@reddoorla/maintenance 0.85.2 → 0.86.0

package/dist/index.js

@@ -1,110 +1,122 @@
 import "./chunk-2SLED3NB.js";
-import "./chunk-TP5M2NQB.js";
+import "./chunk-F5KM4LEQ.js";
 import {
-  approveBlockers
-} from "./chunk-LTB6KVJW.js";
-import {
-  DEFAULT_INIT_STEPS,
-  a11yFixturesPage,
-  init
-} from "./chunk-WYYQK4D3.js";
+  draftReportForSite
+} from "./chunk-BYK66EWO.js";
 import {
-  onboard,
-  selfCaretRange,
-  selfPackageVersion
-} from "./chunk-UYCAF77E.js";
+  approveBlockers
+} from "./chunk-N45M3FDK.js";
 import {
   findDueReports
-} from "./chunk-D4FVAIEJ.js";
-import {
-  draftReportForSite
-} from "./chunk-MGR2H7F4.js";
-import "./chunk-62VF32IC.js";
-import {
-  domainFromUrl,
-  generateHeaderImage,
-  loadPlate
-} from "./chunk-37S6L6G4.js";
+} from "./chunk-PZR4EBPY.js";
 import {
   upgradeSvelte4to5
-} from "./chunk-ICXV25N7.js";
+} from "./chunk-Z3KYFUN6.js";
+import {
+  DEFAULT_INIT_STEPS,
+  a11yFixturesPage,
+  init
+} from "./chunk-ZKXSX4LO.js";
 import {
   convertToPnpm
-} from "./chunk-RJB3QUSP.js";
+} from "./chunk-XIDUYLSR.js";
 import {
   svelteCodemods
-} from "./chunk-LS6QPANO.js";
+} from "./chunk-IYSEC543.js";
 import "./chunk-J7SZQUCW.js";
-import "./chunk-R6FPFMOS.js";
-import "./chunk-S56JQJ4F.js";
+import "./chunk-BQRFQSGY.js";
+import "./chunk-Y53WOQIJ.js";
+import {
+  onboard,
+  selfCaretRange,
+  selfPackageVersion
+} from "./chunk-7RJ2HMMJ.js";
+import "./chunk-ILUNZHYV.js";
+import {
+  bumpDeps
+} from "./chunk-2NJQLSEU.js";
 import "./chunk-R53VL3RI.js";
+import {
+  fromAirtableBase
+} from "./chunk-SLUQ7R6I.js";
 import {
   parseAddresses,
   sendApprovedReports,
   withGlobalCc
-} from "./chunk-COZPL62X.js";
+} from "./chunk-2NDRHXMR.js";
 import "./chunk-GECESMVS.js";
+import {
+  domainFromUrl,
+  generateHeaderImage,
+  loadHeadline,
+  loadPlate
+} from "./chunk-5UINJNAJ.js";
 import {
   BLURRED_CID,
   CHECK_CID,
-  checklistFor,
-  gatingFields,
-  isHealthGateClear,
-  isPendingApproval,
   loadBundledImages,
   renderReportHtml
-} from "./chunk-6QRLRT3P.js";
-import "./chunk-MPBXOJ3N.js";
+} from "./chunk-CQR4LIM7.js";
+import "./chunk-Z7AXYKQB.js";
 import {
   escapeHtml,
   safeUrl
-} from "./chunk-SEEA6RXF.js";
-import "./chunk-WEKL2HYJ.js";
+} from "./chunk-DJZWYIPP.js";
 import {
-  bumpDeps
-} from "./chunk-SDUJIANJ.js";
+  isPendingApproval
+} from "./chunk-ACBRLLFT.js";
+import {
+  checklistFor,
+  gatingFields,
+  isHealthGateClear
+} from "./chunk-VAD43MOR.js";
+import "./chunk-HN6I2XWI.js";
+import "./chunk-WEKL2HYJ.js";
+import "./chunk-NYUYNYQL.js";
 import {
   syncConfigs
-} from "./chunk-Q276MZ7E.js";
+} from "./chunk-3VQWSE3F.js";
+import "./chunk-3G25KIWW.js";
 import "./chunk-73UFRZKY.js";
-import "./chunk-ZTPPCHDB.js";
 import "./chunk-OTGB6YQO.js";
 import {
   ALL_AUDIT_NAMES,
   a11yAudit,
   depsAudit,
-  lighthouseAudit,
   lintAudit,
   runAudits,
   runAuditsAcross,
   securityAudit
-} from "./chunk-DTTIFYAM.js";
+} from "./chunk-2ZPT7GLV.js";
 import "./chunk-LKGVSM2O.js";
 import "./chunk-GASBX52O.js";
-import "./chunk-VRWUL4TR.js";
-import "./chunk-QG6OSL4M.js";
-import "./chunk-DC5H7KEQ.js";
-import "./chunk-4SOCPK7A.js";
+import "./chunk-XHHMM5HX.js";
 import {
   fromJsonFile,
   localPath
-} from "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
+} from "./chunk-6TWWY7ZU.js";
+import "./chunk-XUGSZP7Z.js";
+import "./chunk-EVBCK2KC.js";
+import "./chunk-JHGHLKFS.js";
+import "./chunk-3SF7D4DY.js";
 import "./chunk-A3WDWNN5.js";
 import {
   isLeadFormType
 } from "./chunk-2OP4JKIQ.js";
-import "./chunk-XXTZBPUY.js";
 import "./chunk-XTK5VIQB.js";
 import {
-  fromAirtableBase
-} from "./chunk-NWB4O5EY.js";
-import "./chunk-U5SZ4FOP.js";
+  lighthouseAudit
+} from "./chunk-2NQUCS7O.js";
+import "./chunk-UDRHAQT7.js";
+import "./chunk-PTDMVGKL.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 import {
+  CANONICAL_STATUSES,
   SEVERITY_RANK,
-  siteSlug
-} from "./chunk-577HCGZO.js";
-import "./chunk-HN6I2XWI.js";
+  siteSlug,
+  toAirtableStatus
+} from "./chunk-LDWZSLSU.js";
 import "./chunk-6VAL7XJT.js";
 import "./chunk-NMAWXBJA.js";
 import "./chunk-C6B4RHXR.js";
@@ -128,6 +140,16 @@ function isRecipeName(value) {
   return ALL_RECIPE_NAMES.includes(value);
 }
 
+// src/dashboard/favicon.ts
+var REDDOOR_FAVICON_PNG_BASE64 = "iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAMAAABEpIrGAAAACXBIWXMAAAAnAAAAJwEqCZFPAAAAk1BMVEVHcEzkGTfjGDbjGTfjGTfjGTfjGTfjGDbjGDbjGTfjGTfjGTfkGTfjGTfjGDbjGDbkGTfjGDbjGDbjGTfjGTfjGDbjGTfjGDbjGTfjGDbjGTfjGTfjGDbjGDbjGDbjGDbjGTfjGTbjGDbjGDbjGDbjGDbjGTfjGTfjGTfjGDbjGDbjGTfjGDbjGDbjGTfjGTbkGTfxxbwzAAAALXRSTlMA4DABMOD8cOBwDltwi+bFLMlk54/BDVPk/I61/u2cFaBw9nqO1izBIQE+Becdo6eEAAABBElEQVQ4y91SCVYCMQwt4kxbcEHFfUFFcMGf9P6nM0kXEPEAmtdJs+cnU+f+He2fIIEAYuVgkmvDfTG9Rh+6LoRBUBqE7gi09l9eAeeTrZJoFd5uQWfj4VbPvRqwmj9zfzP6CYpyi48F6HW5A3WuMHsEPsfvO8cSkMPTe+pfRr/MTckdg+4enqL3PkYf/YFIqiiP8VAw6EZkH6QEO0xJLUhmdbY5+TjHkCVohprlcpzlnJw9GlNkrZC16uCmWIaAZItNrT4xV0T2yxrIWoNKy4rdVXOq0MycWp4r43FOMQWciibMYaOHCXKSPhapqTupGFAnwHoVuUUZq7jaSkqDb0/uD9MXqvJMDtU7lL0AAAAASUVORK5CYII=";
+var FAVICON_LINK = `<link rel="icon" type="image/png" href="data:image/png;base64,${REDDOOR_FAVICON_PNG_BASE64}" />`;
+
+// src/dashboard/auth/render.ts
+function renderAuthChrome(email) {
+  if (!email) return "";
+  return `<div style="float:right;font-size:0.8rem;color:#666">${escapeHtml(email)} \xB7 <a href="/auth/logout">sign out</a></div>`;
+}
+
 // src/dashboard/relative-time.ts
 function relativeTimeFromNow(iso, now = /* @__PURE__ */ new Date()) {
   if (!iso) return "\u2014";
@@ -147,10 +169,6 @@ function relativeTimeFromNow(iso, now = /* @__PURE__ */ new Date()) {
   return `${months}mo ago`;
 }
 
-// src/dashboard/favicon.ts
-var REDDOOR_FAVICON_PNG_BASE64 = "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";
-var FAVICON_LINK = `<link rel="icon" type="image/png" href="data:image/png;base64,${REDDOOR_FAVICON_PNG_BASE64}" />`;
-
 // src/dashboard/onboarding.ts
 function isNonEmpty(s) {
   return typeof s === "string" && s.trim().length > 0;
@@ -294,14 +312,7 @@ var SUBMISSION_STATUS_SCRIPT = `document.querySelectorAll("button.subm-status").
     });`;
 
 // src/dashboard/site-details.ts
-var SITE_STATUS_OPTIONS = [
-  "in development",
-  "launch period",
-  "maintenance",
-  "hosting",
-  "probably not our problem",
-  "deprecated"
-];
+var SITE_STATUS_OPTIONS = CANONICAL_STATUSES.map(toAirtableStatus);
 var FREQ_OPTIONS = ["None", "Monthly", "Quarterly", "Yearly"];
 
 // src/dashboard/render.ts
@@ -476,8 +487,8 @@ function gaUsersCell(r) {
   const current = String(r.gaUsersCurrent);
   if (r.gaUsersPrevious === null) return escapeHtml(current);
   const delta = r.gaUsersCurrent - r.gaUsersPrevious;
-  const sign = delta > 0 ? "+" : "";
-  return `${escapeHtml(current)} <span class="muted">(${escapeHtml(`${sign}${delta}`)})</span>`;
+  const sign2 = delta > 0 ? "+" : "";
+  return `${escapeHtml(current)} <span class="muted">(${escapeHtml(`${sign2}${delta}`)})</span>`;
 }
 function searchCell(r) {
   if (r.searchFoundPage1 && r.searchPosition !== null) {
@@ -575,6 +586,9 @@ function selectRow(label, field, options, current, url) {
 function inputRow(label, field, value, url) {
   return `<div class="detail"><dt><label for="detail-${field}">${escapeHtml(label)}</label></dt><dd><input type="text" id="detail-${field}" data-detail-field="${field}" data-details-url="${url}" value="${escapeHtml(value ?? "")}" />${savedSpan(field)}</dd></div>`;
 }
+function dateRow(label, field, value, url) {
+  return `<div class="detail"><dt><label for="detail-${field}">${escapeHtml(label)}</label></dt><dd><input type="date" id="detail-${field}" data-detail-field="${field}" data-details-url="${url}" value="${escapeHtml(value ?? "")}" />${savedSpan(field)}</dd></div>`;
+}
 function textareaRow(label, field, value, url) {
   return `<div class="detail wide"><dt><label for="detail-${field}">${escapeHtml(label)}</label></dt><dd><textarea id="detail-${field}" data-detail-field="${field}" data-details-url="${url}">${escapeHtml(value ?? "")}</textarea>${savedSpan(field)}</dd></div>`;
 }
@@ -582,7 +596,11 @@ function siteDetailsSection(site) {
   const url = `/api/sites/${escapeHtml(siteSlug(site.name))}/details`;
   const lastCommit = site.lastCommitAt ? `${relativeTimeFromNow(site.lastCommitAt)}` : null;
   const rows = [
-    selectRow("Status", "status", SITE_STATUS_OPTIONS, site.status, url),
+    // `statusRaw`, not `status`: this select's options ARE the Airtable cell
+    // values (see SITE_STATUS_OPTIONS), so it must preselect against the raw cell.
+    // Comparing the canonical value would mis-preselect every site, and would show
+    // a "legacy" site as "deprecated" instead of the placeholder.
+    selectRow("Status", "status", SITE_STATUS_OPTIONS, site.statusRaw, url),
     selectRow("Maintenance cadence", "maintenanceFreq", FREQ_OPTIONS, site.maintenanceFreq, url),
     selectRow("Testing cadence", "testingFreq", FREQ_OPTIONS, site.testingFreq, url),
     inputRow("Report recipients (To)", "reportRecipientsTo", site.reportRecipientsTo, url),
@@ -591,6 +609,18 @@ function siteDetailsSection(site) {
     inputRow("GA4 property", "ga4PropertyId", site.ga4PropertyId, url),
     inputRow("Search query", "searchQuery", site.searchQuery, url),
     inputRow("Git repo", "gitRepo", site.gitRepo, url),
+    // #539 Phase 4 — the fields nothing rendered before. `Mailchimp API Key` is
+    // the one field in that group still absent, and deliberately: it is a live
+    // credential and every row here emits its stored value into the page.
+    inputRow("Netlify ID", "netlifyId", site.netlifyId, url),
+    inputRow("Search Console property", "searchConsoleProperty", site.searchConsoleProperty, url),
+    inputRow("Newsletter webhook", "newsletterWebhook", site.newsletterWebhook, url),
+    inputRow("Mailchimp audience ID", "mailchimpAudienceId", site.mailchimpAudienceId, url),
+    dateRow("Last maintenance day", "maintenanceDay", site.maintenanceDay, url),
+    dateRow("Last testing day", "testingDay", site.testingDay, url),
+    // Raw JSON, and shown as the raw cell rather than the parsed object: what the
+    // operator edits has to be the thing `parseNotifyRouting` will read back.
+    textareaRow("Notify routing (JSON)", "notifyRouting", site.notifyRoutingRaw, url),
     textareaRow("Copy \u2014 Intro", "copyIntro", site.copyIntro, url),
     textareaRow("Copy \u2014 Contact", "copyContact", site.copyContact, url),
     textareaRow("Copy \u2014 Footer", "copyFooter", site.copyFooter, url),
@@ -754,7 +784,7 @@ button.trigger-renovate:disabled { opacity: 0.6; cursor: default; }
 .chip.accepted { background: transparent; border: 1px dashed #bbb; color: #888; }
 @media (prefers-color-scheme: dark) { .chip.accepted { border-color: #444; } .chip.critical { background: #2a0f0d; color: #ff8a80; } }
 `;
-function renderSiteDashboardHtml(site, reports, submissions = [], spamTotals = null, now = /* @__PURE__ */ new Date(), alarm = null) {
+function renderSiteDashboardHtml(site, reports, submissions = [], spamTotals = null, now = /* @__PURE__ */ new Date(), alarm = null, operatorEmail = null) {
   const name = escapeHtml(site.name);
   const urlSafe = safeUrl(site.url);
   const allScoresNull = site.pScore === null && site.rScore === null && site.bpScore === null && site.seoScore === null;
@@ -787,6 +817,7 @@ function renderSiteDashboardHtml(site, reports, submissions = [], spamTotals = n
   <style>${STYLES}${SUBMISSION_STYLES}</style>
 </head>
 <body>
+  ${renderAuthChrome(operatorEmail)}
   <a class="home" href="/">\u2190 Fleet home</a>
   <h1>${name}</h1>
   <div class="meta"><a href="${escapeHtml(urlSafe)}">${escapeHtml(site.url)}</a></div>
@@ -1612,7 +1643,7 @@ var AUDIT_SCRIPT = `<script>
   } catch(e){}
 })();
 </script>`;
-function renderCockpitHtml(model) {
+function renderCockpitHtml(model, operatorEmail = null) {
   const total = model.cards.length;
   const feed = buildNeedsYouFeed(model);
   return `<!doctype html>
@@ -1625,8 +1656,9 @@ function renderCockpitHtml(model) {
   <style>${STYLES2}</style>
 </head>
 <body>
+  ${renderAuthChrome(operatorEmail)}
   <h1>Reddoor fleet cockpit</h1>
-  <div class="meta">${total} site${total === 1 ? "" : "s"} on the Reddoor stack.</div>
+  <div class="meta">${total} site${total === 1 ? "" : "s"} on the Reddoor stack. <a href="/fleet">Fleet table \u2192</a></div>
   ${verdictBar(model, feed)}
   ${renderNeedsYouFeed(feed)}
   ${renderFleetBrowsePanel(model)}
@@ -1659,6 +1691,15 @@ function verifyBasicAuth(authHeader, expectedPassword) {
   if (a.length !== b.length) return false;
   return timingSafeEqual(a, b);
 }
+
+// src/dashboard/auth/signing.ts
+import { createHmac, timingSafeEqual as timingSafeEqual2 } from "crypto";
+
+// src/dashboard/auth/session.ts
+var SESSION_TTL_SECONDS = 30 * 24 * 60 * 60;
+
+// src/dashboard/prospect-audit-trigger.ts
+var PROSPECT_AUDIT_DUPLICATE_WINDOW_MS = 10 * 60 * 1e3;
 export {
   ALL_AUDIT_NAMES,
   ALL_RECIPE_NAMES,
@@ -1681,6 +1722,7 @@ export {
   lighthouseAudit,
   lintAudit,
   loadBundledImages,
+  loadHeadline,
   loadPlate,
   localPath,
   onboard,