@reddoorla/maintenance 0.8.0 → 0.10.0

package/dist/cli/bin.js

@@ -138,8 +138,8 @@ __export(lighthouse_airtable_exports, {
   lighthouseScoresFromResult: () => lighthouseScoresFromResult,
   resolveSlugFromCwd: () => resolveSlugFromCwd
 });
-import { readFile as readFile6 } from "fs/promises";
-import { join as join6 } from "path";
+import { readFile as readFile7 } from "fs/promises";
+import { join as join7 } from "path";
 function lighthouseScoresFromResult(result) {
   if (result.audit !== "lighthouse") {
     throw new Error(`Expected a 'lighthouse' AuditResult, got '${result.audit}'`);
@@ -156,8 +156,8 @@ function lighthouseScoresFromResult(result) {
 }
 async function resolveSlugFromCwd(cwd) {
   try {
-    const pkgPath = join6(cwd, "package.json");
-    const raw = await readFile6(pkgPath, "utf-8");
+    const pkgPath = join7(cwd, "package.json");
+    const raw = await readFile7(pkgPath, "utf-8");
     const pkg = JSON.parse(raw);
     if (!pkg.name) throw new Error("package.json has no 'name' field");
     return siteSlug(pkg.name);
@@ -283,13 +283,13 @@ var init_reports = __esm({
 });
 
 // src/reports/maintenance-email/assets/index.ts
-import { readFile as readFile12 } from "fs/promises";
-import { dirname as dirname2, join as join20 } from "path";
+import { readFile as readFile13 } from "fs/promises";
+import { dirname as dirname2, join as join21 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 async function loadBundledImages() {
   const [check, blurred] = await Promise.all([
-    readFile12(join20(here, "check.png")),
-    readFile12(join20(here, "blurredTests.jpg"))
+    readFile13(join21(here, "check.png")),
+    readFile13(join21(here, "blurredTests.jpg"))
   ]);
   return {
     check: {
@@ -735,7 +735,7 @@ var init_orchestrate = __esm({
 });
 
 // src/cli/bin.ts
-import { dirname as dirname4 } from "path";
+import { dirname as dirname5 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { cac } from "cac";
 
@@ -744,7 +744,7 @@ import { resolve as resolve2 } from "path";
 
 // src/audits/util/spawn.ts
 import { spawn } from "child_process";
-var defaultSpawn = (cmd, args, opts = {}) => new Promise((resolve9, reject) => {
+var defaultSpawn = (cmd, args, opts = {}) => new Promise((resolve10, reject) => {
   const streaming = opts.streaming === true;
   const child = spawn(cmd, [...args], {
     cwd: opts.cwd,
@@ -767,7 +767,7 @@ var defaultSpawn = (cmd, args, opts = {}) => new Promise((resolve9, reject) => {
   });
   child.on("close", (code) => {
     if (timer) clearTimeout(timer);
-    resolve9({ code: code ?? -1, stdout, stderr });
+    resolve10({ code: code ?? -1, stdout, stderr });
   });
 });
 
@@ -1079,9 +1079,9 @@ async function securityAudit(ctx) {
 }
 
 // src/audits/lighthouse.ts
-import { readFile as readFile3, writeFile, mkdtemp, rm } from "fs/promises";
+import { readFile as readFile4, writeFile, mkdtemp, rm } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 
 // src/configs/lighthouse.ts
 var lighthouseConfig = {
@@ -1114,10 +1114,37 @@ var lighthouseConfig = {
   }
 };
 
+// src/audits/util/site-config.ts
+import { readFile as readFile3 } from "fs/promises";
+import { join as join3 } from "path";
+async function readSiteConfig(sitePath) {
+  let raw;
+  try {
+    raw = await readFile3(join3(sitePath, "package.json"), "utf-8");
+  } catch {
+    return {};
+  }
+  let pkg;
+  try {
+    pkg = JSON.parse(raw);
+  } catch {
+    return {};
+  }
+  if (!pkg || typeof pkg !== "object") return {};
+  const cfg = pkg.reddoor;
+  if (!cfg || typeof cfg !== "object") return {};
+  const out = {};
+  const url = cfg.lighthouseUrl;
+  if (typeof url === "string" && url.length > 0) {
+    out.lighthouseUrl = url;
+  }
+  return out;
+}
+
 // src/audits/lighthouse.ts
 async function readJsonMaybe(path) {
   try {
-    const raw = await readFile3(path, "utf-8");
+    const raw = await readFile4(path, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -1153,15 +1180,28 @@ async function lighthouseAudit(ctx) {
   const spawn2 = ctx.spawn ?? defaultSpawn;
   const site = ctx.site;
   const label = siteLabel(site);
-  const configDir = await mkdtemp(join3(tmpdir(), "reddoor-lhci-"));
-  const configPath = join3(configDir, "lighthouserc.json");
-  await writeFile(configPath, JSON.stringify(lighthouseConfig), "utf-8");
-  const resultsDir = join3(site.path, ".lighthouseci");
+  const siteCfg = await readSiteConfig(site.path);
+  const resolvedConfig = siteCfg.lighthouseUrl ? {
+    ...lighthouseConfig,
+    ci: {
+      ...lighthouseConfig.ci,
+      collect: { ...lighthouseConfig.ci.collect, url: [siteCfg.lighthouseUrl] }
+    }
+  } : lighthouseConfig;
+  const configDir = await mkdtemp(join4(tmpdir(), "reddoor-lhci-"));
+  const configPath = join4(configDir, "lighthouserc.json");
+  await writeFile(configPath, JSON.stringify(resolvedConfig), "utf-8");
+  const resultsDir = join4(site.path, ".lighthouseci");
   await rm(resultsDir, { recursive: true, force: true });
   let raw;
   try {
     raw = await spawn2("npx", ["--yes", "@lhci/cli", "autorun", `--config=${configPath}`], {
-      cwd: site.path
+      cwd: site.path,
+      // lhci autorun boots the site's dev server, downloads Chrome on first
+      // use, and runs the audit — easily 2–3 min on a cold tree. The shared
+      // 30 s default in runAudits is fine for deps/lint/security but starves
+      // lhci.
+      timeoutMs: 5 * 6e4
     });
   } catch (err) {
     await rm(configDir, { recursive: true, force: true });
@@ -1177,7 +1217,7 @@ async function lighthouseAudit(ctx) {
     throw err;
   }
   await rm(configDir, { recursive: true, force: true });
-  const manifest = await readJsonMaybe(join3(resultsDir, "manifest.json"));
+  const manifest = await readJsonMaybe(join4(resultsDir, "manifest.json"));
   if (!manifest || manifest.length === 0) {
     return {
       audit: "lighthouse",
@@ -1186,7 +1226,7 @@ async function lighthouseAudit(ctx) {
       summary: `lighthouse: no manifest written (exit ${raw.code})${raw.stderr ? ` \u2014 ${raw.stderr.slice(0, 200)}` : ""}`
     };
   }
-  const assertionResults = await readJsonMaybe(join3(resultsDir, "assertion-results.json")) ?? [];
+  const assertionResults = await readJsonMaybe(join4(resultsDir, "assertion-results.json")) ?? [];
   const failed = assertionResults.filter((a) => !a.passed);
   const assertions = failed.map((a) => ({
     category: categoryFromAssertion(a),
@@ -1212,9 +1252,9 @@ async function lighthouseAudit(ctx) {
 }
 
 // src/audits/a11y.ts
-import { readFile as readFile4, writeFile as writeFile2, mkdtemp as mkdtemp2, rm as rm2 } from "fs/promises";
+import { readFile as readFile5, writeFile as writeFile2, mkdtemp as mkdtemp2, rm as rm2 } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 
 // src/configs/playwright-a11y.ts
 import { defineConfig, devices } from "@playwright/test";
@@ -1252,7 +1292,7 @@ var playwrightA11yConfig = defineConfig({
 var RESULTS_REL = ".reddoor-a11y/results.json";
 async function readJsonMaybe2(path) {
   try {
-    const raw = await readFile4(path, "utf-8");
+    const raw = await readFile5(path, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -1308,11 +1348,11 @@ async function a11yAudit(ctx) {
   const spawn2 = ctx.spawn ?? defaultSpawn;
   const site = ctx.site;
   const label = siteLabel(site);
-  const specDir = await mkdtemp2(join4(tmpdir2(), "reddoor-a11y-spec-"));
-  const specPath = join4(specDir, "a11y.spec.ts");
+  const specDir = await mkdtemp2(join5(tmpdir2(), "reddoor-a11y-spec-"));
+  const specPath = join5(specDir, "a11y.spec.ts");
   await writeFile2(specPath, buildSpec(), "utf-8");
-  const resultsPath = join4(site.path, RESULTS_REL);
-  await rm2(join4(site.path, ".reddoor-a11y"), { recursive: true, force: true });
+  const resultsPath = join5(site.path, RESULTS_REL);
+  await rm2(join5(site.path, ".reddoor-a11y"), { recursive: true, force: true });
   let raw;
   try {
     raw = await spawn2("npx", ["--yes", "playwright", "test", "--reporter=line", specPath], {
@@ -1405,7 +1445,7 @@ function localPath(path, opts = {}) {
 }
 
 // src/inventory/json.ts
-import { readFile as readFile5 } from "fs/promises";
+import { readFile as readFile6 } from "fs/promises";
 import { isAbsolute } from "path";
 function validate(raw) {
   if (!Array.isArray(raw)) {
@@ -1435,7 +1475,7 @@ function validate(raw) {
 }
 function fromJsonFile(path) {
   return async () => {
-    const raw = JSON.parse(await readFile5(path, "utf-8"));
+    const raw = JSON.parse(await readFile6(path, "utf-8"));
     return validate(raw);
   };
 }
@@ -1481,7 +1521,7 @@ async function resolveSites(input) {
 
 // src/cli/fleet/clone-if-needed.ts
 import { stat, readdir, mkdir } from "fs/promises";
-import { isAbsolute as isAbsolute2, join as join5 } from "path";
+import { isAbsolute as isAbsolute2, join as join6 } from "path";
 function deriveNameFromRepoUrl(repoUrl) {
   const slash = repoUrl.split("/").pop() ?? repoUrl;
   return slash.replace(/\.git$/, "");
@@ -1522,7 +1562,7 @@ async function cloneIfNeeded(site, opts) {
   const name = site.name ?? deriveNameFromRepoUrl(site.repoUrl);
   assertSafeName(name);
   assertSafeRepoUrl(site.repoUrl);
-  const target = join5(opts.workdir, name);
+  const target = join6(opts.workdir, name);
   await mkdir(opts.workdir, { recursive: true });
   if (await isNonEmptyDir(target)) {
     return { ...site, name, path: target };
@@ -1609,12 +1649,12 @@ async function runAuditCommand(site, opts) {
 }
 
 // src/cli/commands/sync-configs.ts
-import { readFile as readFile8 } from "fs/promises";
-import { join as join8, resolve as resolve3 } from "path";
+import { readFile as readFile9 } from "fs/promises";
+import { join as join9, resolve as resolve3 } from "path";
 
 // src/recipes/sync-configs.ts
-import { readFile as readFile7, writeFile as writeFile3 } from "fs/promises";
-import { join as join7 } from "path";
+import { readFile as readFile8, writeFile as writeFile3 } from "fs/promises";
+import { join as join8 } from "path";
 
 // src/recipes/sync-configs/templates.ts
 var eslint = {
@@ -1878,7 +1918,7 @@ function isConfigName(value) {
 }
 async function readMaybe(path) {
   try {
-    return await readFile7(path, "utf-8");
+    return await readFile8(path, "utf-8");
   } catch {
     return null;
   }
@@ -1886,13 +1926,13 @@ async function readMaybe(path) {
 async function planTemplateDiffs(cwd, templates) {
   const diffs = [];
   for (const t of templates) {
-    const existing = await readMaybe(join7(cwd, t.path));
+    const existing = await readMaybe(join8(cwd, t.path));
     if (existing !== t.contents) diffs.push(t);
   }
   return diffs;
 }
 async function planGitignore(cwd) {
-  const existing = await readMaybe(join7(cwd, ".gitignore"));
+  const existing = await readMaybe(join8(cwd, ".gitignore"));
   const merge = mergeGitignore(existing, CANONICAL_GITIGNORE_ENTRIES);
   const tracked = await listTrackedFiles(cwd);
   const toUntrack = findTrackedArtifacts(tracked, CANONICAL_GITIGNORE_ENTRIES);
@@ -1900,7 +1940,7 @@ async function planGitignore(cwd) {
   return { kind: "apply", content: merge.content, toUntrack, added: merge.added };
 }
 async function applyGitignore(cwd, plan) {
-  await writeFile3(join7(cwd, ".gitignore"), plan.content, "utf-8");
+  await writeFile3(join8(cwd, ".gitignore"), plan.content, "utf-8");
   if (plan.toUntrack.length > 0) {
     await removeFromIndex(cwd, plan.toUntrack);
   }
@@ -1923,7 +1963,7 @@ async function syncConfigs(site, opts = {}) {
     },
     apply: async ({ templateDiffs, gitignorePlan }, { commit: commit2 }) => {
       for (const t of templateDiffs) {
-        await writeFile3(join7(site.path, t.path), t.contents, "utf-8");
+        await writeFile3(join8(site.path, t.path), t.contents, "utf-8");
         await commit2(`chore: sync ${t.config} config from @reddoorla/maintenance`);
       }
       if (gitignorePlan.kind === "apply") {
@@ -1952,7 +1992,7 @@ function parseOnly2(value) {
 async function dryPlanGitignore(cwd) {
   let existing;
   try {
-    existing = await readFile8(join8(cwd, ".gitignore"), "utf-8");
+    existing = await readFile9(join9(cwd, ".gitignore"), "utf-8");
   } catch {
     return "would create .gitignore";
   }
@@ -1967,7 +2007,7 @@ async function dryPlan(cwd, which) {
   for (const t of templateTargets) {
     let existing = "";
     try {
-      existing = await readFile8(join8(cwd, t.path), "utf-8");
+      existing = await readFile9(join9(cwd, t.path), "utf-8");
     } catch {
     }
     if (existing !== t.contents) lines.push(`would update ${t.path} (config: ${t.config})`);
@@ -2015,7 +2055,7 @@ import { resolve as resolve4 } from "path";
 
 // src/recipes/bump-deps.ts
 import { stat as stat2 } from "fs/promises";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 async function exists(path) {
   try {
     await stat2(path);
@@ -2044,10 +2084,10 @@ async function bumpDeps(site, opts = {}) {
     // land on top of whatever else was in the tree.
     checkTreeFirst: true,
     plan: async () => {
-      const hasPnpmLock = await exists(join9(site.path, "pnpm-lock.yaml"));
+      const hasPnpmLock = await exists(join10(site.path, "pnpm-lock.yaml"));
       if (!hasPnpmLock) {
-        const hasNpmLock = await exists(join9(site.path, "package-lock.json"));
-        const hasYarnLock = await exists(join9(site.path, "yarn.lock"));
+        const hasNpmLock = await exists(join10(site.path, "package-lock.json"));
+        const hasYarnLock = await exists(join10(site.path, "yarn.lock"));
         if (hasNpmLock || hasYarnLock) {
           const competing = hasNpmLock ? "package-lock.json" : "yarn.lock";
           return {
@@ -2117,12 +2157,12 @@ async function runBumpDepsCommand(site, opts) {
 import { resolve as resolve5 } from "path";
 
 // src/recipes/svelte-5/index.ts
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 
 // src/util/pkg.ts
-import { readFile as readFile9, writeFile as writeFile4 } from "fs/promises";
+import { readFile as readFile10, writeFile as writeFile4 } from "fs/promises";
 async function readPackageJson(path) {
-  const raw = await readFile9(path, "utf-8");
+  const raw = await readFile10(path, "utf-8");
   return JSON.parse(raw);
 }
 function detectIndentFromContent(raw) {
@@ -2132,7 +2172,7 @@ function detectIndentFromContent(raw) {
 async function writePackageJson(path, pkg) {
   let indent = "  ";
   try {
-    const existing = await readFile9(path, "utf-8");
+    const existing = await readFile10(path, "utf-8");
     indent = detectIndentFromContent(existing);
   } catch {
   }
@@ -2166,7 +2206,7 @@ function bumpDep(pkg, name, version2, opts = {}) {
 }
 
 // src/recipes/svelte-5/step-bump-versions.ts
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 var SVELTE_5_VERSIONS = {
   svelte: "^5.55.5",
   "@sveltejs/kit": "^2.59.0",
@@ -2179,7 +2219,7 @@ var SVELTE_5_VERSIONS = {
   "typescript-svelte-plugin": "^0.3.52"
 };
 async function bumpToSvelte5Versions(cwd) {
-  const pkgPath = join10(cwd, "package.json");
+  const pkgPath = join11(cwd, "package.json");
   const pkg = await readPackageJson(pkgPath);
   let next = pkg;
   for (const [name, version2] of Object.entries(SVELTE_5_VERSIONS)) {
@@ -2191,8 +2231,8 @@ async function bumpToSvelte5Versions(cwd) {
 }
 
 // src/recipes/svelte-5/step-svelte-config.ts
-import { readFile as readFile10, writeFile as writeFile5 } from "fs/promises";
-import { join as join11 } from "path";
+import { readFile as readFile11, writeFile as writeFile5 } from "fs/promises";
+import { join as join12 } from "path";
 var VITE_PLUGIN_PKG = "@sveltejs/vite-plugin-svelte";
 var IMPORT_FROM_VITE_PLUGIN = new RegExp(
   String.raw`^import\s+\{\s*([^}]+?)\s*\}\s+from\s+["']` + VITE_PLUGIN_PKG.replace(/[/]/g, "\\/") + String.raw`["'];?[ \t]*\n`,
@@ -2233,10 +2273,10 @@ function dropPreprocessKey(source) {
   return source.slice(0, m.index) + source.slice(tailIdx).replace(new RegExp(`^${indent}\\n`), "");
 }
 async function migrateSvelteConfig(cwd) {
-  const path = join11(cwd, "svelte.config.js");
+  const path = join12(cwd, "svelte.config.js");
   let src;
   try {
-    src = await readFile10(path, "utf-8");
+    src = await readFile11(path, "utf-8");
   } catch {
     return false;
   }
@@ -2270,9 +2310,9 @@ async function runSvelteMigrate(cwd, spawn2 = defaultSpawn) {
 }
 
 // src/recipes/svelte-5/step-tailwind-upgrade.ts
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 async function upgradeTailwind(cwd, spawn2 = defaultSpawn) {
-  const pkg = await readPackageJson(join12(cwd, "package.json"));
+  const pkg = await readPackageJson(join13(cwd, "package.json"));
   const tailwindVersion = pkg.devDependencies?.tailwindcss ?? pkg.dependencies?.tailwindcss;
   if (!tailwindVersion) return { ran: false, reason: "tailwindcss not installed" };
   if (/^\^?4\./.test(tailwindVersion)) return { ran: false, reason: "already on tailwind 4.x" };
@@ -2293,8 +2333,8 @@ async function upgradeTailwind(cwd, spawn2 = defaultSpawn) {
 }
 
 // src/recipes/svelte-5/step-gotchas.ts
-import { readFile as readFile11, writeFile as writeFile6 } from "fs/promises";
-import { join as join13 } from "path";
+import { readFile as readFile12, writeFile as writeFile6 } from "fs/promises";
+import { join as join14 } from "path";
 import { glob as glob2 } from "tinyglobby";
 
 // src/recipes/svelte-5/codemods/on-event-to-handler.ts
@@ -2626,8 +2666,8 @@ async function planGotchaCodemods(cwd) {
   const changes = [];
   const relPaths = await glob2(SVELTE_GLOBS, { cwd, ignore: IGNORE2, absolute: false });
   for (const rel of relPaths) {
-    const path = join13(cwd, rel);
-    const before = await readFile11(path, "utf-8");
+    const path = join14(cwd, rel);
+    const before = await readFile12(path, "utf-8");
     const after = CODEMODS.reduce((s, fn) => fn(s), before);
     if (after !== before) changes.push({ rel, after });
   }
@@ -2636,7 +2676,7 @@ async function planGotchaCodemods(cwd) {
 async function applyGotchaCodemods(cwd) {
   const changes = await planGotchaCodemods(cwd);
   for (const c of changes) {
-    await writeFile6(join13(cwd, c.rel), c.after, "utf-8");
+    await writeFile6(join14(cwd, c.rel), c.after, "utf-8");
   }
   return { filesChanged: changes.length };
 }
@@ -2660,7 +2700,7 @@ async function verifyMigration(cwd, spawn2 = defaultSpawn) {
 
 // src/recipes/svelte-5/step-summary.ts
 import { writeFile as writeFile7 } from "fs/promises";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 async function writeMigrationSummary(input) {
   const lines = [
     `# Svelte 4 \u2192 5 migration summary`,
@@ -2677,7 +2717,7 @@ async function writeMigrationSummary(input) {
     `- Verify Playwright a11y tests still pass.`
   ];
   const content = lines.join("\n") + "\n";
-  const path = join14(input.cwd, "MIGRATION_SVELTE_5.md");
+  const path = join15(input.cwd, "MIGRATION_SVELTE_5.md");
   await writeFile7(path, content, "utf-8");
   return path;
 }
@@ -2685,7 +2725,7 @@ async function writeMigrationSummary(input) {
 // src/recipes/svelte-5/index.ts
 async function alreadyOnSvelte5(cwd) {
   try {
-    const pkg = await readPackageJson(join15(cwd, "package.json"));
+    const pkg = await readPackageJson(join16(cwd, "package.json"));
     const v = pkg.devDependencies?.svelte ?? pkg.dependencies?.svelte;
     return !!v && /^\^?5\./.test(v);
   } catch {
@@ -2780,7 +2820,7 @@ import { resolve as resolve6 } from "path";
 
 // src/recipes/convert-to-pnpm.ts
 import { rm as rm3, stat as stat3 } from "fs/promises";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 
 // src/recipes/convert-to-pnpm/script-rewrites.ts
 function rewriteScriptForPnpm(script) {
@@ -2813,9 +2853,9 @@ async function exists2(path) {
 async function convertToPnpm(site, opts = {}) {
   const spawn2 = opts.spawn ?? defaultSpawn;
   const pnpmVersion = opts.pnpmVersion ?? DEFAULT_PNPM_VERSION;
-  const pnpmLockPath = join16(site.path, "pnpm-lock.yaml");
-  const npmLockPath = join16(site.path, "package-lock.json");
-  const yarnLockPath = join16(site.path, "yarn.lock");
+  const pnpmLockPath = join17(site.path, "pnpm-lock.yaml");
+  const npmLockPath = join17(site.path, "package-lock.json");
+  const yarnLockPath = join17(site.path, "yarn.lock");
   return withRecipe({
     name: "convert-to-pnpm",
     site,
@@ -2838,7 +2878,7 @@ async function convertToPnpm(site, opts = {}) {
       if (hasYarnLock) await rm3(yarnLockPath, { force: true });
       const sourceLock = hasNpmLock ? "package-lock.json" : "yarn.lock";
       await commit2(`chore(pnpm): remove ${sourceLock}`);
-      const pkgPath = join16(cwd, "package.json");
+      const pkgPath = join17(cwd, "package.json");
       const pkg = await readPackageJson(pkgPath);
       const next = { ...pkg, packageManager: `pnpm@${pnpmVersion}` };
       if (pkg.scripts && typeof pkg.scripts === "object") {
@@ -2851,7 +2891,7 @@ async function convertToPnpm(site, opts = {}) {
       }
       await writePackageJson(pkgPath, next);
       await commit2("chore(pnpm): pin packageManager + rewrite npm scripts");
-      await rm3(join16(cwd, "node_modules"), { recursive: true, force: true });
+      await rm3(join17(cwd, "node_modules"), { recursive: true, force: true });
       const installResult = await spawn2("pnpm", ["install"], { cwd, streaming: true });
       if (installResult.code !== 0) {
         return { kind: "failed", notes: `pnpm install failed (exit ${installResult.code})` };
@@ -2892,16 +2932,16 @@ import { resolve as resolve7 } from "path";
 
 // src/recipes/onboard.ts
 import { stat as stat4 } from "fs/promises";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 
 // src/util/self-version.ts
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
-import { dirname, join as join17 } from "path";
+import { dirname, join as join18 } from "path";
 function selfPackageVersion(callerImportMetaUrl) {
   try {
     const here3 = dirname(fileURLToPath(callerImportMetaUrl));
-    const raw = readFileSync(join17(here3, "..", "..", "package.json"), "utf-8");
+    const raw = readFileSync(join18(here3, "..", "..", "package.json"), "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.version ?? "0.0.0";
   } catch {
@@ -2951,13 +2991,13 @@ async function onboard(site, opts = {}) {
     name: "onboard",
     site,
     plan: async () => {
-      if (!await exists3(join18(site.path, "pnpm-lock.yaml"))) {
+      if (!await exists3(join19(site.path, "pnpm-lock.yaml"))) {
         return {
           kind: "failed",
           notes: "no pnpm-lock.yaml at site root \u2014 run convert-to-pnpm first"
         };
       }
-      const pkgPath = join18(site.path, "package.json");
+      const pkgPath = join19(site.path, "package.json");
       const pkg = await readPackageJson(pkgPath);
       const toAdd = [];
       if (!isDeclared(pkg, PACKAGE_NAME)) {
@@ -2977,7 +3017,7 @@ async function onboard(site, opts = {}) {
       return { kind: "apply", plan: { pkg, toAdd } };
     },
     apply: async ({ pkg, toAdd }, { commit: commit2, cwd }) => {
-      const pkgPath = join18(cwd, "package.json");
+      const pkgPath = join19(cwd, "package.json");
       let next = pkg;
       for (const dep of toAdd) {
         next = bumpDep(next, dep.name, dep.version);
@@ -3046,7 +3086,7 @@ import { resolve as resolve8 } from "path";
 
 // src/recipes/svelte-codemods.ts
 import { writeFile as writeFile8 } from "fs/promises";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 async function svelteCodemods(site) {
   return withRecipe({
     name: "svelte-codemods",
@@ -3060,7 +3100,7 @@ async function svelteCodemods(site) {
     },
     apply: async (changes, { commit: commit2, cwd }) => {
       for (const c of changes) {
-        await writeFile8(join19(cwd, c.rel), c.after, "utf-8");
+        await writeFile8(join20(cwd, c.rel), c.after, "utf-8");
       }
       await commit2(`refactor(svelte5): apply codemods (${changes.length} files)`);
       return { kind: "ok" };
@@ -3282,12 +3322,174 @@ async function runSingleSiteDraft(slug, opts) {
   return { output: `Draft created: ${result.reportRow?.reportId}`, code: 0 };
 }
 
+// src/cli/commands/init.ts
+import { resolve as resolve9 } from "path";
+
+// src/recipes/a11y-fixtures-page/index.ts
+import { access, mkdir as mkdir3, writeFile as writeFile10 } from "fs/promises";
+import { dirname as dirname4, join as join22 } from "path";
+
+// src/recipes/a11y-fixtures-page/template.ts
+var A11Y_FIXTURES_PAGE_RELATIVE = "src/routes/dev/a11y-fixtures/+page.svelte";
+var A11Y_FIXTURES_PAGE_TEMPLATE = `<svelte:head>
+  <title>a11y fixtures \u2014 Reddoor</title>
+  <meta
+    name="description"
+    content="Reddoor accessibility fixtures \u2014 semantic landmarks, heading hierarchy, and a stable target for @lhci/cli and Playwright + axe-core coverage. Not linked from the public site."
+  />
+</svelte:head>
+
+<main>
+  <header>
+    <h1>Accessibility fixtures</h1>
+    <p>
+      This page exists so <code>@lhci/cli</code> and Playwright + axe-core have a
+      stable target with predictable a11y characteristics. It is not linked from
+      the public site.
+    </p>
+  </header>
+
+  <section aria-labelledby="landmarks-heading">
+    <h2 id="landmarks-heading">Landmarks</h2>
+    <p>
+      A single <code>main</code> wraps the page; sections each declare
+      <code>aria-labelledby</code> matched to their heading id so screen readers
+      and axe both see a clean outline.
+    </p>
+  </section>
+
+  <section aria-labelledby="links-heading">
+    <h2 id="links-heading">Links</h2>
+    <p>
+      <a href="/">Back to home</a> \u2014 relative link with descriptive visible text,
+      so no <code>aria-label</code> override is needed.
+    </p>
+  </section>
+</main>
+`;
+
+// src/recipes/a11y-fixtures-page/index.ts
+async function fileExists(path) {
+  try {
+    await access(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function a11yFixturesPage(site) {
+  const target = join22(site.path, A11Y_FIXTURES_PAGE_RELATIVE);
+  return withRecipe({
+    name: "a11y-fixtures-page",
+    site,
+    plan: async () => {
+      if (await fileExists(target)) {
+        return { kind: "noop", notes: `${A11Y_FIXTURES_PAGE_RELATIVE} already exists` };
+      }
+      return { kind: "apply", plan: { target } };
+    },
+    apply: async (planned, { commit: commit2 }) => {
+      await mkdir3(dirname4(planned.target), { recursive: true });
+      await writeFile10(planned.target, A11Y_FIXTURES_PAGE_TEMPLATE, "utf-8");
+      await commit2("feat: add /dev/a11y-fixtures starter route");
+      return { kind: "ok" };
+    }
+  });
+}
+
+// src/recipes/init.ts
+function recipeStep(name, fn) {
+  return {
+    name,
+    run: async (site) => ({ kind: "recipe", result: await fn(site) })
+  };
+}
+var DEFAULT_INIT_STEPS = [
+  recipeStep("convert-to-pnpm", convertToPnpm),
+  recipeStep("onboard", onboard),
+  recipeStep("sync-configs", syncConfigs),
+  recipeStep("svelte-codemods", svelteCodemods),
+  recipeStep("a11y-fixtures-page", a11yFixturesPage),
+  {
+    name: "audit",
+    run: async (site) => ({ kind: "audit", results: await runAudits(site) })
+  }
+];
+async function init(site, opts = {}) {
+  const steps = opts.steps ?? DEFAULT_INIT_STEPS;
+  const out = [];
+  for (const step of steps) {
+    let result;
+    try {
+      result = await step.run(site);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      out.push({ name: step.name, result: { kind: "error", message } });
+      return { site: siteLabel(site), steps: out, complete: false };
+    }
+    out.push({ name: step.name, result });
+    if (result.kind === "recipe" && result.result.status === "failed") {
+      return { site: siteLabel(site), steps: out, complete: false };
+    }
+  }
+  return { site: siteLabel(site), steps: out, complete: true };
+}
+
+// src/cli/commands/init.ts
+function formatStep(name, r) {
+  if (r.kind === "error") return `${name.padEnd(20)} error: ${r.message}`;
+  if (r.kind === "audit") {
+    const lines = r.results.map(
+      (a) => `  ${a.audit.padEnd(12)} ${a.status.padEnd(5)} ${a.summary}`
+    );
+    return `${name.padEnd(20)} ${r.results.length} audit(s):
+${lines.join("\n")}`;
+  }
+  const rec = r.result;
+  if (rec.status === "noop") return `${name.padEnd(20)} noop${rec.notes ? ` \u2014 ${rec.notes}` : ""}`;
+  if (rec.status === "failed")
+    return `${name.padEnd(20)} failed${rec.notes ? ` \u2014 ${rec.notes}` : ""}`;
+  return `${name.padEnd(20)} applied (${rec.commits.length} commit${rec.commits.length === 1 ? "" : "s"})${rec.notes ? ` \u2014 ${rec.notes}` : ""}`;
+}
+function formatResult7(r) {
+  const header = `[${r.site}] init \u2014 ${r.complete ? "complete" : "STOPPED"}`;
+  const body = r.steps.map((s) => formatStep(s.name, s.result)).join("\n");
+  return `${header}
+${body}`;
+}
+function exitCodeFor(r) {
+  if (!r.complete) return 1;
+  for (const step of r.steps) {
+    if (step.result.kind === "audit" && step.result.results.some((a) => a.status === "fail")) {
+      return 1;
+    }
+  }
+  return 0;
+}
+async function runInitCommand(site, opts) {
+  const cwd = opts.cwd ? resolve9(opts.cwd) : process.cwd();
+  let sites = await resolveSites({
+    ...site !== void 0 ? { site } : {},
+    ...opts.fleet !== void 0 ? { fleet: opts.fleet } : {},
+    cwd
+  });
+  if (opts.fleet) {
+    const workdir = opts.workdir ?? `${process.env.HOME ?? ""}/.reddoor-maint/sites`;
+    sites = await Promise.all(sites.map((s) => cloneIfNeeded(s, { workdir })));
+  }
+  const results = [];
+  for (const s of sites) results.push(await init(s));
+  const output = results.map(formatResult7).join("\n\n");
+  const code = results.some((r) => exitCodeFor(r) !== 0) ? 1 : 0;
+  return { output, code };
+}
+
 // src/cli/version.ts
 import { readFileSync as readFileSync2 } from "fs";
-import { join as join21 } from "path";
+import { join as join23 } from "path";
 function resolvePackageVersion(fromDir) {
   try {
-    const raw = readFileSync2(join21(fromDir, "..", "..", "package.json"), "utf-8");
+    const raw = readFileSync2(join23(fromDir, "..", "..", "package.json"), "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.version ?? "unknown";
   } catch {
@@ -3296,7 +3498,7 @@ function resolvePackageVersion(fromDir) {
 }
 
 // src/cli/bin.ts
-var here2 = dirname4(fileURLToPath3(import.meta.url));
+var here2 = dirname5(fileURLToPath3(import.meta.url));
 var version = resolvePackageVersion(here2);
 var AUDIT_DESCRIPTIONS = {
   deps: "Diff site package.json against the bundled baseline version map.",
@@ -3311,7 +3513,9 @@ var RECIPE_DESCRIPTIONS = {
   "svelte-4-to-5": "Run the 7-commit Svelte 4 \u2192 5 upgrade recipe.",
   "svelte-codemods": "Apply Svelte 5 gotcha codemods to an already-migrated site (state_referenced_locally, etc.).",
   "convert-to-pnpm": "Convert an npm/yarn site to pnpm (lockfile, packageManager, scripts).",
-  onboard: "Install @reddoorla/maintenance + audit deps on a site (preferred first step)."
+  onboard: "Install @reddoorla/maintenance + audit deps on a site (preferred first step).",
+  "a11y-fixtures-page": "Write src/routes/dev/a11y-fixtures/+page.svelte (stub for lhci + axe targets).",
+  init: "Run the full onboarding chain (convert-to-pnpm \u2192 onboard \u2192 sync-configs \u2192 svelte-codemods \u2192 a11y-fixtures-page \u2192 audit)."
 };
 async function runOrExit(fn, opts) {
   try {
@@ -3388,6 +3592,15 @@ cli.command(
 ).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
   async (site, opts) => runOrExit(() => runOnboardCommand(site, opts), opts)
 );
+cli.command(
+  "init [site]",
+  "One-shot guided onboarding: convert-to-pnpm \u2192 onboard \u2192 sync-configs \u2192 svelte-codemods \u2192 a11y-fixtures-page \u2192 audit."
+).option(
+  "--fleet <inventory>",
+  'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
+).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
+  async (site, opts) => runOrExit(() => runInitCommand(site, opts), opts)
+);
 cli.command("report [site]", "Draft or send maintenance/testing reports.").option("--due", "Scan all Websites and draft overdue reports.").option(
   "--preview",
   "Single-site dry run; writes reports/<slug>/draft.html, never touches Airtable."