCCCC 1px"' : ""} padding-top="15px">
+          <mj-image align="right" padding-right="0px" width="20px" height="20px" padding-top="2.5px" padding-bottom="15px" src="${CHECK_PNG}" />
+        </mj-column>
+      </mj-group>
+    </mj-section>`
+  ).join("");
+}
+function maintenanceTestingPlaceholder(lastTested) {
+  return `
+    <mj-section background-color="#F4F4F4">
+      <mj-column>
+        <mj-image href="mailto:info@reddoorla.com" src="${BLURRED_TESTS}" />
+      </mj-column>
+    </mj-section>
+    <mj-section background-color="#F4F4F4" padding-top="0px">
+      <mj-column>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">Last Tested: ${fmtDate(lastTested)}</mj-text>
+      </mj-column>
+    </mj-section>`;
+}
+function testingIntroSection() {
+  return `
+    <mj-section background-color="#F4F4F4">
+      <mj-column>
+        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">TESTING</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">Testing includes checks similar to those at launch: testing on common browsers and operating systems, at different screen sizes, and checking every function, and updating all packages for performance rather than just those needed for security.</mj-text>
+      </mj-column>
+    </mj-section>`;
+}
+function commentarySection(text) {
+  return `
+    <mj-section background-color="white">
+      <mj-column>
+        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="55px">NOTES</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">${text.replace(/\n/g, "<br/>")}</mj-text>
+      </mj-column>
+    </mj-section>`;
+}
+function buildMjml(data) {
+  const isTesting = data.reportType === "Testing";
+  const headerSrc = `cid:${data.headerImageCid}`;
+  const previewText = `Checked up on ${data.siteName}`;
+  return `<mjml>
+  <mj-head>
+    <mj-attributes>
+      <mj-text font-family="helvetica, sans-serif" padding-left="5px" padding-right="5px" />
+      <mj-section padding-left="11%" padding-right="11%"/>
+      <mj-image padding="0px" />
+    </mj-attributes>
+    <mj-preview>${previewText}</mj-preview>
+  </mj-head>
+  <mj-body background-color="white">
+    <mj-section background-color="#F4F4F4" padding-top="0px" padding-bottom="0px" padding-left="0px" padding-right="0px">
+      <mj-column>
+        <mj-image href="${data.siteUrl}" src="${headerSrc}" />
+      </mj-column>
+    </mj-section>
+    <mj-section background-color="white">
+      <mj-column>
+        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">COMPLETED ON</mj-text>
+        <mj-text color="#C00" font-size="44px" font-weight="400">${fmtDate(data.completedOn)}</mj-text>
+        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">MAINTENANCE CHECKS</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">Includes checking the hosting, DNS, Content Management System (CMS, if applicable), search indexing and security of the site for major flaws and updating as necessary.</mj-text>
+      </mj-column>
+    </mj-section>
+    ${maintenanceChecksSection()}
+    <mj-section background-color="#F4F4F4">
+      <mj-column>
+        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="55px">LIGHTHOUSE SCORES*</mj-text>
+        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Performance</mj-text>
+        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.performance}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 50\u201389 // Ideal 90\u2013100</mj-text>
+        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
+        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Readability</mj-text>
+        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.accessibility}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 80\u201399 // Ideal 100</mj-text>
+        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
+        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Best Practices</mj-text>
+        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.bestPractices}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 60\u201379 // Ideal 80\u201392</mj-text>
+        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
+        <mj-text color="#C00" font-size="20px" font-weight="300" padding-top="25px">Site Structure</mj-text>
+        <mj-text color="#C00" font-size="44px" font-weight="400" padding-top="0px">${data.lighthouse.seo}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="0px" padding-bottom="36px">Acceptable 50\u201389 // Ideal 90\u2013100</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="36px" line-height="20px">*A Lighthouse score is a numerical measure provided by Google's Lighthouse tool, which evaluates various aspects of a web page's quality.</mj-text>
+      </mj-column>
+    </mj-section>
+    <mj-section background-color="white">
+      <mj-column>
+        <mj-text color="#C00" font-size="20px" font-weight="700" padding-top="75px">ANALYTICS</mj-text>
+        <mj-text color="#C00" font-size="44px" font-weight="400">${fmtUsers(data.gaUsersCurrent)} Users</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="16px" font-weight="300" line-height="24px">Last Period: ${fmtUsers(data.gaUsersPrevious)}</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" padding-bottom="36px" line-height="20px">Contact us if you are interested in more in-depth data or have questions about SEO.</mj-text>
+      </mj-column>
+    </mj-section>
+    ${isTesting ? testingIntroSection() + testingChecklistSection() : maintenanceTestingPlaceholder(data.lastTestedDate)}
+    ${data.commentary ? commentarySection(data.commentary) : ""}
+    <mj-section background-color="white">
+      <mj-column padding-top="36px">
+        <mj-text color="#C00" font-family="helvetica, sans-serif" font-size="24px" font-weight="700" padding-top="36px" line-height="36px">Any questions, concerns or requests?</mj-text>
+        <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" line-height="30px">Just hit reply.</mj-text>
+        <mj-text font-family="helvetica, sans-serif" font-size="24px" font-weight="300" padding-top="0px" line-height="30px" padding-bottom="36px">We're here to help in any way we can.</mj-text>
+        <mj-divider border-width="1px" border-style="solid" border-color="#CCCCCC" padding="0" />
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" padding-top="24px" line-height="20px" font-style="italic">Copyright ${(/* @__PURE__ */ new Date()).getFullYear()} Reddoor Creative, LLC. All rights reserved.</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="700" line-height="16px" padding-top="0" padding-bottom="0px">Our mailing address is:</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">Reddoor Creative, LLC</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">29027 Dapper Dan</mj-text>
+        <mj-text color="#757575" font-family="helvetica, sans-serif" font-size="12px" font-weight="300" line-height="16px" padding-top="0" padding-bottom="0px">Fair Oaks Ranch, TX 78015</mj-text>
+      </mj-column>
+    </mj-section>
+  </mj-body>
+</mjml>`;
+}
+var CHECK_PNG, BLURRED_TESTS;
+var init_template = __esm({
+  "src/reports/maintenance-email/template.ts"() {
+    "use strict";
+    init_assets();
+    CHECK_PNG = `cid:${CHECK_CID}`;
+    BLURRED_TESTS = `cid:${BLURRED_CID}`;
+  }
+});
+
+// src/reports/render.ts
+import mjml2html from "mjml";
+async function renderReportHtml(data) {
+  const mjml = buildMjml(data);
+  const out = await mjml2html(mjml, { validationLevel: "strict" });
+  return { html: out.html, warnings: out.errors ?? [] };
+}
+var init_render = __esm({
+  "src/reports/render.ts"() {
+    "use strict";
+    init_template();
+  }
+});
+
+// src/reports/airtable/attachments.ts
+async function fetchAttachmentBytes(url) {
+  const res = await fetch(url);
+  if (!res.ok) {
+    throw new Error(
+      `Failed to fetch Airtable attachment ${res.status} ${res.statusText} (url=${url})`
+    );
+  }
+  const contentType = res.headers.get("content-type") ?? "application/octet-stream";
+  const ab = await res.arrayBuffer();
+  return { bytes: new Uint8Array(ab), contentType };
+}
+async function uploadAttachment(recordId, fieldName, body, filename, contentType) {
+  const apiKey = process.env.AIRTABLE_PAT;
+  const baseId = process.env.AIRTABLE_BASE_ID;
+  if (!apiKey || !baseId) {
+    throw new Error("AIRTABLE_PAT and AIRTABLE_BASE_ID must be set");
+  }
+  const base64 = typeof body === "string" ? Buffer.from(body, "utf-8").toString("base64") : Buffer.from(body).toString("base64");
+  const payload = { contentType, file: base64, filename };
+  const url = `https://content.airtable.com/v0/${baseId}/${recordId}/${encodeURIComponent(fieldName)}/uploadAttachment`;
+  const res = await fetch(url, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${apiKey}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify(payload)
+  });
+  if (!res.ok) {
+    throw new Error(`Airtable upload failed: ${res.status} ${res.statusText} ${await res.text()}`);
+  }
+}
+var init_attachments = __esm({
+  "src/reports/airtable/attachments.ts"() {
+    "use strict";
+  }
+});
+
+// src/reports/send/resend.ts
+import { Resend } from "resend";
+function defaultResendClient() {
+  const key = process.env.RESEND_API_KEY;
+  if (!key) throw Object.assign(new Error("RESEND_API_KEY not set"), { exitCode: 2 });
+  const resend = new Resend(key);
+  return {
+    async send(input) {
+      const payload = {
+        from: input.from,
+        to: input.to,
+        subject: input.subject,
+        html: input.html
+      };
+      if (input.cc) payload.cc = input.cc;
+      if (input.replyTo) payload.replyTo = input.replyTo;
+      if (input.attachments) payload.attachments = input.attachments;
+      const options = {};
+      if (input.idempotencyKey) options.idempotencyKey = input.idempotencyKey;
+      const { data, error } = await resend.emails.send(payload, options);
+      if (error) throw new Error(`Resend error: ${error.message}`);
+      if (!data?.id) throw new Error("Resend returned no message id");
+      return { messageId: data.id };
+    }
+  };
+}
+var init_resend = __esm({
+  "src/reports/send/resend.ts"() {
+    "use strict";
+  }
+});
+
+// src/reports/send/orchestrate.ts
+var orchestrate_exports = {};
+__export(orchestrate_exports, {
+  isProbablyEmail: () => isProbablyEmail,
+  parseAddresses: () => parseAddresses,
+  sendApprovedReports: () => sendApprovedReports
+});
+async function sendApprovedReports(options = {}) {
+  const base = openBase(readAirtableConfig());
+  const client = options.resend ?? defaultResendClient();
+  const sendable = await listSendableReports(base);
+  if (sendable.length === 0) return { output: "No reports ready to send.", code: 0 };
+  const websites = await listWebsites(base);
+  const sites = new Map(websites.map((w) => [w.id, w]));
+  const lines = [];
+  let anyFailed = false;
+  for (const report of sendable) {
+    const site = sites.get(report.siteId);
+    if (!site) {
+      lines.push(`\u2717 ${report.reportId} \u2014 Site row not found for id=${report.siteId}`);
+      anyFailed = true;
+      continue;
+    }
+    try {
+      const messageId = await sendOne(client, base, site, report);
+      lines.push(`\u2713 sent: ${report.reportId} (${messageId})`);
+    } catch (e) {
+      lines.push(`\u2717 ${report.reportId} \u2014 ${e.message}`);
+      anyFailed = true;
+    }
+  }
+  return { output: lines.join("\n"), code: anyFailed ? 1 : 0 };
+}
+async function sendOne(client, base, site, report) {
+  if (!site.headerImage) {
+    throw new Error(`Site '${site.name}' has no Header image set on the Websites row`);
+  }
+  if (!report.lighthouse) {
+    throw new Error(`Report ${report.reportId} has no Lighthouse scores`);
+  }
+  const { bytes, contentType } = await fetchAttachmentBytes(site.headerImage.url);
+  const bundled = await loadBundledImages();
+  const slug = siteSlug(site.name);
+  const cidName = `${slug}-header`;
+  const { html } = await renderReportHtml({
+    siteName: site.name,
+    siteUrl: site.url,
+    reportType: report.reportType,
+    completedOn: report.completedOn ? new Date(report.completedOn) : /* @__PURE__ */ new Date(),
+    lighthouse: report.lighthouse,
+    gaUsersCurrent: report.gaUsersCurrent ?? 0,
+    gaUsersPrevious: report.gaUsersPrevious ?? 0,
+    lastTestedDate: report.lastTestedDate ? new Date(report.lastTestedDate) : null,
+    commentary: report.commentary,
+    headerImageCid: cidName
+  });
+  const subject = report.subjectOverride ?? `${site.name} ${report.reportType} Report`;
+  const explicitTo = parseAddresses(site.reportRecipientsTo);
+  const fallbackTo = parseAddresses(site.pointOfContact);
+  const to = explicitTo ?? fallbackTo ?? [];
+  if (to.length === 0) {
+    throw new Error(
+      `Site '${site.name}' has no recipients (Report recipients (To) AND point of contact are both empty)`
+    );
+  }
+  for (const addr of to) {
+    if (!isProbablyEmail(addr)) {
+      throw new Error(
+        `Site '${site.name}' recipient is malformed: ${addr} \u2014 fix Report recipients (To) or point of contact in Airtable`
+      );
+    }
+  }
+  const cc = parseAddresses(site.reportRecipientsCc);
+  if (cc) {
+    for (const addr of cc) {
+      if (!isProbablyEmail(addr)) {
+        throw new Error(
+          `Site '${site.name}' CC is malformed: ${addr} \u2014 fix Report recipients (CC) in Airtable`
+        );
+      }
+    }
+  }
+  const payload = {
+    from: FROM_ADDRESS,
+    to,
+    replyTo: REPLY_TO,
+    subject,
+    html,
+    attachments: [
+      {
+        filename: site.headerImage.filename,
+        content: Buffer.from(bytes).toString("base64"),
+        contentType,
+        inlineContentId: cidName
+      },
+      // Bundled images referenced via cid:rd-check-png / cid:rd-blurred-tests-jpg
+      // in the template. Attached inline so the email is self-contained — no
+      // external CDN dependency, no image-blocked broken icons in webmail.
+      {
+        filename: bundled.check.filename,
+        content: Buffer.from(bundled.check.bytes).toString("base64"),
+        contentType: bundled.check.contentType,
+        inlineContentId: bundled.check.cid
+      },
+      {
+        filename: bundled.blurred.filename,
+        content: Buffer.from(bundled.blurred.bytes).toString("base64"),
+        contentType: bundled.blurred.contentType,
+        inlineContentId: bundled.blurred.cid
+      }
+    ],
+    // Stable across retries of the same row — if Airtable stamping fails after a
+    // successful Resend, the next --send-ready replays with the same key and
+    // Resend returns the original message id rather than sending a duplicate.
+    idempotencyKey: `report:${report.id}`
+  };
+  if (cc) payload.cc = cc;
+  const result = await client.send(payload);
+  await stampSent(base, report.id, /* @__PURE__ */ new Date(), result.messageId);
+  return result.messageId;
+}
+function parseAddresses(field) {
+  if (!field) return null;
+  const seen = /* @__PURE__ */ new Set();
+  const list = [];
+  for (const raw of field.split(/[,\n]/)) {
+    const trimmed = raw.trim().toLowerCase();
+    if (!trimmed) continue;
+    if (seen.has(trimmed)) continue;
+    seen.add(trimmed);
+    list.push(trimmed);
+  }
+  return list.length > 0 ? list : null;
+}
+function isProbablyEmail(s) {
+  const at = s.indexOf("@");
+  if (at < 1 || at !== s.lastIndexOf("@")) return false;
+  const local = s.slice(0, at);
+  const domain = s.slice(at + 1);
+  if (!local || !domain) return false;
+  if (!domain.includes(".")) return false;
+  if (/\s/.test(s)) return false;
+  return true;
+}
+var FROM_ADDRESS, REPLY_TO;
+var init_orchestrate = __esm({
+  "src/reports/send/orchestrate.ts"() {
+    "use strict";
+    init_client();
+    init_reports();
+    init_websites();
+    init_attachments();
+    init_render();
+    init_assets();
+    init_resend();
+    FROM_ADDRESS = "Reddoor Reports <reports@reddoorla.com>";
+    REPLY_TO = "info@reddoorla.com";
+  }
+});
+
+// src/cli/bin.ts
+import { dirname as dirname4 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
 import { cac } from "cac";
 
 // src/cli/commands/audit.ts
@@ -654,6 +1388,10 @@ async function runAudits(site, which) {
     )
   );
 }
+async function runAuditsAcross(sites, which) {
+  const all = await Promise.all(sites.map((s) => runAudits(s, which)));
+  return all.flat();
+}
 
 // src/cli/fleet/resolve-sites.ts
 import { pathToFileURL } from "url";
@@ -709,6 +1447,13 @@ async function resolveSites(input) {
       exitCode: 2
     });
   }
+  if (input.fleet === "airtable") {
+    const { openBase: openBase2, readAirtableConfig: readAirtableConfig2 } = await Promise.resolve().then(() => (init_client(), client_exports));
+    const { fromAirtableBase: fromAirtableBase2 } = await Promise.resolve().then(() => (init_airtable(), airtable_exports));
+    const base = openBase2(readAirtableConfig2());
+    const provider = fromAirtableBase2(base, input.workdir ? { workdir: input.workdir } : {});
+    return provider();
+  }
   if (input.fleet) {
     const fleetPath = resolve(input.cwd, input.fleet);
     const ext = extname(fleetPath).toLowerCase();
@@ -817,28 +1562,59 @@ async function runAuditCommand(site, opts) {
   let sites = await resolveSites({
     ...site !== void 0 ? { site } : {},
     ...opts.fleet !== void 0 ? { fleet: opts.fleet } : {},
+    ...opts.workdir !== void 0 ? { workdir: opts.workdir } : {},
     cwd
   });
   if (opts.fleet) {
     const workdir = opts.workdir ?? `${process.env.HOME ?? ""}/.reddoor-maint/sites`;
     sites = await Promise.all(sites.map((s) => cloneIfNeeded(s, { workdir })));
   }
-  const results = [];
-  for (const s of sites) {
-    const r = await runAudits(s, which);
-    results.push(...r);
+  const results = await runAuditsAcross(sites, which);
+  let output = opts.json ? JSON.stringify(results, null, 2) : formatTable(results);
+  if (opts.writeAirtable !== void 0) {
+    const { openBase: openBase2, readAirtableConfig: readAirtableConfig2 } = await Promise.resolve().then(() => (init_client(), client_exports));
+    const { listWebsites: listWebsites2, updateScores: updateScores2, siteSlug: siteSlug2 } = await Promise.resolve().then(() => (init_websites(), websites_exports));
+    const { lighthouseScoresFromResult: lighthouseScoresFromResult2, resolveSlugFromCwd: resolveSlugFromCwd2 } = await Promise.resolve().then(() => (init_lighthouse_airtable(), lighthouse_airtable_exports));
+    const slug = typeof opts.writeAirtable === "string" && opts.writeAirtable.length > 0 ? opts.writeAirtable : await resolveSlugFromCwd2(cwd);
+    const lhResult = results.find((r) => r.audit === "lighthouse");
+    if (!lhResult) {
+      throw Object.assign(
+        new Error(
+          "--write-airtable requires a lighthouse result; did you pass --only without lighthouse?"
+        ),
+        { exitCode: 2 }
+      );
+    }
+    if (lhResult.status === "fail") {
+      throw Object.assign(
+        new Error(
+          `Lighthouse audit failed; refusing to write scores to Airtable. Summary: ${lhResult.summary}`
+        ),
+        { exitCode: 1 }
+      );
+    }
+    const base = openBase2(readAirtableConfig2());
+    const websites = await listWebsites2(base);
+    const target = websites.find((w) => siteSlug2(w.name) === slug);
+    if (!target) {
+      throw Object.assign(new Error(`No Websites row matched slug "${slug}"`), { exitCode: 2 });
+    }
+    const scores = lighthouseScoresFromResult2(lhResult);
+    await updateScores2(base, target.id, scores);
+    output += `
+
+\u2192 wrote scores to Websites[${target.name}]: P=${scores.performance} A=${scores.accessibility} BP=${scores.bestPractices} SEO=${scores.seo}`;
   }
-  const output = opts.json ? JSON.stringify(results, null, 2) : formatTable(results);
   return { output, code: exitCode(results) };
 }
 
 // src/cli/commands/sync-configs.ts
-import { readFile as readFile7 } from "fs/promises";
-import { join as join7, resolve as resolve3 } from "path";
+import { readFile as readFile8 } from "fs/promises";
+import { join as join8, resolve as resolve3 } from "path";
 
 // src/recipes/sync-configs.ts
-import { readFile as readFile6, writeFile as writeFile3 } from "fs/promises";
-import { join as join6 } from "path";
+import { readFile as readFile7, writeFile as writeFile3 } from "fs/promises";
+import { join as join7 } from "path";
 
 // src/recipes/sync-configs/templates.ts
 var eslint = {
@@ -1102,7 +1878,7 @@ function isConfigName(value) {
 }
 async function readMaybe(path) {
   try {
-    return await readFile6(path, "utf-8");
+    return await readFile7(path, "utf-8");
   } catch {
     return null;
   }
@@ -1110,13 +1886,13 @@ async function readMaybe(path) {
 async function planTemplateDiffs(cwd, templates) {
   const diffs = [];
   for (const t of templates) {
-    const existing = await readMaybe(join6(cwd, t.path));
+    const existing = await readMaybe(join7(cwd, t.path));
     if (existing !== t.contents) diffs.push(t);
   }
   return diffs;
 }
 async function planGitignore(cwd) {
-  const existing = await readMaybe(join6(cwd, ".gitignore"));
+  const existing = await readMaybe(join7(cwd, ".gitignore"));
   const merge = mergeGitignore(existing, CANONICAL_GITIGNORE_ENTRIES);
   const tracked = await listTrackedFiles(cwd);
   const toUntrack = findTrackedArtifacts(tracked, CANONICAL_GITIGNORE_ENTRIES);
@@ -1124,7 +1900,7 @@ async function planGitignore(cwd) {
   return { kind: "apply", content: merge.content, toUntrack, added: merge.added };
 }
 async function applyGitignore(cwd, plan) {
-  await writeFile3(join6(cwd, ".gitignore"), plan.content, "utf-8");
+  await writeFile3(join7(cwd, ".gitignore"), plan.content, "utf-8");
   if (plan.toUntrack.length > 0) {
     await removeFromIndex(cwd, plan.toUntrack);
   }
@@ -1147,7 +1923,7 @@ async function syncConfigs(site, opts = {}) {
     },
     apply: async ({ templateDiffs, gitignorePlan }, { commit: commit2 }) => {
       for (const t of templateDiffs) {
-        await writeFile3(join6(site.path, t.path), t.contents, "utf-8");
+        await writeFile3(join7(site.path, t.path), t.contents, "utf-8");
         await commit2(`chore: sync ${t.config} config from @reddoorla/maintenance`);
       }
       if (gitignorePlan.kind === "apply") {
@@ -1176,7 +1952,7 @@ function parseOnly2(value) {
 async function dryPlanGitignore(cwd) {
   let existing;
   try {
-    existing = await readFile7(join7(cwd, ".gitignore"), "utf-8");
+    existing = await readFile8(join8(cwd, ".gitignore"), "utf-8");
   } catch {
     return "would create .gitignore";
   }
@@ -1191,7 +1967,7 @@ async function dryPlan(cwd, which) {
   for (const t of templateTargets) {
     let existing = "";
     try {
-      existing = await readFile7(join7(cwd, t.path), "utf-8");
+      existing = await readFile8(join8(cwd, t.path), "utf-8");
     } catch {
     }
     if (existing !== t.contents) lines.push(`would update ${t.path} (config: ${t.config})`);
@@ -1239,7 +2015,7 @@ import { resolve as resolve4 } from "path";
 
 // src/recipes/bump-deps.ts
 import { stat as stat2 } from "fs/promises";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 async function exists(path) {
   try {
     await stat2(path);
@@ -1268,10 +2044,10 @@ async function bumpDeps(site, opts = {}) {
     // land on top of whatever else was in the tree.
     checkTreeFirst: true,
     plan: async () => {
-      const hasPnpmLock = await exists(join8(site.path, "pnpm-lock.yaml"));
+      const hasPnpmLock = await exists(join9(site.path, "pnpm-lock.yaml"));
       if (!hasPnpmLock) {
-        const hasNpmLock = await exists(join8(site.path, "package-lock.json"));
-        const hasYarnLock = await exists(join8(site.path, "yarn.lock"));
+        const hasNpmLock = await exists(join9(site.path, "package-lock.json"));
+        const hasYarnLock = await exists(join9(site.path, "yarn.lock"));
         if (hasNpmLock || hasYarnLock) {
           const competing = hasNpmLock ? "package-lock.json" : "yarn.lock";
           return {
@@ -1341,12 +2117,12 @@ async function runBumpDepsCommand(site, opts) {
 import { resolve as resolve5 } from "path";
 
 // src/recipes/svelte-5/index.ts
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 
 // src/util/pkg.ts
-import { readFile as readFile8, writeFile as writeFile4 } from "fs/promises";
+import { readFile as readFile9, writeFile as writeFile4 } from "fs/promises";
 async function readPackageJson(path) {
-  const raw = await readFile8(path, "utf-8");
+  const raw = await readFile9(path, "utf-8");
   return JSON.parse(raw);
 }
 function detectIndentFromContent(raw) {
@@ -1356,7 +2132,7 @@ function detectIndentFromContent(raw) {
 async function writePackageJson(path, pkg) {
   let indent = "  ";
   try {
-    const existing = await readFile8(path, "utf-8");
+    const existing = await readFile9(path, "utf-8");
     indent = detectIndentFromContent(existing);
   } catch {
   }
@@ -1390,7 +2166,7 @@ function bumpDep(pkg, name, version2, opts = {}) {
 }
 
 // src/recipes/svelte-5/step-bump-versions.ts
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 var SVELTE_5_VERSIONS = {
   svelte: "^5.55.5",
   "@sveltejs/kit": "^2.59.0",
@@ -1403,7 +2179,7 @@ var SVELTE_5_VERSIONS = {
   "typescript-svelte-plugin": "^0.3.52"
 };
 async function bumpToSvelte5Versions(cwd) {
-  const pkgPath = join9(cwd, "package.json");
+  const pkgPath = join10(cwd, "package.json");
   const pkg = await readPackageJson(pkgPath);
   let next = pkg;
   for (const [name, version2] of Object.entries(SVELTE_5_VERSIONS)) {
@@ -1415,8 +2191,8 @@ async function bumpToSvelte5Versions(cwd) {
 }
 
 // src/recipes/svelte-5/step-svelte-config.ts
-import { readFile as readFile9, writeFile as writeFile5 } from "fs/promises";
-import { join as join10 } from "path";
+import { readFile as readFile10, writeFile as writeFile5 } from "fs/promises";
+import { join as join11 } from "path";
 var VITE_PLUGIN_PKG = "@sveltejs/vite-plugin-svelte";
 var IMPORT_FROM_VITE_PLUGIN = new RegExp(
   String.raw`^import\s+\{\s*([^}]+?)\s*\}\s+from\s+["']` + VITE_PLUGIN_PKG.replace(/[/]/g, "\\/") + String.raw`["'];?[ \t]*\n`,
@@ -1457,10 +2233,10 @@ function dropPreprocessKey(source) {
   return source.slice(0, m.index) + source.slice(tailIdx).replace(new RegExp(`^${indent}\\n`), "");
 }
 async function migrateSvelteConfig(cwd) {
-  const path = join10(cwd, "svelte.config.js");
+  const path = join11(cwd, "svelte.config.js");
   let src;
   try {
-    src = await readFile9(path, "utf-8");
+    src = await readFile10(path, "utf-8");
   } catch {
     return false;
   }
@@ -1494,9 +2270,9 @@ async function runSvelteMigrate(cwd, spawn2 = defaultSpawn) {
 }
 
 // src/recipes/svelte-5/step-tailwind-upgrade.ts
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 async function upgradeTailwind(cwd, spawn2 = defaultSpawn) {
-  const pkg = await readPackageJson(join11(cwd, "package.json"));
+  const pkg = await readPackageJson(join12(cwd, "package.json"));
   const tailwindVersion = pkg.devDependencies?.tailwindcss ?? pkg.dependencies?.tailwindcss;
   if (!tailwindVersion) return { ran: false, reason: "tailwindcss not installed" };
   if (/^\^?4\./.test(tailwindVersion)) return { ran: false, reason: "already on tailwind 4.x" };
@@ -1517,8 +2293,8 @@ async function upgradeTailwind(cwd, spawn2 = defaultSpawn) {
 }
 
 // src/recipes/svelte-5/step-gotchas.ts
-import { readFile as readFile10, writeFile as writeFile6 } from "fs/promises";
-import { join as join12 } from "path";
+import { readFile as readFile11, writeFile as writeFile6 } from "fs/promises";
+import { join as join13 } from "path";
 import { glob as glob2 } from "tinyglobby";
 
 // src/recipes/svelte-5/codemods/on-event-to-handler.ts
@@ -1850,8 +2626,8 @@ async function planGotchaCodemods(cwd) {
   const changes = [];
   const relPaths = await glob2(SVELTE_GLOBS, { cwd, ignore: IGNORE2, absolute: false });
   for (const rel of relPaths) {
-    const path = join12(cwd, rel);
-    const before = await readFile10(path, "utf-8");
+    const path = join13(cwd, rel);
+    const before = await readFile11(path, "utf-8");
     const after = CODEMODS.reduce((s, fn) => fn(s), before);
     if (after !== before) changes.push({ rel, after });
   }
@@ -1860,7 +2636,7 @@ async function planGotchaCodemods(cwd) {
 async function applyGotchaCodemods(cwd) {
   const changes = await planGotchaCodemods(cwd);
   for (const c of changes) {
-    await writeFile6(join12(cwd, c.rel), c.after, "utf-8");
+    await writeFile6(join13(cwd, c.rel), c.after, "utf-8");
   }
   return { filesChanged: changes.length };
 }
@@ -1884,7 +2660,7 @@ async function verifyMigration(cwd, spawn2 = defaultSpawn) {
 
 // src/recipes/svelte-5/step-summary.ts
 import { writeFile as writeFile7 } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 async function writeMigrationSummary(input) {
   const lines = [
     `# Svelte 4 \u2192 5 migration summary`,
@@ -1901,7 +2677,7 @@ async function writeMigrationSummary(input) {
     `- Verify Playwright a11y tests still pass.`
   ];
   const content = lines.join("\n") + "\n";
-  const path = join13(input.cwd, "MIGRATION_SVELTE_5.md");
+  const path = join14(input.cwd, "MIGRATION_SVELTE_5.md");
   await writeFile7(path, content, "utf-8");
   return path;
 }
@@ -1909,7 +2685,7 @@ async function writeMigrationSummary(input) {
 // src/recipes/svelte-5/index.ts
 async function alreadyOnSvelte5(cwd) {
   try {
-    const pkg = await readPackageJson(join14(cwd, "package.json"));
+    const pkg = await readPackageJson(join15(cwd, "package.json"));
     const v = pkg.devDependencies?.svelte ?? pkg.dependencies?.svelte;
     return !!v && /^\^?5\./.test(v);
   } catch {
@@ -2004,7 +2780,7 @@ import { resolve as resolve6 } from "path";
 
 // src/recipes/convert-to-pnpm.ts
 import { rm as rm3, stat as stat3 } from "fs/promises";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 
 // src/recipes/convert-to-pnpm/script-rewrites.ts
 function rewriteScriptForPnpm(script) {
@@ -2037,9 +2813,9 @@ async function exists2(path) {
 async function convertToPnpm(site, opts = {}) {
   const spawn2 = opts.spawn ?? defaultSpawn;
   const pnpmVersion = opts.pnpmVersion ?? DEFAULT_PNPM_VERSION;
-  const pnpmLockPath = join15(site.path, "pnpm-lock.yaml");
-  const npmLockPath = join15(site.path, "package-lock.json");
-  const yarnLockPath = join15(site.path, "yarn.lock");
+  const pnpmLockPath = join16(site.path, "pnpm-lock.yaml");
+  const npmLockPath = join16(site.path, "package-lock.json");
+  const yarnLockPath = join16(site.path, "yarn.lock");
   return withRecipe({
     name: "convert-to-pnpm",
     site,
@@ -2062,7 +2838,7 @@ async function convertToPnpm(site, opts = {}) {
       if (hasYarnLock) await rm3(yarnLockPath, { force: true });
       const sourceLock = hasNpmLock ? "package-lock.json" : "yarn.lock";
       await commit2(`chore(pnpm): remove ${sourceLock}`);
-      const pkgPath = join15(cwd, "package.json");
+      const pkgPath = join16(cwd, "package.json");
       const pkg = await readPackageJson(pkgPath);
       const next = { ...pkg, packageManager: `pnpm@${pnpmVersion}` };
       if (pkg.scripts && typeof pkg.scripts === "object") {
@@ -2075,7 +2851,7 @@ async function convertToPnpm(site, opts = {}) {
       }
       await writePackageJson(pkgPath, next);
       await commit2("chore(pnpm): pin packageManager + rewrite npm scripts");
-      await rm3(join15(cwd, "node_modules"), { recursive: true, force: true });
+      await rm3(join16(cwd, "node_modules"), { recursive: true, force: true });
       const installResult = await spawn2("pnpm", ["install"], { cwd, streaming: true });
       if (installResult.code !== 0) {
         return { kind: "failed", notes: `pnpm install failed (exit ${installResult.code})` };
@@ -2116,16 +2892,16 @@ import { resolve as resolve7 } from "path";
 
 // src/recipes/onboard.ts
 import { stat as stat4 } from "fs/promises";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 
 // src/util/self-version.ts
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
-import { dirname, join as join16 } from "path";
+import { dirname, join as join17 } from "path";
 function selfPackageVersion(callerImportMetaUrl) {
   try {
-    const here2 = dirname(fileURLToPath(callerImportMetaUrl));
-    const raw = readFileSync(join16(here2, "..", "..", "package.json"), "utf-8");
+    const here3 = dirname(fileURLToPath(callerImportMetaUrl));
+    const raw = readFileSync(join17(here3, "..", "..", "package.json"), "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.version ?? "0.0.0";
   } catch {
@@ -2175,13 +2951,13 @@ async function onboard(site, opts = {}) {
     name: "onboard",
     site,
     plan: async () => {
-      if (!await exists3(join17(site.path, "pnpm-lock.yaml"))) {
+      if (!await exists3(join18(site.path, "pnpm-lock.yaml"))) {
         return {
           kind: "failed",
           notes: "no pnpm-lock.yaml at site root \u2014 run convert-to-pnpm first"
         };
       }
-      const pkgPath = join17(site.path, "package.json");
+      const pkgPath = join18(site.path, "package.json");
       const pkg = await readPackageJson(pkgPath);
       const toAdd = [];
       if (!isDeclared(pkg, PACKAGE_NAME)) {
@@ -2201,7 +2977,7 @@ async function onboard(site, opts = {}) {
       return { kind: "apply", plan: { pkg, toAdd } };
     },
     apply: async ({ pkg, toAdd }, { commit: commit2, cwd }) => {
-      const pkgPath = join17(cwd, "package.json");
+      const pkgPath = join18(cwd, "package.json");
       let next = pkg;
       for (const dep of toAdd) {
         next = bumpDep(next, dep.name, dep.version);
@@ -2270,7 +3046,7 @@ import { resolve as resolve8 } from "path";
 
 // src/recipes/svelte-codemods.ts
 import { writeFile as writeFile8 } from "fs/promises";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 async function svelteCodemods(site) {
   return withRecipe({
     name: "svelte-codemods",
@@ -2284,7 +3060,7 @@ async function svelteCodemods(site) {
     },
     apply: async (changes, { commit: commit2, cwd }) => {
       for (const c of changes) {
-        await writeFile8(join18(cwd, c.rel), c.after, "utf-8");
+        await writeFile8(join19(cwd, c.rel), c.after, "utf-8");
       }
       await commit2(`refactor(svelte5): apply codemods (${changes.length} files)`);
       return { kind: "ok" };
@@ -2317,12 +3093,201 @@ async function runSvelteCodemodsCommand(site, opts) {
   return { output, code };
 }
 
+// src/cli/commands/report.ts
+init_client();
+init_websites();
+init_reports();
+
+// src/reports/due.ts
+var ELIGIBLE_STATUSES = /* @__PURE__ */ new Set([
+  "in development",
+  "launch period",
+  "maintenance",
+  "hosting"
+]);
+var MONTHS = {
+  Monthly: 1,
+  Quarterly: 3,
+  Yearly: 12
+};
+function addMonths(d, n) {
+  const out = new Date(d);
+  const day = out.getUTCDate();
+  out.setUTCDate(1);
+  out.setUTCMonth(out.getUTCMonth() + n);
+  const lastDayOfTargetMonth = new Date(
+    Date.UTC(out.getUTCFullYear(), out.getUTCMonth() + 1, 0)
+  ).getUTCDate();
+  out.setUTCDate(Math.min(day, lastDayOfTargetMonth));
+  return out;
+}
+function startOfDay(d) {
+  const out = new Date(d);
+  out.setUTCHours(0, 0, 0, 0);
+  return out;
+}
+function lastSentForType(reports, siteId, type) {
+  const candidates = reports.filter((r) => r.siteId === siteId && r.reportType === type && r.sentAt !== null).map((r) => r.sentAt).sort();
+  return candidates[candidates.length - 1] ?? null;
+}
+function findDueReports(websites, reports, today) {
+  const out = [];
+  const todayStart = startOfDay(today);
+  for (const site of websites) {
+    if (site.status !== null && !ELIGIBLE_STATUSES.has(site.status)) continue;
+    for (const type of ["Maintenance", "Testing"]) {
+      const freq = type === "Maintenance" ? site.maintenanceFreq : site.testingFreq;
+      if (freq === "None") continue;
+      const lastSent = lastSentForType(reports, site.id, type);
+      const fallback = type === "Maintenance" ? site.maintenanceDay : site.testingDay;
+      const baseIso = lastSent ?? fallback;
+      if (!baseIso) {
+        out.push({ site, reportType: type, dueDate: todayStart, lastSent });
+        continue;
+      }
+      const dueDate = addMonths(new Date(baseIso), MONTHS[freq]);
+      if (todayStart.getTime() >= startOfDay(dueDate).getTime()) {
+        out.push({ site, reportType: type, dueDate, lastSent });
+      }
+    }
+  }
+  return out;
+}
+
+// src/reports/draft.ts
+init_render();
+init_websites();
+init_reports();
+init_attachments();
+import { mkdir as mkdir2, writeFile as writeFile9 } from "fs/promises";
+import { dirname as dirname3 } from "path";
+function scoresFromWebsite(siteRow) {
+  const { pScore, rScore, bpScore, seoScore } = siteRow;
+  if (pScore === null || rScore === null || bpScore === null || seoScore === null) {
+    throw new Error(
+      `Site '${siteRow.name}' is missing one or more Lighthouse scores on the Websites row (pScore, rScore, bpScore, seoScore). Run 'reddoor-maint audit lighthouse' from the site's checkout and paste the four numbers into Airtable, then retry.`
+    );
+  }
+  return { performance: pScore, accessibility: rScore, bestPractices: bpScore, seo: seoScore };
+}
+function daysAgo(today, n) {
+  const out = new Date(today);
+  out.setDate(out.getDate() - n);
+  return out;
+}
+async function draftReportForSite(base, siteRow, reportType, options = {}) {
+  const scores = scoresFromWebsite(siteRow);
+  const today = /* @__PURE__ */ new Date();
+  const slug = siteSlug(siteRow.name);
+  const periodStart = base !== null ? await derivePeriodStart(base, siteRow, reportType, today) : daysAgo(today, 30);
+  const periodEnd = today;
+  const completedOn = today;
+  const lastTestedDate = reportType === "Maintenance" && siteRow.testingDay ? new Date(siteRow.testingDay) : null;
+  const cidName = `${slug}-header`;
+  const { html } = await renderReportHtml({
+    siteName: siteRow.name,
+    siteUrl: siteRow.url,
+    reportType,
+    completedOn,
+    lighthouse: scores,
+    gaUsersCurrent: 0,
+    gaUsersPrevious: 0,
+    lastTestedDate,
+    commentary: null,
+    headerImageCid: cidName
+  });
+  if (options.previewOnly) {
+    const path = options.previewPath ?? `reports/${slug}/draft.html`;
+    await mkdir2(dirname3(path), { recursive: true });
+    await writeFile9(path, html, "utf-8");
+    return { reportRow: null, htmlPath: path, html };
+  }
+  if (base === null) throw new Error("base required when previewOnly=false");
+  const reportId = `${siteRow.name} \u2014 ${reportType} \u2014 ${periodEnd.toISOString().slice(0, 10)}`;
+  const created = await createDraft(base, {
+    reportId,
+    siteId: siteRow.id,
+    reportType,
+    periodStart,
+    periodEnd,
+    completedOn,
+    lighthouse: scores,
+    lastTestedDate
+  });
+  const htmlFilename = `${slug}-${periodEnd.toISOString().slice(0, 10)}.html`;
+  await uploadAttachment(created.id, "Rendered HTML", html, htmlFilename, "text/html");
+  await setDraftReady(base, created.id, true);
+  return { reportRow: created, htmlPath: null, html };
+}
+async function derivePeriodStart(base, siteRow, reportType, today) {
+  const prior = await listReportsForSite(base, siteRow.id);
+  const sameType = prior.filter((r) => r.reportType === reportType && r.periodEnd).map((r) => r.periodEnd).sort();
+  const latest = sameType[sameType.length - 1];
+  return latest ? new Date(latest) : daysAgo(today, 30);
+}
+
+// src/cli/commands/report.ts
+async function runReportCommand(slug, opts) {
+  if (opts.sendReady) {
+    const { sendApprovedReports: sendApprovedReports2 } = await Promise.resolve().then(() => (init_orchestrate(), orchestrate_exports));
+    return sendApprovedReports2();
+  }
+  if (opts.due) {
+    return runDueDraft();
+  }
+  if (slug) {
+    return runSingleSiteDraft(slug, { previewOnly: Boolean(opts.preview) });
+  }
+  throw Object.assign(
+    new Error("Usage: reddoor-maint report [<slug>] [--due] [--preview] [--send-ready]"),
+    {
+      exitCode: 2
+    }
+  );
+}
+async function runDueDraft() {
+  const base = openBase(readAirtableConfig());
+  const websites = await listWebsites(base);
+  const reports = [];
+  for (const w of websites) {
+    const rs = await listReportsForSite(base, w.id);
+    reports.push(...rs);
+  }
+  const due = findDueReports(websites, reports, /* @__PURE__ */ new Date());
+  if (due.length === 0) return { output: "No reports due.", code: 0 };
+  const lines = [];
+  for (const item of due) {
+    try {
+      const result = await draftReportForSite(base, item.site, item.reportType);
+      lines.push(`\u2713 drafted: ${result.reportRow?.reportId}`);
+    } catch (e) {
+      lines.push(`\u2717 failed: ${item.site.name} ${item.reportType} \u2014 ${e.message}`);
+    }
+  }
+  return { output: lines.join("\n"), code: lines.some((l) => l.startsWith("\u2717")) ? 1 : 0 };
+}
+async function runSingleSiteDraft(slug, opts) {
+  const base = openBase(readAirtableConfig());
+  const websites = await listWebsites(base);
+  const site = websites.find((w) => siteSlug(w.name) === slug);
+  if (!site) {
+    throw Object.assign(new Error(`No Websites row matched slug "${slug}"`), { exitCode: 2 });
+  }
+  const result = await draftReportForSite(opts.previewOnly ? null : base, site, "Maintenance", {
+    previewOnly: opts.previewOnly
+  });
+  if (opts.previewOnly) {
+    return { output: `Preview written to ${result.htmlPath}`, code: 0 };
+  }
+  return { output: `Draft created: ${result.reportRow?.reportId}`, code: 0 };
+}
+
 // src/cli/version.ts
 import { readFileSync as readFileSync2 } from "fs";
-import { join as join19 } from "path";
+import { join as join21 } from "path";
 function resolvePackageVersion(fromDir) {
   try {
-    const raw = readFileSync2(join19(fromDir, "..", "..", "package.json"), "utf-8");
+    const raw = readFileSync2(join21(fromDir, "..", "..", "package.json"), "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.version ?? "unknown";
   } catch {
@@ -2331,8 +3296,8 @@ function resolvePackageVersion(fromDir) {
 }
 
 // src/cli/bin.ts
-var here = dirname2(fileURLToPath2(import.meta.url));
-var version = resolvePackageVersion(here);
+var here2 = dirname4(fileURLToPath3(import.meta.url));
+var version = resolvePackageVersion(here2);
 var AUDIT_DESCRIPTIONS = {
   deps: "Diff site package.json against the bundled baseline version map.",
   lighthouse: "Run @lhci/cli autorun using the canonical lighthouserc.",
@@ -2372,33 +3337,66 @@ cli.command("list-recipes", "Print the available recipes.").action(() => {
     console.log(`${name.padEnd(16)} ${desc}`);
   }
 });
-cli.command("audit [site]", "Run audits against a site (default: cwd).").option("--only <names>", "Comma-separated audit names (e.g. deps,lighthouse)").option("--json", "Machine-readable JSON output").option("--fleet <inventory>", "Inventory file (.json or .mjs/.js); aggregates across sites").option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+cli.command("audit [site]", "Run audits against a site (default: cwd).").option("--only <names>", "Comma-separated audit names (e.g. deps,lighthouse)").option("--json", "Machine-readable JSON output").option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").option(
+  "--write-airtable [slug]",
+  "After lighthouse runs, write pScore/rScore/bpScore/seoScore + timestamp to the matching Websites row. Slug defaults to cwd's package.json#name."
+).action(
   async (site, opts) => runOrExit(() => runAuditCommand(site, opts), opts)
 );
-cli.command("sync-configs [site]", "Sync canonical configs into a site.").option("--only <names>", "Comma-separated config names (e.g. eslint,prettier)").option("--dry", "Print diff without writing").option("--fleet <inventory>", "Inventory file (.json or .mjs/.js)").option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+cli.command("sync-configs [site]", "Sync canonical configs into a site.").option("--only <names>", "Comma-separated config names (e.g. eslint,prettier)").option("--dry", "Print diff without writing").option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
   async (site, opts) => runOrExit(() => runSyncConfigsCommand(site, opts), opts)
 );
-cli.command("bump-deps [site]", "Bump dependencies.").option("--group <group>", "patch | minor | major", { default: "minor" }).option("--fleet <inventory>", "Inventory file (.json or .mjs/.js)").option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+cli.command("bump-deps [site]", "Bump dependencies.").option("--group <group>", "patch | minor | major", { default: "minor" }).option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
   async (site, opts) => runOrExit(() => runBumpDepsCommand(site, opts), opts)
 );
-cli.command("upgrade <upgrade> [site]", "Run a named upgrade recipe (svelte-4-to-5).").example("reddoor-maint upgrade svelte-4-to-5 ./my-site").option("--fleet <inventory>", "Inventory file (.json or .mjs/.js)").option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+cli.command("upgrade <upgrade> [site]", "Run a named upgrade recipe (svelte-4-to-5).").example("reddoor-maint upgrade svelte-4-to-5 ./my-site").option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
   async (upgrade, site, opts) => runOrExit(() => runUpgradeCommand(upgrade, site, opts), opts)
 );
 cli.command(
   "convert-to-pnpm [site]",
   "Convert an npm/yarn site to pnpm (lockfile, packageManager, scripts)."
-).option("--fleet <inventory>", "Inventory file (.json or .mjs/.js)").option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+).option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
   async (site, opts) => runOrExit(() => runConvertToPnpmCommand(site, opts), opts)
 );
-cli.command("svelte-codemods [site]", "Apply Svelte 5 gotcha codemods to an already-migrated site.").option("--fleet <inventory>", "Inventory file (.json or .mjs/.js)").option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+cli.command("svelte-codemods [site]", "Apply Svelte 5 gotcha codemods to an already-migrated site.").option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
   async (site, opts) => runOrExit(() => runSvelteCodemodsCommand(site, opts), opts)
 );
 cli.command(
   "onboard [site]",
   "Install @reddoorla/maintenance + audit deps on a site (run after convert-to-pnpm)."
-).option("--audits <names>", "Comma-separated audit subset: lighthouse,a11y (default: both)").option("--fleet <inventory>", "Inventory file (.json or .mjs/.js)").option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+).option("--audits <names>", "Comma-separated audit subset: lighthouse,a11y (default: both)").option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
   async (site, opts) => runOrExit(() => runOnboardCommand(site, opts), opts)
 );
+cli.command("report [site]", "Draft or send maintenance/testing reports.").option("--due", "Scan all Websites and draft overdue reports.").option(
+  "--preview",
+  "Single-site dry run; writes reports/<slug>/draft.html, never touches Airtable."
+).option(
+  "--send-ready",
+  "Send all Reports with Draft ready=true AND Approved to send=true AND Sent at IS NULL."
+).action(
+  async (site, opts) => runOrExit(() => runReportCommand(site, opts), opts)
+);
 cli.help();
 cli.version(version);
 cli.parse();