@reddoorla/maintenance 0.85.2 → 0.86.0

package/dist/{prismic-ci-UTQ6LRR3.js → prismic-ci-3RHOZUUT.js}

@@ -1,18 +1,18 @@
+import {
+  runRecipeOverSites
+} from "./chunk-VPJ7N6P7.js";
 import {
   noWorkingTreeFailure,
   readPrismicConfig
 } from "./chunk-VNB5XBQ4.js";
-import {
-  runRecipeOverSites
-} from "./chunk-VPJ7N6P7.js";
 import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-P2FE5AI6.js";
 import {
   PRETTIER_FLAG_NOTE,
   formatWithPrettier,
@@ -23,14 +23,9 @@ import {
 } from "./chunk-GASBX52O.js";
 import {
   makeGitHub
-} from "./chunk-VRWUL4TR.js";
-import "./chunk-FDIFTIXC.js";
-import {
-  defaultSpawn
-} from "./chunk-4DHQCN5H.js";
-import {
-  siteLabel
-} from "./chunk-XXTZBPUY.js";
+} from "./chunk-XHHMM5HX.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import {
   branchName,
   checkoutBranch,
@@ -42,7 +37,12 @@ import {
   isWorkingTreeClean,
   push
 } from "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import {
+  defaultSpawn
+} from "./chunk-LBYOLBW7.js";
+import {
+  siteLabel
+} from "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/prismic-ci.ts
 import { readdir } from "fs/promises";
@@ -444,4 +444,4 @@ export {
   formatPrismicCiResults,
   runPrismicCiCommand
 };
-//# sourceMappingURL=prismic-ci-UTQ6LRR3.js.map
+//# sourceMappingURL=prismic-ci-3RHOZUUT.js.map

package/dist/{prismic-models-PVES6R5V.js → prismic-models-QBGUT2Q3.js}

@@ -15,26 +15,26 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-P2FE5AI6.js";
 import {
   PRETTIER_FLAG_NOTE,
   formatWithPrettier
 } from "./chunk-R53VL3RI.js";
-import "./chunk-FDIFTIXC.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
+import "./chunk-XTK5VIQB.js";
 import {
   makeSpawn
-} from "./chunk-4DHQCN5H.js";
+} from "./chunk-LBYOLBW7.js";
 import {
   siteLabel
 } from "./chunk-XXTZBPUY.js";
-import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
 import {
   siteSlug
-} from "./chunk-577HCGZO.js";
+} from "./chunk-LDWZSLSU.js";
 
 // src/cli/commands/prismic-models.ts
 import { readdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
@@ -166,7 +166,7 @@ var defaultDeps = () => ({
   // every one of those runs fail on module load.
   openVerdictSink: async () => {
     const { openBase, readAirtableConfig } = await import("./client-EPVO3FEH.js");
-    const { listWebsites, updatePrismicModels } = await import("./websites-SADZR4XQ.js");
+    const { listWebsites, updatePrismicModels } = await import("./websites-SXWTP72S.js");
     const base = openBase(readAirtableConfig());
     const websites = await listWebsites(base);
     return {
@@ -764,7 +764,7 @@ async function persistSweep(rows, deps) {
   let sink;
   let formatSummary;
   try {
-    formatSummary = (await import("./write-audits-to-airtable-7PH75YWY.js")).formatFleetWriteSummary;
+    formatSummary = (await import("./write-audits-to-airtable-MBEILLPU.js")).formatFleetWriteSummary;
     sink = await deps.openVerdictSink();
   } catch (e) {
     return {
@@ -1017,4 +1017,4 @@ export {
   sweepRowWriteback,
   writeSweepToAirtable
 };
-//# sourceMappingURL=prismic-models-PVES6R5V.js.map
+//# sourceMappingURL=prismic-models-QBGUT2Q3.js.map

package/dist/prospect-audit-IUNCJ2LV.js

@@ -0,0 +1,174 @@
+import {
+  hostnameOf,
+  isHttpUrl
+} from "./chunk-EVBCK2KC.js";
+
+// src/cli/commands/prospect-audit.ts
+import { mkdir, writeFile } from "fs/promises";
+import { resolve } from "path";
+
+// src/dashboard/handler-helpers.ts
+var DEFAULT_DASHBOARD_BASE_URL = "https://reddoor-maintenance.netlify.app";
+function resolveDashboardBaseUrl(raw) {
+  return (raw?.trim() || DEFAULT_DASHBOARD_BASE_URL).replace(/\/$/, "");
+}
+
+// src/cli/commands/prospect-audit.ts
+function fail(message) {
+  return { output: message, code: 2 };
+}
+function errorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+function scoreLine(label, value) {
+  return `${label.padEnd(14)} ${value === null ? "not measured" : String(value).padStart(3)}`;
+}
+function auditStatus(result) {
+  const allStagesOk = result.checks.ok && result.lighthouse.ok && result.analyze.ok && result.probes.ok;
+  return allStagesOk ? "complete" : "partial";
+}
+function slugify(s) {
+  const slug = s.toLowerCase().replace(/[^a-z0-9.-]+/g, "-").replace(/^-+|-+$/g, "");
+  return slug || "prospect";
+}
+async function writeRecoveryFiles(result, html) {
+  const dir = resolve("reports");
+  await mkdir(dir, { recursive: true });
+  const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+  const base = `prospect-audit-${slugify(hostnameOf(result.url))}-${stamp}`;
+  const htmlPath = resolve(dir, `${base}.html`);
+  const jsonPath = resolve(dir, `${base}.json`);
+  await writeFile(htmlPath, html, "utf-8");
+  await writeFile(jsonPath, JSON.stringify(result, null, 2), "utf-8");
+  return { htmlPath, jsonPath };
+}
+function summarize(result, link, file, warnings, recovery, email) {
+  const lines = [
+    `Prospect audit \u2014 ${result.businessName ?? result.url}`,
+    "",
+    scoreLine("Findability", result.scores.findability),
+    scoreLine("Readability", result.scores.readability),
+    scoreLine("Answers", result.scores.answers),
+    scoreLine("AI Visibility", result.scores.aiVisibility)
+  ];
+  for (const [name, stage] of [
+    ["checks", result.checks],
+    ["lighthouse", result.lighthouse],
+    ["analyze", result.analyze],
+    ["probes", result.probes]
+  ]) {
+    if (!stage.ok) lines.push(`  ! ${name} not measured \u2014 ${stage.error}`);
+  }
+  if (file) lines.push("", `Report written to ${file}`);
+  if (link) lines.push("", `Shareable link: ${link}`);
+  if (email?.sent) {
+    lines.push("", `Emailed to ${email.recipients.join(", ")} (${email.messageId})`);
+  }
+  for (const w of warnings) lines.push("", `! ${w}`);
+  if (recovery) {
+    lines.push(
+      "",
+      "Neither --out nor the database took this report \u2014 wrote a recovery copy instead:",
+      `  ${recovery.htmlPath}`,
+      `  ${recovery.jsonPath}`
+    );
+  }
+  return lines.join("\n");
+}
+async function runProspectAuditCommand(url, opts) {
+  if (!isHttpUrl(url)) {
+    return fail(`"${url}" is not a URL. Pass the full address, e.g. https://example.com`);
+  }
+  const canPersist = Boolean(process.env.TURSO_DATABASE_URL);
+  if (!canPersist && !opts.out) {
+    return fail(
+      "No TURSO_DATABASE_URL, so the report cannot be saved or shared. Re-run with --out <file>, or set the Turso credentials."
+    );
+  }
+  const { runProspectAudit } = await import("./pipeline-S6CVHDGB.js");
+  const onStage = (name, status, detail) => {
+    if (status === "start") console.error(`\u2026 ${name}`);
+    else if (status === "ok") console.error(`\u2713 ${name}`);
+    else console.error(`! ${name} \u2014 ${detail ?? "failed"}`);
+  };
+  const business = opts.business?.trim();
+  const result = await runProspectAudit(
+    url,
+    {
+      ...business ? { business } : {},
+      ...opts.competitors ? {
+        competitors: opts.competitors.split(",").map((c) => c.trim()).filter(Boolean)
+      } : {},
+      ...opts.probes === false ? { probes: false } : {}
+    },
+    { ...opts.deps ?? {}, onStage }
+  );
+  const { renderProspectReport } = await import("./render-AQAVQDPZ.js");
+  const html = renderProspectReport(result);
+  const warnings = [];
+  let file = null;
+  if (opts.out) {
+    try {
+      await writeFile(opts.out, html, "utf-8");
+      file = opts.out;
+    } catch (err) {
+      warnings.push(`Could not write --out (${opts.out}): ${errorMessage(err)}`);
+    }
+  }
+  let link = null;
+  let token = null;
+  let auditId = null;
+  if (canPersist) {
+    try {
+      const { openDb, readDbConfig } = await import("./client-AUE3XUPO.js");
+      const { createProspectAudit } = await import("./prospect-audits-3PMIO73D.js");
+      const db = await openDb(readDbConfig());
+      const created = await createProspectAudit(db, {
+        url: result.url,
+        // Map at the boundary: ProspectAuditResult.businessName is the field
+        // name (Item 2 — it's a resolved NAME, not a description); the
+        // `prospect_audits.business` column keeps its existing name, since
+        // renaming a column needs its own migration for no benefit here.
+        business: result.businessName,
+        status: auditStatus(result),
+        resultJson: JSON.stringify(result)
+      });
+      auditId = created.id;
+      token = created.token;
+      link = `${resolveDashboardBaseUrl(process.env.DASHBOARD_BASE_URL)}/r/${token}`;
+    } catch (err) {
+      warnings.push(`Could not save to the database: ${errorMessage(err)}`);
+    }
+  }
+  const delivered = file !== null || link !== null;
+  const recovery = delivered ? null : await writeRecoveryFiles(result, html);
+  const code = delivered ? 0 : 1;
+  let email = null;
+  if (opts.email) {
+    try {
+      const { sendAuditEmail, parseProspectAuditRecipients } = await import("./email-VTTTKKL5.js");
+      const recipients = parseProspectAuditRecipients(process.env.PROSPECT_AUDIT_RECIPIENTS);
+      email = await sendAuditEmail(result, { link, recipients, auditId });
+      if (!email.sent) {
+        warnings.push(`Could not email the audit sheet: ${email.reason}`);
+      }
+    } catch (err) {
+      warnings.push(`Could not email the audit sheet: ${errorMessage(err)}`);
+    }
+  }
+  if (opts.json) {
+    return {
+      output: JSON.stringify(
+        { result, out: file, link, token, recovery, warnings, email },
+        null,
+        2
+      ),
+      code
+    };
+  }
+  return { output: summarize(result, link, file, warnings, recovery, email), code };
+}
+export {
+  runProspectAuditCommand
+};
+//# sourceMappingURL=prospect-audit-IUNCJ2LV.js.map

package/dist/prospect-audit-IUNCJ2LV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/prospect-audit.ts","../src/dashboard/handler-helpers.ts"],"sourcesContent":["import { mkdir, writeFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { hostnameOf, isHttpUrl } from \"../../util/url.js\";\nimport { resolveDashboardBaseUrl } from \"../../dashboard/handler-helpers.js\";\nimport type { ProspectAuditStatus } from \"../../db/prospect-audits.js\";\nimport type { PipelineDeps, StageName } from \"../../prospect/pipeline.js\";\nimport type { ProspectAuditResult } from \"../../prospect/types.js\";\nimport type { SendAuditEmailResult } from \"../../prospect/email.js\";\n\nexport type ProspectAuditCliOptions = {\n  business?: string;\n  /** Comma-separated competitor domains. */\n  competitors?: string;\n  /** cac sets this false for `--no-probes`. */\n  probes?: boolean;\n  out?: string;\n  json?: boolean;\n  /**\n   * Email the internal sheet (scores, what wasn't measured and why, top\n   * fixes, and the shareable link) to `PROSPECT_AUDIT_RECIPIENTS`, once the\n   * report is rendered and the `--out`/Turso delivery attempts finish. A\n   * missing/empty recipients var, or a Resend failure, is a warning — never a\n   * crash — because by the time this runs the audit is already delivered (or\n   * recovered) by the code above it.\n   */\n  email?: boolean;\n  /** Test seam: injected pipeline deps. Never set from the CLI. */\n  deps?: PipelineDeps;\n};\n\ntype RecoveryWrite = { htmlPath: string; jsonPath: string };\n\nfunction fail(message: string): { output: string; code: number } {\n  return { output: message, code: 2 };\n}\n\nfunction errorMessage(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n\nfunction scoreLine(label: string, value: number | null): string {\n  return `${label.padEnd(14)} ${value === null ? \"not measured\" : String(value).padStart(3)}`;\n}\n\n/** Item 3: the `status` column exists to answer, without deserializing the\n *  whole result_json, whether this was a clean run or a degraded one. crawl\n *  is excluded — it's the one fatal stage (see pipeline.ts), so by the time a\n *  ProspectAuditResult exists it was always ok. Every other stage's\n *  StageResult already collapses \"failed\" and \"deliberately skipped\"\n *  (--no-probes, the checks→analyze cascade) into the same `ok: false` — both\n *  mean the report has a \"not measured\" section, so both count as partial\n *  here too. */\nfunction auditStatus(result: ProspectAuditResult): ProspectAuditStatus {\n  const allStagesOk =\n    result.checks.ok && result.lighthouse.ok && result.analyze.ok && result.probes.ok;\n  return allStagesOk ? \"complete\" : \"partial\";\n}\n\n/** Filesystem-safe, never empty. Collapses anything outside [a-z0-9.-] to a\n *  single dash so a hostname becomes a sane filename fragment. */\nfunction slugify(s: string): string {\n  const slug = s\n    .toLowerCase()\n    .replace(/[^a-z0-9.-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return slug || \"prospect\";\n}\n\n/**\n * Last-resort write when NEITHER `--out` nor the database persist made it —\n * the one situation a paid, already-run audit must never end in silently. Lands\n * in `reports/`, mirroring header-image.ts's own convention for CLI-written\n * artifacts (mkdir -p, resolved against cwd), rather than a bare file dropped\n * into whatever directory the operator happened to be standing in when they\n * ran the command — often unrelated to this repo at all in fleet-tool usage.\n */\nasync function writeRecoveryFiles(\n  result: ProspectAuditResult,\n  html: string,\n): Promise<RecoveryWrite> {\n  const dir = resolve(\"reports\");\n  await mkdir(dir, { recursive: true });\n  const stamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n  const base = `prospect-audit-${slugify(hostnameOf(result.url))}-${stamp}`;\n  const htmlPath = resolve(dir, `${base}.html`);\n  const jsonPath = resolve(dir, `${base}.json`);\n  await writeFile(htmlPath, html, \"utf-8\");\n  await writeFile(jsonPath, JSON.stringify(result, null, 2), \"utf-8\");\n  return { htmlPath, jsonPath };\n}\n\nfunction summarize(\n  result: ProspectAuditResult,\n  link: string | null,\n  file: string | null,\n  warnings: string[],\n  recovery: RecoveryWrite | null,\n  email: SendAuditEmailResult | null,\n): string {\n  const lines = [\n    `Prospect audit — ${result.businessName ?? result.url}`,\n    \"\",\n    scoreLine(\"Findability\", result.scores.findability),\n    scoreLine(\"Readability\", result.scores.readability),\n    scoreLine(\"Answers\", result.scores.answers),\n    scoreLine(\"AI Visibility\", result.scores.aiVisibility),\n  ];\n  for (const [name, stage] of [\n    [\"checks\", result.checks],\n    [\"lighthouse\", result.lighthouse],\n    [\"analyze\", result.analyze],\n    [\"probes\", result.probes],\n  ] as const) {\n    if (!stage.ok) lines.push(`  ! ${name} not measured — ${stage.error}`);\n  }\n  if (file) lines.push(\"\", `Report written to ${file}`);\n  if (link) lines.push(\"\", `Shareable link: ${link}`);\n  if (email?.sent) {\n    lines.push(\"\", `Emailed to ${email.recipients.join(\", \")} (${email.messageId})`);\n  }\n  for (const w of warnings) lines.push(\"\", `! ${w}`);\n  if (recovery) {\n    lines.push(\n      \"\",\n      \"Neither --out nor the database took this report — wrote a recovery copy instead:\",\n      `  ${recovery.htmlPath}`,\n      `  ${recovery.jsonPath}`,\n    );\n  }\n  return lines.join(\"\\n\");\n}\n\n/**\n * Run one prospect audit end to end. Progress goes to stderr so `--json` stdout\n * stays pipeable. Persistence needs Turso; without it `--out` is mandatory,\n * because an audit nobody can read afterwards is just a bill.\n *\n * By the time `runProspectAudit` resolves, the money is already spent — only\n * the crawl is fatal, every other stage degrades rather than throwing. So the\n * `--out` write and the database persist below are each wrapped in their own\n * try/catch and attempted independently: a bad `--out` path must not cost a\n * working Turso persist (or vice versa), and if BOTH fail — or persist fails\n * with no `--out` given at all — a recovery copy goes to `reports/` rather\n * than the run ending with nothing anywhere. `--json` only changes the SHAPE\n * of stdout; it still runs the same `--out`/persist/recovery logic beneath it.\n */\nexport async function runProspectAuditCommand(\n  url: string,\n  opts: ProspectAuditCliOptions,\n): Promise<{ output: string; code: number }> {\n  if (!isHttpUrl(url)) {\n    return fail(`\"${url}\" is not a URL. Pass the full address, e.g. https://example.com`);\n  }\n  const canPersist = Boolean(process.env.TURSO_DATABASE_URL);\n  if (!canPersist && !opts.out) {\n    return fail(\n      \"No TURSO_DATABASE_URL, so the report cannot be saved or shared. Re-run with --out <file>, or set the Turso credentials.\",\n    );\n  }\n\n  const { runProspectAudit } = await import(\"../../prospect/pipeline.js\");\n  const onStage = (name: StageName, status: \"start\" | \"ok\" | \"fail\", detail?: string): void => {\n    if (status === \"start\") console.error(`… ${name}`);\n    else if (status === \"ok\") console.error(`✓ ${name}`);\n    else console.error(`! ${name} — ${detail ?? \"failed\"}`);\n  };\n\n  const business = opts.business?.trim();\n  const result = await runProspectAudit(\n    url,\n    {\n      ...(business ? { business } : {}),\n      ...(opts.competitors\n        ? {\n            competitors: opts.competitors\n              .split(\",\")\n              .map((c) => c.trim())\n              .filter(Boolean),\n          }\n        : {}),\n      ...(opts.probes === false ? { probes: false } : {}),\n    },\n    { ...(opts.deps ?? {}), onStage },\n  );\n\n  const { renderProspectReport } = await import(\"../../prospect/render.js\");\n  const html = renderProspectReport(result);\n\n  const warnings: string[] = [];\n\n  let file: string | null = null;\n  if (opts.out) {\n    try {\n      await writeFile(opts.out, html, \"utf-8\");\n      file = opts.out;\n    } catch (err) {\n      warnings.push(`Could not write --out (${opts.out}): ${errorMessage(err)}`);\n    }\n  }\n\n  let link: string | null = null;\n  let token: string | null = null;\n  let auditId: string | null = null;\n  if (canPersist) {\n    try {\n      const { openDb, readDbConfig } = await import(\"../../db/client.js\");\n      const { createProspectAudit } = await import(\"../../db/prospect-audits.js\");\n      const db = await openDb(readDbConfig());\n      const created = await createProspectAudit(db, {\n        url: result.url,\n        // Map at the boundary: ProspectAuditResult.businessName is the field\n        // name (Item 2 — it's a resolved NAME, not a description); the\n        // `prospect_audits.business` column keeps its existing name, since\n        // renaming a column needs its own migration for no benefit here.\n        business: result.businessName,\n        status: auditStatus(result),\n        resultJson: JSON.stringify(result),\n      });\n      auditId = created.id;\n      token = created.token;\n      link = `${resolveDashboardBaseUrl(process.env.DASHBOARD_BASE_URL)}/r/${token}`;\n    } catch (err) {\n      warnings.push(`Could not save to the database: ${errorMessage(err)}`);\n    }\n  }\n\n  const delivered = file !== null || link !== null;\n  const recovery = delivered ? null : await writeRecoveryFiles(result, html);\n  const code = delivered ? 0 : 1;\n\n  // The audit is already delivered (or recovered) above — an email failure\n  // must never take that away. Same independent try/catch shape as the\n  // --out write and the Turso persist: record a warning, keep going, never\n  // touch `code`. Dynamically imported for the same reason db/client.js and\n  // prospect/render.js are above: it reaches `resend` (a devDependency) and\n  // must stay out of bin.js's static import graph (see bin.ts's\n  // central-dep-blocker comment).\n  let email: SendAuditEmailResult | null = null;\n  if (opts.email) {\n    try {\n      const { sendAuditEmail, parseProspectAuditRecipients } =\n        await import(\"../../prospect/email.js\");\n      const recipients = parseProspectAuditRecipients(process.env.PROSPECT_AUDIT_RECIPIENTS);\n      email = await sendAuditEmail(result, { link, recipients, auditId });\n      if (!email.sent) {\n        warnings.push(`Could not email the audit sheet: ${email.reason}`);\n      }\n    } catch (err) {\n      warnings.push(`Could not email the audit sheet: ${errorMessage(err)}`);\n    }\n  }\n\n  if (opts.json) {\n    return {\n      output: JSON.stringify(\n        { result, out: file, link, token, recovery, warnings, email },\n        null,\n        2,\n      ),\n      code,\n    };\n  }\n\n  return { output: summarize(result, link, file, warnings, recovery, email), code };\n}\n","/**\n * Small pure helpers extracted from the Netlify dashboard handlers\n * (fleet-homepage.mts, site-dashboard.mts) so their non-glue logic is\n * unit-testable without booting a Netlify function.\n */\n\nconst DEFAULT_DASHBOARD_BASE_URL = \"https://reddoor-maintenance.netlify.app\";\n\n/**\n * Resolve the dashboard's public base URL from the optional DASHBOARD_BASE_URL\n * env var: trim it, fall back to the canonical Netlify URL when unset/blank,\n * and strip a trailing slash so callers can append `/s/:slug` cleanly.\n */\nexport function resolveDashboardBaseUrl(raw: string | undefined): string {\n  return (raw?.trim() || DEFAULT_DASHBOARD_BASE_URL).replace(/\\/$/, \"\");\n}\n\n/**\n * Resolve the requested site slug from the path param (Netlify\n * `ctx.params.slug`) or, lacking it, the `?slug=` query param. Null when\n * neither is present (→ the handler's presence-only health check).\n */\nexport function resolveSlug(\n  paramSlug: string | undefined,\n  querySlug: string | null,\n): string | null {\n  return paramSlug ?? querySlug ?? null;\n}\n\n/**\n * Build a 502 for an UNEXPECTED handler failure (an Airtable 429/500, a network\n * timeout). Logs the real error server-side so the operator sees it in the\n * function logs, but returns a generic, retry-able body — never the error/stack\n * itself — so a transient backend hiccup degrades to a clean \"try again\" rather\n * than an unhandled rejection (whose surfaced status/body we don't control).\n * Use in each handler's top-level catch around the Airtable + render section.\n */\nexport function handlerError(service: string, err: unknown): Response {\n  const detail = err instanceof Error ? (err.stack ?? err.message) : String(err);\n  console.error(`[${service}] unexpected failure: ${detail}`);\n  return new Response(\"Temporarily unavailable — please retry in a moment.\", {\n    status: 502,\n    headers: { \"content-type\": \"text/plain; charset=utf-8\" },\n  });\n}\n"],"mappings":";;;;;;AAAA,SAAS,OAAO,iBAAiB;AACjC,SAAS,eAAe;;;ACKxB,IAAM,6BAA6B;AAO5B,SAAS,wBAAwB,KAAiC;AACvE,UAAQ,KAAK,KAAK,KAAK,4BAA4B,QAAQ,OAAO,EAAE;AACtE;;;ADiBA,SAAS,KAAK,SAAmD;AAC/D,SAAO,EAAE,QAAQ,SAAS,MAAM,EAAE;AACpC;AAEA,SAAS,aAAa,KAAsB;AAC1C,SAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACxD;AAEA,SAAS,UAAU,OAAe,OAA8B;AAC9D,SAAO,GAAG,MAAM,OAAO,EAAE,CAAC,IAAI,UAAU,OAAO,iBAAiB,OAAO,KAAK,EAAE,SAAS,CAAC,CAAC;AAC3F;AAUA,SAAS,YAAY,QAAkD;AACrE,QAAM,cACJ,OAAO,OAAO,MAAM,OAAO,WAAW,MAAM,OAAO,QAAQ,MAAM,OAAO,OAAO;AACjF,SAAO,cAAc,aAAa;AACpC;AAIA,SAAS,QAAQ,GAAmB;AAClC,QAAM,OAAO,EACV,YAAY,EACZ,QAAQ,iBAAiB,GAAG,EAC5B,QAAQ,YAAY,EAAE;AACzB,SAAO,QAAQ;AACjB;AAUA,eAAe,mBACb,QACA,MACwB;AACxB,QAAM,MAAM,QAAQ,SAAS;AAC7B,QAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACpC,QAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,SAAS,GAAG;AAC3D,QAAM,OAAO,kBAAkB,QAAQ,WAAW,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK;AACvE,QAAM,WAAW,QAAQ,KAAK,GAAG,IAAI,OAAO;AAC5C,QAAM,WAAW,QAAQ,KAAK,GAAG,IAAI,OAAO;AAC5C,QAAM,UAAU,UAAU,MAAM,OAAO;AACvC,QAAM,UAAU,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,OAAO;AAClE,SAAO,EAAE,UAAU,SAAS;AAC9B;AAEA,SAAS,UACP,QACA,MACA,MACA,UACA,UACA,OACQ;AACR,QAAM,QAAQ;AAAA,IACZ,yBAAoB,OAAO,gBAAgB,OAAO,GAAG;AAAA,IACrD;AAAA,IACA,UAAU,eAAe,OAAO,OAAO,WAAW;AAAA,IAClD,UAAU,eAAe,OAAO,OAAO,WAAW;AAAA,IAClD,UAAU,WAAW,OAAO,OAAO,OAAO;AAAA,IAC1C,UAAU,iBAAiB,OAAO,OAAO,YAAY;AAAA,EACvD;AACA,aAAW,CAAC,MAAM,KAAK,KAAK;AAAA,IAC1B,CAAC,UAAU,OAAO,MAAM;AAAA,IACxB,CAAC,cAAc,OAAO,UAAU;AAAA,IAChC,CAAC,WAAW,OAAO,OAAO;AAAA,IAC1B,CAAC,UAAU,OAAO,MAAM;AAAA,EAC1B,GAAY;AACV,QAAI,CAAC,MAAM,GAAI,OAAM,KAAK,OAAO,IAAI,wBAAmB,MAAM,KAAK,EAAE;AAAA,EACvE;AACA,MAAI,KAAM,OAAM,KAAK,IAAI,qBAAqB,IAAI,EAAE;AACpD,MAAI,KAAM,OAAM,KAAK,IAAI,mBAAmB,IAAI,EAAE;AAClD,MAAI,OAAO,MAAM;AACf,UAAM,KAAK,IAAI,cAAc,MAAM,WAAW,KAAK,IAAI,CAAC,KAAK,MAAM,SAAS,GAAG;AAAA,EACjF;AACA,aAAW,KAAK,SAAU,OAAM,KAAK,IAAI,KAAK,CAAC,EAAE;AACjD,MAAI,UAAU;AACZ,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,KAAK,SAAS,QAAQ;AAAA,MACtB,KAAK,SAAS,QAAQ;AAAA,IACxB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAgBA,eAAsB,wBACpB,KACA,MAC2C;AAC3C,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,WAAO,KAAK,IAAI,GAAG,iEAAiE;AAAA,EACtF;AACA,QAAM,aAAa,QAAQ,QAAQ,IAAI,kBAAkB;AACzD,MAAI,CAAC,cAAc,CAAC,KAAK,KAAK;AAC5B,WAAO;AAAA,MACL;AAAA,IACF;AAAA,EACF;AAEA,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,wBAA4B;AACtE,QAAM,UAAU,CAAC,MAAiB,QAAiC,WAA0B;AAC3F,QAAI,WAAW,QAAS,SAAQ,MAAM,UAAK,IAAI,EAAE;AAAA,aACxC,WAAW,KAAM,SAAQ,MAAM,UAAK,IAAI,EAAE;AAAA,QAC9C,SAAQ,MAAM,KAAK,IAAI,WAAM,UAAU,QAAQ,EAAE;AAAA,EACxD;AAEA,QAAM,WAAW,KAAK,UAAU,KAAK;AACrC,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,MACE,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,GAAI,KAAK,cACL;AAAA,QACE,aAAa,KAAK,YACf,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AAAA,MACnB,IACA,CAAC;AAAA,MACL,GAAI,KAAK,WAAW,QAAQ,EAAE,QAAQ,MAAM,IAAI,CAAC;AAAA,IACnD;AAAA,IACA,EAAE,GAAI,KAAK,QAAQ,CAAC,GAAI,QAAQ;AAAA,EAClC;AAEA,QAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,sBAA0B;AACxE,QAAM,OAAO,qBAAqB,MAAM;AAExC,QAAM,WAAqB,CAAC;AAE5B,MAAI,OAAsB;AAC1B,MAAI,KAAK,KAAK;AACZ,QAAI;AACF,YAAM,UAAU,KAAK,KAAK,MAAM,OAAO;AACvC,aAAO,KAAK;AAAA,IACd,SAAS,KAAK;AACZ,eAAS,KAAK,0BAA0B,KAAK,GAAG,MAAM,aAAa,GAAG,CAAC,EAAE;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,OAAsB;AAC1B,MAAI,QAAuB;AAC3B,MAAI,UAAyB;AAC7B,MAAI,YAAY;AACd,QAAI;AACF,YAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,OAAO,sBAAoB;AAClE,YAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,+BAA6B;AAC1E,YAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,YAAM,UAAU,MAAM,oBAAoB,IAAI;AAAA,QAC5C,KAAK,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,QAKZ,UAAU,OAAO;AAAA,QACjB,QAAQ,YAAY,MAAM;AAAA,QAC1B,YAAY,KAAK,UAAU,MAAM;AAAA,MACnC,CAAC;AACD,gBAAU,QAAQ;AAClB,cAAQ,QAAQ;AAChB,aAAO,GAAG,wBAAwB,QAAQ,IAAI,kBAAkB,CAAC,MAAM,KAAK;AAAA,IAC9E,SAAS,KAAK;AACZ,eAAS,KAAK,mCAAmC,aAAa,GAAG,CAAC,EAAE;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,YAAY,SAAS,QAAQ,SAAS;AAC5C,QAAM,WAAW,YAAY,OAAO,MAAM,mBAAmB,QAAQ,IAAI;AACzE,QAAM,OAAO,YAAY,IAAI;AAS7B,MAAI,QAAqC;AACzC,MAAI,KAAK,OAAO;AACd,QAAI;AACF,YAAM,EAAE,gBAAgB,6BAA6B,IACnD,MAAM,OAAO,qBAAyB;AACxC,YAAM,aAAa,6BAA6B,QAAQ,IAAI,yBAAyB;AACrF,cAAQ,MAAM,eAAe,QAAQ,EAAE,MAAM,YAAY,QAAQ,CAAC;AAClE,UAAI,CAAC,MAAM,MAAM;AACf,iBAAS,KAAK,oCAAoC,MAAM,MAAM,EAAE;AAAA,MAClE;AAAA,IACF,SAAS,KAAK;AACZ,eAAS,KAAK,oCAAoC,aAAa,GAAG,CAAC,EAAE;AAAA,IACvE;AAAA,EACF;AAEA,MAAI,KAAK,MAAM;AACb,WAAO;AAAA,MACL,QAAQ,KAAK;AAAA,QACX,EAAE,QAAQ,KAAK,MAAM,MAAM,OAAO,UAAU,UAAU,MAAM;AAAA,QAC5D;AAAA,QACA;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ,UAAU,QAAQ,MAAM,MAAM,UAAU,UAAU,KAAK,GAAG,KAAK;AAClF;","names":[]}

package/dist/prospect-audits-3PMIO73D.js

@@ -0,0 +1,19 @@
+import {
+  MAX_RECENT_PROSPECT_AUDITS,
+  createProspectAudit,
+  generateToken,
+  getProspectAuditByToken,
+  isValidToken,
+  listRecentProspectAudits,
+  newProspectAuditId
+} from "./chunk-NYUYNYQL.js";
+export {
+  MAX_RECENT_PROSPECT_AUDITS,
+  createProspectAudit,
+  generateToken,
+  getProspectAuditByToken,
+  isValidToken,
+  listRecentProspectAudits,
+  newProspectAuditId
+};
+//# sourceMappingURL=prospect-audits-3PMIO73D.js.map

package/dist/prospect-audits-3PMIO73D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{protection-audit-64PLLBLI.js → protection-audit-SJO53MEQ.js}

@@ -3,8 +3,8 @@ import {
 } from "./chunk-MNDIED4M.js";
 import {
   makeGitHub
-} from "./chunk-VRWUL4TR.js";
-import "./chunk-4DHQCN5H.js";
+} from "./chunk-XHHMM5HX.js";
+import "./chunk-LBYOLBW7.js";
 
 // src/audits/protection-coverage.ts
 var RENOVATE_WORKFLOW_FILE = "renovate.yml";
@@ -165,4 +165,4 @@ export {
   protectionAuditExitCode,
   runProtectionAuditCommand
 };
-//# sourceMappingURL=protection-audit-64PLLBLI.js.map
+//# sourceMappingURL=protection-audit-SJO53MEQ.js.map

package/dist/recipes/sync-configs.js

@@ -2,11 +2,11 @@ import {
   ALL_CONFIG_NAMES,
   isConfigName,
   syncConfigs
-} from "../chunk-Q276MZ7E.js";
+} from "../chunk-3VQWSE3F.js";
+import "../chunk-3G25KIWW.js";
 import "../chunk-73UFRZKY.js";
-import "../chunk-ZTPPCHDB.js";
-import "../chunk-XXTZBPUY.js";
 import "../chunk-XTK5VIQB.js";
+import "../chunk-XXTZBPUY.js";
 export {
   ALL_CONFIG_NAMES,
   isConfigName,

package/dist/render-AQAVQDPZ.js

@@ -0,0 +1,10 @@
+import {
+  renderProspectReport
+} from "./chunk-W7Z3BGCI.js";
+import "./chunk-X3B723J4.js";
+import "./chunk-DJZWYIPP.js";
+import "./chunk-EVBCK2KC.js";
+export {
+  renderProspectReport
+};
+//# sourceMappingURL=render-AQAVQDPZ.js.map

package/dist/render-AQAVQDPZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{renovate-dispatch-ICJGSFCE.js → renovate-dispatch-QJY75ODR.js}

@@ -1,20 +1,20 @@
 import {
   isRenovatePR
 } from "./chunk-PZQ3WED2.js";
+import {
+  openBase,
+  readAirtableConfig
+} from "./chunk-HN6I2XWI.js";
 import {
   makeGitHub
-} from "./chunk-VRWUL4TR.js";
-import "./chunk-4DHQCN5H.js";
+} from "./chunk-XHHMM5HX.js";
+import "./chunk-LBYOLBW7.js";
 import {
   allActionableVulnsTransitive,
   isDashboardVisible,
   listWebsites,
   updateAutoFixAttempts
-} from "./chunk-577HCGZO.js";
-import {
-  openBase,
-  readAirtableConfig
-} from "./chunk-HN6I2XWI.js";
+} from "./chunk-LDWZSLSU.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/github/renovate-dispatch.ts
@@ -141,4 +141,4 @@ async function runRenovateDispatchCommand(opts) {
 export {
   runRenovateDispatchCommand
 };
-//# sourceMappingURL=renovate-dispatch-ICJGSFCE.js.map
+//# sourceMappingURL=renovate-dispatch-QJY75ODR.js.map

package/dist/replay-C2LXMJZP.js

@@ -0,0 +1,66 @@
+import {
+  ingestSubmission
+} from "./chunk-BNM5POSJ.js";
+import "./chunk-SNSTJLQW.js";
+import "./chunk-2OP4JKIQ.js";
+
+// src/db/deadletter.ts
+async function listUnreplayedDeadLetters(db) {
+  const rows = await db.selectFrom("submission_deadletter").select(["id", "site_slug", "payload", "turnstile", "error", "received_at"]).where("replayed_at", "is", null).orderBy("received_at", "asc").execute();
+  return rows.map((r) => ({
+    id: r.id,
+    siteSlug: r.site_slug,
+    payload: JSON.parse(r.payload),
+    turnstile: JSON.parse(r.turnstile),
+    error: r.error,
+    receivedAt: r.received_at
+  }));
+}
+async function markDeadLetterReplayed(db, id, outcome, submissionId, now) {
+  await db.updateTable("submission_deadletter").set({
+    replayed_at: now.toISOString(),
+    replay_outcome: outcome,
+    replay_submission_id: submissionId
+  }).where("id", "=", id).execute();
+}
+
+// src/forms/replay.ts
+async function replayDeadLetters(db, deps) {
+  const rows = await listUnreplayedDeadLetters(db);
+  const result = { replayed: [], stillFailing: [] };
+  for (const row of rows) {
+    const outcome = await replayOne(db, deps, row);
+    if (outcome.terminal) {
+      result.replayed.push({
+        id: row.id,
+        outcome: outcome.outcome,
+        submissionId: outcome.submissionId
+      });
+    } else {
+      result.stillFailing.push({ id: row.id, error: outcome.error });
+    }
+  }
+  return result;
+}
+async function replayOne(db, deps, row) {
+  const { deadLetter: _stripped, ...safeDeps } = deps;
+  void _stripped;
+  let res;
+  try {
+    res = await ingestSubmission(safeDeps, row.siteSlug, row.payload, row.turnstile);
+  } catch (err) {
+    return { terminal: false, error: String(err) };
+  }
+  const now = deps.now();
+  if (res.status === "accepted") {
+    await markDeadLetterReplayed(db, row.id, "accepted", res.submissionId, now);
+    return { terminal: true, outcome: "accepted", submissionId: res.submissionId };
+  }
+  const outcome = res.status === "rejected" ? `rejected:${res.reason}` : "unknown-site";
+  await markDeadLetterReplayed(db, row.id, outcome, null, now);
+  return { terminal: true, outcome, submissionId: null };
+}
+export {
+  replayDeadLetters
+};
+//# sourceMappingURL=replay-C2LXMJZP.js.map

package/dist/replay-C2LXMJZP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/deadletter.ts","../src/forms/replay.ts"],"sourcesContent":["import type { Db } from \"./client.js\";\nimport type { TurnstileVerification } from \"../forms/turnstile.js\";\n\n/** One captured-but-unresolved lead: the site lookup threw before the normal\n *  pipeline could run (Phase 0 of #539 — persist before enrich). */\nexport type DeadLetterRow = {\n  id: string;\n  siteSlug: string;\n  /** The raw wire payload, exactly as the handler received it. */\n  payload: unknown;\n  /** The Turnstile verification computed at receipt — tokens expire in 300s,\n   *  so replay reuses this answer rather than re-verifying. */\n  turnstile: TurnstileVerification;\n  error: string;\n  receivedAt: string;\n};\n\nexport type DeadLetterInput = {\n  siteSlug: string;\n  payload: unknown;\n  turnstile: TurnstileVerification;\n  error: string;\n  receivedAt: Date;\n};\n\n/** Opaque, collision-free id (mirrors newSubmissionId). */\nexport function newDeadLetterId(): string {\n  return `dl_${crypto.randomUUID()}`;\n}\n\n/** Persist a lead the normal pipeline could not place. This is the LAST writer\n *  on the ingest path — if it throws too, both stores are down and the caller's\n *  502 is honest. */\nexport async function createDeadLetter(db: Db, input: DeadLetterInput): Promise<{ id: string }> {\n  const id = newDeadLetterId();\n  await db\n    .insertInto(\"submission_deadletter\")\n    .values({\n      id,\n      site_slug: input.siteSlug,\n      payload: JSON.stringify(input.payload),\n      turnstile: JSON.stringify(input.turnstile),\n      error: input.error,\n      received_at: input.receivedAt.toISOString(),\n      replayed_at: null,\n      replay_outcome: null,\n      replay_submission_id: null,\n    })\n    .execute();\n  return { id };\n}\n\n/** Rows not yet replayed, oldest first — replay preserves arrival order so the\n *  duplicate/velocity signals see submissions in the order they happened. */\nexport async function listUnreplayedDeadLetters(db: Db): Promise<DeadLetterRow[]> {\n  const rows = await db\n    .selectFrom(\"submission_deadletter\")\n    .select([\"id\", \"site_slug\", \"payload\", \"turnstile\", \"error\", \"received_at\"])\n    .where(\"replayed_at\", \"is\", null)\n    .orderBy(\"received_at\", \"asc\")\n    .execute();\n  return rows.map((r) => ({\n    id: r.id,\n    siteSlug: r.site_slug,\n    payload: JSON.parse(r.payload) as unknown,\n    turnstile: JSON.parse(r.turnstile) as TurnstileVerification,\n    error: r.error,\n    receivedAt: r.received_at,\n  }));\n}\n\n/** Mark a row's replay TERMINAL — it will never be picked up again. Only call\n *  for outcomes that re-running cannot improve (accepted, rejected,\n *  unknown-site). A replay whose lookup threw again is left untouched so the\n *  next run retries it. */\nexport async function markDeadLetterReplayed(\n  db: Db,\n  id: string,\n  outcome: string,\n  submissionId: string | null,\n  now: Date,\n): Promise<void> {\n  await db\n    .updateTable(\"submission_deadletter\")\n    .set({\n      replayed_at: now.toISOString(),\n      replay_outcome: outcome,\n      replay_submission_id: submissionId,\n    })\n    .where(\"id\", \"=\", id)\n    .execute();\n}\n","import type { Db } from \"../db/client.js\";\nimport {\n  listUnreplayedDeadLetters,\n  markDeadLetterReplayed,\n  type DeadLetterRow,\n} from \"../db/deadletter.js\";\nimport { ingestSubmission, type IngestDeps } from \"./ingest.js\";\n\nexport type ReplayResult = {\n  /** Terminal outcomes this run: the row will never be picked up again. */\n  replayed: Array<{ id: string; outcome: string; submissionId: string | null }>;\n  /** Rows whose lookup threw AGAIN — left unreplayed for the next run. */\n  stillFailing: Array<{ id: string; error: string }>;\n};\n\n/**\n * Run every unreplayed dead-letter back through `ingestSubmission` — the SAME\n * pipeline a live submission takes, so a replayed lead gets real spam\n * classification, notify, and fan-out, not a bespoke re-implementation.\n *\n * Each row replays with the Turnstile verification computed at receipt (tokens\n * expire in 300s; re-verifying is impossible by design, see deadletter.ts).\n *\n * `deps` must NOT wire `deadLetter`: a lookup that throws during replay would\n * otherwise dead-letter the SAME lead a second time while the original row stays\n * unreplayed — every retry would mint a duplicate. Enforced here by stripping the\n * key rather than trusting the caller. A thrown lookup leaves the row untouched\n * for the next run; every RESOLVED outcome (accepted, rejected, unknown-site) is\n * terminal — re-running cannot improve on an answer the store actually gave.\n *\n * Oldest-first (listUnreplayedDeadLetters orders by received_at) so the\n * duplicate/velocity spam signals see submissions in arrival order.\n */\nexport async function replayDeadLetters(\n  db: Db,\n  deps: Omit<IngestDeps, \"deadLetter\">,\n): Promise<ReplayResult> {\n  const rows = await listUnreplayedDeadLetters(db);\n  const result: ReplayResult = { replayed: [], stillFailing: [] };\n\n  for (const row of rows) {\n    const outcome = await replayOne(db, deps, row);\n    if (outcome.terminal) {\n      result.replayed.push({\n        id: row.id,\n        outcome: outcome.outcome,\n        submissionId: outcome.submissionId,\n      });\n    } else {\n      result.stillFailing.push({ id: row.id, error: outcome.error });\n    }\n  }\n  return result;\n}\n\nasync function replayOne(\n  db: Db,\n  deps: Omit<IngestDeps, \"deadLetter\">,\n  row: DeadLetterRow,\n): Promise<\n  | { terminal: true; outcome: string; submissionId: string | null }\n  | { terminal: false; error: string }\n> {\n  // Strip deadLetter defensively even though the type forbids it — a structurally\n  // wider object passed through `as` must not re-arm the duplicate loop.\n  const { deadLetter: _stripped, ...safeDeps } = deps as IngestDeps;\n  void _stripped;\n  let res;\n  try {\n    res = await ingestSubmission(safeDeps, row.siteSlug, row.payload, row.turnstile);\n  } catch (err) {\n    return { terminal: false, error: String(err) };\n  }\n  const now = deps.now();\n  if (res.status === \"accepted\") {\n    await markDeadLetterReplayed(db, row.id, \"accepted\", res.submissionId, now);\n    return { terminal: true, outcome: \"accepted\", submissionId: res.submissionId };\n  }\n  const outcome = res.status === \"rejected\" ? `rejected:${res.reason}` : \"unknown-site\";\n  await markDeadLetterReplayed(db, row.id, outcome, null, now);\n  return { terminal: true, outcome, submissionId: null };\n}\n"],"mappings":";;;;;;;AAsDA,eAAsB,0BAA0B,IAAkC;AAChF,QAAM,OAAO,MAAM,GAChB,WAAW,uBAAuB,EAClC,OAAO,CAAC,MAAM,aAAa,WAAW,aAAa,SAAS,aAAa,CAAC,EAC1E,MAAM,eAAe,MAAM,IAAI,EAC/B,QAAQ,eAAe,KAAK,EAC5B,QAAQ;AACX,SAAO,KAAK,IAAI,CAAC,OAAO;AAAA,IACtB,IAAI,EAAE;AAAA,IACN,UAAU,EAAE;AAAA,IACZ,SAAS,KAAK,MAAM,EAAE,OAAO;AAAA,IAC7B,WAAW,KAAK,MAAM,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE;AAAA,IACT,YAAY,EAAE;AAAA,EAChB,EAAE;AACJ;AAMA,eAAsB,uBACpB,IACA,IACA,SACA,cACA,KACe;AACf,QAAM,GACH,YAAY,uBAAuB,EACnC,IAAI;AAAA,IACH,aAAa,IAAI,YAAY;AAAA,IAC7B,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,EACxB,CAAC,EACA,MAAM,MAAM,KAAK,EAAE,EACnB,QAAQ;AACb;;;AC1DA,eAAsB,kBACpB,IACA,MACuB;AACvB,QAAM,OAAO,MAAM,0BAA0B,EAAE;AAC/C,QAAM,SAAuB,EAAE,UAAU,CAAC,GAAG,cAAc,CAAC,EAAE;AAE9D,aAAW,OAAO,MAAM;AACtB,UAAM,UAAU,MAAM,UAAU,IAAI,MAAM,GAAG;AAC7C,QAAI,QAAQ,UAAU;AACpB,aAAO,SAAS,KAAK;AAAA,QACnB,IAAI,IAAI;AAAA,QACR,SAAS,QAAQ;AAAA,QACjB,cAAc,QAAQ;AAAA,MACxB,CAAC;AAAA,IACH,OAAO;AACL,aAAO,aAAa,KAAK,EAAE,IAAI,IAAI,IAAI,OAAO,QAAQ,MAAM,CAAC;AAAA,IAC/D;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,UACb,IACA,MACA,KAIA;AAGA,QAAM,EAAE,YAAY,WAAW,GAAG,SAAS,IAAI;AAC/C,OAAK;AACL,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,iBAAiB,UAAU,IAAI,UAAU,IAAI,SAAS,IAAI,SAAS;AAAA,EACjF,SAAS,KAAK;AACZ,WAAO,EAAE,UAAU,OAAO,OAAO,OAAO,GAAG,EAAE;AAAA,EAC/C;AACA,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,IAAI,WAAW,YAAY;AAC7B,UAAM,uBAAuB,IAAI,IAAI,IAAI,YAAY,IAAI,cAAc,GAAG;AAC1E,WAAO,EAAE,UAAU,MAAM,SAAS,YAAY,cAAc,IAAI,aAAa;AAAA,EAC/E;AACA,QAAM,UAAU,IAAI,WAAW,aAAa,YAAY,IAAI,MAAM,KAAK;AACvE,QAAM,uBAAuB,IAAI,IAAI,IAAI,SAAS,MAAM,GAAG;AAC3D,SAAO,EAAE,UAAU,MAAM,SAAS,cAAc,KAAK;AACvD;","names":[]}