@reddoorla/maintenance 0.75.0 → 0.76.0

package/dist/chunk-37S6L6G4.js

@@ -0,0 +1,170 @@
+// src/reports/header-image/assets/index.ts
+import { readFile } from "fs/promises";
+import { existsSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+var PLATE = "plate.png";
+var cachedAssetsDir = null;
+function resolveAssetsDir() {
+  if (cachedAssetsDir) return cachedAssetsDir;
+  let dir = dirname(fileURLToPath(import.meta.url));
+  for (; ; ) {
+    for (const layout of ["src", "dist"]) {
+      const candidate = join(dir, layout, "reports", "header-image", "assets", PLATE);
+      if (existsSync(candidate)) {
+        cachedAssetsDir = dirname(candidate);
+        return cachedAssetsDir;
+      }
+    }
+    const parent = dirname(dir);
+    if (parent === dir) {
+      throw new Error(
+        `loadPlate: could not locate the header-image assets dir by walking up from ${fileURLToPath(import.meta.url)}. Checked both src/ and dist/ layouts.`
+      );
+    }
+    dir = parent;
+  }
+}
+async function loadPlate() {
+  return new Uint8Array(await readFile(join(resolveAssetsDir(), PLATE)));
+}
+
+// src/reports/header-image/index.ts
+import sharp2 from "sharp";
+
+// src/reports/header-image/capture.ts
+var VIEWPORT = { width: 1600, height: 1e3 };
+var DEVICE_SCALE_FACTOR = 2;
+var DEFAULT_SETTLE_MS = 2500;
+var NAV_TIMEOUT_MS = 6e4;
+var IDLE_BUDGET_MS = 3e3;
+async function captureHomepage(url, options = {}) {
+  const shooter = options.shooter ?? await defaultShooter();
+  return shooter.shoot({
+    url,
+    width: VIEWPORT.width,
+    height: VIEWPORT.height,
+    deviceScaleFactor: DEVICE_SCALE_FACTOR,
+    settleMs: options.settleMs ?? DEFAULT_SETTLE_MS
+  });
+}
+async function defaultShooter() {
+  const { chromium } = await import("@playwright/test");
+  return {
+    async shoot(opts) {
+      const browser = await chromium.launch();
+      try {
+        const page = await browser.newPage({
+          viewport: { width: opts.width, height: opts.height },
+          deviceScaleFactor: opts.deviceScaleFactor
+        });
+        await page.goto(opts.url, { waitUntil: "load", timeout: NAV_TIMEOUT_MS });
+        await page.waitForLoadState("networkidle", { timeout: IDLE_BUDGET_MS }).catch(() => {
+        });
+        await page.evaluate("document.fonts && document.fonts.ready");
+        await page.waitForTimeout(opts.settleMs);
+        const buf = await page.screenshot({ type: "png" });
+        return new Uint8Array(buf);
+      } finally {
+        await browser.close();
+      }
+    }
+  };
+}
+
+// src/reports/header-image/compose.ts
+import sharp from "sharp";
+
+// src/reports/header-image/geometry.ts
+var CANVAS = { width: 2400, height: 3200 };
+var SCREEN = { x: 302, y: 1913, w: 1349, h: 844 };
+var DOMAIN = {
+  x: 280,
+  baseline: 3020,
+  size: 80,
+  weight: 400,
+  color: "#747474"
+};
+var PAPER = "#fcfcfc";
+
+// src/reports/header-image/compose.ts
+var JPEG_QUALITY = 88;
+function escapeXml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function domainSvg(domain) {
+  return Buffer.from(
+    `<svg xmlns="http://www.w3.org/2000/svg" width="${CANVAS.width}" height="${CANVAS.height}">
+       <text x="${DOMAIN.x}" y="${DOMAIN.baseline}"
+             font-family="Helvetica Neue, Helvetica, Nimbus Sans, Arial, sans-serif"
+             font-size="${DOMAIN.size}" font-weight="${DOMAIN.weight}"
+             fill="${DOMAIN.color}">${escapeXml(domain)}</text>
+     </svg>`,
+    "utf-8"
+  );
+}
+async function composeHeaderImage(input) {
+  const screen = await sharp(Buffer.from(input.screenshot)).resize(SCREEN.w, SCREEN.h, { fit: "cover", position: "top" }).flatten({ background: PAPER }).toBuffer();
+  const layers = [{ input: screen, left: SCREEN.x, top: SCREEN.y }];
+  if (input.domain.trim().length > 0) {
+    layers.push({ input: domainSvg(input.domain), left: 0, top: 0 });
+  }
+  const out = await sharp(Buffer.from(input.plate)).composite(layers).jpeg({ quality: JPEG_QUALITY }).toBuffer();
+  return new Uint8Array(out);
+}
+
+// src/reports/header-image/index.ts
+function domainFromUrl(url) {
+  return new URL(url).hostname.replace(/^www\./, "");
+}
+async function assertNotBlank(shot) {
+  const { data, info } = await sharp2(Buffer.from(shot)).resize(64, 40, { fit: "fill" }).removeAlpha().raw().toBuffer({ resolveWithObject: true });
+  const total = info.width * info.height;
+  const at = (i) => data[i] ?? 0;
+  let sumR = 0;
+  let sumG = 0;
+  let sumB = 0;
+  for (let i = 0; i < data.length; i += info.channels) {
+    sumR += at(i);
+    sumG += at(i + 1);
+    sumB += at(i + 2);
+  }
+  const meanR = sumR / total;
+  const meanG = sumG / total;
+  const meanB = sumB / total;
+  let near = 0;
+  for (let i = 0; i < data.length; i += info.channels) {
+    if (Math.abs(at(i) - meanR) < 8 && Math.abs(at(i + 1) - meanG) < 8 && Math.abs(at(i + 2) - meanB) < 8) {
+      near++;
+    }
+  }
+  const uniform = near / total > 0.95;
+  const nearWhite = meanR > 240 && meanG > 240 && meanB > 240;
+  if (uniform && nearWhite) {
+    throw new Error(
+      "header-image: capture looks blank (near-white, >95% one colour) \u2014 keeping the existing header"
+    );
+  }
+}
+async function generateHeaderImage(input) {
+  const screenshot = await captureHomepage(input.url, {
+    ...input.shooter !== void 0 ? { shooter: input.shooter } : {},
+    ...input.settleMs !== void 0 ? { settleMs: input.settleMs } : {}
+  });
+  await assertNotBlank(screenshot);
+  const domain = domainFromUrl(input.url);
+  const bytes = await composeHeaderImage({
+    plate: await loadPlate(),
+    screenshot,
+    domain
+  });
+  const base = input.slug ?? domain.split(".")[0];
+  return { bytes, domain, filename: `${base}Header.jpg`, contentType: "image/jpeg" };
+}
+
+export {
+  loadPlate,
+  domainFromUrl,
+  generateHeaderImage
+};
+//# sourceMappingURL=chunk-37S6L6G4.js.map

package/dist/chunk-37S6L6G4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/header-image/assets/index.ts","../src/reports/header-image/index.ts","../src/reports/header-image/capture.ts","../src/reports/header-image/compose.ts","../src/reports/header-image/geometry.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst PLATE = \"plate.png\";\n\n// Walk up from this module's URL looking for the assets dir in either the dev\n// layout (src/reports/header-image/assets/) or the published layout\n// (dist/reports/header-image/assets/). REQUIRED because tsup inlines this module\n// into dist/cli/bin.js — so import.meta.url-based sibling resolution looks in\n// dist/cli/ and fails with ENOENT. This exact bug shipped in 0.10.0-0.10.1 for\n// the maintenance-email assets; tests passed in dev because vitest evaluates the\n// source file, where import.meta.url is already correct. Only `pnpm test:dist`\n// catches a regression here.\nlet cachedAssetsDir: string | null = null;\nfunction resolveAssetsDir(): string {\n  if (cachedAssetsDir) return cachedAssetsDir;\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (;;) {\n    for (const layout of [\"src\", \"dist\"]) {\n      const candidate = join(dir, layout, \"reports\", \"header-image\", \"assets\", PLATE);\n      if (existsSync(candidate)) {\n        cachedAssetsDir = dirname(candidate);\n        return cachedAssetsDir;\n      }\n    }\n    const parent = dirname(dir);\n    if (parent === dir) {\n      throw new Error(\n        `loadPlate: could not locate the header-image assets dir by walking up from ${fileURLToPath(import.meta.url)}. Checked both src/ and dist/ layouts.`,\n      );\n    }\n    dir = parent;\n  }\n}\n\n/** Read the bundled 2400x3200 plate. */\nexport async function loadPlate(): Promise<Uint8Array> {\n  return new Uint8Array(await readFile(join(resolveAssetsDir(), PLATE)));\n}\n","import sharp from \"sharp\";\nimport { captureHomepage, type Shooter } from \"./capture.js\";\nimport { composeHeaderImage } from \"./compose.js\";\nimport { loadPlate } from \"./assets/index.js\";\n\nexport type GenerateInput = {\n  /** The site's production URL. */\n  url: string;\n  /** Airtable site slug; drives the attachment filename. */\n  slug?: string;\n  /** Injected browser IO (tests). */\n  shooter?: Shooter;\n  /** Per-site settle override for animation-heavy or consent-gated homepages. */\n  settleMs?: number;\n};\n\nexport type GeneratedHeaderImage = {\n  bytes: Uint8Array;\n  /** The domain as printed on the plate. */\n  domain: string;\n  filename: string;\n  contentType: \"image/jpeg\";\n};\n\n/** Strip scheme, leading www and any path — the plate prints a bare domain. */\nexport function domainFromUrl(url: string): string {\n  return new URL(url).hostname.replace(/^www\\./, \"\");\n}\n\n/**\n * A capture is \"blank\" when it is almost entirely near-white — a consent gate,\n * a failed render (blank canvas), or a shot fired before first paint. The\n * operator reviews the rendered email before sending, so this is a backstop\n * rather than the only gate; its job is to stop an obviously broken shot from\n * replacing a good stored header.\n *\n * Uniformity alone is NOT the signal: a homepage with a large solid-colour\n * hero (any brand colour) is legitimately uniform but not blank. Only\n * near-white uniformity is flagged, since every real failure mode here\n * (consent overlay, unrendered canvas, pre-paint flash) lands on a white\n * background.\n */\nasync function assertNotBlank(shot: Uint8Array): Promise<void> {\n  const { data, info } = await sharp(Buffer.from(shot))\n    .resize(64, 40, { fit: \"fill\" })\n    .removeAlpha()\n    .raw()\n    .toBuffer({ resolveWithObject: true });\n  const total = info.width * info.height;\n  const at = (i: number): number => data[i] ?? 0;\n\n  let sumR = 0;\n  let sumG = 0;\n  let sumB = 0;\n  for (let i = 0; i < data.length; i += info.channels) {\n    sumR += at(i);\n    sumG += at(i + 1);\n    sumB += at(i + 2);\n  }\n  const meanR = sumR / total;\n  const meanG = sumG / total;\n  const meanB = sumB / total;\n\n  let near = 0;\n  for (let i = 0; i < data.length; i += info.channels) {\n    if (\n      Math.abs(at(i) - meanR) < 8 &&\n      Math.abs(at(i + 1) - meanG) < 8 &&\n      Math.abs(at(i + 2) - meanB) < 8\n    ) {\n      near++;\n    }\n  }\n\n  const uniform = near / total > 0.95;\n  const nearWhite = meanR > 240 && meanG > 240 && meanB > 240;\n  if (uniform && nearWhite) {\n    throw new Error(\n      \"header-image: capture looks blank (near-white, >95% one colour) — keeping the existing header\",\n    );\n  }\n}\n\n/** Capture a site's homepage and composite its header image. */\nexport async function generateHeaderImage(input: GenerateInput): Promise<GeneratedHeaderImage> {\n  const screenshot = await captureHomepage(input.url, {\n    ...(input.shooter !== undefined ? { shooter: input.shooter } : {}),\n    ...(input.settleMs !== undefined ? { settleMs: input.settleMs } : {}),\n  });\n  await assertNotBlank(screenshot);\n\n  const domain = domainFromUrl(input.url);\n  const bytes = await composeHeaderImage({\n    plate: await loadPlate(),\n    screenshot,\n    domain,\n  });\n  const base = input.slug ?? domain.split(\".\")[0];\n  return { bytes, domain, filename: `${base}Header.jpg`, contentType: \"image/jpeg\" };\n}\n","/** Viewport matching the plate's MacBook screen aspect (16:10), so the crop in\n *  compose.ts is a no-op for a well-behaved homepage. */\nconst VIEWPORT = { width: 1600, height: 1000 } as const;\n/** 2x so the 1349px-wide screen rect is fed real pixels, not upscaled ones. */\nconst DEVICE_SCALE_FACTOR = 2;\n/** Entrance animations and webfonts settle before the shutter. Measured against\n *  live fleet sites; overridable per site because consent gates and long\n *  animations vary. */\nconst DEFAULT_SETTLE_MS = 2500;\n/** Budget for the `load` milestone — the navigation we actually gate on.\n *\n *  Do NOT put `waitUntil: \"networkidle\"` back on the `goto`. Measured across all\n *  14 live fleet sites (30s timeout): `load` succeeded on 14/14 in 346–1205ms,\n *  while `networkidle` NEVER fired on 4 of them (ERP Industrials, Vineyard,\n *  Revogen, 1836dig) — chat widgets, analytics polling and websockets hold the\n *  connection open forever, so `goto` threw and those sites could never get a\n *  header image at all. */\nconst NAV_TIMEOUT_MS = 60_000;\n/** Best-effort extra wait for network idle, applied *after* `load` and with its\n *  rejection swallowed. The 10 sites that do settle still get the benefit; the 4\n *  that never will just proceed. 3s is sized from the measurement above: the\n *  slowest site that does reach idle took 4078ms from `goto` start, and by the\n *  time this runs the `load` milestone (~0.3–1.2s) has already passed, so 3s\n *  covers the real remaining settle time without stalling the never-idle sites. */\nconst IDLE_BUDGET_MS = 3_000;\n\nexport type ShootOptions = {\n  url: string;\n  width: number;\n  height: number;\n  deviceScaleFactor: number;\n  settleMs: number;\n};\n\n/** Injected browser IO. The real impl drives Playwright; tests pass a fake. */\nexport type Shooter = {\n  shoot: (opts: ShootOptions) => Promise<Uint8Array>;\n};\n\nexport type CaptureOptions = {\n  shooter?: Shooter;\n  settleMs?: number;\n};\n\n/**\n * Screenshot a site's homepage for the header image.\n *\n * Viewport-only, never `fullPage`: the plate shows a laptop screen, not a\n * scroll. Failures propagate — a caller must be able to keep the site's existing\n * header rather than overwrite it with a broken shot.\n */\nexport async function captureHomepage(\n  url: string,\n  options: CaptureOptions = {},\n): Promise<Uint8Array> {\n  const shooter = options.shooter ?? (await defaultShooter());\n  return shooter.shoot({\n    url,\n    width: VIEWPORT.width,\n    height: VIEWPORT.height,\n    deviceScaleFactor: DEVICE_SCALE_FACTOR,\n    settleMs: options.settleMs ?? DEFAULT_SETTLE_MS,\n  });\n}\n\n/** Real Playwright shooter. Lazily imported so unit tests never load it and the\n *  static import graph stays central-dep-free for `test:dist`. */\nexport async function defaultShooter(): Promise<Shooter> {\n  const { chromium } = await import(\"@playwright/test\");\n  return {\n    async shoot(opts) {\n      const browser = await chromium.launch();\n      try {\n        const page = await browser.newPage({\n          viewport: { width: opts.width, height: opts.height },\n          deviceScaleFactor: opts.deviceScaleFactor,\n        });\n        await page.goto(opts.url, { waitUntil: \"load\", timeout: NAV_TIMEOUT_MS });\n        // Best-effort only — a site that never idles must still be captured.\n        await page.waitForLoadState(\"networkidle\", { timeout: IDLE_BUDGET_MS }).catch(() => {});\n        await page.evaluate(\"document.fonts && document.fonts.ready\");\n        await page.waitForTimeout(opts.settleMs);\n        const buf = await page.screenshot({ type: \"png\" });\n        return new Uint8Array(buf);\n      } finally {\n        await browser.close();\n      }\n    },\n  };\n}\n","import sharp from \"sharp\";\nimport type { OverlayOptions } from \"sharp\";\nimport { CANVAS, SCREEN, DOMAIN, PAPER } from \"./geometry.js\";\n\nexport type ComposeInput = {\n  /** The bundled 2400x3200 plate. */\n  plate: Uint8Array;\n  /** A homepage screenshot, any size. Cropped to fill the screen rect. */\n  screenshot: Uint8Array;\n  /** The site's public domain, drawn bottom-left (e.g. \"gallerysonder.com\"). */\n  domain: string;\n};\n\n/** JPEG quality. The hand-made headers are ~2.4MB; 88 lands near 0.7MB with no\n *  visible difference at the 600px the email actually renders. */\nconst JPEG_QUALITY = 88;\n\n/** Escape the five XML metacharacters. The domain is interpolated into an SVG,\n *  and a bare `&` yields invalid XML that sharp rejects outright. */\nfunction escapeXml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&apos;\");\n}\n\n/**\n * The domain line as a transparent SVG overlay the size of the full canvas, so\n * it can be composited at 0,0 and positioned by its own coordinates.\n *\n * ⚠️ FONT AVAILABILITY IS ENVIRONMENT-DEPENDENT. sharp renders SVG through\n * librsvg + fontconfig, so the family below resolves against INSTALLED fonts.\n * On macOS it resolves to real Helvetica Neue, which reproduces the hand-made\n * reference exactly (verified: ink box dx=0 dy=0 dw=0 dh=0). A stock\n * ubuntu-latest runner has none of Helvetica Neue / Helvetica / Arial, so it\n * falls through to `sans-serif` — typically DejaVu Sans, which is wider and\n * would render a visibly different domain line.\n *\n * This matters because report drafting (which regenerates the header) runs on\n * ubuntu-latest in `.github/workflows/daily-reports.yml`. That workflow now\n * installs `fonts-urw-base35`, which provides Nimbus Sans — metrically\n * equivalent to Helvetica and third in the stack below — so a CI-generated\n * header's domain line matches a locally-generated one. Any OTHER environment\n * that runs this code still needs a Helvetica-metric font installed.\n */\nfunction domainSvg(domain: string): Buffer {\n  return Buffer.from(\n    `<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"${CANVAS.width}\" height=\"${CANVAS.height}\">\n       <text x=\"${DOMAIN.x}\" y=\"${DOMAIN.baseline}\"\n             font-family=\"Helvetica Neue, Helvetica, Nimbus Sans, Arial, sans-serif\"\n             font-size=\"${DOMAIN.size}\" font-weight=\"${DOMAIN.weight}\"\n             fill=\"${DOMAIN.color}\">${escapeXml(domain)}</text>\n     </svg>`,\n    \"utf-8\",\n  );\n}\n\n/**\n * Composite one site's header image: paste its homepage screenshot into the\n * plate's laptop screen and draw its domain underneath.\n *\n * PURE — no browser, no network, no filesystem. Fidelity lives here, so it must\n * be verifiable in a unit test.\n *\n * The screenshot is cropped to FILL the 16:10 screen from the top: a taller\n * homepage loses its fold rather than being squashed, which would be obvious\n * and wrong. `flatten` guards against a transparent source punching a hole in\n * the plate.\n */\nexport async function composeHeaderImage(input: ComposeInput): Promise<Uint8Array> {\n  const screen = await sharp(Buffer.from(input.screenshot))\n    .resize(SCREEN.w, SCREEN.h, { fit: \"cover\", position: \"top\" })\n    .flatten({ background: PAPER })\n    .toBuffer();\n\n  const layers: OverlayOptions[] = [{ input: screen, left: SCREEN.x, top: SCREEN.y }];\n  if (input.domain.trim().length > 0) {\n    layers.push({ input: domainSvg(input.domain), left: 0, top: 0 });\n  }\n\n  const out = await sharp(Buffer.from(input.plate))\n    .composite(layers)\n    .jpeg({ quality: JPEG_QUALITY })\n    .toBuffer();\n  return new Uint8Array(out);\n}\n","// Measured off the real plate, not guessed.\n//\n// SCREEN is the hole INSIDE the laptop bezel. It is derived from the bezel —\n// a perfectly flat black frame (luminance 0.0) — because that is\n// content-independent. Deriving it from content instead (diffing two headers for\n// pixels that vary) yields x=282 y=1856 w=1394 h=871, which is WRONG: that rect\n// spans the laptop's outer panel, covering the bezel on three sides while\n// falling ~29px short at the bottom, so the plate's baked-in screenshot shows\n// as a strip under every site's content.\n//\n// Cross-checked: the photo-to-flat-black transition at the bottom of the plate\n// lands at y=2756, exactly SCREEN.y + SCREEN.h - 1.\n//\n// Re-measure only if the Figma template changes — and if you do, find the bezel.\n\n/** The plate's pixel dimensions — Figma frame 600x800 exported at 4x. */\nexport const CANVAS = { width: 2400, height: 3200 } as const;\n\n/** The MacBook Pro screen the site screenshot is pasted into — the area inside\n *  the bezel, so the bezel stays visible around the content exactly as it does\n *  in the hand-made headers. Aspect 1.5983 (16:10 to within 0.1%). */\nexport const SCREEN = { x: 302, y: 1913, w: 1349, h: 844 } as const;\n\n/** The per-site domain line, bottom left.\n *\n *  Solved against the hand-made reference rather than guessed: rendering\n *  \"gallerysonder.com\" with these values reproduces Sonder's original ink box\n *  (x=283 y=2963 w=645 h=74) EXACTLY — dx=0 dy=0 dw=0 dh=0. A sweep over sizes\n *  62-88 at weights 300/400 has a single exact solution at size 80 / weight 400.\n *\n *  `baseline` is the text baseline in canvas pixels; the ink box sits above it\n *  by the cap height and below by the descender. */\nexport const DOMAIN = {\n  x: 280,\n  baseline: 3020,\n  size: 80,\n  weight: 400,\n  color: \"#747474\",\n} as const;\n\n/** Flat paper tone, used as the compositing background so a transparent or\n *  short source can never punch a hole in the plate. */\nexport const PAPER = \"#fcfcfc\" as const;\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAC3B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAE9B,IAAM,QAAQ;AAUd,IAAI,kBAAiC;AACrC,SAAS,mBAA2B;AAClC,MAAI,gBAAiB,QAAO;AAC5B,MAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;AAChD,aAAS;AACP,eAAW,UAAU,CAAC,OAAO,MAAM,GAAG;AACpC,YAAM,YAAY,KAAK,KAAK,QAAQ,WAAW,gBAAgB,UAAU,KAAK;AAC9E,UAAI,WAAW,SAAS,GAAG;AACzB,0BAAkB,QAAQ,SAAS;AACnC,eAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,KAAK;AAClB,YAAM,IAAI;AAAA,QACR,8EAA8E,cAAc,YAAY,GAAG,CAAC;AAAA,MAC9G;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,YAAiC;AACrD,SAAO,IAAI,WAAW,MAAM,SAAS,KAAK,iBAAiB,GAAG,KAAK,CAAC,CAAC;AACvE;;;ACxCA,OAAOA,YAAW;;;ACElB,IAAM,WAAW,EAAE,OAAO,MAAM,QAAQ,IAAK;AAE7C,IAAM,sBAAsB;AAI5B,IAAM,oBAAoB;AAS1B,IAAM,iBAAiB;AAOvB,IAAM,iBAAiB;AA2BvB,eAAsB,gBACpB,KACA,UAA0B,CAAC,GACN;AACrB,QAAM,UAAU,QAAQ,WAAY,MAAM,eAAe;AACzD,SAAO,QAAQ,MAAM;AAAA,IACnB;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,QAAQ,SAAS;AAAA,IACjB,mBAAmB;AAAA,IACnB,UAAU,QAAQ,YAAY;AAAA,EAChC,CAAC;AACH;AAIA,eAAsB,iBAAmC;AACvD,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,SAAO;AAAA,IACL,MAAM,MAAM,MAAM;AAChB,YAAM,UAAU,MAAM,SAAS,OAAO;AACtC,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,QAAQ;AAAA,UACjC,UAAU,EAAE,OAAO,KAAK,OAAO,QAAQ,KAAK,OAAO;AAAA,UACnD,mBAAmB,KAAK;AAAA,QAC1B,CAAC;AACD,cAAM,KAAK,KAAK,KAAK,KAAK,EAAE,WAAW,QAAQ,SAAS,eAAe,CAAC;AAExE,cAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,eAAe,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AACtF,cAAM,KAAK,SAAS,wCAAwC;AAC5D,cAAM,KAAK,eAAe,KAAK,QAAQ;AACvC,cAAM,MAAM,MAAM,KAAK,WAAW,EAAE,MAAM,MAAM,CAAC;AACjD,eAAO,IAAI,WAAW,GAAG;AAAA,MAC3B,UAAE;AACA,cAAM,QAAQ,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AACF;;;ACzFA,OAAO,WAAW;;;ACgBX,IAAM,SAAS,EAAE,OAAO,MAAM,QAAQ,KAAK;AAK3C,IAAM,SAAS,EAAE,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;AAWlD,IAAM,SAAS;AAAA,EACpB,GAAG;AAAA,EACH,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AACT;AAIO,IAAM,QAAQ;;;AD3BrB,IAAM,eAAe;AAIrB,SAAS,UAAU,GAAmB;AACpC,SAAO,EACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,QAAQ;AAC3B;AAqBA,SAAS,UAAU,QAAwB;AACzC,SAAO,OAAO;AAAA,IACZ,kDAAkD,OAAO,KAAK,aAAa,OAAO,MAAM;AAAA,kBAC1E,OAAO,CAAC,QAAQ,OAAO,QAAQ;AAAA;AAAA,0BAEvB,OAAO,IAAI,kBAAkB,OAAO,MAAM;AAAA,qBAC/C,OAAO,KAAK,KAAK,UAAU,MAAM,CAAC;AAAA;AAAA,IAEnD;AAAA,EACF;AACF;AAcA,eAAsB,mBAAmB,OAA0C;AACjF,QAAM,SAAS,MAAM,MAAM,OAAO,KAAK,MAAM,UAAU,CAAC,EACrD,OAAO,OAAO,GAAG,OAAO,GAAG,EAAE,KAAK,SAAS,UAAU,MAAM,CAAC,EAC5D,QAAQ,EAAE,YAAY,MAAM,CAAC,EAC7B,SAAS;AAEZ,QAAM,SAA2B,CAAC,EAAE,OAAO,QAAQ,MAAM,OAAO,GAAG,KAAK,OAAO,EAAE,CAAC;AAClF,MAAI,MAAM,OAAO,KAAK,EAAE,SAAS,GAAG;AAClC,WAAO,KAAK,EAAE,OAAO,UAAU,MAAM,MAAM,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;AAAA,EACjE;AAEA,QAAM,MAAM,MAAM,MAAM,OAAO,KAAK,MAAM,KAAK,CAAC,EAC7C,UAAU,MAAM,EAChB,KAAK,EAAE,SAAS,aAAa,CAAC,EAC9B,SAAS;AACZ,SAAO,IAAI,WAAW,GAAG;AAC3B;;;AF9DO,SAAS,cAAc,KAAqB;AACjD,SAAO,IAAI,IAAI,GAAG,EAAE,SAAS,QAAQ,UAAU,EAAE;AACnD;AAeA,eAAe,eAAe,MAAiC;AAC7D,QAAM,EAAE,MAAM,KAAK,IAAI,MAAMC,OAAM,OAAO,KAAK,IAAI,CAAC,EACjD,OAAO,IAAI,IAAI,EAAE,KAAK,OAAO,CAAC,EAC9B,YAAY,EACZ,IAAI,EACJ,SAAS,EAAE,mBAAmB,KAAK,CAAC;AACvC,QAAM,QAAQ,KAAK,QAAQ,KAAK;AAChC,QAAM,KAAK,CAAC,MAAsB,KAAK,CAAC,KAAK;AAE7C,MAAI,OAAO;AACX,MAAI,OAAO;AACX,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,UAAU;AACnD,YAAQ,GAAG,CAAC;AACZ,YAAQ,GAAG,IAAI,CAAC;AAChB,YAAQ,GAAG,IAAI,CAAC;AAAA,EAClB;AACA,QAAM,QAAQ,OAAO;AACrB,QAAM,QAAQ,OAAO;AACrB,QAAM,QAAQ,OAAO;AAErB,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,UAAU;AACnD,QACE,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,KAC1B,KAAK,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,KAC9B,KAAK,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,GAC9B;AACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,QAAQ;AAC/B,QAAM,YAAY,QAAQ,OAAO,QAAQ,OAAO,QAAQ;AACxD,MAAI,WAAW,WAAW;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAGA,eAAsB,oBAAoB,OAAqD;AAC7F,QAAM,aAAa,MAAM,gBAAgB,MAAM,KAAK;AAAA,IAClD,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IAChE,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,EACrE,CAAC;AACD,QAAM,eAAe,UAAU;AAE/B,QAAM,SAAS,cAAc,MAAM,GAAG;AACtC,QAAM,QAAQ,MAAM,mBAAmB;AAAA,IACrC,OAAO,MAAM,UAAU;AAAA,IACvB;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,OAAO,MAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,CAAC;AAC9C,SAAO,EAAE,OAAO,QAAQ,UAAU,GAAG,IAAI,cAAc,aAAa,aAAa;AACnF;","names":["sharp","sharp"]}

package/dist/{chunk-PERP7LSS.js → chunk-3U3IGVAQ.js}

@@ -1243,6 +1243,34 @@ async function discoverRoutes(deployedUrl, deps, cap = DEFAULT_CAP) {
 }
 
 // src/audits/browser.ts
+function sameSiteHost(a, b) {
+  const ha = a.toLowerCase();
+  const hb = b.toLowerCase();
+  return ha === hb || ha.endsWith(`.${hb}`) || hb.endsWith(`.${ha}`);
+}
+async function canonicalizeBaseUrl(baseUrl, verify) {
+  if (!verify.fetchRedirect) return { url: baseUrl };
+  let origin;
+  try {
+    origin = new URL(baseUrl);
+  } catch {
+    return { url: baseUrl };
+  }
+  const seen = await verify.fetchRedirect(baseUrl);
+  const isRedirect = seen.status !== null && [301, 302, 307, 308].includes(seen.status) && (seen.location ?? "") !== "";
+  if (!isRedirect) return { url: baseUrl };
+  let target;
+  try {
+    target = new URL(seen.location, baseUrl);
+  } catch {
+    return { url: baseUrl };
+  }
+  if (target.protocol !== "http:" && target.protocol !== "https:") return { url: baseUrl };
+  if (!sameSiteHost(origin.hostname, target.hostname)) {
+    return { url: baseUrl, offsiteLocation: target.href };
+  }
+  return { url: target.href, redirectedFrom: baseUrl };
+}
 function isBroken(status) {
   return status === null || status >= 400;
 }
@@ -1398,19 +1426,25 @@ function summarizeBrowser(routes, links, familyCounts) {
     if (urls.length > 1) titleMetaProblems.push(`duplicate title "${t}": ${urls.join(" + ")}`);
   }
   const titleMetaOk = routes.length > 0 && titleMetaProblems.length === 0;
+  const templateProblems = routes.flatMap(
+    (r) => (r.leakedTemplateTokens ?? []).map((t) => `${r.url}: unsubstituted ${t}`)
+  );
+  const templateOk = templateProblems.length === 0;
   const engines = [...new Set(desktopChecks.map((d) => d.engine))];
   const devices = [...new Set(mobileChecks.map((m) => m.device))];
   const families = Object.entries(familyCounts).map(([f, n]) => f === "/" ? "/" : `${f} \xD7${n}`).join(", ");
   const firstOf = (xs, n) => xs.slice(0, n).join("; ") + (xs.length > n ? ` (+${xs.length - n} more)` : "");
-  const note = `${routes.length} routes (${families}); desktop ${engines.join("/") || "\u2014"}; mobile ${devices.join("/") || "\u2014"}; ${links.length} links, ${brokenLinks} broken` + (unreachableUrls.length > 0 ? `; unreachable: ${firstOf(unreachableUrls, 3)}` : "") + (titleMetaProblems.length > 0 ? `; title/meta: ${firstOf(titleMetaProblems, 3)}` : "") + (desktopFailures.length > 0 ? `; desktop failing: ${firstOf(desktopFailures, 3)}` : "") + (mobileFailures.length > 0 ? `; mobile failing: ${firstOf(mobileFailures, 3)}` : "") + (brokenLinkUrls.length > 0 ? `; broken: ${firstOf(brokenLinkUrls, 3)}` : "");
+  const note = `${routes.length} routes (${families}); desktop ${engines.join("/") || "\u2014"}; mobile ${devices.join("/") || "\u2014"}; ${links.length} links, ${brokenLinks} broken` + (unreachableUrls.length > 0 ? `; unreachable: ${firstOf(unreachableUrls, 3)}` : "") + (titleMetaProblems.length > 0 ? `; title/meta: ${firstOf(titleMetaProblems, 3)}` : "") + (templateProblems.length > 0 ? `; template: ${firstOf(templateProblems, 3)}` : "") + (desktopFailures.length > 0 ? `; desktop failing: ${firstOf(desktopFailures, 3)}` : "") + (mobileFailures.length > 0 ? `; mobile failing: ${firstOf(mobileFailures, 3)}` : "") + (brokenLinkUrls.length > 0 ? `; broken: ${firstOf(brokenLinkUrls, 3)}` : "");
   return {
     desktopOk,
     mobileOk,
     linksOk,
     reachableOk,
     titleMetaOk,
+    templateOk,
     unreachableUrls,
     titleMetaProblems,
+    templateProblems,
     desktopFailures,
     mobileFailures,
     brokenLinkUrls,
@@ -1430,7 +1464,8 @@ async function browserAudit(ctx) {
   const verifyDeps = ctx.verifyDeps ?? defaultVerifyDeps();
   const runner = ctx.browserRunner ?? await defaultBrowserRunner();
   try {
-    const discovered = await discoverRoutes(site.deployedUrl, discoverDeps);
+    const canonical = await canonicalizeBaseUrl(site.deployedUrl, verifyDeps);
+    const discovered = await discoverRoutes(canonical.url, discoverDeps);
     const probed = await runner.probe(discovered.routes);
     const { routes: reverifiedRoutes, reverified } = await reverifyRoutes(probed, verifyDeps);
     const { routes: routeResults, excused } = excuseChallengedEngineChecks(reverifiedRoutes);
@@ -1453,8 +1488,8 @@ async function browserAudit(ctx) {
     const linkReverifiedUrls = clearedLinks.map(
       (v) => `${v.url}: first check saw ${v.firstStatus ?? "no response"}, plain re-fetch ${v.fetchedStatus}`
     );
-    const note = summary.note + (cleared.length > 0 ? `; ${cleared.length} route(s) re-verified reachable by plain fetch after a browser-side challenge/flake` : "") + (excused.length > 0 ? `; ${excused.length} engine/device check(s) excused (challenge on a re-verified-reachable route)` : "") + (clearedLinks.length > 0 ? `; ${clearedLinks.length} link(s) re-verified ok by plain fetch after cooldown` : "");
-    const status = summary.desktopOk && summary.mobileOk && summary.linksOk ? "pass" : "warn";
+    const note = summary.note + (cleared.length > 0 ? `; ${cleared.length} route(s) re-verified reachable by plain fetch after a browser-side challenge/flake` : "") + (excused.length > 0 ? `; ${excused.length} engine/device check(s) excused (challenge on a re-verified-reachable route)` : "") + (clearedLinks.length > 0 ? `; ${clearedLinks.length} link(s) re-verified ok by plain fetch after cooldown` : "") + (canonical.redirectedFrom ? `; base url redirects to its canonical host \u2014 probed ${canonical.url}` : "") + (canonical.offsiteLocation ? `; base url redirects OFF-SITE to ${canonical.offsiteLocation} \u2014 not followed; update the site's url` : "");
+    const status = summary.desktopOk && summary.mobileOk && summary.linksOk && summary.templateOk ? "pass" : "warn";
     return {
       audit: "browser",
       site: label,
@@ -1466,6 +1501,10 @@ async function browserAudit(ctx) {
         reverifiedUrls,
         excusedEngineChecks: excused,
         linkReverifiedUrls,
+        // Canonicalization evidence (spread-conditional — exactOptionalPropertyTypes idiom):
+        // which base was actually probed, and any off-site redirect the operator must act on.
+        ...canonical.redirectedFrom ? { canonicalBaseUrl: canonical.url, canonicalizedFrom: canonical.redirectedFrom } : {},
+        ...canonical.offsiteLocation ? { offsiteRedirect: canonical.offsiteLocation } : {},
         checkedAt: now.toISOString()
       }
     };
@@ -1506,6 +1545,19 @@ function defaultVerifyDeps() {
       } catch {
         return { status: null, title: null, metaDescription: null };
       }
+    },
+    // Base-URL preflight for canonicalizeBaseUrl: one no-follow GET so the redirect target is
+    // observable (redirect:"follow" would hide it). Errors degrade to null = "no redirect seen".
+    fetchRedirect: async (url) => {
+      try {
+        const res = await fetch(url, {
+          redirect: "manual",
+          signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+        });
+        return { status: res.status, location: res.headers.get("location") };
+      } catch {
+        return { status: null, location: null };
+      }
     }
   };
 }
@@ -1534,6 +1586,7 @@ async function defaultBrowserRunner() {
           let status = null;
           let title = null;
           let metaDescription = null;
+          let leakedTemplateTokens = [];
           for (let i = 0; i < desktopEngines.length; i++) {
             const engine = desktopEngines[i].engine;
             const browser = browsers[i];
@@ -1565,6 +1618,10 @@ async function defaultBrowserRunner() {
                   } catch {
                   }
                 }
+                const html = resp ? await resp.text().catch(() => "") : "";
+                leakedTemplateTokens = [
+                  ...new Set(html.match(/%sveltekit\.[a-zA-Z0-9_.]+%/g) ?? [])
+                ];
               }
             } catch {
               ok = false;
@@ -1590,8 +1647,9 @@ async function defaultBrowserRunner() {
                 timeout: PAGE_TIMEOUT_MS
               });
               navStatus = resp ? resp.status() : null;
+              const hasMain = await page.locator("main, [role=main]").first().isVisible().catch(() => false);
               const overflow = await page.evaluate("document.documentElement.scrollWidth > window.innerWidth + 2").catch(() => true);
-              ok = !!resp && resp.ok() && errors.length === 0 && !overflow;
+              ok = !!resp && resp.ok() && errors.length === 0 && !overflow && hasMain;
             } catch {
               ok = false;
             } finally {
@@ -1607,7 +1665,8 @@ async function defaultBrowserRunner() {
             links: [...linkSet],
             status,
             title,
-            metaDescription
+            metaDescription,
+            leakedTemplateTokens
           });
         }
       } finally {
@@ -1910,6 +1969,13 @@ async function smokeAudit(ctx) {
       }
     }
   }
+  try {
+    await spawn("pnpm", ["exec", "svelte-kit", "sync"], {
+      cwd: site.path,
+      timeoutMs: 6e4
+    });
+  } catch {
+  }
   const port = await findFreePort();
   let raw;
   try {
@@ -1947,7 +2013,7 @@ async function smokeAudit(ctx) {
 
 // src/audits/form-e2e.ts
 var CF_TEST_SITEKEY = "1x00000000000000000000AA";
-var CONTACT_PATH = "/contact";
+var CONTACT_PATHS = ["/contact", "/"];
 var LIVE_ENV_VAR = "REDDOOR_FORM_E2E_LIVE";
 function liveRunnerEnabled(env = process.env) {
   return env[LIVE_ENV_VAR] === "1" || env[LIVE_ENV_VAR] === "true";
@@ -2007,6 +2073,19 @@ async function formE2eAudit(ctx) {
 var FILL_SETTLE_MS = 1200;
 var PAGE_TIMEOUT_MS2 = 3e4;
 var HEALTH_TIMEOUT_MS2 = 1e4;
+async function findFormPath(page, baseUrl, paths = CONTACT_PATHS) {
+  for (const path of paths) {
+    const url = new URL(path, baseUrl).toString();
+    const resp = await page.goto(url, { waitUntil: "domcontentloaded", timeout: PAGE_TIMEOUT_MS2 }).catch(() => null);
+    if (!resp || !resp.ok()) continue;
+    const forms = await page.locator("form").count().catch(() => 0);
+    if (forms === 0) continue;
+    const emails = await page.locator('input[name="email"], input[type="email"]').count().catch(() => 0);
+    if (emails === 0) continue;
+    return url;
+  }
+  return null;
+}
 async function declaresTestModeForwarding(baseUrl) {
   try {
     const res = await fetch(new URL("/health", baseUrl), {
@@ -2033,11 +2112,8 @@ async function defaultFormRunner() {
       try {
         const ctx = await browser.newContext();
         const page = await ctx.newPage();
-        const url = new URL(CONTACT_PATH, baseUrl).toString();
-        const resp = await page.goto(url, { waitUntil: "domcontentloaded", timeout: PAGE_TIMEOUT_MS2 }).catch(() => null);
-        const form = page.locator("form").first();
-        const hasForm = !!resp && resp.ok() && await form.count().catch(() => 0) > 0 && await page.locator('input[name="email"], input[type="email"]').count().catch(() => 0) > 0;
-        if (!hasForm) return { formPresent: false };
+        const found = await findFormPath(page, baseUrl);
+        if (!found) return { formPresent: false };
         await page.fill('[name="name"]', "Reddoor Monitor").catch(() => {
         });
         await page.fill('[name="email"]', "monitor+e2e@reddoorla.com").catch(() => {
@@ -2146,4 +2222,4 @@ export {
   runAudits,
   runAuditsAcross
 };
-//# sourceMappingURL=chunk-PERP7LSS.js.map
+//# sourceMappingURL=chunk-3U3IGVAQ.js.map