@reddoorla/maintenance 0.85.2 → 0.87.0

package/dist/{chunk-LTB6KVJW.js.map → chunk-SDDPUAWH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/reports/preflight.ts"],"sourcesContent":["import { openBase, readAirtableConfig } from \"./airtable/client.js\";\nimport type { AirtableBase } from \"./airtable/client.js\";\nimport { listWebsites, siteSlug } from \"./airtable/websites.js\";\nimport type { WebsiteRow } from \"./airtable/websites.js\";\nimport { listAllReports } from \"./airtable/reports.js\";\nimport type { ReportRow } from \"./airtable/reports.js\";\nimport { parseAddresses, isProbablyEmail } from \"./send/orchestrate.js\";\nimport { ELIGIBLE_STATUSES, reportPeriodKey } from \"./due.js\";\nimport type { ReportType } from \"./types.js\";\nimport { gatingHealth, isSendOverridden } from \"./checklist.js\";\n\nexport type PreflightLevel = \"fail\" | \"warn\" | \"info\";\n\nexport type PreflightFinding = {\n  level: PreflightLevel;\n  /** Stable machine-readable check id, e.g. \"recipients-missing\". */\n  check: string;\n  message: string;\n};\n\nexport type PreflightSiteResult = {\n  site: string;\n  findings: PreflightFinding[];\n};\n\n/** Domains whose addresses are the OPERATOR's, not a client's. A client site whose\n *  resolved To contains one of these is almost always a test-send leftover — the\n *  exact misconfiguration that would silently divert a client announcement. */\nconst OPERATOR_DOMAINS = [\"reddoorla.com\", \"tuckerlemos.com\"];\n\n/** Anchors older than this, WHEN the anchor is actually the schedule's base date\n *  (no newer Sent-at — see nextDueDate's `lastSent ?? fallback`), mean the next\n *  `report --due` run drafts a surprise back-dated report. */\nconst STALE_ANCHOR_DAYS = 396; // ~13 months\n\nfunction domainOf(addr: string): string {\n  const at = addr.lastIndexOf(\"@\");\n  return at === -1 ? \"\" : addr.slice(at + 1).toLowerCase();\n}\n\nfunction isOperatorSite(site: WebsiteRow): boolean {\n  if (!site.url) return false;\n  try {\n    // Airtable `url` cells aren't guaranteed a scheme; retry with one before giving up.\n    const host = new URL(\n      /^[a-z][a-z0-9+.-]*:\\/\\//i.test(site.url) ? site.url : `https://${site.url}`,\n    ).hostname.toLowerCase();\n    return OPERATOR_DOMAINS.some((d) => host === d || host.endsWith(`.${d}`));\n  } catch {\n    return false;\n  }\n}\n\nfunction lastSentForType(reports: ReportRow[], type: ReportType): string | null {\n  const sent = reports\n    .filter((r) => r.reportType === type && r.sentAt !== null)\n    .map((r) => r.sentAt!)\n    .sort();\n  return sent[sent.length - 1] ?? null;\n}\n\nfunction checkFrequency(\n  site: WebsiteRow,\n  which: \"maintenance\" | \"testing\",\n  reports: ReportRow[],\n  findings: PreflightFinding[],\n  now: Date,\n): void {\n  // Validate the RAW Airtable cell, not the coerced Frequency: toFrequency trims\n  // whitespace (so \"Monthly \" schedules), then coerces any still-unrecognized value\n  // (typo, renamed option) to \"None\" with a console.warn. That warn only lands in\n  // logs — this finding is the structured, surfaced version of the same failure.\n  const raw = which === \"maintenance\" ? site.maintenanceFreqRaw : site.testingFreqRaw;\n  const coerced = which === \"maintenance\" ? site.maintenanceFreq : site.testingFreq;\n  if (raw !== null && raw !== \"\" && coerced === \"None\" && raw.trim() !== \"None\") {\n    findings.push({\n      level: \"fail\",\n      check: \"frequency-unrecognized\",\n      message: `${which} frequency cell is '${raw}' — not a recognized Monthly/Quarterly/Yearly/None (even after trimming), so the scheduler treats it as None and the site drops off the calendar; fix the Airtable value`,\n    });\n    return;\n  }\n  if (coerced === \"None\") return;\n\n  const anchor = which === \"maintenance\" ? site.maintenanceDay : site.testingDay;\n  if (!anchor) return;\n  // nextDueDate uses `lastSent ?? anchor`: once anything has been sent, the anchor\n  // is inert and an old one is normal on every healthy mature site — only warn when\n  // the anchor is genuinely the base date the scheduler would use.\n  const type: ReportType = which === \"maintenance\" ? \"Maintenance\" : \"Testing\";\n  const lastSent = lastSentForType(reports, type);\n  if (lastSent && new Date(lastSent).getTime() >= new Date(anchor).getTime()) return;\n  const ageDays = (now.getTime() - new Date(anchor).getTime()) / 86_400_000;\n  if (ageDays > STALE_ANCHOR_DAYS) {\n    findings.push({\n      level: \"warn\",\n      check: \"anchor-stale\",\n      message: `${which} day anchor is ${anchor} (>13 months old) and nothing newer has been sent — \\`report --due\\` will draft a back-dated overdue report; reset the anchor or clear the schedule`,\n    });\n  }\n}\n\n/**\n * Pure per-site preflight: every check that, left unfixed, makes a report send fail,\n * go to the wrong inbox, or surprise the operator. Read-only over data already\n * fetched; no Airtable handle, no network — trivially testable.\n *\n * Mirrors the send/draft-time validation (recipients + header image in\n * send/orchestrate.ts, Websites-row scores in draft.ts) so problems surface BEFORE\n * draft/approve instead of exploding at `report --send-ready`, and adds the checks\n * send time cannot do: operator-address leftovers, To-override shadowing,\n * pending-draft races, schedule hygiene against the RAW Airtable values.\n */\nexport function preflightSite(\n  site: WebsiteRow,\n  reports: ReportRow[],\n  type: ReportType,\n  now: Date,\n): PreflightSiteResult {\n  const findings: PreflightFinding[] = [];\n\n  // A site that isn't on the checked calendar never drafts, so its send\n  // requirements (recipients / header image / scores) can't hurt anyone —\n  // checking them anyway would drown the fleet run in fails for legacy hosting\n  // rows. Frequency hygiene and pending-draft checks still run: a typo'd cell\n  // is exactly HOW a site falls off the calendar, and an already-drafted report\n  // can still be approved + sent regardless of schedule.\n  const scheduledForType =\n    type === \"Announcement\"\n      ? true\n      : type === \"Maintenance\"\n        ? site.maintenanceFreq !== \"None\"\n        : site.testingFreq !== \"None\";\n  if (!scheduledForType) {\n    findings.push({\n      level: \"info\",\n      check: \"not-scheduled\",\n      message: `no ${type} schedule (frequency is None/blank) — send-requirement checks skipped; schedule + pending-draft checks still apply`,\n    });\n  }\n\n  // --- Recipients: same resolution order as the send path (To override, else contact).\n  const explicitTo = parseAddresses(site.reportRecipientsTo);\n  const fallbackTo = parseAddresses(site.pointOfContact);\n  const to = scheduledForType ? (explicitTo ?? fallbackTo ?? []) : [];\n  if (scheduledForType && to.length === 0) {\n    findings.push({\n      level: \"fail\",\n      check: \"recipients-missing\",\n      message:\n        \"no recipients — Report recipients (To) and point of contact are both empty; the send will throw\",\n    });\n  }\n  for (const addr of to) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `recipient '${addr}' is malformed — use bare addresses only in Report recipients (To) / point of contact`,\n      });\n    }\n  }\n  const cc = scheduledForType ? (parseAddresses(site.reportRecipientsCc) ?? []) : [];\n  for (const addr of cc) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `CC '${addr}' is malformed — fix Report recipients (CC)`,\n      });\n    }\n  }\n  if (!isOperatorSite(site)) {\n    const operatorAddrs = to.filter((a) => OPERATOR_DOMAINS.includes(domainOf(a)));\n    if (operatorAddrs.length > 0) {\n      const allOperator = operatorAddrs.length === to.length;\n      findings.push({\n        level: \"warn\",\n        check: \"recipient-operator-address\",\n        message: allOperator\n          ? `resolved To is ONLY operator address(es) ${operatorAddrs.join(\", \")} — probably a test-send leftover; the client will NOT receive this report`\n          : `resolved To includes operator address(es) ${operatorAddrs.join(\", \")} alongside the client's — confirm that's intentional (the ops inbox is already CC'd on every send)`,\n      });\n    }\n  }\n  if (scheduledForType && explicitTo && fallbackTo) {\n    const a = [...explicitTo]\n      .map((x) => x.toLowerCase())\n      .sort()\n      .join(\",\");\n    const b = [...fallbackTo]\n      .map((x) => x.toLowerCase())\n      .sort()\n      .join(\",\");\n    if (a !== b) {\n      findings.push({\n        level: \"info\",\n        check: \"to-override-shadows-contact\",\n        message: `Report recipients (To) [${explicitTo.join(\", \")}] overrides point of contact [${fallbackTo.join(\", \")}] — the contact won't receive this unless also listed`,\n      });\n    }\n  }\n\n  // --- Hard requirements of the draft/send paths, surfaced early.\n  if (scheduledForType && !site.headerImage) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-missing\",\n      message: \"no Header image on the Websites row — the send will throw\",\n    });\n  } else if (scheduledForType && site.headerImage && !site.headerImage.type.startsWith(\"image/\")) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-not-image\",\n      message: `Header image attachment is '${site.headerImage.type}' (${site.headerImage.filename}) — not a decodable image; the send throws in prepareHeaderImage`,\n    });\n  }\n  const scores = [site.pScore, site.rScore, site.bpScore, site.seoScore];\n  if (scheduledForType && scores.some((s) => s === null)) {\n    if (type === \"Announcement\") {\n      // announce() skips score-less sites (skipped-no-scores) rather than throwing.\n      findings.push({\n        level: \"warn\",\n        check: \"scores-missing\",\n        message:\n          \"Websites row is missing Lighthouse scores — `announce` will skip this site; run `audit lighthouse --write-airtable` first\",\n      });\n    } else {\n      // report <site> / report --due HARD-THROW here (scoresFromWebsite in draft.ts).\n      findings.push({\n        level: \"fail\",\n        check: \"scores-missing\",\n        message:\n          \"Websites row is missing Lighthouse scores — drafting will throw (scoresFromWebsite); run `audit lighthouse --write-airtable` first\",\n      });\n    }\n  }\n  if (type === \"Announcement\" && site.status !== \"maintenance\") {\n    findings.push({\n      level: \"info\",\n      check: \"status-not-maintenance\",\n      message: `status is '${site.status ?? \"(blank)\"}' — \\`announce --all\\` only drafts for maintenance sites`,\n    });\n  }\n\n  // --- Pending drafts. For an Announcement these always race (the queue tier rule\n  // supersedes or blocks). For Maintenance/Testing, the CURRENT cycle's own draft\n  // sitting ready on send day IS the payload — that's the steady state, not a\n  // problem — so only genuinely stale/foreign drafts get the warn.\n  const pending = reports.filter((r) => r.draftReady && r.sentAt === null);\n  if (pending.length > 0) {\n    const currentPeriod = reportPeriodKey(now);\n    const isExpectedPayload = (r: ReportRow): boolean =>\n      type !== \"Announcement\" && r.reportType === type && r.period === currentPeriod;\n    const expected = pending.filter(isExpectedPayload);\n    const stale = pending.filter((r) => !isExpectedPayload(r));\n    if (expected.length > 0) {\n      findings.push({\n        level: \"info\",\n        check: \"pending-drafts\",\n        message: `current-cycle ${type} draft is queued${expected[0]!.approvedToSend ? \" and approved\" : \" (awaiting approval)\"} — this is the report \\`--send-ready\\` will deliver`,\n      });\n    }\n    if (stale.length > 0) {\n      const summary = stale\n        .map(\n          (r) =>\n            `${r.reportType} ${r.period ?? \"(no period)\"}${r.approvedToSend ? \" [APPROVED]\" : \"\"}`,\n        )\n        .join(\", \");\n      findings.push({\n        level: \"warn\",\n        check: \"pending-drafts\",\n        message: `${stale.length} unsent draft(s) queued: ${summary} — resolve before sending so the client doesn't get the wrong report first`,\n      });\n    }\n  }\n\n  // --- Schedule hygiene (validates the RAW Airtable frequency cells).\n  checkFrequency(site, \"maintenance\", reports, findings, now);\n  checkFrequency(site, \"testing\", reports, findings, now);\n  if (type === \"Announcement\") {\n    const anySent = lastSentForType(reports, \"Maintenance\") ?? lastSentForType(reports, \"Testing\");\n    if (!site.maintenanceDay && !site.testingDay && !anySent) {\n      findings.push({\n        level: \"info\",\n        check: \"anchor-missing\",\n        message:\n          \"no maintenance/testing day anchors and nothing ever sent — set both anchors to the announcement send date (the Sonder playbook) so recurrence starts from the announcement\",\n      });\n    }\n  }\n\n  return { site: site.name, findings };\n}\n\n/**\n * Fleet-level heuristics that need the whole selection. Airtable column renames\n * don't error — the mapper reads null forever (its own header comment admits this).\n * A load-bearing column empty on EVERY selected site is far more likely a rename\n * than N coincidences; say so. Likewise two different sites resolving to one\n * recipient is worth one eyeball (it can be legitimate — same owner, two sites).\n */\nexport function preflightFleet(sites: WebsiteRow[]): PreflightFinding[] {\n  if (sites.length < 3) return []; // too few rows to distinguish rename from data\n  const findings: PreflightFinding[] = [];\n  const allEmpty = (get: (s: WebsiteRow) => unknown, column: string): void => {\n    if (sites.every((s) => get(s) === null || get(s) === \"\")) {\n      findings.push({\n        level: \"warn\",\n        check: \"column-possibly-renamed\",\n        message: `'${column}' is empty on all ${sites.length} selected sites — if that column was renamed in Airtable the code reads null silently; verify the column name`,\n      });\n    }\n  };\n  allEmpty((s) => s.pointOfContact, \"point of contact\");\n  allEmpty((s) => s.maintenanceFreqRaw, \"maintenence freq\");\n  allEmpty((s) => s.headerImage, \"Header image\");\n\n  const byContact = new Map<string, string[]>();\n  for (const s of sites) {\n    const to = parseAddresses(s.reportRecipientsTo) ?? parseAddresses(s.pointOfContact) ?? [];\n    for (const addr of to) {\n      const key = addr.toLowerCase();\n      byContact.set(key, [...(byContact.get(key) ?? []), s.name]);\n    }\n  }\n  for (const [addr, names] of byContact) {\n    if (names.length > 1 && !OPERATOR_DOMAINS.includes(domainOf(addr))) {\n      findings.push({\n        level: \"info\",\n        check: \"duplicate-contact\",\n        message: `${names.join(\" and \")} resolve to the same recipient (${addr}) — fine if one person owns both; otherwise a copy-paste error on one row`,\n      });\n    }\n  }\n  return findings;\n}\n\nexport type PreflightDeps = {\n  /** Airtable handle. Defaults to opening the live base from credentials. */\n  base?: AirtableBase;\n  /** Slug of a single site (matched via siteSlug). Mutually exclusive with `all`. */\n  site?: string;\n  /** Fleet mode: for Announcement, maintenance-status sites (announce's own filter);\n   *  for Maintenance/Testing, everything `report --due` schedules — ELIGIBLE_STATUSES\n   *  plus null-status rows (due.ts treats null as active for legacy rows). */\n  all?: boolean;\n  type?: ReportType;\n  now?: Date;\n};\n\nexport type PreflightResult = {\n  results: PreflightSiteResult[];\n  fleet: PreflightFinding[];\n};\n\n/**\n * Read-only rollout preflight over the live Airtable base. One Websites fetch, one\n * Reports fetch (the --due path does the same for the same rate-limit reason), then\n * {@link preflightSite} per selected site plus {@link preflightFleet} across the\n * selection. NEVER writes and NEVER sends.\n */\nexport async function preflight(deps?: PreflightDeps): Promise<PreflightResult> {\n  const base = deps?.base ?? openBase(readAirtableConfig());\n  const type: ReportType = deps?.type ?? \"Announcement\";\n  const now = deps?.now ?? new Date();\n\n  const websites = await listWebsites(base);\n  const selected = deps?.site\n    ? websites.filter((w) => siteSlug(w.name) === siteSlug(deps.site!))\n    : type === \"Announcement\"\n      ? websites.filter((w) => w.status === \"maintenance\")\n      : websites.filter((w) => w.status === null || ELIGIBLE_STATUSES.has(w.status));\n\n  const allReports = selected.length > 0 ? await listAllReports(base) : [];\n  const results = selected.map((site) =>\n    preflightSite(\n      site,\n      allReports.filter((r) => r.siteId === site.id),\n      type,\n      now,\n    ),\n  );\n  return { results, fleet: deps?.site ? [] : preflightFleet(selected) };\n}\n\n/**\n * Health-gate blockers for one report: every GATING field whose evidence is not `pass`/`n/a`\n * (i.e. `fail`, `unknown`, or absent) becomes a fail-level finding, keyed `health-gate`. PURE.\n * Folded into {@link approveBlockers} so health failures ride the existing send-blocked reason +\n * 409 + dashboard chip (the second gate — no third gate is added).\n *\n * A logged send-anyway override ({@link isSendOverridden}) suppresses these findings — but never\n * the REAL send blockers (recipients/header/scores), which are computed outside this function and\n * still gate an overridden send.\n */\nexport function healthBlockers(report: ReportRow): PreflightFinding[] {\n  if (isSendOverridden(report)) return [];\n  const findings: PreflightFinding[] = [];\n  for (const { field, status } of gatingHealth({\n    reportType: report.reportType,\n    autoEvidence: report.autoEvidence ?? {},\n  })) {\n    if (status === \"pass\" || status === \"n/a\") continue;\n    // `||`, not `??`: an explicit empty-string note (no message recorded) must\n    // also fall back to the placeholder, not render as a trailing blank.\n    const note = report.autoEvidence?.[field]?.note || \"no signal yet\";\n    findings.push({\n      level: \"fail\",\n      check: \"health-gate\",\n      message:\n        status === \"fail\"\n          ? `${field}: failing — ${note}`\n          : `${field}: not yet green (${status}) — ${note}`,\n    });\n  }\n  return findings;\n}\n\n/**\n * The send-blocking subset for ONE report, at approve time: exactly the\n * conditions that make `sendOne` throw (no recipients, malformed To/CC, no\n * header image, no report-level Lighthouse scores) plus the wrong-inbox warn\n * (operator address resolved as a client's To) plus every {@link healthBlockers}\n * finding (a gating checklist item whose auto-evidence isn't `pass`/`n/a` fails\n * the health gate). PURE — the approve gate, the dashboard's pending-row chip,\n * and the digest collector all call this one function so \"approvable\" can't\n * drift from \"sendable\".\n *\n * Deliberately narrower than {@link preflightSite}: schedule hygiene and\n * pending-draft races are fleet/site concerns — blocking THIS report's approval\n * on them would be over-gating.\n */\nexport function approveBlockers(site: WebsiteRow, report: ReportRow): PreflightFinding[] {\n  const findings: PreflightFinding[] = [];\n\n  const explicitTo = parseAddresses(site.reportRecipientsTo);\n  const fallbackTo = parseAddresses(site.pointOfContact);\n  const to = explicitTo ?? fallbackTo ?? [];\n  if (to.length === 0) {\n    findings.push({\n      level: \"fail\",\n      check: \"recipients-missing\",\n      message:\n        \"no recipients — Report recipients (To) and point of contact are both empty; the send will throw\",\n    });\n  }\n  for (const addr of to) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `recipient '${addr}' is malformed — fix Report recipients (To) / point of contact in Airtable`,\n      });\n    }\n  }\n  for (const addr of parseAddresses(site.reportRecipientsCc) ?? []) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `CC '${addr}' is malformed — fix Report recipients (CC) in Airtable`,\n      });\n    }\n  }\n  if (!site.headerImage) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-missing\",\n      message: \"no Header image on the Websites row — the send will throw\",\n    });\n  } else if (!site.headerImage.type.startsWith(\"image/\")) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-not-image\",\n      message: `Header image attachment is '${site.headerImage.type}' (${site.headerImage.filename}) — not a decodable image; the send throws in prepareHeaderImage`,\n    });\n  }\n  // sendOne throws on a null report.lighthouse (one blank/non-numeric cell nulls\n  // all four) — the REPORT's snapshot, not the Websites-row scores.\n  if (report.lighthouse === null) {\n    findings.push({\n      level: \"fail\",\n      check: \"report-scores-missing\",\n      message:\n        \"the Reports row has no Lighthouse scores (one blank/non-numeric cell nulls all four) — the send will throw\",\n    });\n  }\n  if (!isOperatorSite(site)) {\n    const operatorAddrs = to.filter((a) => OPERATOR_DOMAINS.includes(domainOf(a)));\n    if (operatorAddrs.length > 0 && operatorAddrs.length === to.length) {\n      findings.push({\n        level: \"warn\",\n        check: \"recipient-operator-address\",\n        message: `resolved To is ONLY operator address(es) ${operatorAddrs.join(\", \")} — the client will NOT receive this report`,\n      });\n    }\n  }\n  findings.push(...healthBlockers(report));\n  return findings;\n}\n\n/** Convenience: just the fail-level blockers, formatted for gate messages. */\nexport function formatBlockers(findings: PreflightFinding[]): string[] {\n  return findings.filter((f) => f.level === \"fail\").map((f) => `${f.check}: ${f.message}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA4BA,IAAM,mBAAmB,CAAC,iBAAiB,iBAAiB;AAK5D,IAAM,oBAAoB;AAE1B,SAAS,SAAS,MAAsB;AACtC,QAAM,KAAK,KAAK,YAAY,GAAG;AAC/B,SAAO,OAAO,KAAK,KAAK,KAAK,MAAM,KAAK,CAAC,EAAE,YAAY;AACzD;AAEA,SAAS,eAAe,MAA2B;AACjD,MAAI,CAAC,KAAK,IAAK,QAAO;AACtB,MAAI;AAEF,UAAM,OAAO,IAAI;AAAA,MACf,2BAA2B,KAAK,KAAK,GAAG,IAAI,KAAK,MAAM,WAAW,KAAK,GAAG;AAAA,IAC5E,EAAE,SAAS,YAAY;AACvB,WAAO,iBAAiB,KAAK,CAAC,MAAM,SAAS,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,SAAsB,MAAiC;AAC9E,QAAM,OAAO,QACV,OAAO,CAAC,MAAM,EAAE,eAAe,QAAQ,EAAE,WAAW,IAAI,EACxD,IAAI,CAAC,MAAM,EAAE,MAAO,EACpB,KAAK;AACR,SAAO,KAAK,KAAK,SAAS,CAAC,KAAK;AAClC;AAEA,SAAS,eACP,MACA,OACA,SACA,UACA,KACM;AAKN,QAAM,MAAM,UAAU,gBAAgB,KAAK,qBAAqB,KAAK;AACrE,QAAM,UAAU,UAAU,gBAAgB,KAAK,kBAAkB,KAAK;AACtE,MAAI,QAAQ,QAAQ,QAAQ,MAAM,YAAY,UAAU,IAAI,KAAK,MAAM,QAAQ;AAC7E,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,GAAG,KAAK,uBAAuB,GAAG;AAAA,IAC7C,CAAC;AACD;AAAA,EACF;AACA,MAAI,YAAY,OAAQ;AAExB,QAAM,SAAS,UAAU,gBAAgB,KAAK,iBAAiB,KAAK;AACpE,MAAI,CAAC,OAAQ;AAIb,QAAM,OAAmB,UAAU,gBAAgB,gBAAgB;AACnE,QAAM,WAAW,gBAAgB,SAAS,IAAI;AAC9C,MAAI,YAAY,IAAI,KAAK,QAAQ,EAAE,QAAQ,KAAK,IAAI,KAAK,MAAM,EAAE,QAAQ,EAAG;AAC5E,QAAM,WAAW,IAAI,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,QAAQ,KAAK;AAC/D,MAAI,UAAU,mBAAmB;AAC/B,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,GAAG,KAAK,kBAAkB,MAAM;AAAA,IAC3C,CAAC;AAAA,EACH;AACF;AAaO,SAAS,cACd,MACA,SACA,MACA,KACqB;AACrB,QAAM,WAA+B,CAAC;AAQtC,QAAM,mBACJ,SAAS,iBACL,OACA,SAAS,gBACP,KAAK,oBAAoB,SACzB,KAAK,gBAAgB;AAC7B,MAAI,CAAC,kBAAkB;AACrB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,MAAM,IAAI;AAAA,IACrB,CAAC;AAAA,EACH;AAGA,QAAM,aAAa,eAAe,KAAK,kBAAkB;AACzD,QAAM,aAAa,eAAe,KAAK,cAAc;AACrD,QAAM,KAAK,mBAAoB,cAAc,cAAc,CAAC,IAAK,CAAC;AAClE,MAAI,oBAAoB,GAAG,WAAW,GAAG;AACvC,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AACA,aAAW,QAAQ,IAAI;AACrB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,cAAc,IAAI;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,KAAK,mBAAoB,eAAe,KAAK,kBAAkB,KAAK,CAAC,IAAK,CAAC;AACjF,aAAW,QAAQ,IAAI;AACrB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,OAAO,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,CAAC,eAAe,IAAI,GAAG;AACzB,UAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,iBAAiB,SAAS,SAAS,CAAC,CAAC,CAAC;AAC7E,QAAI,cAAc,SAAS,GAAG;AAC5B,YAAM,cAAc,cAAc,WAAW,GAAG;AAChD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,cACL,4CAA4C,cAAc,KAAK,IAAI,CAAC,mFACpE,6CAA6C,cAAc,KAAK,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,oBAAoB,cAAc,YAAY;AAChD,UAAM,IAAI,CAAC,GAAG,UAAU,EACrB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,KAAK,EACL,KAAK,GAAG;AACX,UAAM,IAAI,CAAC,GAAG,UAAU,EACrB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,KAAK,EACL,KAAK,GAAG;AACX,QAAI,MAAM,GAAG;AACX,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,2BAA2B,WAAW,KAAK,IAAI,CAAC,iCAAiC,WAAW,KAAK,IAAI,CAAC;AAAA,MACjH,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,oBAAoB,CAAC,KAAK,aAAa;AACzC,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS;AAAA,IACX,CAAC;AAAA,EACH,WAAW,oBAAoB,KAAK,eAAe,CAAC,KAAK,YAAY,KAAK,WAAW,QAAQ,GAAG;AAC9F,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,+BAA+B,KAAK,YAAY,IAAI,MAAM,KAAK,YAAY,QAAQ;AAAA,IAC9F,CAAC;AAAA,EACH;AACA,QAAM,SAAS,CAAC,KAAK,QAAQ,KAAK,QAAQ,KAAK,SAAS,KAAK,QAAQ;AACrE,MAAI,oBAAoB,OAAO,KAAK,CAAC,MAAM,MAAM,IAAI,GAAG;AACtD,QAAI,SAAS,gBAAgB;AAE3B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SACE;AAAA,MACJ,CAAC;AAAA,IACH,OAAO;AAEL,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,SAAS,kBAAkB,KAAK,WAAW,eAAe;AAC5D,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,cAAc,KAAK,UAAU,SAAS;AAAA,IACjD,CAAC;AAAA,EACH;AAMA,QAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,IAAI;AACvE,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,gBAAgB,gBAAgB,GAAG;AACzC,UAAM,oBAAoB,CAAC,MACzB,SAAS,kBAAkB,EAAE,eAAe,QAAQ,EAAE,WAAW;AACnE,UAAM,WAAW,QAAQ,OAAO,iBAAiB;AACjD,UAAM,QAAQ,QAAQ,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACzD,QAAI,SAAS,SAAS,GAAG;AACvB,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,iBAAiB,IAAI,mBAAmB,SAAS,CAAC,EAAG,iBAAiB,kBAAkB,sBAAsB;AAAA,MACzH,CAAC;AAAA,IACH;AACA,QAAI,MAAM,SAAS,GAAG;AACpB,YAAM,UAAU,MACb;AAAA,QACC,CAAC,MACC,GAAG,EAAE,UAAU,IAAI,EAAE,UAAU,aAAa,GAAG,EAAE,iBAAiB,gBAAgB,EAAE;AAAA,MACxF,EACC,KAAK,IAAI;AACZ,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,GAAG,MAAM,MAAM,4BAA4B,OAAO;AAAA,MAC7D,CAAC;AAAA,IACH;AAAA,EACF;AAGA,iBAAe,MAAM,eAAe,SAAS,UAAU,GAAG;AAC1D,iBAAe,MAAM,WAAW,SAAS,UAAU,GAAG;AACtD,MAAI,SAAS,gBAAgB;AAC3B,UAAM,UAAU,gBAAgB,SAAS,aAAa,KAAK,gBAAgB,SAAS,SAAS;AAC7F,QAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,cAAc,CAAC,SAAS;AACxD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,KAAK,MAAM,SAAS;AACrC;AASO,SAAS,eAAe,OAAyC;AACtE,MAAI,MAAM,SAAS,EAAG,QAAO,CAAC;AAC9B,QAAM,WAA+B,CAAC;AACtC,QAAM,WAAW,CAAC,KAAiC,WAAyB;AAC1E,QAAI,MAAM,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,MAAM,EAAE,GAAG;AACxD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,IAAI,MAAM,qBAAqB,MAAM,MAAM;AAAA,MACtD,CAAC;AAAA,IACH;AAAA,EACF;AACA,WAAS,CAAC,MAAM,EAAE,gBAAgB,kBAAkB;AACpD,WAAS,CAAC,MAAM,EAAE,oBAAoB,kBAAkB;AACxD,WAAS,CAAC,MAAM,EAAE,aAAa,cAAc;AAE7C,QAAM,YAAY,oBAAI,IAAsB;AAC5C,aAAW,KAAK,OAAO;AACrB,UAAM,KAAK,eAAe,EAAE,kBAAkB,KAAK,eAAe,EAAE,cAAc,KAAK,CAAC;AACxF,eAAW,QAAQ,IAAI;AACrB,YAAM,MAAM,KAAK,YAAY;AAC7B,gBAAU,IAAI,KAAK,CAAC,GAAI,UAAU,IAAI,GAAG,KAAK,CAAC,GAAI,EAAE,IAAI,CAAC;AAAA,IAC5D;AAAA,EACF;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,WAAW;AACrC,QAAI,MAAM,SAAS,KAAK,CAAC,iBAAiB,SAAS,SAAS,IAAI,CAAC,GAAG;AAClE,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,GAAG,MAAM,KAAK,OAAO,CAAC,mCAAmC,IAAI;AAAA,MACxE,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AA0BA,eAAsB,UAAU,MAAgD;AAC9E,QAAM,OAAO,MAAM,QAAQ,SAAS,mBAAmB,CAAC;AACxD,QAAM,OAAmB,MAAM,QAAQ;AACvC,QAAM,MAAM,MAAM,OAAO,oBAAI,KAAK;AAElC,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,QAAM,WAAW,MAAM,OACnB,SAAS,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,KAAK,IAAK,CAAC,IAChE,SAAS,iBACP,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,aAAa,IACjD,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ,kBAAkB,IAAI,EAAE,MAAM,CAAC;AAEjF,QAAM,aAAa,SAAS,SAAS,IAAI,MAAM,eAAe,IAAI,IAAI,CAAC;AACvE,QAAM,UAAU,SAAS;AAAA,IAAI,CAAC,SAC5B;AAAA,MACE;AAAA,MACA,WAAW,OAAO,CAAC,MAAM,EAAE,WAAW,KAAK,EAAE;AAAA,MAC7C;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,OAAO,MAAM,OAAO,CAAC,IAAI,eAAe,QAAQ,EAAE;AACtE;AAYO,SAAS,eAAe,QAAuC;AACpE,MAAI,iBAAiB,MAAM,EAAG,QAAO,CAAC;AACtC,QAAM,WAA+B,CAAC;AACtC,aAAW,EAAE,OAAO,OAAO,KAAK,aAAa;AAAA,IAC3C,YAAY,OAAO;AAAA,IACnB,cAAc,OAAO,gBAAgB,CAAC;AAAA,EACxC,CAAC,GAAG;AACF,QAAI,WAAW,UAAU,WAAW,MAAO;AAG3C,UAAM,OAAO,OAAO,eAAe,KAAK,GAAG,QAAQ;AACnD,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE,WAAW,SACP,GAAG,KAAK,oBAAe,IAAI,KAC3B,GAAG,KAAK,oBAAoB,MAAM,YAAO,IAAI;AAAA,IACrD,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAgBO,SAAS,gBAAgB,MAAkB,QAAuC;AACvF,QAAM,WAA+B,CAAC;AAEtC,QAAM,aAAa,eAAe,KAAK,kBAAkB;AACzD,QAAM,aAAa,eAAe,KAAK,cAAc;AACrD,QAAM,KAAK,cAAc,cAAc,CAAC;AACxC,MAAI,GAAG,WAAW,GAAG;AACnB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AACA,aAAW,QAAQ,IAAI;AACrB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,cAAc,IAAI;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF;AACA,aAAW,QAAQ,eAAe,KAAK,kBAAkB,KAAK,CAAC,GAAG;AAChE,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,OAAO,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,CAAC,KAAK,aAAa;AACrB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS;AAAA,IACX,CAAC;AAAA,EACH,WAAW,CAAC,KAAK,YAAY,KAAK,WAAW,QAAQ,GAAG;AACtD,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,+BAA+B,KAAK,YAAY,IAAI,MAAM,KAAK,YAAY,QAAQ;AAAA,IAC9F,CAAC;AAAA,EACH;AAGA,MAAI,OAAO,eAAe,MAAM;AAC9B,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AACA,MAAI,CAAC,eAAe,IAAI,GAAG;AACzB,UAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,iBAAiB,SAAS,SAAS,CAAC,CAAC,CAAC;AAC7E,QAAI,cAAc,SAAS,KAAK,cAAc,WAAW,GAAG,QAAQ;AAClE,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,4CAA4C,cAAc,KAAK,IAAI,CAAC;AAAA,MAC/E,CAAC;AAAA,IACH;AAAA,EACF;AACA,WAAS,KAAK,GAAG,eAAe,MAAM,CAAC;AACvC,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/reports/preflight.ts"],"sourcesContent":["import { openBase, readAirtableConfig } from \"./airtable/client.js\";\nimport type { AirtableBase } from \"./airtable/client.js\";\nimport { listWebsites, siteSlug } from \"./airtable/websites.js\";\nimport type { WebsiteRow } from \"./airtable/websites.js\";\nimport { listAllReports } from \"./airtable/reports.js\";\nimport type { ReportRow } from \"./airtable/reports.js\";\nimport { parseAddresses, isProbablyEmail } from \"./send/orchestrate.js\";\nimport { ELIGIBLE_STATUSES, reportPeriodKey } from \"./due.js\";\nimport type { ReportType } from \"./types.js\";\nimport { gatingHealth, isSendOverridden } from \"./checklist.js\";\n\nexport type PreflightLevel = \"fail\" | \"warn\" | \"info\";\n\nexport type PreflightFinding = {\n  level: PreflightLevel;\n  /** Stable machine-readable check id, e.g. \"recipients-missing\". */\n  check: string;\n  message: string;\n};\n\nexport type PreflightSiteResult = {\n  site: string;\n  findings: PreflightFinding[];\n};\n\n/** Domains whose addresses are the OPERATOR's, not a client's. A client site whose\n *  resolved To contains one of these is almost always a test-send leftover — the\n *  exact misconfiguration that would silently divert a client announcement. */\nconst OPERATOR_DOMAINS = [\"reddoorla.com\", \"tuckerlemos.com\"];\n\n/** Anchors older than this, WHEN the anchor is actually the schedule's base date\n *  (no newer Sent-at — see nextDueDate's `lastSent ?? fallback`), mean the next\n *  `report --due` run drafts a surprise back-dated report. */\nconst STALE_ANCHOR_DAYS = 396; // ~13 months\n\nfunction domainOf(addr: string): string {\n  const at = addr.lastIndexOf(\"@\");\n  return at === -1 ? \"\" : addr.slice(at + 1).toLowerCase();\n}\n\nfunction isOperatorSite(site: WebsiteRow): boolean {\n  if (!site.url) return false;\n  try {\n    // Airtable `url` cells aren't guaranteed a scheme; retry with one before giving up.\n    const host = new URL(\n      /^[a-z][a-z0-9+.-]*:\\/\\//i.test(site.url) ? site.url : `https://${site.url}`,\n    ).hostname.toLowerCase();\n    return OPERATOR_DOMAINS.some((d) => host === d || host.endsWith(`.${d}`));\n  } catch {\n    return false;\n  }\n}\n\nfunction lastSentForType(reports: ReportRow[], type: ReportType): string | null {\n  const sent = reports\n    .filter((r) => r.reportType === type && r.sentAt !== null)\n    .map((r) => r.sentAt!)\n    .sort();\n  return sent[sent.length - 1] ?? null;\n}\n\nfunction checkFrequency(\n  site: WebsiteRow,\n  which: \"maintenance\" | \"testing\",\n  reports: ReportRow[],\n  findings: PreflightFinding[],\n  now: Date,\n): void {\n  // Validate the RAW Airtable cell, not the coerced Frequency: toFrequency trims\n  // whitespace (so \"Monthly \" schedules), then coerces any still-unrecognized value\n  // (typo, renamed option) to \"None\" with a console.warn. That warn only lands in\n  // logs — this finding is the structured, surfaced version of the same failure.\n  const raw = which === \"maintenance\" ? site.maintenanceFreqRaw : site.testingFreqRaw;\n  const coerced = which === \"maintenance\" ? site.maintenanceFreq : site.testingFreq;\n  if (raw !== null && raw !== \"\" && coerced === \"None\" && raw.trim() !== \"None\") {\n    findings.push({\n      level: \"fail\",\n      check: \"frequency-unrecognized\",\n      message: `${which} frequency cell is '${raw}' — not a recognized Monthly/Quarterly/Yearly/None (even after trimming), so the scheduler treats it as None and the site drops off the calendar; fix the Airtable value`,\n    });\n    return;\n  }\n  if (coerced === \"None\") return;\n\n  const anchor = which === \"maintenance\" ? site.maintenanceDay : site.testingDay;\n  if (!anchor) return;\n  // nextDueDate uses `lastSent ?? anchor`: once anything has been sent, the anchor\n  // is inert and an old one is normal on every healthy mature site — only warn when\n  // the anchor is genuinely the base date the scheduler would use.\n  const type: ReportType = which === \"maintenance\" ? \"Maintenance\" : \"Testing\";\n  const lastSent = lastSentForType(reports, type);\n  if (lastSent && new Date(lastSent).getTime() >= new Date(anchor).getTime()) return;\n  const ageDays = (now.getTime() - new Date(anchor).getTime()) / 86_400_000;\n  if (ageDays > STALE_ANCHOR_DAYS) {\n    findings.push({\n      level: \"warn\",\n      check: \"anchor-stale\",\n      message: `${which} day anchor is ${anchor} (>13 months old) and nothing newer has been sent — \\`report --due\\` will draft a back-dated overdue report; reset the anchor or clear the schedule`,\n    });\n  }\n}\n\n/**\n * Pure per-site preflight: every check that, left unfixed, makes a report send fail,\n * go to the wrong inbox, or surprise the operator. Read-only over data already\n * fetched; no Airtable handle, no network — trivially testable.\n *\n * Mirrors the send/draft-time validation (recipients + header image in\n * send/orchestrate.ts, Websites-row scores in draft.ts) so problems surface BEFORE\n * draft/approve instead of exploding at `report --send-ready`, and adds the checks\n * send time cannot do: operator-address leftovers, To-override shadowing,\n * pending-draft races, schedule hygiene against the RAW Airtable values.\n */\nexport function preflightSite(\n  site: WebsiteRow,\n  reports: ReportRow[],\n  type: ReportType,\n  now: Date,\n): PreflightSiteResult {\n  const findings: PreflightFinding[] = [];\n\n  // A site that isn't on the checked calendar never drafts, so its send\n  // requirements (recipients / header image / scores) can't hurt anyone —\n  // checking them anyway would drown the fleet run in fails for legacy hosting\n  // rows. Frequency hygiene and pending-draft checks still run: a typo'd cell\n  // is exactly HOW a site falls off the calendar, and an already-drafted report\n  // can still be approved + sent regardless of schedule.\n  const scheduledForType =\n    type === \"Announcement\"\n      ? true\n      : type === \"Maintenance\"\n        ? site.maintenanceFreq !== \"None\"\n        : site.testingFreq !== \"None\";\n  if (!scheduledForType) {\n    findings.push({\n      level: \"info\",\n      check: \"not-scheduled\",\n      message: `no ${type} schedule (frequency is None/blank) — send-requirement checks skipped; schedule + pending-draft checks still apply`,\n    });\n  }\n\n  // --- Recipients: same resolution order as the send path (To override, else contact).\n  const explicitTo = parseAddresses(site.reportRecipientsTo);\n  const fallbackTo = parseAddresses(site.pointOfContact);\n  const to = scheduledForType ? (explicitTo ?? fallbackTo ?? []) : [];\n  if (scheduledForType && to.length === 0) {\n    findings.push({\n      level: \"fail\",\n      check: \"recipients-missing\",\n      message:\n        \"no recipients — Report recipients (To) and point of contact are both empty; the send will throw\",\n    });\n  }\n  for (const addr of to) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `recipient '${addr}' is malformed — use bare addresses only in Report recipients (To) / point of contact`,\n      });\n    }\n  }\n  const cc = scheduledForType ? (parseAddresses(site.reportRecipientsCc) ?? []) : [];\n  for (const addr of cc) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `CC '${addr}' is malformed — fix Report recipients (CC)`,\n      });\n    }\n  }\n  if (!isOperatorSite(site)) {\n    const operatorAddrs = to.filter((a) => OPERATOR_DOMAINS.includes(domainOf(a)));\n    if (operatorAddrs.length > 0) {\n      const allOperator = operatorAddrs.length === to.length;\n      findings.push({\n        level: \"warn\",\n        check: \"recipient-operator-address\",\n        message: allOperator\n          ? `resolved To is ONLY operator address(es) ${operatorAddrs.join(\", \")} — probably a test-send leftover; the client will NOT receive this report`\n          : `resolved To includes operator address(es) ${operatorAddrs.join(\", \")} alongside the client's — confirm that's intentional (the ops inbox is already CC'd on every send)`,\n      });\n    }\n  }\n  if (scheduledForType && explicitTo && fallbackTo) {\n    const a = [...explicitTo]\n      .map((x) => x.toLowerCase())\n      .sort()\n      .join(\",\");\n    const b = [...fallbackTo]\n      .map((x) => x.toLowerCase())\n      .sort()\n      .join(\",\");\n    if (a !== b) {\n      findings.push({\n        level: \"info\",\n        check: \"to-override-shadows-contact\",\n        message: `Report recipients (To) [${explicitTo.join(\", \")}] overrides point of contact [${fallbackTo.join(\", \")}] — the contact won't receive this unless also listed`,\n      });\n    }\n  }\n\n  // --- Hard requirements of the draft/send paths, surfaced early.\n  if (scheduledForType && !site.headerImage) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-missing\",\n      message: \"no Header image on the Websites row — the send will throw\",\n    });\n  } else if (scheduledForType && site.headerImage && !site.headerImage.type.startsWith(\"image/\")) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-not-image\",\n      message: `Header image attachment is '${site.headerImage.type}' (${site.headerImage.filename}) — not a decodable image; the send throws in prepareHeaderImage`,\n    });\n  }\n  const scores = [site.pScore, site.rScore, site.bpScore, site.seoScore];\n  if (scheduledForType && scores.some((s) => s === null)) {\n    if (type === \"Announcement\") {\n      // announce() skips score-less sites (skipped-no-scores) rather than throwing.\n      findings.push({\n        level: \"warn\",\n        check: \"scores-missing\",\n        message:\n          \"Websites row is missing Lighthouse scores — `announce` will skip this site; run `audit lighthouse --write-airtable` first\",\n      });\n    } else {\n      // report <site> / report --due HARD-THROW here (scoresFromWebsite in draft.ts).\n      findings.push({\n        level: \"fail\",\n        check: \"scores-missing\",\n        message:\n          \"Websites row is missing Lighthouse scores — drafting will throw (scoresFromWebsite); run `audit lighthouse --write-airtable` first\",\n      });\n    }\n  }\n  if (type === \"Announcement\" && site.status !== \"maintained\") {\n    findings.push({\n      level: \"info\",\n      check: \"status-not-maintenance\",\n      message: `status is '${site.status ?? \"(blank)\"}' — \\`announce --all\\` only drafts for maintenance sites`,\n    });\n  }\n\n  // --- Pending drafts. For an Announcement these always race (the queue tier rule\n  // supersedes or blocks). For Maintenance/Testing, the CURRENT cycle's own draft\n  // sitting ready on send day IS the payload — that's the steady state, not a\n  // problem — so only genuinely stale/foreign drafts get the warn.\n  const pending = reports.filter((r) => r.draftReady && r.sentAt === null);\n  if (pending.length > 0) {\n    const currentPeriod = reportPeriodKey(now);\n    const isExpectedPayload = (r: ReportRow): boolean =>\n      type !== \"Announcement\" && r.reportType === type && r.period === currentPeriod;\n    const expected = pending.filter(isExpectedPayload);\n    const stale = pending.filter((r) => !isExpectedPayload(r));\n    if (expected.length > 0) {\n      findings.push({\n        level: \"info\",\n        check: \"pending-drafts\",\n        message: `current-cycle ${type} draft is queued${expected[0]!.approvedToSend ? \" and approved\" : \" (awaiting approval)\"} — this is the report \\`--send-ready\\` will deliver`,\n      });\n    }\n    if (stale.length > 0) {\n      const summary = stale\n        .map(\n          (r) =>\n            `${r.reportType} ${r.period ?? \"(no period)\"}${r.approvedToSend ? \" [APPROVED]\" : \"\"}`,\n        )\n        .join(\", \");\n      findings.push({\n        level: \"warn\",\n        check: \"pending-drafts\",\n        message: `${stale.length} unsent draft(s) queued: ${summary} — resolve before sending so the client doesn't get the wrong report first`,\n      });\n    }\n  }\n\n  // --- Schedule hygiene (validates the RAW Airtable frequency cells).\n  checkFrequency(site, \"maintenance\", reports, findings, now);\n  checkFrequency(site, \"testing\", reports, findings, now);\n  if (type === \"Announcement\") {\n    const anySent = lastSentForType(reports, \"Maintenance\") ?? lastSentForType(reports, \"Testing\");\n    if (!site.maintenanceDay && !site.testingDay && !anySent) {\n      findings.push({\n        level: \"info\",\n        check: \"anchor-missing\",\n        message:\n          \"no maintenance/testing day anchors and nothing ever sent — set both anchors to the announcement send date (the Sonder playbook) so recurrence starts from the announcement\",\n      });\n    }\n  }\n\n  return { site: site.name, findings };\n}\n\n/**\n * Fleet-level heuristics that need the whole selection. Airtable column renames\n * don't error — the mapper reads null forever (its own header comment admits this).\n * A load-bearing column empty on EVERY selected site is far more likely a rename\n * than N coincidences; say so. Likewise two different sites resolving to one\n * recipient is worth one eyeball (it can be legitimate — same owner, two sites).\n */\nexport function preflightFleet(sites: WebsiteRow[]): PreflightFinding[] {\n  if (sites.length < 3) return []; // too few rows to distinguish rename from data\n  const findings: PreflightFinding[] = [];\n  const allEmpty = (get: (s: WebsiteRow) => unknown, column: string): void => {\n    if (sites.every((s) => get(s) === null || get(s) === \"\")) {\n      findings.push({\n        level: \"warn\",\n        check: \"column-possibly-renamed\",\n        message: `'${column}' is empty on all ${sites.length} selected sites — if that column was renamed in Airtable the code reads null silently; verify the column name`,\n      });\n    }\n  };\n  allEmpty((s) => s.pointOfContact, \"point of contact\");\n  allEmpty((s) => s.maintenanceFreqRaw, \"maintenence freq\");\n  allEmpty((s) => s.headerImage, \"Header image\");\n\n  const byContact = new Map<string, string[]>();\n  for (const s of sites) {\n    const to = parseAddresses(s.reportRecipientsTo) ?? parseAddresses(s.pointOfContact) ?? [];\n    for (const addr of to) {\n      const key = addr.toLowerCase();\n      byContact.set(key, [...(byContact.get(key) ?? []), s.name]);\n    }\n  }\n  for (const [addr, names] of byContact) {\n    if (names.length > 1 && !OPERATOR_DOMAINS.includes(domainOf(addr))) {\n      findings.push({\n        level: \"info\",\n        check: \"duplicate-contact\",\n        message: `${names.join(\" and \")} resolve to the same recipient (${addr}) — fine if one person owns both; otherwise a copy-paste error on one row`,\n      });\n    }\n  }\n  return findings;\n}\n\nexport type PreflightDeps = {\n  /** Airtable handle. Defaults to opening the live base from credentials. */\n  base?: AirtableBase;\n  /** Slug of a single site (matched via siteSlug). Mutually exclusive with `all`. */\n  site?: string;\n  /** Fleet mode: for Announcement, maintenance-status sites (announce's own filter);\n   *  for Maintenance/Testing, everything `report --due` schedules — ELIGIBLE_STATUSES\n   *  plus null-status rows (due.ts treats null as active for legacy rows). */\n  all?: boolean;\n  type?: ReportType;\n  now?: Date;\n};\n\nexport type PreflightResult = {\n  results: PreflightSiteResult[];\n  fleet: PreflightFinding[];\n};\n\n/**\n * Read-only rollout preflight over the live Airtable base. One Websites fetch, one\n * Reports fetch (the --due path does the same for the same rate-limit reason), then\n * {@link preflightSite} per selected site plus {@link preflightFleet} across the\n * selection. NEVER writes and NEVER sends.\n */\nexport async function preflight(deps?: PreflightDeps): Promise<PreflightResult> {\n  const base = deps?.base ?? openBase(readAirtableConfig());\n  const type: ReportType = deps?.type ?? \"Announcement\";\n  const now = deps?.now ?? new Date();\n\n  const websites = await listWebsites(base);\n  const selected = deps?.site\n    ? websites.filter((w) => siteSlug(w.name) === siteSlug(deps.site!))\n    : type === \"Announcement\"\n      ? websites.filter((w) => w.status === \"maintained\")\n      : websites.filter((w) => w.status === null || ELIGIBLE_STATUSES.has(w.status));\n\n  const allReports = selected.length > 0 ? await listAllReports(base) : [];\n  const results = selected.map((site) =>\n    preflightSite(\n      site,\n      allReports.filter((r) => r.siteId === site.id),\n      type,\n      now,\n    ),\n  );\n  return { results, fleet: deps?.site ? [] : preflightFleet(selected) };\n}\n\n/**\n * Health-gate blockers for one report: every GATING field whose evidence is not `pass`/`n/a`\n * (i.e. `fail`, `unknown`, or absent) becomes a fail-level finding, keyed `health-gate`. PURE.\n * Folded into {@link approveBlockers} so health failures ride the existing send-blocked reason +\n * 409 + dashboard chip (the second gate — no third gate is added).\n *\n * A logged send-anyway override ({@link isSendOverridden}) suppresses these findings — but never\n * the REAL send blockers (recipients/header/scores), which are computed outside this function and\n * still gate an overridden send.\n */\nexport function healthBlockers(report: ReportRow): PreflightFinding[] {\n  if (isSendOverridden(report)) return [];\n  const findings: PreflightFinding[] = [];\n  for (const { field, status } of gatingHealth({\n    reportType: report.reportType,\n    autoEvidence: report.autoEvidence ?? {},\n  })) {\n    if (status === \"pass\" || status === \"n/a\") continue;\n    // `||`, not `??`: an explicit empty-string note (no message recorded) must\n    // also fall back to the placeholder, not render as a trailing blank.\n    const note = report.autoEvidence?.[field]?.note || \"no signal yet\";\n    findings.push({\n      level: \"fail\",\n      check: \"health-gate\",\n      message:\n        status === \"fail\"\n          ? `${field}: failing — ${note}`\n          : `${field}: not yet green (${status}) — ${note}`,\n    });\n  }\n  return findings;\n}\n\n/**\n * The send-blocking subset for ONE report, at approve time: exactly the\n * conditions that make `sendOne` throw (no recipients, malformed To/CC, no\n * header image, no report-level Lighthouse scores) plus the wrong-inbox warn\n * (operator address resolved as a client's To) plus every {@link healthBlockers}\n * finding (a gating checklist item whose auto-evidence isn't `pass`/`n/a` fails\n * the health gate). PURE — the approve gate, the dashboard's pending-row chip,\n * and the digest collector all call this one function so \"approvable\" can't\n * drift from \"sendable\".\n *\n * Deliberately narrower than {@link preflightSite}: schedule hygiene and\n * pending-draft races are fleet/site concerns — blocking THIS report's approval\n * on them would be over-gating.\n */\nexport function approveBlockers(site: WebsiteRow, report: ReportRow): PreflightFinding[] {\n  const findings: PreflightFinding[] = [];\n\n  const explicitTo = parseAddresses(site.reportRecipientsTo);\n  const fallbackTo = parseAddresses(site.pointOfContact);\n  const to = explicitTo ?? fallbackTo ?? [];\n  if (to.length === 0) {\n    findings.push({\n      level: \"fail\",\n      check: \"recipients-missing\",\n      message:\n        \"no recipients — Report recipients (To) and point of contact are both empty; the send will throw\",\n    });\n  }\n  for (const addr of to) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `recipient '${addr}' is malformed — fix Report recipients (To) / point of contact in Airtable`,\n      });\n    }\n  }\n  for (const addr of parseAddresses(site.reportRecipientsCc) ?? []) {\n    if (!isProbablyEmail(addr)) {\n      findings.push({\n        level: \"fail\",\n        check: \"recipients-malformed\",\n        message: `CC '${addr}' is malformed — fix Report recipients (CC) in Airtable`,\n      });\n    }\n  }\n  if (!site.headerImage) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-missing\",\n      message: \"no Header image on the Websites row — the send will throw\",\n    });\n  } else if (!site.headerImage.type.startsWith(\"image/\")) {\n    findings.push({\n      level: \"fail\",\n      check: \"header-image-not-image\",\n      message: `Header image attachment is '${site.headerImage.type}' (${site.headerImage.filename}) — not a decodable image; the send throws in prepareHeaderImage`,\n    });\n  }\n  // sendOne throws on a null report.lighthouse (one blank/non-numeric cell nulls\n  // all four) — the REPORT's snapshot, not the Websites-row scores.\n  if (report.lighthouse === null) {\n    findings.push({\n      level: \"fail\",\n      check: \"report-scores-missing\",\n      message:\n        \"the Reports row has no Lighthouse scores (one blank/non-numeric cell nulls all four) — the send will throw\",\n    });\n  }\n  if (!isOperatorSite(site)) {\n    const operatorAddrs = to.filter((a) => OPERATOR_DOMAINS.includes(domainOf(a)));\n    if (operatorAddrs.length > 0 && operatorAddrs.length === to.length) {\n      findings.push({\n        level: \"warn\",\n        check: \"recipient-operator-address\",\n        message: `resolved To is ONLY operator address(es) ${operatorAddrs.join(\", \")} — the client will NOT receive this report`,\n      });\n    }\n  }\n  findings.push(...healthBlockers(report));\n  return findings;\n}\n\n/** Convenience: just the fail-level blockers, formatted for gate messages. */\nexport function formatBlockers(findings: PreflightFinding[]): string[] {\n  return findings.filter((f) => f.level === \"fail\").map((f) => `${f.check}: ${f.message}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,IAAM,mBAAmB,CAAC,iBAAiB,iBAAiB;AAK5D,IAAM,oBAAoB;AAE1B,SAAS,SAAS,MAAsB;AACtC,QAAM,KAAK,KAAK,YAAY,GAAG;AAC/B,SAAO,OAAO,KAAK,KAAK,KAAK,MAAM,KAAK,CAAC,EAAE,YAAY;AACzD;AAEA,SAAS,eAAe,MAA2B;AACjD,MAAI,CAAC,KAAK,IAAK,QAAO;AACtB,MAAI;AAEF,UAAM,OAAO,IAAI;AAAA,MACf,2BAA2B,KAAK,KAAK,GAAG,IAAI,KAAK,MAAM,WAAW,KAAK,GAAG;AAAA,IAC5E,EAAE,SAAS,YAAY;AACvB,WAAO,iBAAiB,KAAK,CAAC,MAAM,SAAS,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,SAAsB,MAAiC;AAC9E,QAAM,OAAO,QACV,OAAO,CAAC,MAAM,EAAE,eAAe,QAAQ,EAAE,WAAW,IAAI,EACxD,IAAI,CAAC,MAAM,EAAE,MAAO,EACpB,KAAK;AACR,SAAO,KAAK,KAAK,SAAS,CAAC,KAAK;AAClC;AAEA,SAAS,eACP,MACA,OACA,SACA,UACA,KACM;AAKN,QAAM,MAAM,UAAU,gBAAgB,KAAK,qBAAqB,KAAK;AACrE,QAAM,UAAU,UAAU,gBAAgB,KAAK,kBAAkB,KAAK;AACtE,MAAI,QAAQ,QAAQ,QAAQ,MAAM,YAAY,UAAU,IAAI,KAAK,MAAM,QAAQ;AAC7E,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,GAAG,KAAK,uBAAuB,GAAG;AAAA,IAC7C,CAAC;AACD;AAAA,EACF;AACA,MAAI,YAAY,OAAQ;AAExB,QAAM,SAAS,UAAU,gBAAgB,KAAK,iBAAiB,KAAK;AACpE,MAAI,CAAC,OAAQ;AAIb,QAAM,OAAmB,UAAU,gBAAgB,gBAAgB;AACnE,QAAM,WAAW,gBAAgB,SAAS,IAAI;AAC9C,MAAI,YAAY,IAAI,KAAK,QAAQ,EAAE,QAAQ,KAAK,IAAI,KAAK,MAAM,EAAE,QAAQ,EAAG;AAC5E,QAAM,WAAW,IAAI,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,QAAQ,KAAK;AAC/D,MAAI,UAAU,mBAAmB;AAC/B,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,GAAG,KAAK,kBAAkB,MAAM;AAAA,IAC3C,CAAC;AAAA,EACH;AACF;AAaO,SAAS,cACd,MACA,SACA,MACA,KACqB;AACrB,QAAM,WAA+B,CAAC;AAQtC,QAAM,mBACJ,SAAS,iBACL,OACA,SAAS,gBACP,KAAK,oBAAoB,SACzB,KAAK,gBAAgB;AAC7B,MAAI,CAAC,kBAAkB;AACrB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,MAAM,IAAI;AAAA,IACrB,CAAC;AAAA,EACH;AAGA,QAAM,aAAa,eAAe,KAAK,kBAAkB;AACzD,QAAM,aAAa,eAAe,KAAK,cAAc;AACrD,QAAM,KAAK,mBAAoB,cAAc,cAAc,CAAC,IAAK,CAAC;AAClE,MAAI,oBAAoB,GAAG,WAAW,GAAG;AACvC,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AACA,aAAW,QAAQ,IAAI;AACrB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,cAAc,IAAI;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,KAAK,mBAAoB,eAAe,KAAK,kBAAkB,KAAK,CAAC,IAAK,CAAC;AACjF,aAAW,QAAQ,IAAI;AACrB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,OAAO,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,CAAC,eAAe,IAAI,GAAG;AACzB,UAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,iBAAiB,SAAS,SAAS,CAAC,CAAC,CAAC;AAC7E,QAAI,cAAc,SAAS,GAAG;AAC5B,YAAM,cAAc,cAAc,WAAW,GAAG;AAChD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,cACL,4CAA4C,cAAc,KAAK,IAAI,CAAC,mFACpE,6CAA6C,cAAc,KAAK,IAAI,CAAC;AAAA,MAC3E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,oBAAoB,cAAc,YAAY;AAChD,UAAM,IAAI,CAAC,GAAG,UAAU,EACrB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,KAAK,EACL,KAAK,GAAG;AACX,UAAM,IAAI,CAAC,GAAG,UAAU,EACrB,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,KAAK,EACL,KAAK,GAAG;AACX,QAAI,MAAM,GAAG;AACX,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,2BAA2B,WAAW,KAAK,IAAI,CAAC,iCAAiC,WAAW,KAAK,IAAI,CAAC;AAAA,MACjH,CAAC;AAAA,IACH;AAAA,EACF;AAGA,MAAI,oBAAoB,CAAC,KAAK,aAAa;AACzC,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS;AAAA,IACX,CAAC;AAAA,EACH,WAAW,oBAAoB,KAAK,eAAe,CAAC,KAAK,YAAY,KAAK,WAAW,QAAQ,GAAG;AAC9F,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,+BAA+B,KAAK,YAAY,IAAI,MAAM,KAAK,YAAY,QAAQ;AAAA,IAC9F,CAAC;AAAA,EACH;AACA,QAAM,SAAS,CAAC,KAAK,QAAQ,KAAK,QAAQ,KAAK,SAAS,KAAK,QAAQ;AACrE,MAAI,oBAAoB,OAAO,KAAK,CAAC,MAAM,MAAM,IAAI,GAAG;AACtD,QAAI,SAAS,gBAAgB;AAE3B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SACE;AAAA,MACJ,CAAC;AAAA,IACH,OAAO;AAEL,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,SAAS,kBAAkB,KAAK,WAAW,cAAc;AAC3D,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,cAAc,KAAK,UAAU,SAAS;AAAA,IACjD,CAAC;AAAA,EACH;AAMA,QAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,IAAI;AACvE,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,gBAAgB,gBAAgB,GAAG;AACzC,UAAM,oBAAoB,CAAC,MACzB,SAAS,kBAAkB,EAAE,eAAe,QAAQ,EAAE,WAAW;AACnE,UAAM,WAAW,QAAQ,OAAO,iBAAiB;AACjD,UAAM,QAAQ,QAAQ,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACzD,QAAI,SAAS,SAAS,GAAG;AACvB,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,iBAAiB,IAAI,mBAAmB,SAAS,CAAC,EAAG,iBAAiB,kBAAkB,sBAAsB;AAAA,MACzH,CAAC;AAAA,IACH;AACA,QAAI,MAAM,SAAS,GAAG;AACpB,YAAM,UAAU,MACb;AAAA,QACC,CAAC,MACC,GAAG,EAAE,UAAU,IAAI,EAAE,UAAU,aAAa,GAAG,EAAE,iBAAiB,gBAAgB,EAAE;AAAA,MACxF,EACC,KAAK,IAAI;AACZ,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,GAAG,MAAM,MAAM,4BAA4B,OAAO;AAAA,MAC7D,CAAC;AAAA,IACH;AAAA,EACF;AAGA,iBAAe,MAAM,eAAe,SAAS,UAAU,GAAG;AAC1D,iBAAe,MAAM,WAAW,SAAS,UAAU,GAAG;AACtD,MAAI,SAAS,gBAAgB;AAC3B,UAAM,UAAU,gBAAgB,SAAS,aAAa,KAAK,gBAAgB,SAAS,SAAS;AAC7F,QAAI,CAAC,KAAK,kBAAkB,CAAC,KAAK,cAAc,CAAC,SAAS;AACxD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SACE;AAAA,MACJ,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,KAAK,MAAM,SAAS;AACrC;AASO,SAAS,eAAe,OAAyC;AACtE,MAAI,MAAM,SAAS,EAAG,QAAO,CAAC;AAC9B,QAAM,WAA+B,CAAC;AACtC,QAAM,WAAW,CAAC,KAAiC,WAAyB;AAC1E,QAAI,MAAM,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,MAAM,EAAE,GAAG;AACxD,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,IAAI,MAAM,qBAAqB,MAAM,MAAM;AAAA,MACtD,CAAC;AAAA,IACH;AAAA,EACF;AACA,WAAS,CAAC,MAAM,EAAE,gBAAgB,kBAAkB;AACpD,WAAS,CAAC,MAAM,EAAE,oBAAoB,kBAAkB;AACxD,WAAS,CAAC,MAAM,EAAE,aAAa,cAAc;AAE7C,QAAM,YAAY,oBAAI,IAAsB;AAC5C,aAAW,KAAK,OAAO;AACrB,UAAM,KAAK,eAAe,EAAE,kBAAkB,KAAK,eAAe,EAAE,cAAc,KAAK,CAAC;AACxF,eAAW,QAAQ,IAAI;AACrB,YAAM,MAAM,KAAK,YAAY;AAC7B,gBAAU,IAAI,KAAK,CAAC,GAAI,UAAU,IAAI,GAAG,KAAK,CAAC,GAAI,EAAE,IAAI,CAAC;AAAA,IAC5D;AAAA,EACF;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,WAAW;AACrC,QAAI,MAAM,SAAS,KAAK,CAAC,iBAAiB,SAAS,SAAS,IAAI,CAAC,GAAG;AAClE,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,GAAG,MAAM,KAAK,OAAO,CAAC,mCAAmC,IAAI;AAAA,MACxE,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AA0BA,eAAsB,UAAU,MAAgD;AAC9E,QAAM,OAAO,MAAM,QAAQ,SAAS,mBAAmB,CAAC;AACxD,QAAM,OAAmB,MAAM,QAAQ;AACvC,QAAM,MAAM,MAAM,OAAO,oBAAI,KAAK;AAElC,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,QAAM,WAAW,MAAM,OACnB,SAAS,OAAO,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,KAAK,IAAK,CAAC,IAChE,SAAS,iBACP,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,YAAY,IAChD,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ,kBAAkB,IAAI,EAAE,MAAM,CAAC;AAEjF,QAAM,aAAa,SAAS,SAAS,IAAI,MAAM,eAAe,IAAI,IAAI,CAAC;AACvE,QAAM,UAAU,SAAS;AAAA,IAAI,CAAC,SAC5B;AAAA,MACE;AAAA,MACA,WAAW,OAAO,CAAC,MAAM,EAAE,WAAW,KAAK,EAAE;AAAA,MAC7C;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,OAAO,MAAM,OAAO,CAAC,IAAI,eAAe,QAAQ,EAAE;AACtE;AAYO,SAAS,eAAe,QAAuC;AACpE,MAAI,iBAAiB,MAAM,EAAG,QAAO,CAAC;AACtC,QAAM,WAA+B,CAAC;AACtC,aAAW,EAAE,OAAO,OAAO,KAAK,aAAa;AAAA,IAC3C,YAAY,OAAO;AAAA,IACnB,cAAc,OAAO,gBAAgB,CAAC;AAAA,EACxC,CAAC,GAAG;AACF,QAAI,WAAW,UAAU,WAAW,MAAO;AAG3C,UAAM,OAAO,OAAO,eAAe,KAAK,GAAG,QAAQ;AACnD,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE,WAAW,SACP,GAAG,KAAK,oBAAe,IAAI,KAC3B,GAAG,KAAK,oBAAoB,MAAM,YAAO,IAAI;AAAA,IACrD,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAgBO,SAAS,gBAAgB,MAAkB,QAAuC;AACvF,QAAM,WAA+B,CAAC;AAEtC,QAAM,aAAa,eAAe,KAAK,kBAAkB;AACzD,QAAM,aAAa,eAAe,KAAK,cAAc;AACrD,QAAM,KAAK,cAAc,cAAc,CAAC;AACxC,MAAI,GAAG,WAAW,GAAG;AACnB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AACA,aAAW,QAAQ,IAAI;AACrB,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,cAAc,IAAI;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,EACF;AACA,aAAW,QAAQ,eAAe,KAAK,kBAAkB,KAAK,CAAC,GAAG;AAChE,QAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,OAAO,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,CAAC,KAAK,aAAa;AACrB,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS;AAAA,IACX,CAAC;AAAA,EACH,WAAW,CAAC,KAAK,YAAY,KAAK,WAAW,QAAQ,GAAG;AACtD,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SAAS,+BAA+B,KAAK,YAAY,IAAI,MAAM,KAAK,YAAY,QAAQ;AAAA,IAC9F,CAAC;AAAA,EACH;AAGA,MAAI,OAAO,eAAe,MAAM;AAC9B,aAAS,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AACA,MAAI,CAAC,eAAe,IAAI,GAAG;AACzB,UAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,iBAAiB,SAAS,SAAS,CAAC,CAAC,CAAC;AAC7E,QAAI,cAAc,SAAS,KAAK,cAAc,WAAW,GAAG,QAAQ;AAClE,eAAS,KAAK;AAAA,QACZ,OAAO;AAAA,QACP,OAAO;AAAA,QACP,SAAS,4CAA4C,cAAc,KAAK,IAAI,CAAC;AAAA,MAC/E,CAAC;AAAA,IACH;AAAA,EACF;AACA,WAAS,KAAK,GAAG,eAAe,MAAM,CAAC;AACvC,SAAO;AACT;","names":[]}

package/dist/{chunk-WYYQK4D3.js → chunk-TD2NNXLZ.js}

@@ -1,27 +1,27 @@
+import {
+  healthEndpoint
+} from "./chunk-BQRFQSGY.js";
+import {
+  smokeSuite
+} from "./chunk-Y53WOQIJ.js";
 import {
   onboard
-} from "./chunk-UYCAF77E.js";
+} from "./chunk-7RJ2HMMJ.js";
 import {
   convertToPnpm
-} from "./chunk-RJB3QUSP.js";
+} from "./chunk-XIDUYLSR.js";
 import {
   svelteCodemods
-} from "./chunk-LS6QPANO.js";
-import {
-  healthEndpoint
-} from "./chunk-R6FPFMOS.js";
-import {
-  smokeSuite
-} from "./chunk-S56JQJ4F.js";
+} from "./chunk-IYSEC543.js";
 import {
   syncConfigs
-} from "./chunk-Q276MZ7E.js";
+} from "./chunk-7UAYMAKR.js";
 import {
   withRecipe
-} from "./chunk-ZTPPCHDB.js";
+} from "./chunk-3G25KIWW.js";
 import {
   runAudits
-} from "./chunk-DTTIFYAM.js";
+} from "./chunk-3JQ2FO3D.js";
 import {
   siteLabel
 } from "./chunk-XXTZBPUY.js";
@@ -143,4 +143,4 @@ export {
   DEFAULT_INIT_STEPS,
   init
 };
-//# sourceMappingURL=chunk-WYYQK4D3.js.map
+//# sourceMappingURL=chunk-TD2NNXLZ.js.map

package/dist/{chunk-ZMIPG6TR.js → chunk-TVL5MVUF.js}

@@ -1,9 +1,9 @@
-import {
-  defaultSpawn
-} from "./chunk-4DHQCN5H.js";
 import {
   sameOwnerRepo
 } from "./chunk-XTK5VIQB.js";
+import {
+  defaultSpawn
+} from "./chunk-LBYOLBW7.js";
 
 // src/cli/fleet/clone-if-needed.ts
 import { stat, readdir, mkdir } from "fs/promises";
@@ -150,4 +150,4 @@ export {
   appendSkipNotice,
   fleetWorkdir
 };
-//# sourceMappingURL=chunk-ZMIPG6TR.js.map
+//# sourceMappingURL=chunk-TVL5MVUF.js.map

package/dist/chunk-UDRHAQT7.js

@@ -0,0 +1,172 @@
+import {
+  findFreePort
+} from "./chunk-PTDMVGKL.js";
+import {
+  defaultSpawn,
+  isSpawnTimeout
+} from "./chunk-LBYOLBW7.js";
+import {
+  siteLabel
+} from "./chunk-XXTZBPUY.js";
+
+// src/audits/smoke.ts
+import { access, readFile } from "fs/promises";
+import { join } from "path";
+var SMOKE_TIMEOUT_MS = 15 * 6e4;
+var SMOKE_UNMEASURED_PREFIX = "smoke: NOT MEASURED";
+function isUnmeasuredSmoke(result) {
+  return result.audit === "smoke" && result.summary.startsWith(SMOKE_UNMEASURED_PREFIX);
+}
+function formatUnmeasuredSmokeSummary(results) {
+  const unmeasured = results.filter(isUnmeasuredSmoke).map((r) => r.site);
+  let out = "";
+  if (unmeasured.length > 0) {
+    out += `\u26A0 ${unmeasured.length} site(s) never measured: ${unmeasured.join("; ")}
+`;
+  }
+  out += `FLEET_SMOKE_UNMEASURED count=${unmeasured.length} sites=${unmeasured.join(",")}`;
+  return out;
+}
+var ANSI = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
+function summarizeSmokeFailure(stdout, stderr) {
+  const lines = stdout.replace(ANSI, "").split("\n").map((l) => l.trim());
+  const failing = [];
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    if (line === void 0) continue;
+    if (/^\d+\)\s/.test(line)) {
+      failing.push(line);
+      let taken = 0;
+      for (let j = i + 1; j < lines.length && taken < 3; j++) {
+        const next = lines[j];
+        if (!next) continue;
+        if (/^\d+\)\s/.test(next)) break;
+        failing.push(next);
+        taken++;
+      }
+      break;
+    }
+  }
+  const tally = lines.find((l) => l !== void 0 && /\b\d+\s+failed\b/.test(l));
+  const distilled = [tally, ...failing].filter(Boolean).join(" | ");
+  if (distilled) return distilled.slice(0, 300);
+  const err = stderr.replace(ANSI, "").trim();
+  return err ? err.slice(0, 200) : "no reporter output";
+}
+async function hasTestSmokeScript(sitePath) {
+  try {
+    const raw = await readFile(join(sitePath, "package.json"), "utf-8");
+    const pkg = JSON.parse(raw);
+    return typeof pkg.scripts?.["test:smoke"] === "string";
+  } catch {
+    return false;
+  }
+}
+async function hasNodeModules(sitePath) {
+  try {
+    await access(join(sitePath, "node_modules"));
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function smokeAudit(ctx) {
+  const spawn = ctx.spawn ?? defaultSpawn;
+  const site = ctx.site;
+  const label = siteLabel(site);
+  const now = ctx.now ?? /* @__PURE__ */ new Date();
+  const checkedAt = now.toISOString();
+  if (!await hasTestSmokeScript(site.path)) {
+    return {
+      audit: "smoke",
+      site: label,
+      status: "skip",
+      summary: "no test:smoke script"
+    };
+  }
+  if (!await hasNodeModules(site.path)) {
+    let install;
+    try {
+      install = await spawn("pnpm", ["install", "--frozen-lockfile"], {
+        cwd: site.path,
+        timeoutMs: 5 * 6e4
+      });
+    } catch (err) {
+      const e = err;
+      if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
+        return { audit: "smoke", site: label, status: "skip", summary: "pnpm not available" };
+      }
+      throw err;
+    }
+    if (install.code !== 0) {
+      const retry = await spawn("pnpm", ["install"], { cwd: site.path, timeoutMs: 5 * 6e4 });
+      if (retry.code !== 0) {
+        return {
+          audit: "smoke",
+          site: label,
+          status: "skip",
+          summary: `smoke: pnpm install failed (exit ${retry.code}) \u2014 deps unavailable`
+        };
+      }
+    }
+  }
+  try {
+    await spawn("pnpm", ["exec", "svelte-kit", "sync"], {
+      cwd: site.path,
+      timeoutMs: 6e4
+    });
+  } catch {
+  }
+  const port = await findFreePort();
+  let raw;
+  try {
+    raw = await spawn("pnpm", ["test:smoke"], {
+      cwd: site.path,
+      env: { ...process.env, REDDOOR_SMOKE_PORT: String(port) },
+      // Playwright on a cold tree installs chromium, boots the site's dev server,
+      // and runs the smoke specs — the shared 30s default starves it (mirrors a11y).
+      timeoutMs: SMOKE_TIMEOUT_MS
+    });
+  } catch (err) {
+    const e = err;
+    if (e.code === "ENOENT" || /ENOENT/.test(String(err))) {
+      return { audit: "smoke", site: label, status: "skip", summary: "pnpm not available" };
+    }
+    if (isSpawnTimeout(err)) {
+      const minutes = Math.round(SMOKE_TIMEOUT_MS / 6e4);
+      return {
+        audit: "smoke",
+        site: label,
+        status: "fail",
+        summary: `${SMOKE_UNMEASURED_PREFIX} \u2014 \`pnpm test:smoke\` exceeded its ${minutes}m budget; no verdict, prior Airtable value preserved`
+      };
+    }
+    throw err;
+  }
+  if (raw.code === 0) {
+    return {
+      audit: "smoke",
+      site: label,
+      status: "pass",
+      summary: "smoke: suite green",
+      details: { ok: "pass", checkedAt }
+    };
+  }
+  return {
+    audit: "smoke",
+    site: label,
+    status: "fail",
+    summary: `smoke: suite failed (exit ${raw.code}) \u2014 ${summarizeSmokeFailure(raw.stdout, raw.stderr)}`,
+    details: { ok: "fail", checkedAt }
+  };
+}
+
+export {
+  SMOKE_TIMEOUT_MS,
+  SMOKE_UNMEASURED_PREFIX,
+  isUnmeasuredSmoke,
+  formatUnmeasuredSmokeSummary,
+  summarizeSmokeFailure,
+  smokeAudit
+};
+//# sourceMappingURL=chunk-UDRHAQT7.js.map

package/dist/chunk-UDRHAQT7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/audits/smoke.ts"],"sourcesContent":["import { access, readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport type { AuditResult } from \"../types.js\";\nimport type { AuditContext } from \"./util/inject.js\";\nimport { defaultSpawn, isSpawnTimeout } from \"./util/spawn.js\";\nimport { siteLabel } from \"../util/site.js\";\nimport { findFreePort } from \"../util/free-port.js\";\n\n/** Persisted smoke verdict: the site's own `test:smoke` suite passed or failed. */\nexport type SmokeDetails = { ok: \"pass\" | \"fail\"; checkedAt: string };\n\n/** Wall-clock budget for a site's own `test:smoke` run.\n *\n *  Measured, not guessed. reddoor-website's `Smoke test` step takes **4m57s** on a\n *  2-core GitHub runner with chromium already installed and `node_modules` warm\n *  (run 32413378638, 2026-08-20). The old budget was 5m00s — three seconds of\n *  headroom — and the fleet path is strictly heavier than that step: the site's\n *  `test:smoke` is `playwright install chromium && playwright test`, so the browser\n *  install lands INSIDE this budget, on a fresh clone, after `svelte-kit sync`.\n *\n *  So the budget was already effectively negative, and the medtech release (#133)\n *  pushed the suite past it: reddoor was killed at 5m03s and beachfront-dentistry\n *  at 5m04s — both the wall, not their suites.\n *\n *  15 minutes is ~3x the measured suite, leaving room for a site to grow a quarter's\n *  worth of specs before anyone has to think about this again, while still killing a\n *  genuinely wedged run far inside fleet-smoke.yml's 90-minute step backstop. */\nexport const SMOKE_TIMEOUT_MS = 15 * 60_000;\n\n/** Summary prefix for a smoke run that produced no verdict at all.\n *\n *  A timeout is NOT a failing suite — it means the measurement never happened. The\n *  two must stay distinguishable: a failing suite is a finding about the site, an\n *  unmeasured one is a finding about this audit. Exported so the CI summary keys on\n *  the same constant the audit stamps, instead of re-describing it in a grep that\n *  can drift out of sync. */\nexport const SMOKE_UNMEASURED_PREFIX = \"smoke: NOT MEASURED\";\n\n/** True when a smoke audit never reached a verdict (timed out mid-suite).\n *\n *  Deliberately distinct from {@link hasSmokeResult}: an unmeasured run carries no\n *  `details`, so the Airtable writer already preserves the prior verdict rather than\n *  recording a false fail. That is correct — and it is also why nothing surfaced it.\n *  This predicate is what makes it visible to CI. */\nexport function isUnmeasuredSmoke(result: { audit: string; summary: string }): boolean {\n  return result.audit === \"smoke\" && result.summary.startsWith(SMOKE_UNMEASURED_PREFIX);\n}\n\n/** Render the \"did every site actually get measured?\" line for CI.\n *\n *  Emits `FLEET_SMOKE_UNMEASURED count=N sites=a,b` on EVERY run, count=0 included —\n *  deliberately, and for the same reason `FLEET_WRITE_SUMMARY` does. A gate that only\n *  prints on failure cannot be told apart from a gate that never ran, so the workflow\n *  treats an ABSENT line as a crash and a `count=0` line as a proven-clean sweep. That\n *  distinction is the whole point: this alarm exists because the previous one was\n *  structurally incapable of firing, and an alarm nobody has seen pass is not evidence.\n *\n *  Only `smoke` results are considered; other audits in the same pool are ignored. */\nexport function formatUnmeasuredSmokeSummary(\n  results: ReadonlyArray<{ audit: string; site: string; summary: string }>,\n): string {\n  const unmeasured = results.filter(isUnmeasuredSmoke).map((r) => r.site);\n  let out = \"\";\n  if (unmeasured.length > 0) {\n    out += `⚠ ${unmeasured.length} site(s) never measured: ${unmeasured.join(\"; \")}\\n`;\n  }\n  out += `FLEET_SMOKE_UNMEASURED count=${unmeasured.length} sites=${unmeasured.join(\",\")}`;\n  return out;\n}\n\n// ESC built from a char code so the regex source carries no literal control\n// char (keeps `no-control-regex` quiet). Matches the SGR color codes Playwright emits.\nconst ANSI = new RegExp(`${String.fromCharCode(27)}\\\\[[0-9;]*m`, \"g\");\n\n/**\n * Distill the actionable failure out of a Playwright run. The list reporter writes\n * its failing-test list — \"N) [chromium] › file:line › title\" followed by the\n * Error/Expected/Received head — plus an \"N failed\" tally to STDOUT; STDERR only\n * carries dev-server/npm noise (e.g. `[WebServer] npm warn …`). So summarize stdout\n * first (which test, and why) and fall back to stderr only when stdout yielded\n * nothing useful (a crash before the reporter ran). Capped so a runaway report\n * can't bloat the CLI/Airtable summary.\n */\nexport function summarizeSmokeFailure(stdout: string, stderr: string): string {\n  const lines = stdout\n    .replace(ANSI, \"\")\n    .split(\"\\n\")\n    .map((l) => l.trim());\n  const failing: string[] = [];\n  for (let i = 0; i < lines.length; i++) {\n    const line = lines[i];\n    if (line === undefined) continue;\n    // The list reporter numbers each failing test: \"1) [chromium] › file › title\".\n    if (/^\\d+\\)\\s/.test(line)) {\n      failing.push(line);\n      // Grab the next 3 NON-BLANK lines — the Error:/Expected:/Received: head.\n      // Skip blanks without spending the budget, and stop at the next failing block.\n      let taken = 0;\n      for (let j = i + 1; j < lines.length && taken < 3; j++) {\n        const next = lines[j];\n        if (!next) continue;\n        if (/^\\d+\\)\\s/.test(next)) break;\n        failing.push(next);\n        taken++;\n      }\n      break;\n    }\n  }\n  const tally = lines.find((l) => l !== undefined && /\\b\\d+\\s+failed\\b/.test(l));\n  const distilled = [tally, ...failing].filter(Boolean).join(\" | \");\n  if (distilled) return distilled.slice(0, 300);\n  const err = stderr.replace(ANSI, \"\").trim();\n  return err ? err.slice(0, 200) : \"no reporter output\";\n}\n\n/**\n * R3.2: a site whose `package.json` has no `test:smoke` script (or no\n * `package.json` at all) has simply not adopted the suite yet — treat both\n * the same as \"can't tell\", NOT as a failure. Read BEFORE spawning so a\n * not-yet-adopted site never pays a real `pnpm` invocation.\n */\nasync function hasTestSmokeScript(sitePath: string): Promise<boolean> {\n  try {\n    const raw = await readFile(join(sitePath, \"package.json\"), \"utf-8\");\n    const pkg = JSON.parse(raw) as { scripts?: Record<string, string> };\n    return typeof pkg.scripts?.[\"test:smoke\"] === \"string\";\n  } catch {\n    return false;\n  }\n}\n\nasync function hasNodeModules(sitePath: string): Promise<boolean> {\n  try {\n    await access(join(sitePath, \"node_modules\"));\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Run a site's own `pnpm test:smoke` suite in its checkout and reduce the exit\n * code to a verdict. Clone-based: the CLI (`prepareFleetSites`) has already put a\n * real checkout at `site.path` (smoke is NOT in CHECKOUT_FREE_AUDITS). Reuses the\n * a11y harness treatment: a {@link SMOKE_TIMEOUT_MS} budget (Playwright cold-boots the\n * dev server + installs chromium) and a freshly-allocated free port passed as REDDOOR_SMOKE_PORT\n * so the site's smoke playwright config can bind `--port <n> --strictPort` and stay\n * immune to a zombie-vite squatting 5173 (see free-port.ts).\n *\n * A site that hasn't adopted `test:smoke` yet (no script, or no package.json) →\n * skip (R3.2), same bucket as `pnpm` itself being unavailable. exit 0 → pass;\n * non-zero → fail (only reached once the suite is known to exist). A skip never\n * carries details, so the Airtable writer preserves the prior verdict.\n *\n * A suite that exceeds the budget is a THIRD outcome: it produced no verdict at all,\n * so it is reported as {@link SMOKE_UNMEASURED_PREFIX} and likewise carries no details.\n * That keeps Airtable on the prior value (right — nothing was learned) while letting\n * fleet-smoke.yml red the run, which is what the write-back gate alone cannot do.\n */\nexport async function smokeAudit(ctx: AuditContext): Promise<AuditResult> {\n  const spawn = ctx.spawn ?? defaultSpawn;\n  const site = ctx.site;\n  const label = siteLabel(site);\n  const now = ctx.now ?? new Date();\n  const checkedAt = now.toISOString();\n\n  if (!(await hasTestSmokeScript(site.path))) {\n    return {\n      audit: \"smoke\",\n      site: label,\n      status: \"skip\",\n      summary: \"no test:smoke script\",\n    };\n  }\n\n  // The nightly fleet producer runs against FRESH clones (cloneIfNeeded does a\n  // bare `git clone`, no install), so the site's own playwright/vite aren't on\n  // PATH yet — without this, `pnpm test:smoke` exits non-zero and we'd persist a\n  // FALSE Smoke OK=fail. Install only when node_modules is absent (a local\n  // already-installed checkout is untouched). Any install failure → skip (NO\n  // details), so the Airtable writer preserves the prior verdict rather than\n  // recording a false fail. Mirrors deps-outdated.ts.\n  if (!(await hasNodeModules(site.path))) {\n    let install;\n    try {\n      install = await spawn(\"pnpm\", [\"install\", \"--frozen-lockfile\"], {\n        cwd: site.path,\n        timeoutMs: 5 * 60_000,\n      });\n    } catch (err) {\n      const e = err as NodeJS.ErrnoException;\n      if (e.code === \"ENOENT\" || /ENOENT/.test(String(err))) {\n        return { audit: \"smoke\", site: label, status: \"skip\", summary: \"pnpm not available\" };\n      }\n      throw err;\n    }\n    if (install.code !== 0) {\n      // Lockfile drift shouldn't red a site — retry unfrozen once (the clone is\n      // ephemeral, so a rewritten lockfile is harmless). Still failing → skip.\n      const retry = await spawn(\"pnpm\", [\"install\"], { cwd: site.path, timeoutMs: 5 * 60_000 });\n      if (retry.code !== 0) {\n        return {\n          audit: \"smoke\",\n          site: label,\n          status: \"skip\",\n          summary: `smoke: pnpm install failed (exit ${retry.code}) — deps unavailable`,\n        };\n      }\n    }\n  }\n\n  // `playwright.config.ts` resolves `tsconfig.json`, which extends the GENERATED\n  // `./.svelte-kit/tsconfig.json`. A fresh clone has no such file, and no fleet\n  // repo carries a `prepare` script to write one, so Playwright aborted while\n  // loading its own config — before a single test ran:\n  //\n  //   Error: Failed to load tsconfig file at <site>/tsconfig.json:\n  //   Failed to resolve \"extends\" path \"./.svelte-kit/tsconfig.json\"\n  //\n  // That silently failed 9 of 11 live sites (found 2026-07-31). It stayed hidden\n  // because fleet-smoke.yml gates on FLEET_WRITE_SUMMARY, which counts rows\n  // WRITTEN, not rows passing — a failing site is still written, so the workflow\n  // reported success.\n  //\n  // Fixing it here rather than per-repo: one change covers every site, and\n  // AUTONOMY.md makes multi-repo mutations a human-reviewed operation. `sync` is\n  // idempotent and fast, so run it unconditionally instead of probing for the\n  // file. Best-effort by design — a non-SvelteKit site or a missing binary must\n  // never downgrade a working suite; let the suite itself be the verdict.\n  try {\n    await spawn(\"pnpm\", [\"exec\", \"svelte-kit\", \"sync\"], {\n      cwd: site.path,\n      timeoutMs: 60_000,\n    });\n  } catch {\n    // ENOENT (no pnpm) or a spawn failure — the `test:smoke` call below reports\n    // the real outcome, including its own ENOENT skip.\n  }\n\n  const port = await findFreePort();\n\n  let raw;\n  try {\n    raw = await spawn(\"pnpm\", [\"test:smoke\"], {\n      cwd: site.path,\n      env: { ...process.env, REDDOOR_SMOKE_PORT: String(port) },\n      // Playwright on a cold tree installs chromium, boots the site's dev server,\n      // and runs the smoke specs — the shared 30s default starves it (mirrors a11y).\n      timeoutMs: SMOKE_TIMEOUT_MS,\n    });\n  } catch (err) {\n    const e = err as NodeJS.ErrnoException;\n    if (e.code === \"ENOENT\" || /ENOENT/.test(String(err))) {\n      return { audit: \"smoke\", site: label, status: \"skip\", summary: \"pnpm not available\" };\n    }\n    // A timeout is not a verdict. Rethrowing sent it to runOneAudit's catch-all,\n    // which stringified it into `smoke: unexpected error — Error: spawn timeout…`:\n    // technically a `fail`, carrying no details, so Airtable correctly preserved the\n    // prior verdict — and therefore kept showing GREEN for a site that had not been\n    // measured in days, while the workflow (gated on write-back) exited 0. Name it\n    // instead, and leave `details` unset so the write-back behavior is unchanged.\n    if (isSpawnTimeout(err)) {\n      const minutes = Math.round(SMOKE_TIMEOUT_MS / 60_000);\n      return {\n        audit: \"smoke\",\n        site: label,\n        status: \"fail\",\n        summary: `${SMOKE_UNMEASURED_PREFIX} — \\`pnpm test:smoke\\` exceeded its ${minutes}m budget; no verdict, prior Airtable value preserved`,\n      };\n    }\n    throw err;\n  }\n\n  if (raw.code === 0) {\n    return {\n      audit: \"smoke\",\n      site: label,\n      status: \"pass\",\n      summary: \"smoke: suite green\",\n      details: { ok: \"pass\", checkedAt } satisfies SmokeDetails,\n    };\n  }\n  return {\n    audit: \"smoke\",\n    site: label,\n    status: \"fail\",\n    summary: `smoke: suite failed (exit ${raw.code}) — ${summarizeSmokeFailure(raw.stdout, raw.stderr)}`,\n    details: { ok: \"fail\", checkedAt } satisfies SmokeDetails,\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAS,QAAQ,gBAAgB;AACjC,SAAS,YAAY;AA0Bd,IAAM,mBAAmB,KAAK;AAS9B,IAAM,0BAA0B;AAQhC,SAAS,kBAAkB,QAAqD;AACrF,SAAO,OAAO,UAAU,WAAW,OAAO,QAAQ,WAAW,uBAAuB;AACtF;AAYO,SAAS,6BACd,SACQ;AACR,QAAM,aAAa,QAAQ,OAAO,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AACtE,MAAI,MAAM;AACV,MAAI,WAAW,SAAS,GAAG;AACzB,WAAO,UAAK,WAAW,MAAM,4BAA4B,WAAW,KAAK,IAAI,CAAC;AAAA;AAAA,EAChF;AACA,SAAO,gCAAgC,WAAW,MAAM,UAAU,WAAW,KAAK,GAAG,CAAC;AACtF,SAAO;AACT;AAIA,IAAM,OAAO,IAAI,OAAO,GAAG,OAAO,aAAa,EAAE,CAAC,eAAe,GAAG;AAW7D,SAAS,sBAAsB,QAAgB,QAAwB;AAC5E,QAAM,QAAQ,OACX,QAAQ,MAAM,EAAE,EAChB,MAAM,IAAI,EACV,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACtB,QAAM,UAAoB,CAAC;AAC3B,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,SAAS,OAAW;AAExB,QAAI,WAAW,KAAK,IAAI,GAAG;AACzB,cAAQ,KAAK,IAAI;AAGjB,UAAI,QAAQ;AACZ,eAAS,IAAI,IAAI,GAAG,IAAI,MAAM,UAAU,QAAQ,GAAG,KAAK;AACtD,cAAM,OAAO,MAAM,CAAC;AACpB,YAAI,CAAC,KAAM;AACX,YAAI,WAAW,KAAK,IAAI,EAAG;AAC3B,gBAAQ,KAAK,IAAI;AACjB;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,KAAK,CAAC,MAAM,MAAM,UAAa,mBAAmB,KAAK,CAAC,CAAC;AAC7E,QAAM,YAAY,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,OAAO,EAAE,KAAK,KAAK;AAChE,MAAI,UAAW,QAAO,UAAU,MAAM,GAAG,GAAG;AAC5C,QAAM,MAAM,OAAO,QAAQ,MAAM,EAAE,EAAE,KAAK;AAC1C,SAAO,MAAM,IAAI,MAAM,GAAG,GAAG,IAAI;AACnC;AAQA,eAAe,mBAAmB,UAAoC;AACpE,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,KAAK,UAAU,cAAc,GAAG,OAAO;AAClE,UAAM,MAAM,KAAK,MAAM,GAAG;AAC1B,WAAO,OAAO,IAAI,UAAU,YAAY,MAAM;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,eAAe,UAAoC;AAChE,MAAI;AACF,UAAM,OAAO,KAAK,UAAU,cAAc,CAAC;AAC3C,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqBA,eAAsB,WAAW,KAAyC;AACxE,QAAM,QAAQ,IAAI,SAAS;AAC3B,QAAM,OAAO,IAAI;AACjB,QAAM,QAAQ,UAAU,IAAI;AAC5B,QAAM,MAAM,IAAI,OAAO,oBAAI,KAAK;AAChC,QAAM,YAAY,IAAI,YAAY;AAElC,MAAI,CAAE,MAAM,mBAAmB,KAAK,IAAI,GAAI;AAC1C,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,SAAS;AAAA,IACX;AAAA,EACF;AASA,MAAI,CAAE,MAAM,eAAe,KAAK,IAAI,GAAI;AACtC,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,MAAM,QAAQ,CAAC,WAAW,mBAAmB,GAAG;AAAA,QAC9D,KAAK,KAAK;AAAA,QACV,WAAW,IAAI;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,IAAI;AACV,UAAI,EAAE,SAAS,YAAY,SAAS,KAAK,OAAO,GAAG,CAAC,GAAG;AACrD,eAAO,EAAE,OAAO,SAAS,MAAM,OAAO,QAAQ,QAAQ,SAAS,qBAAqB;AAAA,MACtF;AACA,YAAM;AAAA,IACR;AACA,QAAI,QAAQ,SAAS,GAAG;AAGtB,YAAM,QAAQ,MAAM,MAAM,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAK,KAAK,MAAM,WAAW,IAAI,IAAO,CAAC;AACxF,UAAI,MAAM,SAAS,GAAG;AACpB,eAAO;AAAA,UACL,OAAO;AAAA,UACP,MAAM;AAAA,UACN,QAAQ;AAAA,UACR,SAAS,oCAAoC,MAAM,IAAI;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAoBA,MAAI;AACF,UAAM,MAAM,QAAQ,CAAC,QAAQ,cAAc,MAAM,GAAG;AAAA,MAClD,KAAK,KAAK;AAAA,MACV,WAAW;AAAA,IACb,CAAC;AAAA,EACH,QAAQ;AAAA,EAGR;AAEA,QAAM,OAAO,MAAM,aAAa;AAEhC,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,MAAM,QAAQ,CAAC,YAAY,GAAG;AAAA,MACxC,KAAK,KAAK;AAAA,MACV,KAAK,EAAE,GAAG,QAAQ,KAAK,oBAAoB,OAAO,IAAI,EAAE;AAAA;AAAA;AAAA,MAGxD,WAAW;AAAA,IACb,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,QAAI,EAAE,SAAS,YAAY,SAAS,KAAK,OAAO,GAAG,CAAC,GAAG;AACrD,aAAO,EAAE,OAAO,SAAS,MAAM,OAAO,QAAQ,QAAQ,SAAS,qBAAqB;AAAA,IACtF;AAOA,QAAI,eAAe,GAAG,GAAG;AACvB,YAAM,UAAU,KAAK,MAAM,mBAAmB,GAAM;AACpD,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,SAAS,GAAG,uBAAuB,4CAAuC,OAAO;AAAA,MACnF;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,MAAI,IAAI,SAAS,GAAG;AAClB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS,EAAE,IAAI,QAAQ,UAAU;AAAA,IACnC;AAAA,EACF;AACA,SAAO;AAAA,IACL,OAAO;AAAA,IACP,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS,6BAA6B,IAAI,IAAI,YAAO,sBAAsB,IAAI,QAAQ,IAAI,MAAM,CAAC;AAAA,IAClG,SAAS,EAAE,IAAI,QAAQ,UAAU;AAAA,EACnC;AACF;","names":[]}

package/dist/chunk-VAD43MOR.js

@@ -0,0 +1,72 @@
+// src/reports/checklist.ts
+var MAINTENANCE_CHECKLIST = [
+  { key: "deploy", label: "Deploy & Function Health", field: "Maint: Deploy & Function Health" },
+  { key: "cms", label: "CMS Checked", field: "Maint: CMS Checked" },
+  { key: "domain", label: "Domain, DNS & SSL", field: "Maint: Domain, DNS & SSL" },
+  { key: "google", label: "Google Indexed", field: "Maint: Google Indexed" },
+  { key: "security", label: "Security Updates", field: "Maint: Security Updates" },
+  { key: "uptime", label: "Uptime Checked", field: "Maint: Uptime Checked" }
+];
+var TESTING_CHECKLIST = [
+  { key: "desktop", label: "Desktop Browsers", field: "Test: Desktop Browsers" },
+  { key: "mobile", label: "Mobile Browsers", field: "Test: Mobile Browsers" },
+  { key: "titles", label: "Page Titles & Meta", field: "Test: Page Titles & Meta" },
+  { key: "links", label: "Links & Navigation", field: "Test: Links & Navigation" },
+  { key: "forms", label: "Form Functionality", field: "Test: Form Functionality" },
+  {
+    key: "interactions",
+    label: "Interactions & Animations",
+    field: "Test: Interactions & Animations"
+  },
+  // `field` keeps its original Airtable column name ("…Verified After Updates") even though
+  // the client-facing label is now "Tested After Updates" — the column holds operator data,
+  // so renaming the label is display-only and avoids a live-base column migration.
+  { key: "updates", label: "Tested After Updates", field: "Test: Verified After Updates" }
+];
+var ALL_CHECKLIST_FIELDS = [...MAINTENANCE_CHECKLIST, ...TESTING_CHECKLIST].map(
+  (i) => i.field
+);
+function checklistFor(type) {
+  if (type === "Maintenance") return MAINTENANCE_CHECKLIST;
+  if (type === "Testing") return [...MAINTENANCE_CHECKLIST, ...TESTING_CHECKLIST];
+  return [];
+}
+var MAINTENANCE_GATING_FIELDS = [
+  "Maint: Deploy & Function Health",
+  "Maint: CMS Checked",
+  "Maint: Domain, DNS & SSL",
+  "Maint: Security Updates",
+  "Maint: Uptime Checked"
+];
+function gatingFields(type) {
+  if (type === "Maintenance") return MAINTENANCE_GATING_FIELDS;
+  if (type === "Testing") return checklistFor("Testing").map((i) => i.field);
+  return [];
+}
+function isHealthGateClear(report) {
+  return gatingFields(report.reportType).every((field) => {
+    const r = report.autoEvidence[field]?.result;
+    return r === "pass" || r === "n/a";
+  });
+}
+function gatingHealth(report) {
+  return gatingFields(report.reportType).map((field) => ({
+    field,
+    status: report.autoEvidence[field]?.result ?? "unknown"
+  }));
+}
+function isSendOverridden(report) {
+  return report.sendOverride && (report.overrideReason ?? "").trim() !== "";
+}
+
+export {
+  MAINTENANCE_CHECKLIST,
+  TESTING_CHECKLIST,
+  ALL_CHECKLIST_FIELDS,
+  checklistFor,
+  gatingFields,
+  isHealthGateClear,
+  gatingHealth,
+  isSendOverridden
+};
+//# sourceMappingURL=chunk-VAD43MOR.js.map

package/dist/chunk-VAD43MOR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/checklist.ts"],"sourcesContent":["import type { ReportType } from \"./types.js\";\nimport type { EvidenceResult, EvidenceRecord } from \"./auto-tick.js\";\n\n/**\n * One operator checklist item: a stable `key`, its display `label` (which mirrors\n * the client email's checklist line — kept in sync by a test against DEFAULT_COPY),\n * and the exact Airtable checkbox column `field` it reads/writes.\n */\nexport type ChecklistItem = { key: string; label: string; field: string };\n\n/**\n * The 6 Maintenance-report items. `label`s mirror DEFAULT_COPY.maintenanceChecks\n * (same order — \"Google Indexed\" MUST stay at index 3; the email template special-cases\n * that row to inject the live search position).\n */\nexport const MAINTENANCE_CHECKLIST: ChecklistItem[] = [\n  { key: \"deploy\", label: \"Deploy & Function Health\", field: \"Maint: Deploy & Function Health\" },\n  { key: \"cms\", label: \"CMS Checked\", field: \"Maint: CMS Checked\" },\n  { key: \"domain\", label: \"Domain, DNS & SSL\", field: \"Maint: Domain, DNS & SSL\" },\n  { key: \"google\", label: \"Google Indexed\", field: \"Maint: Google Indexed\" },\n  { key: \"security\", label: \"Security Updates\", field: \"Maint: Security Updates\" },\n  { key: \"uptime\", label: \"Uptime Checked\", field: \"Maint: Uptime Checked\" },\n];\n\n/** The 7 Testing-report items. `label`s mirror DEFAULT_COPY.testingChecklist. */\nexport const TESTING_CHECKLIST: ChecklistItem[] = [\n  { key: \"desktop\", label: \"Desktop Browsers\", field: \"Test: Desktop Browsers\" },\n  { key: \"mobile\", label: \"Mobile Browsers\", field: \"Test: Mobile Browsers\" },\n  { key: \"titles\", label: \"Page Titles & Meta\", field: \"Test: Page Titles & Meta\" },\n  { key: \"links\", label: \"Links & Navigation\", field: \"Test: Links & Navigation\" },\n  { key: \"forms\", label: \"Form Functionality\", field: \"Test: Form Functionality\" },\n  {\n    key: \"interactions\",\n    label: \"Interactions & Animations\",\n    field: \"Test: Interactions & Animations\",\n  },\n  // `field` keeps its original Airtable column name (\"…Verified After Updates\") even though\n  // the client-facing label is now \"Tested After Updates\" — the column holds operator data,\n  // so renaming the label is display-only and avoids a live-base column migration.\n  { key: \"updates\", label: \"Tested After Updates\", field: \"Test: Verified After Updates\" },\n];\n\n/** All 13 Airtable checkbox column names. mapRow reads exactly these into the row's checklist. */\nexport const ALL_CHECKLIST_FIELDS: string[] = [...MAINTENANCE_CHECKLIST, ...TESTING_CHECKLIST].map(\n  (i) => i.field,\n);\n\n/**\n * The checklist that gates a report of the given type, in the order the email renders it.\n * Maintenance gates on its 6 items. A Testing pass also performs the maintenance checks —\n * and the Testing email shows BOTH lists — so a Testing report gates on all 13\n * (maintenance first, then testing). Launch/Announcement have no checklist (the gate is\n * vacuously satisfied). PURE.\n */\nexport function checklistFor(type: ReportType): ChecklistItem[] {\n  if (type === \"Maintenance\") return MAINTENANCE_CHECKLIST;\n  if (type === \"Testing\") return [...MAINTENANCE_CHECKLIST, ...TESTING_CHECKLIST];\n  return [];\n}\n\n/** The maintenance items whose HEALTH gates a Maintenance send. Google Indexed is advisory\n *  (reported, never blocks) so it is excluded. */\nconst MAINTENANCE_GATING_FIELDS: string[] = [\n  \"Maint: Deploy & Function Health\",\n  \"Maint: CMS Checked\",\n  \"Maint: Domain, DNS & SSL\",\n  \"Maint: Security Updates\",\n  \"Maint: Uptime Checked\",\n];\n\n/**\n * The checklist fields whose health gates a send of this report type. Maintenance gates\n * availability/integrity only (Google Indexed is advisory); Testing holds the full bar (all 13,\n * including Google Indexed); Launch/Announcement are ungated. PURE.\n */\nexport function gatingFields(type: ReportType): string[] {\n  if (type === \"Maintenance\") return MAINTENANCE_GATING_FIELDS;\n  if (type === \"Testing\") return checklistFor(\"Testing\").map((i) => i.field);\n  return [];\n}\n\n/**\n * The health gate: clear iff EVERY gating field's evidence result is `pass` or `n/a`. A `fail`,\n * an `unknown`, or an ABSENT record all block — the semantic inversion (no fresh signal → cannot\n * confirm health → don't send). Launch/Announcement have no gating fields → vacuously clear. PURE.\n */\nexport function isHealthGateClear(report: {\n  reportType: ReportType;\n  autoEvidence: Record<string, EvidenceRecord>;\n}): boolean {\n  return gatingFields(report.reportType).every((field) => {\n    const r = report.autoEvidence[field]?.result;\n    return r === \"pass\" || r === \"n/a\";\n  });\n}\n\n/** Per-gating-field status for by-name blocker messaging (send log, dashboard). An absent record\n *  surfaces as `unknown`. PURE. */\nexport function gatingHealth(report: {\n  reportType: ReportType;\n  autoEvidence: Record<string, EvidenceRecord>;\n}): { field: string; status: EvidenceResult }[] {\n  return gatingFields(report.reportType).map((field) => ({\n    field,\n    status: report.autoEvidence[field]?.result ?? \"unknown\",\n  }));\n}\n\n/**\n * True when a logged send-anyway override is active AND carries a non-empty reason. The effective\n * send gate is `isHealthGateClear(report) || isSendOverridden(report)`. PURE — takes the minimal\n * structural shape so it can be evaluated over a ReportRow or a synthetic \"about to override\" copy.\n */\nexport function isSendOverridden(report: {\n  sendOverride: boolean;\n  overrideReason: string | null;\n}): boolean {\n  return report.sendOverride && (report.overrideReason ?? \"\").trim() !== \"\";\n}\n"],"mappings":";AAeO,IAAM,wBAAyC;AAAA,EACpD,EAAE,KAAK,UAAU,OAAO,4BAA4B,OAAO,kCAAkC;AAAA,EAC7F,EAAE,KAAK,OAAO,OAAO,eAAe,OAAO,qBAAqB;AAAA,EAChE,EAAE,KAAK,UAAU,OAAO,qBAAqB,OAAO,2BAA2B;AAAA,EAC/E,EAAE,KAAK,UAAU,OAAO,kBAAkB,OAAO,wBAAwB;AAAA,EACzE,EAAE,KAAK,YAAY,OAAO,oBAAoB,OAAO,0BAA0B;AAAA,EAC/E,EAAE,KAAK,UAAU,OAAO,kBAAkB,OAAO,wBAAwB;AAC3E;AAGO,IAAM,oBAAqC;AAAA,EAChD,EAAE,KAAK,WAAW,OAAO,oBAAoB,OAAO,yBAAyB;AAAA,EAC7E,EAAE,KAAK,UAAU,OAAO,mBAAmB,OAAO,wBAAwB;AAAA,EAC1E,EAAE,KAAK,UAAU,OAAO,sBAAsB,OAAO,2BAA2B;AAAA,EAChF,EAAE,KAAK,SAAS,OAAO,sBAAsB,OAAO,2BAA2B;AAAA,EAC/E,EAAE,KAAK,SAAS,OAAO,sBAAsB,OAAO,2BAA2B;AAAA,EAC/E;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAIA,EAAE,KAAK,WAAW,OAAO,wBAAwB,OAAO,+BAA+B;AACzF;AAGO,IAAM,uBAAiC,CAAC,GAAG,uBAAuB,GAAG,iBAAiB,EAAE;AAAA,EAC7F,CAAC,MAAM,EAAE;AACX;AASO,SAAS,aAAa,MAAmC;AAC9D,MAAI,SAAS,cAAe,QAAO;AACnC,MAAI,SAAS,UAAW,QAAO,CAAC,GAAG,uBAAuB,GAAG,iBAAiB;AAC9E,SAAO,CAAC;AACV;AAIA,IAAM,4BAAsC;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,SAAS,aAAa,MAA4B;AACvD,MAAI,SAAS,cAAe,QAAO;AACnC,MAAI,SAAS,UAAW,QAAO,aAAa,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK;AACzE,SAAO,CAAC;AACV;AAOO,SAAS,kBAAkB,QAGtB;AACV,SAAO,aAAa,OAAO,UAAU,EAAE,MAAM,CAAC,UAAU;AACtD,UAAM,IAAI,OAAO,aAAa,KAAK,GAAG;AACtC,WAAO,MAAM,UAAU,MAAM;AAAA,EAC/B,CAAC;AACH;AAIO,SAAS,aAAa,QAGmB;AAC9C,SAAO,aAAa,OAAO,UAAU,EAAE,IAAI,CAAC,WAAW;AAAA,IACrD;AAAA,IACA,QAAQ,OAAO,aAAa,KAAK,GAAG,UAAU;AAAA,EAChD,EAAE;AACJ;AAOO,SAAS,iBAAiB,QAGrB;AACV,SAAO,OAAO,iBAAiB,OAAO,kBAAkB,IAAI,KAAK,MAAM;AACzE;","names":[]}