@reddoorla/maintenance 0.75.0 → 0.76.0

package/dist/header-image-H4N54DHN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/header-image.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { listWebsites, siteSlug, ACTIVE_STATUSES } from \"../../reports/airtable/websites.js\";\nimport type { WebsiteRow } from \"../../reports/airtable/websites.js\";\nimport { uploadAttachment } from \"../../reports/airtable/attachments.js\";\nimport { generateHeaderImage } from \"../../reports/header-image/index.js\";\n\nexport type HeaderImageOptions = {\n  all?: boolean;\n  force?: boolean;\n  writeAirtable?: boolean;\n  outDir?: string;\n  settleMs?: string;\n};\n\n/** Which rows this invocation should act on. Pure, so it is unit-tested. */\nexport function resolveTargets(\n  rows: readonly WebsiteRow[],\n  // `| undefined` spelled out because `exactOptionalPropertyTypes` otherwise\n  // rejects the caller passing through possibly-undefined CLI flags.\n  opts: { site?: string | undefined; all?: boolean | undefined; force?: boolean | undefined },\n): WebsiteRow[] {\n  if (opts.site) {\n    const want = siteSlug(opts.site);\n    return rows.filter((r) => siteSlug(r.name) === want);\n  }\n  if (!opts.all) return [];\n  return rows.filter((r) => {\n    if (!r.url) return false;\n    if (r.status === null || !ACTIVE_STATUSES.has(r.status)) return false;\n    return opts.force ? true : !r.headerImage;\n  });\n}\n\n/** Parse the `--settle-ms <ms>` flag. Unset → undefined (the generator's own\n *  default settle). `Number(\"abc\")` is NaN, which would sail through as a NaN\n *  timeout and silently skip the settle entirely, so anything non-finite or\n *  negative is rejected up front rather than producing a subtly-wrong capture. */\nexport function parseSettleMs(value: string | undefined): number | undefined {\n  if (value === undefined) return undefined;\n  const n = Number(value);\n  if (!Number.isFinite(n) || n < 0) {\n    throw Object.assign(\n      new Error(`--settle-ms must be a non-negative number of milliseconds, got \"${value}\"`),\n      { exitCode: 2 },\n    );\n  }\n  return n;\n}\n\n/** Injected in tests so the file-writing branch can be exercised without\n *  driving a real browser (mirrors `GenerateInput.shooter`). */\ntype Generate = typeof generateHeaderImage;\n\n/**\n * Generate a header image per target row and either upload it to Airtable or\n * write it locally for review. Split out of {@link runHeaderImageCommand} so\n * the local-output path is testable without an Airtable base.\n */\nexport async function generateForTargets(\n  targets: readonly WebsiteRow[],\n  opts: HeaderImageOptions,\n  generate: Generate = generateHeaderImage,\n): Promise<{ output: string; code: number }> {\n  const outDir = resolve(opts.outDir ?? \"reports\");\n  const settleMs = parseSettleMs(opts.settleMs);\n  // `reports/` does not exist on a fresh checkout, so the writeFile() below\n  // would throw ENOENT for the first operator to run the default (local) path.\n  // Create it once, before the loop, rather than per site.\n  if (!opts.writeAirtable) await mkdir(outDir, { recursive: true });\n\n  const lines: string[] = [];\n  let failed = 0;\n\n  for (const row of targets) {\n    try {\n      const gen = await generate({\n        url: row.url,\n        slug: siteSlug(row.name),\n        // `exactOptionalPropertyTypes` rejects an explicit `settleMs: undefined`\n        // against `settleMs?: number`, so omit the key entirely when unset.\n        ...(settleMs === undefined ? {} : { settleMs }),\n      });\n      if (opts.writeAirtable) {\n        await uploadAttachment(row.id, \"Header image\", gen.bytes, gen.filename, gen.contentType);\n        lines.push(\n          `✔ ${row.name} — uploaded ${gen.filename} (${(gen.bytes.byteLength / 1024 / 1024).toFixed(2)} MB)`,\n        );\n      } else {\n        const path = resolve(outDir, gen.filename);\n        await writeFile(path, gen.bytes);\n        lines.push(`✔ ${row.name} — wrote ${path} (review, then re-run with --write-airtable)`);\n      }\n    } catch (err) {\n      failed++;\n      lines.push(`✖ ${row.name} — ${err instanceof Error ? err.message : String(err)}`);\n    }\n  }\n\n  lines.push(`${targets.length - failed}/${targets.length} generated.`);\n  return { output: lines.join(\"\\n\"), code: failed > 0 ? 1 : 0 };\n}\n\n/**\n * `header-image [site]` — capture a site's live homepage and composite its\n * report header image. Defaults to writing the JPEG locally so the operator can\n * eyeball it; `--write-airtable` uploads it to the Websites row's Header image\n * field. `--all` backfills every live site that has no header image yet.\n */\nexport async function runHeaderImageCommand(\n  site: string | undefined,\n  opts: HeaderImageOptions,\n): Promise<{ output: string; code: number }> {\n  const base = openBase(readAirtableConfig());\n  const rows = await listWebsites(base);\n  const targets = resolveTargets(rows, { site, all: opts.all, force: opts.force });\n  if (targets.length === 0) {\n    return {\n      output: site ? `No site matched \"${site}\".` : \"No sites need a header image.\",\n      code: 1,\n    };\n  }\n  return generateForTargets(targets, opts);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;AAgBjB,SAAS,eACd,MAGA,MACc;AACd,MAAI,KAAK,MAAM;AACb,UAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,WAAO,KAAK,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAAA,EACrD;AACA,MAAI,CAAC,KAAK,IAAK,QAAO,CAAC;AACvB,SAAO,KAAK,OAAO,CAAC,MAAM;AACxB,QAAI,CAAC,EAAE,IAAK,QAAO;AACnB,QAAI,EAAE,WAAW,QAAQ,CAAC,gBAAgB,IAAI,EAAE,MAAM,EAAG,QAAO;AAChE,WAAO,KAAK,QAAQ,OAAO,CAAC,EAAE;AAAA,EAChC,CAAC;AACH;AAMO,SAAS,cAAc,OAA+C;AAC3E,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,GAAG;AAChC,UAAM,OAAO;AAAA,MACX,IAAI,MAAM,mEAAmE,KAAK,GAAG;AAAA,MACrF,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAWA,eAAsB,mBACpB,SACA,MACA,WAAqB,qBACsB;AAC3C,QAAM,SAAS,QAAQ,KAAK,UAAU,SAAS;AAC/C,QAAM,WAAW,cAAc,KAAK,QAAQ;AAI5C,MAAI,CAAC,KAAK,cAAe,OAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AAEhE,QAAM,QAAkB,CAAC;AACzB,MAAI,SAAS;AAEb,aAAW,OAAO,SAAS;AACzB,QAAI;AACF,YAAM,MAAM,MAAM,SAAS;AAAA,QACzB,KAAK,IAAI;AAAA,QACT,MAAM,SAAS,IAAI,IAAI;AAAA;AAAA;AAAA,QAGvB,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,MAC/C,CAAC;AACD,UAAI,KAAK,eAAe;AACtB,cAAM,iBAAiB,IAAI,IAAI,gBAAgB,IAAI,OAAO,IAAI,UAAU,IAAI,WAAW;AACvF,cAAM;AAAA,UACJ,UAAK,IAAI,IAAI,oBAAe,IAAI,QAAQ,MAAM,IAAI,MAAM,aAAa,OAAO,MAAM,QAAQ,CAAC,CAAC;AAAA,QAC9F;AAAA,MACF,OAAO;AACL,cAAM,OAAO,QAAQ,QAAQ,IAAI,QAAQ;AACzC,cAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,cAAM,KAAK,UAAK,IAAI,IAAI,iBAAY,IAAI,8CAA8C;AAAA,MACxF;AAAA,IACF,SAAS,KAAK;AACZ;AACA,YAAM,KAAK,UAAK,IAAI,IAAI,WAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,IAClF;AAAA,EACF;AAEA,QAAM,KAAK,GAAG,QAAQ,SAAS,MAAM,IAAI,QAAQ,MAAM,aAAa;AACpE,SAAO,EAAE,QAAQ,MAAM,KAAK,IAAI,GAAG,MAAM,SAAS,IAAI,IAAI,EAAE;AAC9D;AAQA,eAAsB,sBACpB,MACA,MAC2C;AAC3C,QAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,QAAM,OAAO,MAAM,aAAa,IAAI;AACpC,QAAM,UAAU,eAAe,MAAM,EAAE,MAAM,KAAK,KAAK,KAAK,OAAO,KAAK,MAAM,CAAC;AAC/E,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,QAAQ,OAAO,oBAAoB,IAAI,OAAO;AAAA,MAC9C,MAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO,mBAAmB,SAAS,IAAI;AACzC;","names":[]}

package/dist/index.d.ts

@@ -71,6 +71,11 @@ type RouteResult = {
     title: string | null;
     /** The chromium `meta[name="description"]` content, or null when absent/not captured. */
     metaDescription: string | null;
+    /** Unsubstituted SvelteKit template placeholders (e.g. "%sveltekit.body%") the SERVED HTML
+     *  carried — a broken app.html (a placeholder token trapped in a comment, a malformed template)
+     *  ships these literally. Empty = clean. Optional: a runner that didn't capture it is treated as
+     *  clean (undefined ≠ failure), but a token that IS seen is unambiguous corruption. */
+    leakedTemplateTokens?: string[];
 };
 type LinkResult = {
     url: string;
@@ -88,9 +93,18 @@ type PageFetch = {
     title: string | null;
     metaDescription: string | null;
 };
+/** What a no-follow GET of the base URL observed: the raw status (null = network error/timeout)
+ *  and the raw Location header (null when absent). See canonicalizeBaseUrl. */
+type RedirectFetch = {
+    status: number | null;
+    location: string | null;
+};
 /** Injected plain-fetch re-verification IO (see reverifyRoutes). Tests pass a fake. */
 type VerifyDeps = {
     fetchPage: (url: string) => Promise<PageFetch>;
+    /** Optional single `redirect:"manual"` GET, for canonicalizeBaseUrl's base-URL preflight.
+     *  Optional so existing fakes stay valid; absent → canonicalization is a no-op. */
+    fetchRedirect?: (url: string) => Promise<RedirectFetch>;
 };
 
 /** Outcome of driving one site's contact form. `formPresent:false` ⇒ n/a
@@ -756,6 +770,47 @@ type ReportRow = {
     overrideAt: string | null;
 };
 
+type ShootOptions = {
+    url: string;
+    width: number;
+    height: number;
+    deviceScaleFactor: number;
+    settleMs: number;
+};
+/** Injected browser IO. The real impl drives Playwright; tests pass a fake. */
+type Shooter = {
+    shoot: (opts: ShootOptions) => Promise<Uint8Array>;
+};
+
+type GenerateInput = {
+    /** The site's production URL. */
+    url: string;
+    /** Airtable site slug; drives the attachment filename. */
+    slug?: string;
+    /** Injected browser IO (tests). */
+    shooter?: Shooter;
+    /** Per-site settle override for animation-heavy or consent-gated homepages. */
+    settleMs?: number;
+};
+type GeneratedHeaderImage = {
+    bytes: Uint8Array;
+    /** The domain as printed on the plate. */
+    domain: string;
+    filename: string;
+    contentType: "image/jpeg";
+};
+/** Strip scheme, leading www and any path — the plate prints a bare domain. */
+declare function domainFromUrl(url: string): string;
+/** Capture a site's homepage and composite its header image. */
+declare function generateHeaderImage(input: GenerateInput): Promise<GeneratedHeaderImage>;
+
+type RefreshHeaderDeps = {
+    generate?: (input: {
+        url: string;
+        slug?: string;
+    }) => Promise<GeneratedHeaderImage>;
+    upload?: (recordId: string, field: string, bytes: Uint8Array, filename: string, contentType: string) => Promise<void>;
+};
 type DraftOptions = {
     /** Where to write the local preview HTML when `previewOnly`. Defaults to `reports/<slug>/draft.html`. */
     previewPath?: string;
@@ -772,6 +827,10 @@ type DraftOptions = {
     /** The mapped ReportRow being completed, returned as `reportRow` from the
      *  complete path so callers keep the same shape they get on the create path. */
     existingRow?: ReportRow;
+    /** Injected deps for the draft-time header refresh, or `false` to skip it
+     *  entirely. Tests set `false` (or a stub) so a unit suite never launches a
+     *  browser or resolves DNS. Production leaves it unset and gets the real thing. */
+    refreshHeader?: RefreshHeaderDeps | false;
 };
 /** An enrichment fetch that *errored* (not one that was legitimately skipped
  *  because it isn't configured / the site lacks the inputs). Surfaced so a
@@ -1142,4 +1201,7 @@ declare function renderCockpitHtml(model: CockpitModel): string;
  */
 declare function verifyBasicAuth(authHeader: string | null | undefined, expectedPassword: string | null): boolean;
 
-export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, localPath, onboard, renderCockpitHtml, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, svelteCodemods, upgradeSvelte4to5, verifyBasicAuth };
+/** Read the bundled 2400x3200 plate. */
+declare function loadPlate(): Promise<Uint8Array>;
+
+export { ALL_AUDIT_NAMES, ALL_RECIPE_NAMES, type AirtableInventoryOptions, AuditName, AuditResult, BLURRED_CID, type BumpDepsOptions, type BundledImage, CHECK_CID, type ConvertToPnpmOptions, DEFAULT_INIT_STEPS, type DraftOptions, type DraftResult, type DueItem, type GenerateInput, type GeneratedHeaderImage, type HeaderImage, type InitOptions, type InitResult, type InitStep, type InitStepResult, InventoryProvider, type LighthouseScores, type LocalPathOptions, type OnboardAudit, type OnboardOptions, type OrchestrateOptions, RecipeName, RecipeResult, type RefreshHeaderDeps, type RenderResult, type ReportData, type ReportType, Site, type UpgradeSvelte4to5Options, a11yAudit, a11yFixturesPage, bumpDeps, convertToPnpm, depsAudit, domainFromUrl, draftReportForSite, findDueReports, fromAirtableBase, fromJsonFile, generateHeaderImage, init, isRecipeName, lighthouseAudit, lintAudit, loadBundledImages, loadPlate, localPath, onboard, renderCockpitHtml, renderReportHtml, renderSiteDashboardHtml, runAudits, runAuditsAcross, securityAudit, selfCaretRange, selfPackageVersion, sendApprovedReports, svelteCodemods, upgradeSvelte4to5, verifyBasicAuth };

package/dist/index.js

@@ -1,15 +1,20 @@
+import "./chunk-CZAMYVOP.js";
 import {
   draftReportForSite
-} from "./chunk-NUIBQPB3.js";
-import "./chunk-KLVMJYZZ.js";
-import "./chunk-RHPDQW6D.js";
-import "./chunk-6OYICQSJ.js";
+} from "./chunk-6SZBNALD.js";
+import "./chunk-SEQA7MC3.js";
+import {
+  domainFromUrl,
+  generateHeaderImage,
+  loadPlate
+} from "./chunk-37S6L6G4.js";
 import {
   approveBlockers
-} from "./chunk-HBFMTM2E.js";
+} from "./chunk-JTRTG5CU.js";
 import {
   findDueReports
 } from "./chunk-D4FVAIEJ.js";
+import "./chunk-RHPDQW6D.js";
 import {
   upgradeSvelte4to5
 } from "./chunk-ZO7WNY57.js";
@@ -17,7 +22,7 @@ import {
   DEFAULT_INIT_STEPS,
   a11yFixturesPage,
   init
-} from "./chunk-KKL3RYFQ.js";
+} from "./chunk-DYKG53IR.js";
 import {
   convertToPnpm
 } from "./chunk-2X322ZES.js";
@@ -37,7 +42,7 @@ import {
   parseAddresses,
   sendApprovedReports,
   withGlobalCc
-} from "./chunk-IDBMYDVH.js";
+} from "./chunk-4VAUSRSS.js";
 import "./chunk-GECESMVS.js";
 import {
   BLURRED_CID,
@@ -50,7 +55,8 @@ import {
   loadBundledImages,
   renderReportHtml,
   safeUrl
-} from "./chunk-JCITWZQR.js";
+} from "./chunk-MNE374CZ.js";
+import "./chunk-MPBXOJ3N.js";
 import "./chunk-WEKL2HYJ.js";
 import {
   bumpDeps
@@ -73,7 +79,7 @@ import {
   runAudits,
   runAuditsAcross,
   securityAudit
-} from "./chunk-PERP7LSS.js";
+} from "./chunk-3U3IGVAQ.js";
 import "./chunk-GASBX52O.js";
 import "./chunk-YEGHUODU.js";
 import "./chunk-LKGVSM2O.js";
@@ -606,8 +612,23 @@ th, td { text-align: left; padding: 0.5rem; border-bottom: 1px solid #eee; }
 @media (prefers-color-scheme: dark) { th, td { border-color: #2a2a2a; } }
 .muted { color: #999; }
 .empty { color: #999; padding: 1rem; border: 1px dashed #ccc; border-radius: 6px; text-align: center; }
-button.approve { font: inherit; padding: 0.35rem 0.85rem; border: 1px solid #2c7; border-radius: 6px; background: #2c7; color: #fff; cursor: pointer; }
+button.approve { font: inherit; padding: 0.35rem 0.85rem; border: 1px solid #2c7; border-radius: 6px; background: #2c7; color: #fff; cursor: pointer; position: relative; transition: background-color 0.12s ease, border-color 0.12s ease; }
+button.approve:hover:not(:disabled) { background: #25b36a; border-color: #25b36a; }
+button.approve:active:not(:disabled) { background: #1e9a5b; border-color: #1e9a5b; }
+button.approve:focus-visible { outline: 2px solid #2c7; outline-offset: 2px; }
 button.approve:disabled { opacity: 0.6; cursor: default; }
+/* In-flight: the label goes transparent rather than being removed, so the button keeps
+   its exact width and the row never reflows mid-request. The spinner is a pseudo-element,
+   NOT injected markup \u2014 this handler is deliberately textContent/title-only so server
+   strings can never become HTML, and a ::after keeps that property intact. */
+button.approve.is-loading { color: transparent; cursor: progress; }
+button.approve.is-loading::after { content: ""; position: absolute; top: 50%; left: 50%; width: 0.85em; height: 0.85em; margin: -0.45em 0 0 -0.45em; border: 2px solid #ffffff80; border-top-color: transparent; border-radius: 50%; animation: approve-spin 0.8s linear infinite; }
+@keyframes approve-spin { to { transform: rotate(360deg); } }
+/* Never remove the spin outright \u2014 a frozen ring reads as "hung". Slow it instead. */
+@media (prefers-reduced-motion: reduce) { button.approve.is-loading::after { animation-duration: 2.4s; } }
+/* Terminal success. Wins over :disabled's dimming (the button stays disabled after a
+   successful approve, and a 0.6-opacity "Approved" reads as not-quite-done). */
+button.approve.is-approved, button.approve.is-approved:disabled { background: #14663c; border-color: #14663c; color: #fff; opacity: 1; }
 .pending-info { display: flex; flex-wrap: wrap; gap: 0.35rem 1rem; font-size: 0.82rem; margin: 0.3rem 0 0.15rem; }
 .recipients-missing { color: #e57373; }
 .preflight { font-size: 0.78rem; padding: 0.1rem 0.45rem; border-radius: 999px; white-space: nowrap; }
@@ -677,12 +698,17 @@ button.approve:disabled { opacity: 0.6; cursor: default; }
 }
 .pill { font-size: 0.75rem; padding: 0.1rem 0.5rem; border-radius: 999px; font-weight: 700; }
 .override { margin: 0.4rem 0 0.15rem 0.25rem; }
-button.override-toggle { font: inherit; font-size: 0.78rem; padding: 0.15rem 0.6rem; border: 1px solid #b00; border-radius: 6px; background: transparent; color: #b00; cursor: pointer; }
-@media (prefers-color-scheme: dark) { button.override-toggle { border-color: #ff8a80; color: #ff8a80; } }
+button.override-toggle { font: inherit; font-size: 0.78rem; padding: 0.15rem 0.6rem; border: 1px solid #b00; border-radius: 6px; background: transparent; color: #b00; cursor: pointer; transition: background-color 0.12s ease; }
+button.override-toggle:hover { background: #bb00001a; }
+button.override-toggle:focus-visible { outline: 2px solid #b00; outline-offset: 2px; }
+@media (prefers-color-scheme: dark) { button.override-toggle { border-color: #ff8a80; color: #ff8a80; } button.override-toggle:hover { background: #ff8a801f; } button.override-toggle:focus-visible { outline-color: #ff8a80; } }
 .override-form { margin-top: 0.35rem; display: flex; flex-wrap: wrap; gap: 0.4rem; align-items: center; }
 .override-reason { font: inherit; font-size: 0.85rem; padding: 0.25rem 0.45rem; border: 1px solid #ccc; border-radius: 4px; background: transparent; color: inherit; min-width: 220px; flex: 1 1 220px; }
 @media (prefers-color-scheme: dark) { .override-reason { border-color: #444; } }
-button.override-submit { font: inherit; font-size: 0.8rem; padding: 0.25rem 0.7rem; border: 1px solid #b00; border-radius: 6px; background: #b00; color: #fff; cursor: pointer; }
+button.override-submit { font: inherit; font-size: 0.8rem; padding: 0.25rem 0.7rem; border: 1px solid #b00; border-radius: 6px; background: #b00; color: #fff; cursor: pointer; transition: background-color 0.12s ease, border-color 0.12s ease; }
+button.override-submit:hover:not(:disabled) { background: #900; border-color: #900; }
+button.override-submit:active:not(:disabled) { background: #7a0000; border-color: #7a0000; }
+button.override-submit:focus-visible { outline: 2px solid #b00; outline-offset: 2px; }
 button.override-submit:disabled { opacity: 0.6; cursor: default; }
 .override-status { font-size: 0.78rem; color: #999; }
 .vuln-list { list-style: none; padding: 0; margin: 0; }
@@ -704,7 +730,10 @@ button.override-submit:disabled { opacity: 0.6; cursor: default; }
 .detail dd input, .detail dd select, .detail dd textarea { width: 100%; box-sizing: border-box; font: inherit; padding: 0.25rem 0.4rem; border: 1px solid #ccc; border-radius: 4px; background: transparent; color: inherit; }
 .detail dd textarea { min-height: 3.5rem; resize: vertical; }
 .detail-saved { font-size: 0.8rem; color: #2a8; }
-button.trigger-renovate { font: inherit; font-size: 0.8rem; padding: 0.15rem 0.6rem; margin-left: 0.5rem; border: 1px solid #888; border-radius: 6px; background: transparent; color: inherit; cursor: pointer; }
+button.trigger-renovate { font: inherit; font-size: 0.8rem; padding: 0.15rem 0.6rem; margin-left: 0.5rem; border: 1px solid #888; border-radius: 6px; background: transparent; color: inherit; cursor: pointer; transition: background-color 0.12s ease, border-color 0.12s ease; }
+button.trigger-renovate:hover:not(:disabled) { background: #88888822; border-color: #666; }
+button.trigger-renovate:focus-visible { outline: 2px solid #888; outline-offset: 2px; }
+button.trigger-renovate:disabled { opacity: 0.6; cursor: default; }
 /* Alarm chip strip \u2014 mirrors fleet-render.ts chip styles (NOT the page's .pill classes). */
 .chips { display: flex; flex-wrap: wrap; gap: 0.4rem; }
 .chip { font-size: 0.8rem; padding: 0.1rem 0.5rem; border-radius: 6px; background: #f0f0f0; }
@@ -779,18 +808,31 @@ function renderSiteDashboardHtml(site, reports, submissions = [], spamTotals = n
     document.querySelectorAll("button.approve").forEach((b) => {
       b.addEventListener("click", async () => {
         b.disabled = true;
+        // is-loading swaps the label for a spinner; aria-busy is the same news for a
+        // screen reader, which cannot see it. Both are cleared in the finally below so
+        // no exit path can strand the button spinning forever.
+        b.classList.add("is-loading");
+        b.setAttribute("aria-busy", "true");
         try {
           const res = await fetch(b.dataset.approveUrl, { method: "POST" });
           if (res.ok) {
             b.textContent = "Approved";
+            // Terminal success: darker green, and it stays disabled (approving twice is
+            // a no-op server-side, but the button should not invite the second click).
+            b.classList.add("is-approved");
           } else {
             // A 409 carries { reason, blockers } \u2014 surface WHY instead of a bare
             // "Failed" next to a possibly-stale green chip. textContent/title
             // assignment only (no innerHTML), so server strings stay inert.
             const data = await res.json().catch(() => null);
             b.textContent = data && data.reason === "send-blocked" ? "Blocked" : "Failed";
-            if (data && Array.isArray(data.blockers)) b.title = data.blockers.join("
-");
+            // Double-backslash, NOT single: this whole block lives inside the renderer's
+            // template literal, so a single-backslash escape is consumed HERE at build
+            // time and emits a real newline into the served HTML \u2014 an unterminated string
+            // literal that kills the parse of the entire script element, taking every
+            // handler on the page with it (exactly how approve/override/renovate went
+            // dead). Note this comment must also avoid backticks for the same reason.
+            if (data && Array.isArray(data.blockers)) b.title = data.blockers.join("\\n");
             b.disabled = false;
           }
         } catch {
@@ -798,6 +840,9 @@ function renderSiteDashboardHtml(site, reports, submissions = [], spamTotals = n
           // the button doesn't sit permanently disabled reading "Approve".
           b.textContent = "Failed";
           b.disabled = false;
+        } finally {
+          b.classList.remove("is-loading");
+          b.removeAttribute("aria-busy");
         }
       });
     });
@@ -1614,15 +1659,18 @@ export {
   bumpDeps,
   convertToPnpm,
   depsAudit,
+  domainFromUrl,
   draftReportForSite,
   findDueReports,
   fromAirtableBase,
   fromJsonFile,
+  generateHeaderImage,
   init,
   isRecipeName,
   lighthouseAudit,
   lintAudit,
   loadBundledImages,
+  loadPlate,
   localPath,
   onboard,
   renderCockpitHtml,