@reddoorla/maintenance 0.75.1 → 0.78.0

package/dist/{bump-deps-OQR3IXLN.js → bump-deps-XB2LJTVN.js}

@@ -11,8 +11,8 @@ import {
 } from "./chunk-4BHNP6Y2.js";
 import {
   bumpDeps
-} from "./chunk-D3DQFC32.js";
-import "./chunk-XKOZUVK2.js";
+} from "./chunk-ATJ6ZA2V.js";
+import "./chunk-ZTPPCHDB.js";
 import "./chunk-FDIFTIXC.js";
 import "./chunk-HVOOCK6L.js";
 import "./chunk-XXTZBPUY.js";
@@ -57,4 +57,4 @@ async function runBumpDepsCommand(site, opts) {
 export {
   runBumpDepsCommand
 };
-//# sourceMappingURL=bump-deps-OQR3IXLN.js.map
+//# sourceMappingURL=bump-deps-XB2LJTVN.js.map

package/dist/{chunk-RHPDQW6D.js → chunk-2SLED3NB.js}

@@ -26,4 +26,4 @@ export {
   toStatus,
   toNotifyStatus
 };
-//# sourceMappingURL=chunk-RHPDQW6D.js.map
+//# sourceMappingURL=chunk-2SLED3NB.js.map

package/dist/{chunk-RHPDQW6D.js.map → chunk-2SLED3NB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/reports/submission-row.ts"],"sourcesContent":["import { SUBMISSION_FORM_TYPES, type FormType } from \"../forms/types.js\";\n\nexport { SUBMISSION_FORM_TYPES };\nexport type { FormType };\n\nexport const SUBMISSION_STATUSES = [\"new\", \"read\", \"archived\", \"spam\", \"spam_auto\"] as const;\nexport type SubmissionStatus = (typeof SUBMISSION_STATUSES)[number];\n\n// \"bounced\" (2026-07-16): Resend ACCEPTED the notification (\"sent\") but later\n// reported a bounce/complaint via webhook — the lead never reached the client\n// (the Espada failure mode: 4 of 8 notifications bounced with nothing alarming).\n// The resend-webhook maps the event back onto the submission by resend_message_id.\nexport const NOTIFY_STATUSES = [\"sent\", \"failed\", \"skipped\", \"bounced\"] as const;\nexport type NotifyStatus = (typeof NOTIFY_STATUSES)[number];\n\nexport function toFormType(raw: string | undefined): FormType {\n  if (raw && (SUBMISSION_FORM_TYPES as readonly string[]).includes(raw)) return raw as FormType;\n  if (raw)\n    console.warn(`[submissions] unknown Form type ${JSON.stringify(raw)} — treating as contact`);\n  return \"contact\";\n}\n\nexport function toStatus(raw: string | undefined): SubmissionStatus {\n  if (raw && (SUBMISSION_STATUSES as readonly string[]).includes(raw))\n    return raw as SubmissionStatus;\n  return \"new\";\n}\n\nexport function toNotifyStatus(raw: string | undefined): NotifyStatus {\n  if (raw && (NOTIFY_STATUSES as readonly string[]).includes(raw)) return raw as NotifyStatus;\n  return \"skipped\";\n}\n\nexport type SubmissionRow = {\n  id: string;\n  submissionId: number | null;\n  siteId: string;\n  formType: FormType;\n  name: string;\n  email: string;\n  phone: string | null;\n  message: string | null;\n  /** Raw JSON string of any site-specific fields the typed columns didn't claim. */\n  extraFields: string | null;\n  sourceUrl: string | null;\n  utm: string | null;\n  submittedAt: string | null;\n  status: SubmissionStatus;\n  notifyStatus: NotifyStatus;\n  resendMessageId: string | null;\n  /** Heuristic spam score at ingest time; null for pre-classifier / un-scored rows. */\n  spamScore?: number | null;\n  /** Comma-joined classifier reason codes (e.g. \"links:3,disposable-email\"); null when unscored. */\n  spamReason?: string | null;\n};\n\nexport type SubmissionInput = {\n  siteId: string;\n  formType: FormType;\n  name: string;\n  email: string;\n  phone?: string;\n  message?: string;\n  extraFields?: Record<string, unknown>;\n  sourceUrl?: string;\n  utm?: string;\n  submittedAt: Date;\n  status?: SubmissionStatus;\n  spamScore?: number | null;\n  spamReason?: string | null;\n};\n"],"mappings":";;;;;AAKO,IAAM,sBAAsB,CAAC,OAAO,QAAQ,YAAY,QAAQ,WAAW;AAO3E,IAAM,kBAAkB,CAAC,QAAQ,UAAU,WAAW,SAAS;AAG/D,SAAS,WAAW,KAAmC;AAC5D,MAAI,OAAQ,sBAA4C,SAAS,GAAG,EAAG,QAAO;AAC9E,MAAI;AACF,YAAQ,KAAK,mCAAmC,KAAK,UAAU,GAAG,CAAC,6BAAwB;AAC7F,SAAO;AACT;AAEO,SAAS,SAAS,KAA2C;AAClE,MAAI,OAAQ,oBAA0C,SAAS,GAAG;AAChE,WAAO;AACT,SAAO;AACT;AAEO,SAAS,eAAe,KAAuC;AACpE,MAAI,OAAQ,gBAAsC,SAAS,GAAG,EAAG,QAAO;AACxE,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/reports/submission-row.ts"],"sourcesContent":["import { SUBMISSION_FORM_TYPES, type FormType } from \"../forms/types.js\";\n\nexport { SUBMISSION_FORM_TYPES };\nexport type { FormType };\n\nexport const SUBMISSION_STATUSES = [\"new\", \"read\", \"archived\", \"spam\", \"spam_auto\"] as const;\nexport type SubmissionStatus = (typeof SUBMISSION_STATUSES)[number];\n\n// \"bounced\" (2026-07-16): Resend ACCEPTED the notification (\"sent\") but later\n// reported a bounce/complaint via webhook — the lead never reached the client\n// (the Espada failure mode: 4 of 8 notifications bounced with nothing alarming).\n// The resend-webhook maps the event back onto the submission by resend_message_id.\nexport const NOTIFY_STATUSES = [\"sent\", \"failed\", \"skipped\", \"bounced\"] as const;\nexport type NotifyStatus = (typeof NOTIFY_STATUSES)[number];\n\nexport function toFormType(raw: string | undefined): FormType {\n  if (raw && (SUBMISSION_FORM_TYPES as readonly string[]).includes(raw)) return raw as FormType;\n  if (raw)\n    console.warn(`[submissions] unknown Form type ${JSON.stringify(raw)} — treating as contact`);\n  return \"contact\";\n}\n\nexport function toStatus(raw: string | undefined): SubmissionStatus {\n  if (raw && (SUBMISSION_STATUSES as readonly string[]).includes(raw))\n    return raw as SubmissionStatus;\n  return \"new\";\n}\n\nexport function toNotifyStatus(raw: string | undefined): NotifyStatus {\n  if (raw && (NOTIFY_STATUSES as readonly string[]).includes(raw)) return raw as NotifyStatus;\n  return \"skipped\";\n}\n\nexport type SubmissionRow = {\n  id: string;\n  submissionId: number | null;\n  siteId: string;\n  formType: FormType;\n  name: string;\n  email: string;\n  phone: string | null;\n  message: string | null;\n  /** Raw JSON string of any site-specific fields the typed columns didn't claim. */\n  extraFields: string | null;\n  sourceUrl: string | null;\n  utm: string | null;\n  submittedAt: string | null;\n  status: SubmissionStatus;\n  notifyStatus: NotifyStatus;\n  resendMessageId: string | null;\n  /** Heuristic spam score at ingest time; null for pre-classifier / un-scored rows. */\n  spamScore?: number | null;\n  /** Comma-joined classifier reason codes (e.g. \"links:3,disposable-email\"); null when unscored. */\n  spamReason?: string | null;\n  /** Comma-joined newsletter fan-out outcome per destination — `webhook:ok`,\n   *  `mailchimp:401`, `mailchimp:threw`, `mailchimp-tags:failed`. Null means nothing\n   *  was attempted: a non-newsletter form, a spam row, a site with no destination\n   *  configured, or a row written before 0005. See ingest.ts for the token grammar. */\n  fanoutStatus?: string | null;\n};\n\nexport type SubmissionInput = {\n  siteId: string;\n  formType: FormType;\n  name: string;\n  email: string;\n  phone?: string;\n  message?: string;\n  extraFields?: Record<string, unknown>;\n  sourceUrl?: string;\n  utm?: string;\n  submittedAt: Date;\n  status?: SubmissionStatus;\n  spamScore?: number | null;\n  spamReason?: string | null;\n};\n"],"mappings":";;;;;AAKO,IAAM,sBAAsB,CAAC,OAAO,QAAQ,YAAY,QAAQ,WAAW;AAO3E,IAAM,kBAAkB,CAAC,QAAQ,UAAU,WAAW,SAAS;AAG/D,SAAS,WAAW,KAAmC;AAC5D,MAAI,OAAQ,sBAA4C,SAAS,GAAG,EAAG,QAAO;AAC9E,MAAI;AACF,YAAQ,KAAK,mCAAmC,KAAK,UAAU,GAAG,CAAC,6BAAwB;AAC7F,SAAO;AACT;AAEO,SAAS,SAAS,KAA2C;AAClE,MAAI,OAAQ,oBAA0C,SAAS,GAAG;AAChE,WAAO;AACT,SAAO;AACT;AAEO,SAAS,eAAe,KAAuC;AACpE,MAAI,OAAQ,gBAAsC,SAAS,GAAG,EAAG,QAAO;AACxE,SAAO;AACT;","names":[]}

package/dist/chunk-37S6L6G4.js

@@ -0,0 +1,170 @@
+// src/reports/header-image/assets/index.ts
+import { readFile } from "fs/promises";
+import { existsSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+var PLATE = "plate.png";
+var cachedAssetsDir = null;
+function resolveAssetsDir() {
+  if (cachedAssetsDir) return cachedAssetsDir;
+  let dir = dirname(fileURLToPath(import.meta.url));
+  for (; ; ) {
+    for (const layout of ["src", "dist"]) {
+      const candidate = join(dir, layout, "reports", "header-image", "assets", PLATE);
+      if (existsSync(candidate)) {
+        cachedAssetsDir = dirname(candidate);
+        return cachedAssetsDir;
+      }
+    }
+    const parent = dirname(dir);
+    if (parent === dir) {
+      throw new Error(
+        `loadPlate: could not locate the header-image assets dir by walking up from ${fileURLToPath(import.meta.url)}. Checked both src/ and dist/ layouts.`
+      );
+    }
+    dir = parent;
+  }
+}
+async function loadPlate() {
+  return new Uint8Array(await readFile(join(resolveAssetsDir(), PLATE)));
+}
+
+// src/reports/header-image/index.ts
+import sharp2 from "sharp";
+
+// src/reports/header-image/capture.ts
+var VIEWPORT = { width: 1600, height: 1e3 };
+var DEVICE_SCALE_FACTOR = 2;
+var DEFAULT_SETTLE_MS = 2500;
+var NAV_TIMEOUT_MS = 6e4;
+var IDLE_BUDGET_MS = 3e3;
+async function captureHomepage(url, options = {}) {
+  const shooter = options.shooter ?? await defaultShooter();
+  return shooter.shoot({
+    url,
+    width: VIEWPORT.width,
+    height: VIEWPORT.height,
+    deviceScaleFactor: DEVICE_SCALE_FACTOR,
+    settleMs: options.settleMs ?? DEFAULT_SETTLE_MS
+  });
+}
+async function defaultShooter() {
+  const { chromium } = await import("@playwright/test");
+  return {
+    async shoot(opts) {
+      const browser = await chromium.launch();
+      try {
+        const page = await browser.newPage({
+          viewport: { width: opts.width, height: opts.height },
+          deviceScaleFactor: opts.deviceScaleFactor
+        });
+        await page.goto(opts.url, { waitUntil: "load", timeout: NAV_TIMEOUT_MS });
+        await page.waitForLoadState("networkidle", { timeout: IDLE_BUDGET_MS }).catch(() => {
+        });
+        await page.evaluate("document.fonts && document.fonts.ready");
+        await page.waitForTimeout(opts.settleMs);
+        const buf = await page.screenshot({ type: "png" });
+        return new Uint8Array(buf);
+      } finally {
+        await browser.close();
+      }
+    }
+  };
+}
+
+// src/reports/header-image/compose.ts
+import sharp from "sharp";
+
+// src/reports/header-image/geometry.ts
+var CANVAS = { width: 2400, height: 3200 };
+var SCREEN = { x: 302, y: 1913, w: 1349, h: 844 };
+var DOMAIN = {
+  x: 280,
+  baseline: 3020,
+  size: 80,
+  weight: 400,
+  color: "#747474"
+};
+var PAPER = "#fcfcfc";
+
+// src/reports/header-image/compose.ts
+var JPEG_QUALITY = 88;
+function escapeXml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function domainSvg(domain) {
+  return Buffer.from(
+    `<svg xmlns="http://www.w3.org/2000/svg" width="${CANVAS.width}" height="${CANVAS.height}">
+       <text x="${DOMAIN.x}" y="${DOMAIN.baseline}"
+             font-family="Helvetica Neue, Helvetica, Nimbus Sans, Arial, sans-serif"
+             font-size="${DOMAIN.size}" font-weight="${DOMAIN.weight}"
+             fill="${DOMAIN.color}">${escapeXml(domain)}</text>
+     </svg>`,
+    "utf-8"
+  );
+}
+async function composeHeaderImage(input) {
+  const screen = await sharp(Buffer.from(input.screenshot)).resize(SCREEN.w, SCREEN.h, { fit: "cover", position: "top" }).flatten({ background: PAPER }).toBuffer();
+  const layers = [{ input: screen, left: SCREEN.x, top: SCREEN.y }];
+  if (input.domain.trim().length > 0) {
+    layers.push({ input: domainSvg(input.domain), left: 0, top: 0 });
+  }
+  const out = await sharp(Buffer.from(input.plate)).composite(layers).jpeg({ quality: JPEG_QUALITY }).toBuffer();
+  return new Uint8Array(out);
+}
+
+// src/reports/header-image/index.ts
+function domainFromUrl(url) {
+  return new URL(url).hostname.replace(/^www\./, "");
+}
+async function assertNotBlank(shot) {
+  const { data, info } = await sharp2(Buffer.from(shot)).resize(64, 40, { fit: "fill" }).removeAlpha().raw().toBuffer({ resolveWithObject: true });
+  const total = info.width * info.height;
+  const at = (i) => data[i] ?? 0;
+  let sumR = 0;
+  let sumG = 0;
+  let sumB = 0;
+  for (let i = 0; i < data.length; i += info.channels) {
+    sumR += at(i);
+    sumG += at(i + 1);
+    sumB += at(i + 2);
+  }
+  const meanR = sumR / total;
+  const meanG = sumG / total;
+  const meanB = sumB / total;
+  let near = 0;
+  for (let i = 0; i < data.length; i += info.channels) {
+    if (Math.abs(at(i) - meanR) < 8 && Math.abs(at(i + 1) - meanG) < 8 && Math.abs(at(i + 2) - meanB) < 8) {
+      near++;
+    }
+  }
+  const uniform = near / total > 0.95;
+  const nearWhite = meanR > 240 && meanG > 240 && meanB > 240;
+  if (uniform && nearWhite) {
+    throw new Error(
+      "header-image: capture looks blank (near-white, >95% one colour) \u2014 keeping the existing header"
+    );
+  }
+}
+async function generateHeaderImage(input) {
+  const screenshot = await captureHomepage(input.url, {
+    ...input.shooter !== void 0 ? { shooter: input.shooter } : {},
+    ...input.settleMs !== void 0 ? { settleMs: input.settleMs } : {}
+  });
+  await assertNotBlank(screenshot);
+  const domain = domainFromUrl(input.url);
+  const bytes = await composeHeaderImage({
+    plate: await loadPlate(),
+    screenshot,
+    domain
+  });
+  const base = input.slug ?? domain.split(".")[0];
+  return { bytes, domain, filename: `${base}Header.jpg`, contentType: "image/jpeg" };
+}
+
+export {
+  loadPlate,
+  domainFromUrl,
+  generateHeaderImage
+};
+//# sourceMappingURL=chunk-37S6L6G4.js.map

package/dist/chunk-37S6L6G4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/header-image/assets/index.ts","../src/reports/header-image/index.ts","../src/reports/header-image/capture.ts","../src/reports/header-image/compose.ts","../src/reports/header-image/geometry.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst PLATE = \"plate.png\";\n\n// Walk up from this module's URL looking for the assets dir in either the dev\n// layout (src/reports/header-image/assets/) or the published layout\n// (dist/reports/header-image/assets/). REQUIRED because tsup inlines this module\n// into dist/cli/bin.js — so import.meta.url-based sibling resolution looks in\n// dist/cli/ and fails with ENOENT. This exact bug shipped in 0.10.0-0.10.1 for\n// the maintenance-email assets; tests passed in dev because vitest evaluates the\n// source file, where import.meta.url is already correct. Only `pnpm test:dist`\n// catches a regression here.\nlet cachedAssetsDir: string | null = null;\nfunction resolveAssetsDir(): string {\n  if (cachedAssetsDir) return cachedAssetsDir;\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (;;) {\n    for (const layout of [\"src\", \"dist\"]) {\n      const candidate = join(dir, layout, \"reports\", \"header-image\", \"assets\", PLATE);\n      if (existsSync(candidate)) {\n        cachedAssetsDir = dirname(candidate);\n        return cachedAssetsDir;\n      }\n    }\n    const parent = dirname(dir);\n    if (parent === dir) {\n      throw new Error(\n        `loadPlate: could not locate the header-image assets dir by walking up from ${fileURLToPath(import.meta.url)}. Checked both src/ and dist/ layouts.`,\n      );\n    }\n    dir = parent;\n  }\n}\n\n/** Read the bundled 2400x3200 plate. */\nexport async function loadPlate(): Promise<Uint8Array> {\n  return new Uint8Array(await readFile(join(resolveAssetsDir(), PLATE)));\n}\n","import sharp from \"sharp\";\nimport { captureHomepage, type Shooter } from \"./capture.js\";\nimport { composeHeaderImage } from \"./compose.js\";\nimport { loadPlate } from \"./assets/index.js\";\n\nexport type GenerateInput = {\n  /** The site's production URL. */\n  url: string;\n  /** Airtable site slug; drives the attachment filename. */\n  slug?: string;\n  /** Injected browser IO (tests). */\n  shooter?: Shooter;\n  /** Per-site settle override for animation-heavy or consent-gated homepages. */\n  settleMs?: number;\n};\n\nexport type GeneratedHeaderImage = {\n  bytes: Uint8Array;\n  /** The domain as printed on the plate. */\n  domain: string;\n  filename: string;\n  contentType: \"image/jpeg\";\n};\n\n/** Strip scheme, leading www and any path — the plate prints a bare domain. */\nexport function domainFromUrl(url: string): string {\n  return new URL(url).hostname.replace(/^www\\./, \"\");\n}\n\n/**\n * A capture is \"blank\" when it is almost entirely near-white — a consent gate,\n * a failed render (blank canvas), or a shot fired before first paint. The\n * operator reviews the rendered email before sending, so this is a backstop\n * rather than the only gate; its job is to stop an obviously broken shot from\n * replacing a good stored header.\n *\n * Uniformity alone is NOT the signal: a homepage with a large solid-colour\n * hero (any brand colour) is legitimately uniform but not blank. Only\n * near-white uniformity is flagged, since every real failure mode here\n * (consent overlay, unrendered canvas, pre-paint flash) lands on a white\n * background.\n */\nasync function assertNotBlank(shot: Uint8Array): Promise<void> {\n  const { data, info } = await sharp(Buffer.from(shot))\n    .resize(64, 40, { fit: \"fill\" })\n    .removeAlpha()\n    .raw()\n    .toBuffer({ resolveWithObject: true });\n  const total = info.width * info.height;\n  const at = (i: number): number => data[i] ?? 0;\n\n  let sumR = 0;\n  let sumG = 0;\n  let sumB = 0;\n  for (let i = 0; i < data.length; i += info.channels) {\n    sumR += at(i);\n    sumG += at(i + 1);\n    sumB += at(i + 2);\n  }\n  const meanR = sumR / total;\n  const meanG = sumG / total;\n  const meanB = sumB / total;\n\n  let near = 0;\n  for (let i = 0; i < data.length; i += info.channels) {\n    if (\n      Math.abs(at(i) - meanR) < 8 &&\n      Math.abs(at(i + 1) - meanG) < 8 &&\n      Math.abs(at(i + 2) - meanB) < 8\n    ) {\n      near++;\n    }\n  }\n\n  const uniform = near / total > 0.95;\n  const nearWhite = meanR > 240 && meanG > 240 && meanB > 240;\n  if (uniform && nearWhite) {\n    throw new Error(\n      \"header-image: capture looks blank (near-white, >95% one colour) — keeping the existing header\",\n    );\n  }\n}\n\n/** Capture a site's homepage and composite its header image. */\nexport async function generateHeaderImage(input: GenerateInput): Promise<GeneratedHeaderImage> {\n  const screenshot = await captureHomepage(input.url, {\n    ...(input.shooter !== undefined ? { shooter: input.shooter } : {}),\n    ...(input.settleMs !== undefined ? { settleMs: input.settleMs } : {}),\n  });\n  await assertNotBlank(screenshot);\n\n  const domain = domainFromUrl(input.url);\n  const bytes = await composeHeaderImage({\n    plate: await loadPlate(),\n    screenshot,\n    domain,\n  });\n  const base = input.slug ?? domain.split(\".\")[0];\n  return { bytes, domain, filename: `${base}Header.jpg`, contentType: \"image/jpeg\" };\n}\n","/** Viewport matching the plate's MacBook screen aspect (16:10), so the crop in\n *  compose.ts is a no-op for a well-behaved homepage. */\nconst VIEWPORT = { width: 1600, height: 1000 } as const;\n/** 2x so the 1349px-wide screen rect is fed real pixels, not upscaled ones. */\nconst DEVICE_SCALE_FACTOR = 2;\n/** Entrance animations and webfonts settle before the shutter. Measured against\n *  live fleet sites; overridable per site because consent gates and long\n *  animations vary. */\nconst DEFAULT_SETTLE_MS = 2500;\n/** Budget for the `load` milestone — the navigation we actually gate on.\n *\n *  Do NOT put `waitUntil: \"networkidle\"` back on the `goto`. Measured across all\n *  14 live fleet sites (30s timeout): `load` succeeded on 14/14 in 346–1205ms,\n *  while `networkidle` NEVER fired on 4 of them (ERP Industrials, Vineyard,\n *  Revogen, 1836dig) — chat widgets, analytics polling and websockets hold the\n *  connection open forever, so `goto` threw and those sites could never get a\n *  header image at all. */\nconst NAV_TIMEOUT_MS = 60_000;\n/** Best-effort extra wait for network idle, applied *after* `load` and with its\n *  rejection swallowed. The 10 sites that do settle still get the benefit; the 4\n *  that never will just proceed. 3s is sized from the measurement above: the\n *  slowest site that does reach idle took 4078ms from `goto` start, and by the\n *  time this runs the `load` milestone (~0.3–1.2s) has already passed, so 3s\n *  covers the real remaining settle time without stalling the never-idle sites. */\nconst IDLE_BUDGET_MS = 3_000;\n\nexport type ShootOptions = {\n  url: string;\n  width: number;\n  height: number;\n  deviceScaleFactor: number;\n  settleMs: number;\n};\n\n/** Injected browser IO. The real impl drives Playwright; tests pass a fake. */\nexport type Shooter = {\n  shoot: (opts: ShootOptions) => Promise<Uint8Array>;\n};\n\nexport type CaptureOptions = {\n  shooter?: Shooter;\n  settleMs?: number;\n};\n\n/**\n * Screenshot a site's homepage for the header image.\n *\n * Viewport-only, never `fullPage`: the plate shows a laptop screen, not a\n * scroll. Failures propagate — a caller must be able to keep the site's existing\n * header rather than overwrite it with a broken shot.\n */\nexport async function captureHomepage(\n  url: string,\n  options: CaptureOptions = {},\n): Promise<Uint8Array> {\n  const shooter = options.shooter ?? (await defaultShooter());\n  return shooter.shoot({\n    url,\n    width: VIEWPORT.width,\n    height: VIEWPORT.height,\n    deviceScaleFactor: DEVICE_SCALE_FACTOR,\n    settleMs: options.settleMs ?? DEFAULT_SETTLE_MS,\n  });\n}\n\n/** Real Playwright shooter. Lazily imported so unit tests never load it and the\n *  static import graph stays central-dep-free for `test:dist`. */\nexport async function defaultShooter(): Promise<Shooter> {\n  const { chromium } = await import(\"@playwright/test\");\n  return {\n    async shoot(opts) {\n      const browser = await chromium.launch();\n      try {\n        const page = await browser.newPage({\n          viewport: { width: opts.width, height: opts.height },\n          deviceScaleFactor: opts.deviceScaleFactor,\n        });\n        await page.goto(opts.url, { waitUntil: \"load\", timeout: NAV_TIMEOUT_MS });\n        // Best-effort only — a site that never idles must still be captured.\n        await page.waitForLoadState(\"networkidle\", { timeout: IDLE_BUDGET_MS }).catch(() => {});\n        await page.evaluate(\"document.fonts && document.fonts.ready\");\n        await page.waitForTimeout(opts.settleMs);\n        const buf = await page.screenshot({ type: \"png\" });\n        return new Uint8Array(buf);\n      } finally {\n        await browser.close();\n      }\n    },\n  };\n}\n","import sharp from \"sharp\";\nimport type { OverlayOptions } from \"sharp\";\nimport { CANVAS, SCREEN, DOMAIN, PAPER } from \"./geometry.js\";\n\nexport type ComposeInput = {\n  /** The bundled 2400x3200 plate. */\n  plate: Uint8Array;\n  /** A homepage screenshot, any size. Cropped to fill the screen rect. */\n  screenshot: Uint8Array;\n  /** The site's public domain, drawn bottom-left (e.g. \"gallerysonder.com\"). */\n  domain: string;\n};\n\n/** JPEG quality. The hand-made headers are ~2.4MB; 88 lands near 0.7MB with no\n *  visible difference at the 600px the email actually renders. */\nconst JPEG_QUALITY = 88;\n\n/** Escape the five XML metacharacters. The domain is interpolated into an SVG,\n *  and a bare `&` yields invalid XML that sharp rejects outright. */\nfunction escapeXml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&apos;\");\n}\n\n/**\n * The domain line as a transparent SVG overlay the size of the full canvas, so\n * it can be composited at 0,0 and positioned by its own coordinates.\n *\n * ⚠️ FONT AVAILABILITY IS ENVIRONMENT-DEPENDENT. sharp renders SVG through\n * librsvg + fontconfig, so the family below resolves against INSTALLED fonts.\n * On macOS it resolves to real Helvetica Neue, which reproduces the hand-made\n * reference exactly (verified: ink box dx=0 dy=0 dw=0 dh=0). A stock\n * ubuntu-latest runner has none of Helvetica Neue / Helvetica / Arial, so it\n * falls through to `sans-serif` — typically DejaVu Sans, which is wider and\n * would render a visibly different domain line.\n *\n * This matters because report drafting (which regenerates the header) runs on\n * ubuntu-latest in `.github/workflows/daily-reports.yml`. That workflow now\n * installs `fonts-urw-base35`, which provides Nimbus Sans — metrically\n * equivalent to Helvetica and third in the stack below — so a CI-generated\n * header's domain line matches a locally-generated one. Any OTHER environment\n * that runs this code still needs a Helvetica-metric font installed.\n */\nfunction domainSvg(domain: string): Buffer {\n  return Buffer.from(\n    `<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"${CANVAS.width}\" height=\"${CANVAS.height}\">\n       <text x=\"${DOMAIN.x}\" y=\"${DOMAIN.baseline}\"\n             font-family=\"Helvetica Neue, Helvetica, Nimbus Sans, Arial, sans-serif\"\n             font-size=\"${DOMAIN.size}\" font-weight=\"${DOMAIN.weight}\"\n             fill=\"${DOMAIN.color}\">${escapeXml(domain)}</text>\n     </svg>`,\n    \"utf-8\",\n  );\n}\n\n/**\n * Composite one site's header image: paste its homepage screenshot into the\n * plate's laptop screen and draw its domain underneath.\n *\n * PURE — no browser, no network, no filesystem. Fidelity lives here, so it must\n * be verifiable in a unit test.\n *\n * The screenshot is cropped to FILL the 16:10 screen from the top: a taller\n * homepage loses its fold rather than being squashed, which would be obvious\n * and wrong. `flatten` guards against a transparent source punching a hole in\n * the plate.\n */\nexport async function composeHeaderImage(input: ComposeInput): Promise<Uint8Array> {\n  const screen = await sharp(Buffer.from(input.screenshot))\n    .resize(SCREEN.w, SCREEN.h, { fit: \"cover\", position: \"top\" })\n    .flatten({ background: PAPER })\n    .toBuffer();\n\n  const layers: OverlayOptions[] = [{ input: screen, left: SCREEN.x, top: SCREEN.y }];\n  if (input.domain.trim().length > 0) {\n    layers.push({ input: domainSvg(input.domain), left: 0, top: 0 });\n  }\n\n  const out = await sharp(Buffer.from(input.plate))\n    .composite(layers)\n    .jpeg({ quality: JPEG_QUALITY })\n    .toBuffer();\n  return new Uint8Array(out);\n}\n","// Measured off the real plate, not guessed.\n//\n// SCREEN is the hole INSIDE the laptop bezel. It is derived from the bezel —\n// a perfectly flat black frame (luminance 0.0) — because that is\n// content-independent. Deriving it from content instead (diffing two headers for\n// pixels that vary) yields x=282 y=1856 w=1394 h=871, which is WRONG: that rect\n// spans the laptop's outer panel, covering the bezel on three sides while\n// falling ~29px short at the bottom, so the plate's baked-in screenshot shows\n// as a strip under every site's content.\n//\n// Cross-checked: the photo-to-flat-black transition at the bottom of the plate\n// lands at y=2756, exactly SCREEN.y + SCREEN.h - 1.\n//\n// Re-measure only if the Figma template changes — and if you do, find the bezel.\n\n/** The plate's pixel dimensions — Figma frame 600x800 exported at 4x. */\nexport const CANVAS = { width: 2400, height: 3200 } as const;\n\n/** The MacBook Pro screen the site screenshot is pasted into — the area inside\n *  the bezel, so the bezel stays visible around the content exactly as it does\n *  in the hand-made headers. Aspect 1.5983 (16:10 to within 0.1%). */\nexport const SCREEN = { x: 302, y: 1913, w: 1349, h: 844 } as const;\n\n/** The per-site domain line, bottom left.\n *\n *  Solved against the hand-made reference rather than guessed: rendering\n *  \"gallerysonder.com\" with these values reproduces Sonder's original ink box\n *  (x=283 y=2963 w=645 h=74) EXACTLY — dx=0 dy=0 dw=0 dh=0. A sweep over sizes\n *  62-88 at weights 300/400 has a single exact solution at size 80 / weight 400.\n *\n *  `baseline` is the text baseline in canvas pixels; the ink box sits above it\n *  by the cap height and below by the descender. */\nexport const DOMAIN = {\n  x: 280,\n  baseline: 3020,\n  size: 80,\n  weight: 400,\n  color: \"#747474\",\n} as const;\n\n/** Flat paper tone, used as the compositing background so a transparent or\n *  short source can never punch a hole in the plate. */\nexport const PAPER = \"#fcfcfc\" as const;\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAC3B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAE9B,IAAM,QAAQ;AAUd,IAAI,kBAAiC;AACrC,SAAS,mBAA2B;AAClC,MAAI,gBAAiB,QAAO;AAC5B,MAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;AAChD,aAAS;AACP,eAAW,UAAU,CAAC,OAAO,MAAM,GAAG;AACpC,YAAM,YAAY,KAAK,KAAK,QAAQ,WAAW,gBAAgB,UAAU,KAAK;AAC9E,UAAI,WAAW,SAAS,GAAG;AACzB,0BAAkB,QAAQ,SAAS;AACnC,eAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,KAAK;AAClB,YAAM,IAAI;AAAA,QACR,8EAA8E,cAAc,YAAY,GAAG,CAAC;AAAA,MAC9G;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,YAAiC;AACrD,SAAO,IAAI,WAAW,MAAM,SAAS,KAAK,iBAAiB,GAAG,KAAK,CAAC,CAAC;AACvE;;;ACxCA,OAAOA,YAAW;;;ACElB,IAAM,WAAW,EAAE,OAAO,MAAM,QAAQ,IAAK;AAE7C,IAAM,sBAAsB;AAI5B,IAAM,oBAAoB;AAS1B,IAAM,iBAAiB;AAOvB,IAAM,iBAAiB;AA2BvB,eAAsB,gBACpB,KACA,UAA0B,CAAC,GACN;AACrB,QAAM,UAAU,QAAQ,WAAY,MAAM,eAAe;AACzD,SAAO,QAAQ,MAAM;AAAA,IACnB;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,QAAQ,SAAS;AAAA,IACjB,mBAAmB;AAAA,IACnB,UAAU,QAAQ,YAAY;AAAA,EAChC,CAAC;AACH;AAIA,eAAsB,iBAAmC;AACvD,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,SAAO;AAAA,IACL,MAAM,MAAM,MAAM;AAChB,YAAM,UAAU,MAAM,SAAS,OAAO;AACtC,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,QAAQ;AAAA,UACjC,UAAU,EAAE,OAAO,KAAK,OAAO,QAAQ,KAAK,OAAO;AAAA,UACnD,mBAAmB,KAAK;AAAA,QAC1B,CAAC;AACD,cAAM,KAAK,KAAK,KAAK,KAAK,EAAE,WAAW,QAAQ,SAAS,eAAe,CAAC;AAExE,cAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,eAAe,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AACtF,cAAM,KAAK,SAAS,wCAAwC;AAC5D,cAAM,KAAK,eAAe,KAAK,QAAQ;AACvC,cAAM,MAAM,MAAM,KAAK,WAAW,EAAE,MAAM,MAAM,CAAC;AACjD,eAAO,IAAI,WAAW,GAAG;AAAA,MAC3B,UAAE;AACA,cAAM,QAAQ,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AACF;;;ACzFA,OAAO,WAAW;;;ACgBX,IAAM,SAAS,EAAE,OAAO,MAAM,QAAQ,KAAK;AAK3C,IAAM,SAAS,EAAE,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;AAWlD,IAAM,SAAS;AAAA,EACpB,GAAG;AAAA,EACH,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AACT;AAIO,IAAM,QAAQ;;;AD3BrB,IAAM,eAAe;AAIrB,SAAS,UAAU,GAAmB;AACpC,SAAO,EACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,QAAQ;AAC3B;AAqBA,SAAS,UAAU,QAAwB;AACzC,SAAO,OAAO;AAAA,IACZ,kDAAkD,OAAO,KAAK,aAAa,OAAO,MAAM;AAAA,kBAC1E,OAAO,CAAC,QAAQ,OAAO,QAAQ;AAAA;AAAA,0BAEvB,OAAO,IAAI,kBAAkB,OAAO,MAAM;AAAA,qBAC/C,OAAO,KAAK,KAAK,UAAU,MAAM,CAAC;AAAA;AAAA,IAEnD;AAAA,EACF;AACF;AAcA,eAAsB,mBAAmB,OAA0C;AACjF,QAAM,SAAS,MAAM,MAAM,OAAO,KAAK,MAAM,UAAU,CAAC,EACrD,OAAO,OAAO,GAAG,OAAO,GAAG,EAAE,KAAK,SAAS,UAAU,MAAM,CAAC,EAC5D,QAAQ,EAAE,YAAY,MAAM,CAAC,EAC7B,SAAS;AAEZ,QAAM,SAA2B,CAAC,EAAE,OAAO,QAAQ,MAAM,OAAO,GAAG,KAAK,OAAO,EAAE,CAAC;AAClF,MAAI,MAAM,OAAO,KAAK,EAAE,SAAS,GAAG;AAClC,WAAO,KAAK,EAAE,OAAO,UAAU,MAAM,MAAM,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;AAAA,EACjE;AAEA,QAAM,MAAM,MAAM,MAAM,OAAO,KAAK,MAAM,KAAK,CAAC,EAC7C,UAAU,MAAM,EAChB,KAAK,EAAE,SAAS,aAAa,CAAC,EAC9B,SAAS;AACZ,SAAO,IAAI,WAAW,GAAG;AAC3B;;;AF9DO,SAAS,cAAc,KAAqB;AACjD,SAAO,IAAI,IAAI,GAAG,EAAE,SAAS,QAAQ,UAAU,EAAE;AACnD;AAeA,eAAe,eAAe,MAAiC;AAC7D,QAAM,EAAE,MAAM,KAAK,IAAI,MAAMC,OAAM,OAAO,KAAK,IAAI,CAAC,EACjD,OAAO,IAAI,IAAI,EAAE,KAAK,OAAO,CAAC,EAC9B,YAAY,EACZ,IAAI,EACJ,SAAS,EAAE,mBAAmB,KAAK,CAAC;AACvC,QAAM,QAAQ,KAAK,QAAQ,KAAK;AAChC,QAAM,KAAK,CAAC,MAAsB,KAAK,CAAC,KAAK;AAE7C,MAAI,OAAO;AACX,MAAI,OAAO;AACX,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,UAAU;AACnD,YAAQ,GAAG,CAAC;AACZ,YAAQ,GAAG,IAAI,CAAC;AAChB,YAAQ,GAAG,IAAI,CAAC;AAAA,EAClB;AACA,QAAM,QAAQ,OAAO;AACrB,QAAM,QAAQ,OAAO;AACrB,QAAM,QAAQ,OAAO;AAErB,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,UAAU;AACnD,QACE,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,KAC1B,KAAK,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,KAC9B,KAAK,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,GAC9B;AACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,QAAQ;AAC/B,QAAM,YAAY,QAAQ,OAAO,QAAQ,OAAO,QAAQ;AACxD,MAAI,WAAW,WAAW;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAGA,eAAsB,oBAAoB,OAAqD;AAC7F,QAAM,aAAa,MAAM,gBAAgB,MAAM,KAAK;AAAA,IAClD,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IAChE,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,EACrE,CAAC;AACD,QAAM,eAAe,UAAU;AAE/B,QAAM,SAAS,cAAc,MAAM,GAAG;AACtC,QAAM,QAAQ,MAAM,mBAAmB;AAAA,IACrC,OAAO,MAAM,UAAU;AAAA,IACvB;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,OAAO,MAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,CAAC;AAC9C,SAAO,EAAE,OAAO,QAAQ,UAAU,GAAG,IAAI,cAAc,aAAa,aAAa;AACnF;","names":["sharp","sharp"]}

package/dist/{chunk-HIN3P4ZN.js → chunk-4SOCPK7A.js}

@@ -62,6 +62,15 @@ var MIGRATIONS = [
   {
     id: "0004_add_spam_reason",
     sql: `ALTER TABLE submissions ADD COLUMN spam_reason TEXT;`
+  },
+  {
+    // Outcome of the newsletter fan-out (site webhook + Mailchimp). Before this the
+    // results were console.error-only, so a rotated Mailchimp key or an outage would
+    // silently stop signups reaching the audience with no trace anywhere the operator
+    // looks — the row still read `notify=sent`, healthy. Same non-idempotent
+    // ADD COLUMN caveat as 0003.
+    id: "0005_add_fanout_status",
+    sql: `ALTER TABLE submissions ADD COLUMN fanout_status TEXT;`
   }
 ];
 
@@ -96,4 +105,4 @@ async function runMigrations(client) {
 export {
   runMigrations
 };
-//# sourceMappingURL=chunk-HIN3P4ZN.js.map
+//# sourceMappingURL=chunk-4SOCPK7A.js.map

package/dist/chunk-4SOCPK7A.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/migrations.ts","../src/db/migrate.ts"],"sourcesContent":["/** Ordered, append-only list of standard-SQL migration scripts. Each runs once,\n *  tracked by `id` in the `_migrations` table (see migrate.ts). Statements use\n *  IF NOT EXISTS so even a partial re-apply is safe. Never edit a shipped script —\n *  add a new one. Every statement in a script MUST be independently idempotent:\n *  `migrate.ts` runs each script via `executeMultiple`, which is NOT transactional,\n *  so a mid-script failure can leave earlier statements applied and the id unrecorded\n *  — a re-run then re-executes the whole script. Standard SQLite SQL only (no\n *  Turso-specific syntax) so the host stays a connection-string swap. */\nexport type Migration = { id: string; sql: string };\n\nexport const MIGRATIONS: Migration[] = [\n  {\n    id: \"0001_init\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS submissions (\n        id TEXT PRIMARY KEY,\n        submission_id INTEGER,\n        site_id TEXT NOT NULL,\n        form_type TEXT NOT NULL,\n        name TEXT NOT NULL,\n        email TEXT NOT NULL,\n        phone TEXT,\n        message TEXT,\n        extra_fields TEXT,\n        source_url TEXT,\n        utm TEXT,\n        submitted_at TEXT,\n        status TEXT NOT NULL DEFAULT 'new',\n        notify_status TEXT NOT NULL DEFAULT 'skipped',\n        resend_message_id TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_submissions_site_submitted\n        ON submissions (site_id, submitted_at DESC);\n      CREATE INDEX IF NOT EXISTS idx_submissions_status\n        ON submissions (status);\n      CREATE TABLE IF NOT EXISTS spam_screenouts (\n        site_id TEXT NOT NULL,\n        date TEXT NOT NULL,\n        honeypot INTEGER NOT NULL DEFAULT 0,\n        too_fast INTEGER NOT NULL DEFAULT 0,\n        marked_spam INTEGER NOT NULL DEFAULT 0,\n        PRIMARY KEY (site_id, date)\n      );\n    `,\n  },\n  {\n    id: \"0002_fleet_events\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS fleet_events (\n        id TEXT PRIMARY KEY,\n        ts TEXT NOT NULL,\n        type TEXT NOT NULL,\n        site_id TEXT,\n        site_name TEXT,\n        summary TEXT NOT NULL,\n        data TEXT,\n        created_at TEXT NOT NULL\n      );\n      CREATE INDEX IF NOT EXISTS idx_fleet_events_ts ON fleet_events (ts);\n    `,\n  },\n  {\n    id: \"0003_add_spam_score\",\n    // SQLite `ADD COLUMN` has no `IF NOT EXISTS`, so it is NOT self-idempotent: if the\n    // `_migrations` marker is lost after the column is added (crash between statement\n    // and marker write), a re-run would throw `duplicate column name`. `migrate.ts`\n    // recognizes that error as already-applied and records the marker, keeping the\n    // runner idempotent (see `isAlreadyAppliedError`).\n    sql: `ALTER TABLE submissions ADD COLUMN spam_score REAL;`,\n  },\n  {\n    id: \"0004_add_spam_reason\",\n    sql: `ALTER TABLE submissions ADD COLUMN spam_reason TEXT;`,\n  },\n  {\n    // Outcome of the newsletter fan-out (site webhook + Mailchimp). Before this the\n    // results were console.error-only, so a rotated Mailchimp key or an outage would\n    // silently stop signups reaching the audience with no trace anywhere the operator\n    // looks — the row still read `notify=sent`, healthy. Same non-idempotent\n    // ADD COLUMN caveat as 0003.\n    id: \"0005_add_fanout_status\",\n    sql: `ALTER TABLE submissions ADD COLUMN fanout_status TEXT;`,\n  },\n];\n","import type { Client } from \"@libsql/client\";\nimport { MIGRATIONS } from \"./migrations.js\";\n\n/** True when an error means \"this DDL was already applied\" and re-applying is a\n *  no-op we can safely ignore. `CREATE ... IF NOT EXISTS` never throws, but SQLite\n *  `ALTER TABLE ... ADD COLUMN` has no `IF NOT EXISTS`, so a re-run after a lost\n *  `_migrations` marker throws `duplicate column name: …`. Treating that as\n *  already-applied keeps `runMigrations` idempotent for `ADD COLUMN` migrations —\n *  without it a lost marker would boot-loop `openDb()` on every call. */\nfunction isAlreadyAppliedError(err: unknown): boolean {\n  const message = err instanceof Error ? err.message : String(err);\n  return /duplicate column name/i.test(message);\n}\n\n/** Apply every not-yet-applied migration in order against a raw libSQL client,\n *  tracking applied ids in `_migrations`. Idempotent: ids already present are\n *  skipped, the DDL uses IF NOT EXISTS where it can, and an already-applied\n *  `ADD COLUMN` (recognized by its error) is swallowed so the marker is still\n *  recorded. Returns the ids applied this run. Runs on every openDb() — cheap\n *  (one indexed SELECT) and the gate every fresh Turso database needs before its\n *  first write. */\nexport async function runMigrations(client: Client): Promise<string[]> {\n  await client.execute(\n    \"CREATE TABLE IF NOT EXISTS _migrations (id TEXT PRIMARY KEY, applied_at TEXT NOT NULL)\",\n  );\n  const existing = await client.execute(\"SELECT id FROM _migrations\");\n  const applied = new Set(existing.rows.map((r) => String(r.id)));\n  const ran: string[] = [];\n  for (const m of MIGRATIONS) {\n    if (applied.has(m.id)) continue;\n    try {\n      await client.executeMultiple(m.sql);\n    } catch (err) {\n      // A re-run after a lost marker can re-execute a non-idempotent `ADD COLUMN`;\n      // treat \"already applied\" as success so we still record the marker below and\n      // never boot-loop. Any other error propagates unchanged.\n      if (!isAlreadyAppliedError(err)) throw err;\n    }\n    await client.execute({\n      sql: \"INSERT INTO _migrations (id, applied_at) VALUES (?, ?)\",\n      args: [m.id, new Date().toISOString()],\n    });\n    ran.push(m.id);\n  }\n  return ran;\n}\n"],"mappings":";AAUO,IAAM,aAA0B;AAAA,EACrC;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaP;AAAA,EACA;AAAA,IACE,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AACF;;;AC1EA,SAAS,sBAAsB,KAAuB;AACpD,QAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,SAAO,yBAAyB,KAAK,OAAO;AAC9C;AASA,eAAsB,cAAc,QAAmC;AACrE,QAAM,OAAO;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,MAAM,OAAO,QAAQ,4BAA4B;AAClE,QAAM,UAAU,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9D,QAAM,MAAgB,CAAC;AACvB,aAAW,KAAK,YAAY;AAC1B,QAAI,QAAQ,IAAI,EAAE,EAAE,EAAG;AACvB,QAAI;AACF,YAAM,OAAO,gBAAgB,EAAE,GAAG;AAAA,IACpC,SAAS,KAAK;AAIZ,UAAI,CAAC,sBAAsB,GAAG,EAAG,OAAM;AAAA,IACzC;AACA,UAAM,OAAO,QAAQ;AAAA,MACnB,KAAK;AAAA,MACL,MAAM,CAAC,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,CAAC;AAAA,IACvC,CAAC;AACD,QAAI,KAAK,EAAE,EAAE;AAAA,EACf;AACA,SAAO;AACT;","names":[]}

package/dist/{run-migration-LJNNZWIV.js → chunk-6DOFNDXU.js}

@@ -91,6 +91,7 @@ async function listAssetsByFilename(repo, token) {
     cursor = `&cursor=${encodeURIComponent(page.cursor)}`;
   }
 }
+var docRefKey = (type, uid) => `${type}::${uid}`;
 async function lookupDocIds(repo) {
   const access = process.env.PRISMIC_ACCESS_TOKEN;
   const qs = access ? `?access_token=${access}` : "";
@@ -107,7 +108,7 @@ async function lookupDocIds(repo) {
   while (url) {
     const res = await expectOk(await fetchWithRetry(url), "Document API search");
     const page = await res.json();
-    for (const d of page.results) if (d.uid) map.set(d.uid, d.id);
+    for (const d of page.results) if (d.uid) map.set(docRefKey(d.type, d.uid), d.id);
     url = page.next_page;
   }
   return map;
@@ -176,7 +177,7 @@ async function runMigration(plan, log = console.log) {
         throw new Error(`create ${doc.uid}: ${res.status} ${text}`);
       }
       docIds ??= await lookupDocIds(repo);
-      const id = docIds.get(doc.uid);
+      const id = docIds.get(docRefKey(doc.type, doc.uid));
       if (!id) {
         throw new Error(
           `update ${doc.uid}: the uid exists but is not visible on the master ref \u2014 most likely it sits in an UNPUBLISHED migration release; publish the release in the Prismic dashboard, then re-run to update` + (process.env.PRISMIC_ACCESS_TOKEN ? "" : " (if the repo's Document API is private, also set PRISMIC_ACCESS_TOKEN)")
@@ -198,8 +199,9 @@ async function runMigration(plan, log = console.log) {
   }
   return { assetsUploaded, assetsReused, docsCreated, docsUpdated, missingAssets, assetUrlByCdn };
 }
+
 export {
   pushCustomTypes,
   runMigration
 };
-//# sourceMappingURL=run-migration-LJNNZWIV.js.map
+//# sourceMappingURL=chunk-6DOFNDXU.js.map

package/dist/chunk-6DOFNDXU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/blux/emit/resolve-doc.ts","../src/blux/emit/run-migration.ts"],"sourcesContent":["import { htmlAsRichText } from \"@prismicio/migrate\";\n\n/** Resolve a PlanDocument's plain-JSON markers into Migration API values:\n *  `__richtext_html` → rich text nodes, `__asset_id` → `{ id }` using the\n *  uuid → Prismic-asset-id map (missing assets are dropped and reported).\n *  Pure, so the network shell in run-migration.ts stays untested-thin. */\nexport function resolveDocData(\n  data: Record<string, unknown>,\n  assetIdByUuid: Map<string, string>,\n): { data: Record<string, unknown>; missingAssets: string[] } {\n  const missing: string[] = [];\n  const resolve = (v: unknown): unknown => {\n    if (v && typeof v === \"object\") {\n      if (\"__richtext_html\" in v) {\n        return htmlAsRichText((v as { __richtext_html: string }).__richtext_html).result;\n      }\n      if (\"__asset_id\" in v) {\n        const uuid = (v as { __asset_id: string }).__asset_id;\n        const id = assetIdByUuid.get(uuid);\n        if (!id) {\n          missing.push(uuid);\n          return undefined;\n        }\n        return { id };\n      }\n      if (Array.isArray(v)) return v.map(resolve);\n      return Object.fromEntries(\n        Object.entries(v)\n          .map(([k, val]) => [k, resolve(val)] as const)\n          .filter(([, val]) => val !== undefined),\n      );\n    }\n    return v;\n  };\n  return { data: resolve(data) as Record<string, unknown>, missingAssets: missing };\n}\n","import type { MigrationPlan, PlanCustomType } from \"./plan.js\";\nimport { resolveDocData } from \"./resolve-doc.js\";\n\n/** LIVE runner on the raw Prismic APIs. Learned from the Pointe run\n *  (2026-07-06): the js client's migrate() creates docs hollow, PATCHes data\n *  in a later pass, swallows validation `details[]`, re-uploads every asset on\n *  retry, and cannot update existing docs. This runner: skips assets already\n *  in the library (by filename), POSTs documents and falls back to PUT when\n *  the uid exists (id looked up via the Document API), and surfaces full error\n *  bodies. Creds: PRISMIC_REPOSITORY_NAME + PRISMIC_WRITE_TOKEN (+ optional\n *  PRISMIC_ACCESS_TOKEN when the repo's Document API is private).\n *  Live I/O — excluded from unit coverage; resolveDocData carries the tested\n *  pure logic and Plan 4 Task 10 is the live acceptance run. */\n\nconst THROTTLE_MS = 1200; // migration API limit ~1 req/s\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n/** fetch with backoff on 429 — the Asset/Migration APIs rate-limit hard and a\n *  single 429 must not abort a minutes-long migration. */\nasync function fetchWithRetry(url: string, init?: RequestInit, tries = 4): Promise<Response> {\n  for (let i = 0; ; i++) {\n    const res = await fetch(url, init);\n    if (res.status !== 429 || i >= tries - 1) return res;\n    await sleep(1500 * (i + 1));\n  }\n}\n\nfunction readCreds(): { repo: string; token: string } {\n  const repo = process.env.PRISMIC_REPOSITORY_NAME;\n  const token = process.env.PRISMIC_WRITE_TOKEN;\n  if (!repo || !token) throw new Error(\"Set PRISMIC_REPOSITORY_NAME and PRISMIC_WRITE_TOKEN\");\n  return { repo, token };\n}\n\nconst apiHeaders = (repo: string, token: string) => ({\n  repository: repo,\n  Authorization: `Bearer ${token}`,\n});\n\nasync function expectOk(res: Response, what: string): Promise<Response> {\n  if (res.ok) return res;\n  throw new Error(`${what}: ${res.status} ${await res.text()}`);\n}\n\n/** Push the plan's repeatable custom types via the Custom Types API\n *  (insert, falling back to update when the type already exists). */\nexport async function pushCustomTypes(types: PlanCustomType[]): Promise<string[]> {\n  const { repo, token } = readCreds();\n  const headers = { ...apiHeaders(repo, token), \"Content-Type\": \"application/json\" };\n  const post = (path: \"insert\" | \"update\", body: string) =>\n    fetchWithRetry(`https://customtypes.prismic.io/customtypes/${path}`, {\n      method: \"POST\",\n      headers,\n      body,\n    });\n  const pushed: string[] = [];\n  for (const t of types) {\n    const body = JSON.stringify(t.json);\n    const ins = await post(\"insert\", body);\n    if (!ins.ok) {\n      const insErr = `insert ${ins.status} ${await ins.text()}`;\n      // 409/400 usually means \"type exists\" — but keep the insert body: when\n      // the update ALSO fails, the insert's validation detail is the real clue\n      if (ins.status !== 409 && ins.status !== 400)\n        throw new Error(`custom type ${t.id}: ${insErr}`);\n      const upd = await post(\"update\", body);\n      if (!upd.ok) {\n        throw new Error(`custom type ${t.id}: ${insErr}; update ${upd.status} ${await upd.text()}`);\n      }\n    }\n    pushed.push(t.id);\n  }\n  return pushed;\n}\n\n/** filename → { id, url } for every asset already in the media library. `url`\n *  is the servable CDN url (the Asset API asset object's `url` field, e.g.\n *  https://images.prismic.io/...) that the render side loads. */\nasync function listAssetsByFilename(\n  repo: string,\n  token: string,\n): Promise<Map<string, { id: string; url: string }>> {\n  const map = new Map<string, { id: string; url: string }>();\n  let cursor = \"\";\n  for (;;) {\n    const res = await expectOk(\n      await fetchWithRetry(`https://asset-api.prismic.io/assets?limit=500${cursor}`, {\n        headers: apiHeaders(repo, token),\n      }),\n      \"asset list\",\n    );\n    const page = (await res.json()) as {\n      items: { id: string; filename: string; url: string }[];\n      cursor?: string;\n    };\n    for (const a of page.items) map.set(a.filename, { id: a.id, url: a.url });\n    if (!page.cursor || !page.items.length) return map;\n    cursor = `&cursor=${encodeURIComponent(page.cursor)}`;\n  }\n}\n\n/** Composite key for the update-lookup map. Prismic scopes uid-uniqueness PER\n *  TYPE, so a repo can hold the same uid under two types — e.g. a cloned\n *  starter's `page:home` and the migration's `catalog_page:home`. Keying the\n *  lookup by uid alone let one clobber the other (last-writer-wins), so an\n *  \"already exists\" update could PUT a doc's data onto the WRONG-typed id. The\n *  key carries the type to keep the two apart. */\nconst docRefKey = (type: string, uid: string): string => `${type}::${uid}`;\n\n/** type+uid → document id on the target repo, for the PUT-update path. Reads the\n *  MASTER ref, so it only sees PUBLISHED documents — docs sitting in an\n *  unpublished migration release are invisible here (the miss error explains\n *  that). Follows next_page so >100-doc repos resolve fully. */\nasync function lookupDocIds(repo: string): Promise<Map<string, string>> {\n  const access = process.env.PRISMIC_ACCESS_TOKEN;\n  const qs = access ? `?access_token=${access}` : \"\";\n  const apiRes = await expectOk(\n    await fetchWithRetry(`https://${repo}.prismic.io/api/v2${qs}`),\n    \"Document API /api/v2 (set PRISMIC_ACCESS_TOKEN for a private repo)\",\n  );\n  const api = (await apiRes.json()) as { refs?: { id: string; ref: string }[] };\n  const master = api.refs?.find((r) => r.id === \"master\")?.ref;\n  if (!master) throw new Error(`Document API for ${repo} returned no master ref`);\n\n  const map = new Map<string, string>();\n  const sep = qs ? \"&\" : \"?\";\n  let url: string | null =\n    `https://${repo}.prismic.io/api/v2/documents/search${qs}${sep}ref=${master}&pageSize=100`;\n  while (url) {\n    const res = await expectOk(await fetchWithRetry(url), \"Document API search\");\n    const page = (await res.json()) as {\n      results: { id: string; uid: string | null; type: string }[];\n      next_page: string | null;\n    };\n    for (const d of page.results) if (d.uid) map.set(docRefKey(d.type, d.uid), d.id);\n    url = page.next_page;\n  }\n  return map;\n}\n\nexport type MigrationResult = {\n  assetsUploaded: number;\n  assetsReused: number;\n  docsCreated: number;\n  docsUpdated: number;\n  missingAssets: string[];\n  /** cdn url (the manifest/plan-asset url) → resolved Prismic servable url, for\n   *  every asset uploaded or reused. Lets the caller rewrite the render manifest\n   *  onto durable Prismic-hosted media. */\n  assetUrlByCdn: Map<string, string>;\n};\n\n/** Execute a MigrationPlan: upload missing assets (reusing existing ones by\n *  filename), then create-or-update each document by uid. Documents land in a\n *  migration release the operator publishes in the dashboard. */\nexport async function runMigration(\n  plan: MigrationPlan,\n  log: (line: string) => void = console.log,\n): Promise<MigrationResult> {\n  const { repo, token } = readCreds();\n  const existing = await listAssetsByFilename(repo, token);\n  const assetIdByUuid = new Map<string, string>();\n  const assetUrlByCdn = new Map<string, string>();\n  let assetsUploaded = 0;\n  let assetsReused = 0;\n\n  for (const a of plan.assets) {\n    // Blux filenames are `<uuid>.<ext>` — globally unique, so filename keying\n    // is a sound dedup. Reused assets keep their existing alt (trade-off:\n    // alt from the plan is only applied on first upload).\n    const filename = (a.url.split(\"/\").pop() ?? a.id).split(\"?\")[0]!;\n    const known = existing.get(filename);\n    if (known) {\n      assetIdByUuid.set(a.id, known.id);\n      assetUrlByCdn.set(a.url, known.url);\n      assetsReused++;\n      continue;\n    }\n    const blob = await (await expectOk(await fetch(a.url), `fetch asset ${filename}`)).blob();\n    const form = new FormData();\n    form.append(\"file\", blob, filename);\n    if (a.alt) form.append(\"alt\", a.alt);\n    const res = await expectOk(\n      await fetchWithRetry(\"https://asset-api.prismic.io/assets\", {\n        method: \"POST\",\n        headers: apiHeaders(repo, token),\n        body: form,\n      }),\n      `upload asset ${filename}`,\n    );\n    const created = (await res.json()) as { id: string; url: string };\n    assetIdByUuid.set(a.id, created.id);\n    assetUrlByCdn.set(a.url, created.url);\n    assetsUploaded++;\n    log(`asset ${assetsUploaded + assetsReused}/${plan.assets.length} ${filename}`);\n    await sleep(THROTTLE_MS);\n  }\n\n  let docIds: Map<string, string> | null = null;\n  let docsCreated = 0;\n  let docsUpdated = 0;\n  const missingAssets: string[] = [];\n\n  for (const doc of plan.documents) {\n    const { data, missingAssets: miss } = resolveDocData(doc.data, assetIdByUuid);\n    missingAssets.push(...miss);\n    const body = JSON.stringify({\n      type: doc.type,\n      uid: doc.uid,\n      lang: \"en-us\",\n      title: doc.uid,\n      data,\n    });\n    const headers = { ...apiHeaders(repo, token), \"Content-Type\": \"application/json\" };\n    const res = await fetchWithRetry(\"https://migration.prismic.io/documents\", {\n      method: \"POST\",\n      headers,\n      body,\n    });\n    if (res.ok) {\n      docsCreated++;\n      log(`created ${doc.uid}`);\n    } else {\n      const text = await res.text();\n      if (!/already exists/i.test(text)) {\n        throw new Error(`create ${doc.uid}: ${res.status} ${text}`);\n      }\n      docIds ??= await lookupDocIds(repo);\n      const id = docIds.get(docRefKey(doc.type, doc.uid));\n      if (!id) {\n        throw new Error(\n          `update ${doc.uid}: the uid exists but is not visible on the master ref — ` +\n            `most likely it sits in an UNPUBLISHED migration release; publish the release ` +\n            `in the Prismic dashboard, then re-run to update` +\n            (process.env.PRISMIC_ACCESS_TOKEN\n              ? \"\"\n              : \" (if the repo's Document API is private, also set PRISMIC_ACCESS_TOKEN)\"),\n        );\n      }\n      await sleep(THROTTLE_MS); // the failed POST already hit the migration API\n      await expectOk(\n        await fetchWithRetry(`https://migration.prismic.io/documents/${id}`, {\n          method: \"PUT\",\n          headers,\n          body,\n        }),\n        `update ${doc.uid}`,\n      );\n      docsUpdated++;\n      log(`updated ${doc.uid}`);\n    }\n    await sleep(THROTTLE_MS);\n  }\n  return { assetsUploaded, assetsReused, docsCreated, docsUpdated, missingAssets, assetUrlByCdn };\n}\n"],"mappings":";AAAA,SAAS,sBAAsB;AAMxB,SAAS,eACd,MACA,eAC4D;AAC5D,QAAM,UAAoB,CAAC;AAC3B,QAAM,UAAU,CAAC,MAAwB;AACvC,QAAI,KAAK,OAAO,MAAM,UAAU;AAC9B,UAAI,qBAAqB,GAAG;AAC1B,eAAO,eAAgB,EAAkC,eAAe,EAAE;AAAA,MAC5E;AACA,UAAI,gBAAgB,GAAG;AACrB,cAAM,OAAQ,EAA6B;AAC3C,cAAM,KAAK,cAAc,IAAI,IAAI;AACjC,YAAI,CAAC,IAAI;AACP,kBAAQ,KAAK,IAAI;AACjB,iBAAO;AAAA,QACT;AACA,eAAO,EAAE,GAAG;AAAA,MACd;AACA,UAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,EAAE,IAAI,OAAO;AAC1C,aAAO,OAAO;AAAA,QACZ,OAAO,QAAQ,CAAC,EACb,IAAI,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAU,EAC5C,OAAO,CAAC,CAAC,EAAE,GAAG,MAAM,QAAQ,MAAS;AAAA,MAC1C;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,SAAO,EAAE,MAAM,QAAQ,IAAI,GAA8B,eAAe,QAAQ;AAClF;;;ACrBA,IAAM,cAAc;AACpB,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAIlE,eAAe,eAAe,KAAa,MAAoB,QAAQ,GAAsB;AAC3F,WAAS,IAAI,KAAK,KAAK;AACrB,UAAM,MAAM,MAAM,MAAM,KAAK,IAAI;AACjC,QAAI,IAAI,WAAW,OAAO,KAAK,QAAQ,EAAG,QAAO;AACjD,UAAM,MAAM,QAAQ,IAAI,EAAE;AAAA,EAC5B;AACF;AAEA,SAAS,YAA6C;AACpD,QAAM,OAAO,QAAQ,IAAI;AACzB,QAAM,QAAQ,QAAQ,IAAI;AAC1B,MAAI,CAAC,QAAQ,CAAC,MAAO,OAAM,IAAI,MAAM,qDAAqD;AAC1F,SAAO,EAAE,MAAM,MAAM;AACvB;AAEA,IAAM,aAAa,CAAC,MAAc,WAAmB;AAAA,EACnD,YAAY;AAAA,EACZ,eAAe,UAAU,KAAK;AAChC;AAEA,eAAe,SAAS,KAAe,MAAiC;AACtE,MAAI,IAAI,GAAI,QAAO;AACnB,QAAM,IAAI,MAAM,GAAG,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,EAAE;AAC9D;AAIA,eAAsB,gBAAgB,OAA4C;AAChF,QAAM,EAAE,MAAM,MAAM,IAAI,UAAU;AAClC,QAAM,UAAU,EAAE,GAAG,WAAW,MAAM,KAAK,GAAG,gBAAgB,mBAAmB;AACjF,QAAM,OAAO,CAAC,MAA2B,SACvC,eAAe,8CAA8C,IAAI,IAAI;AAAA,IACnE,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF,CAAC;AACH,QAAM,SAAmB,CAAC;AAC1B,aAAW,KAAK,OAAO;AACrB,UAAM,OAAO,KAAK,UAAU,EAAE,IAAI;AAClC,UAAM,MAAM,MAAM,KAAK,UAAU,IAAI;AACrC,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,SAAS,UAAU,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC;AAGvD,UAAI,IAAI,WAAW,OAAO,IAAI,WAAW;AACvC,cAAM,IAAI,MAAM,eAAe,EAAE,EAAE,KAAK,MAAM,EAAE;AAClD,YAAM,MAAM,MAAM,KAAK,UAAU,IAAI;AACrC,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,IAAI,MAAM,eAAe,EAAE,EAAE,KAAK,MAAM,YAAY,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,EAAE;AAAA,MAC5F;AAAA,IACF;AACA,WAAO,KAAK,EAAE,EAAE;AAAA,EAClB;AACA,SAAO;AACT;AAKA,eAAe,qBACb,MACA,OACmD;AACnD,QAAM,MAAM,oBAAI,IAAyC;AACzD,MAAI,SAAS;AACb,aAAS;AACP,UAAM,MAAM,MAAM;AAAA,MAChB,MAAM,eAAe,gDAAgD,MAAM,IAAI;AAAA,QAC7E,SAAS,WAAW,MAAM,KAAK;AAAA,MACjC,CAAC;AAAA,MACD;AAAA,IACF;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAI7B,eAAW,KAAK,KAAK,MAAO,KAAI,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,IAAI,CAAC;AACxE,QAAI,CAAC,KAAK,UAAU,CAAC,KAAK,MAAM,OAAQ,QAAO;AAC/C,aAAS,WAAW,mBAAmB,KAAK,MAAM,CAAC;AAAA,EACrD;AACF;AAQA,IAAM,YAAY,CAAC,MAAc,QAAwB,GAAG,IAAI,KAAK,GAAG;AAMxE,eAAe,aAAa,MAA4C;AACtE,QAAM,SAAS,QAAQ,IAAI;AAC3B,QAAM,KAAK,SAAS,iBAAiB,MAAM,KAAK;AAChD,QAAM,SAAS,MAAM;AAAA,IACnB,MAAM,eAAe,WAAW,IAAI,qBAAqB,EAAE,EAAE;AAAA,IAC7D;AAAA,EACF;AACA,QAAM,MAAO,MAAM,OAAO,KAAK;AAC/B,QAAM,SAAS,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,GAAG;AACzD,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,oBAAoB,IAAI,yBAAyB;AAE9E,QAAM,MAAM,oBAAI,IAAoB;AACpC,QAAM,MAAM,KAAK,MAAM;AACvB,MAAI,MACF,WAAW,IAAI,sCAAsC,EAAE,GAAG,GAAG,OAAO,MAAM;AAC5E,SAAO,KAAK;AACV,UAAM,MAAM,MAAM,SAAS,MAAM,eAAe,GAAG,GAAG,qBAAqB;AAC3E,UAAM,OAAQ,MAAM,IAAI,KAAK;AAI7B,eAAW,KAAK,KAAK,QAAS,KAAI,EAAE,IAAK,KAAI,IAAI,UAAU,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,EAAE;AAC/E,UAAM,KAAK;AAAA,EACb;AACA,SAAO;AACT;AAiBA,eAAsB,aACpB,MACA,MAA8B,QAAQ,KACZ;AAC1B,QAAM,EAAE,MAAM,MAAM,IAAI,UAAU;AAClC,QAAM,WAAW,MAAM,qBAAqB,MAAM,KAAK;AACvD,QAAM,gBAAgB,oBAAI,IAAoB;AAC9C,QAAM,gBAAgB,oBAAI,IAAoB;AAC9C,MAAI,iBAAiB;AACrB,MAAI,eAAe;AAEnB,aAAW,KAAK,KAAK,QAAQ;AAI3B,UAAM,YAAY,EAAE,IAAI,MAAM,GAAG,EAAE,IAAI,KAAK,EAAE,IAAI,MAAM,GAAG,EAAE,CAAC;AAC9D,UAAM,QAAQ,SAAS,IAAI,QAAQ;AACnC,QAAI,OAAO;AACT,oBAAc,IAAI,EAAE,IAAI,MAAM,EAAE;AAChC,oBAAc,IAAI,EAAE,KAAK,MAAM,GAAG;AAClC;AACA;AAAA,IACF;AACA,UAAM,OAAO,OAAO,MAAM,SAAS,MAAM,MAAM,EAAE,GAAG,GAAG,eAAe,QAAQ,EAAE,GAAG,KAAK;AACxF,UAAM,OAAO,IAAI,SAAS;AAC1B,SAAK,OAAO,QAAQ,MAAM,QAAQ;AAClC,QAAI,EAAE,IAAK,MAAK,OAAO,OAAO,EAAE,GAAG;AACnC,UAAM,MAAM,MAAM;AAAA,MAChB,MAAM,eAAe,uCAAuC;AAAA,QAC1D,QAAQ;AAAA,QACR,SAAS,WAAW,MAAM,KAAK;AAAA,QAC/B,MAAM;AAAA,MACR,CAAC;AAAA,MACD,gBAAgB,QAAQ;AAAA,IAC1B;AACA,UAAM,UAAW,MAAM,IAAI,KAAK;AAChC,kBAAc,IAAI,EAAE,IAAI,QAAQ,EAAE;AAClC,kBAAc,IAAI,EAAE,KAAK,QAAQ,GAAG;AACpC;AACA,QAAI,SAAS,iBAAiB,YAAY,IAAI,KAAK,OAAO,MAAM,IAAI,QAAQ,EAAE;AAC9E,UAAM,MAAM,WAAW;AAAA,EACzB;AAEA,MAAI,SAAqC;AACzC,MAAI,cAAc;AAClB,MAAI,cAAc;AAClB,QAAM,gBAA0B,CAAC;AAEjC,aAAW,OAAO,KAAK,WAAW;AAChC,UAAM,EAAE,MAAM,eAAe,KAAK,IAAI,eAAe,IAAI,MAAM,aAAa;AAC5E,kBAAc,KAAK,GAAG,IAAI;AAC1B,UAAM,OAAO,KAAK,UAAU;AAAA,MAC1B,MAAM,IAAI;AAAA,MACV,KAAK,IAAI;AAAA,MACT,MAAM;AAAA,MACN,OAAO,IAAI;AAAA,MACX;AAAA,IACF,CAAC;AACD,UAAM,UAAU,EAAE,GAAG,WAAW,MAAM,KAAK,GAAG,gBAAgB,mBAAmB;AACjF,UAAM,MAAM,MAAM,eAAe,0CAA0C;AAAA,MACzE,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,IAAI,IAAI;AACV;AACA,UAAI,WAAW,IAAI,GAAG,EAAE;AAAA,IAC1B,OAAO;AACL,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAI,CAAC,kBAAkB,KAAK,IAAI,GAAG;AACjC,cAAM,IAAI,MAAM,UAAU,IAAI,GAAG,KAAK,IAAI,MAAM,IAAI,IAAI,EAAE;AAAA,MAC5D;AACA,iBAAW,MAAM,aAAa,IAAI;AAClC,YAAM,KAAK,OAAO,IAAI,UAAU,IAAI,MAAM,IAAI,GAAG,CAAC;AAClD,UAAI,CAAC,IAAI;AACP,cAAM,IAAI;AAAA,UACR,UAAU,IAAI,GAAG,+LAGd,QAAQ,IAAI,uBACT,KACA;AAAA,QACR;AAAA,MACF;AACA,YAAM,MAAM,WAAW;AACvB,YAAM;AAAA,QACJ,MAAM,eAAe,0CAA0C,EAAE,IAAI;AAAA,UACnE,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,UAAU,IAAI,GAAG;AAAA,MACnB;AACA;AACA,UAAI,WAAW,IAAI,GAAG,EAAE;AAAA,IAC1B;AACA,UAAM,MAAM,WAAW;AAAA,EACzB;AACA,SAAO,EAAE,gBAAgB,cAAc,aAAa,aAAa,eAAe,cAAc;AAChG;","names":[]}

package/dist/{chunk-NUIBQPB3.js → chunk-6SZBNALD.js}

@@ -1,15 +1,20 @@
 import {
   queueDraft
-} from "./chunk-KLVMJYZZ.js";
+} from "./chunk-SEQA7MC3.js";
+import {
+  generateHeaderImage
+} from "./chunk-37S6L6G4.js";
 import {
   checklistFor,
   createDraft,
   gatingFields,
   listReportsForSite,
   renderReportHtml,
-  resolveCopy,
+  resolveCopy
+} from "./chunk-MNE374CZ.js";
+import {
   uploadAttachment
-} from "./chunk-JCITWZQR.js";
+} from "./chunk-MPBXOJ3N.js";
 import {
   isNetlifyAppUrl
 } from "./chunk-U5SZ4FOP.js";
@@ -134,6 +139,13 @@ function googleEvidence(now, search) {
   if (search.softFailed) {
     return { result: "unknown", checkedAt: at, note: "Search Console unavailable this run" };
   }
+  if (search.notConfigured) {
+    return {
+      result: "unknown",
+      checkedAt: at,
+      note: "Search Console not configured in the environment that drafted this report"
+    };
+  }
   if (search.value === null) return null;
   if (search.value.foundOnPage1) {
     const pos2 = search.value.position;
@@ -474,6 +486,21 @@ async function fetchSearchPresence(q, periodStart, periodEnd) {
 }
 
 // src/reports/draft.ts
+async function refreshHeaderImage(site, deps = {}) {
+  if (!site.url) return false;
+  const generate = deps.generate ?? generateHeaderImage;
+  const upload = deps.upload ?? uploadAttachment;
+  try {
+    const gen = await generate({ url: site.url, slug: siteSlug(site.name) });
+    await upload(site.id, "Header image", gen.bytes, gen.filename, gen.contentType);
+    return true;
+  } catch (err) {
+    console.warn(
+      `\u26A0 header-image refresh skipped for ${site.name}: ${err instanceof Error ? err.message : String(err)} \u2014 keeping the stored image`
+    );
+    return false;
+  }
+}
 function scoresFromWebsite(siteRow) {
   const { pScore, rScore, bpScore, seoScore } = siteRow;
   if (pScore === null || rScore === null || bpScore === null || seoScore === null) {
@@ -497,13 +524,25 @@ async function draftReportForSite(base, siteRow, reportType, options = {}) {
   const completedOn = today;
   const lastTestedDate = reportType === "Maintenance" && siteRow.lastLighthouseAuditAt ? new Date(siteRow.lastLighthouseAuditAt) : null;
   const gaResult = base !== null ? await fetchGaUsers(siteRow, periodStart, periodEnd) : NO_ENRICHMENT;
-  const searchResult = base !== null ? await fetchSearch(siteRow, periodStart, periodEnd) : { ...NO_ENRICHMENT, defaultQueryMissed: false, propertyMissing: false };
+  const searchResult = base !== null ? await fetchSearch(siteRow, periodStart, periodEnd) : (
+    // No-IO render path: nothing was attempted, so this is not an environment gap
+    // (`notConfigured` would wrongly tell the operator to go wire a secret).
+    {
+      ...NO_ENRICHMENT,
+      defaultQueryMissed: false,
+      propertyMissing: false,
+      notConfigured: false
+    }
+  );
   const gaUsers = gaResult.value;
   const search = searchResult.value;
   const softFailures = [
     ...gaResult.softFailed ? ["ga"] : [],
     ...searchResult.softFailed ? ["search"] : []
   ];
+  if (base !== null && options.refreshHeader !== false) {
+    await refreshHeaderImage(siteRow, options.refreshHeader ?? {});
+  }
   const cidName = `${slug}-header`;
   const { html } = await renderReportHtml({
     siteName: siteRow.name,
@@ -623,8 +662,16 @@ async function fetchGaUsers(siteRow, periodStart, periodEnd) {
 }
 async function fetchSearch(siteRow, periodStart, periodEnd) {
   const cfg = readGaConfig();
-  if (!cfg || !(siteRow.ga4PropertyId || siteRow.searchQuery))
-    return { ...NO_ENRICHMENT, defaultQueryMissed: false, propertyMissing: false };
+  const enrolled = Boolean(siteRow.ga4PropertyId || siteRow.searchQuery);
+  if (!cfg || !enrolled) {
+    const notConfigured = enrolled && !cfg;
+    if (notConfigured) {
+      console.warn(
+        `\u2691 Search: no GA/Search Console credentials in this environment (GA_SUBJECT unset) \u2014 the Google Indexed check could not run for ${siteRow.name}.`
+      );
+    }
+    return { ...NO_ENRICHMENT, defaultQueryMissed: false, propertyMissing: false, notConfigured };
+  }
   const explicit = siteRow.searchQuery?.trim();
   const query = explicit || siteRow.name;
   const usedDefault = !explicit;
@@ -652,10 +699,16 @@ async function fetchSearch(siteRow, periodStart, periodEnd) {
         `\u2691 Search: site-name default "${query}" found no Search Console data for ${siteRow.name} \u2014 set an explicit "Search query" in Airtable to track brand presence.`
       );
     }
-    return { value, softFailed: false, defaultQueryMissed, propertyMissing };
+    return { value, softFailed: false, defaultQueryMissed, propertyMissing, notConfigured: false };
   } catch (e) {
     console.warn(`\u26A0 Search presence skipped for ${siteRow.name}: ${e.message}`);
-    return { value: null, softFailed: true, defaultQueryMissed: false, propertyMissing: false };
+    return {
+      value: null,
+      softFailed: true,
+      defaultQueryMissed: false,
+      propertyMissing: false,
+      notConfigured: false
+    };
   }
 }
 async function derivePeriodStart(base, siteRow, reportType, today) {
@@ -674,4 +727,4 @@ export {
   fetchGaUsers,
   fetchSearch
 };
-//# sourceMappingURL=chunk-NUIBQPB3.js.map
+//# sourceMappingURL=chunk-6SZBNALD.js.map