@reddoorla/maintenance 0.85.2 → 0.87.0

package/README.md

@@ -66,6 +66,14 @@ reddoor-maint upgrade svelte-4-to-5 [site]
 
 `[site]` defaults to `process.cwd()`. Add `--fleet path/to/inventory.json` (or `.mjs` / `.js`) to run across every site in an inventory instead. `--cwd <path>` overrides the working directory for any command.
 
+Standalone, outside the `[site]` loop above (it audits an external URL, not a fleet site):
+
+- `prospect-audit <url>` — AEO/SEO audit an external prospect's site and publish
+  a shareable report. Flags: `--business <name>`, `--competitors <list>`,
+  `--no-probes`, `--out <file>`, `--json`. Needs `ANTHROPIC_API_KEY` (or the
+  standard Anthropic auth chain) and, for tier 3, `PERPLEXITY_API_KEY`;
+  persistence and the shareable link need the Turso vars.
+
 ### Common flags
 
 - `--only <names>` — comma-separated subset. Validates against the known set; typos exit with code 2.

package/dist/airtable-ZBUPQJSC.js

@@ -0,0 +1,9 @@
+import {
+  fromAirtableBase
+} from "./chunk-C6CLRKPV.js";
+import "./chunk-7NYN2P6I.js";
+import "./chunk-EVBCK2KC.js";
+export {
+  fromAirtableBase
+};
+//# sourceMappingURL=airtable-ZBUPQJSC.js.map

package/dist/{announce-GIAYN67S.js → announce-I2Z4JN3I.js}

@@ -1,40 +1,44 @@
 import {
   scoresFromRow
-} from "./chunk-GZNBCHAZ.js";
+} from "./chunk-HEWSRXYV.js";
 import {
   fetchGaUsers,
   fetchSearch,
-  readGaConfig
-} from "./chunk-MGR2H7F4.js";
+  readGaConfig,
+  refreshHeaderImage
+} from "./chunk-BBUSGEES.js";
 import {
   queueDraft
-} from "./chunk-62VF32IC.js";
-import "./chunk-37S6L6G4.js";
+} from "./chunk-YFAXOD7Z.js";
 import {
-  defaultReportSubject
-} from "./chunk-GECESMVS.js";
-import {
-  announcementSiteExtras,
   createDraft,
   findReportByPeriod,
-  renderReportHtml,
-  resolveCopy,
   updateReportScores
-} from "./chunk-6QRLRT3P.js";
+} from "./chunk-F3JWOPTG.js";
+import "./chunk-VAD43MOR.js";
 import {
   uploadAttachment
-} from "./chunk-MPBXOJ3N.js";
-import "./chunk-SEEA6RXF.js";
-import "./chunk-U5SZ4FOP.js";
-import {
-  listWebsites,
-  siteSlug,
-  updateAnalyticsHealth
-} from "./chunk-577HCGZO.js";
+} from "./chunk-IY6256GK.js";
 import {
   openBase,
   readAirtableConfig
 } from "./chunk-HN6I2XWI.js";
+import {
+  defaultReportSubject
+} from "./chunk-GECESMVS.js";
+import {
+  announcementSiteExtras,
+  renderReportHtml,
+  resolveCopy
+} from "./chunk-MT2JINSS.js";
+import "./chunk-DJZWYIPP.js";
+import "./chunk-5UINJNAJ.js";
+import {
+  listWebsites,
+  siteSlug,
+  updateAnalyticsHealth
+} from "./chunk-7NYN2P6I.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/recipes/announce.ts
@@ -43,7 +47,7 @@ async function announce(deps) {
   const base = deps?.base ?? openBase(readAirtableConfig());
   const now = deps?.now ?? /* @__PURE__ */ new Date();
   const websites = await listWebsites(base);
-  let targets = websites.filter((w) => w.status === "maintenance");
+  let targets = websites.filter((w) => w.status === "maintained");
   if (deps?.site) {
     const wanted = siteSlug(deps.site);
     targets = targets.filter((w) => siteSlug(w.name) === wanted);
@@ -57,6 +61,9 @@ async function announce(deps) {
         results.push({ site: w.name, status: "skipped-no-scores" });
         continue;
       }
+      if (deps?.refreshHeader !== false) {
+        await refreshHeaderImage(w, deps?.refreshHeader ?? {});
+      }
       const periodEnd = now;
       const periodStart = new Date(now.getTime() - GA_WINDOW_DAYS * 24 * 60 * 60 * 1e3);
       const gaResult = await fetchGaUsers(w, periodStart, periodEnd);
@@ -70,11 +77,12 @@ async function announce(deps) {
       };
       if (readGaConfig() !== null && Boolean(w.ga4PropertyId || w.searchQuery)) {
         try {
-          await updateAnalyticsHealth(
+          const fields = await updateAnalyticsHealth(
             base,
             w.id,
             gaResult.softFailed || searchResult.softFailed ? now.toISOString() : null
           );
+          await deps?.siteMirror?.health(w.id, fields);
         } catch (e) {
           console.warn(`\u26A0 analytics-health write skipped for ${w.name}: ${e.message}`);
         }
@@ -84,10 +92,25 @@ async function announce(deps) {
       const existing = await findReportByPeriod(base, w.id, "Announcement", period);
       if (existing) {
         await updateReportScores(base, existing.id, scores, now, enrichment);
+        await deps?.reportMirror?.patch(existing.id, {
+          lighthouse_performance: scores.performance,
+          lighthouse_accessibility: scores.accessibility,
+          lighthouse_best_practices: scores.bestPractices,
+          lighthouse_seo: scores.seo,
+          completed_on: now.toISOString().slice(0, 10),
+          ...enrichment.gaUsersCurrent !== void 0 ? { ga_users_current: enrichment.gaUsersCurrent } : {},
+          ...enrichment.gaUsersPrevious !== void 0 ? { ga_users_previous: enrichment.gaUsersPrevious } : {},
+          ...enrichment.searchFoundPage1 !== void 0 ? { search_found_page1: enrichment.searchFoundPage1 ? 1 : 0 } : {},
+          ...enrichment.searchPosition !== void 0 ? { search_position: enrichment.searchPosition } : {}
+        });
         report = existing;
         statusKind = "reused";
       } else {
-        report = await createDraft(base, draftInputFor(w, scores, now, period, enrichment));
+        report = await createDraft(
+          base,
+          draftInputFor(w, scores, now, period, enrichment),
+          deps?.reportMirror?.created
+        );
         statusKind = "drafted";
       }
       const slug = siteSlug(w.name);
@@ -118,16 +141,17 @@ async function announce(deps) {
           `${slug}-${now.toISOString().slice(0, 10)}.html`,
           "text/html"
         );
+        await deps?.reportMirror?.body(report.id, html);
       } catch (uploadErr) {
         console.warn(
           `\u26A0 Announcement preview upload skipped for ${w.name}: ${uploadErr instanceof Error ? uploadErr.message : String(uploadErr)}`
         );
       }
-      const queue = await queueDraft(base, {
-        id: report.id,
-        siteId: w.id,
-        reportType: "Announcement"
-      });
+      const queue = await queueDraft(
+        base,
+        { id: report.id, siteId: w.id, reportType: "Announcement" },
+        deps?.reportMirror
+      );
       const recipientMissing = !(w.reportRecipientsTo && w.reportRecipientsTo.trim());
       results.push({
         site: w.name,
@@ -179,7 +203,11 @@ function formatAnnounceResult(result) {
   return result.results.map(formatSiteResult).join("\n");
 }
 async function runAnnounceCommand(site, _opts) {
-  const result = await announce(site ? { site } : {});
+  const { makeReportMirror } = await import("./report-mirror-4MNORYQ4.js");
+  const { makeSiteMirror } = await import("./site-mirror-NIREX5ME.js");
+  const reportMirror = await makeReportMirror();
+  const siteMirror = await makeSiteMirror();
+  const result = await announce({ ...site ? { site } : {}, reportMirror, siteMirror });
   const hadError = result.results.some((r) => r.status === "error");
   return { output: formatAnnounceResult(result), code: hadError ? 1 : 0 };
 }
@@ -187,4 +215,4 @@ export {
   formatAnnounceResult,
   runAnnounceCommand
 };
-//# sourceMappingURL=announce-GIAYN67S.js.map
+//# sourceMappingURL=announce-I2Z4JN3I.js.map

package/dist/announce-I2Z4JN3I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recipes/announce.ts","../src/cli/commands/announce.ts"],"sourcesContent":["import { openBase, readAirtableConfig } from \"../reports/airtable/client.js\";\nimport type { AirtableBase } from \"../reports/airtable/client.js\";\nimport { listWebsites, siteSlug, updateAnalyticsHealth } from \"../reports/airtable/websites.js\";\nimport type { WebsiteRow } from \"../reports/airtable/websites.js\";\nimport { readGaConfig } from \"../reports/ga/config.js\";\nimport {\n  createDraft,\n  findReportByPeriod,\n  updateReportScores,\n  type ReportEnrichment,\n} from \"../reports/airtable/reports.js\";\nimport type { ReportMirror } from \"../reports/report-mirror.js\";\nimport type { SiteMirror } from \"../db/site-mirror.js\";\nimport { queueDraft } from \"../reports/queue.js\";\nimport { uploadAttachment } from \"../reports/airtable/attachments.js\";\nimport { renderReportHtml } from \"../reports/render.js\";\nimport { resolveCopy } from \"../reports/copy.js\";\nimport { fetchGaUsers, fetchSearch, refreshHeaderImage } from \"../reports/draft.js\";\nimport type { RefreshHeaderDeps } from \"../reports/draft.js\";\nimport { announcementSiteExtras } from \"../reports/announcement-email/template.js\";\nimport type { LighthouseScores } from \"../reports/types.js\";\nimport { defaultReportSubject } from \"../reports/subject.js\";\nimport { scoresFromRow } from \"../reports/report-data.js\";\n\nexport type AnnounceSiteResult =\n  | {\n      site: string;\n      status: \"drafted\" | \"reused\";\n      reportId: string;\n      recipientMissing: boolean;\n      /** False when a higher-or-equal-tier report was already queued (single-queue rule). */\n      queued: boolean;\n    }\n  | { site: string; status: \"skipped-no-scores\" }\n  | { site: string; status: \"error\"; message: string };\n\nexport type AnnounceResult = { results: AnnounceSiteResult[] };\n\n/** The traffic/search lookback window (days) the announcement reports on. The trend compares it\n *  against the equal-length prior window, and the email labels it \"vs the previous N days\". */\nconst GA_WINDOW_DAYS = 30;\n\nexport type AnnounceDeps = {\n  /** Airtable handle. Defaults to opening the live base from credentials. */\n  base?: AirtableBase;\n  /** When set, restrict to the single site whose slug matches. Default: all maintenance sites. */\n  site?: string;\n  /** Single timestamp driving the period key, render, draft, and preview filename. */\n  now?: Date;\n  /**\n   * Header-image refresh, matching `draftReportForSite`'s opt-out shape: UNSET means\n   * refresh (the production default), `false` skips it so unit suites don't launch a\n   * browser. Announce previously never refreshed at all, so a site whose stored header\n   * predated a plate change kept announcing with the old one until its next\n   * Maintenance/Testing draft happened to heal it.\n   */\n  refreshHeader?: RefreshHeaderDeps | false;\n  /** #539 Phase 5: Turso write-through for everything this recipe writes — the\n   *  created row (or a reused row's refreshed scores), the rendered body, and\n   *  the queue flag. Not defaulted here — every unit test calls `announce` with\n   *  a fake base, and a default would open a real libSQL handle from inside the\n   *  suite. The CLI composition root wires it. */\n  reportMirror?: ReportMirror;\n  /** #539 Phase 5: the Websites-row twin — announce stamps `Analytics soft-fail\n   *  at` on the SITE row, a different Turso table from the report. */\n  siteMirror?: SiteMirror;\n};\n\n/**\n * Draft the monthly-report ANNOUNCEMENT email for every `maintenance` site (or one,\n * via `deps.site`). Airtable-driven and fleet-wide: unlike `launch`, it runs no audits\n * and takes no `Site`/inventory object — it reads the Lighthouse scores already stored\n * on each Websites row. DRAFTS ONLY; the M3 approve loop sends.\n *\n * One bad site must never abort the run: each site is wrapped in its own try/catch that\n * records an `error` result and continues.\n */\nexport async function announce(deps?: AnnounceDeps): Promise<AnnounceResult> {\n  const base = deps?.base ?? openBase(readAirtableConfig());\n  const now = deps?.now ?? new Date();\n\n  const websites = await listWebsites(base);\n  let targets = websites.filter((w) => w.status === \"maintained\");\n  if (deps?.site) {\n    const wanted = siteSlug(deps.site);\n    targets = targets.filter((w) => siteSlug(w.name) === wanted);\n  }\n\n  const period = now.toISOString().slice(0, 7);\n  const results: AnnounceSiteResult[] = [];\n\n  for (const w of targets) {\n    try {\n      const scores = scoresFromRow(w);\n      if (scores === null) {\n        results.push({ site: w.name, status: \"skipped-no-scores\" });\n        continue;\n      }\n\n      // Refresh BEFORE the render so a queued announcement always has a current header\n      // stored — the send re-reads the attachment, so a stale one here reaches the\n      // client. Best-effort by construction: refreshHeaderImage returns false and never\n      // throws, so a capture failure leaves the stored image and the draft continues.\n      if (deps?.refreshHeader !== false) {\n        await refreshHeaderImage(w, deps?.refreshHeader ?? {});\n      }\n\n      // Traffic + search snapshot over a ~30-day window ending now (fetchPeriodUsers derives\n      // the equal-length previous window for the trend). Reuses the report pipeline's\n      // soft-failing enrichment: GA/search unconfigured or an API error leaves the numbers\n      // null and the email simply omits the traffic section — it never blocks the draft.\n      const periodEnd = now;\n      const periodStart = new Date(now.getTime() - GA_WINDOW_DAYS * 24 * 60 * 60 * 1000);\n      const gaResult = await fetchGaUsers(w, periodStart, periodEnd);\n      const searchResult = await fetchSearch(w, periodStart, periodEnd);\n      const gaUsers = gaResult.value;\n      const search = searchResult.value;\n      const enrichment: ReportEnrichment = {\n        ...(gaUsers ? { gaUsersCurrent: gaUsers.current, gaUsersPrevious: gaUsers.previous } : {}),\n        ...(search ? { searchFoundPage1: search.foundOnPage1 } : {}),\n        ...(search?.foundOnPage1 && search.position !== null\n          ? { searchPosition: search.position }\n          : {}),\n      };\n\n      // Record this site's GA/Search enrichment health for the per-site analytics-failure\n      // signal (cockpit/digest) — exactly as the `--due` draft path does. Without this, an\n      // announcement-time GA outage hides the traffic block with NO operator signal (it reads\n      // identically to \"site has no GA configured\"). Set the timestamp on a soft-fail, clear\n      // it on a clean enrichment so the signal self-heals. Best-effort: the column is\n      // operator-added, so until it exists the write throws — which must not break the draft.\n      if (readGaConfig() !== null && Boolean(w.ga4PropertyId || w.searchQuery)) {\n        try {\n          const fields = await updateAnalyticsHealth(\n            base,\n            w.id,\n            gaResult.softFailed || searchResult.softFailed ? now.toISOString() : null,\n          );\n          // Mirror the EXACT FieldSet Airtable got — see draft.ts.\n          await deps?.siteMirror?.health(w.id, fields);\n        } catch (e) {\n          console.warn(`⚠ analytics-health write skipped for ${w.name}: ${(e as Error).message}`);\n        }\n      }\n\n      // Dedupe: reuse an existing Announcement row for this (site, period) rather than\n      // stacking a second draft. The reuse path refreshes the stored scores + traffic/search\n      // (and Completed on) so the eventually-sent email — which reads the row — isn't stale.\n      // The create path writes them via createDraft.\n      let report;\n      let statusKind: \"drafted\" | \"reused\";\n      const existing = await findReportByPeriod(base, w.id, \"Announcement\", period);\n      if (existing) {\n        await updateReportScores(base, existing.id, scores, now, enrichment);\n        // Mirror the SAME refresh: the reuse path exists so the eventually-sent\n        // email is not stale, and the console reads those numbers too.\n        await deps?.reportMirror?.patch(existing.id, {\n          lighthouse_performance: scores.performance,\n          lighthouse_accessibility: scores.accessibility,\n          lighthouse_best_practices: scores.bestPractices,\n          lighthouse_seo: scores.seo,\n          completed_on: now.toISOString().slice(0, 10),\n          ...(enrichment.gaUsersCurrent !== undefined\n            ? { ga_users_current: enrichment.gaUsersCurrent }\n            : {}),\n          ...(enrichment.gaUsersPrevious !== undefined\n            ? { ga_users_previous: enrichment.gaUsersPrevious }\n            : {}),\n          ...(enrichment.searchFoundPage1 !== undefined\n            ? { search_found_page1: enrichment.searchFoundPage1 ? 1 : 0 }\n            : {}),\n          ...(enrichment.searchPosition !== undefined\n            ? { search_position: enrichment.searchPosition }\n            : {}),\n        });\n        report = existing;\n        statusKind = \"reused\";\n      } else {\n        report = await createDraft(\n          base,\n          draftInputFor(w, scores, now, period, enrichment),\n          deps?.reportMirror?.created,\n        );\n        statusKind = \"drafted\";\n      }\n\n      const slug = siteSlug(w.name);\n      const { html } = await renderReportHtml({\n        siteName: w.name,\n        siteUrl: w.url,\n        reportType: \"Announcement\",\n        completedOn: now,\n        lighthouse: scores,\n        gaUsersCurrent: gaUsers?.current,\n        gaUsersPrevious: gaUsers?.previous,\n        gaPeriodDays: GA_WINDOW_DAYS,\n        searchPosition: search?.foundOnPage1 ? (search.position ?? undefined) : undefined,\n        lastTestedDate: null,\n        commentary: null,\n        copy: resolveCopy(w),\n        headerImageCid: `${slug}-header`,\n        // cadence (the client's go-forward pace, \"None\" omitted) + default-on improvement\n        // callouts. Shared with the send re-render via announcementSiteExtras so the sent\n        // email matches this reviewed preview.\n        ...announcementSiteExtras(w),\n      });\n\n      // A preview-upload hiccup must NOT fail the site — log and continue.\n      try {\n        await uploadAttachment(\n          report.id,\n          \"Rendered HTML\",\n          html,\n          `${slug}-${now.toISOString().slice(0, 10)}.html`,\n          \"text/html\",\n        );\n        // Store the same body in Turso — the console's preview route reads it\n        // there, not from the Airtable attachment (whose URL expires).\n        await deps?.reportMirror?.body(report.id, html);\n      } catch (uploadErr) {\n        console.warn(\n          `⚠ Announcement preview upload skipped for ${w.name}: ${\n            uploadErr instanceof Error ? uploadErr.message : String(uploadErr)\n          }`,\n        );\n      }\n\n      // Critical: NOT wrapped — without queueing, the draft never enters the approve queue,\n      // so a failure here must surface as an error result for the site. queueDraft also\n      // supersedes any lower-tier (Maintenance/Testing) drafts queued for this site, and\n      // stands down if an equal-or-higher report is already queued (single-queue rule).\n      const queue = await queueDraft(\n        base,\n        { id: report.id, siteId: w.id, reportType: \"Announcement\" },\n        deps?.reportMirror,\n      );\n\n      const recipientMissing = !(w.reportRecipientsTo && w.reportRecipientsTo.trim());\n      results.push({\n        site: w.name,\n        status: statusKind,\n        reportId: report.id,\n        recipientMissing,\n        queued: queue.queued,\n      });\n    } catch (err) {\n      results.push({\n        site: w.name,\n        status: \"error\",\n        message: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  return { results };\n}\n\n/** Build the Announcement `DraftInput`. Announcements have no period window and no prior\n *  maintenance test, so periodStart/periodEnd/completedOn all collapse to `now` and\n *  `lastTestedDate` is null. The subject override gives the email a purpose-built line. */\nfunction draftInputFor(\n  w: WebsiteRow,\n  scores: LighthouseScores,\n  now: Date,\n  period: string,\n  enrichment: ReportEnrichment,\n): Parameters<typeof createDraft>[1] {\n  return {\n    reportId: `${w.name} — Announcement — ${now.toISOString().slice(0, 10)}`,\n    siteId: w.id,\n    reportType: \"Announcement\",\n    period,\n    periodStart: now,\n    periodEnd: now,\n    completedOn: now,\n    lighthouse: scores,\n    lastTestedDate: null,\n    subjectOverride: defaultReportSubject({\n      name: w.name,\n      url: w.url,\n      type: \"Announcement\",\n      date: now,\n    }),\n    ...enrichment,\n  };\n}\n","import { announce, type AnnounceResult, type AnnounceSiteResult } from \"../../recipes/announce.js\";\n\nexport type AnnounceCommandOptions = {\n  cwd?: string;\n};\n\nfunction formatSiteResult(r: AnnounceSiteResult): string {\n  if (r.status === \"skipped-no-scores\") return `[${r.site}] skipped-no-scores`;\n  if (r.status === \"error\") return `[${r.site}] error: ${r.message}`;\n  const note = r.recipientMissing ? \" ⚠ recipient missing\" : \"\";\n  return `[${r.site}] ${r.status}${note}`;\n}\n\nexport function formatAnnounceResult(result: AnnounceResult): string {\n  if (result.results.length === 0) return \"No maintenance sites to announce.\";\n  return result.results.map(formatSiteResult).join(\"\\n\");\n}\n\n/**\n * `announce [site]` — Airtable-driven and fleet-wide. Draft the monthly-report\n * announcement email for every `maintenance` site (or one, when `site` is given) into\n * the M3 approve queue. Never sends; the operator approves each draft and the next send\n * run delivers it. Reads the Lighthouse scores already stored on each Websites row —\n * no audits are run.\n */\nexport async function runAnnounceCommand(\n  site: string | undefined,\n  _opts: AnnounceCommandOptions,\n): Promise<{ output: string; code: number }> {\n  // #539 Phase 5: the create-side Turso dual-write is wired HERE rather than\n  // inside `announce`, so a unit suite calling the recipe with a fake base can\n  // never open a real libSQL handle (and, with TURSO_* exported locally, write\n  // into production).\n  const { makeReportMirror } = await import(\"../../reports/report-mirror.js\");\n  const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n  const reportMirror = await makeReportMirror();\n  const siteMirror = await makeSiteMirror();\n  const result = await announce({ ...(site ? { site } : {}), reportMirror, siteMirror });\n  const hadError = result.results.some((r) => r.status === \"error\");\n  return { output: formatAnnounceResult(result), code: hadError ? 1 : 0 };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,IAAM,iBAAiB;AAqCvB,eAAsB,SAAS,MAA8C;AAC3E,QAAM,OAAO,MAAM,QAAQ,SAAS,mBAAmB,CAAC;AACxD,QAAM,MAAM,MAAM,OAAO,oBAAI,KAAK;AAElC,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,MAAI,UAAU,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,YAAY;AAC9D,MAAI,MAAM,MAAM;AACd,UAAM,SAAS,SAAS,KAAK,IAAI;AACjC,cAAU,QAAQ,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,MAAM;AAAA,EAC7D;AAEA,QAAM,SAAS,IAAI,YAAY,EAAE,MAAM,GAAG,CAAC;AAC3C,QAAM,UAAgC,CAAC;AAEvC,aAAW,KAAK,SAAS;AACvB,QAAI;AACF,YAAM,SAAS,cAAc,CAAC;AAC9B,UAAI,WAAW,MAAM;AACnB,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,oBAAoB,CAAC;AAC1D;AAAA,MACF;AAMA,UAAI,MAAM,kBAAkB,OAAO;AACjC,cAAM,mBAAmB,GAAG,MAAM,iBAAiB,CAAC,CAAC;AAAA,MACvD;AAMA,YAAM,YAAY;AAClB,YAAM,cAAc,IAAI,KAAK,IAAI,QAAQ,IAAI,iBAAiB,KAAK,KAAK,KAAK,GAAI;AACjF,YAAM,WAAW,MAAM,aAAa,GAAG,aAAa,SAAS;AAC7D,YAAM,eAAe,MAAM,YAAY,GAAG,aAAa,SAAS;AAChE,YAAM,UAAU,SAAS;AACzB,YAAM,SAAS,aAAa;AAC5B,YAAM,aAA+B;AAAA,QACnC,GAAI,UAAU,EAAE,gBAAgB,QAAQ,SAAS,iBAAiB,QAAQ,SAAS,IAAI,CAAC;AAAA,QACxF,GAAI,SAAS,EAAE,kBAAkB,OAAO,aAAa,IAAI,CAAC;AAAA,QAC1D,GAAI,QAAQ,gBAAgB,OAAO,aAAa,OAC5C,EAAE,gBAAgB,OAAO,SAAS,IAClC,CAAC;AAAA,MACP;AAQA,UAAI,aAAa,MAAM,QAAQ,QAAQ,EAAE,iBAAiB,EAAE,WAAW,GAAG;AACxE,YAAI;AACF,gBAAM,SAAS,MAAM;AAAA,YACnB;AAAA,YACA,EAAE;AAAA,YACF,SAAS,cAAc,aAAa,aAAa,IAAI,YAAY,IAAI;AAAA,UACvE;AAEA,gBAAM,MAAM,YAAY,OAAO,EAAE,IAAI,MAAM;AAAA,QAC7C,SAAS,GAAG;AACV,kBAAQ,KAAK,6CAAwC,EAAE,IAAI,KAAM,EAAY,OAAO,EAAE;AAAA,QACxF;AAAA,MACF;AAMA,UAAI;AACJ,UAAI;AACJ,YAAM,WAAW,MAAM,mBAAmB,MAAM,EAAE,IAAI,gBAAgB,MAAM;AAC5E,UAAI,UAAU;AACZ,cAAM,mBAAmB,MAAM,SAAS,IAAI,QAAQ,KAAK,UAAU;AAGnE,cAAM,MAAM,cAAc,MAAM,SAAS,IAAI;AAAA,UAC3C,wBAAwB,OAAO;AAAA,UAC/B,0BAA0B,OAAO;AAAA,UACjC,2BAA2B,OAAO;AAAA,UAClC,gBAAgB,OAAO;AAAA,UACvB,cAAc,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,UAC3C,GAAI,WAAW,mBAAmB,SAC9B,EAAE,kBAAkB,WAAW,eAAe,IAC9C,CAAC;AAAA,UACL,GAAI,WAAW,oBAAoB,SAC/B,EAAE,mBAAmB,WAAW,gBAAgB,IAChD,CAAC;AAAA,UACL,GAAI,WAAW,qBAAqB,SAChC,EAAE,oBAAoB,WAAW,mBAAmB,IAAI,EAAE,IAC1D,CAAC;AAAA,UACL,GAAI,WAAW,mBAAmB,SAC9B,EAAE,iBAAiB,WAAW,eAAe,IAC7C,CAAC;AAAA,QACP,CAAC;AACD,iBAAS;AACT,qBAAa;AAAA,MACf,OAAO;AACL,iBAAS,MAAM;AAAA,UACb;AAAA,UACA,cAAc,GAAG,QAAQ,KAAK,QAAQ,UAAU;AAAA,UAChD,MAAM,cAAc;AAAA,QACtB;AACA,qBAAa;AAAA,MACf;AAEA,YAAM,OAAO,SAAS,EAAE,IAAI;AAC5B,YAAM,EAAE,KAAK,IAAI,MAAM,iBAAiB;AAAA,QACtC,UAAU,EAAE;AAAA,QACZ,SAAS,EAAE;AAAA,QACX,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,gBAAgB,SAAS;AAAA,QACzB,iBAAiB,SAAS;AAAA,QAC1B,cAAc;AAAA,QACd,gBAAgB,QAAQ,eAAgB,OAAO,YAAY,SAAa;AAAA,QACxE,gBAAgB;AAAA,QAChB,YAAY;AAAA,QACZ,MAAM,YAAY,CAAC;AAAA,QACnB,gBAAgB,GAAG,IAAI;AAAA;AAAA;AAAA;AAAA,QAIvB,GAAG,uBAAuB,CAAC;AAAA,MAC7B,CAAC;AAGD,UAAI;AACF,cAAM;AAAA,UACJ,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA,GAAG,IAAI,IAAI,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,UACzC;AAAA,QACF;AAGA,cAAM,MAAM,cAAc,KAAK,OAAO,IAAI,IAAI;AAAA,MAChD,SAAS,WAAW;AAClB,gBAAQ;AAAA,UACN,kDAA6C,EAAE,IAAI,KACjD,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS,CACnE;AAAA,QACF;AAAA,MACF;AAMA,YAAM,QAAQ,MAAM;AAAA,QAClB;AAAA,QACA,EAAE,IAAI,OAAO,IAAI,QAAQ,EAAE,IAAI,YAAY,eAAe;AAAA,QAC1D,MAAM;AAAA,MACR;AAEA,YAAM,mBAAmB,EAAE,EAAE,sBAAsB,EAAE,mBAAmB,KAAK;AAC7E,cAAQ,KAAK;AAAA,QACX,MAAM,EAAE;AAAA,QACR,QAAQ;AAAA,QACR,UAAU,OAAO;AAAA,QACjB;AAAA,QACA,QAAQ,MAAM;AAAA,MAChB,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,cAAQ,KAAK;AAAA,QACX,MAAM,EAAE;AAAA,QACR,QAAQ;AAAA,QACR,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,QAAQ;AACnB;AAKA,SAAS,cACP,GACA,QACA,KACA,QACA,YACmC;AACnC,SAAO;AAAA,IACL,UAAU,GAAG,EAAE,IAAI,+BAAqB,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,IACtE,QAAQ,EAAE;AAAA,IACV,YAAY;AAAA,IACZ;AAAA,IACA,aAAa;AAAA,IACb,WAAW;AAAA,IACX,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,gBAAgB;AAAA,IAChB,iBAAiB,qBAAqB;AAAA,MACpC,MAAM,EAAE;AAAA,MACR,KAAK,EAAE;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAAA,IACD,GAAG;AAAA,EACL;AACF;;;ACvRA,SAAS,iBAAiB,GAA+B;AACvD,MAAI,EAAE,WAAW,oBAAqB,QAAO,IAAI,EAAE,IAAI;AACvD,MAAI,EAAE,WAAW,QAAS,QAAO,IAAI,EAAE,IAAI,YAAY,EAAE,OAAO;AAChE,QAAM,OAAO,EAAE,mBAAmB,8BAAyB;AAC3D,SAAO,IAAI,EAAE,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI;AACvC;AAEO,SAAS,qBAAqB,QAAgC;AACnE,MAAI,OAAO,QAAQ,WAAW,EAAG,QAAO;AACxC,SAAO,OAAO,QAAQ,IAAI,gBAAgB,EAAE,KAAK,IAAI;AACvD;AASA,eAAsB,mBACpB,MACA,OAC2C;AAK3C,QAAM,EAAE,iBAAiB,IAAI,MAAM,OAAO,6BAAgC;AAC1E,QAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,QAAM,eAAe,MAAM,iBAAiB;AAC5C,QAAM,aAAa,MAAM,eAAe;AACxC,QAAM,SAAS,MAAM,SAAS,EAAE,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,GAAI,cAAc,WAAW,CAAC;AACrF,QAAM,WAAW,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO;AAChE,SAAO,EAAE,QAAQ,qBAAqB,MAAM,GAAG,MAAM,WAAW,IAAI,EAAE;AACxE;","names":[]}

package/dist/attachments-NLZIJ5NU.js

@@ -0,0 +1,9 @@
+import {
+  fetchAttachmentBytes,
+  uploadAttachment
+} from "./chunk-IY6256GK.js";
+export {
+  fetchAttachmentBytes,
+  uploadAttachment
+};
+//# sourceMappingURL=attachments-NLZIJ5NU.js.map

package/dist/{bump-deps-SWJB6H5V.js → bump-deps-CGVELRLK.js}

@@ -5,19 +5,19 @@ import {
   appendSkipNotice,
   fleetWorkdir,
   prepareFleetSites
-} from "./chunk-ZMIPG6TR.js";
+} from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-7J53SUT6.js";
+} from "./chunk-CROKUHJB.js";
 import {
   bumpDeps
-} from "./chunk-SDUJIANJ.js";
-import "./chunk-ZTPPCHDB.js";
-import "./chunk-FDIFTIXC.js";
-import "./chunk-4DHQCN5H.js";
-import "./chunk-XXTZBPUY.js";
+} from "./chunk-2NJQLSEU.js";
+import "./chunk-3G25KIWW.js";
+import "./chunk-6TWWY7ZU.js";
+import "./chunk-EVBCK2KC.js";
 import "./chunk-XTK5VIQB.js";
-import "./chunk-U5SZ4FOP.js";
+import "./chunk-LBYOLBW7.js";
+import "./chunk-XXTZBPUY.js";
 
 // src/cli/commands/bump-deps.ts
 import { resolve } from "path";
@@ -57,4 +57,4 @@ async function runBumpDepsCommand(site, opts) {
 export {
   runBumpDepsCommand
 };
-//# sourceMappingURL=bump-deps-SWJB6H5V.js.map
+//# sourceMappingURL=bump-deps-CGVELRLK.js.map

package/dist/{chunk-SDUJIANJ.js → chunk-2NJQLSEU.js}

@@ -1,9 +1,9 @@
 import {
   withRecipe
-} from "./chunk-ZTPPCHDB.js";
+} from "./chunk-3G25KIWW.js";
 import {
   defaultSpawn
-} from "./chunk-4DHQCN5H.js";
+} from "./chunk-LBYOLBW7.js";
 
 // src/recipes/bump-deps.ts
 import { stat } from "fs/promises";
@@ -76,4 +76,4 @@ async function bumpDeps(site, opts = {}) {
 export {
   bumpDeps
 };
-//# sourceMappingURL=chunk-SDUJIANJ.js.map
+//# sourceMappingURL=chunk-2NJQLSEU.js.map

package/dist/chunk-2NQUCS7O.js

@@ -0,0 +1,243 @@
+import {
+  findFreePort,
+  withFreePort
+} from "./chunk-PTDMVGKL.js";
+import {
+  defaultSpawn
+} from "./chunk-LBYOLBW7.js";
+import {
+  siteLabel
+} from "./chunk-XXTZBPUY.js";
+import {
+  lighthouseConfig
+} from "./chunk-NMAWXBJA.js";
+
+// src/audits/lighthouse.ts
+import { readFile as readFile2, writeFile, mkdtemp, rm, readdir } from "fs/promises";
+import { tmpdir } from "os";
+import { join as join2 } from "path";
+
+// src/audits/util/site-config.ts
+import { readFile } from "fs/promises";
+import { join } from "path";
+async function readSiteConfig(sitePath) {
+  let raw;
+  try {
+    raw = await readFile(join(sitePath, "package.json"), "utf-8");
+  } catch {
+    return {};
+  }
+  let pkg;
+  try {
+    pkg = JSON.parse(raw);
+  } catch {
+    return {};
+  }
+  if (!pkg || typeof pkg !== "object") return {};
+  const cfg = pkg.reddoor;
+  if (!cfg || typeof cfg !== "object") return {};
+  const out = {};
+  const url = cfg.lighthouseUrl;
+  if (typeof url === "string" && url.length > 0) {
+    out.lighthouseUrl = url;
+  }
+  const routes = cfg.a11yRoutes;
+  if (Array.isArray(routes)) {
+    const clean = routes.filter((r) => typeof r === "string").map((r) => r.trim()).filter((r) => r.length > 0);
+    if (clean.length > 0) out.a11yRoutes = clean;
+  }
+  return out;
+}
+
+// src/audits/lighthouse.ts
+async function readJsonMaybe(path) {
+  try {
+    const raw = await readFile2(path, "utf-8");
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+async function readLhrEntries(resultsDir) {
+  const files = await readdir(resultsDir).catch(() => []);
+  const entries = [];
+  for (const f of files) {
+    if (!f.startsWith("lhr-") || !f.endsWith(".json")) continue;
+    const lhr = await readJsonMaybe(join2(resultsDir, f));
+    if (!lhr || !lhr.categories) continue;
+    const summary = {};
+    for (const [k, v] of Object.entries(lhr.categories)) {
+      if (typeof v?.score === "number") summary[k] = v.score;
+    }
+    entries.push({ url: lhr.requestedUrl, summary });
+  }
+  return entries;
+}
+function averageSummaries(entries) {
+  if (entries.length === 0) return {};
+  const sums = {};
+  const counts = {};
+  for (const e of entries) {
+    for (const [k, v] of Object.entries(e.summary ?? {})) {
+      if (typeof v !== "number") continue;
+      sums[k] = (sums[k] ?? 0) + v;
+      counts[k] = (counts[k] ?? 0) + 1;
+    }
+  }
+  const out = {};
+  for (const k of Object.keys(sums)) {
+    const total = sums[k] ?? 0;
+    const count = counts[k] ?? 1;
+    out[k] = total / count;
+  }
+  return out;
+}
+function categoryFromAssertion(a) {
+  const colonIdx = a.name.indexOf(":");
+  return colonIdx >= 0 ? a.name.slice(colonIdx + 1) : a.name;
+}
+function messageForAssertion(a) {
+  const actual = typeof a.actual === "number" ? a.actual.toFixed(2) : "n/a";
+  return `${a.name} ${a.operator} ${a.expected} (actual: ${actual})`;
+}
+async function parseLhciResults(resultsDir, label, raw) {
+  const manifest = await readLhrEntries(resultsDir);
+  if (manifest.length === 0) {
+    return {
+      audit: "lighthouse",
+      site: label,
+      status: "fail",
+      summary: `lighthouse: no lhr-*.json written (exit ${raw.code})${raw.stderr ? ` \u2014 ${raw.stderr.slice(0, 200)}` : ""}`
+    };
+  }
+  const assertionResults = await readJsonMaybe(join2(resultsDir, "assertion-results.json")) ?? [];
+  const failed = assertionResults.filter((a) => !a.passed);
+  const assertions = failed.map((a) => ({
+    category: categoryFromAssertion(a),
+    level: a.level,
+    message: messageForAssertion(a)
+  }));
+  const anyError = assertions.some((a) => a.level === "error");
+  const anyWarn = assertions.some((a) => a.level === "warn");
+  const status = anyError ? "fail" : anyWarn ? "warn" : "pass";
+  const normalized = {
+    summary: averageSummaries(manifest),
+    assertionsFailed: failed.length,
+    assertions
+  };
+  const summary = status === "pass" ? "lighthouse: all categories passing" : `lighthouse: ${failed.length} assertion(s) failed`;
+  return { audit: "lighthouse", site: label, status, summary, details: normalized };
+}
+async function checkoutLighthouse(spawn, site, label) {
+  const siteCfg = await readSiteConfig(site.path);
+  const port = await findFreePort();
+  const baseUrl = siteCfg.lighthouseUrl ?? lighthouseConfig.ci.collect.url[0];
+  const resolvedConfig = {
+    ...lighthouseConfig,
+    ci: {
+      ...lighthouseConfig.ci,
+      collect: {
+        ...lighthouseConfig.ci.collect,
+        url: [withFreePort(baseUrl, port)],
+        startServerCommand: `npm run vite:dev -- --port ${port} --strictPort`
+      }
+    }
+  };
+  const configDir = await mkdtemp(join2(tmpdir(), "reddoor-lhci-"));
+  const configPath = join2(configDir, "lighthouserc.json");
+  await writeFile(configPath, JSON.stringify(resolvedConfig), "utf-8");
+  const resultsDir = join2(site.path, ".lighthouseci");
+  await rm(resultsDir, { recursive: true, force: true });
+  let raw;
+  try {
+    raw = await spawn("npx", ["--yes", "@lhci/cli", "autorun", `--config=${configPath}`], {
+      cwd: site.path,
+      timeoutMs: 5 * 6e4
+    });
+  } catch (err) {
+    await rm(configDir, { recursive: true, force: true });
+    const e = err;
+    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
+      return {
+        audit: "lighthouse",
+        site: label,
+        status: "skip",
+        summary: "npx/@lhci/cli not available"
+      };
+    }
+    throw err;
+  }
+  await rm(configDir, { recursive: true, force: true });
+  return parseLhciResults(resultsDir, label, raw);
+}
+async function deployedLighthouse(spawn, deployedUrl, label) {
+  const workDir = await mkdtemp(join2(tmpdir(), "reddoor-lh-deployed-"));
+  const resolvedConfig = {
+    ci: {
+      // Deliberately NOT spread from lighthouseConfig.ci.collect: deployed mode
+      // must omit startServerCommand and the dev-server settings entirely.
+      collect: {
+        url: [deployedUrl],
+        // 3 runs to damp Lighthouse's run-to-run variance; parseLhciResults
+        // averages the lhr files. (Median is a tracked future refinement.)
+        numberOfRuns: 3,
+        // Use devtools (applied) throttling instead of the desktop preset's
+        // default `simulate` (Lantern). Lantern estimates LCP from the
+        // dependency graph and can't model an LCP element revealed by a
+        // JS-load opacity fade (e.g. gallerysonder's GridImage): on a fast
+        // observed load it finds no LCP node and throws NO_LCP, nulling the
+        // perf score, which the cockpit then coerces to a misleading 0.
+        // devtools reads the real LCP paint event from the throttled trace
+        // instead. Trade-off: slightly noisier run-to-run, damped by the
+        // numberOfRuns:3 average above.
+        settings: { preset: "desktop", throttlingMethod: "devtools", skipAudits: ["uses-http2"] }
+      },
+      assert: lighthouseConfig.ci.assert,
+      upload: { target: "filesystem", outputDir: join2(workDir, "lhci-report") }
+    }
+  };
+  const configPath = join2(workDir, "lighthouserc.json");
+  await writeFile(configPath, JSON.stringify(resolvedConfig), "utf-8");
+  const resultsDir = join2(workDir, ".lighthouseci");
+  let raw;
+  try {
+    raw = await spawn("npx", ["--yes", "@lhci/cli", "autorun", `--config=${configPath}`], {
+      cwd: workDir,
+      // 3 serial cold runs of a slow deployed site (lhci's own maxWaitForLoad
+      // ~45-60s each) + first-use Chrome download can plausibly exceed 3 min →
+      // SIGTERM → no lhr-*.json → spurious "no scores". Match the 5-min budget
+      // the checkout path already gives (erp-industrials nightly flake,
+      // morning-brief 2026-06-10 MEDIUM-F).
+      timeoutMs: 5 * 6e4
+    });
+  } catch (err) {
+    await rm(workDir, { recursive: true, force: true });
+    const e = err;
+    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
+      return {
+        audit: "lighthouse",
+        site: label,
+        status: "skip",
+        summary: "npx/@lhci/cli not available"
+      };
+    }
+    throw err;
+  }
+  try {
+    return await parseLhciResults(resultsDir, label, raw);
+  } finally {
+    await rm(workDir, { recursive: true, force: true });
+  }
+}
+async function lighthouseAudit(ctx) {
+  const spawn = ctx.spawn ?? defaultSpawn;
+  const site = ctx.site;
+  const label = siteLabel(site);
+  return site.deployedUrl ? deployedLighthouse(spawn, site.deployedUrl, label) : checkoutLighthouse(spawn, site, label);
+}
+
+export {
+  readSiteConfig,
+  lighthouseAudit
+};
+//# sourceMappingURL=chunk-2NQUCS7O.js.map

package/dist/chunk-2NQUCS7O.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/audits/lighthouse.ts","../src/audits/util/site-config.ts"],"sourcesContent":["import { readFile, writeFile, mkdtemp, rm, readdir } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type { AuditResult, Site } from \"../types.js\";\nimport { siteLabel } from \"../util/site.js\";\nimport { lighthouseConfig } from \"../configs/lighthouse.js\";\nimport { defaultSpawn } from \"./util/spawn.js\";\nimport type { SpawnFn, SpawnResult } from \"./util/spawn.js\";\nimport type { AuditContext } from \"./util/inject.js\";\nimport { readSiteConfig } from \"./util/site-config.js\";\nimport { findFreePort, withFreePort } from \"../util/free-port.js\";\n\ntype ManifestEntry = {\n  url: string;\n  summary: Record<string, number>;\n  htmlPath?: string;\n  jsonPath?: string;\n};\n\ntype AssertionResult = {\n  name: string;\n  actual: number;\n  expected: number;\n  operator: string;\n  passed: boolean;\n  level: \"warn\" | \"error\";\n  auditProperty?: string;\n  auditId?: string;\n};\n\ntype NormalizedLhciResult = {\n  summary: Record<string, number>;\n  assertionsFailed: number;\n  assertions: Array<{ category: string; level: \"warn\" | \"error\"; message: string }>;\n};\n\nasync function readJsonMaybe<T>(path: string): Promise<T | null> {\n  try {\n    const raw = await readFile(path, \"utf-8\");\n    return JSON.parse(raw) as T;\n  } catch {\n    return null;\n  }\n}\n\ntype LhrFile = {\n  requestedUrl: string;\n  finalUrl?: string;\n  categories: Record<string, { score: number | null }>;\n};\n\n/**\n * Build manifest-equivalent entries by scanning the `.lighthouseci/` dir\n * for `lhr-*.json` files written by `lhci collect`. We used to read\n * `manifest.json` directly, but lhci 0.15+ no longer writes it — the\n * audit would silently return \"no manifest written\" against a perfectly\n * healthy run. Reproduced on caltex 2026-05-28 (0.10.5 dogfood).\n */\nasync function readLhrEntries(resultsDir: string): Promise<ManifestEntry[]> {\n  const files = await readdir(resultsDir).catch(() => [] as string[]);\n  const entries: ManifestEntry[] = [];\n  for (const f of files) {\n    if (!f.startsWith(\"lhr-\") || !f.endsWith(\".json\")) continue;\n    const lhr = await readJsonMaybe<LhrFile>(join(resultsDir, f));\n    if (!lhr || !lhr.categories) continue;\n    const summary: Record<string, number> = {};\n    for (const [k, v] of Object.entries(lhr.categories)) {\n      if (typeof v?.score === \"number\") summary[k] = v.score;\n    }\n    entries.push({ url: lhr.requestedUrl, summary });\n  }\n  return entries;\n}\n\nfunction averageSummaries(entries: ManifestEntry[]): Record<string, number> {\n  if (entries.length === 0) return {};\n  const sums: Record<string, number> = {};\n  const counts: Record<string, number> = {};\n  for (const e of entries) {\n    for (const [k, v] of Object.entries(e.summary ?? {})) {\n      if (typeof v !== \"number\") continue;\n      sums[k] = (sums[k] ?? 0) + v;\n      counts[k] = (counts[k] ?? 0) + 1;\n    }\n  }\n  const out: Record<string, number> = {};\n  for (const k of Object.keys(sums)) {\n    const total = sums[k] ?? 0;\n    const count = counts[k] ?? 1;\n    out[k] = total / count;\n  }\n  return out;\n}\n\nfunction categoryFromAssertion(a: AssertionResult): string {\n  // `name` looks like \"categories:accessibility\" or \"audits:uses-http2\".\n  const colonIdx = a.name.indexOf(\":\");\n  return colonIdx >= 0 ? a.name.slice(colonIdx + 1) : a.name;\n}\n\nfunction messageForAssertion(a: AssertionResult): string {\n  // `a.actual` is parsed from external lhci/Lighthouse JSON; a malformed or\n  // missing value (not a number) would make `.toFixed` throw and crash the whole\n  // audit. Guard it and fall back to a readable string instead.\n  const actual = typeof a.actual === \"number\" ? a.actual.toFixed(2) : \"n/a\";\n  return `${a.name} ${a.operator} ${a.expected} (actual: ${actual})`;\n}\n\n/** Shared tail: scan `.lighthouseci/` for lhr-*.json + assertion-results.json and\n *  build the AuditResult. Identical for the checkout and deployed paths. */\nasync function parseLhciResults(\n  resultsDir: string,\n  label: string,\n  raw: SpawnResult,\n): Promise<AuditResult> {\n  const manifest = await readLhrEntries(resultsDir);\n\n  if (manifest.length === 0) {\n    return {\n      audit: \"lighthouse\",\n      site: label,\n      status: \"fail\",\n      summary: `lighthouse: no lhr-*.json written (exit ${raw.code})${\n        raw.stderr ? ` — ${raw.stderr.slice(0, 200)}` : \"\"\n      }`,\n    };\n  }\n\n  const assertionResults =\n    (await readJsonMaybe<AssertionResult[]>(join(resultsDir, \"assertion-results.json\"))) ?? [];\n\n  const failed = assertionResults.filter((a) => !a.passed);\n  const assertions = failed.map((a) => ({\n    category: categoryFromAssertion(a),\n    level: a.level,\n    message: messageForAssertion(a),\n  }));\n\n  const anyError = assertions.some((a) => a.level === \"error\");\n  const anyWarn = assertions.some((a) => a.level === \"warn\");\n  const status: AuditResult[\"status\"] = anyError ? \"fail\" : anyWarn ? \"warn\" : \"pass\";\n\n  const normalized: NormalizedLhciResult = {\n    summary: averageSummaries(manifest),\n    assertionsFailed: failed.length,\n    assertions,\n  };\n\n  const summary =\n    status === \"pass\"\n      ? \"lighthouse: all categories passing\"\n      : `lighthouse: ${failed.length} assertion(s) failed`;\n\n  return { audit: \"lighthouse\", site: label, status, summary, details: normalized };\n}\n\n/** Checkout mode (unchanged behavior): boot the site's vite dev server on a\n *  pinned free port and audit the local fixtures/override URL. */\nasync function checkoutLighthouse(spawn: SpawnFn, site: Site, label: string): Promise<AuditResult> {\n  const siteCfg = await readSiteConfig(site.path);\n  // Allocate a free port + force vite to `--strictPort` so the spawned dev\n  // server either binds the port we picked or fails loudly (caltex 2026-05-28\n  // zombie-vite incident).\n  const port = await findFreePort();\n  const baseUrl = siteCfg.lighthouseUrl ?? lighthouseConfig.ci.collect.url[0];\n  const resolvedConfig = {\n    ...lighthouseConfig,\n    ci: {\n      ...lighthouseConfig.ci,\n      collect: {\n        ...lighthouseConfig.ci.collect,\n        url: [withFreePort(baseUrl, port)],\n        startServerCommand: `npm run vite:dev -- --port ${port} --strictPort`,\n      },\n    },\n  };\n\n  const configDir = await mkdtemp(join(tmpdir(), \"reddoor-lhci-\"));\n  const configPath = join(configDir, \"lighthouserc.json\");\n  await writeFile(configPath, JSON.stringify(resolvedConfig), \"utf-8\");\n\n  const resultsDir = join(site.path, \".lighthouseci\");\n  await rm(resultsDir, { recursive: true, force: true });\n\n  let raw: SpawnResult;\n  try {\n    raw = await spawn(\"npx\", [\"--yes\", \"@lhci/cli\", \"autorun\", `--config=${configPath}`], {\n      cwd: site.path,\n      timeoutMs: 5 * 60_000,\n    });\n  } catch (err) {\n    await rm(configDir, { recursive: true, force: true });\n    const e = err as NodeJS.ErrnoException;\n    if (e.code === \"ENOENT\" || /ENOENT/.test(String(err))) {\n      return {\n        audit: \"lighthouse\",\n        site: label,\n        status: \"skip\",\n        summary: \"npx/@lhci/cli not available\",\n      };\n    }\n    throw err;\n  }\n  await rm(configDir, { recursive: true, force: true });\n\n  return parseLhciResults(resultsDir, label, raw);\n}\n\n/** Deployed mode: audit a production URL directly — no checkout, no dev server.\n *  Runs in a throwaway tmp cwd; uploads to the filesystem so fleet runs never\n *  push 200 public reports to temporary-public-storage. */\nasync function deployedLighthouse(\n  spawn: SpawnFn,\n  deployedUrl: string,\n  label: string,\n): Promise<AuditResult> {\n  const workDir = await mkdtemp(join(tmpdir(), \"reddoor-lh-deployed-\"));\n  const resolvedConfig = {\n    ci: {\n      // Deliberately NOT spread from lighthouseConfig.ci.collect: deployed mode\n      // must omit startServerCommand and the dev-server settings entirely.\n      collect: {\n        url: [deployedUrl],\n        // 3 runs to damp Lighthouse's run-to-run variance; parseLhciResults\n        // averages the lhr files. (Median is a tracked future refinement.)\n        numberOfRuns: 3,\n        // Use devtools (applied) throttling instead of the desktop preset's\n        // default `simulate` (Lantern). Lantern estimates LCP from the\n        // dependency graph and can't model an LCP element revealed by a\n        // JS-load opacity fade (e.g. gallerysonder's GridImage): on a fast\n        // observed load it finds no LCP node and throws NO_LCP, nulling the\n        // perf score, which the cockpit then coerces to a misleading 0.\n        // devtools reads the real LCP paint event from the throttled trace\n        // instead. Trade-off: slightly noisier run-to-run, damped by the\n        // numberOfRuns:3 average above.\n        settings: { preset: \"desktop\", throttlingMethod: \"devtools\", skipAudits: [\"uses-http2\"] },\n      },\n      assert: lighthouseConfig.ci.assert,\n      upload: { target: \"filesystem\", outputDir: join(workDir, \"lhci-report\") },\n    },\n  };\n\n  const configPath = join(workDir, \"lighthouserc.json\");\n  await writeFile(configPath, JSON.stringify(resolvedConfig), \"utf-8\");\n\n  const resultsDir = join(workDir, \".lighthouseci\");\n\n  let raw: SpawnResult;\n  try {\n    raw = await spawn(\"npx\", [\"--yes\", \"@lhci/cli\", \"autorun\", `--config=${configPath}`], {\n      cwd: workDir,\n      // 3 serial cold runs of a slow deployed site (lhci's own maxWaitForLoad\n      // ~45-60s each) + first-use Chrome download can plausibly exceed 3 min →\n      // SIGTERM → no lhr-*.json → spurious \"no scores\". Match the 5-min budget\n      // the checkout path already gives (erp-industrials nightly flake,\n      // morning-brief 2026-06-10 MEDIUM-F).\n      timeoutMs: 5 * 60_000,\n    });\n  } catch (err) {\n    await rm(workDir, { recursive: true, force: true });\n    const e = err as NodeJS.ErrnoException;\n    if (e.code === \"ENOENT\" || /ENOENT/.test(String(err))) {\n      return {\n        audit: \"lighthouse\",\n        site: label,\n        status: \"skip\",\n        summary: \"npx/@lhci/cli not available\",\n      };\n    }\n    throw err;\n  }\n\n  try {\n    return await parseLhciResults(resultsDir, label, raw);\n  } finally {\n    await rm(workDir, { recursive: true, force: true });\n  }\n}\n\nexport async function lighthouseAudit(ctx: AuditContext): Promise<AuditResult> {\n  const spawn = ctx.spawn ?? defaultSpawn;\n  const site = ctx.site;\n  const label = siteLabel(site);\n\n  return site.deployedUrl\n    ? deployedLighthouse(spawn, site.deployedUrl, label)\n    : checkoutLighthouse(spawn, site, label);\n}\n","import { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nexport type SiteConfig = {\n  /** Override URL the lighthouse audit hits. Sites without the default\n   * `/dev/a11y-fixtures` dev route set this to their homepage. */\n  lighthouseUrl?: string;\n  /**\n   * Real site routes the a11y audit should axe-scan, IN ADDITION to the two\n   * synthetic fixture pages it always covers. Opt-in per site and absent by\n   * default: the audit runs with `--fail-on-violations` in the shared CI\n   * workflow, and most of the fleet carries pre-existing a11y debt, so scanning\n   * real routes everywhere at once would red every repo. A site adopts this once\n   * its routes are clean. Omitted (never `[]`) when unset or unusable.\n   */\n  a11yRoutes?: string[];\n};\n\n/**\n * Read per-site overrides from `package.json#reddoor`. Returns `{}` on any\n * failure (missing file, malformed JSON, missing key, wrong type) so every\n * caller can safely fall back to its built-in default. Never throws.\n */\nexport async function readSiteConfig(sitePath: string): Promise<SiteConfig> {\n  let raw: string;\n  try {\n    raw = await readFile(join(sitePath, \"package.json\"), \"utf-8\");\n  } catch {\n    return {};\n  }\n  let pkg: unknown;\n  try {\n    pkg = JSON.parse(raw);\n  } catch {\n    return {};\n  }\n  if (!pkg || typeof pkg !== \"object\") return {};\n  const cfg = (pkg as { reddoor?: unknown }).reddoor;\n  if (!cfg || typeof cfg !== \"object\") return {};\n\n  const out: SiteConfig = {};\n  const url = (cfg as { lighthouseUrl?: unknown }).lighthouseUrl;\n  if (typeof url === \"string\" && url.length > 0) {\n    out.lighthouseUrl = url;\n  }\n  const routes = (cfg as { a11yRoutes?: unknown }).a11yRoutes;\n  if (Array.isArray(routes)) {\n    // Junk entries are dropped rather than passed through — a `null` in the list\n    // would become `page.goto(null)` inside the generated spec and fail the whole\n    // audit for a typo. An all-junk list leaves the key omitted, so the caller's\n    // \"no routes configured\" branch is the same shape as \"key absent\".\n    const clean = routes\n      .filter((r): r is string => typeof r === \"string\")\n      .map((r) => r.trim())\n      .filter((r) => r.length > 0);\n    if (clean.length > 0) out.a11yRoutes = clean;\n  }\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,YAAAA,WAAU,WAAW,SAAS,IAAI,eAAe;AAC1D,SAAS,cAAc;AACvB,SAAS,QAAAC,aAAY;;;ACFrB,SAAS,gBAAgB;AACzB,SAAS,YAAY;AAsBrB,eAAsB,eAAe,UAAuC;AAC1E,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,KAAK,UAAU,cAAc,GAAG,OAAO;AAAA,EAC9D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,GAAG;AAAA,EACtB,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,MAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,CAAC;AAC7C,QAAM,MAAO,IAA8B;AAC3C,MAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,CAAC;AAE7C,QAAM,MAAkB,CAAC;AACzB,QAAM,MAAO,IAAoC;AACjD,MAAI,OAAO,QAAQ,YAAY,IAAI,SAAS,GAAG;AAC7C,QAAI,gBAAgB;AAAA,EACtB;AACA,QAAM,SAAU,IAAiC;AACjD,MAAI,MAAM,QAAQ,MAAM,GAAG;AAKzB,UAAM,QAAQ,OACX,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,EAChD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAC7B,QAAI,MAAM,SAAS,EAAG,KAAI,aAAa;AAAA,EACzC;AACA,SAAO;AACT;;;ADtBA,eAAe,cAAiB,MAAiC;AAC/D,MAAI;AACF,UAAM,MAAM,MAAMC,UAAS,MAAM,OAAO;AACxC,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAeA,eAAe,eAAe,YAA8C;AAC1E,QAAM,QAAQ,MAAM,QAAQ,UAAU,EAAE,MAAM,MAAM,CAAC,CAAa;AAClE,QAAM,UAA2B,CAAC;AAClC,aAAW,KAAK,OAAO;AACrB,QAAI,CAAC,EAAE,WAAW,MAAM,KAAK,CAAC,EAAE,SAAS,OAAO,EAAG;AACnD,UAAM,MAAM,MAAM,cAAuBC,MAAK,YAAY,CAAC,CAAC;AAC5D,QAAI,CAAC,OAAO,CAAC,IAAI,WAAY;AAC7B,UAAM,UAAkC,CAAC;AACzC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,UAAU,GAAG;AACnD,UAAI,OAAO,GAAG,UAAU,SAAU,SAAQ,CAAC,IAAI,EAAE;AAAA,IACnD;AACA,YAAQ,KAAK,EAAE,KAAK,IAAI,cAAc,QAAQ,CAAC;AAAA,EACjD;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,SAAkD;AAC1E,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,QAAM,OAA+B,CAAC;AACtC,QAAM,SAAiC,CAAC;AACxC,aAAW,KAAK,SAAS;AACvB,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,EAAE,WAAW,CAAC,CAAC,GAAG;AACpD,UAAI,OAAO,MAAM,SAAU;AAC3B,WAAK,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK;AAC3B,aAAO,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK;AAAA,IACjC;AAAA,EACF;AACA,QAAM,MAA8B,CAAC;AACrC,aAAW,KAAK,OAAO,KAAK,IAAI,GAAG;AACjC,UAAM,QAAQ,KAAK,CAAC,KAAK;AACzB,UAAM,QAAQ,OAAO,CAAC,KAAK;AAC3B,QAAI,CAAC,IAAI,QAAQ;AAAA,EACnB;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,GAA4B;AAEzD,QAAM,WAAW,EAAE,KAAK,QAAQ,GAAG;AACnC,SAAO,YAAY,IAAI,EAAE,KAAK,MAAM,WAAW,CAAC,IAAI,EAAE;AACxD;AAEA,SAAS,oBAAoB,GAA4B;AAIvD,QAAM,SAAS,OAAO,EAAE,WAAW,WAAW,EAAE,OAAO,QAAQ,CAAC,IAAI;AACpE,SAAO,GAAG,EAAE,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE,QAAQ,aAAa,MAAM;AACjE;AAIA,eAAe,iBACb,YACA,OACA,KACsB;AACtB,QAAM,WAAW,MAAM,eAAe,UAAU;AAEhD,MAAI,SAAS,WAAW,GAAG;AACzB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,SAAS,2CAA2C,IAAI,IAAI,IAC1D,IAAI,SAAS,WAAM,IAAI,OAAO,MAAM,GAAG,GAAG,CAAC,KAAK,EAClD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,mBACH,MAAM,cAAiCA,MAAK,YAAY,wBAAwB,CAAC,KAAM,CAAC;AAE3F,QAAM,SAAS,iBAAiB,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM;AACvD,QAAM,aAAa,OAAO,IAAI,CAAC,OAAO;AAAA,IACpC,UAAU,sBAAsB,CAAC;AAAA,IACjC,OAAO,EAAE;AAAA,IACT,SAAS,oBAAoB,CAAC;AAAA,EAChC,EAAE;AAEF,QAAM,WAAW,WAAW,KAAK,CAAC,MAAM,EAAE,UAAU,OAAO;AAC3D,QAAM,UAAU,WAAW,KAAK,CAAC,MAAM,EAAE,UAAU,MAAM;AACzD,QAAM,SAAgC,WAAW,SAAS,UAAU,SAAS;AAE7E,QAAM,aAAmC;AAAA,IACvC,SAAS,iBAAiB,QAAQ;AAAA,IAClC,kBAAkB,OAAO;AAAA,IACzB;AAAA,EACF;AAEA,QAAM,UACJ,WAAW,SACP,uCACA,eAAe,OAAO,MAAM;AAElC,SAAO,EAAE,OAAO,cAAc,MAAM,OAAO,QAAQ,SAAS,SAAS,WAAW;AAClF;AAIA,eAAe,mBAAmB,OAAgB,MAAY,OAAqC;AACjG,QAAM,UAAU,MAAM,eAAe,KAAK,IAAI;AAI9C,QAAM,OAAO,MAAM,aAAa;AAChC,QAAM,UAAU,QAAQ,iBAAiB,iBAAiB,GAAG,QAAQ,IAAI,CAAC;AAC1E,QAAM,iBAAiB;AAAA,IACrB,GAAG;AAAA,IACH,IAAI;AAAA,MACF,GAAG,iBAAiB;AAAA,MACpB,SAAS;AAAA,QACP,GAAG,iBAAiB,GAAG;AAAA,QACvB,KAAK,CAAC,aAAa,SAAS,IAAI,CAAC;AAAA,QACjC,oBAAoB,8BAA8B,IAAI;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,QAAQA,MAAK,OAAO,GAAG,eAAe,CAAC;AAC/D,QAAM,aAAaA,MAAK,WAAW,mBAAmB;AACtD,QAAM,UAAU,YAAY,KAAK,UAAU,cAAc,GAAG,OAAO;AAEnE,QAAM,aAAaA,MAAK,KAAK,MAAM,eAAe;AAClD,QAAM,GAAG,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAErD,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,MAAM,OAAO,CAAC,SAAS,aAAa,WAAW,YAAY,UAAU,EAAE,GAAG;AAAA,MACpF,KAAK,KAAK;AAAA,MACV,WAAW,IAAI;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACpD,UAAM,IAAI;AACV,QAAI,EAAE,SAAS,YAAY,SAAS,KAAK,OAAO,GAAG,CAAC,GAAG;AACrD,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,SAAS;AAAA,MACX;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACA,QAAM,GAAG,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAEpD,SAAO,iBAAiB,YAAY,OAAO,GAAG;AAChD;AAKA,eAAe,mBACb,OACA,aACA,OACsB;AACtB,QAAM,UAAU,MAAM,QAAQA,MAAK,OAAO,GAAG,sBAAsB,CAAC;AACpE,QAAM,iBAAiB;AAAA,IACrB,IAAI;AAAA;AAAA;AAAA,MAGF,SAAS;AAAA,QACP,KAAK,CAAC,WAAW;AAAA;AAAA;AAAA,QAGjB,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAUd,UAAU,EAAE,QAAQ,WAAW,kBAAkB,YAAY,YAAY,CAAC,YAAY,EAAE;AAAA,MAC1F;AAAA,MACA,QAAQ,iBAAiB,GAAG;AAAA,MAC5B,QAAQ,EAAE,QAAQ,cAAc,WAAWA,MAAK,SAAS,aAAa,EAAE;AAAA,IAC1E;AAAA,EACF;AAEA,QAAM,aAAaA,MAAK,SAAS,mBAAmB;AACpD,QAAM,UAAU,YAAY,KAAK,UAAU,cAAc,GAAG,OAAO;AAEnE,QAAM,aAAaA,MAAK,SAAS,eAAe;AAEhD,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,MAAM,OAAO,CAAC,SAAS,aAAa,WAAW,YAAY,UAAU,EAAE,GAAG;AAAA,MACpF,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAML,WAAW,IAAI;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAClD,UAAM,IAAI;AACV,QAAI,EAAE,SAAS,YAAY,SAAS,KAAK,OAAO,GAAG,CAAC,GAAG;AACrD,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,SAAS;AAAA,MACX;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI;AACF,WAAO,MAAM,iBAAiB,YAAY,OAAO,GAAG;AAAA,EACtD,UAAE;AACA,UAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EACpD;AACF;AAEA,eAAsB,gBAAgB,KAAyC;AAC7E,QAAM,QAAQ,IAAI,SAAS;AAC3B,QAAM,OAAO,IAAI;AACjB,QAAM,QAAQ,UAAU,IAAI;AAE5B,SAAO,KAAK,cACR,mBAAmB,OAAO,KAAK,aAAa,KAAK,IACjD,mBAAmB,OAAO,MAAM,KAAK;AAC3C;","names":["readFile","join","readFile","join"]}

package/dist/{chunk-ZTPPCHDB.js → chunk-3G25KIWW.js}

@@ -1,6 +1,3 @@
-import {
-  siteLabel
-} from "./chunk-XXTZBPUY.js";
 import {
   branchName,
   checkoutBranch,
@@ -11,6 +8,9 @@ import {
   forceCheckoutBranch,
   isWorkingTreeClean
 } from "./chunk-XTK5VIQB.js";
+import {
+  siteLabel
+} from "./chunk-XXTZBPUY.js";
 
 // src/recipes/_with-recipe.ts
 async function withRecipe(body) {
@@ -118,4 +118,4 @@ async function withRecipe(body) {
 export {
   withRecipe
 };
-//# sourceMappingURL=chunk-ZTPPCHDB.js.map
+//# sourceMappingURL=chunk-3G25KIWW.js.map