@reddoorla/maintenance 0.85.1 → 0.86.0

package/dist/chunk-3SF7D4DY.js

@@ -0,0 +1,359 @@
+// src/db/migrations.ts
+var MIGRATIONS = [
+  {
+    id: "0001_init",
+    sql: `
+      CREATE TABLE IF NOT EXISTS submissions (
+        id TEXT PRIMARY KEY,
+        submission_id INTEGER,
+        site_id TEXT NOT NULL,
+        form_type TEXT NOT NULL,
+        name TEXT NOT NULL,
+        email TEXT NOT NULL,
+        phone TEXT,
+        message TEXT,
+        extra_fields TEXT,
+        source_url TEXT,
+        utm TEXT,
+        submitted_at TEXT,
+        status TEXT NOT NULL DEFAULT 'new',
+        notify_status TEXT NOT NULL DEFAULT 'skipped',
+        resend_message_id TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_submissions_site_submitted
+        ON submissions (site_id, submitted_at DESC);
+      CREATE INDEX IF NOT EXISTS idx_submissions_status
+        ON submissions (status);
+      CREATE TABLE IF NOT EXISTS spam_screenouts (
+        site_id TEXT NOT NULL,
+        date TEXT NOT NULL,
+        honeypot INTEGER NOT NULL DEFAULT 0,
+        too_fast INTEGER NOT NULL DEFAULT 0,
+        marked_spam INTEGER NOT NULL DEFAULT 0,
+        PRIMARY KEY (site_id, date)
+      );
+    `
+  },
+  {
+    id: "0002_fleet_events",
+    sql: `
+      CREATE TABLE IF NOT EXISTS fleet_events (
+        id TEXT PRIMARY KEY,
+        ts TEXT NOT NULL,
+        type TEXT NOT NULL,
+        site_id TEXT,
+        site_name TEXT,
+        summary TEXT NOT NULL,
+        data TEXT,
+        created_at TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_fleet_events_ts ON fleet_events (ts);
+    `
+  },
+  {
+    id: "0003_add_spam_score",
+    // SQLite `ADD COLUMN` has no `IF NOT EXISTS`, so it is NOT self-idempotent: if the
+    // `_migrations` marker is lost after the column is added (crash between statement
+    // and marker write), a re-run would throw `duplicate column name`. `migrate.ts`
+    // recognizes that error as already-applied and records the marker, keeping the
+    // runner idempotent (see `isAlreadyAppliedError`).
+    sql: `ALTER TABLE submissions ADD COLUMN spam_score REAL;`
+  },
+  {
+    id: "0004_add_spam_reason",
+    sql: `ALTER TABLE submissions ADD COLUMN spam_reason TEXT;`
+  },
+  {
+    // Outcome of the newsletter fan-out (site webhook + Mailchimp). Before this the
+    // results were console.error-only, so a rotated Mailchimp key or an outage would
+    // silently stop signups reaching the audience with no trace anywhere the operator
+    // looks — the row still read `notify=sent`, healthy. Same non-idempotent
+    // ADD COLUMN caveat as 0003.
+    id: "0005_add_fanout_status",
+    sql: `ALTER TABLE submissions ADD COLUMN fanout_status TEXT;`
+  },
+  {
+    // Phase 0 of the Airtable → Turso migration (#539): a lead whose SITE LOOKUP
+    // fails must still land somewhere durable. On 2026-08-17 the Airtable quota
+    // outage made `getWebsiteBySlug` throw before `createSubmission` ran, so every
+    // lead in the window 502'd away unrecorded — while THIS store (which holds
+    // submissions) was healthy the whole time. Rows here are written only on that
+    // path and replayed through the normal pipeline once the lookup recovers
+    // (`db replay-deadletters`), producing an ordinary submissions row with real
+    // spam classification and notify. Deliberately a separate table rather than a
+    // nullable `submissions.site_id`: site_id is NOT NULL, every reader assumes a
+    // real rec id, and a sentinel would collapse dashboard grouping (the "" key
+    // hazard audit.ts already documents).
+    //
+    // `turnstile` stores the verification COMPUTED AT RECEIPT ({outcome, hostname}
+    // JSON) — tokens expire in 300s, so replay could never re-verify; it replays
+    // with the answer we already had.
+    id: "0006_submission_deadletter",
+    sql: `
+      CREATE TABLE IF NOT EXISTS submission_deadletter (
+        id TEXT PRIMARY KEY,
+        site_slug TEXT NOT NULL,
+        payload TEXT NOT NULL,
+        turnstile TEXT NOT NULL,
+        error TEXT NOT NULL,
+        received_at TEXT NOT NULL,
+        replayed_at TEXT,
+        replay_outcome TEXT,
+        replay_submission_id TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_deadletter_unreplayed
+        ON submission_deadletter (replayed_at);
+    `
+  },
+  {
+    // Phase 1.2 of the Airtable → Turso migration (#539): the fleet-state tables.
+    // Split by WRITER, not topic (design D2, confirmed by the 2026-08-23 writer
+    // map — every code-written column has exactly one writer):
+    //   sites         — operator (dashboard editor / console / launch flow)
+    //   site_health   — the nightly audit write-back, one batched upsert
+    //   site_schedule — updateNextDueDates (report cron, derived)
+    //   reports       — report drafting + the operator approve flow
+    // PKs are the Airtable `rec…` ids (design D1): 278+ submissions rows already
+    // reference them, and the parity harness diffs the two stores row-for-row.
+    //
+    // Naming: snake_case throughout; Airtable's misspellings ("maintenence") and
+    // display quirks die here. `sites.legacy` is a JSON object holding the 33
+    // populated-but-code-unreferenced columns (launch-era checklist, hosting
+    // reference cells) keyed by their original Airtable column name — data kept,
+    // schema not fossilized. The plaintext DNS/cms credential cells deliberately
+    // do NOT migrate at all (operator ruling 2026-08-23); they live on only in
+    // the frozen base. `site_health.analytics_soft_fail_at` is the column code
+    // always wanted ("Analytics soft-fail at") but no operator ever created in
+    // Airtable — it ships real here.
+    //
+    // reports.checklist is JSON keyed by the STABLE checklist key ("deploy",
+    // "cms", …, from src/reports/checklist.ts), not the Airtable column name —
+    // the importer translates, so "Test: Verified After Updates" stops leaking
+    // its legacy name into a second store.
+    id: "0007_fleet_state",
+    sql: `
+      CREATE TABLE IF NOT EXISTS sites (
+        id TEXT PRIMARY KEY,
+        slug TEXT NOT NULL UNIQUE,
+        name TEXT NOT NULL,
+        url TEXT,
+        status TEXT,
+        point_of_contact TEXT,
+        maintenance_freq TEXT,
+        testing_freq TEXT,
+        maintenance_day TEXT,
+        testing_day TEXT,
+        ga4_property_id TEXT,
+        search_query TEXT,
+        search_console_property TEXT,
+        git_repo TEXT,
+        netlify_id TEXT,
+        report_recipients_to TEXT,
+        report_recipients_cc TEXT,
+        copy_intro TEXT,
+        copy_contact TEXT,
+        copy_footer TEXT,
+        newsletter_webhook TEXT,
+        mailchimp_api_key TEXT,
+        mailchimp_audience_id TEXT,
+        notify_routing TEXT,
+        require_turnstile INTEGER NOT NULL DEFAULT 0,
+        accepted_watch_conditions TEXT,
+        prismic_ack_until TEXT,
+        launched_at TEXT,
+        header_image BLOB,
+        header_image_filename TEXT,
+        header_image_type TEXT,
+        header_image_generated_at TEXT,
+        legacy TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_sites_status ON sites (status);
+
+      CREATE TABLE IF NOT EXISTS site_health (
+        site_id TEXT PRIMARY KEY,
+        p_score INTEGER,
+        r_score INTEGER,
+        bp_score INTEGER,
+        seo_score INTEGER,
+        lighthouse_at TEXT,
+        a11y_violations INTEGER,
+        deps_drifted INTEGER,
+        deps_major_behind INTEGER,
+        deps_outdated INTEGER,
+        deps_major_outdated INTEGER,
+        vulns_critical INTEGER,
+        vulns_high INTEGER,
+        vulns_moderate INTEGER,
+        vulns_low INTEGER,
+        security_audit_at TEXT,
+        security_advisories TEXT,
+        auto_fix_attempts INTEGER,
+        analytics_soft_fail_at TEXT,
+        cert_days_remaining INTEGER,
+        domain_checked_at TEXT,
+        deploy_status TEXT,
+        last_deploy_at TEXT,
+        deploy_log_url TEXT,
+        deploy_checked_at TEXT,
+        function_health TEXT,
+        cms_reachable TEXT,
+        turnstile_widget TEXT,
+        function_health_checked_at TEXT,
+        crossbrowser_ok INTEGER,
+        mobile_ok INTEGER,
+        links_ok INTEGER,
+        broken_links INTEGER,
+        browser_checked_at TEXT,
+        uptime_reachable TEXT,
+        titles_meta_ok TEXT,
+        smoke_ok TEXT,
+        last_smoke_at TEXT,
+        form_e2e_ok TEXT,
+        form_e2e_checked_at TEXT,
+        renovate_failing_cis INTEGER,
+        default_branch_ci TEXT,
+        last_commit_at TEXT,
+        github_signals_at TEXT,
+        prismic_models TEXT,
+        prismic_models_checked_at TEXT,
+        prismic_models_drift TEXT
+      );
+
+      CREATE TABLE IF NOT EXISTS site_schedule (
+        site_id TEXT PRIMARY KEY,
+        next_maintenance_at TEXT,
+        next_testing_at TEXT,
+        computed_at TEXT
+      );
+
+      CREATE TABLE IF NOT EXISTS reports (
+        id TEXT PRIMARY KEY,
+        site_id TEXT,
+        report_id TEXT,
+        report_type TEXT,
+        period TEXT,
+        period_start TEXT,
+        period_end TEXT,
+        completed_on TEXT,
+        lighthouse_performance INTEGER,
+        lighthouse_accessibility INTEGER,
+        lighthouse_best_practices INTEGER,
+        lighthouse_seo INTEGER,
+        ga_users_current INTEGER,
+        ga_users_previous INTEGER,
+        search_found_page1 INTEGER,
+        search_position REAL,
+        last_tested_date TEXT,
+        commentary TEXT,
+        subject_override TEXT,
+        draft_ready INTEGER NOT NULL DEFAULT 0,
+        approved_to_send INTEGER NOT NULL DEFAULT 0,
+        approved_at TEXT,
+        approved_by TEXT,
+        send_override INTEGER NOT NULL DEFAULT 0,
+        override_reason TEXT,
+        override_by TEXT,
+        override_at TEXT,
+        sent_at TEXT,
+        delivery_status TEXT,
+        resend_message_id TEXT,
+        checklist TEXT,
+        checklist_auto_evidence TEXT,
+        rendered_html TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_reports_site ON reports (site_id, period_start DESC);
+    `
+  },
+  {
+    // Indexes the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts) proved the
+    // hot paths need — each serves a named query shape that otherwise full-scans
+    // submissions, the one unbounded-growth table:
+    //   submitted_at    — every windowed read (/submissions default page, digest
+    //                     per-site counts, duplicate/repeat-sender scans)
+    //   resend_message_id — the resend-webhook bounce lookup (markNotifyBouncedByMessageId)
+    //   submission_id   — createSubmission's MAX(submission_id)+1 display number,
+    //                     O(1) off the index instead of a scan per insert
+    //   spam_reason (partial, covering) — listSpamReasonsFiltered's facet tally
+    //                     reads ONLY spam_reason WHERE spam_reason IS NOT NULL;
+    //                     partial keeps it to the spam subset
+    //   spam_screenouts(date) — listScreenOutsSince windows on date, which the
+    //                     (site_id, date) PK can't serve
+    id: "0008_query_plan_indexes",
+    sql: `
+      CREATE INDEX IF NOT EXISTS idx_submissions_submitted
+        ON submissions (submitted_at DESC);
+      CREATE INDEX IF NOT EXISTS idx_submissions_spam_reason
+        ON submissions (spam_reason) WHERE spam_reason IS NOT NULL;
+      CREATE INDEX IF NOT EXISTS idx_submissions_resend_message
+        ON submissions (resend_message_id);
+      CREATE INDEX IF NOT EXISTS idx_submissions_display_number
+        ON submissions (submission_id);
+      CREATE INDEX IF NOT EXISTS idx_screenouts_date
+        ON spam_screenouts (date);
+    `
+  },
+  {
+    // Prospect audits (spec 2026-08-24): one row per `prospect-audit` CLI run.
+    // `token` is the unguessable public handle for GET /r/{token}; `result_json`
+    // is the full ProspectAuditResult, re-rendered on every request so report
+    // styling updates apply to already-shared links.
+    id: "0009_prospect_audits",
+    sql: `
+      CREATE TABLE IF NOT EXISTS prospect_audits (
+        id TEXT PRIMARY KEY,
+        token TEXT NOT NULL UNIQUE,
+        url TEXT NOT NULL,
+        business TEXT,
+        created_at TEXT NOT NULL,
+        status TEXT NOT NULL DEFAULT 'complete',
+        result_json TEXT NOT NULL
+      );
+    `
+  },
+  {
+    // Cockpit /audits listing page (spec 2026-08-25, Piece 5):
+    // listRecentProspectAudits orders by created_at DESC with no WHERE clause —
+    // without this index that's a raw SCAN of prospect_audits followed by a temp
+    // b-tree sort, which the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts)
+    // fails the build on. DESC matches the query's own ORDER BY so SQLite can walk
+    // the index directly instead of sorting.
+    id: "0010_prospect_audits_created_index",
+    sql: `
+      CREATE INDEX IF NOT EXISTS idx_prospect_audits_created
+        ON prospect_audits (created_at DESC);
+    `
+  }
+];
+
+// src/db/migrate.ts
+function isAlreadyAppliedError(err) {
+  const message = err instanceof Error ? err.message : String(err);
+  return /duplicate column name/i.test(message);
+}
+async function runMigrations(client) {
+  await client.execute(
+    "CREATE TABLE IF NOT EXISTS _migrations (id TEXT PRIMARY KEY, applied_at TEXT NOT NULL)"
+  );
+  const existing = await client.execute("SELECT id FROM _migrations");
+  const applied = new Set(existing.rows.map((r) => String(r.id)));
+  const ran = [];
+  for (const m of MIGRATIONS) {
+    if (applied.has(m.id)) continue;
+    try {
+      await client.executeMultiple(m.sql);
+    } catch (err) {
+      if (!isAlreadyAppliedError(err)) throw err;
+    }
+    await client.execute({
+      sql: "INSERT INTO _migrations (id, applied_at) VALUES (?, ?)",
+      args: [m.id, (/* @__PURE__ */ new Date()).toISOString()]
+    });
+    ran.push(m.id);
+  }
+  return ran;
+}
+
+export {
+  runMigrations
+};
+//# sourceMappingURL=chunk-3SF7D4DY.js.map

package/dist/chunk-3SF7D4DY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/migrations.ts","../src/db/migrate.ts"],"sourcesContent":["/** Ordered, append-only list of standard-SQL migration scripts. Each runs once,\n *  tracked by `id` in the `_migrations` table (see migrate.ts). Statements use\n *  IF NOT EXISTS so even a partial re-apply is safe. Never edit a shipped script —\n *  add a new one. Every statement in a script MUST be independently idempotent:\n *  `migrate.ts` runs each script via `executeMultiple`, which is NOT transactional,\n *  so a mid-script failure can leave earlier statements applied and the id unrecorded\n *  — a re-run then re-executes the whole script. Standard SQLite SQL only (no\n *  Turso-specific syntax) so the host stays a connection-string swap. */\nexport type Migration = { id: string; sql: string };\n\nexport const MIGRATIONS: Migration[] = [\n  {\n    id: \"0001_init\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS submissions (\n        id TEXT PRIMARY KEY,\n        submission_id INTEGER,\n        site_id TEXT NOT NULL,\n        form_type TEXT NOT NULL,\n        name TEXT NOT NULL,\n        email TEXT NOT NULL,\n        phone TEXT,\n        message TEXT,\n        extra_fields TEXT,\n        source_url TEXT,\n        utm TEXT,\n        submitted_at TEXT,\n        status TEXT NOT NULL DEFAULT 'new',\n        notify_status TEXT NOT NULL DEFAULT 'skipped',\n        resend_message_id TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_submissions_site_submitted\n        ON submissions (site_id, submitted_at DESC);\n      CREATE INDEX IF NOT EXISTS idx_submissions_status\n        ON submissions (status);\n      CREATE TABLE IF NOT EXISTS spam_screenouts (\n        site_id TEXT NOT NULL,\n        date TEXT NOT NULL,\n        honeypot INTEGER NOT NULL DEFAULT 0,\n        too_fast INTEGER NOT NULL DEFAULT 0,\n        marked_spam INTEGER NOT NULL DEFAULT 0,\n        PRIMARY KEY (site_id, date)\n      );\n    `,\n  },\n  {\n    id: \"0002_fleet_events\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS fleet_events (\n        id TEXT PRIMARY KEY,\n        ts TEXT NOT NULL,\n        type TEXT NOT NULL,\n        site_id TEXT,\n        site_name TEXT,\n        summary TEXT NOT NULL,\n        data TEXT,\n        created_at TEXT NOT NULL\n      );\n      CREATE INDEX IF NOT EXISTS idx_fleet_events_ts ON fleet_events (ts);\n    `,\n  },\n  {\n    id: \"0003_add_spam_score\",\n    // SQLite `ADD COLUMN` has no `IF NOT EXISTS`, so it is NOT self-idempotent: if the\n    // `_migrations` marker is lost after the column is added (crash between statement\n    // and marker write), a re-run would throw `duplicate column name`. `migrate.ts`\n    // recognizes that error as already-applied and records the marker, keeping the\n    // runner idempotent (see `isAlreadyAppliedError`).\n    sql: `ALTER TABLE submissions ADD COLUMN spam_score REAL;`,\n  },\n  {\n    id: \"0004_add_spam_reason\",\n    sql: `ALTER TABLE submissions ADD COLUMN spam_reason TEXT;`,\n  },\n  {\n    // Outcome of the newsletter fan-out (site webhook + Mailchimp). Before this the\n    // results were console.error-only, so a rotated Mailchimp key or an outage would\n    // silently stop signups reaching the audience with no trace anywhere the operator\n    // looks — the row still read `notify=sent`, healthy. Same non-idempotent\n    // ADD COLUMN caveat as 0003.\n    id: \"0005_add_fanout_status\",\n    sql: `ALTER TABLE submissions ADD COLUMN fanout_status TEXT;`,\n  },\n  {\n    // Phase 0 of the Airtable → Turso migration (#539): a lead whose SITE LOOKUP\n    // fails must still land somewhere durable. On 2026-08-17 the Airtable quota\n    // outage made `getWebsiteBySlug` throw before `createSubmission` ran, so every\n    // lead in the window 502'd away unrecorded — while THIS store (which holds\n    // submissions) was healthy the whole time. Rows here are written only on that\n    // path and replayed through the normal pipeline once the lookup recovers\n    // (`db replay-deadletters`), producing an ordinary submissions row with real\n    // spam classification and notify. Deliberately a separate table rather than a\n    // nullable `submissions.site_id`: site_id is NOT NULL, every reader assumes a\n    // real rec id, and a sentinel would collapse dashboard grouping (the \"\" key\n    // hazard audit.ts already documents).\n    //\n    // `turnstile` stores the verification COMPUTED AT RECEIPT ({outcome, hostname}\n    // JSON) — tokens expire in 300s, so replay could never re-verify; it replays\n    // with the answer we already had.\n    id: \"0006_submission_deadletter\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS submission_deadletter (\n        id TEXT PRIMARY KEY,\n        site_slug TEXT NOT NULL,\n        payload TEXT NOT NULL,\n        turnstile TEXT NOT NULL,\n        error TEXT NOT NULL,\n        received_at TEXT NOT NULL,\n        replayed_at TEXT,\n        replay_outcome TEXT,\n        replay_submission_id TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_deadletter_unreplayed\n        ON submission_deadletter (replayed_at);\n    `,\n  },\n  {\n    // Phase 1.2 of the Airtable → Turso migration (#539): the fleet-state tables.\n    // Split by WRITER, not topic (design D2, confirmed by the 2026-08-23 writer\n    // map — every code-written column has exactly one writer):\n    //   sites         — operator (dashboard editor / console / launch flow)\n    //   site_health   — the nightly audit write-back, one batched upsert\n    //   site_schedule — updateNextDueDates (report cron, derived)\n    //   reports       — report drafting + the operator approve flow\n    // PKs are the Airtable `rec…` ids (design D1): 278+ submissions rows already\n    // reference them, and the parity harness diffs the two stores row-for-row.\n    //\n    // Naming: snake_case throughout; Airtable's misspellings (\"maintenence\") and\n    // display quirks die here. `sites.legacy` is a JSON object holding the 33\n    // populated-but-code-unreferenced columns (launch-era checklist, hosting\n    // reference cells) keyed by their original Airtable column name — data kept,\n    // schema not fossilized. The plaintext DNS/cms credential cells deliberately\n    // do NOT migrate at all (operator ruling 2026-08-23); they live on only in\n    // the frozen base. `site_health.analytics_soft_fail_at` is the column code\n    // always wanted (\"Analytics soft-fail at\") but no operator ever created in\n    // Airtable — it ships real here.\n    //\n    // reports.checklist is JSON keyed by the STABLE checklist key (\"deploy\",\n    // \"cms\", …, from src/reports/checklist.ts), not the Airtable column name —\n    // the importer translates, so \"Test: Verified After Updates\" stops leaking\n    // its legacy name into a second store.\n    id: \"0007_fleet_state\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS sites (\n        id TEXT PRIMARY KEY,\n        slug TEXT NOT NULL UNIQUE,\n        name TEXT NOT NULL,\n        url TEXT,\n        status TEXT,\n        point_of_contact TEXT,\n        maintenance_freq TEXT,\n        testing_freq TEXT,\n        maintenance_day TEXT,\n        testing_day TEXT,\n        ga4_property_id TEXT,\n        search_query TEXT,\n        search_console_property TEXT,\n        git_repo TEXT,\n        netlify_id TEXT,\n        report_recipients_to TEXT,\n        report_recipients_cc TEXT,\n        copy_intro TEXT,\n        copy_contact TEXT,\n        copy_footer TEXT,\n        newsletter_webhook TEXT,\n        mailchimp_api_key TEXT,\n        mailchimp_audience_id TEXT,\n        notify_routing TEXT,\n        require_turnstile INTEGER NOT NULL DEFAULT 0,\n        accepted_watch_conditions TEXT,\n        prismic_ack_until TEXT,\n        launched_at TEXT,\n        header_image BLOB,\n        header_image_filename TEXT,\n        header_image_type TEXT,\n        header_image_generated_at TEXT,\n        legacy TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_sites_status ON sites (status);\n\n      CREATE TABLE IF NOT EXISTS site_health (\n        site_id TEXT PRIMARY KEY,\n        p_score INTEGER,\n        r_score INTEGER,\n        bp_score INTEGER,\n        seo_score INTEGER,\n        lighthouse_at TEXT,\n        a11y_violations INTEGER,\n        deps_drifted INTEGER,\n        deps_major_behind INTEGER,\n        deps_outdated INTEGER,\n        deps_major_outdated INTEGER,\n        vulns_critical INTEGER,\n        vulns_high INTEGER,\n        vulns_moderate INTEGER,\n        vulns_low INTEGER,\n        security_audit_at TEXT,\n        security_advisories TEXT,\n        auto_fix_attempts INTEGER,\n        analytics_soft_fail_at TEXT,\n        cert_days_remaining INTEGER,\n        domain_checked_at TEXT,\n        deploy_status TEXT,\n        last_deploy_at TEXT,\n        deploy_log_url TEXT,\n        deploy_checked_at TEXT,\n        function_health TEXT,\n        cms_reachable TEXT,\n        turnstile_widget TEXT,\n        function_health_checked_at TEXT,\n        crossbrowser_ok INTEGER,\n        mobile_ok INTEGER,\n        links_ok INTEGER,\n        broken_links INTEGER,\n        browser_checked_at TEXT,\n        uptime_reachable TEXT,\n        titles_meta_ok TEXT,\n        smoke_ok TEXT,\n        last_smoke_at TEXT,\n        form_e2e_ok TEXT,\n        form_e2e_checked_at TEXT,\n        renovate_failing_cis INTEGER,\n        default_branch_ci TEXT,\n        last_commit_at TEXT,\n        github_signals_at TEXT,\n        prismic_models TEXT,\n        prismic_models_checked_at TEXT,\n        prismic_models_drift TEXT\n      );\n\n      CREATE TABLE IF NOT EXISTS site_schedule (\n        site_id TEXT PRIMARY KEY,\n        next_maintenance_at TEXT,\n        next_testing_at TEXT,\n        computed_at TEXT\n      );\n\n      CREATE TABLE IF NOT EXISTS reports (\n        id TEXT PRIMARY KEY,\n        site_id TEXT,\n        report_id TEXT,\n        report_type TEXT,\n        period TEXT,\n        period_start TEXT,\n        period_end TEXT,\n        completed_on TEXT,\n        lighthouse_performance INTEGER,\n        lighthouse_accessibility INTEGER,\n        lighthouse_best_practices INTEGER,\n        lighthouse_seo INTEGER,\n        ga_users_current INTEGER,\n        ga_users_previous INTEGER,\n        search_found_page1 INTEGER,\n        search_position REAL,\n        last_tested_date TEXT,\n        commentary TEXT,\n        subject_override TEXT,\n        draft_ready INTEGER NOT NULL DEFAULT 0,\n        approved_to_send INTEGER NOT NULL DEFAULT 0,\n        approved_at TEXT,\n        approved_by TEXT,\n        send_override INTEGER NOT NULL DEFAULT 0,\n        override_reason TEXT,\n        override_by TEXT,\n        override_at TEXT,\n        sent_at TEXT,\n        delivery_status TEXT,\n        resend_message_id TEXT,\n        checklist TEXT,\n        checklist_auto_evidence TEXT,\n        rendered_html TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_reports_site ON reports (site_id, period_start DESC);\n    `,\n  },\n  {\n    // Indexes the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts) proved the\n    // hot paths need — each serves a named query shape that otherwise full-scans\n    // submissions, the one unbounded-growth table:\n    //   submitted_at    — every windowed read (/submissions default page, digest\n    //                     per-site counts, duplicate/repeat-sender scans)\n    //   resend_message_id — the resend-webhook bounce lookup (markNotifyBouncedByMessageId)\n    //   submission_id   — createSubmission's MAX(submission_id)+1 display number,\n    //                     O(1) off the index instead of a scan per insert\n    //   spam_reason (partial, covering) — listSpamReasonsFiltered's facet tally\n    //                     reads ONLY spam_reason WHERE spam_reason IS NOT NULL;\n    //                     partial keeps it to the spam subset\n    //   spam_screenouts(date) — listScreenOutsSince windows on date, which the\n    //                     (site_id, date) PK can't serve\n    id: \"0008_query_plan_indexes\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_submissions_submitted\n        ON submissions (submitted_at DESC);\n      CREATE INDEX IF NOT EXISTS idx_submissions_spam_reason\n        ON submissions (spam_reason) WHERE spam_reason IS NOT NULL;\n      CREATE INDEX IF NOT EXISTS idx_submissions_resend_message\n        ON submissions (resend_message_id);\n      CREATE INDEX IF NOT EXISTS idx_submissions_display_number\n        ON submissions (submission_id);\n      CREATE INDEX IF NOT EXISTS idx_screenouts_date\n        ON spam_screenouts (date);\n    `,\n  },\n  {\n    // Prospect audits (spec 2026-08-24): one row per `prospect-audit` CLI run.\n    // `token` is the unguessable public handle for GET /r/{token}; `result_json`\n    // is the full ProspectAuditResult, re-rendered on every request so report\n    // styling updates apply to already-shared links.\n    id: \"0009_prospect_audits\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS prospect_audits (\n        id TEXT PRIMARY KEY,\n        token TEXT NOT NULL UNIQUE,\n        url TEXT NOT NULL,\n        business TEXT,\n        created_at TEXT NOT NULL,\n        status TEXT NOT NULL DEFAULT 'complete',\n        result_json TEXT NOT NULL\n      );\n    `,\n  },\n  {\n    // Cockpit /audits listing page (spec 2026-08-25, Piece 5):\n    // listRecentProspectAudits orders by created_at DESC with no WHERE clause —\n    // without this index that's a raw SCAN of prospect_audits followed by a temp\n    // b-tree sort, which the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts)\n    // fails the build on. DESC matches the query's own ORDER BY so SQLite can walk\n    // the index directly instead of sorting.\n    id: \"0010_prospect_audits_created_index\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_prospect_audits_created\n        ON prospect_audits (created_at DESC);\n    `,\n  },\n];\n","import type { Client } from \"@libsql/client\";\nimport { MIGRATIONS } from \"./migrations.js\";\n\n/** True when an error means \"this DDL was already applied\" and re-applying is a\n *  no-op we can safely ignore. `CREATE ... IF NOT EXISTS` never throws, but SQLite\n *  `ALTER TABLE ... ADD COLUMN` has no `IF NOT EXISTS`, so a re-run after a lost\n *  `_migrations` marker throws `duplicate column name: …`. Treating that as\n *  already-applied keeps `runMigrations` idempotent for `ADD COLUMN` migrations —\n *  without it a lost marker would boot-loop `openDb()` on every call. */\nfunction isAlreadyAppliedError(err: unknown): boolean {\n  const message = err instanceof Error ? err.message : String(err);\n  return /duplicate column name/i.test(message);\n}\n\n/** Apply every not-yet-applied migration in order against a raw libSQL client,\n *  tracking applied ids in `_migrations`. Idempotent: ids already present are\n *  skipped, the DDL uses IF NOT EXISTS where it can, and an already-applied\n *  `ADD COLUMN` (recognized by its error) is swallowed so the marker is still\n *  recorded. Returns the ids applied this run. Runs on every openDb() — cheap\n *  (one indexed SELECT) and the gate every fresh Turso database needs before its\n *  first write. */\nexport async function runMigrations(client: Client): Promise<string[]> {\n  await client.execute(\n    \"CREATE TABLE IF NOT EXISTS _migrations (id TEXT PRIMARY KEY, applied_at TEXT NOT NULL)\",\n  );\n  const existing = await client.execute(\"SELECT id FROM _migrations\");\n  const applied = new Set(existing.rows.map((r) => String(r.id)));\n  const ran: string[] = [];\n  for (const m of MIGRATIONS) {\n    if (applied.has(m.id)) continue;\n    try {\n      await client.executeMultiple(m.sql);\n    } catch (err) {\n      // A re-run after a lost marker can re-execute a non-idempotent `ADD COLUMN`;\n      // treat \"already applied\" as success so we still record the marker below and\n      // never boot-loop. Any other error propagates unchanged.\n      if (!isAlreadyAppliedError(err)) throw err;\n    }\n    await client.execute({\n      sql: \"INSERT INTO _migrations (id, applied_at) VALUES (?, ?)\",\n      args: [m.id, new Date().toISOString()],\n    });\n    ran.push(m.id);\n  }\n  return ran;\n}\n"],"mappings":";AAUO,IAAM,aAA0B;AAAA,EACrC;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaP;AAAA,EACA;AAAA,IACE,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAgBE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyBE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoIP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAcE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA,EAIP;AACF;;;ACrUA,SAAS,sBAAsB,KAAuB;AACpD,QAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,SAAO,yBAAyB,KAAK,OAAO;AAC9C;AASA,eAAsB,cAAc,QAAmC;AACrE,QAAM,OAAO;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,MAAM,OAAO,QAAQ,4BAA4B;AAClE,QAAM,UAAU,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9D,QAAM,MAAgB,CAAC;AACvB,aAAW,KAAK,YAAY;AAC1B,QAAI,QAAQ,IAAI,EAAE,EAAE,EAAG;AACvB,QAAI;AACF,YAAM,OAAO,gBAAgB,EAAE,GAAG;AAAA,IACpC,SAAS,KAAK;AAIZ,UAAI,CAAC,sBAAsB,GAAG,EAAG,OAAM;AAAA,IACzC;AACA,UAAM,OAAO,QAAQ;AAAA,MACnB,KAAK;AAAA,MACL,MAAM,CAAC,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,CAAC;AAAA,IACvC,CAAC;AACD,QAAI,KAAK,EAAE,EAAE;AAAA,EACf;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-Q276MZ7E.js → chunk-3VQWSE3F.js}

@@ -1,10 +1,10 @@
+import {
+  withRecipe
+} from "./chunk-3G25KIWW.js";
 import {
   ALL_TEMPLATES,
   templatesByName
 } from "./chunk-73UFRZKY.js";
-import {
-  withRecipe
-} from "./chunk-ZTPPCHDB.js";
 import {
   listTrackedFiles,
   removeFromIndex
@@ -207,4 +207,4 @@ export {
   isConfigName,
   syncConfigs
 };
-//# sourceMappingURL=chunk-Q276MZ7E.js.map
+//# sourceMappingURL=chunk-3VQWSE3F.js.map

package/dist/{chunk-37S6L6G4.js → chunk-5UINJNAJ.js}

@@ -3,7 +3,16 @@ import { readFile } from "fs/promises";
 import { existsSync } from "fs";
 import { dirname, join } from "path";
 import { fileURLToPath } from "url";
-var PLATE = "plate.png";
+var PLATE = "plate-clean.png";
+var HEADLINE_FILES = {
+  Maintenance: "headline-maintenance.png",
+  Testing: "headline-testing.png",
+  Announcement: "headline-announcement.png",
+  Launch: "headline-launch.png"
+};
+function headlineKindFor(reportType) {
+  return Object.hasOwn(HEADLINE_FILES, reportType) ? reportType : null;
+}
 var cachedAssetsDir = null;
 function resolveAssetsDir() {
   if (cachedAssetsDir) return cachedAssetsDir;
@@ -28,6 +37,9 @@ function resolveAssetsDir() {
 async function loadPlate() {
   return new Uint8Array(await readFile(join(resolveAssetsDir(), PLATE)));
 }
+async function loadHeadline(kind) {
+  return new Uint8Array(await readFile(join(resolveAssetsDir(), HEADLINE_FILES[kind])));
+}
 
 // src/reports/header-image/index.ts
 import sharp2 from "sharp";
@@ -78,6 +90,9 @@ import sharp from "sharp";
 // src/reports/header-image/geometry.ts
 var CANVAS = { width: 2400, height: 3200 };
 var SCREEN = { x: 302, y: 1913, w: 1349, h: 844 };
+var HEADLINE = { x: 277, y: 998 };
+var HEADLINE_BAND = { x: HEADLINE.x, y: HEADLINE.y, w: 1715, h: 664 };
+var HEADLINE_INK = { r: 209, g: 34, b: 62 };
 var DOMAIN = {
   x: 280,
   baseline: 3020,
@@ -112,8 +127,35 @@ async function composeHeaderImage(input) {
   const out = await sharp(Buffer.from(input.plate)).composite(layers).jpeg({ quality: JPEG_QUALITY }).toBuffer();
   return new Uint8Array(out);
 }
+async function headlineInkCount(header) {
+  const { data, info } = await sharp(Buffer.from(header)).extract({
+    left: HEADLINE_BAND.x,
+    top: HEADLINE_BAND.y,
+    width: HEADLINE_BAND.w,
+    height: HEADLINE_BAND.h
+  }).removeAlpha().raw().toBuffer({ resolveWithObject: true });
+  let n = 0;
+  for (let i = 0; i < data.length; i += info.channels) {
+    const r = data[i] ?? 0;
+    const g = data[i + 1] ?? 0;
+    const b = data[i + 2] ?? 0;
+    if (r > HEADLINE_INK.r - 60 && g < HEADLINE_INK.g + 60 && b < HEADLINE_INK.b + 60) n++;
+  }
+  return n;
+}
+async function stampHeadline(header, headline) {
+  const meta = await sharp(Buffer.from(header)).metadata();
+  if (meta.width !== CANVAS.width || meta.height !== CANVAS.height) {
+    throw new Error(
+      `stampHeadline: header is ${meta.width}x${meta.height}, expected ${CANVAS.width}x${CANVAS.height}`
+    );
+  }
+  const out = await sharp(Buffer.from(header)).composite([{ input: Buffer.from(headline), left: HEADLINE.x, top: HEADLINE.y }]).jpeg({ quality: JPEG_QUALITY }).toBuffer();
+  return new Uint8Array(out);
+}
 
 // src/reports/header-image/index.ts
+var HEADLINE_INK_TOLERANCE = 500;
 function domainFromUrl(url) {
   return new URL(url).hostname.replace(/^www\./, "");
 }
@@ -146,6 +188,32 @@ async function assertNotBlank(shot) {
     );
   }
 }
+async function applyReportTypeHeadline(header, reportType) {
+  const kind = headlineKindFor(reportType);
+  if (!kind) return header;
+  try {
+    const meta = await sharp2(Buffer.from(header)).metadata();
+    if (meta.width !== CANVAS.width || meta.height !== CANVAS.height) {
+      console.warn(
+        `\u2691 header headline skipped: stored header is ${meta.width}x${meta.height}, not ${CANVAS.width}x${CANVAS.height} \u2014 sending it as stored`
+      );
+      return header;
+    }
+    const existing = await headlineInkCount(header);
+    if (existing > HEADLINE_INK_TOLERANCE) {
+      console.warn(
+        `\u2691 header headline skipped: the stored header already carries a headline (${existing} ink px in the band) \u2014 it predates the clean-plate switch, so stamping would overprint. Sending it as stored; run \`header-image ${"<site>"} --write-airtable\` to regenerate it clean.`
+      );
+      return header;
+    }
+    return await stampHeadline(header, await loadHeadline(kind));
+  } catch (err) {
+    console.warn(
+      `\u2691 header headline skipped (${err instanceof Error ? err.message : String(err)}) \u2014 sending the header as stored`
+    );
+    return header;
+  }
+}
 async function generateHeaderImage(input) {
   const screenshot = await captureHomepage(input.url, {
     ...input.shooter !== void 0 ? { shooter: input.shooter } : {},
@@ -164,7 +232,9 @@ async function generateHeaderImage(input) {
 
 export {
   loadPlate,
+  loadHeadline,
   domainFromUrl,
+  applyReportTypeHeadline,
   generateHeaderImage
 };
-//# sourceMappingURL=chunk-37S6L6G4.js.map
+//# sourceMappingURL=chunk-5UINJNAJ.js.map

package/dist/chunk-5UINJNAJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/header-image/assets/index.ts","../src/reports/header-image/index.ts","../src/reports/header-image/capture.ts","../src/reports/header-image/compose.ts","../src/reports/header-image/geometry.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst PLATE = \"plate-clean.png\";\n\n/** Per-report-type headline overlays, stamped over the CLEAN plate at send time\n *  (see orchestrate.ts). Types with no entry go out on the clean plate.\n *\n *  Source: Figma \"Web-Maintenance-Email\" (mQ3hy2d9JnOG9ljCzbZS8j) —\n *  Maintenance is node 158:15, Testing is 153:721 (\"maintenance & testing\",\n *  which is what a Testing report actually covers). Export each at 4x; Figma\n *  crops a text export to its ink box, which is why these are 1328x660 /\n *  1715x664 rather than the 1840x720 text box.\n *\n *  ⚠️ A Figma MCP `download_assets` export arrives FLATTENED — never\n *  transparent — and it flattens onto WHATEVER SITS BEHIND THE NODE, which is\n *  not one fixed colour: Maintenance/Testing live inside a white Header frame\n *  and come back on white, while Announcement/Launch sit on the bare canvas and\n *  come back on Figma's canvas grey (30,30,30). Stamping either unprocessed\n *  paints a solid slab over the paper texture — that, not a bad design file, is\n *  what made the 2026-08-20 Testing asset unusable.\n *\n *  Recover the alpha instead of re-exporting by hand: for ink C over backdrop B,\n *  a = (px - B) / (C - B). DETECT B (the export's most common colour) rather\n *  than assuming white, and pick the channel with the largest |C - B| — green\n *  separates the brand red from white by 221 levels but from canvas grey by only\n *  4, which would quantise the alpha to noise. Verified against the known-good\n *  Maintenance asset at mean abs alpha diff 0.022, 0.0037% of pixels off by\n *  more than 8.\n *\n *  Editing this copy needs Figma desktop, not the Plugin API: `characters`\n *  requires loadFontAsync and the MCP font environment carries no Helvetica at\n *  all, so the licensed Helvetica Neue LT Std can never load there. */\nconst HEADLINE_FILES = {\n  Maintenance: \"headline-maintenance.png\",\n  Testing: \"headline-testing.png\",\n  Announcement: \"headline-announcement.png\",\n  Launch: \"headline-launch.png\",\n} as const;\n\nexport type HeadlineKind = keyof typeof HEADLINE_FILES;\n\n/** The headline kind for a report type, or null for types that ship clean. */\nexport function headlineKindFor(reportType: string): HeadlineKind | null {\n  return Object.hasOwn(HEADLINE_FILES, reportType) ? (reportType as HeadlineKind) : null;\n}\n\n// Walk up from this module's URL looking for the assets dir in either the dev\n// layout (src/reports/header-image/assets/) or the published layout\n// (dist/reports/header-image/assets/). REQUIRED because tsup inlines this module\n// into dist/cli/bin.js — so import.meta.url-based sibling resolution looks in\n// dist/cli/ and fails with ENOENT. This exact bug shipped in 0.10.0-0.10.1 for\n// the maintenance-email assets; tests passed in dev because vitest evaluates the\n// source file, where import.meta.url is already correct. Only `pnpm test:dist`\n// catches a regression here.\nlet cachedAssetsDir: string | null = null;\nfunction resolveAssetsDir(): string {\n  if (cachedAssetsDir) return cachedAssetsDir;\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (;;) {\n    for (const layout of [\"src\", \"dist\"]) {\n      const candidate = join(dir, layout, \"reports\", \"header-image\", \"assets\", PLATE);\n      if (existsSync(candidate)) {\n        cachedAssetsDir = dirname(candidate);\n        return cachedAssetsDir;\n      }\n    }\n    const parent = dirname(dir);\n    if (parent === dir) {\n      throw new Error(\n        `loadPlate: could not locate the header-image assets dir by walking up from ${fileURLToPath(import.meta.url)}. Checked both src/ and dist/ layouts.`,\n      );\n    }\n    dir = parent;\n  }\n}\n\n/** Read the bundled 2400x3200 CLEAN plate (no headline — the report type's\n *  headline is stamped at send time, so one stored image serves every type). */\nexport async function loadPlate(): Promise<Uint8Array> {\n  return new Uint8Array(await readFile(join(resolveAssetsDir(), PLATE)));\n}\n\n/** Read a headline overlay (transparent PNG, ink-box cropped). */\nexport async function loadHeadline(kind: HeadlineKind): Promise<Uint8Array> {\n  return new Uint8Array(await readFile(join(resolveAssetsDir(), HEADLINE_FILES[kind])));\n}\n","import sharp from \"sharp\";\nimport { captureHomepage, type Shooter } from \"./capture.js\";\nimport { composeHeaderImage, stampHeadline, headlineInkCount } from \"./compose.js\";\nimport { loadPlate, loadHeadline, headlineKindFor } from \"./assets/index.js\";\nimport { CANVAS } from \"./geometry.js\";\n\n/** Headline-red pixels tolerated in the band before a stored header is treated\n *  as already carrying a headline. A clean-plate header measures 0 and a baked\n *  one ~62,000, so this sits far from both — it exists only to absorb stray\n *  JPEG artefacts, not to tune a boundary. */\nconst HEADLINE_INK_TOLERANCE = 500;\n\nexport type GenerateInput = {\n  /** The site's production URL. */\n  url: string;\n  /** Airtable site slug; drives the attachment filename. */\n  slug?: string;\n  /** Injected browser IO (tests). */\n  shooter?: Shooter;\n  /** Per-site settle override for animation-heavy or consent-gated homepages. */\n  settleMs?: number;\n};\n\nexport type GeneratedHeaderImage = {\n  bytes: Uint8Array;\n  /** The domain as printed on the plate. */\n  domain: string;\n  filename: string;\n  contentType: \"image/jpeg\";\n};\n\n/** Strip scheme, leading www and any path — the plate prints a bare domain. */\nexport function domainFromUrl(url: string): string {\n  return new URL(url).hostname.replace(/^www\\./, \"\");\n}\n\n/**\n * A capture is \"blank\" when it is almost entirely near-white — a consent gate,\n * a failed render (blank canvas), or a shot fired before first paint. The\n * operator reviews the rendered email before sending, so this is a backstop\n * rather than the only gate; its job is to stop an obviously broken shot from\n * replacing a good stored header.\n *\n * Uniformity alone is NOT the signal: a homepage with a large solid-colour\n * hero (any brand colour) is legitimately uniform but not blank. Only\n * near-white uniformity is flagged, since every real failure mode here\n * (consent overlay, unrendered canvas, pre-paint flash) lands on a white\n * background.\n */\nasync function assertNotBlank(shot: Uint8Array): Promise<void> {\n  const { data, info } = await sharp(Buffer.from(shot))\n    .resize(64, 40, { fit: \"fill\" })\n    .removeAlpha()\n    .raw()\n    .toBuffer({ resolveWithObject: true });\n  const total = info.width * info.height;\n  const at = (i: number): number => data[i] ?? 0;\n\n  let sumR = 0;\n  let sumG = 0;\n  let sumB = 0;\n  for (let i = 0; i < data.length; i += info.channels) {\n    sumR += at(i);\n    sumG += at(i + 1);\n    sumB += at(i + 2);\n  }\n  const meanR = sumR / total;\n  const meanG = sumG / total;\n  const meanB = sumB / total;\n\n  let near = 0;\n  for (let i = 0; i < data.length; i += info.channels) {\n    if (\n      Math.abs(at(i) - meanR) < 8 &&\n      Math.abs(at(i + 1) - meanG) < 8 &&\n      Math.abs(at(i + 2) - meanB) < 8\n    ) {\n      near++;\n    }\n  }\n\n  const uniform = near / total > 0.95;\n  const nearWhite = meanR > 240 && meanG > 240 && meanB > 240;\n  if (uniform && nearWhite) {\n    throw new Error(\n      \"header-image: capture looks blank (near-white, >95% one colour) — keeping the existing header\",\n    );\n  }\n}\n\n/**\n * Stamp the report type's headline onto a stored (clean) header at send time.\n * Types with no headline registered pass through untouched, as does any header\n * that must not be stamped:\n *\n *  - wrong dimensions (a legacy hand-made header), where fixed coordinates\n *    would misplace the text;\n *  - a header that ALREADY CARRIES A HEADLINE, i.e. one built on the old baked\n *    plate. Stamping those prints the new headline directly over the baked one\n *    and the two overprint into unreadable pulp — which shipped in a real\n *    announcement on 2026-08-24. An earlier version of this comment claimed\n *    such headers were safe because they'd \"keep their baked headline\"; that\n *    was wrong. They are canvas-sized, so nothing stopped them being stamped.\n *\n * The band is empty on a clean-plate header and holds ~62k red px on a baked\n * one, so the check is unambiguous rather than a tuned threshold. A skipped\n * header still goes out looking correct (its baked headline is a real headline)\n * and self-heals on the site's next draft, which regenerates it clean;\n * `header-image --all --force` does the whole fleet at once.\n */\nexport async function applyReportTypeHeadline(\n  header: Uint8Array,\n  reportType: string,\n): Promise<Uint8Array> {\n  const kind = headlineKindFor(reportType);\n  if (!kind) return header;\n  // Best-effort by design: the headline is cosmetic, so anything unexpected —\n  // undecodable bytes included — warns and sends the header as stored rather\n  // than failing the send. Mandatory processing (and its hard failures) lives\n  // in prepareHeaderImage downstream.\n  try {\n    const meta = await sharp(Buffer.from(header)).metadata();\n    if (meta.width !== CANVAS.width || meta.height !== CANVAS.height) {\n      console.warn(\n        `⚑ header headline skipped: stored header is ${meta.width}x${meta.height}, not ${CANVAS.width}x${CANVAS.height} — sending it as stored`,\n      );\n      return header;\n    }\n    const existing = await headlineInkCount(header);\n    if (existing > HEADLINE_INK_TOLERANCE) {\n      console.warn(\n        `⚑ header headline skipped: the stored header already carries a headline (${existing} ink px in the band) — it predates the clean-plate switch, so stamping would overprint. Sending it as stored; run \\`header-image ${\"<site>\"} --write-airtable\\` to regenerate it clean.`,\n      );\n      return header;\n    }\n    return await stampHeadline(header, await loadHeadline(kind));\n  } catch (err) {\n    console.warn(\n      `⚑ header headline skipped (${err instanceof Error ? err.message : String(err)}) — sending the header as stored`,\n    );\n    return header;\n  }\n}\n\n/** Capture a site's homepage and composite its header image. */\nexport async function generateHeaderImage(input: GenerateInput): Promise<GeneratedHeaderImage> {\n  const screenshot = await captureHomepage(input.url, {\n    ...(input.shooter !== undefined ? { shooter: input.shooter } : {}),\n    ...(input.settleMs !== undefined ? { settleMs: input.settleMs } : {}),\n  });\n  await assertNotBlank(screenshot);\n\n  const domain = domainFromUrl(input.url);\n  const bytes = await composeHeaderImage({\n    plate: await loadPlate(),\n    screenshot,\n    domain,\n  });\n  const base = input.slug ?? domain.split(\".\")[0];\n  return { bytes, domain, filename: `${base}Header.jpg`, contentType: \"image/jpeg\" };\n}\n","/** Viewport matching the plate's MacBook screen aspect (16:10), so the crop in\n *  compose.ts is a no-op for a well-behaved homepage. */\nconst VIEWPORT = { width: 1600, height: 1000 } as const;\n/** 2x so the 1349px-wide screen rect is fed real pixels, not upscaled ones. */\nconst DEVICE_SCALE_FACTOR = 2;\n/** Entrance animations and webfonts settle before the shutter. Measured against\n *  live fleet sites; overridable per site because consent gates and long\n *  animations vary. */\nconst DEFAULT_SETTLE_MS = 2500;\n/** Budget for the `load` milestone — the navigation we actually gate on.\n *\n *  Do NOT put `waitUntil: \"networkidle\"` back on the `goto`. Measured across all\n *  14 live fleet sites (30s timeout): `load` succeeded on 14/14 in 346–1205ms,\n *  while `networkidle` NEVER fired on 4 of them (ERP Industrials, Vineyard,\n *  Revogen, 1836dig) — chat widgets, analytics polling and websockets hold the\n *  connection open forever, so `goto` threw and those sites could never get a\n *  header image at all. */\nconst NAV_TIMEOUT_MS = 60_000;\n/** Best-effort extra wait for network idle, applied *after* `load` and with its\n *  rejection swallowed. The 10 sites that do settle still get the benefit; the 4\n *  that never will just proceed. 3s is sized from the measurement above: the\n *  slowest site that does reach idle took 4078ms from `goto` start, and by the\n *  time this runs the `load` milestone (~0.3–1.2s) has already passed, so 3s\n *  covers the real remaining settle time without stalling the never-idle sites. */\nconst IDLE_BUDGET_MS = 3_000;\n\nexport type ShootOptions = {\n  url: string;\n  width: number;\n  height: number;\n  deviceScaleFactor: number;\n  settleMs: number;\n};\n\n/** Injected browser IO. The real impl drives Playwright; tests pass a fake. */\nexport type Shooter = {\n  shoot: (opts: ShootOptions) => Promise<Uint8Array>;\n};\n\nexport type CaptureOptions = {\n  shooter?: Shooter;\n  settleMs?: number;\n};\n\n/**\n * Screenshot a site's homepage for the header image.\n *\n * Viewport-only, never `fullPage`: the plate shows a laptop screen, not a\n * scroll. Failures propagate — a caller must be able to keep the site's existing\n * header rather than overwrite it with a broken shot.\n */\nexport async function captureHomepage(\n  url: string,\n  options: CaptureOptions = {},\n): Promise<Uint8Array> {\n  const shooter = options.shooter ?? (await defaultShooter());\n  return shooter.shoot({\n    url,\n    width: VIEWPORT.width,\n    height: VIEWPORT.height,\n    deviceScaleFactor: DEVICE_SCALE_FACTOR,\n    settleMs: options.settleMs ?? DEFAULT_SETTLE_MS,\n  });\n}\n\n/** Real Playwright shooter. Lazily imported so unit tests never load it and the\n *  static import graph stays central-dep-free for `test:dist`. */\nexport async function defaultShooter(): Promise<Shooter> {\n  const { chromium } = await import(\"@playwright/test\");\n  return {\n    async shoot(opts) {\n      const browser = await chromium.launch();\n      try {\n        const page = await browser.newPage({\n          viewport: { width: opts.width, height: opts.height },\n          deviceScaleFactor: opts.deviceScaleFactor,\n        });\n        await page.goto(opts.url, { waitUntil: \"load\", timeout: NAV_TIMEOUT_MS });\n        // Best-effort only — a site that never idles must still be captured.\n        await page.waitForLoadState(\"networkidle\", { timeout: IDLE_BUDGET_MS }).catch(() => {});\n        await page.evaluate(\"document.fonts && document.fonts.ready\");\n        await page.waitForTimeout(opts.settleMs);\n        const buf = await page.screenshot({ type: \"png\" });\n        return new Uint8Array(buf);\n      } finally {\n        await browser.close();\n      }\n    },\n  };\n}\n","import sharp from \"sharp\";\nimport type { OverlayOptions } from \"sharp\";\nimport {\n  CANVAS,\n  SCREEN,\n  DOMAIN,\n  PAPER,\n  HEADLINE,\n  HEADLINE_BAND,\n  HEADLINE_INK,\n} from \"./geometry.js\";\n\nexport type ComposeInput = {\n  /** The bundled 2400x3200 plate. */\n  plate: Uint8Array;\n  /** A homepage screenshot, any size. Cropped to fill the screen rect. */\n  screenshot: Uint8Array;\n  /** The site's public domain, drawn bottom-left (e.g. \"gallerysonder.com\"). */\n  domain: string;\n};\n\n/** JPEG quality. The hand-made headers are ~2.4MB; 88 lands near 0.7MB with no\n *  visible difference at the 600px the email actually renders. */\nconst JPEG_QUALITY = 88;\n\n/** Escape the five XML metacharacters. The domain is interpolated into an SVG,\n *  and a bare `&` yields invalid XML that sharp rejects outright. */\nfunction escapeXml(s: string): string {\n  return s\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&apos;\");\n}\n\n/**\n * The domain line as a transparent SVG overlay the size of the full canvas, so\n * it can be composited at 0,0 and positioned by its own coordinates.\n *\n * ⚠️ FONT AVAILABILITY IS ENVIRONMENT-DEPENDENT. sharp renders SVG through\n * librsvg + fontconfig, so the family below resolves against INSTALLED fonts.\n * On macOS it resolves to real Helvetica Neue, which reproduces the hand-made\n * reference exactly (verified: ink box dx=0 dy=0 dw=0 dh=0). A stock\n * ubuntu-latest runner has none of Helvetica Neue / Helvetica / Arial, so it\n * falls through to `sans-serif` — typically DejaVu Sans, which is wider and\n * would render a visibly different domain line.\n *\n * This matters because report drafting (which regenerates the header) runs on\n * ubuntu-latest in `.github/workflows/daily-reports.yml`. That workflow now\n * installs `fonts-urw-base35`, which provides Nimbus Sans — metrically\n * equivalent to Helvetica and third in the stack below — so a CI-generated\n * header's domain line matches a locally-generated one. Any OTHER environment\n * that runs this code still needs a Helvetica-metric font installed.\n */\nfunction domainSvg(domain: string): Buffer {\n  return Buffer.from(\n    `<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"${CANVAS.width}\" height=\"${CANVAS.height}\">\n       <text x=\"${DOMAIN.x}\" y=\"${DOMAIN.baseline}\"\n             font-family=\"Helvetica Neue, Helvetica, Nimbus Sans, Arial, sans-serif\"\n             font-size=\"${DOMAIN.size}\" font-weight=\"${DOMAIN.weight}\"\n             fill=\"${DOMAIN.color}\">${escapeXml(domain)}</text>\n     </svg>`,\n    \"utf-8\",\n  );\n}\n\n/**\n * Composite one site's header image: paste its homepage screenshot into the\n * plate's laptop screen and draw its domain underneath.\n *\n * PURE — no browser, no network, no filesystem. Fidelity lives here, so it must\n * be verifiable in a unit test.\n *\n * The screenshot is cropped to FILL the 16:10 screen from the top: a taller\n * homepage loses its fold rather than being squashed, which would be obvious\n * and wrong. `flatten` guards against a transparent source punching a hole in\n * the plate.\n */\nexport async function composeHeaderImage(input: ComposeInput): Promise<Uint8Array> {\n  const screen = await sharp(Buffer.from(input.screenshot))\n    .resize(SCREEN.w, SCREEN.h, { fit: \"cover\", position: \"top\" })\n    .flatten({ background: PAPER })\n    .toBuffer();\n\n  const layers: OverlayOptions[] = [{ input: screen, left: SCREEN.x, top: SCREEN.y }];\n  if (input.domain.trim().length > 0) {\n    layers.push({ input: domainSvg(input.domain), left: 0, top: 0 });\n  }\n\n  const out = await sharp(Buffer.from(input.plate))\n    .composite(layers)\n    .jpeg({ quality: JPEG_QUALITY })\n    .toBuffer();\n  return new Uint8Array(out);\n}\n\n/**\n * Count headline-red pixels already present in the headline band.\n *\n * A header composed on the clean plate has EXACTLY ZERO (measured), because the\n * band sits between the logo and the laptop and nothing else paints there. A\n * header built on the old baked plate has ~62,000 — its headline is part of the\n * image. That gap is what lets {@link stampHeadline}'s caller refuse to print a\n * second headline over the first. PURE.\n */\nexport async function headlineInkCount(header: Uint8Array): Promise<number> {\n  const { data, info } = await sharp(Buffer.from(header))\n    .extract({\n      left: HEADLINE_BAND.x,\n      top: HEADLINE_BAND.y,\n      width: HEADLINE_BAND.w,\n      height: HEADLINE_BAND.h,\n    })\n    .removeAlpha()\n    .raw()\n    .toBuffer({ resolveWithObject: true });\n  let n = 0;\n  for (let i = 0; i < data.length; i += info.channels) {\n    const r = data[i] ?? 0;\n    const g = data[i + 1] ?? 0;\n    const b = data[i + 2] ?? 0;\n    // Generous band around the brand red rather than an exact match: the stored\n    // header is a JPEG, so its ink has been through lossy re-encoding.\n    if (r > HEADLINE_INK.r - 60 && g < HEADLINE_INK.g + 60 && b < HEADLINE_INK.b + 60) n++;\n  }\n  return n;\n}\n\n/**\n * Stamp a report-type headline overlay onto a finished (clean-plate) header at\n * the measured HEADLINE origin. PURE and strict: the header must be exactly\n * CANVAS-sized — a legacy hand-made header at other dimensions would misplace\n * the text, so the caller (applyReportTypeHeadline) size-guards and skips\n * instead of calling in. One extra JPEG generation at quality 88 is invisible\n * at the email's 600px display size.\n */\nexport async function stampHeadline(header: Uint8Array, headline: Uint8Array): Promise<Uint8Array> {\n  const meta = await sharp(Buffer.from(header)).metadata();\n  if (meta.width !== CANVAS.width || meta.height !== CANVAS.height) {\n    throw new Error(\n      `stampHeadline: header is ${meta.width}x${meta.height}, expected ${CANVAS.width}x${CANVAS.height}`,\n    );\n  }\n  const out = await sharp(Buffer.from(header))\n    .composite([{ input: Buffer.from(headline), left: HEADLINE.x, top: HEADLINE.y }])\n    .jpeg({ quality: JPEG_QUALITY })\n    .toBuffer();\n  return new Uint8Array(out);\n}\n","// Measured off the real plate, not guessed.\n//\n// SCREEN is the hole INSIDE the laptop bezel. It is derived from the bezel —\n// a perfectly flat black frame (luminance 0.0) — because that is\n// content-independent. Deriving it from content instead (diffing two headers for\n// pixels that vary) yields x=282 y=1856 w=1394 h=871, which is WRONG: that rect\n// spans the laptop's outer panel, covering the bezel on three sides while\n// falling ~29px short at the bottom, so the plate's baked-in screenshot shows\n// as a strip under every site's content.\n//\n// Cross-checked: the photo-to-flat-black transition at the bottom of the plate\n// lands at y=2756, exactly SCREEN.y + SCREEN.h - 1.\n//\n// Re-measure only if the Figma template changes — and if you do, find the bezel.\n\n/** The plate's pixel dimensions — Figma frame 600x800 exported at 4x. */\nexport const CANVAS = { width: 2400, height: 3200 } as const;\n\n/** The MacBook Pro screen the site screenshot is pasted into — the area inside\n *  the bezel, so the bezel stays visible around the content exactly as it does\n *  in the hand-made headers. Aspect 1.5983 (16:10 to within 0.1%). */\nexport const SCREEN = { x: 302, y: 1913, w: 1349, h: 844 } as const;\n\n/** Where a report-type headline overlay lands on the clean plate.\n *\n *  Measured, not guessed: red ink present in the baked maintenance plate but\n *  absent from plate-clean spans x=277 y=998 w=1326 h=658 — and\n *  headline-maintenance.png is that ink box cropped to its own edges\n *  (1328x660, ±1px of anti-aliasing at the threshold), so compositing the\n *  asset at this origin reproduces the baked plate's headline exactly. */\nexport const HEADLINE = { x: 277, y: 998 } as const;\n\n/** The band a headline occupies, sized to the WIDEST registered overlay\n *  (Testing, 1715x664). Used to detect a header that already carries a baked-in\n *  headline, so it can't be stamped a second time. Deliberately clear of the\n *  logo above (ends y≈506) and the laptop screen below (starts y=1913), so the\n *  only ink that can land here is a headline. */\nexport const HEADLINE_BAND = { x: HEADLINE.x, y: HEADLINE.y, w: 1715, h: 664 } as const;\n\n/** The headline ink colour (brand red), and how far a pixel may drift from it\n *  and still count — JPEG re-encoding moves it by a level or two. */\nexport const HEADLINE_INK = { r: 209, g: 34, b: 62 } as const;\n\n/** The per-site domain line, bottom left.\n *\n *  Solved against the hand-made reference rather than guessed: rendering\n *  \"gallerysonder.com\" with these values reproduces Sonder's original ink box\n *  (x=283 y=2963 w=645 h=74) EXACTLY — dx=0 dy=0 dw=0 dh=0. A sweep over sizes\n *  62-88 at weights 300/400 has a single exact solution at size 80 / weight 400.\n *\n *  `baseline` is the text baseline in canvas pixels; the ink box sits above it\n *  by the cap height and below by the descender. */\nexport const DOMAIN = {\n  x: 280,\n  baseline: 3020,\n  size: 80,\n  weight: 400,\n  color: \"#747474\",\n} as const;\n\n/** Flat paper tone, used as the compositing background so a transparent or\n *  short source can never punch a hole in the plate. */\nexport const PAPER = \"#fcfcfc\" as const;\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB;AAC3B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAE9B,IAAM,QAAQ;AA8Bd,IAAM,iBAAiB;AAAA,EACrB,aAAa;AAAA,EACb,SAAS;AAAA,EACT,cAAc;AAAA,EACd,QAAQ;AACV;AAKO,SAAS,gBAAgB,YAAyC;AACvE,SAAO,OAAO,OAAO,gBAAgB,UAAU,IAAK,aAA8B;AACpF;AAUA,IAAI,kBAAiC;AACrC,SAAS,mBAA2B;AAClC,MAAI,gBAAiB,QAAO;AAC5B,MAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;AAChD,aAAS;AACP,eAAW,UAAU,CAAC,OAAO,MAAM,GAAG;AACpC,YAAM,YAAY,KAAK,KAAK,QAAQ,WAAW,gBAAgB,UAAU,KAAK;AAC9E,UAAI,WAAW,SAAS,GAAG;AACzB,0BAAkB,QAAQ,SAAS;AACnC,eAAO;AAAA,MACT;AAAA,IACF;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,KAAK;AAClB,YAAM,IAAI;AAAA,QACR,8EAA8E,cAAc,YAAY,GAAG,CAAC;AAAA,MAC9G;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAIA,eAAsB,YAAiC;AACrD,SAAO,IAAI,WAAW,MAAM,SAAS,KAAK,iBAAiB,GAAG,KAAK,CAAC,CAAC;AACvE;AAGA,eAAsB,aAAa,MAAyC;AAC1E,SAAO,IAAI,WAAW,MAAM,SAAS,KAAK,iBAAiB,GAAG,eAAe,IAAI,CAAC,CAAC,CAAC;AACtF;;;ACxFA,OAAOA,YAAW;;;ACElB,IAAM,WAAW,EAAE,OAAO,MAAM,QAAQ,IAAK;AAE7C,IAAM,sBAAsB;AAI5B,IAAM,oBAAoB;AAS1B,IAAM,iBAAiB;AAOvB,IAAM,iBAAiB;AA2BvB,eAAsB,gBACpB,KACA,UAA0B,CAAC,GACN;AACrB,QAAM,UAAU,QAAQ,WAAY,MAAM,eAAe;AACzD,SAAO,QAAQ,MAAM;AAAA,IACnB;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,QAAQ,SAAS;AAAA,IACjB,mBAAmB;AAAA,IACnB,UAAU,QAAQ,YAAY;AAAA,EAChC,CAAC;AACH;AAIA,eAAsB,iBAAmC;AACvD,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,SAAO;AAAA,IACL,MAAM,MAAM,MAAM;AAChB,YAAM,UAAU,MAAM,SAAS,OAAO;AACtC,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,QAAQ;AAAA,UACjC,UAAU,EAAE,OAAO,KAAK,OAAO,QAAQ,KAAK,OAAO;AAAA,UACnD,mBAAmB,KAAK;AAAA,QAC1B,CAAC;AACD,cAAM,KAAK,KAAK,KAAK,KAAK,EAAE,WAAW,QAAQ,SAAS,eAAe,CAAC;AAExE,cAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,eAAe,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AACtF,cAAM,KAAK,SAAS,wCAAwC;AAC5D,cAAM,KAAK,eAAe,KAAK,QAAQ;AACvC,cAAM,MAAM,MAAM,KAAK,WAAW,EAAE,MAAM,MAAM,CAAC;AACjD,eAAO,IAAI,WAAW,GAAG;AAAA,MAC3B,UAAE;AACA,cAAM,QAAQ,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AACF;;;ACzFA,OAAO,WAAW;;;ACgBX,IAAM,SAAS,EAAE,OAAO,MAAM,QAAQ,KAAK;AAK3C,IAAM,SAAS,EAAE,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI;AASlD,IAAM,WAAW,EAAE,GAAG,KAAK,GAAG,IAAI;AAOlC,IAAM,gBAAgB,EAAE,GAAG,SAAS,GAAG,GAAG,SAAS,GAAG,GAAG,MAAM,GAAG,IAAI;AAItE,IAAM,eAAe,EAAE,GAAG,KAAK,GAAG,IAAI,GAAG,GAAG;AAW5C,IAAM,SAAS;AAAA,EACpB,GAAG;AAAA,EACH,UAAU;AAAA,EACV,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AACT;AAIO,IAAM,QAAQ;;;ADvCrB,IAAM,eAAe;AAIrB,SAAS,UAAU,GAAmB;AACpC,SAAO,EACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,QAAQ;AAC3B;AAqBA,SAAS,UAAU,QAAwB;AACzC,SAAO,OAAO;AAAA,IACZ,kDAAkD,OAAO,KAAK,aAAa,OAAO,MAAM;AAAA,kBAC1E,OAAO,CAAC,QAAQ,OAAO,QAAQ;AAAA;AAAA,0BAEvB,OAAO,IAAI,kBAAkB,OAAO,MAAM;AAAA,qBAC/C,OAAO,KAAK,KAAK,UAAU,MAAM,CAAC;AAAA;AAAA,IAEnD;AAAA,EACF;AACF;AAcA,eAAsB,mBAAmB,OAA0C;AACjF,QAAM,SAAS,MAAM,MAAM,OAAO,KAAK,MAAM,UAAU,CAAC,EACrD,OAAO,OAAO,GAAG,OAAO,GAAG,EAAE,KAAK,SAAS,UAAU,MAAM,CAAC,EAC5D,QAAQ,EAAE,YAAY,MAAM,CAAC,EAC7B,SAAS;AAEZ,QAAM,SAA2B,CAAC,EAAE,OAAO,QAAQ,MAAM,OAAO,GAAG,KAAK,OAAO,EAAE,CAAC;AAClF,MAAI,MAAM,OAAO,KAAK,EAAE,SAAS,GAAG;AAClC,WAAO,KAAK,EAAE,OAAO,UAAU,MAAM,MAAM,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;AAAA,EACjE;AAEA,QAAM,MAAM,MAAM,MAAM,OAAO,KAAK,MAAM,KAAK,CAAC,EAC7C,UAAU,MAAM,EAChB,KAAK,EAAE,SAAS,aAAa,CAAC,EAC9B,SAAS;AACZ,SAAO,IAAI,WAAW,GAAG;AAC3B;AAWA,eAAsB,iBAAiB,QAAqC;AAC1E,QAAM,EAAE,MAAM,KAAK,IAAI,MAAM,MAAM,OAAO,KAAK,MAAM,CAAC,EACnD,QAAQ;AAAA,IACP,MAAM,cAAc;AAAA,IACpB,KAAK,cAAc;AAAA,IACnB,OAAO,cAAc;AAAA,IACrB,QAAQ,cAAc;AAAA,EACxB,CAAC,EACA,YAAY,EACZ,IAAI,EACJ,SAAS,EAAE,mBAAmB,KAAK,CAAC;AACvC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,UAAU;AACnD,UAAM,IAAI,KAAK,CAAC,KAAK;AACrB,UAAM,IAAI,KAAK,IAAI,CAAC,KAAK;AACzB,UAAM,IAAI,KAAK,IAAI,CAAC,KAAK;AAGzB,QAAI,IAAI,aAAa,IAAI,MAAM,IAAI,aAAa,IAAI,MAAM,IAAI,aAAa,IAAI,GAAI;AAAA,EACrF;AACA,SAAO;AACT;AAUA,eAAsB,cAAc,QAAoB,UAA2C;AACjG,QAAM,OAAO,MAAM,MAAM,OAAO,KAAK,MAAM,CAAC,EAAE,SAAS;AACvD,MAAI,KAAK,UAAU,OAAO,SAAS,KAAK,WAAW,OAAO,QAAQ;AAChE,UAAM,IAAI;AAAA,MACR,4BAA4B,KAAK,KAAK,IAAI,KAAK,MAAM,cAAc,OAAO,KAAK,IAAI,OAAO,MAAM;AAAA,IAClG;AAAA,EACF;AACA,QAAM,MAAM,MAAM,MAAM,OAAO,KAAK,MAAM,CAAC,EACxC,UAAU,CAAC,EAAE,OAAO,OAAO,KAAK,QAAQ,GAAG,MAAM,SAAS,GAAG,KAAK,SAAS,EAAE,CAAC,CAAC,EAC/E,KAAK,EAAE,SAAS,aAAa,CAAC,EAC9B,SAAS;AACZ,SAAO,IAAI,WAAW,GAAG;AAC3B;;;AF3IA,IAAM,yBAAyB;AAsBxB,SAAS,cAAc,KAAqB;AACjD,SAAO,IAAI,IAAI,GAAG,EAAE,SAAS,QAAQ,UAAU,EAAE;AACnD;AAeA,eAAe,eAAe,MAAiC;AAC7D,QAAM,EAAE,MAAM,KAAK,IAAI,MAAMC,OAAM,OAAO,KAAK,IAAI,CAAC,EACjD,OAAO,IAAI,IAAI,EAAE,KAAK,OAAO,CAAC,EAC9B,YAAY,EACZ,IAAI,EACJ,SAAS,EAAE,mBAAmB,KAAK,CAAC;AACvC,QAAM,QAAQ,KAAK,QAAQ,KAAK;AAChC,QAAM,KAAK,CAAC,MAAsB,KAAK,CAAC,KAAK;AAE7C,MAAI,OAAO;AACX,MAAI,OAAO;AACX,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,UAAU;AACnD,YAAQ,GAAG,CAAC;AACZ,YAAQ,GAAG,IAAI,CAAC;AAChB,YAAQ,GAAG,IAAI,CAAC;AAAA,EAClB;AACA,QAAM,QAAQ,OAAO;AACrB,QAAM,QAAQ,OAAO;AACrB,QAAM,QAAQ,OAAO;AAErB,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,KAAK,UAAU;AACnD,QACE,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,KAC1B,KAAK,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,KAC9B,KAAK,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,GAC9B;AACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,QAAQ;AAC/B,QAAM,YAAY,QAAQ,OAAO,QAAQ,OAAO,QAAQ;AACxD,MAAI,WAAW,WAAW;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAsBA,eAAsB,wBACpB,QACA,YACqB;AACrB,QAAM,OAAO,gBAAgB,UAAU;AACvC,MAAI,CAAC,KAAM,QAAO;AAKlB,MAAI;AACF,UAAM,OAAO,MAAMA,OAAM,OAAO,KAAK,MAAM,CAAC,EAAE,SAAS;AACvD,QAAI,KAAK,UAAU,OAAO,SAAS,KAAK,WAAW,OAAO,QAAQ;AAChE,cAAQ;AAAA,QACN,oDAA+C,KAAK,KAAK,IAAI,KAAK,MAAM,SAAS,OAAO,KAAK,IAAI,OAAO,MAAM;AAAA,MAChH;AACA,aAAO;AAAA,IACT;AACA,UAAM,WAAW,MAAM,iBAAiB,MAAM;AAC9C,QAAI,WAAW,wBAAwB;AACrC,cAAQ;AAAA,QACN,iFAA4E,QAAQ,yIAAoI,QAAQ;AAAA,MAClO;AACA,aAAO;AAAA,IACT;AACA,WAAO,MAAM,cAAc,QAAQ,MAAM,aAAa,IAAI,CAAC;AAAA,EAC7D,SAAS,KAAK;AACZ,YAAQ;AAAA,MACN,mCAA8B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAChF;AACA,WAAO;AAAA,EACT;AACF;AAGA,eAAsB,oBAAoB,OAAqD;AAC7F,QAAM,aAAa,MAAM,gBAAgB,MAAM,KAAK;AAAA,IAClD,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IAChE,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,EACrE,CAAC;AACD,QAAM,eAAe,UAAU;AAE/B,QAAM,SAAS,cAAc,MAAM,GAAG;AACtC,QAAM,QAAQ,MAAM,mBAAmB;AAAA,IACrC,OAAO,MAAM,UAAU;AAAA,IACvB;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,OAAO,MAAM,QAAQ,OAAO,MAAM,GAAG,EAAE,CAAC;AAC9C,SAAO,EAAE,OAAO,QAAQ,UAAU,GAAG,IAAI,cAAc,aAAa,aAAa;AACnF;","names":["sharp","sharp"]}

package/dist/{chunk-THEFTZ7F.js → chunk-62CMMGEO.js}

@@ -12,10 +12,7 @@ import {
 } from "./chunk-GASBX52O.js";
 import {
   makeGitHub
-} from "./chunk-VRWUL4TR.js";
-import {
-  siteLabel
-} from "./chunk-XXTZBPUY.js";
+} from "./chunk-XHHMM5HX.js";
 import {
   branchName,
   checkoutBranch,
@@ -28,6 +25,9 @@ import {
   parseOwnerRepo,
   push
 } from "./chunk-XTK5VIQB.js";
+import {
+  siteLabel
+} from "./chunk-XXTZBPUY.js";
 
 // src/recipes/self-updating/index.ts
 import { mkdir, writeFile } from "fs/promises";
@@ -175,4 +175,4 @@ async function selfUpdating(site, deps = {}) {
 export {
   selfUpdating
 };
-//# sourceMappingURL=chunk-THEFTZ7F.js.map
+//# sourceMappingURL=chunk-62CMMGEO.js.map

package/dist/{chunk-FDIFTIXC.js → chunk-6TWWY7ZU.js}

@@ -1,6 +1,6 @@
 import {
   isHttpUrl
-} from "./chunk-U5SZ4FOP.js";
+} from "./chunk-EVBCK2KC.js";
 
 // src/inventory/local.ts
 import { basename } from "path";
@@ -67,4 +67,4 @@ export {
   localPath,
   fromJsonFile
 };
-//# sourceMappingURL=chunk-FDIFTIXC.js.map
+//# sourceMappingURL=chunk-6TWWY7ZU.js.map