@reddoorla/maintenance 0.67.0 → 0.69.0

package/dist/cli/commands/audit.js

@@ -8,19 +8,19 @@ import {
 } from "../../chunk-4NAOR44V.js";
 import {
   resolveSites
-} from "../../chunk-7MJJEEII.js";
+} from "../../chunk-YQMYQAJX.js";
 import {
   ALL_AUDIT_NAMES,
   runOneAudit
-} from "../../chunk-WCN54744.js";
+} from "../../chunk-6G7BC5SN.js";
+import "../../chunk-GASBX52O.js";
+import "../../chunk-YEGHUODU.js";
 import "../../chunk-LKGVSM2O.js";
 import {
   recordFleetEventsBestEffort
 } from "../../chunk-OTBA7DON.js";
 import "../../chunk-PH3AGF4Z.js";
 import "../../chunk-HIN3P4ZN.js";
-import "../../chunk-GASBX52O.js";
-import "../../chunk-YEGHUODU.js";
 import "../../chunk-FDIFTIXC.js";
 import "../../chunk-HVOOCK6L.js";
 import "../../chunk-XXTZBPUY.js";
@@ -231,9 +231,9 @@ ${skipNotice}`;
   let writeBackFailed = false;
   if (opts.writeAirtable !== void 0) {
     const { openBase, readAirtableConfig } = await import("../../client-EPVO3FEH.js");
-    const { listWebsites } = await import("../../websites-U3UZS5VG.js");
+    const { listWebsites } = await import("../../websites-6YTT5ZTO.js");
     if (opts.fleet !== void 0) {
-      const { writeFleetAuditsToAirtable, formatFleetWriteSummary } = await import("../../write-audits-to-airtable-GAJUCSTY.js");
+      const { writeFleetAuditsToAirtable, formatFleetWriteSummary } = await import("../../write-audits-to-airtable-IWOO4FFH.js");
       const base = openBase(readAirtableConfig());
       const websites = await listWebsites(base);
       const fleetWrite = await writeFleetAuditsToAirtable({ base, websites, results });
@@ -249,8 +249,8 @@ ${skipNotice}`;
 
 ${formatFleetWriteSummary(fleetWrite)}`;
     } else {
-      const { resolveSlugFromCwd } = await import("../../lighthouse-airtable-QUNOSDT5.js");
-      const { writeAuditsToAirtable } = await import("../../write-audits-to-airtable-GAJUCSTY.js");
+      const { resolveSlugFromCwd } = await import("../../lighthouse-airtable-UBSXKHAQ.js");
+      const { writeAuditsToAirtable } = await import("../../write-audits-to-airtable-IWOO4FFH.js");
       const slug = typeof opts.writeAirtable === "string" && opts.writeAirtable.length > 0 ? opts.writeAirtable : await resolveSlugFromCwd(cwd);
       let writeSummary = null;
       await new Listr(

package/dist/client/index.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Load-aware page readiness for splash screens and intro overlays.
+ *
+ * Every splash in the fleet today hides the page behind a blind `setTimeout`,
+ * which punishes fast loads (a fully-painted page sits under an opaque cover
+ * for the full timer) and can still under-shoot slow ones. `whenPageReady`
+ * replaces the timer with real signals — eager-image settlement, document
+ * load, caller-supplied promises — bracketed by a floor (`minMs`, so a brand
+ * moment never flashes) and a ceiling (`maxMs`, so a stalled resource can
+ * never wedge the splash open).
+ *
+ * Framework-free and SSR-safe: with no DOM present it resolves immediately
+ * with reason "no-dom", so it can be called unguarded from universal code.
+ * The `env` parameter exists for tests (vitest runs in a node environment);
+ * production callers omit it and the globals are used.
+ *
+ * Local structural types stand in for DOM lib types because this package
+ * compiles with `lib: ["ES2022"]` and no DOM — same approach as
+ * src/configs/svelte.ts, which declares minimal shapes to avoid a peer dep.
+ */
+type ListenerTarget = {
+    addEventListener(type: string, listener: () => void, options?: {
+        once?: boolean;
+    }): void;
+};
+type ImageLike = ListenerTarget & {
+    /** True once the load attempt is terminal — fires for both success AND error. */
+    complete: boolean;
+};
+type DocumentLike = ListenerTarget & {
+    readyState: string;
+    querySelectorAll(selector: string): ArrayLike<ImageLike>;
+};
+type WindowLike = ListenerTarget & {
+    matchMedia?(query: string): {
+        matches: boolean;
+    };
+};
+type PageReadyEnv = {
+    document?: DocumentLike | undefined;
+    window?: WindowLike | undefined;
+};
+type PageReadyOptions = {
+    /** Never resolve before this many ms — keeps a splash from flashing. Default 400. */
+    minMs?: number;
+    /** Always resolve by this many ms, loaded or not. Default 2500. */
+    maxMs?: number;
+    /**
+     * Selector for images that must settle (load OR error) before the page
+     * counts as ready. Defaults to `img[loading="eager"]` — above-the-fold
+     * imagery. Pass `false` to skip image tracking.
+     */
+    waitForImages?: string | false;
+    /**
+     * Also wait for `document.readyState === "complete"` (the window `load`
+     * event). Default false: full load includes every iframe and third-party
+     * script, which routinely lags the meaningful first paint by seconds —
+     * eager images are usually the right signal for a splash.
+     */
+    waitForDocument?: boolean;
+    /** Extra readiness signals (e.g. a video poster decode). Rejections count as settled. */
+    signals?: ReadonlyArray<Promise<unknown>>;
+};
+type PageReadyReason = "ready" | "timeout" | "no-dom";
+/**
+ * Resolve when the page is visually ready — or at `maxMs`, whichever comes
+ * first — but never before `minMs`. The returned reason says which path won.
+ *
+ * @example Reveal a splash overlay when the hero has painted:
+ * ```ts
+ * onMount(() => {
+ *   whenPageReady({ minMs: 600, maxMs: 2400 }).then(() => (isReady = true));
+ * });
+ * ```
+ */
+declare function whenPageReady(options?: PageReadyOptions, env?: PageReadyEnv): Promise<PageReadyReason>;
+/**
+ * True when the user has asked the OS for reduced motion. Splash callers
+ * should collapse `minMs` to 0 and skip decorative fades when this is set.
+ * False when no DOM (SSR) or `matchMedia` is unavailable.
+ */
+declare function prefersReducedMotion(env?: PageReadyEnv): boolean;
+
+export { type PageReadyEnv, type PageReadyOptions, type PageReadyReason, prefersReducedMotion, whenPageReady };

package/dist/client/index.js

@@ -0,0 +1,47 @@
+// src/client/page-ready.ts
+var DEFAULT_MIN_MS = 400;
+var DEFAULT_MAX_MS = 2500;
+var DEFAULT_IMAGE_SELECTOR = 'img[loading="eager"]';
+function globals() {
+  return globalThis;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
+}
+function documentComplete(doc, win) {
+  if (doc.readyState === "complete") return Promise.resolve();
+  return new Promise((resolve) => win.addEventListener("load", () => resolve(), { once: true }));
+}
+function imageSettled(img) {
+  if (img.complete) return Promise.resolve();
+  return new Promise((resolve) => {
+    img.addEventListener("load", () => resolve(), { once: true });
+    img.addEventListener("error", () => resolve(), { once: true });
+  });
+}
+function whenPageReady(options = {}, env = {}) {
+  const doc = env.document ?? globals().document;
+  const win = env.window ?? globals().window;
+  if (!doc || !win) return Promise.resolve("no-dom");
+  const minMs = options.minMs ?? DEFAULT_MIN_MS;
+  const maxMs = options.maxMs ?? DEFAULT_MAX_MS;
+  const selector = options.waitForImages ?? DEFAULT_IMAGE_SELECTOR;
+  const waits = [];
+  if (options.waitForDocument) waits.push(documentComplete(doc, win));
+  if (selector !== false) {
+    for (const img of Array.from(doc.querySelectorAll(selector))) waits.push(imageSettled(img));
+  }
+  for (const signal of options.signals ?? []) waits.push(signal.catch(() => void 0));
+  const ready = Promise.all(waits).then(() => "ready");
+  const capped = maxMs === Infinity ? ready : Promise.race([ready, delay(maxMs).then(() => "timeout")]);
+  return Promise.all([capped, delay(minMs)]).then(([reason]) => reason);
+}
+function prefersReducedMotion(env = {}) {
+  const win = env.window ?? globals().window;
+  return win?.matchMedia?.("(prefers-reduced-motion: reduce)").matches ?? false;
+}
+export {
+  prefersReducedMotion,
+  whenPageReady
+};
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/client/page-ready.ts"],"sourcesContent":["/**\n * Load-aware page readiness for splash screens and intro overlays.\n *\n * Every splash in the fleet today hides the page behind a blind `setTimeout`,\n * which punishes fast loads (a fully-painted page sits under an opaque cover\n * for the full timer) and can still under-shoot slow ones. `whenPageReady`\n * replaces the timer with real signals — eager-image settlement, document\n * load, caller-supplied promises — bracketed by a floor (`minMs`, so a brand\n * moment never flashes) and a ceiling (`maxMs`, so a stalled resource can\n * never wedge the splash open).\n *\n * Framework-free and SSR-safe: with no DOM present it resolves immediately\n * with reason \"no-dom\", so it can be called unguarded from universal code.\n * The `env` parameter exists for tests (vitest runs in a node environment);\n * production callers omit it and the globals are used.\n *\n * Local structural types stand in for DOM lib types because this package\n * compiles with `lib: [\"ES2022\"]` and no DOM — same approach as\n * src/configs/svelte.ts, which declares minimal shapes to avoid a peer dep.\n */\n\ntype ListenerTarget = {\n  addEventListener(type: string, listener: () => void, options?: { once?: boolean }): void;\n};\n\ntype ImageLike = ListenerTarget & {\n  /** True once the load attempt is terminal — fires for both success AND error. */\n  complete: boolean;\n};\n\ntype DocumentLike = ListenerTarget & {\n  readyState: string;\n  querySelectorAll(selector: string): ArrayLike<ImageLike>;\n};\n\ntype WindowLike = ListenerTarget & {\n  matchMedia?(query: string): { matches: boolean };\n};\n\nexport type PageReadyEnv = {\n  document?: DocumentLike | undefined;\n  window?: WindowLike | undefined;\n};\n\nexport type PageReadyOptions = {\n  /** Never resolve before this many ms — keeps a splash from flashing. Default 400. */\n  minMs?: number;\n  /** Always resolve by this many ms, loaded or not. Default 2500. */\n  maxMs?: number;\n  /**\n   * Selector for images that must settle (load OR error) before the page\n   * counts as ready. Defaults to `img[loading=\"eager\"]` — above-the-fold\n   * imagery. Pass `false` to skip image tracking.\n   */\n  waitForImages?: string | false;\n  /**\n   * Also wait for `document.readyState === \"complete\"` (the window `load`\n   * event). Default false: full load includes every iframe and third-party\n   * script, which routinely lags the meaningful first paint by seconds —\n   * eager images are usually the right signal for a splash.\n   */\n  waitForDocument?: boolean;\n  /** Extra readiness signals (e.g. a video poster decode). Rejections count as settled. */\n  signals?: ReadonlyArray<Promise<unknown>>;\n};\n\nexport type PageReadyReason = \"ready\" | \"timeout\" | \"no-dom\";\n\nconst DEFAULT_MIN_MS = 400;\nconst DEFAULT_MAX_MS = 2500;\nconst DEFAULT_IMAGE_SELECTOR = 'img[loading=\"eager\"]';\n\nfunction globals(): PageReadyEnv {\n  return globalThis as unknown as PageReadyEnv;\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));\n}\n\nfunction documentComplete(doc: DocumentLike, win: WindowLike): Promise<void> {\n  if (doc.readyState === \"complete\") return Promise.resolve();\n  return new Promise((resolve) => win.addEventListener(\"load\", () => resolve(), { once: true }));\n}\n\nfunction imageSettled(img: ImageLike): Promise<void> {\n  if (img.complete) return Promise.resolve();\n  return new Promise((resolve) => {\n    img.addEventListener(\"load\", () => resolve(), { once: true });\n    img.addEventListener(\"error\", () => resolve(), { once: true });\n  });\n}\n\n/**\n * Resolve when the page is visually ready — or at `maxMs`, whichever comes\n * first — but never before `minMs`. The returned reason says which path won.\n *\n * @example Reveal a splash overlay when the hero has painted:\n * ```ts\n * onMount(() => {\n *   whenPageReady({ minMs: 600, maxMs: 2400 }).then(() => (isReady = true));\n * });\n * ```\n */\nexport function whenPageReady(\n  options: PageReadyOptions = {},\n  env: PageReadyEnv = {},\n): Promise<PageReadyReason> {\n  const doc = env.document ?? globals().document;\n  const win = env.window ?? globals().window;\n  if (!doc || !win) return Promise.resolve(\"no-dom\");\n\n  const minMs = options.minMs ?? DEFAULT_MIN_MS;\n  const maxMs = options.maxMs ?? DEFAULT_MAX_MS;\n  const selector = options.waitForImages ?? DEFAULT_IMAGE_SELECTOR;\n\n  const waits: Promise<unknown>[] = [];\n  if (options.waitForDocument) waits.push(documentComplete(doc, win));\n  if (selector !== false) {\n    for (const img of Array.from(doc.querySelectorAll(selector))) waits.push(imageSettled(img));\n  }\n  for (const signal of options.signals ?? []) waits.push(signal.catch(() => undefined));\n\n  const ready = Promise.all(waits).then<PageReadyReason>(() => \"ready\");\n  const capped =\n    maxMs === Infinity\n      ? ready\n      : Promise.race([ready, delay(maxMs).then<PageReadyReason>(() => \"timeout\")]);\n\n  return Promise.all([capped, delay(minMs)]).then(([reason]) => reason);\n}\n\n/**\n * True when the user has asked the OS for reduced motion. Splash callers\n * should collapse `minMs` to 0 and skip decorative fades when this is set.\n * False when no DOM (SSR) or `matchMedia` is unavailable.\n */\nexport function prefersReducedMotion(env: PageReadyEnv = {}): boolean {\n  const win = env.window ?? globals().window;\n  return win?.matchMedia?.(\"(prefers-reduced-motion: reduce)\").matches ?? false;\n}\n"],"mappings":";AAoEA,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,yBAAyB;AAE/B,SAAS,UAAwB;AAC/B,SAAO;AACT;AAEA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;AACtE;AAEA,SAAS,iBAAiB,KAAmB,KAAgC;AAC3E,MAAI,IAAI,eAAe,WAAY,QAAO,QAAQ,QAAQ;AAC1D,SAAO,IAAI,QAAQ,CAAC,YAAY,IAAI,iBAAiB,QAAQ,MAAM,QAAQ,GAAG,EAAE,MAAM,KAAK,CAAC,CAAC;AAC/F;AAEA,SAAS,aAAa,KAA+B;AACnD,MAAI,IAAI,SAAU,QAAO,QAAQ,QAAQ;AACzC,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,iBAAiB,QAAQ,MAAM,QAAQ,GAAG,EAAE,MAAM,KAAK,CAAC;AAC5D,QAAI,iBAAiB,SAAS,MAAM,QAAQ,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,EAC/D,CAAC;AACH;AAaO,SAAS,cACd,UAA4B,CAAC,GAC7B,MAAoB,CAAC,GACK;AAC1B,QAAM,MAAM,IAAI,YAAY,QAAQ,EAAE;AACtC,QAAM,MAAM,IAAI,UAAU,QAAQ,EAAE;AACpC,MAAI,CAAC,OAAO,CAAC,IAAK,QAAO,QAAQ,QAAQ,QAAQ;AAEjD,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,WAAW,QAAQ,iBAAiB;AAE1C,QAAM,QAA4B,CAAC;AACnC,MAAI,QAAQ,gBAAiB,OAAM,KAAK,iBAAiB,KAAK,GAAG,CAAC;AAClE,MAAI,aAAa,OAAO;AACtB,eAAW,OAAO,MAAM,KAAK,IAAI,iBAAiB,QAAQ,CAAC,EAAG,OAAM,KAAK,aAAa,GAAG,CAAC;AAAA,EAC5F;AACA,aAAW,UAAU,QAAQ,WAAW,CAAC,EAAG,OAAM,KAAK,OAAO,MAAM,MAAM,MAAS,CAAC;AAEpF,QAAM,QAAQ,QAAQ,IAAI,KAAK,EAAE,KAAsB,MAAM,OAAO;AACpE,QAAM,SACJ,UAAU,WACN,QACA,QAAQ,KAAK,CAAC,OAAO,MAAM,KAAK,EAAE,KAAsB,MAAM,SAAS,CAAC,CAAC;AAE/E,SAAO,QAAQ,IAAI,CAAC,QAAQ,MAAM,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,MAAM,MAAM;AACtE;AAOO,SAAS,qBAAqB,MAAoB,CAAC,GAAY;AACpE,QAAM,MAAM,IAAI,UAAU,QAAQ,EAAE;AACpC,SAAO,KAAK,aAAa,kCAAkC,EAAE,WAAW;AAC1E;","names":[]}

package/dist/{convert-to-pnpm-5MPZWFHM.js → convert-to-pnpm-XH7NYRVK.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-4NAOR44V.js";
 import {
   resolveSites
-} from "./chunk-7MJJEEII.js";
+} from "./chunk-YQMYQAJX.js";
 import {
   convertToPnpm
 } from "./chunk-2X322ZES.js";
@@ -50,4 +50,4 @@ async function runConvertToPnpmCommand(site, opts) {
 export {
   runConvertToPnpmCommand
 };
-//# sourceMappingURL=convert-to-pnpm-5MPZWFHM.js.map
+//# sourceMappingURL=convert-to-pnpm-XH7NYRVK.js.map

package/dist/{digest-MECMZPFE.js → digest-Q2TAQHXF.js}

@@ -3,31 +3,39 @@ import {
   collectCiAlerts,
   collectDeliveryFailures,
   collectLighthouseAlerts,
+  collectPreflightBlocked,
   collectRenovateAlerts,
   collectVulnAlerts,
   diffAttention,
   readDigestState,
   writeDigestState
-} from "./chunk-JDGIO54P.js";
+} from "./chunk-AESJBEM7.js";
+import "./chunk-E2GKKUEX.js";
+import "./chunk-45AUGDFR.js";
 import {
   isIdempotencyConflict
-} from "./chunk-OGGRFBL4.js";
+} from "./chunk-2DCA7FHZ.js";
+import "./chunk-GECESMVS.js";
 import {
   escapeHtml,
   isPendingApproval,
   listAllReports
-} from "./chunk-OCS7SZUZ.js";
+} from "./chunk-6JFOAPW4.js";
+import {
+  defaultResendClient
+} from "./chunk-WEKL2HYJ.js";
+import "./chunk-OTBA7DON.js";
+import "./chunk-PH3AGF4Z.js";
+import "./chunk-HIN3P4ZN.js";
+import "./chunk-U5SZ4FOP.js";
 import {
   listWebsites,
   siteSlug
-} from "./chunk-CL5DYUWQ.js";
+} from "./chunk-C3PDS623.js";
 import {
   openBase,
   readAirtableConfig
 } from "./chunk-HN6I2XWI.js";
-import {
-  defaultResendClient
-} from "./chunk-WEKL2HYJ.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/reports/digest.ts
@@ -115,6 +123,7 @@ async function collectAttention(deps) {
   return [
     ...runCollector("vuln", () => collectVulnAlerts(websites, deps.baseUrl)),
     ...runCollector("delivery", () => collectDeliveryFailures(reports, sitesById, deps.baseUrl)),
+    ...runCollector("preflight", () => collectPreflightBlocked(reports, sitesById, deps.baseUrl)),
     ...runCollector("lighthouse", () => collectLighthouseAlerts(websites, deps.baseUrl)),
     ...runCollector("renovate", () => collectRenovateAlerts(websites, deps.baseUrl, now)),
     ...runCollector("ci", () => collectCiAlerts(websites, deps.baseUrl, now)),
@@ -226,4 +235,4 @@ export {
   renderDigestHtml,
   runDigest
 };
-//# sourceMappingURL=digest-MECMZPFE.js.map
+//# sourceMappingURL=digest-Q2TAQHXF.js.map

package/dist/digest-Q2TAQHXF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/digest.ts"],"sourcesContent":["// src/reports/digest.ts\nimport { openBase, readAirtableConfig, type AirtableBase } from \"./airtable/client.js\";\nimport { listAllReports, isPendingApproval } from \"./airtable/reports.js\";\nimport type { ReportRow } from \"./airtable/reports.js\";\nimport { listWebsites, siteSlug, type WebsiteRow } from \"./airtable/websites.js\";\nimport { defaultResendClient, type ResendClient } from \"./send/resend.js\";\nimport { isIdempotencyConflict } from \"./send/idempotency.js\";\nimport {\n  collectVulnAlerts,\n  collectDeliveryFailures,\n  collectPreflightBlocked,\n  collectLighthouseAlerts,\n  collectRenovateAlerts,\n  collectCiAlerts,\n  collectAnalyticsFailures,\n} from \"../alerts/digest-collectors.js\";\nimport { diffAttention, readDigestState, writeDigestState } from \"../alerts/digest-state.js\";\nimport { escapeHtml as esc } from \"../util/html.js\";\nimport type {\n  AttentionItem,\n  AttentionSeverity,\n  AttentionStatus,\n  ReadyItem,\n  DigestSections,\n} from \"../alerts/attention.js\";\n\n// The attention/digest contract lives in `../alerts/attention.ts` (a dependency-free\n// types module) so the `alerts/*` collectors can depend on it without importing back\n// from this renderer/IO module — see attention.ts for the cycle it breaks. Re-exported\n// here so existing `from \"./digest.js\"` type importers keep resolving.\nexport type {\n  AttentionItem,\n  AttentionSeverity,\n  AttentionStatus,\n  ReadyItem,\n  DigestSections,\n} from \"../alerts/attention.js\";\n\nconst GREY = \"#757575\";\nconst RED = \"#C00\";\n\n/** Shared anchor style — Gmail does not inherit font-family into <a> tags. */\nconst ANCHOR_STYLE = `color:${RED};font-family:helvetica,sans-serif`;\n\nfunction readySection(items: ReadyItem[]): string {\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Ready for your yes</h2>`;\n  if (items.length === 0) {\n    return `${heading}<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">Nothing waiting on you.</p>`;\n  }\n  const rows = items\n    .map((it) => {\n      const safeUrl = it.dashboardUrl.startsWith(\"https://\") ? it.dashboardUrl : undefined;\n      const link = safeUrl\n        ? `<a href=\"${esc(safeUrl)}\" style=\"${ANCHOR_STYLE}\">review &amp; approve</a>`\n        : `review &amp; approve`;\n      return `\n      <tr>\n        <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">\n          <strong style=\"color:#222\">${esc(it.siteName)}</strong> — ${esc(it.reportType)} (${esc(it.period)})\n          — ${link}\n        </td>\n      </tr>`;\n    })\n    .join(\"\");\n  return `${heading}<table role=\"presentation\" style=\"border-collapse:collapse;margin:0\">${rows}</table>`;\n}\n\nconst SEVERITY_ORDER: Record<AttentionSeverity, number> = { critical: 0, warning: 1 };\n\n/** Render the per-item status badge (\"NEW\"/\"WORSE\"); standing items get nothing. */\nfunction attentionBadge(status?: AttentionStatus): string {\n  if (status === \"new\")\n    return `<strong style=\"color:${RED};font-family:helvetica,sans-serif\">NEW</strong> `;\n  if (status === \"worse\")\n    return `<strong style=\"color:${RED};font-family:helvetica,sans-serif\">WORSE</strong> `;\n  return \"\";\n}\n\nfunction attentionSection(items: AttentionItem[]): string {\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Needs attention</h2>`;\n  if (items.length === 0) {\n    return `${heading}<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">All clear — nothing needs attention.</p>`;\n  }\n\n  // Group by siteName, preserving first-seen site order; sort within a site by\n  // severity (critical first).\n  const bySite = new Map<string, AttentionItem[]>();\n  for (const it of items) {\n    const bucket = bySite.get(it.siteName);\n    if (bucket) bucket.push(it);\n    else bySite.set(it.siteName, [it]);\n  }\n\n  const groups = [...bySite.entries()]\n    .map(([siteName, siteItems]) => {\n      const sorted = [...siteItems].sort(\n        (a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity],\n      );\n      const rows = sorted\n        .map((it) => {\n          const safeUrl = it.url?.startsWith(\"https://\") ? it.url : undefined;\n          const titleHtml = safeUrl\n            ? `<a href=\"${esc(safeUrl)}\" style=\"${ANCHOR_STYLE}\">${esc(it.title)}</a>`\n            : esc(it.title);\n          return `\n          <tr>\n            <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">${attentionBadge(it.status)}${titleHtml}</td>\n          </tr>`;\n        })\n        .join(\"\");\n      return `\n      <tr>\n        <td style=\"color:#222;font-family:helvetica,sans-serif;font-size:16px;font-weight:700;padding:8px 0 4px\">${esc(siteName)}</td>\n      </tr>\n      ${rows}`;\n    })\n    .join(\"\");\n\n  return `${heading}<table role=\"presentation\" style=\"border-collapse:collapse;margin:0\">${groups}</table>`;\n}\n\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\n/** Single-operator fleet — fallback when OPERATOR_EMAIL is unset. */\nconst DIGEST_OPERATOR_FALLBACK = \"info@reddoorla.com\";\n\n/** UTC \"YYYY-MM-DD\" — the Resend idempotency key suffix, so a same-day cron re-fire dedupes. */\nfunction digestDateKey(d: Date): string {\n  return d.toISOString().slice(0, 10);\n}\n\n/**\n * The gate for \"Ready for your yes\": Draft ready ∧ ¬Approved to send ∧ Sent at BLANK.\n *\n * Implemented as `listAllReports(base).filter(...)` (the authorized deviation from the plan's\n * draft, which pre-dated Slice 1's merged fix): `listAllReports` already calls `mapRow`, which\n * handles `Period` correctly, so no local `rawToReportRow` duplicate is needed. The JS filter\n * does real work — the test fake does NOT evaluate `filterByFormula` — so correctness is\n * test-provable here.\n *\n * Exported: the fleet homepage (Task 3.5b) reuses it for the pending-approval count.\n */\nexport async function listPendingApproval(base: AirtableBase): Promise<ReportRow[]> {\n  return (await listAllReports(base)).filter(isPendingApproval);\n}\n\n// ── collectAttention (IO wrapper, sibling to runDigest) ──────────────────────\n\nexport type CollectAttentionDeps = {\n  base: AirtableBase;\n  /** Same baseUrl value runDigest threads; used for the /s/<slug> links. */\n  baseUrl: string;\n  /** Pre-fetched Websites rows. When supplied (runDigest already read them),\n   *  collectAttention reuses them instead of issuing a second `listWebsites`. */\n  websites?: WebsiteRow[];\n  /** Pre-fetched Reports rows. When supplied (runDigest already read them),\n   *  collectAttention reuses them instead of issuing a second `listAllReports`. */\n  reports?: ReportRow[];\n  /** Clock for the GitHub-signals staleness gate (collectCiAlerts /\n   *  collectRenovateAlerts skip a >3-day-stale sweep). Defaults to wall-clock;\n   *  runDigest threads its run-start `today` so a quiet repo's frozen CI/Renovate\n   *  signal stops badging once its sweep goes stale. */\n  now?: Date;\n};\n\n/** Run a single collector under a try/catch: a thrown collector logs and yields []\n *  so one broken signal never blanks the whole \"Needs attention\" section. */\nfunction runCollector(label: string, fn: () => AttentionItem[]): AttentionItem[] {\n  try {\n    return fn();\n  } catch (e) {\n    console.warn(`⚠ attention collector \"${label}\" failed: ${(e as Error).message}`);\n    return [];\n  }\n}\n\n/**\n * Fetch the free signals once (listAllReports + listWebsites) — or reuse the\n * `reports`/`websites` arrays runDigest already read, so a single run reads each\n * table once — build the sitesById map the delivery collector needs, and run each\n * pure collector isolated. Returns the union of items; diffing/badging happens in\n * runDigest.\n *\n * The Renovate + CI signals come from the SAME persisted collectors the operator\n * cockpit (`buildCockpitModel`) runs — `collectRenovateAlerts` (key\n * `renovate:<siteId>`) and `collectCiAlerts` (key `ci:<siteId>`), reading the\n * nightly-persisted `renovateFailingCis`/`defaultBranchCi` fields. This is the\n * key-space unification: because the digest writes the shared Digest State\n * snapshot with these same keys, the cockpit's NEW/WORSE diff finds them and the\n * two surfaces agree (the prior live per-PR `renovate:<repo>#<n>` sweep never\n * matched the cockpit's keys, so its cards badged NEW forever).\n */\nexport async function collectAttention(deps: CollectAttentionDeps): Promise<AttentionItem[]> {\n  const reports = deps.reports ?? (await listAllReports(deps.base));\n  const websites = deps.websites ?? (await listWebsites(deps.base));\n  const now = deps.now ?? new Date();\n  const sitesById = new Map<string, WebsiteRow>(websites.map((w) => [w.id, w]));\n  return [\n    ...runCollector(\"vuln\", () => collectVulnAlerts(websites, deps.baseUrl)),\n    ...runCollector(\"delivery\", () => collectDeliveryFailures(reports, sitesById, deps.baseUrl)),\n    ...runCollector(\"preflight\", () => collectPreflightBlocked(reports, sitesById, deps.baseUrl)),\n    ...runCollector(\"lighthouse\", () => collectLighthouseAlerts(websites, deps.baseUrl)),\n    ...runCollector(\"renovate\", () => collectRenovateAlerts(websites, deps.baseUrl, now)),\n    ...runCollector(\"ci\", () => collectCiAlerts(websites, deps.baseUrl, now)),\n    ...runCollector(\"analytics\", () => collectAnalyticsFailures(websites, deps.baseUrl, now)),\n  ];\n}\n\nexport type DigestRunOptions = {\n  resend?: ResendClient;\n  /** Dashboard origin for the /s/<slug> links, e.g. \"https://reddoor-maintenance.netlify.app\". */\n  baseUrl: string;\n  /**\n   * Inject a pre-opened Airtable base (tests, server handlers).\n   * When omitted, `openBase(readAirtableConfig())` is called from the environment.\n   */\n  base?: AirtableBase;\n};\n\nexport async function runDigest(\n  options: DigestRunOptions,\n): Promise<{ output: string; code: number }> {\n  // Capture clock BEFORE any await so the idempotency key can't roll past midnight mid-run.\n  const today = new Date();\n  try {\n    const base = options.base ?? openBase(readAirtableConfig());\n    // Read each table ONCE for the whole run, then thread the arrays into\n    // collectAttention so it doesn't re-fetch (was: listWebsites ×2, listAllReports\n    // ×2). Pending is derived in-line with listPendingApproval's exact predicate.\n    const reports = await listAllReports(base);\n    const websites = await listWebsites(base);\n    const sites = new Map(websites.map((w) => [w.id, w]));\n\n    const pending = reports.filter(isPendingApproval);\n\n    const readyForYourYes: ReadyItem[] = [];\n    const baseUrl = options.baseUrl.replace(/\\/$/, \"\");\n    for (const r of pending) {\n      const site = sites.get(r.siteId);\n      if (!site) continue; // orphan report → skip rather than render a broken link\n      // An empty Name slugs to \"\" → `/s/` is a dead link (getWebsiteBySlug can't\n      // match it). Fall back to the fleet homepage so the operator still lands\n      // somewhere usable instead of a 404.\n      const slug = siteSlug(site.name);\n      readyForYourYes.push({\n        siteName: site.name,\n        reportType: r.reportType,\n        period: r.period ?? \"—\",\n        dashboardUrl: slug ? `${baseUrl}/s/${slug}` : baseUrl,\n      });\n    }\n\n    // M5: collect the free signals (isolated), diff against yesterday's snapshot.\n    // Renovate + CI come from the persisted collectors (the same ones the cockpit\n    // runs), so the snapshot this digest writes carries the `renovate:<siteId>` /\n    // `ci:<siteId>` keys the cockpit diffs against — no live GitHub sweep here.\n    const collected = await collectAttention({\n      base,\n      baseUrl: options.baseUrl,\n      websites,\n      reports,\n      now: today,\n    });\n    const prior = await readDigestState(base);\n    const { tagged, next } = diffAttention(collected, prior, digestDateKey(today));\n    const needsAttention = tagged;\n\n    // No-noise default: skip entirely when there's nothing to report.\n    if (readyForYourYes.length === 0 && needsAttention.length === 0) {\n      // On a skip, `collected` is [] so `next` is {} — still persist it so a key that\n      // resolved on a quiet day clears and a later recurrence diffs as NEW (spec §10).\n      // Wrapped: a write failure can't fail the skip.\n      try {\n        await writeDigestState(base, next);\n      } catch (e) {\n        console.warn(`⚠ digest state write failed: ${(e as Error).message}`);\n      }\n      return { output: \"Digest skipped (nothing ready, nothing needs attention).\", code: 0 };\n    }\n\n    const html = renderDigestHtml({ readyForYourYes, needsAttention });\n    const client = options.resend ?? defaultResendClient();\n    const to = [process.env.OPERATOR_EMAIL?.trim() || DIGEST_OPERATOR_FALLBACK];\n    const n = readyForYourYes.length;\n    const reportWord = n === 1 ? \"report\" : \"reports\";\n    let result: Awaited<ReturnType<typeof client.send>>;\n    try {\n      result = await client.send({\n        from: FROM_ADDRESS,\n        to,\n        subject: `Your fleet — ${digestDateKey(today)}: ${n} ${reportWord} ready for your yes`,\n        html,\n        idempotencyKey: `digest-${digestDateKey(today)}`,\n      });\n    } catch (err) {\n      // A same-UTC-day re-run whose content changed re-sends with the same\n      // `digest-<date>` idempotency key but a DIFFERENT body. Resend rejects that\n      // with a 409 (`invalid_idempotent_request`) — \"This idempotency key has been\n      // used ... but the request body was modified ...\". The operator already got\n      // today's digest on the first send, so re-sending a changed version same-day\n      // would just be a duplicate: treat it as an \"already sent today\" no-op.\n      //\n      // ResendClient (send/resend.ts) wraps the API error as a plain Error and only\n      // preserves the *message* string (no name/statusCode), so the message\n      // substring is the only reliable discriminator — match defensively on it.\n      // Any OTHER send error re-throws to the outer catch → {code:1}, so a genuine\n      // Resend/network failure still fails loudly.\n      if (isIdempotencyConflict(err)) {\n        // Do NOT write the snapshot: the first send already persisted it; writing\n        // this run's `next` would diff against the first run's snapshot and mis-badge.\n        return {\n          output:\n            \"Digest already sent today (content changed since the first send) — skipped to avoid a duplicate.\",\n          code: 0,\n        };\n      }\n      throw err;\n    }\n    // Persist the next snapshot AFTER a successful send. A write failure is caught +\n    // logged: the digest already went out, tomorrow re-news at worst. (The send-FAILURE\n    // path never reaches here — the outer catch returns code 1 with no write, preserving\n    // the NEW badge for the retry.)\n    try {\n      await writeDigestState(base, next);\n    } catch (e) {\n      console.warn(`⚠ digest state write failed: ${(e as Error).message}`);\n    }\n    return { output: `Digest sent to ${to.join(\", \")} (${result.messageId})`, code: 0 };\n  } catch (err) {\n    // Re-throw config errors (exitCode=2: missing env vars, bad config) so runOrExit\n    // surfaces them with the correct process exit code rather than collapsing to 1.\n    if (typeof (err as { exitCode?: unknown }).exitCode === \"number\") {\n      throw err;\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    return { output: `digest failed: ${message}`, code: 1 };\n  }\n}\n\n/** Pure render of the unified daily operator digest. No IO — the caller (runDigest)\n *  collects the rows and decides whether to send. */\nexport function renderDigestHtml(sections: DigestSections): string {\n  return `<!doctype html>\n<html>\n  <head><meta charset=\"utf-8\"></head>\n  <body style=\"margin:0;padding:0;background:#ffffff\">\n    <table width=\"100%\" style=\"border-collapse:collapse\">\n      <tr>\n        <td align=\"center\" style=\"padding:24px\">\n          <table width=\"600\" style=\"border-collapse:collapse\">\n            <tr>\n              <td>\n                <h1 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:24px;font-weight:700;margin:0 0 8px\">Your fleet today</h1>\n                ${readySection(sections.readyForYourYes)}\n                ${attentionSection(sections.needsAttention)}\n              </td>\n            </tr>\n          </table>\n        </td>\n      </tr>\n    </table>\n  </body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,IAAM,OAAO;AACb,IAAM,MAAM;AAGZ,IAAM,eAAe,SAAS,GAAG;AAEjC,SAAS,aAAa,OAA4B;AAChD,QAAM,UAAU,oBAAoB,GAAG;AACvC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,OAAO,mBAAmB,IAAI;AAAA,EAC1C;AACA,QAAM,OAAO,MACV,IAAI,CAAC,OAAO;AACX,UAAM,UAAU,GAAG,aAAa,WAAW,UAAU,IAAI,GAAG,eAAe;AAC3E,UAAM,OAAO,UACT,YAAY,WAAI,OAAO,CAAC,YAAY,YAAY,+BAChD;AACJ,WAAO;AAAA;AAAA,2BAEc,IAAI;AAAA,uCACQ,WAAI,GAAG,QAAQ,CAAC,oBAAe,WAAI,GAAG,UAAU,CAAC,KAAK,WAAI,GAAG,MAAM,CAAC;AAAA,mBAC7F,IAAI;AAAA;AAAA;AAAA,EAGd,CAAC,EACA,KAAK,EAAE;AACV,SAAO,GAAG,OAAO,wEAAwE,IAAI;AAC/F;AAEA,IAAM,iBAAoD,EAAE,UAAU,GAAG,SAAS,EAAE;AAGpF,SAAS,eAAe,QAAkC;AACxD,MAAI,WAAW;AACb,WAAO,wBAAwB,GAAG;AACpC,MAAI,WAAW;AACb,WAAO,wBAAwB,GAAG;AACpC,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAgC;AACxD,QAAM,UAAU,oBAAoB,GAAG;AACvC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,OAAO,mBAAmB,IAAI;AAAA,EAC1C;AAIA,QAAM,SAAS,oBAAI,IAA6B;AAChD,aAAW,MAAM,OAAO;AACtB,UAAM,SAAS,OAAO,IAAI,GAAG,QAAQ;AACrC,QAAI,OAAQ,QAAO,KAAK,EAAE;AAAA,QACrB,QAAO,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,EACnC;AAEA,QAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,CAAC,EAChC,IAAI,CAAC,CAAC,UAAU,SAAS,MAAM;AAC9B,UAAM,SAAS,CAAC,GAAG,SAAS,EAAE;AAAA,MAC5B,CAAC,GAAG,MAAM,eAAe,EAAE,QAAQ,IAAI,eAAe,EAAE,QAAQ;AAAA,IAClE;AACA,UAAM,OAAO,OACV,IAAI,CAAC,OAAO;AACX,YAAM,UAAU,GAAG,KAAK,WAAW,UAAU,IAAI,GAAG,MAAM;AAC1D,YAAM,YAAY,UACd,YAAY,WAAI,OAAO,CAAC,YAAY,YAAY,KAAK,WAAI,GAAG,KAAK,CAAC,SAClE,WAAI,GAAG,KAAK;AAChB,aAAO;AAAA;AAAA,+BAEc,IAAI,yFAAyF,eAAe,GAAG,MAAM,CAAC,GAAG,SAAS;AAAA;AAAA,IAEzJ,CAAC,EACA,KAAK,EAAE;AACV,WAAO;AAAA;AAAA,mHAEsG,WAAI,QAAQ,CAAC;AAAA;AAAA,QAExH,IAAI;AAAA,EACR,CAAC,EACA,KAAK,EAAE;AAEV,SAAO,GAAG,OAAO,wEAAwE,MAAM;AACjG;AAEA,IAAM,eAAe;AAErB,IAAM,2BAA2B;AAGjC,SAAS,cAAc,GAAiB;AACtC,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACpC;AAaA,eAAsB,oBAAoB,MAA0C;AAClF,UAAQ,MAAM,eAAe,IAAI,GAAG,OAAO,iBAAiB;AAC9D;AAuBA,SAAS,aAAa,OAAe,IAA4C;AAC/E,MAAI;AACF,WAAO,GAAG;AAAA,EACZ,SAAS,GAAG;AACV,YAAQ,KAAK,+BAA0B,KAAK,aAAc,EAAY,OAAO,EAAE;AAC/E,WAAO,CAAC;AAAA,EACV;AACF;AAkBA,eAAsB,iBAAiB,MAAsD;AAC3F,QAAM,UAAU,KAAK,WAAY,MAAM,eAAe,KAAK,IAAI;AAC/D,QAAM,WAAW,KAAK,YAAa,MAAM,aAAa,KAAK,IAAI;AAC/D,QAAM,MAAM,KAAK,OAAO,oBAAI,KAAK;AACjC,QAAM,YAAY,IAAI,IAAwB,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,SAAO;AAAA,IACL,GAAG,aAAa,QAAQ,MAAM,kBAAkB,UAAU,KAAK,OAAO,CAAC;AAAA,IACvE,GAAG,aAAa,YAAY,MAAM,wBAAwB,SAAS,WAAW,KAAK,OAAO,CAAC;AAAA,IAC3F,GAAG,aAAa,aAAa,MAAM,wBAAwB,SAAS,WAAW,KAAK,OAAO,CAAC;AAAA,IAC5F,GAAG,aAAa,cAAc,MAAM,wBAAwB,UAAU,KAAK,OAAO,CAAC;AAAA,IACnF,GAAG,aAAa,YAAY,MAAM,sBAAsB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACpF,GAAG,aAAa,MAAM,MAAM,gBAAgB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACxE,GAAG,aAAa,aAAa,MAAM,yBAAyB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,EAC1F;AACF;AAaA,eAAsB,UACpB,SAC2C;AAE3C,QAAM,QAAQ,oBAAI,KAAK;AACvB,MAAI;AACF,UAAM,OAAO,QAAQ,QAAQ,SAAS,mBAAmB,CAAC;AAI1D,UAAM,UAAU,MAAM,eAAe,IAAI;AACzC,UAAM,WAAW,MAAM,aAAa,IAAI;AACxC,UAAM,QAAQ,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpD,UAAM,UAAU,QAAQ,OAAO,iBAAiB;AAEhD,UAAM,kBAA+B,CAAC;AACtC,UAAM,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AACjD,eAAW,KAAK,SAAS;AACvB,YAAM,OAAO,MAAM,IAAI,EAAE,MAAM;AAC/B,UAAI,CAAC,KAAM;AAIX,YAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,sBAAgB,KAAK;AAAA,QACnB,UAAU,KAAK;AAAA,QACf,YAAY,EAAE;AAAA,QACd,QAAQ,EAAE,UAAU;AAAA,QACpB,cAAc,OAAO,GAAG,OAAO,MAAM,IAAI,KAAK;AAAA,MAChD,CAAC;AAAA,IACH;AAMA,UAAM,YAAY,MAAM,iBAAiB;AAAA,MACvC;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,UAAM,QAAQ,MAAM,gBAAgB,IAAI;AACxC,UAAM,EAAE,QAAQ,KAAK,IAAI,cAAc,WAAW,OAAO,cAAc,KAAK,CAAC;AAC7E,UAAM,iBAAiB;AAGvB,QAAI,gBAAgB,WAAW,KAAK,eAAe,WAAW,GAAG;AAI/D,UAAI;AACF,cAAM,iBAAiB,MAAM,IAAI;AAAA,MACnC,SAAS,GAAG;AACV,gBAAQ,KAAK,qCAAiC,EAAY,OAAO,EAAE;AAAA,MACrE;AACA,aAAO,EAAE,QAAQ,4DAA4D,MAAM,EAAE;AAAA,IACvF;AAEA,UAAM,OAAO,iBAAiB,EAAE,iBAAiB,eAAe,CAAC;AACjE,UAAM,SAAS,QAAQ,UAAU,oBAAoB;AACrD,UAAM,KAAK,CAAC,QAAQ,IAAI,gBAAgB,KAAK,KAAK,wBAAwB;AAC1E,UAAM,IAAI,gBAAgB;AAC1B,UAAM,aAAa,MAAM,IAAI,WAAW;AACxC,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,KAAK;AAAA,QACzB,MAAM;AAAA,QACN;AAAA,QACA,SAAS,qBAAgB,cAAc,KAAK,CAAC,KAAK,CAAC,IAAI,UAAU;AAAA,QACjE;AAAA,QACA,gBAAgB,UAAU,cAAc,KAAK,CAAC;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,KAAK;AAaZ,UAAI,sBAAsB,GAAG,GAAG;AAG9B,eAAO;AAAA,UACL,QACE;AAAA,UACF,MAAM;AAAA,QACR;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAKA,QAAI;AACF,YAAM,iBAAiB,MAAM,IAAI;AAAA,IACnC,SAAS,GAAG;AACV,cAAQ,KAAK,qCAAiC,EAAY,OAAO,EAAE;AAAA,IACrE;AACA,WAAO,EAAE,QAAQ,kBAAkB,GAAG,KAAK,IAAI,CAAC,KAAK,OAAO,SAAS,KAAK,MAAM,EAAE;AAAA,EACpF,SAAS,KAAK;AAGZ,QAAI,OAAQ,IAA+B,aAAa,UAAU;AAChE,YAAM;AAAA,IACR;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,EAAE,QAAQ,kBAAkB,OAAO,IAAI,MAAM,EAAE;AAAA,EACxD;AACF;AAIO,SAAS,iBAAiB,UAAkC;AACjE,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mCAU0B,GAAG;AAAA,kBACpB,aAAa,SAAS,eAAe,CAAC;AAAA,kBACtC,iBAAiB,SAAS,cAAc,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAS3D;","names":[]}

package/dist/ensure-site-2PF522VL.js

@@ -0,0 +1,87 @@
+import {
+  WEBSITES_TABLE,
+  listWebsites,
+  siteSlug
+} from "./chunk-C3PDS623.js";
+import {
+  openBase,
+  readAirtableConfig
+} from "./chunk-HN6I2XWI.js";
+import "./chunk-6VAL7XJT.js";
+
+// src/reports/airtable/ensure-site.ts
+var COLS = {
+  url: "url",
+  pointOfContact: "point of contact",
+  gitRepo: "Git repo"
+};
+async function ensureSite(base, input) {
+  const slug = siteSlug(input.slug);
+  if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);
+  if (input.displayName && siteSlug(input.displayName) !== slug)
+    throw new Error(
+      `ensure-site: display name '${input.displayName}' slugifies to '${siteSlug(input.displayName)}', not '${slug}' \u2014 the row would not be found on re-run`
+    );
+  const existing = (await listWebsites(base)).find((w) => siteSlug(w.name) === slug);
+  if (!existing) {
+    const fields = {
+      Name: input.displayName ?? slug,
+      Status: "in development",
+      [COLS.gitRepo]: input.gitRepo ?? `reddoorla/${slug}`
+    };
+    if (input.url) fields[COLS.url] = input.url;
+    if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;
+    const created = await base(WEBSITES_TABLE).create([{ fields }]);
+    return {
+      status: "created",
+      siteId: created[0].id,
+      updatedFields: [],
+      skippedMismatches: []
+    };
+  }
+  const updates = {};
+  const skippedMismatches = [];
+  const blank = (v) => v === null || v === void 0 || v === "";
+  const consider = (column, provided, current) => {
+    if (!provided) return;
+    if (blank(current)) updates[column] = provided;
+    else if (current !== provided) skippedMismatches.push(column);
+  };
+  consider(COLS.url, input.url, existing.url || null);
+  consider(COLS.pointOfContact, input.pointOfContact, existing.pointOfContact);
+  consider(COLS.gitRepo, input.gitRepo, existing.gitRepo);
+  const updatedFields = Object.keys(updates);
+  if (updatedFields.length > 0) {
+    await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);
+  }
+  return { status: "exists", siteId: existing.id, updatedFields, skippedMismatches };
+}
+
+// src/cli/commands/ensure-site.ts
+async function runEnsureSiteCommand(slug, opts) {
+  if (!slug) return { output: "Provide a <slug> (e.g. `ensure-site roalson`).", code: 2 };
+  try {
+    const base = openBase(readAirtableConfig());
+    const result = await ensureSite(base, {
+      slug,
+      ...opts.name ? { displayName: opts.name } : {},
+      ...opts.url ? { url: opts.url } : {},
+      ...opts.contact ? { pointOfContact: opts.contact } : {},
+      ...opts.gitRepo ? { gitRepo: opts.gitRepo } : {}
+    });
+    const filled = result.updatedFields.length > 0 ? ` \u2014 filled blank field(s): ${result.updatedFields.join(", ")}` : "";
+    const skipped = result.skippedMismatches.length > 0 ? ` \u2014 differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(", ")}` : "";
+    const nameNote = result.status === "created" && !opts.name ? ` \u2014 Name set to "${slug}"; retitle in Airtable before forms/announce go live (or re-create with --name)` : "";
+    return {
+      output: `[${slug}] ${result.status} (${result.siteId})${filled}${skipped}${nameNote}`,
+      code: 0
+    };
+  } catch (err) {
+    const e = err;
+    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };
+  }
+}
+export {
+  runEnsureSiteCommand
+};
+//# sourceMappingURL=ensure-site-2PF522VL.js.map

package/dist/ensure-site-2PF522VL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/airtable/ensure-site.ts","../src/cli/commands/ensure-site.ts"],"sourcesContent":["import type { FieldSet, Records } from \"airtable\";\nimport type { AirtableBase } from \"./client.js\";\nimport { WEBSITES_TABLE, listWebsites, siteSlug } from \"./websites.js\";\n\nexport type EnsureSiteInput = {\n  /** Canonical slug — matches by siteSlug(Name); the Name on create when no displayName given. */\n  slug: string;\n  /** Human display name written to Name on create. Name is consumed VERBATIM in\n   *  client-facing copy (forms auto-reply intro, report subjects), so a bare\n   *  machine slug there reads as \"Thanks for reaching out to acme-co.\" Must\n   *  slugify to the same slug or the row wouldn't be found on re-run. */\n  displayName?: string;\n  url?: string;\n  pointOfContact?: string;\n  /** owner/repo. Default on create: `reddoorla/<slug>`. */\n  gitRepo?: string;\n};\n\nexport type EnsureSiteResult = {\n  status: \"created\" | \"exists\";\n  siteId: string;\n  /** Airtable column names written on the exists path (create path writes all). */\n  updatedFields: string[];\n  /** Inputs that DIFFERED from an existing non-blank cell and were left\n   *  untouched (fill-blanks-only) — surfaced so a resumed bootstrap with a\n   *  corrected value doesn't silently discard it. */\n  skippedMismatches: string[];\n};\n\n/** Column-name map (load-bearing magic strings — see websites.ts's mapRow header). */\nconst COLS = {\n  url: \"url\",\n  pointOfContact: \"point of contact\",\n  gitRepo: \"Git repo\",\n} as const;\n\n/**\n * Find-or-create the Websites row for a slug so a new site exists in the fleet\n * inventory (audits, form-ingest slug resolution, reports) from day one.\n *\n * Fill-blanks-only on the exists path: this command runs from a bootstrap skill\n * that may be re-run to resume — it must never clobber operator-edited cells.\n * Frequencies are deliberately NOT set (launch flips the lifecycle); Status is\n * only written on create (\"in development\").\n */\nexport async function ensureSite(\n  base: AirtableBase,\n  input: EnsureSiteInput,\n): Promise<EnsureSiteResult> {\n  const slug = siteSlug(input.slug);\n  if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);\n  if (input.displayName && siteSlug(input.displayName) !== slug)\n    throw new Error(\n      `ensure-site: display name '${input.displayName}' slugifies to '${siteSlug(input.displayName)}', not '${slug}' — the row would not be found on re-run`,\n    );\n\n  const existing = (await listWebsites(base)).find((w) => siteSlug(w.name) === slug);\n\n  if (!existing) {\n    const fields: FieldSet = {\n      Name: input.displayName ?? slug,\n      Status: \"in development\",\n      [COLS.gitRepo]: input.gitRepo ?? `reddoorla/${slug}`,\n    };\n    if (input.url) fields[COLS.url] = input.url;\n    if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;\n    const created = (await base(WEBSITES_TABLE).create([{ fields }])) as Records<FieldSet>;\n    return {\n      status: \"created\",\n      siteId: created[0]!.id,\n      updatedFields: [],\n      skippedMismatches: [],\n    };\n  }\n\n  const updates: FieldSet = {};\n  const skippedMismatches: string[] = [];\n  const blank = (v: unknown) => v === null || v === undefined || v === \"\";\n  const consider = (column: string, provided: string | undefined, current: unknown) => {\n    if (!provided) return;\n    if (blank(current)) updates[column] = provided;\n    else if (current !== provided) skippedMismatches.push(column);\n  };\n  consider(COLS.url, input.url, existing.url || null);\n  consider(COLS.pointOfContact, input.pointOfContact, existing.pointOfContact);\n  consider(COLS.gitRepo, input.gitRepo, existing.gitRepo);\n\n  const updatedFields = Object.keys(updates);\n  if (updatedFields.length > 0) {\n    await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);\n  }\n  return { status: \"exists\", siteId: existing.id, updatedFields, skippedMismatches };\n}\n","import { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { ensureSite } from \"../../reports/airtable/ensure-site.js\";\n\nexport type EnsureSiteCommandOptions = {\n  name?: string;\n  url?: string;\n  contact?: string;\n  gitRepo?: string;\n  cwd?: string;\n};\n\n/**\n * `ensure-site <slug>` — create/verify the fleet-inventory row for a new site.\n * Day-one step of the /new-site bootstrap skill. Fill-blanks-only; safe to re-run.\n */\nexport async function runEnsureSiteCommand(\n  slug: string | undefined,\n  opts: EnsureSiteCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (!slug) return { output: \"Provide a <slug> (e.g. `ensure-site roalson`).\", code: 2 };\n  try {\n    const base = openBase(readAirtableConfig());\n    const result = await ensureSite(base, {\n      slug,\n      ...(opts.name ? { displayName: opts.name } : {}),\n      ...(opts.url ? { url: opts.url } : {}),\n      ...(opts.contact ? { pointOfContact: opts.contact } : {}),\n      ...(opts.gitRepo ? { gitRepo: opts.gitRepo } : {}),\n    });\n    const filled =\n      result.updatedFields.length > 0\n        ? ` — filled blank field(s): ${result.updatedFields.join(\", \")}`\n        : \"\";\n    const skipped =\n      result.skippedMismatches.length > 0\n        ? ` — differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(\", \")}`\n        : \"\";\n    const nameNote =\n      result.status === \"created\" && !opts.name\n        ? ` — Name set to \"${slug}\"; retitle in Airtable before forms/announce go live (or re-create with --name)`\n        : \"\";\n    return {\n      output: `[${slug}] ${result.status} (${result.siteId})${filled}${skipped}${nameNote}`,\n      code: 0,\n    };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA8BA,IAAM,OAAO;AAAA,EACX,KAAK;AAAA,EACL,gBAAgB;AAAA,EAChB,SAAS;AACX;AAWA,eAAsB,WACpB,MACA,OAC2B;AAC3B,QAAM,OAAO,SAAS,MAAM,IAAI;AAChC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iBAAiB,MAAM,IAAI,qCAAqC;AAC3F,MAAI,MAAM,eAAe,SAAS,MAAM,WAAW,MAAM;AACvD,UAAM,IAAI;AAAA,MACR,8BAA8B,MAAM,WAAW,mBAAmB,SAAS,MAAM,WAAW,CAAC,WAAW,IAAI;AAAA,IAC9G;AAEF,QAAM,YAAY,MAAM,aAAa,IAAI,GAAG,KAAK,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAEjF,MAAI,CAAC,UAAU;AACb,UAAM,SAAmB;AAAA,MACvB,MAAM,MAAM,eAAe;AAAA,MAC3B,QAAQ;AAAA,MACR,CAAC,KAAK,OAAO,GAAG,MAAM,WAAW,aAAa,IAAI;AAAA,IACpD;AACA,QAAI,MAAM,IAAK,QAAO,KAAK,GAAG,IAAI,MAAM;AACxC,QAAI,MAAM,eAAgB,QAAO,KAAK,cAAc,IAAI,MAAM;AAC9D,UAAM,UAAW,MAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,QAAQ,CAAC,EAAG;AAAA,MACpB,eAAe,CAAC;AAAA,MAChB,mBAAmB,CAAC;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,UAAoB,CAAC;AAC3B,QAAM,oBAA8B,CAAC;AACrC,QAAM,QAAQ,CAAC,MAAe,MAAM,QAAQ,MAAM,UAAa,MAAM;AACrE,QAAM,WAAW,CAAC,QAAgB,UAA8B,YAAqB;AACnF,QAAI,CAAC,SAAU;AACf,QAAI,MAAM,OAAO,EAAG,SAAQ,MAAM,IAAI;AAAA,aAC7B,YAAY,SAAU,mBAAkB,KAAK,MAAM;AAAA,EAC9D;AACA,WAAS,KAAK,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI;AAClD,WAAS,KAAK,gBAAgB,MAAM,gBAAgB,SAAS,cAAc;AAC3E,WAAS,KAAK,SAAS,MAAM,SAAS,SAAS,OAAO;AAEtD,QAAM,gBAAgB,OAAO,KAAK,OAAO;AACzC,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAAA,EAC1E;AACA,SAAO,EAAE,QAAQ,UAAU,QAAQ,SAAS,IAAI,eAAe,kBAAkB;AACnF;;;AC7EA,eAAsB,qBACpB,MACA,MAC2C;AAC3C,MAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,kDAAkD,MAAM,EAAE;AACtF,MAAI;AACF,UAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,UAAM,SAAS,MAAM,WAAW,MAAM;AAAA,MACpC;AAAA,MACA,GAAI,KAAK,OAAO,EAAE,aAAa,KAAK,KAAK,IAAI,CAAC;AAAA,MAC9C,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,MACpC,GAAI,KAAK,UAAU,EAAE,gBAAgB,KAAK,QAAQ,IAAI,CAAC;AAAA,MACvD,GAAI,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAClD,CAAC;AACD,UAAM,SACJ,OAAO,cAAc,SAAS,IAC1B,kCAA6B,OAAO,cAAc,KAAK,IAAI,CAAC,KAC5D;AACN,UAAM,UACJ,OAAO,kBAAkB,SAAS,IAC9B,qEAAgE,OAAO,kBAAkB,KAAK,IAAI,CAAC,KACnG;AACN,UAAM,WACJ,OAAO,WAAW,aAAa,CAAC,KAAK,OACjC,wBAAmB,IAAI,oFACvB;AACN,WAAO;AAAA,MACL,QAAQ,IAAI,IAAI,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,IAAI,MAAM,GAAG,OAAO,GAAG,QAAQ;AAAA,MACnF,MAAM;AAAA,IACR;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/{github-signals-VWBMQNLH.js → github-signals-CLQC2IPY.js}

@@ -3,26 +3,26 @@ import {
 } from "./chunk-PZQ3WED2.js";
 import {
   formatFleetWriteSummary
-} from "./chunk-KN5OC5YH.js";
-import "./chunk-T34EUM5B.js";
+} from "./chunk-GKSXZIMX.js";
+import "./chunk-XWPZ46IN.js";
 import {
   detectSignalEvents,
   fleetSweptEvent
 } from "./chunk-5L3FPQIJ.js";
+import {
+  makeGitHub
+} from "./chunk-YEGHUODU.js";
 import {
   recordFleetEventsBestEffort
 } from "./chunk-OTBA7DON.js";
 import "./chunk-PH3AGF4Z.js";
 import "./chunk-HIN3P4ZN.js";
-import {
-  makeGitHub
-} from "./chunk-YEGHUODU.js";
 import "./chunk-HVOOCK6L.js";
 import {
   listWebsites,
   siteSlug,
   updateGitHubSignals
-} from "./chunk-CL5DYUWQ.js";
+} from "./chunk-C3PDS623.js";
 import {
   openBase,
   readAirtableConfig
@@ -134,4 +134,4 @@ export {
   githubSignalsExitCode,
   runGitHubSignalsCommand
 };
-//# sourceMappingURL=github-signals-VWBMQNLH.js.map
+//# sourceMappingURL=github-signals-CLQC2IPY.js.map

package/dist/index.d.ts

@@ -333,6 +333,12 @@ type WebsiteRow = {
     pointOfContact: string | null;
     maintenanceFreq: Frequency;
     testingFreq: Frequency;
+    /** The literal Airtable cell values behind the coerced frequencies. `toFrequency`
+     *  maps any unrecognized value ("Quaterly", "Monthly ") to "None" so nothing bogus
+     *  reaches a client email — which also makes typos invisible downstream. Preflight
+     *  validates THESE to make that failure mode loud. Null = blank cell. */
+    maintenanceFreqRaw: string | null;
+    testingFreqRaw: string | null;
     /** Last manually-recorded maintenance day (used as fallback when no Reports row exists). */
     maintenanceDay: string | null;
     testingDay: string | null;
@@ -810,7 +816,7 @@ type AttentionStatus = "new" | "worse" | "standing";
 type AttentionItem = {
     /** Stable identity for diffing: `vuln:<siteId>`, `delivery:<reportId>`. */
     key: string;
-    kind: "vuln" | "delivery" | "renovate" | "lighthouse" | "ci" | "analytics";
+    kind: "vuln" | "delivery" | "renovate" | "lighthouse" | "ci" | "analytics" | "preflight";
     /** Grouping key in the (component-3) render. */
     siteName: string;
     title: string;