@reddoorla/maintenance 0.86.0 → 0.87.0

package/dist/cli/commands/audit.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/cli/commands/audit.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { Listr } from \"listr2\";\nimport { runOneAudit, ALL_AUDIT_NAMES } from \"../../audits/index.js\";\nimport type { AuditName, AuditResult, Site } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport {\n  prepareFleetSites,\n  formatSkippedNotice,\n  type SkippedSite,\n} from \"../fleet/prepare-sites.js\";\nimport { isHttpUrl } from \"../../util/url.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\nimport { recordFleetEventsBestEffort } from \"../../audits/fleet-events-writer.js\";\nimport { fleetSweptEvent } from \"../../audits/fleet-event-detectors.js\";\nimport type { AirtableBase } from \"../../reports/airtable/client.js\";\nimport type { HealthMirror } from \"../../audits/health-mirror.js\";\nimport type { FleetEvent } from \"../../db/fleet-events.js\";\n\nexport type AuditCommandOptions = {\n  only?: string;\n  json?: boolean;\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n  /**\n   * After running, push the lighthouse scores to the matching Websites row\n   * in Airtable. `true` (no value) = derive slug from cwd/package.json#name;\n   * string = explicit slug (e.g. \"med-solutions-of-texas\").\n   */\n  writeAirtable?: string | boolean;\n  /** Exit non-zero if any a11y violations are found (overrides warn). For CI gates. */\n  failOnViolations?: boolean;\n  /** Audit this deployed URL directly (lighthouse only; single-site). */\n  url?: string;\n  /** Max sites to audit in parallel (fleet mode). Unset = all at once;\n   *  `1` = sequential (used by the nightly CI workflow). */\n  concurrency?: string;\n};\n\nfunction parseOnly(value: string | undefined): AuditName[] | undefined {\n  if (!value) return undefined;\n  const names = value.split(\",\").map((s) => s.trim());\n  for (const n of names) {\n    if (!ALL_AUDIT_NAMES.includes(n as AuditName)) {\n      throw Object.assign(new Error(`unknown audit in --only: ${n}`), { exitCode: 2 });\n    }\n  }\n  return names as AuditName[];\n}\n\nfunction formatTable(results: AuditResult[]): string {\n  return results\n    .map((r) => `${r.audit.padEnd(12)} ${r.status.padEnd(5)} ${r.site}\\n  ${r.summary}`)\n    .join(\"\\n\");\n}\n\nexport function auditExitCode(results: AuditResult[], failOnViolations: boolean): number {\n  if (results.some((r) => r.status === \"fail\")) return 1;\n  if (failOnViolations) {\n    const a11yViolations = results\n      .filter((r) => r.audit === \"a11y\")\n      .reduce(\n        (n, r) =>\n          n + ((r.details as { totalViolations?: number } | undefined)?.totalViolations ?? 0),\n        0,\n      );\n    if (a11yViolations > 0) return 1;\n  }\n  return 0;\n}\n\nfunction formatDuration(ms: number): string {\n  if (ms < 1_000) return `${ms}ms`;\n  const totalSeconds = Math.round(ms / 1_000);\n  if (totalSeconds < 60) return `${totalSeconds}s`;\n  const m = Math.floor(totalSeconds / 60);\n  const s = totalSeconds % 60;\n  return `${m}m${s.toString().padStart(2, \"0\")}s`;\n}\n\ntype Renderer = \"default\" | \"silent\";\n\n/** Parse the `--concurrency <n>` flag into a Listr `concurrent` value. Unset →\n *  `true` (all sites in parallel, the interactive default). A positive integer\n *  bounds how many sites audit at once — `--concurrency 1` runs sequentially,\n *  which is what the nightly CI workflow uses so ~10 deployed-Lighthouse runs\n *  don't saturate a 2-core runner (one flaked locally at full parallelism). */\nexport function parseConcurrency(value: string | undefined): boolean | number {\n  if (value === undefined) return true;\n  const n = Number(value);\n  if (!Number.isInteger(n) || n < 1) {\n    throw Object.assign(new Error(`--concurrency must be a positive integer, got \"${value}\"`), {\n      exitCode: 2,\n    });\n  }\n  return n;\n}\n\n/** Build the audit-progress task list. Single-site → each audit is a sibling\n *  task. Fleet → each site is a task whose `output` shows X/N audits done as\n *  they complete (audits-per-site still run in parallel). Results are pushed\n *  into the shared `results` array; tasks throw on `fail` status so listr2\n *  paints them red, but `exitOnError: false` keeps other tasks running. */\nfunction buildAuditTasks(\n  sites: Site[],\n  which: AuditName[],\n  results: AuditResult[],\n  renderer: Renderer,\n  concurrency: boolean | number,\n) {\n  const singleSite = sites.length === 1;\n\n  if (singleSite) {\n    const site = sites[0]!;\n    return new Listr(\n      which.map((name) => ({\n        title: name,\n        task: async (_ctx, task) => {\n          const start = Date.now();\n          const result = await runOneAudit(site, name);\n          results.push(result);\n          const elapsed = formatDuration(Date.now() - start);\n          task.title = `${name}: ${result.summary} (${elapsed})`;\n          if (result.status === \"fail\") throw new Error(result.summary);\n        },\n      })),\n      { concurrent: true, exitOnError: false, renderer },\n    );\n  }\n\n  return new Listr(\n    sites.map((site) => {\n      const label = site.name || site.path; // `||`: empty slug must fall back to path, not blank\n      return {\n        title: label,\n        task: async (_ctx, task) => {\n          const start = Date.now();\n          let done = 0;\n          task.output = `0/${which.length} audits`;\n          const settled = await Promise.all(\n            which.map(async (name) => {\n              const r = await runOneAudit(site, name);\n              results.push(r);\n              done += 1;\n              task.output = `${done}/${which.length} audits`;\n              return r;\n            }),\n          );\n          const elapsed = formatDuration(Date.now() - start);\n          const failed = settled.filter((r) => r.status === \"fail\").length;\n          const warned = settled.filter((r) => r.status === \"warn\").length;\n          const note =\n            failed > 0\n              ? `${failed} failed`\n              : warned > 0\n                ? `${warned} warning${warned === 1 ? \"\" : \"s\"}`\n                : \"all green\";\n          task.title = `${label}: ${note} (${elapsed})`;\n          if (failed > 0) throw new Error(`${label}: ${failed} audit(s) failed`);\n        },\n      };\n    }),\n    { concurrent: concurrency, exitOnError: false, renderer },\n  );\n}\n\ntype WriteSummary = Awaited<\n  ReturnType<typeof import(\"../../audits/write-audits-to-airtable.js\").writeAuditsToAirtable>\n>;\n\nfunction formatWriteSummary(summary: WriteSummary): string {\n  const lines = summary.writes.map((w) => {\n    if (w.audit === \"lighthouse\") {\n      const s = w.counts as {\n        performance: number;\n        accessibility: number;\n        bestPractices: number;\n        seo: number;\n      };\n      return `  lighthouse: P=${s.performance} A=${s.accessibility} BP=${s.bestPractices} SEO=${s.seo}`;\n    }\n    if (w.audit === \"a11y\") {\n      return `  a11y: ${(w.counts as { violations: number }).violations} violations`;\n    }\n    if (w.audit === \"deps\") {\n      const c = w.counts as { drifted: number; majorBehind: number };\n      return `  deps: ${c.drifted} drifted (${c.majorBehind} major)`;\n    }\n    const c = w.counts as { critical: number; high: number; moderate: number; low: number };\n    return `  security: ${c.critical}C/${c.high}H/${c.moderate}M/${c.low}L`;\n  });\n  return `→ wrote to Websites[${summary.siteName}]:\\n${lines.join(\"\\n\")}`;\n}\n\n/** Listr renderer choice. `--json` → silent so stdout stays clean for piping.\n *  Otherwise listr's `default` renderer auto-falls back to `simple` in\n *  non-TTY contexts (CI, log capture, our own integration tests). */\nfunction rendererFor(json: boolean | undefined): Renderer {\n  return json ? \"silent\" : \"default\";\n}\n\n/** When `--url` is set but audits other than lighthouse also ran (those use the\n *  local checkout, not the deployed URL), return a one-line operator notice;\n *  null when there's nothing to warn about. Keeps the mixed-provenance result\n *  table from silently confusing the operator. */\nexport function deployedUrlNotice(\n  which: AuditName[],\n  url: string | undefined,\n  cwd: string,\n): string | null {\n  if (url === undefined) return null;\n  const others = which.filter((n) => n !== \"lighthouse\");\n  if (others.length === 0) return null;\n  return `note: --url only affects lighthouse; ${others.join(\", \")} ran against the local checkout at ${cwd}`;\n}\n\n/** Audits that need no repo checkout — they probe an external resource. lighthouse hits the\n *  live URL; domain probes DNS/TLS of the URL's host; browser drives the deployed URL;\n *  netlify-deploy queries the Netlify API by site id; function-health fetches the deployed\n *  `/health` endpoint. */\nconst CHECKOUT_FREE_AUDITS: ReadonlySet<AuditName> = new Set<AuditName>([\n  \"lighthouse\",\n  \"domain\",\n  \"browser\",\n  \"netlify-deploy\",\n  \"function-health\",\n  \"form-e2e\",\n]);\n\n/** Audits whose checkout-free run is keyed off `site.netlifyId` (the Netlify API) rather than\n *  the deployed URL. Everything else in CHECKOUT_FREE_AUDITS reads `site.deployedUrl`. */\nconst NETLIFY_ID_AUDITS: ReadonlySet<AuditName> = new Set<AuditName>([\"netlify-deploy\"]);\n\n/** A fleet site needs a local checkout unless every requested audit is checkout-free AND the site\n *  has the external resource each one runs against (`deployedUrl` for lighthouse/domain/browser,\n *  `netlifyId` for netlify-deploy). */\nexport function auditNeedsCheckout(site: Site, which: AuditName[]): boolean {\n  const deployedCapable = which.every((n) => {\n    if (!CHECKOUT_FREE_AUDITS.has(n)) return false;\n    return NETLIFY_ID_AUDITS.has(n) ? site.netlifyId !== undefined : site.deployedUrl !== undefined;\n  });\n  return !deployedCapable;\n}\n\n/** Apply a single-site `--url` to the resolved sites. Returns the input\n *  untouched when no url is given; otherwise requires exactly one site and\n *  stamps `deployedUrl` on it so the lighthouse audit takes its deployed path.\n *  The `--url`+`--fleet` combination is rejected earlier in `runAuditCommand`;\n *  this length guard also covers any future multi-site single-run resolver. */\nexport function applyDeployedUrl(sites: Site[], url: string | undefined): Site[] {\n  if (url === undefined) return sites;\n  if (sites.length !== 1) {\n    throw Object.assign(\n      new Error(`--url expects exactly one site, but ${sites.length} resolved.`),\n      { exitCode: 2 },\n    );\n  }\n  // Scheme-allowlist: the URL is handed straight to Chrome/lhci, so only\n  // http(s) is safe (a file:///gopher:// value would be a local-file read /\n  // SSRF). Same predicate the inventory paths use.\n  if (!isHttpUrl(url)) {\n    throw Object.assign(new Error(`--url must be an http(s) URL (got: ${JSON.stringify(url)})`), {\n      exitCode: 2,\n    });\n  }\n  return [{ ...sites[0]!, deployedUrl: url }];\n}\n\nexport async function runAuditCommand(\n  site: string | undefined,\n  opts: AuditCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const which = parseOnly(opts.only) ?? ALL_AUDIT_NAMES;\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  // A literal --write-airtable=<slug> is single-site (the slug names one row).\n  // Boolean --write-airtable + --fleet is fine: each site's slug comes from the\n  // inventory, so there's no cwd-derived-slug ambiguity.\n  if (typeof opts.writeAirtable === \"string\" && opts.fleet !== undefined) {\n    throw Object.assign(\n      new Error(\n        \"--write-airtable=<slug> is single-site; with --fleet each site's slug comes from the inventory. Use --write-airtable (no slug) + --fleet.\",\n      ),\n      { exitCode: 2 },\n    );\n  }\n\n  if (opts.url !== undefined && opts.fleet !== undefined) {\n    throw Object.assign(\n      new Error(\n        \"--url is single-site only and cannot be combined with --fleet. Audit a single site instead.\",\n      ),\n      { exitCode: 2 },\n    );\n  }\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  sites = applyDeployedUrl(sites, opts.url);\n\n  let skippedPrep: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, {\n      workdir,\n      needsCheckout: (s) => auditNeedsCheckout(s, which),\n    });\n    sites = prep.prepared;\n    skippedPrep = prep.skipped;\n  }\n\n  const results: AuditResult[] = [];\n  const renderer = rendererFor(opts.json);\n  await buildAuditTasks(sites, which, results, renderer, parseConcurrency(opts.concurrency)).run();\n\n  let output = opts.json ? JSON.stringify(results, null, 2) : formatTable(results);\n\n  // Surface any site that couldn't be prepared (no auditable target, clone\n  // failure) — visibly, but without reding the run. One misconfigured inventory\n  // row is an operator fix, not an outage; the other sites still audited and\n  // wrote back. \"No silent caps\": a dropped site is never invisible.\n  const skipNotice = formatSkippedNotice(skippedPrep);\n  if (skipNotice && !opts.json) output += `\\n\\n${skipNotice}`;\n\n  // \"Did every site actually get measured?\" — emitted for any fleet sweep that ran\n  // `smoke`, independent of --write-airtable, because it is a statement about the\n  // RUN, not about persistence. Deliberately not folded into FLEET_WRITE_SUMMARY:\n  // an unmeasured site still writes (it just writes nothing new), so the write gate\n  // counts it as a success. That gap is exactly what hid four nights of timeouts.\n  if (opts.fleet !== undefined && which.includes(\"smoke\") && !opts.json) {\n    const { formatUnmeasuredSmokeSummary } = await import(\"../../audits/smoke.js\");\n    output += `\\n\\n${formatUnmeasuredSmokeSummary(results)}`;\n  }\n\n  // Did any site fail to write back to Airtable? The fleet writer collects\n  // per-site failures instead of throwing, so without this the command would\n  // exit 0 while rows silently failed to persist — automation keying on `$?`\n  // would see a clean run. (The single-site writer throws on failure, so it's\n  // already non-zero via the propagated error.)\n  let writeBackFailed = false;\n  if (opts.writeAirtable !== undefined) {\n    const { openBase, readAirtableConfig } = await import(\"../../reports/airtable/client.js\");\n    const { listWebsites } = await import(\"../../reports/airtable/websites.js\");\n\n    if (opts.fleet !== undefined) {\n      const wb = await runFleetWriteBack({ results, which });\n      if (wb.anyFailed) writeBackFailed = true;\n      // Gate on !json: the write-summary is human text; appending it after the\n      // results array would corrupt `--json` output (the other notices already\n      // guard this way). The write itself still happens regardless of --json.\n      if (!opts.json) output += `\\n\\n${wb.summary}`;\n    } else {\n      const { resolveSlugFromCwd } = await import(\"../../audits/lighthouse-airtable.js\");\n      const { writeAuditsToAirtable } = await import(\"../../audits/write-audits-to-airtable.js\");\n      const slug =\n        typeof opts.writeAirtable === \"string\" && opts.writeAirtable.length > 0\n          ? opts.writeAirtable\n          : await resolveSlugFromCwd(cwd);\n      let writeSummary: WriteSummary | null = null;\n      await new Listr(\n        [\n          {\n            title: `Write to Airtable[${slug}]`,\n            task: async (_ctx, task) => {\n              const base = openBase(readAirtableConfig());\n              task.output = \"loading Websites…\";\n              const websites = await listWebsites(base);\n              task.output = \"writing scores…\";\n              writeSummary = await writeAuditsToAirtable({ base, websites, slug, results });\n              task.title = `Wrote to Websites[${writeSummary.siteName}] (${writeSummary.writes.length} audit type${writeSummary.writes.length === 1 ? \"\" : \"s\"})`;\n            },\n          },\n        ],\n        { renderer },\n      ).run();\n      if (writeSummary && !opts.json) output += `\\n\\n${formatWriteSummary(writeSummary)}`;\n    }\n  }\n\n  const notice = deployedUrlNotice(which, opts.url, cwd);\n  if (notice && !opts.json) output += `\\n\\n${notice}`;\n\n  const code = Math.max(\n    auditExitCode(results, opts.failOnViolations === true),\n    writeBackFailed ? 1 : 0,\n  );\n  return { output, code };\n}\n\n/** The fleet `--write-airtable` step: write every site's audits back to its\n *  Websites row, dual-write each just-written FieldSet into Turso (#539\n *  Phase 3), and record fleet-activity events. Extracted from runAuditCommand\n *  so the mirror WIRING itself is pinned by test — the mutation this seam\n *  kills is dropping the `...(mirror ? { mirror } : {})` pass-through, which\n *  would silently stop all five nightly sweeps from mirroring while every\n *  sweep stayed green (adversarial review of #566, finding 6). Deps default\n *  to the real fleet wiring; dynamic imports keep the no-write paths from\n *  loading Airtable/db clients. */\nexport async function runFleetWriteBack(args: {\n  results: AuditResult[];\n  which: AuditName[];\n  deps?: {\n    openBase?: () => AirtableBase;\n    makeMirror?: () => Promise<HealthMirror | null>;\n    recordEvents?: (events: FleetEvent[], now: Date) => Promise<void>;\n  };\n}): Promise<{ summary: string; anyFailed: boolean }> {\n  const { results, which, deps = {} } = args;\n  const { writeFleetAuditsToAirtable, formatFleetWriteSummary } =\n    await import(\"../../audits/write-audits-to-airtable.js\");\n  let base: AirtableBase;\n  if (deps.openBase) {\n    base = deps.openBase();\n  } else {\n    const { openBase, readAirtableConfig } = await import(\"../../reports/airtable/client.js\");\n    base = openBase(readAirtableConfig());\n  }\n  const { listWebsites } = await import(\"../../reports/airtable/websites.js\");\n  const websites = await listWebsites(base);\n  // Phase 3 dual-write (#539): mirror each site's written FieldSet into\n  // site_health. Null when libSQL creds are absent — Airtable write-back\n  // proceeds exactly as before.\n  const makeMirror =\n    deps.makeMirror ??\n    (async () => {\n      const { makeHealthMirrorBestEffort } = await import(\"../../audits/health-mirror.js\");\n      return makeHealthMirrorBestEffort();\n    });\n  const mirror = await makeMirror();\n  const fleetWrite = await writeFleetAuditsToAirtable({\n    base,\n    websites,\n    results,\n    ...(mirror ? { mirror } : {}),\n  });\n  // Record fleet-activity events (vuln_cleared / cert_renewed rode along on each\n  // WriteSummary) plus a per-sweep rollup. Best-effort: a missing Turso cred no-ops.\n  const sweep = which.includes(\"security\") ? \"security\" : \"lighthouse\";\n  const now = new Date();\n  const auditEvents = fleetWrite.written.flatMap((w) => w.events ?? []);\n  await (deps.recordEvents ?? recordFleetEventsBestEffort)(\n    [...auditEvents, fleetSweptEvent(sweep, fleetWrite.written.length, now.toISOString())],\n    now,\n  );\n  return { summary: formatFleetWriteSummary(fleetWrite), anyFailed: fleetWrite.failed.length > 0 };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AACxB,SAAS,aAAa;AAsCtB,SAAS,UAAU,OAAoD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AAClD,aAAW,KAAK,OAAO;AACrB,QAAI,CAAC,gBAAgB,SAAS,CAAc,GAAG;AAC7C,YAAM,OAAO,OAAO,IAAI,MAAM,4BAA4B,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,IACjF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,SAAgC;AACnD,SAAO,QACJ,IAAI,CAAC,MAAM,GAAG,EAAE,MAAM,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI;AAAA,IAAO,EAAE,OAAO,EAAE,EAClF,KAAK,IAAI;AACd;AAEO,SAAS,cAAc,SAAwB,kBAAmC;AACvF,MAAI,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,EAAG,QAAO;AACrD,MAAI,kBAAkB;AACpB,UAAM,iBAAiB,QACpB,OAAO,CAAC,MAAM,EAAE,UAAU,MAAM,EAChC;AAAA,MACC,CAAC,GAAG,MACF,KAAM,EAAE,SAAsD,mBAAmB;AAAA,MACnF;AAAA,IACF;AACF,QAAI,iBAAiB,EAAG,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,eAAe,IAAoB;AAC1C,MAAI,KAAK,IAAO,QAAO,GAAG,EAAE;AAC5B,QAAM,eAAe,KAAK,MAAM,KAAK,GAAK;AAC1C,MAAI,eAAe,GAAI,QAAO,GAAG,YAAY;AAC7C,QAAM,IAAI,KAAK,MAAM,eAAe,EAAE;AACtC,QAAM,IAAI,eAAe;AACzB,SAAO,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9C;AASO,SAAS,iBAAiB,OAA6C;AAC5E,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;AACjC,UAAM,OAAO,OAAO,IAAI,MAAM,kDAAkD,KAAK,GAAG,GAAG;AAAA,MACzF,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAOA,SAAS,gBACP,OACA,OACA,SACA,UACA,aACA;AACA,QAAM,aAAa,MAAM,WAAW;AAEpC,MAAI,YAAY;AACd,UAAM,OAAO,MAAM,CAAC;AACpB,WAAO,IAAI;AAAA,MACT,MAAM,IAAI,CAAC,UAAU;AAAA,QACnB,OAAO;AAAA,QACP,MAAM,OAAO,MAAM,SAAS;AAC1B,gBAAM,QAAQ,KAAK,IAAI;AACvB,gBAAM,SAAS,MAAM,YAAY,MAAM,IAAI;AAC3C,kBAAQ,KAAK,MAAM;AACnB,gBAAM,UAAU,eAAe,KAAK,IAAI,IAAI,KAAK;AACjD,eAAK,QAAQ,GAAG,IAAI,KAAK,OAAO,OAAO,KAAK,OAAO;AACnD,cAAI,OAAO,WAAW,OAAQ,OAAM,IAAI,MAAM,OAAO,OAAO;AAAA,QAC9D;AAAA,MACF,EAAE;AAAA,MACF,EAAE,YAAY,MAAM,aAAa,OAAO,SAAS;AAAA,IACnD;AAAA,EACF;AAEA,SAAO,IAAI;AAAA,IACT,MAAM,IAAI,CAAC,SAAS;AAClB,YAAM,QAAQ,KAAK,QAAQ,KAAK;AAChC,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM,OAAO,MAAM,SAAS;AAC1B,gBAAM,QAAQ,KAAK,IAAI;AACvB,cAAI,OAAO;AACX,eAAK,SAAS,KAAK,MAAM,MAAM;AAC/B,gBAAM,UAAU,MAAM,QAAQ;AAAA,YAC5B,MAAM,IAAI,OAAO,SAAS;AACxB,oBAAM,IAAI,MAAM,YAAY,MAAM,IAAI;AACtC,sBAAQ,KAAK,CAAC;AACd,sBAAQ;AACR,mBAAK,SAAS,GAAG,IAAI,IAAI,MAAM,MAAM;AACrC,qBAAO;AAAA,YACT,CAAC;AAAA,UACH;AACA,gBAAM,UAAU,eAAe,KAAK,IAAI,IAAI,KAAK;AACjD,gBAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC1D,gBAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC1D,gBAAM,OACJ,SAAS,IACL,GAAG,MAAM,YACT,SAAS,IACP,GAAG,MAAM,WAAW,WAAW,IAAI,KAAK,GAAG,KAC3C;AACR,eAAK,QAAQ,GAAG,KAAK,KAAK,IAAI,KAAK,OAAO;AAC1C,cAAI,SAAS,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,KAAK,MAAM,kBAAkB;AAAA,QACvE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,EAAE,YAAY,aAAa,aAAa,OAAO,SAAS;AAAA,EAC1D;AACF;AAMA,SAAS,mBAAmB,SAA+B;AACzD,QAAM,QAAQ,QAAQ,OAAO,IAAI,CAAC,MAAM;AACtC,QAAI,EAAE,UAAU,cAAc;AAC5B,YAAM,IAAI,EAAE;AAMZ,aAAO,mBAAmB,EAAE,WAAW,MAAM,EAAE,aAAa,OAAO,EAAE,aAAa,QAAQ,EAAE,GAAG;AAAA,IACjG;AACA,QAAI,EAAE,UAAU,QAAQ;AACtB,aAAO,WAAY,EAAE,OAAkC,UAAU;AAAA,IACnE;AACA,QAAI,EAAE,UAAU,QAAQ;AACtB,YAAMA,KAAI,EAAE;AACZ,aAAO,WAAWA,GAAE,OAAO,aAAaA,GAAE,WAAW;AAAA,IACvD;AACA,UAAM,IAAI,EAAE;AACZ,WAAO,eAAe,EAAE,QAAQ,KAAK,EAAE,IAAI,KAAK,EAAE,QAAQ,KAAK,EAAE,GAAG;AAAA,EACtE,CAAC;AACD,SAAO,4BAAuB,QAAQ,QAAQ;AAAA,EAAO,MAAM,KAAK,IAAI,CAAC;AACvE;AAKA,SAAS,YAAY,MAAqC;AACxD,SAAO,OAAO,WAAW;AAC3B;AAMO,SAAS,kBACd,OACA,KACA,KACe;AACf,MAAI,QAAQ,OAAW,QAAO;AAC9B,QAAM,SAAS,MAAM,OAAO,CAAC,MAAM,MAAM,YAAY;AACrD,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SAAO,wCAAwC,OAAO,KAAK,IAAI,CAAC,sCAAsC,GAAG;AAC3G;AAMA,IAAM,uBAA+C,oBAAI,IAAe;AAAA,EACtE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,IAAM,oBAA4C,oBAAI,IAAe,CAAC,gBAAgB,CAAC;AAKhF,SAAS,mBAAmB,MAAY,OAA6B;AAC1E,QAAM,kBAAkB,MAAM,MAAM,CAAC,MAAM;AACzC,QAAI,CAAC,qBAAqB,IAAI,CAAC,EAAG,QAAO;AACzC,WAAO,kBAAkB,IAAI,CAAC,IAAI,KAAK,cAAc,SAAY,KAAK,gBAAgB;AAAA,EACxF,CAAC;AACD,SAAO,CAAC;AACV;AAOO,SAAS,iBAAiB,OAAe,KAAiC;AAC/E,MAAI,QAAQ,OAAW,QAAO;AAC9B,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,OAAO;AAAA,MACX,IAAI,MAAM,uCAAuC,MAAM,MAAM,YAAY;AAAA,MACzE,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAIA,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,UAAM,OAAO,OAAO,IAAI,MAAM,sCAAsC,KAAK,UAAU,GAAG,CAAC,GAAG,GAAG;AAAA,MAC3F,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO,CAAC,EAAE,GAAG,MAAM,CAAC,GAAI,aAAa,IAAI,CAAC;AAC5C;AAEA,eAAsB,gBACpB,MACA,MAC2C;AAC3C,QAAM,QAAQ,UAAU,KAAK,IAAI,KAAK;AACtC,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAKvD,MAAI,OAAO,KAAK,kBAAkB,YAAY,KAAK,UAAU,QAAW;AACtE,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF;AAAA,MACF;AAAA,MACA,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,KAAK,QAAQ,UAAa,KAAK,UAAU,QAAW;AACtD,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF;AAAA,MACF;AAAA,MACA,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,UAAQ,iBAAiB,OAAO,KAAK,GAAG;AAExC,MAAI,cAA6B,CAAC;AAClC,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO;AAAA,MAC1C;AAAA,MACA,eAAe,CAAC,MAAM,mBAAmB,GAAG,KAAK;AAAA,IACnD,CAAC;AACD,YAAQ,KAAK;AACb,kBAAc,KAAK;AAAA,EACrB;AAEA,QAAM,UAAyB,CAAC;AAChC,QAAM,WAAW,YAAY,KAAK,IAAI;AACtC,QAAM,gBAAgB,OAAO,OAAO,SAAS,UAAU,iBAAiB,KAAK,WAAW,CAAC,EAAE,IAAI;AAE/F,MAAI,SAAS,KAAK,OAAO,KAAK,UAAU,SAAS,MAAM,CAAC,IAAI,YAAY,OAAO;AAM/E,QAAM,aAAa,oBAAoB,WAAW;AAClD,MAAI,cAAc,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,UAAU;AAOzD,MAAI,KAAK,UAAU,UAAa,MAAM,SAAS,OAAO,KAAK,CAAC,KAAK,MAAM;AACrE,UAAM,EAAE,6BAA6B,IAAI,MAAM,OAAO,yBAAuB;AAC7E,cAAU;AAAA;AAAA,EAAO,6BAA6B,OAAO,CAAC;AAAA,EACxD;AAOA,MAAI,kBAAkB;AACtB,MAAI,KAAK,kBAAkB,QAAW;AACpC,UAAM,EAAE,UAAU,mBAAmB,IAAI,MAAM,OAAO,0BAAkC;AACxF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,4BAAoC;AAE1E,QAAI,KAAK,UAAU,QAAW;AAC5B,YAAM,KAAK,MAAM,kBAAkB,EAAE,SAAS,MAAM,CAAC;AACrD,UAAI,GAAG,UAAW,mBAAkB;AAIpC,UAAI,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,GAAG,OAAO;AAAA,IAC7C,OAAO;AACL,YAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,uCAAqC;AACjF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,4CAA0C;AACzF,YAAM,OACJ,OAAO,KAAK,kBAAkB,YAAY,KAAK,cAAc,SAAS,IAClE,KAAK,gBACL,MAAM,mBAAmB,GAAG;AAClC,UAAI,eAAoC;AACxC,YAAM,IAAI;AAAA,QACR;AAAA,UACE;AAAA,YACE,OAAO,qBAAqB,IAAI;AAAA,YAChC,MAAM,OAAO,MAAM,SAAS;AAC1B,oBAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,mBAAK,SAAS;AACd,oBAAM,WAAW,MAAM,aAAa,IAAI;AACxC,mBAAK,SAAS;AACd,6BAAe,MAAM,sBAAsB,EAAE,MAAM,UAAU,MAAM,QAAQ,CAAC;AAC5E,mBAAK,QAAQ,qBAAqB,aAAa,QAAQ,MAAM,aAAa,OAAO,MAAM,cAAc,aAAa,OAAO,WAAW,IAAI,KAAK,GAAG;AAAA,YAClJ;AAAA,UACF;AAAA,QACF;AAAA,QACA,EAAE,SAAS;AAAA,MACb,EAAE,IAAI;AACN,UAAI,gBAAgB,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,mBAAmB,YAAY,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,OAAO,KAAK,KAAK,GAAG;AACrD,MAAI,UAAU,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,MAAM;AAEjD,QAAM,OAAO,KAAK;AAAA,IAChB,cAAc,SAAS,KAAK,qBAAqB,IAAI;AAAA,IACrD,kBAAkB,IAAI;AAAA,EACxB;AACA,SAAO,EAAE,QAAQ,KAAK;AACxB;AAWA,eAAsB,kBAAkB,MAQa;AACnD,QAAM,EAAE,SAAS,OAAO,OAAO,CAAC,EAAE,IAAI;AACtC,QAAM,EAAE,4BAA4B,wBAAwB,IAC1D,MAAM,OAAO,4CAA0C;AACzD,MAAI;AACJ,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK,SAAS;AAAA,EACvB,OAAO;AACL,UAAM,EAAE,UAAU,mBAAmB,IAAI,MAAM,OAAO,0BAAkC;AACxF,WAAO,SAAS,mBAAmB,CAAC;AAAA,EACtC;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,4BAAoC;AAC1E,QAAM,WAAW,MAAM,aAAa,IAAI;AAIxC,QAAM,aACJ,KAAK,eACJ,YAAY;AACX,UAAM,EAAE,2BAA2B,IAAI,MAAM,OAAO,iCAA+B;AACnF,WAAO,2BAA2B;AAAA,EACpC;AACF,QAAM,SAAS,MAAM,WAAW;AAChC,QAAM,aAAa,MAAM,2BAA2B;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B,CAAC;AAGD,QAAM,QAAQ,MAAM,SAAS,UAAU,IAAI,aAAa;AACxD,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,cAAc,WAAW,QAAQ,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACpE,SAAO,KAAK,gBAAgB;AAAA,IAC1B,CAAC,GAAG,aAAa,gBAAgB,OAAO,WAAW,QAAQ,QAAQ,IAAI,YAAY,CAAC,CAAC;AAAA,IACrF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,wBAAwB,UAAU,GAAG,WAAW,WAAW,OAAO,SAAS,EAAE;AACjG;","names":["c"]}
+{"version":3,"sources":["../../../src/cli/commands/audit.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport { Listr } from \"listr2\";\nimport { runOneAudit, ALL_AUDIT_NAMES } from \"../../audits/index.js\";\nimport type { AuditName, AuditResult, Site } from \"../../types.js\";\nimport { resolveSites } from \"../fleet/resolve-sites.js\";\nimport {\n  prepareFleetSites,\n  formatSkippedNotice,\n  type SkippedSite,\n} from \"../fleet/prepare-sites.js\";\nimport { isHttpUrl } from \"../../util/url.js\";\nimport { fleetWorkdir } from \"../../util/fleet-workdir.js\";\nimport { recordFleetEventsBestEffort } from \"../../audits/fleet-events-writer.js\";\nimport { fleetSweptEvent } from \"../../audits/fleet-event-detectors.js\";\nimport type { AirtableBase } from \"../../reports/airtable/client.js\";\nimport type { HealthMirror } from \"../../audits/health-mirror.js\";\nimport type { FleetEvent } from \"../../db/fleet-events.js\";\n\nexport type AuditCommandOptions = {\n  only?: string;\n  json?: boolean;\n  fleet?: string;\n  workdir?: string;\n  cwd?: string;\n  /**\n   * After running, push the lighthouse scores to the matching Websites row\n   * in Airtable. `true` (no value) = derive slug from cwd/package.json#name;\n   * string = explicit slug (e.g. \"med-solutions-of-texas\").\n   */\n  writeAirtable?: string | boolean;\n  /** Exit non-zero if any a11y violations are found (overrides warn). For CI gates. */\n  failOnViolations?: boolean;\n  /** Audit this deployed URL directly (lighthouse only; single-site). */\n  url?: string;\n  /** Max sites to audit in parallel (fleet mode). Unset = all at once;\n   *  `1` = sequential (used by the nightly CI workflow). */\n  concurrency?: string;\n};\n\nfunction parseOnly(value: string | undefined): AuditName[] | undefined {\n  if (!value) return undefined;\n  const names = value.split(\",\").map((s) => s.trim());\n  for (const n of names) {\n    if (!ALL_AUDIT_NAMES.includes(n as AuditName)) {\n      throw Object.assign(new Error(`unknown audit in --only: ${n}`), { exitCode: 2 });\n    }\n  }\n  return names as AuditName[];\n}\n\nfunction formatTable(results: AuditResult[]): string {\n  return results\n    .map((r) => `${r.audit.padEnd(12)} ${r.status.padEnd(5)} ${r.site}\\n  ${r.summary}`)\n    .join(\"\\n\");\n}\n\nexport function auditExitCode(results: AuditResult[], failOnViolations: boolean): number {\n  if (results.some((r) => r.status === \"fail\")) return 1;\n  if (failOnViolations) {\n    const a11yViolations = results\n      .filter((r) => r.audit === \"a11y\")\n      .reduce(\n        (n, r) =>\n          n + ((r.details as { totalViolations?: number } | undefined)?.totalViolations ?? 0),\n        0,\n      );\n    if (a11yViolations > 0) return 1;\n  }\n  return 0;\n}\n\nfunction formatDuration(ms: number): string {\n  if (ms < 1_000) return `${ms}ms`;\n  const totalSeconds = Math.round(ms / 1_000);\n  if (totalSeconds < 60) return `${totalSeconds}s`;\n  const m = Math.floor(totalSeconds / 60);\n  const s = totalSeconds % 60;\n  return `${m}m${s.toString().padStart(2, \"0\")}s`;\n}\n\ntype Renderer = \"default\" | \"silent\";\n\n/** Parse the `--concurrency <n>` flag into a Listr `concurrent` value. Unset →\n *  `true` (all sites in parallel, the interactive default). A positive integer\n *  bounds how many sites audit at once — `--concurrency 1` runs sequentially,\n *  which is what the nightly CI workflow uses so ~10 deployed-Lighthouse runs\n *  don't saturate a 2-core runner (one flaked locally at full parallelism). */\nexport function parseConcurrency(value: string | undefined): boolean | number {\n  if (value === undefined) return true;\n  const n = Number(value);\n  if (!Number.isInteger(n) || n < 1) {\n    throw Object.assign(new Error(`--concurrency must be a positive integer, got \"${value}\"`), {\n      exitCode: 2,\n    });\n  }\n  return n;\n}\n\n/** Build the audit-progress task list. Single-site → each audit is a sibling\n *  task. Fleet → each site is a task whose `output` shows X/N audits done as\n *  they complete (audits-per-site still run in parallel). Results are pushed\n *  into the shared `results` array; tasks throw on `fail` status so listr2\n *  paints them red, but `exitOnError: false` keeps other tasks running. */\nfunction buildAuditTasks(\n  sites: Site[],\n  which: AuditName[],\n  results: AuditResult[],\n  renderer: Renderer,\n  concurrency: boolean | number,\n) {\n  const singleSite = sites.length === 1;\n\n  if (singleSite) {\n    const site = sites[0]!;\n    return new Listr(\n      which.map((name) => ({\n        title: name,\n        task: async (_ctx, task) => {\n          const start = Date.now();\n          const result = await runOneAudit(site, name);\n          results.push(result);\n          const elapsed = formatDuration(Date.now() - start);\n          task.title = `${name}: ${result.summary} (${elapsed})`;\n          if (result.status === \"fail\") throw new Error(result.summary);\n        },\n      })),\n      { concurrent: true, exitOnError: false, renderer },\n    );\n  }\n\n  return new Listr(\n    sites.map((site) => {\n      const label = site.name || site.path; // `||`: empty slug must fall back to path, not blank\n      return {\n        title: label,\n        task: async (_ctx, task) => {\n          const start = Date.now();\n          let done = 0;\n          task.output = `0/${which.length} audits`;\n          const settled = await Promise.all(\n            which.map(async (name) => {\n              const r = await runOneAudit(site, name);\n              results.push(r);\n              done += 1;\n              task.output = `${done}/${which.length} audits`;\n              return r;\n            }),\n          );\n          const elapsed = formatDuration(Date.now() - start);\n          const failed = settled.filter((r) => r.status === \"fail\").length;\n          const warned = settled.filter((r) => r.status === \"warn\").length;\n          const note =\n            failed > 0\n              ? `${failed} failed`\n              : warned > 0\n                ? `${warned} warning${warned === 1 ? \"\" : \"s\"}`\n                : \"all green\";\n          task.title = `${label}: ${note} (${elapsed})`;\n          if (failed > 0) throw new Error(`${label}: ${failed} audit(s) failed`);\n        },\n      };\n    }),\n    { concurrent: concurrency, exitOnError: false, renderer },\n  );\n}\n\ntype WriteSummary = Awaited<\n  ReturnType<typeof import(\"../../audits/write-audits-to-airtable.js\").writeAuditsToAirtable>\n>;\n\nfunction formatWriteSummary(summary: WriteSummary): string {\n  const lines = summary.writes.map((w) => {\n    if (w.audit === \"lighthouse\") {\n      const s = w.counts as {\n        performance: number;\n        accessibility: number;\n        bestPractices: number;\n        seo: number;\n      };\n      return `  lighthouse: P=${s.performance} A=${s.accessibility} BP=${s.bestPractices} SEO=${s.seo}`;\n    }\n    if (w.audit === \"a11y\") {\n      return `  a11y: ${(w.counts as { violations: number }).violations} violations`;\n    }\n    if (w.audit === \"deps\") {\n      const c = w.counts as { drifted: number; majorBehind: number };\n      return `  deps: ${c.drifted} drifted (${c.majorBehind} major)`;\n    }\n    const c = w.counts as { critical: number; high: number; moderate: number; low: number };\n    return `  security: ${c.critical}C/${c.high}H/${c.moderate}M/${c.low}L`;\n  });\n  return `→ wrote to Websites[${summary.siteName}]:\\n${lines.join(\"\\n\")}`;\n}\n\n/** Listr renderer choice. `--json` → silent so stdout stays clean for piping.\n *  Otherwise listr's `default` renderer auto-falls back to `simple` in\n *  non-TTY contexts (CI, log capture, our own integration tests). */\nfunction rendererFor(json: boolean | undefined): Renderer {\n  return json ? \"silent\" : \"default\";\n}\n\n/** When `--url` is set but audits other than lighthouse also ran (those use the\n *  local checkout, not the deployed URL), return a one-line operator notice;\n *  null when there's nothing to warn about. Keeps the mixed-provenance result\n *  table from silently confusing the operator. */\nexport function deployedUrlNotice(\n  which: AuditName[],\n  url: string | undefined,\n  cwd: string,\n): string | null {\n  if (url === undefined) return null;\n  const others = which.filter((n) => n !== \"lighthouse\");\n  if (others.length === 0) return null;\n  return `note: --url only affects lighthouse; ${others.join(\", \")} ran against the local checkout at ${cwd}`;\n}\n\n/** Audits that need no repo checkout — they probe an external resource. lighthouse hits the\n *  live URL; domain probes DNS/TLS of the URL's host; browser drives the deployed URL;\n *  netlify-deploy queries the Netlify API by site id; function-health fetches the deployed\n *  `/health` endpoint. */\nconst CHECKOUT_FREE_AUDITS: ReadonlySet<AuditName> = new Set<AuditName>([\n  \"lighthouse\",\n  \"domain\",\n  \"browser\",\n  \"netlify-deploy\",\n  \"function-health\",\n  \"form-e2e\",\n]);\n\n/** Audits whose checkout-free run is keyed off `site.netlifyId` (the Netlify API) rather than\n *  the deployed URL. Everything else in CHECKOUT_FREE_AUDITS reads `site.deployedUrl`. */\nconst NETLIFY_ID_AUDITS: ReadonlySet<AuditName> = new Set<AuditName>([\"netlify-deploy\"]);\n\n/** A fleet site needs a local checkout unless every requested audit is checkout-free AND the site\n *  has the external resource each one runs against (`deployedUrl` for lighthouse/domain/browser,\n *  `netlifyId` for netlify-deploy). */\nexport function auditNeedsCheckout(site: Site, which: AuditName[]): boolean {\n  const deployedCapable = which.every((n) => {\n    if (!CHECKOUT_FREE_AUDITS.has(n)) return false;\n    return NETLIFY_ID_AUDITS.has(n) ? site.netlifyId !== undefined : site.deployedUrl !== undefined;\n  });\n  return !deployedCapable;\n}\n\n/** Apply a single-site `--url` to the resolved sites. Returns the input\n *  untouched when no url is given; otherwise requires exactly one site and\n *  stamps `deployedUrl` on it so the lighthouse audit takes its deployed path.\n *  The `--url`+`--fleet` combination is rejected earlier in `runAuditCommand`;\n *  this length guard also covers any future multi-site single-run resolver. */\nexport function applyDeployedUrl(sites: Site[], url: string | undefined): Site[] {\n  if (url === undefined) return sites;\n  if (sites.length !== 1) {\n    throw Object.assign(\n      new Error(`--url expects exactly one site, but ${sites.length} resolved.`),\n      { exitCode: 2 },\n    );\n  }\n  // Scheme-allowlist: the URL is handed straight to Chrome/lhci, so only\n  // http(s) is safe (a file:///gopher:// value would be a local-file read /\n  // SSRF). Same predicate the inventory paths use.\n  if (!isHttpUrl(url)) {\n    throw Object.assign(new Error(`--url must be an http(s) URL (got: ${JSON.stringify(url)})`), {\n      exitCode: 2,\n    });\n  }\n  return [{ ...sites[0]!, deployedUrl: url }];\n}\n\nexport async function runAuditCommand(\n  site: string | undefined,\n  opts: AuditCommandOptions,\n): Promise<{ output: string; code: number }> {\n  const which = parseOnly(opts.only) ?? ALL_AUDIT_NAMES;\n  const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();\n\n  // A literal --write-airtable=<slug> is single-site (the slug names one row).\n  // Boolean --write-airtable + --fleet is fine: each site's slug comes from the\n  // inventory, so there's no cwd-derived-slug ambiguity.\n  if (typeof opts.writeAirtable === \"string\" && opts.fleet !== undefined) {\n    throw Object.assign(\n      new Error(\n        \"--write-airtable=<slug> is single-site; with --fleet each site's slug comes from the inventory. Use --write-airtable (no slug) + --fleet.\",\n      ),\n      { exitCode: 2 },\n    );\n  }\n\n  if (opts.url !== undefined && opts.fleet !== undefined) {\n    throw Object.assign(\n      new Error(\n        \"--url is single-site only and cannot be combined with --fleet. Audit a single site instead.\",\n      ),\n      { exitCode: 2 },\n    );\n  }\n\n  let sites = await resolveSites({\n    ...(site !== undefined ? { site } : {}),\n    ...(opts.fleet !== undefined ? { fleet: opts.fleet } : {}),\n    ...(opts.workdir !== undefined ? { workdir: opts.workdir } : {}),\n    cwd,\n  });\n\n  sites = applyDeployedUrl(sites, opts.url);\n\n  let skippedPrep: SkippedSite[] = [];\n  if (opts.fleet) {\n    const workdir = opts.workdir ?? fleetWorkdir();\n    const prep = await prepareFleetSites(sites, {\n      workdir,\n      needsCheckout: (s) => auditNeedsCheckout(s, which),\n    });\n    sites = prep.prepared;\n    skippedPrep = prep.skipped;\n  }\n\n  const results: AuditResult[] = [];\n  const renderer = rendererFor(opts.json);\n  await buildAuditTasks(sites, which, results, renderer, parseConcurrency(opts.concurrency)).run();\n\n  let output = opts.json ? JSON.stringify(results, null, 2) : formatTable(results);\n\n  // Surface any site that couldn't be prepared (no auditable target, clone\n  // failure) — visibly, but without reding the run. One misconfigured inventory\n  // row is an operator fix, not an outage; the other sites still audited and\n  // wrote back. \"No silent caps\": a dropped site is never invisible.\n  const skipNotice = formatSkippedNotice(skippedPrep);\n  if (skipNotice && !opts.json) output += `\\n\\n${skipNotice}`;\n\n  // \"Did every site actually get measured?\" — emitted for any fleet sweep that ran\n  // `smoke`, independent of --write-airtable, because it is a statement about the\n  // RUN, not about persistence. Deliberately not folded into FLEET_WRITE_SUMMARY:\n  // an unmeasured site still writes (it just writes nothing new), so the write gate\n  // counts it as a success. That gap is exactly what hid four nights of timeouts.\n  if (opts.fleet !== undefined && which.includes(\"smoke\") && !opts.json) {\n    const { formatUnmeasuredSmokeSummary } = await import(\"../../audits/smoke.js\");\n    output += `\\n\\n${formatUnmeasuredSmokeSummary(results)}`;\n  }\n\n  // Did any site fail to write back to Airtable? The fleet writer collects\n  // per-site failures instead of throwing, so without this the command would\n  // exit 0 while rows silently failed to persist — automation keying on `$?`\n  // would see a clean run. (The single-site writer throws on failure, so it's\n  // already non-zero via the propagated error.)\n  let writeBackFailed = false;\n  if (opts.writeAirtable !== undefined) {\n    const { openBase, readAirtableConfig } = await import(\"../../reports/airtable/client.js\");\n    const { listWebsites } = await import(\"../../reports/airtable/websites.js\");\n\n    if (opts.fleet !== undefined) {\n      const wb = await runFleetWriteBack({ results, which });\n      if (wb.anyFailed) writeBackFailed = true;\n      // Gate on !json: the write-summary is human text; appending it after the\n      // results array would corrupt `--json` output (the other notices already\n      // guard this way). The write itself still happens regardless of --json.\n      if (!opts.json) output += `\\n\\n${wb.summary}`;\n    } else {\n      const { resolveSlugFromCwd } = await import(\"../../audits/lighthouse-airtable.js\");\n      const { writeAuditsToAirtable } = await import(\"../../audits/write-audits-to-airtable.js\");\n      const slug =\n        typeof opts.writeAirtable === \"string\" && opts.writeAirtable.length > 0\n          ? opts.writeAirtable\n          : await resolveSlugFromCwd(cwd);\n      let writeSummary: WriteSummary | null = null;\n      await new Listr(\n        [\n          {\n            title: `Write to Airtable[${slug}]`,\n            task: async (_ctx, task) => {\n              const base = openBase(readAirtableConfig());\n              task.output = \"loading Websites…\";\n              const websites = await listWebsites(base);\n              task.output = \"writing scores…\";\n              writeSummary = await writeAuditsToAirtable({ base, websites, slug, results });\n              // #539 Phase 5: the FLEET path has mirrored since Phase 3, this\n              // single-site one never did — same write, same columns, reaching\n              // Turso only via the hourly sync. The summary already carries the\n              // exact FieldSet Airtable got, so no signature change is needed.\n              if (writeSummary.siteId && writeSummary.fields) {\n                const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n                await (await makeSiteMirror()).health(writeSummary.siteId, writeSummary.fields);\n              }\n              task.title = `Wrote to Websites[${writeSummary.siteName}] (${writeSummary.writes.length} audit type${writeSummary.writes.length === 1 ? \"\" : \"s\"})`;\n            },\n          },\n        ],\n        { renderer },\n      ).run();\n      if (writeSummary && !opts.json) output += `\\n\\n${formatWriteSummary(writeSummary)}`;\n    }\n  }\n\n  const notice = deployedUrlNotice(which, opts.url, cwd);\n  if (notice && !opts.json) output += `\\n\\n${notice}`;\n\n  const code = Math.max(\n    auditExitCode(results, opts.failOnViolations === true),\n    writeBackFailed ? 1 : 0,\n  );\n  return { output, code };\n}\n\n/** The fleet `--write-airtable` step: write every site's audits back to its\n *  Websites row, dual-write each just-written FieldSet into Turso (#539\n *  Phase 3), and record fleet-activity events. Extracted from runAuditCommand\n *  so the mirror WIRING itself is pinned by test — the mutation this seam\n *  kills is dropping the `...(mirror ? { mirror } : {})` pass-through, which\n *  would silently stop all five nightly sweeps from mirroring while every\n *  sweep stayed green (adversarial review of #566, finding 6). Deps default\n *  to the real fleet wiring; dynamic imports keep the no-write paths from\n *  loading Airtable/db clients. */\nexport async function runFleetWriteBack(args: {\n  results: AuditResult[];\n  which: AuditName[];\n  deps?: {\n    openBase?: () => AirtableBase;\n    makeMirror?: () => Promise<HealthMirror | null>;\n    recordEvents?: (events: FleetEvent[], now: Date) => Promise<void>;\n  };\n}): Promise<{ summary: string; anyFailed: boolean }> {\n  const { results, which, deps = {} } = args;\n  const { writeFleetAuditsToAirtable, formatFleetWriteSummary } =\n    await import(\"../../audits/write-audits-to-airtable.js\");\n  let base: AirtableBase;\n  if (deps.openBase) {\n    base = deps.openBase();\n  } else {\n    const { openBase, readAirtableConfig } = await import(\"../../reports/airtable/client.js\");\n    base = openBase(readAirtableConfig());\n  }\n  const { listWebsites } = await import(\"../../reports/airtable/websites.js\");\n  const websites = await listWebsites(base);\n  // Phase 3 dual-write (#539): mirror each site's written FieldSet into\n  // site_health. Null when libSQL creds are absent — Airtable write-back\n  // proceeds exactly as before.\n  const makeMirror =\n    deps.makeMirror ??\n    (async () => {\n      const { makeHealthMirrorBestEffort } = await import(\"../../audits/health-mirror.js\");\n      return makeHealthMirrorBestEffort();\n    });\n  const mirror = await makeMirror();\n  const fleetWrite = await writeFleetAuditsToAirtable({\n    base,\n    websites,\n    results,\n    ...(mirror ? { mirror } : {}),\n  });\n  // Record fleet-activity events (vuln_cleared / cert_renewed rode along on each\n  // WriteSummary) plus a per-sweep rollup. Best-effort: a missing Turso cred no-ops.\n  const sweep = which.includes(\"security\") ? \"security\" : \"lighthouse\";\n  const now = new Date();\n  const auditEvents = fleetWrite.written.flatMap((w) => w.events ?? []);\n  await (deps.recordEvents ?? recordFleetEventsBestEffort)(\n    [...auditEvents, fleetSweptEvent(sweep, fleetWrite.written.length, now.toISOString())],\n    now,\n  );\n  return { summary: formatFleetWriteSummary(fleetWrite), anyFailed: fleetWrite.failed.length > 0 };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;AACxB,SAAS,aAAa;AAsCtB,SAAS,UAAU,OAAoD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AAClD,aAAW,KAAK,OAAO;AACrB,QAAI,CAAC,gBAAgB,SAAS,CAAc,GAAG;AAC7C,YAAM,OAAO,OAAO,IAAI,MAAM,4BAA4B,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,IACjF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,SAAgC;AACnD,SAAO,QACJ,IAAI,CAAC,MAAM,GAAG,EAAE,MAAM,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI;AAAA,IAAO,EAAE,OAAO,EAAE,EAClF,KAAK,IAAI;AACd;AAEO,SAAS,cAAc,SAAwB,kBAAmC;AACvF,MAAI,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,EAAG,QAAO;AACrD,MAAI,kBAAkB;AACpB,UAAM,iBAAiB,QACpB,OAAO,CAAC,MAAM,EAAE,UAAU,MAAM,EAChC;AAAA,MACC,CAAC,GAAG,MACF,KAAM,EAAE,SAAsD,mBAAmB;AAAA,MACnF;AAAA,IACF;AACF,QAAI,iBAAiB,EAAG,QAAO;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,eAAe,IAAoB;AAC1C,MAAI,KAAK,IAAO,QAAO,GAAG,EAAE;AAC5B,QAAM,eAAe,KAAK,MAAM,KAAK,GAAK;AAC1C,MAAI,eAAe,GAAI,QAAO,GAAG,YAAY;AAC7C,QAAM,IAAI,KAAK,MAAM,eAAe,EAAE;AACtC,QAAM,IAAI,eAAe;AACzB,SAAO,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9C;AASO,SAAS,iBAAiB,OAA6C;AAC5E,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,GAAG;AACjC,UAAM,OAAO,OAAO,IAAI,MAAM,kDAAkD,KAAK,GAAG,GAAG;AAAA,MACzF,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAOA,SAAS,gBACP,OACA,OACA,SACA,UACA,aACA;AACA,QAAM,aAAa,MAAM,WAAW;AAEpC,MAAI,YAAY;AACd,UAAM,OAAO,MAAM,CAAC;AACpB,WAAO,IAAI;AAAA,MACT,MAAM,IAAI,CAAC,UAAU;AAAA,QACnB,OAAO;AAAA,QACP,MAAM,OAAO,MAAM,SAAS;AAC1B,gBAAM,QAAQ,KAAK,IAAI;AACvB,gBAAM,SAAS,MAAM,YAAY,MAAM,IAAI;AAC3C,kBAAQ,KAAK,MAAM;AACnB,gBAAM,UAAU,eAAe,KAAK,IAAI,IAAI,KAAK;AACjD,eAAK,QAAQ,GAAG,IAAI,KAAK,OAAO,OAAO,KAAK,OAAO;AACnD,cAAI,OAAO,WAAW,OAAQ,OAAM,IAAI,MAAM,OAAO,OAAO;AAAA,QAC9D;AAAA,MACF,EAAE;AAAA,MACF,EAAE,YAAY,MAAM,aAAa,OAAO,SAAS;AAAA,IACnD;AAAA,EACF;AAEA,SAAO,IAAI;AAAA,IACT,MAAM,IAAI,CAAC,SAAS;AAClB,YAAM,QAAQ,KAAK,QAAQ,KAAK;AAChC,aAAO;AAAA,QACL,OAAO;AAAA,QACP,MAAM,OAAO,MAAM,SAAS;AAC1B,gBAAM,QAAQ,KAAK,IAAI;AACvB,cAAI,OAAO;AACX,eAAK,SAAS,KAAK,MAAM,MAAM;AAC/B,gBAAM,UAAU,MAAM,QAAQ;AAAA,YAC5B,MAAM,IAAI,OAAO,SAAS;AACxB,oBAAM,IAAI,MAAM,YAAY,MAAM,IAAI;AACtC,sBAAQ,KAAK,CAAC;AACd,sBAAQ;AACR,mBAAK,SAAS,GAAG,IAAI,IAAI,MAAM,MAAM;AACrC,qBAAO;AAAA,YACT,CAAC;AAAA,UACH;AACA,gBAAM,UAAU,eAAe,KAAK,IAAI,IAAI,KAAK;AACjD,gBAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC1D,gBAAM,SAAS,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE;AAC1D,gBAAM,OACJ,SAAS,IACL,GAAG,MAAM,YACT,SAAS,IACP,GAAG,MAAM,WAAW,WAAW,IAAI,KAAK,GAAG,KAC3C;AACR,eAAK,QAAQ,GAAG,KAAK,KAAK,IAAI,KAAK,OAAO;AAC1C,cAAI,SAAS,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,KAAK,MAAM,kBAAkB;AAAA,QACvE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,EAAE,YAAY,aAAa,aAAa,OAAO,SAAS;AAAA,EAC1D;AACF;AAMA,SAAS,mBAAmB,SAA+B;AACzD,QAAM,QAAQ,QAAQ,OAAO,IAAI,CAAC,MAAM;AACtC,QAAI,EAAE,UAAU,cAAc;AAC5B,YAAM,IAAI,EAAE;AAMZ,aAAO,mBAAmB,EAAE,WAAW,MAAM,EAAE,aAAa,OAAO,EAAE,aAAa,QAAQ,EAAE,GAAG;AAAA,IACjG;AACA,QAAI,EAAE,UAAU,QAAQ;AACtB,aAAO,WAAY,EAAE,OAAkC,UAAU;AAAA,IACnE;AACA,QAAI,EAAE,UAAU,QAAQ;AACtB,YAAMA,KAAI,EAAE;AACZ,aAAO,WAAWA,GAAE,OAAO,aAAaA,GAAE,WAAW;AAAA,IACvD;AACA,UAAM,IAAI,EAAE;AACZ,WAAO,eAAe,EAAE,QAAQ,KAAK,EAAE,IAAI,KAAK,EAAE,QAAQ,KAAK,EAAE,GAAG;AAAA,EACtE,CAAC;AACD,SAAO,4BAAuB,QAAQ,QAAQ;AAAA,EAAO,MAAM,KAAK,IAAI,CAAC;AACvE;AAKA,SAAS,YAAY,MAAqC;AACxD,SAAO,OAAO,WAAW;AAC3B;AAMO,SAAS,kBACd,OACA,KACA,KACe;AACf,MAAI,QAAQ,OAAW,QAAO;AAC9B,QAAM,SAAS,MAAM,OAAO,CAAC,MAAM,MAAM,YAAY;AACrD,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SAAO,wCAAwC,OAAO,KAAK,IAAI,CAAC,sCAAsC,GAAG;AAC3G;AAMA,IAAM,uBAA+C,oBAAI,IAAe;AAAA,EACtE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAID,IAAM,oBAA4C,oBAAI,IAAe,CAAC,gBAAgB,CAAC;AAKhF,SAAS,mBAAmB,MAAY,OAA6B;AAC1E,QAAM,kBAAkB,MAAM,MAAM,CAAC,MAAM;AACzC,QAAI,CAAC,qBAAqB,IAAI,CAAC,EAAG,QAAO;AACzC,WAAO,kBAAkB,IAAI,CAAC,IAAI,KAAK,cAAc,SAAY,KAAK,gBAAgB;AAAA,EACxF,CAAC;AACD,SAAO,CAAC;AACV;AAOO,SAAS,iBAAiB,OAAe,KAAiC;AAC/E,MAAI,QAAQ,OAAW,QAAO;AAC9B,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,OAAO;AAAA,MACX,IAAI,MAAM,uCAAuC,MAAM,MAAM,YAAY;AAAA,MACzE,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAIA,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,UAAM,OAAO,OAAO,IAAI,MAAM,sCAAsC,KAAK,UAAU,GAAG,CAAC,GAAG,GAAG;AAAA,MAC3F,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO,CAAC,EAAE,GAAG,MAAM,CAAC,GAAI,aAAa,IAAI,CAAC;AAC5C;AAEA,eAAsB,gBACpB,MACA,MAC2C;AAC3C,QAAM,QAAQ,UAAU,KAAK,IAAI,KAAK;AACtC,QAAM,MAAM,KAAK,MAAM,QAAQ,KAAK,GAAG,IAAI,QAAQ,IAAI;AAKvD,MAAI,OAAO,KAAK,kBAAkB,YAAY,KAAK,UAAU,QAAW;AACtE,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF;AAAA,MACF;AAAA,MACA,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,KAAK,QAAQ,UAAa,KAAK,UAAU,QAAW;AACtD,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF;AAAA,MACF;AAAA,MACA,EAAE,UAAU,EAAE;AAAA,IAChB;AAAA,EACF;AAEA,MAAI,QAAQ,MAAM,aAAa;AAAA,IAC7B,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC;AAAA,IACrC,GAAI,KAAK,UAAU,SAAY,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,IACxD,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AAED,UAAQ,iBAAiB,OAAO,KAAK,GAAG;AAExC,MAAI,cAA6B,CAAC;AAClC,MAAI,KAAK,OAAO;AACd,UAAM,UAAU,KAAK,WAAW,aAAa;AAC7C,UAAM,OAAO,MAAM,kBAAkB,OAAO;AAAA,MAC1C;AAAA,MACA,eAAe,CAAC,MAAM,mBAAmB,GAAG,KAAK;AAAA,IACnD,CAAC;AACD,YAAQ,KAAK;AACb,kBAAc,KAAK;AAAA,EACrB;AAEA,QAAM,UAAyB,CAAC;AAChC,QAAM,WAAW,YAAY,KAAK,IAAI;AACtC,QAAM,gBAAgB,OAAO,OAAO,SAAS,UAAU,iBAAiB,KAAK,WAAW,CAAC,EAAE,IAAI;AAE/F,MAAI,SAAS,KAAK,OAAO,KAAK,UAAU,SAAS,MAAM,CAAC,IAAI,YAAY,OAAO;AAM/E,QAAM,aAAa,oBAAoB,WAAW;AAClD,MAAI,cAAc,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,UAAU;AAOzD,MAAI,KAAK,UAAU,UAAa,MAAM,SAAS,OAAO,KAAK,CAAC,KAAK,MAAM;AACrE,UAAM,EAAE,6BAA6B,IAAI,MAAM,OAAO,yBAAuB;AAC7E,cAAU;AAAA;AAAA,EAAO,6BAA6B,OAAO,CAAC;AAAA,EACxD;AAOA,MAAI,kBAAkB;AACtB,MAAI,KAAK,kBAAkB,QAAW;AACpC,UAAM,EAAE,UAAU,mBAAmB,IAAI,MAAM,OAAO,0BAAkC;AACxF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,4BAAoC;AAE1E,QAAI,KAAK,UAAU,QAAW;AAC5B,YAAM,KAAK,MAAM,kBAAkB,EAAE,SAAS,MAAM,CAAC;AACrD,UAAI,GAAG,UAAW,mBAAkB;AAIpC,UAAI,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,GAAG,OAAO;AAAA,IAC7C,OAAO;AACL,YAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,uCAAqC;AACjF,YAAM,EAAE,sBAAsB,IAAI,MAAM,OAAO,4CAA0C;AACzF,YAAM,OACJ,OAAO,KAAK,kBAAkB,YAAY,KAAK,cAAc,SAAS,IAClE,KAAK,gBACL,MAAM,mBAAmB,GAAG;AAClC,UAAI,eAAoC;AACxC,YAAM,IAAI;AAAA,QACR;AAAA,UACE;AAAA,YACE,OAAO,qBAAqB,IAAI;AAAA,YAChC,MAAM,OAAO,MAAM,SAAS;AAC1B,oBAAM,OAAO,SAAS,mBAAmB,CAAC;AAC1C,mBAAK,SAAS;AACd,oBAAM,WAAW,MAAM,aAAa,IAAI;AACxC,mBAAK,SAAS;AACd,6BAAe,MAAM,sBAAsB,EAAE,MAAM,UAAU,MAAM,QAAQ,CAAC;AAK5E,kBAAI,aAAa,UAAU,aAAa,QAAQ;AAC9C,sBAAM,EAAE,eAAe,IAAI,MAAM,OAAO,+BAAyB;AACjE,uBAAO,MAAM,eAAe,GAAG,OAAO,aAAa,QAAQ,aAAa,MAAM;AAAA,cAChF;AACA,mBAAK,QAAQ,qBAAqB,aAAa,QAAQ,MAAM,aAAa,OAAO,MAAM,cAAc,aAAa,OAAO,WAAW,IAAI,KAAK,GAAG;AAAA,YAClJ;AAAA,UACF;AAAA,QACF;AAAA,QACA,EAAE,SAAS;AAAA,MACb,EAAE,IAAI;AACN,UAAI,gBAAgB,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,mBAAmB,YAAY,CAAC;AAAA,IACnF;AAAA,EACF;AAEA,QAAM,SAAS,kBAAkB,OAAO,KAAK,KAAK,GAAG;AACrD,MAAI,UAAU,CAAC,KAAK,KAAM,WAAU;AAAA;AAAA,EAAO,MAAM;AAEjD,QAAM,OAAO,KAAK;AAAA,IAChB,cAAc,SAAS,KAAK,qBAAqB,IAAI;AAAA,IACrD,kBAAkB,IAAI;AAAA,EACxB;AACA,SAAO,EAAE,QAAQ,KAAK;AACxB;AAWA,eAAsB,kBAAkB,MAQa;AACnD,QAAM,EAAE,SAAS,OAAO,OAAO,CAAC,EAAE,IAAI;AACtC,QAAM,EAAE,4BAA4B,wBAAwB,IAC1D,MAAM,OAAO,4CAA0C;AACzD,MAAI;AACJ,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK,SAAS;AAAA,EACvB,OAAO;AACL,UAAM,EAAE,UAAU,mBAAmB,IAAI,MAAM,OAAO,0BAAkC;AACxF,WAAO,SAAS,mBAAmB,CAAC;AAAA,EACtC;AACA,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,4BAAoC;AAC1E,QAAM,WAAW,MAAM,aAAa,IAAI;AAIxC,QAAM,aACJ,KAAK,eACJ,YAAY;AACX,UAAM,EAAE,2BAA2B,IAAI,MAAM,OAAO,iCAA+B;AACnF,WAAO,2BAA2B;AAAA,EACpC;AACF,QAAM,SAAS,MAAM,WAAW;AAChC,QAAM,aAAa,MAAM,2BAA2B;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B,CAAC;AAGD,QAAM,QAAQ,MAAM,SAAS,UAAU,IAAI,aAAa;AACxD,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,cAAc,WAAW,QAAQ,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACpE,SAAO,KAAK,gBAAgB;AAAA,IAC1B,CAAC,GAAG,aAAa,gBAAgB,OAAO,WAAW,QAAQ,QAAQ,IAAI,YAAY,CAAC,CAAC;AAAA,IACrF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,wBAAwB,UAAU,GAAG,WAAW,WAAW,OAAO,SAAS,EAAE;AACjG;","names":["c"]}

package/dist/{convert-to-pnpm-6L6P74WR.js → convert-to-pnpm-QFJOEP5V.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-TVL5MVUF.js";
 import {
   resolveSites
-} from "./chunk-P2FE5AI6.js";
+} from "./chunk-CROKUHJB.js";
 import {
   convertToPnpm
 } from "./chunk-XIDUYLSR.js";
@@ -51,4 +51,4 @@ async function runConvertToPnpmCommand(site, opts) {
 export {
   runConvertToPnpmCommand
 };
-//# sourceMappingURL=convert-to-pnpm-6L6P74WR.js.map
+//# sourceMappingURL=convert-to-pnpm-QFJOEP5V.js.map

package/dist/{db-B35OGV3G.js → db-UXNIZ2RG.js}

@@ -16,7 +16,7 @@ async function runDbCommand(action, opts) {
     const { readDbConfig, openDb } = await import("./client-AUE3XUPO.js");
     const db = await openDb(opts.url ? { url: opts.url } : readDbConfig());
     const { openBase, readAirtableConfig } = await import("./client-EPVO3FEH.js");
-    const { getWebsiteBySlug } = await import("./websites-SXWTP72S.js");
+    const { getWebsiteBySlug } = await import("./websites-D6WYFAES.js");
     const base = openBase(readAirtableConfig());
     const {
       createSubmission,
@@ -89,7 +89,7 @@ async function runDbCommand(action, opts) {
       now: () => /* @__PURE__ */ new Date()
     };
     if (action === "import-airtable") {
-      const { importFleetState, formatReapSummary } = await import("./import-airtable-HE43FB4H.js");
+      const { importFleetState, formatReapSummary } = await import("./import-airtable-OHVY344G.js");
       const summary = await importFleetState(db, {
         ...io,
         // Attachment bodies ride expiring signed URLs; a failed fetch imports the
@@ -116,7 +116,7 @@ async function runDbCommand(action, opts) {
       return { output: lines.join("\n"), code: 0 };
     }
     if (action === "sync") {
-      const { syncFleetState, formatSyncResult } = await import("./sync-34HNZZ56.js");
+      const { syncFleetState, formatSyncResult } = await import("./sync-CTUVXMCK.js");
       const result2 = await syncFleetState(db, {
         ...io,
         fetchAttachment: async (url) => {
@@ -133,7 +133,7 @@ async function runDbCommand(action, opts) {
         code: result2.parity.mismatches.length > 0 ? 1 : 0
       };
     }
-    const { checkFleetParity, formatParityResult } = await import("./parity-MWS24A3H.js");
+    const { checkFleetParity, formatParityResult } = await import("./parity-56KA2DGR.js");
     const result = await checkFleetParity(db, io);
     return { output: formatParityResult(result), code: result.mismatches.length > 0 ? 1 : 0 };
   }
@@ -142,7 +142,7 @@ async function runDbCommand(action, opts) {
     const db = await openDb(opts.url ? { url: opts.url } : readDbConfig());
     const { openBase, readAirtableConfig } = await import("./client-EPVO3FEH.js");
     const base = openBase(readAirtableConfig());
-    const { backfillHeaderImages, formatBackfillResult } = await import("./header-images-335L2AKB.js");
+    const { backfillHeaderImages, formatBackfillResult } = await import("./header-images-SQBCE5OD.js");
     const result = await backfillHeaderImages(db, {
       listWebsiteRecords: async () => (await base("Websites").select().all()).map((r) => ({
         id: r.id,
@@ -214,4 +214,4 @@ async function runDbCommand(action, opts) {
 export {
   runDbCommand
 };
-//# sourceMappingURL=db-B35OGV3G.js.map
+//# sourceMappingURL=db-UXNIZ2RG.js.map

package/dist/{digest-BL6UJYKH.js → digest-FW6QMZZJ.js}

@@ -16,28 +16,33 @@ import {
   diffAttention,
   readDigestState,
   writeDigestState
-} from "./chunk-F5KM4LEQ.js";
-import "./chunk-N45M3FDK.js";
+} from "./chunk-NCMZMLY7.js";
+import "./chunk-SDDPUAWH.js";
 import "./chunk-PZR4EBPY.js";
 import {
   isIdempotencyConflict
-} from "./chunk-2NDRHXMR.js";
-import "./chunk-GECESMVS.js";
-import "./chunk-5UINJNAJ.js";
-import "./chunk-CQR4LIM7.js";
-import "./chunk-Z7AXYKQB.js";
-import {
-  escapeHtml
-} from "./chunk-DJZWYIPP.js";
+} from "./chunk-NDWYJLRF.js";
 import {
   isPendingApproval,
   listAllReports
-} from "./chunk-ACBRLLFT.js";
+} from "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
+import "./chunk-IY6256GK.js";
 import {
   openBase,
   readAirtableConfig
 } from "./chunk-HN6I2XWI.js";
+import "./chunk-ZGBEIWSC.js";
+import "./chunk-GECESMVS.js";
+import "./chunk-MT2JINSS.js";
+import {
+  escapeHtml
+} from "./chunk-DJZWYIPP.js";
+import "./chunk-5UINJNAJ.js";
+import {
+  listWebsites,
+  siteSlug
+} from "./chunk-7NYN2P6I.js";
 import {
   defaultResendClient
 } from "./chunk-WEKL2HYJ.js";
@@ -45,10 +50,6 @@ import "./chunk-XUGSZP7Z.js";
 import "./chunk-EVBCK2KC.js";
 import "./chunk-JHGHLKFS.js";
 import "./chunk-3SF7D4DY.js";
-import {
-  listWebsites,
-  siteSlug
-} from "./chunk-LDWZSLSU.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/reports/digest.ts
@@ -342,4 +343,4 @@ export {
   renderDigestHtml,
   runDigest
 };
-//# sourceMappingURL=digest-BL6UJYKH.js.map
+//# sourceMappingURL=digest-FW6QMZZJ.js.map

package/dist/{digest-BL6UJYKH.js.map → digest-FW6QMZZJ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/reports/digest.ts"],"sourcesContent":["// src/reports/digest.ts\nimport { openBase, readAirtableConfig, type AirtableBase } from \"./airtable/client.js\";\nimport { listAllReports, isPendingApproval } from \"./airtable/reports.js\";\nimport type { ReportRow } from \"./airtable/reports.js\";\nimport { listWebsites, siteSlug, type WebsiteRow } from \"./airtable/websites.js\";\nimport { defaultResendClient, type ResendClient } from \"./send/resend.js\";\nimport { isIdempotencyConflict } from \"./send/idempotency.js\";\nimport {\n  collectVulnAlerts,\n  collectDeliveryFailures,\n  collectPreflightBlocked,\n  collectLighthouseAlerts,\n  collectRenovateAlerts,\n  collectCiAlerts,\n  collectAnalyticsFailures,\n  collectTurnstileGuardrailAlerts,\n  collectNotifyBounceAlerts,\n  collectPrismicDriftAlerts,\n  NOTIFY_BOUNCE_WINDOW_DAYS,\n} from \"../alerts/digest-collectors.js\";\nimport { diffAttention, readDigestState, writeDigestState } from \"../alerts/digest-state.js\";\nimport { escapeHtml as esc } from \"../util/html.js\";\nimport { operatorEmail } from \"../util/operator.js\";\nimport type {\n  AttentionItem,\n  AttentionSeverity,\n  AttentionStatus,\n  ReadyItem,\n  DigestSections,\n  SubmissionsDigestSection,\n} from \"../alerts/attention.js\";\n// Type-only: erased at compile time, so the kysely/libsql devDependency never loads\n// in a consuming fleet site (the runtime read is the dynamic import in\n// fetchSubmissionsDigestCounts, same rule as fetchNotifyBounceCounts).\nimport type { SiteSubmissionCounts } from \"../db/submissions.js\";\n\n// The attention/digest contract lives in `../alerts/attention.ts` (a dependency-free\n// types module) so the `alerts/*` collectors can depend on it without importing back\n// from this renderer/IO module — see attention.ts for the cycle it breaks. Re-exported\n// here so existing `from \"./digest.js\"` type importers keep resolving.\nexport type {\n  AttentionItem,\n  AttentionSeverity,\n  AttentionStatus,\n  ReadyItem,\n  DigestSections,\n  SubmissionsDigestSection,\n} from \"../alerts/attention.js\";\n\nconst GREY = \"#757575\";\nconst RED = \"#C00\";\n\n/** Shared anchor style — Gmail does not inherit font-family into <a> tags. */\nconst ANCHOR_STYLE = `color:${RED};font-family:helvetica,sans-serif`;\n\nfunction readySection(items: ReadyItem[]): string {\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Ready for your yes</h2>`;\n  if (items.length === 0) {\n    return `${heading}<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">Nothing waiting on you.</p>`;\n  }\n  const rows = items\n    .map((it) => {\n      const safeUrl = it.dashboardUrl.startsWith(\"https://\") ? it.dashboardUrl : undefined;\n      const link = safeUrl\n        ? `<a href=\"${esc(safeUrl)}\" style=\"${ANCHOR_STYLE}\">review &amp; approve</a>`\n        : `review &amp; approve`;\n      return `\n      <tr>\n        <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">\n          <strong style=\"color:#222\">${esc(it.siteName)}</strong> — ${esc(it.reportType)} (${esc(it.period)})\n          — ${link}\n        </td>\n      </tr>`;\n    })\n    .join(\"\");\n  return `${heading}<table role=\"presentation\" style=\"border-collapse:collapse;margin:0\">${rows}</table>`;\n}\n\nconst SEVERITY_ORDER: Record<AttentionSeverity, number> = { critical: 0, warning: 1 };\n\n/** Render the per-item status badge (\"NEW\"/\"WORSE\"); standing items get nothing. */\nfunction attentionBadge(status?: AttentionStatus): string {\n  if (status === \"new\")\n    return `<strong style=\"color:${RED};font-family:helvetica,sans-serif\">NEW</strong> `;\n  if (status === \"worse\")\n    return `<strong style=\"color:${RED};font-family:helvetica,sans-serif\">WORSE</strong> `;\n  return \"\";\n}\n\nfunction attentionSection(items: AttentionItem[]): string {\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Needs attention</h2>`;\n  if (items.length === 0) {\n    return `${heading}<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">All clear — nothing needs attention.</p>`;\n  }\n\n  // Group by siteName, preserving first-seen site order; sort within a site by\n  // severity (critical first).\n  const bySite = new Map<string, AttentionItem[]>();\n  for (const it of items) {\n    const bucket = bySite.get(it.siteName);\n    if (bucket) bucket.push(it);\n    else bySite.set(it.siteName, [it]);\n  }\n\n  const groups = [...bySite.entries()]\n    .map(([siteName, siteItems]) => {\n      const sorted = [...siteItems].sort(\n        (a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity],\n      );\n      const rows = sorted\n        .map((it) => {\n          const safeUrl = it.url?.startsWith(\"https://\") ? it.url : undefined;\n          const titleHtml = safeUrl\n            ? `<a href=\"${esc(safeUrl)}\" style=\"${ANCHOR_STYLE}\">${esc(it.title)}</a>`\n            : esc(it.title);\n          return `\n          <tr>\n            <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">${attentionBadge(it.status)}${titleHtml}</td>\n          </tr>`;\n        })\n        .join(\"\");\n      return `\n      <tr>\n        <td style=\"color:#222;font-family:helvetica,sans-serif;font-size:16px;font-weight:700;padding:8px 0 4px\">${esc(siteName)}</td>\n      </tr>\n      ${rows}`;\n    })\n    .join(\"\");\n\n  return `${heading}<table role=\"presentation\" style=\"border-collapse:collapse;margin:0\">${groups}</table>`;\n}\n\n/** The \"Submissions (24h)\" telemetry block: fleet totals + a per-site glance line.\n *  Context, not an alarm — absent/null section or all-zero totals render nothing\n *  (no-noise), and the section never triggers a send on its own (see runDigest). */\nfunction submissionsSection(s: SubmissionsDigestSection | null | undefined): string {\n  if (!s) return \"\";\n  if (s.leads === 0 && s.signups === 0 && s.spamAuto === 0) return \"\";\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Submissions (24h)</h2>`;\n  // All three terms always render together — omitting a zero term next to a nonzero\n  // one reads as \"not measured\" rather than \"none\"; simplest honest form.\n  const totals = [\n    `${s.leads} new lead${s.leads === 1 ? \"\" : \"s\"}`,\n    `${s.signups} newsletter/RSVP signup${s.signups === 1 ? \"\" : \"s\"}`,\n    `${s.spamAuto} auto-filtered spam`,\n  ].join(\" · \");\n  const totalLine = `<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">${totals}</p>`;\n  if (s.bySite.length === 0) return `${heading}${totalLine}`;\n  const rows = s.bySite\n    .map((site) => {\n      const parts: string[] = [];\n      if (site.leads > 0) parts.push(`${site.leads} lead${site.leads === 1 ? \"\" : \"s\"}`);\n      if (site.signups > 0) parts.push(`${site.signups} signup${site.signups === 1 ? \"\" : \"s\"}`);\n      if (site.spamAuto > 0) parts.push(`${site.spamAuto} auto-filtered`);\n      return `\n      <tr>\n        <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">\n          <strong style=\"color:#222\">${esc(site.siteName)}</strong> — ${parts.join(\" · \")}\n        </td>\n      </tr>`;\n    })\n    .join(\"\");\n  return `${heading}${totalLine}<table role=\"presentation\" style=\"border-collapse:collapse;margin:8px 0 0\">${rows}</table>`;\n}\n\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\n\n/** UTC \"YYYY-MM-DD\" — the Resend idempotency key suffix, so a same-day cron re-fire dedupes. */\nfunction digestDateKey(d: Date): string {\n  return d.toISOString().slice(0, 10);\n}\n\n/**\n * The gate for \"Ready for your yes\": Draft ready ∧ ¬Approved to send ∧ Sent at BLANK.\n *\n * Implemented as `listAllReports(base).filter(...)` (the authorized deviation from the plan's\n * draft, which pre-dated Slice 1's merged fix): `listAllReports` already calls `mapRow`, which\n * handles `Period` correctly, so no local `rawToReportRow` duplicate is needed. The JS filter\n * does real work — the test fake does NOT evaluate `filterByFormula` — so correctness is\n * test-provable here.\n *\n * Exported: the fleet homepage (Task 3.5b) reuses it for the pending-approval count.\n */\nexport async function listPendingApproval(base: AirtableBase): Promise<ReportRow[]> {\n  return (await listAllReports(base)).filter(isPendingApproval);\n}\n\n// ── collectAttention (IO wrapper, sibling to runDigest) ──────────────────────\n\nexport type CollectAttentionDeps = {\n  base: AirtableBase;\n  /** Same baseUrl value runDigest threads; used for the /s/<slug> links. */\n  baseUrl: string;\n  /** Pre-fetched Websites rows. When supplied (runDigest already read them),\n   *  collectAttention reuses them instead of issuing a second `listWebsites`. */\n  websites?: WebsiteRow[];\n  /** Pre-fetched Reports rows. When supplied (runDigest already read them),\n   *  collectAttention reuses them instead of issuing a second `listAllReports`. */\n  reports?: ReportRow[];\n  /** Clock for the GitHub-signals staleness gate (collectCiAlerts /\n   *  collectRenovateAlerts skip a >3-day-stale sweep). Defaults to wall-clock;\n   *  runDigest threads its run-start `today` so a quiet repo's frozen CI/Renovate\n   *  signal stops badging once its sweep goes stale. */\n  now?: Date;\n  /** Pre-fetched per-site bounced-lead-notification counts (tests, or a caller with\n   *  an open db). When omitted, collectAttention reads them from libSQL itself —\n   *  defensively, so a missing TURSO env or a Turso blip drops just this signal. */\n  notifyBounces?: ReadonlyMap<string, number>;\n};\n\n/** Per-site bounced-notification counts for the notify-bounce collector, read from\n *  libSQL over the collector's own window. The db modules are imported DYNAMICALLY:\n *  src/db/submissions.ts pulls kysely at top level, and kysely/libsql live in\n *  devDependencies consuming fleet sites don't install — a static import here would\n *  crash their CLI at require time (same rule as openDb's own lazy loads). Any\n *  failure (no TURSO env, Turso down) logs and yields an empty map: the digest\n *  must never blank over a missing optional signal. */\nasync function fetchNotifyBounceCounts(now: Date): Promise<ReadonlyMap<string, number>> {\n  try {\n    const [{ openDb, readDbConfig }, { countNotifyBouncedBySite }, { screenOutsSince }] =\n      await Promise.all([\n        import(\"../db/client.js\"),\n        import(\"../db/submissions.js\"),\n        import(\"../db/screenouts.js\"),\n      ]);\n    const db = await openDb(readDbConfig());\n    return await countNotifyBouncedBySite(db, screenOutsSince(now, NOTIFY_BOUNCE_WINDOW_DAYS));\n  } catch (e) {\n    console.warn(`⚠ notify-bounce counts unavailable (libSQL): ${(e as Error).message}`);\n    return new Map();\n  }\n}\n\n/** The \"Submissions (24h)\" telemetry window — a precise 24h ISO-timestamp compare\n *  (unlike screenOutsSince's date-only strings). */\nconst SUBMISSIONS_DIGEST_WINDOW_MS = 24 * 60 * 60 * 1000;\n\n/** Per-site submission counts for the digest telemetry section, read from libSQL.\n *  Dynamic imports + fail-soft for the same reason as fetchNotifyBounceCounts:\n *  kysely/libsql are devDependencies consuming fleet sites don't install, and a\n *  Turso blip must drop just this section, never the digest. Returns null (not an\n *  empty map) on failure so the renderer can omit the section rather than claim a\n *  quiet fleet. */\nasync function fetchSubmissionsDigestCounts(\n  now: Date,\n): Promise<ReadonlyMap<string, SiteSubmissionCounts> | null> {\n  try {\n    const [{ openDb, readDbConfig }, { countSubmissionsSinceBySite }] = await Promise.all([\n      import(\"../db/client.js\"),\n      import(\"../db/submissions.js\"),\n    ]);\n    const db = await openDb(readDbConfig());\n    return await countSubmissionsSinceBySite(\n      db,\n      new Date(now.getTime() - SUBMISSIONS_DIGEST_WINDOW_MS).toISOString(),\n    );\n  } catch (e) {\n    console.warn(`⚠ submissions telemetry unavailable (libSQL): ${(e as Error).message}`);\n    return null;\n  }\n}\n\n/** Assemble the \"Submissions (24h)\" section from the per-site counts. PURE (exported\n *  for direct tests). Totals sum ALL map entries — an orphan site id still counts in\n *  the fleet totals. bySite lists only ids that resolve in `sitesById` AND carry any\n *  nonzero count, sorted by total volume desc then siteName A-Z. null counts (libSQL\n *  unavailable) → null (section omitted). */\nexport function buildSubmissionsDigestSection(\n  counts: ReadonlyMap<string, SiteSubmissionCounts> | null,\n  sitesById: ReadonlyMap<string, WebsiteRow>,\n): SubmissionsDigestSection | null {\n  if (counts === null) return null;\n  let leads = 0;\n  let signups = 0;\n  let spamAuto = 0;\n  const bySite: SubmissionsDigestSection[\"bySite\"] = [];\n  for (const [siteId, c] of counts) {\n    leads += c.leads;\n    signups += c.signups;\n    spamAuto += c.spamAuto;\n    const site = sitesById.get(siteId);\n    if (site && c.leads + c.signups + c.spamAuto > 0) {\n      bySite.push({ siteName: site.name, ...c });\n    }\n  }\n  bySite.sort(\n    (a, b) =>\n      b.leads + b.signups + b.spamAuto - (a.leads + a.signups + a.spamAuto) ||\n      a.siteName.localeCompare(b.siteName),\n  );\n  return { leads, signups, spamAuto, bySite };\n}\n\n/** Run a single collector under a try/catch: a thrown collector logs and yields []\n *  so one broken signal never blanks the whole \"Needs attention\" section. */\nfunction runCollector(label: string, fn: () => AttentionItem[]): AttentionItem[] {\n  try {\n    return fn();\n  } catch (e) {\n    console.warn(`⚠ attention collector \"${label}\" failed: ${(e as Error).message}`);\n    return [];\n  }\n}\n\n/**\n * Fetch the free signals once (listAllReports + listWebsites) — or reuse the\n * `reports`/`websites` arrays runDigest already read, so a single run reads each\n * table once — build the sitesById map the delivery collector needs, and run each\n * pure collector isolated. Returns the union of items; diffing/badging happens in\n * runDigest.\n *\n * The Renovate + CI signals come from the SAME persisted collectors the operator\n * cockpit (`buildCockpitModel`) runs — `collectRenovateAlerts` (key\n * `renovate:<siteId>`) and `collectCiAlerts` (key `ci:<siteId>`), reading the\n * nightly-persisted `renovateFailingCis`/`defaultBranchCi` fields. This is the\n * key-space unification: because the digest writes the shared Digest State\n * snapshot with these same keys, the cockpit's NEW/WORSE diff finds them and the\n * two surfaces agree (the prior live per-PR `renovate:<repo>#<n>` sweep never\n * matched the cockpit's keys, so its cards badged NEW forever).\n */\nexport async function collectAttention(deps: CollectAttentionDeps): Promise<AttentionItem[]> {\n  const reports = deps.reports ?? (await listAllReports(deps.base));\n  const websites = deps.websites ?? (await listWebsites(deps.base));\n  const now = deps.now ?? new Date();\n  const notifyBounces = deps.notifyBounces ?? (await fetchNotifyBounceCounts(now));\n  const sitesById = new Map<string, WebsiteRow>(websites.map((w) => [w.id, w]));\n  return [\n    ...runCollector(\"vuln\", () => collectVulnAlerts(websites, deps.baseUrl)),\n    ...runCollector(\"delivery\", () => collectDeliveryFailures(reports, sitesById, deps.baseUrl)),\n    ...runCollector(\"preflight\", () => collectPreflightBlocked(reports, sitesById, deps.baseUrl)),\n    ...runCollector(\"lighthouse\", () => collectLighthouseAlerts(websites, deps.baseUrl)),\n    ...runCollector(\"renovate\", () => collectRenovateAlerts(websites, deps.baseUrl, now)),\n    ...runCollector(\"ci\", () => collectCiAlerts(websites, deps.baseUrl, now)),\n    ...runCollector(\"analytics\", () => collectAnalyticsFailures(websites, deps.baseUrl, now)),\n    ...runCollector(\"turnstile\", () =>\n      collectTurnstileGuardrailAlerts(websites, deps.baseUrl, now),\n    ),\n    ...runCollector(\"notify-bounce\", () =>\n      collectNotifyBounceAlerts(websites, notifyBounces, deps.baseUrl),\n    ),\n    // Same collector the cockpit runs, over the same persisted `Prismic Models`\n    // columns and the same keys — so the snapshot this digest writes is the one\n    // the cockpit diffs NEW/WORSE against, and the two surfaces agree.\n    ...runCollector(\"prismic-drift\", () => collectPrismicDriftAlerts(websites, deps.baseUrl, now)),\n  ];\n}\n\nexport type DigestRunOptions = {\n  resend?: ResendClient;\n  /** Dashboard origin for the /s/<slug> links, e.g. \"https://reddoor-maintenance.netlify.app\". */\n  baseUrl: string;\n  /**\n   * Inject a pre-opened Airtable base (tests, server handlers).\n   * When omitted, `openBase(readAirtableConfig())` is called from the environment.\n   */\n  base?: AirtableBase;\n  /** Per-site submission counts for the \"Submissions (24h)\" section. undefined =\n   *  fetch from libSQL; null = simulate unavailable (section omitted); a Map =\n   *  injected (tests). */\n  submissionCounts?: ReadonlyMap<string, SiteSubmissionCounts> | null;\n  /**\n   * The run clock. Production omits it and gets `new Date()`.\n   *\n   * Injectable because several collectors this run feeds are AGE-SENSITIVE —\n   * `collectPrismicDriftAlerts` alone changes an item's key and its wording once\n   * a verdict crosses `PRISMIC_DRIFT_STALE_DAYS` — so a digest test that cannot\n   * fix the clock is asserting on the day it happens to run. Two did, and both\n   * went red four days after they were written, reporting the staleness wording\n   * as if the drift wiring had broken. `collectAttention` already takes a `now`\n   * for exactly this reason; this threads the same lever one layer out.\n   */\n  now?: Date;\n};\n\nexport async function runDigest(\n  options: DigestRunOptions,\n): Promise<{ output: string; code: number }> {\n  // Capture clock BEFORE any await so the idempotency key can't roll past midnight mid-run.\n  const today = options.now ?? new Date();\n  try {\n    const base = options.base ?? openBase(readAirtableConfig());\n    // Read each table ONCE for the whole run, then thread the arrays into\n    // collectAttention so it doesn't re-fetch (was: listWebsites ×2, listAllReports\n    // ×2). Pending is derived in-line with listPendingApproval's exact predicate.\n    const reports = await listAllReports(base);\n    const websites = await listWebsites(base);\n    const sites = new Map(websites.map((w) => [w.id, w]));\n\n    const pending = reports.filter(isPendingApproval);\n\n    const readyForYourYes: ReadyItem[] = [];\n    const baseUrl = options.baseUrl.replace(/\\/$/, \"\");\n    for (const r of pending) {\n      const site = sites.get(r.siteId);\n      if (!site) continue; // orphan report → skip rather than render a broken link\n      // An empty Name slugs to \"\" → `/s/` is a dead link (getWebsiteBySlug can't\n      // match it). Fall back to the fleet homepage so the operator still lands\n      // somewhere usable instead of a 404.\n      const slug = siteSlug(site.name);\n      readyForYourYes.push({\n        siteName: site.name,\n        reportType: r.reportType,\n        period: r.period ?? \"—\",\n        dashboardUrl: slug ? `${baseUrl}/s/${slug}` : baseUrl,\n      });\n    }\n\n    // M5: collect the free signals (isolated), diff against yesterday's snapshot.\n    // Renovate + CI come from the persisted collectors (the same ones the cockpit\n    // runs), so the snapshot this digest writes carries the `renovate:<siteId>` /\n    // `ci:<siteId>` keys the cockpit diffs against — no live GitHub sweep here.\n    const collected = await collectAttention({\n      base,\n      baseUrl: options.baseUrl,\n      websites,\n      reports,\n      now: today,\n    });\n    const prior = await readDigestState(base);\n    const { tagged, next } = diffAttention(collected, prior, digestDateKey(today));\n    // The operator only HEARS about a vuln once Renovate's auto-fix is exhausted\n    // (tried and failed a couple of nightly cycles) — before that the fleet is\n    // still self-patching and the cockpit's amber Watch band is the only surface.\n    // Filter the EMAIL list only: `next` (written below) must keep every vuln key\n    // so the cockpit's diff against this same snapshot stays consistent, and so\n    // the exhausted-flip diffs as WORSE instead of arriving pre-badged-away.\n    const needsAttention = tagged.filter(\n      (it) => it.kind !== \"vuln\" || it.autoFixExhausted === true,\n    );\n\n    // No-noise default: skip entirely when there's nothing to report.\n    if (readyForYourYes.length === 0 && needsAttention.length === 0) {\n      // Persist `next` even on a skip: a key that resolved on a quiet day clears so a\n      // later recurrence diffs as NEW (spec §10), and — since the skip can now fire\n      // with muted pre-exhaustion vulns collected — their keys keep snapshotting so\n      // the eventual exhausted-flip diffs as WORSE. Wrapped: a write failure can't\n      // fail the skip.\n      try {\n        await writeDigestState(base, next);\n      } catch (e) {\n        console.warn(`⚠ digest state write failed: ${(e as Error).message}`);\n      }\n      return { output: \"Digest skipped (nothing ready, nothing needs attention).\", code: 0 };\n    }\n\n    // Submissions telemetry rides only on a digest that is ALREADY sending — the\n    // skip predicate above is deliberately unchanged (leads already fire their own\n    // ingest-time notification; this is context, not an alarm), and fetching AFTER\n    // the skip check keeps quiet days from touching libSQL at all.\n    const counts =\n      options.submissionCounts !== undefined\n        ? options.submissionCounts\n        : await fetchSubmissionsDigestCounts(today);\n    const submissions = buildSubmissionsDigestSection(counts, sites);\n\n    const html = renderDigestHtml({ readyForYourYes, needsAttention, submissions });\n    const client = options.resend ?? defaultResendClient();\n    const to = [operatorEmail()];\n    const n = readyForYourYes.length;\n    const reportWord = n === 1 ? \"report\" : \"reports\";\n    let result: Awaited<ReturnType<typeof client.send>>;\n    try {\n      result = await client.send({\n        from: FROM_ADDRESS,\n        to,\n        subject: `Your fleet — ${digestDateKey(today)}: ${n} ${reportWord} ready for your yes`,\n        html,\n        idempotencyKey: `digest-${digestDateKey(today)}`,\n      });\n    } catch (err) {\n      // A same-UTC-day re-run whose content changed re-sends with the same\n      // `digest-<date>` idempotency key but a DIFFERENT body. Resend rejects that\n      // with a 409 (`invalid_idempotent_request`) — \"This idempotency key has been\n      // used ... but the request body was modified ...\". The operator already got\n      // today's digest on the first send, so re-sending a changed version same-day\n      // would just be a duplicate: treat it as an \"already sent today\" no-op.\n      //\n      // ResendClient (send/resend.ts) wraps the API error as a plain Error and only\n      // preserves the *message* string (no name/statusCode), so the message\n      // substring is the only reliable discriminator — match defensively on it.\n      // Any OTHER send error re-throws to the outer catch → {code:1}, so a genuine\n      // Resend/network failure still fails loudly.\n      if (isIdempotencyConflict(err)) {\n        // Do NOT write the snapshot: the first send already persisted it; writing\n        // this run's `next` would diff against the first run's snapshot and mis-badge.\n        return {\n          output:\n            \"Digest already sent today (content changed since the first send) — skipped to avoid a duplicate.\",\n          code: 0,\n        };\n      }\n      throw err;\n    }\n    // Persist the next snapshot AFTER a successful send. A write failure is caught +\n    // logged: the digest already went out, tomorrow re-news at worst. (The send-FAILURE\n    // path never reaches here — the outer catch returns code 1 with no write, preserving\n    // the NEW badge for the retry.)\n    try {\n      await writeDigestState(base, next);\n    } catch (e) {\n      console.warn(`⚠ digest state write failed: ${(e as Error).message}`);\n    }\n    return { output: `Digest sent to ${to.join(\", \")} (${result.messageId})`, code: 0 };\n  } catch (err) {\n    // Re-throw config errors (exitCode=2: missing env vars, bad config) so runOrExit\n    // surfaces them with the correct process exit code rather than collapsing to 1.\n    if (typeof (err as { exitCode?: unknown }).exitCode === \"number\") {\n      throw err;\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    return { output: `digest failed: ${message}`, code: 1 };\n  }\n}\n\n/** Pure render of the unified daily operator digest. No IO — the caller (runDigest)\n *  collects the rows and decides whether to send. */\nexport function renderDigestHtml(sections: DigestSections): string {\n  return `<!doctype html>\n<html>\n  <head><meta charset=\"utf-8\"></head>\n  <body style=\"margin:0;padding:0;background:#ffffff\">\n    <table width=\"100%\" style=\"border-collapse:collapse\">\n      <tr>\n        <td align=\"center\" style=\"padding:24px\">\n          <table width=\"600\" style=\"border-collapse:collapse\">\n            <tr>\n              <td>\n                <h1 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:24px;font-weight:700;margin:0 0 8px\">Your fleet today</h1>\n                ${readySection(sections.readyForYourYes)}\n                ${attentionSection(sections.needsAttention)}\n                ${submissionsSection(sections.submissions)}\n              </td>\n            </tr>\n          </table>\n        </td>\n      </tr>\n    </table>\n  </body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAM,OAAO;AACb,IAAM,MAAM;AAGZ,IAAM,eAAe,SAAS,GAAG;AAEjC,SAAS,aAAa,OAA4B;AAChD,QAAM,UAAU,oBAAoB,GAAG;AACvC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,OAAO,mBAAmB,IAAI;AAAA,EAC1C;AACA,QAAM,OAAO,MACV,IAAI,CAAC,OAAO;AACX,UAAM,UAAU,GAAG,aAAa,WAAW,UAAU,IAAI,GAAG,eAAe;AAC3E,UAAM,OAAO,UACT,YAAY,WAAI,OAAO,CAAC,YAAY,YAAY,+BAChD;AACJ,WAAO;AAAA;AAAA,2BAEc,IAAI;AAAA,uCACQ,WAAI,GAAG,QAAQ,CAAC,oBAAe,WAAI,GAAG,UAAU,CAAC,KAAK,WAAI,GAAG,MAAM,CAAC;AAAA,mBAC7F,IAAI;AAAA;AAAA;AAAA,EAGd,CAAC,EACA,KAAK,EAAE;AACV,SAAO,GAAG,OAAO,wEAAwE,IAAI;AAC/F;AAEA,IAAM,iBAAoD,EAAE,UAAU,GAAG,SAAS,EAAE;AAGpF,SAAS,eAAe,QAAkC;AACxD,MAAI,WAAW;AACb,WAAO,wBAAwB,GAAG;AACpC,MAAI,WAAW;AACb,WAAO,wBAAwB,GAAG;AACpC,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAgC;AACxD,QAAM,UAAU,oBAAoB,GAAG;AACvC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,OAAO,mBAAmB,IAAI;AAAA,EAC1C;AAIA,QAAM,SAAS,oBAAI,IAA6B;AAChD,aAAW,MAAM,OAAO;AACtB,UAAM,SAAS,OAAO,IAAI,GAAG,QAAQ;AACrC,QAAI,OAAQ,QAAO,KAAK,EAAE;AAAA,QACrB,QAAO,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,EACnC;AAEA,QAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,CAAC,EAChC,IAAI,CAAC,CAAC,UAAU,SAAS,MAAM;AAC9B,UAAM,SAAS,CAAC,GAAG,SAAS,EAAE;AAAA,MAC5B,CAAC,GAAG,MAAM,eAAe,EAAE,QAAQ,IAAI,eAAe,EAAE,QAAQ;AAAA,IAClE;AACA,UAAM,OAAO,OACV,IAAI,CAAC,OAAO;AACX,YAAM,UAAU,GAAG,KAAK,WAAW,UAAU,IAAI,GAAG,MAAM;AAC1D,YAAM,YAAY,UACd,YAAY,WAAI,OAAO,CAAC,YAAY,YAAY,KAAK,WAAI,GAAG,KAAK,CAAC,SAClE,WAAI,GAAG,KAAK;AAChB,aAAO;AAAA;AAAA,+BAEc,IAAI,yFAAyF,eAAe,GAAG,MAAM,CAAC,GAAG,SAAS;AAAA;AAAA,IAEzJ,CAAC,EACA,KAAK,EAAE;AACV,WAAO;AAAA;AAAA,mHAEsG,WAAI,QAAQ,CAAC;AAAA;AAAA,QAExH,IAAI;AAAA,EACR,CAAC,EACA,KAAK,EAAE;AAEV,SAAO,GAAG,OAAO,wEAAwE,MAAM;AACjG;AAKA,SAAS,mBAAmB,GAAwD;AAClF,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,EAAE,UAAU,KAAK,EAAE,YAAY,KAAK,EAAE,aAAa,EAAG,QAAO;AACjE,QAAM,UAAU,oBAAoB,GAAG;AAGvC,QAAM,SAAS;AAAA,IACb,GAAG,EAAE,KAAK,YAAY,EAAE,UAAU,IAAI,KAAK,GAAG;AAAA,IAC9C,GAAG,EAAE,OAAO,0BAA0B,EAAE,YAAY,IAAI,KAAK,GAAG;AAAA,IAChE,GAAG,EAAE,QAAQ;AAAA,EACf,EAAE,KAAK,QAAK;AACZ,QAAM,YAAY,mBAAmB,IAAI,8DAA8D,MAAM;AAC7G,MAAI,EAAE,OAAO,WAAW,EAAG,QAAO,GAAG,OAAO,GAAG,SAAS;AACxD,QAAM,OAAO,EAAE,OACZ,IAAI,CAAC,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,QAAI,KAAK,QAAQ,EAAG,OAAM,KAAK,GAAG,KAAK,KAAK,QAAQ,KAAK,UAAU,IAAI,KAAK,GAAG,EAAE;AACjF,QAAI,KAAK,UAAU,EAAG,OAAM,KAAK,GAAG,KAAK,OAAO,UAAU,KAAK,YAAY,IAAI,KAAK,GAAG,EAAE;AACzF,QAAI,KAAK,WAAW,EAAG,OAAM,KAAK,GAAG,KAAK,QAAQ,gBAAgB;AAClE,WAAO;AAAA;AAAA,2BAEc,IAAI;AAAA,uCACQ,WAAI,KAAK,QAAQ,CAAC,oBAAe,MAAM,KAAK,QAAK,CAAC;AAAA;AAAA;AAAA,EAGrF,CAAC,EACA,KAAK,EAAE;AACV,SAAO,GAAG,OAAO,GAAG,SAAS,8EAA8E,IAAI;AACjH;AAEA,IAAM,eAAe;AAGrB,SAAS,cAAc,GAAiB;AACtC,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACpC;AAaA,eAAsB,oBAAoB,MAA0C;AAClF,UAAQ,MAAM,eAAe,IAAI,GAAG,OAAO,iBAAiB;AAC9D;AAgCA,eAAe,wBAAwB,KAAiD;AACtF,MAAI;AACF,UAAM,CAAC,EAAE,QAAQ,aAAa,GAAG,EAAE,yBAAyB,GAAG,EAAE,gBAAgB,CAAC,IAChF,MAAM,QAAQ,IAAI;AAAA,MAChB,OAAO,sBAAiB;AAAA,MACxB,OAAO,2BAAsB;AAAA,MAC7B,OAAO,0BAAqB;AAAA,IAC9B,CAAC;AACH,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,WAAO,MAAM,yBAAyB,IAAI,gBAAgB,KAAK,yBAAyB,CAAC;AAAA,EAC3F,SAAS,GAAG;AACV,YAAQ,KAAK,qDAAiD,EAAY,OAAO,EAAE;AACnF,WAAO,oBAAI,IAAI;AAAA,EACjB;AACF;AAIA,IAAM,+BAA+B,KAAK,KAAK,KAAK;AAQpD,eAAe,6BACb,KAC2D;AAC3D,MAAI;AACF,UAAM,CAAC,EAAE,QAAQ,aAAa,GAAG,EAAE,4BAA4B,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpF,OAAO,sBAAiB;AAAA,MACxB,OAAO,2BAAsB;AAAA,IAC/B,CAAC;AACD,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,WAAO,MAAM;AAAA,MACX;AAAA,MACA,IAAI,KAAK,IAAI,QAAQ,IAAI,4BAA4B,EAAE,YAAY;AAAA,IACrE;AAAA,EACF,SAAS,GAAG;AACV,YAAQ,KAAK,sDAAkD,EAAY,OAAO,EAAE;AACpF,WAAO;AAAA,EACT;AACF;AAOO,SAAS,8BACd,QACA,WACiC;AACjC,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,MAAI,WAAW;AACf,QAAM,SAA6C,CAAC;AACpD,aAAW,CAAC,QAAQ,CAAC,KAAK,QAAQ;AAChC,aAAS,EAAE;AACX,eAAW,EAAE;AACb,gBAAY,EAAE;AACd,UAAM,OAAO,UAAU,IAAI,MAAM;AACjC,QAAI,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,GAAG;AAChD,aAAO,KAAK,EAAE,UAAU,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,IAC3C;AAAA,EACF;AACA,SAAO;AAAA,IACL,CAAC,GAAG,MACF,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAC5D,EAAE,SAAS,cAAc,EAAE,QAAQ;AAAA,EACvC;AACA,SAAO,EAAE,OAAO,SAAS,UAAU,OAAO;AAC5C;AAIA,SAAS,aAAa,OAAe,IAA4C;AAC/E,MAAI;AACF,WAAO,GAAG;AAAA,EACZ,SAAS,GAAG;AACV,YAAQ,KAAK,+BAA0B,KAAK,aAAc,EAAY,OAAO,EAAE;AAC/E,WAAO,CAAC;AAAA,EACV;AACF;AAkBA,eAAsB,iBAAiB,MAAsD;AAC3F,QAAM,UAAU,KAAK,WAAY,MAAM,eAAe,KAAK,IAAI;AAC/D,QAAM,WAAW,KAAK,YAAa,MAAM,aAAa,KAAK,IAAI;AAC/D,QAAM,MAAM,KAAK,OAAO,oBAAI,KAAK;AACjC,QAAM,gBAAgB,KAAK,iBAAkB,MAAM,wBAAwB,GAAG;AAC9E,QAAM,YAAY,IAAI,IAAwB,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,SAAO;AAAA,IACL,GAAG,aAAa,QAAQ,MAAM,kBAAkB,UAAU,KAAK,OAAO,CAAC;AAAA,IACvE,GAAG,aAAa,YAAY,MAAM,wBAAwB,SAAS,WAAW,KAAK,OAAO,CAAC;AAAA,IAC3F,GAAG,aAAa,aAAa,MAAM,wBAAwB,SAAS,WAAW,KAAK,OAAO,CAAC;AAAA,IAC5F,GAAG,aAAa,cAAc,MAAM,wBAAwB,UAAU,KAAK,OAAO,CAAC;AAAA,IACnF,GAAG,aAAa,YAAY,MAAM,sBAAsB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACpF,GAAG,aAAa,MAAM,MAAM,gBAAgB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACxE,GAAG,aAAa,aAAa,MAAM,yBAAyB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACxF,GAAG;AAAA,MAAa;AAAA,MAAa,MAC3B,gCAAgC,UAAU,KAAK,SAAS,GAAG;AAAA,IAC7D;AAAA,IACA,GAAG;AAAA,MAAa;AAAA,MAAiB,MAC/B,0BAA0B,UAAU,eAAe,KAAK,OAAO;AAAA,IACjE;AAAA;AAAA;AAAA;AAAA,IAIA,GAAG,aAAa,iBAAiB,MAAM,0BAA0B,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,EAC/F;AACF;AA6BA,eAAsB,UACpB,SAC2C;AAE3C,QAAM,QAAQ,QAAQ,OAAO,oBAAI,KAAK;AACtC,MAAI;AACF,UAAM,OAAO,QAAQ,QAAQ,SAAS,mBAAmB,CAAC;AAI1D,UAAM,UAAU,MAAM,eAAe,IAAI;AACzC,UAAM,WAAW,MAAM,aAAa,IAAI;AACxC,UAAM,QAAQ,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpD,UAAM,UAAU,QAAQ,OAAO,iBAAiB;AAEhD,UAAM,kBAA+B,CAAC;AACtC,UAAM,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AACjD,eAAW,KAAK,SAAS;AACvB,YAAM,OAAO,MAAM,IAAI,EAAE,MAAM;AAC/B,UAAI,CAAC,KAAM;AAIX,YAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,sBAAgB,KAAK;AAAA,QACnB,UAAU,KAAK;AAAA,QACf,YAAY,EAAE;AAAA,QACd,QAAQ,EAAE,UAAU;AAAA,QACpB,cAAc,OAAO,GAAG,OAAO,MAAM,IAAI,KAAK;AAAA,MAChD,CAAC;AAAA,IACH;AAMA,UAAM,YAAY,MAAM,iBAAiB;AAAA,MACvC;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,UAAM,QAAQ,MAAM,gBAAgB,IAAI;AACxC,UAAM,EAAE,QAAQ,KAAK,IAAI,cAAc,WAAW,OAAO,cAAc,KAAK,CAAC;AAO7E,UAAM,iBAAiB,OAAO;AAAA,MAC5B,CAAC,OAAO,GAAG,SAAS,UAAU,GAAG,qBAAqB;AAAA,IACxD;AAGA,QAAI,gBAAgB,WAAW,KAAK,eAAe,WAAW,GAAG;AAM/D,UAAI;AACF,cAAM,iBAAiB,MAAM,IAAI;AAAA,MACnC,SAAS,GAAG;AACV,gBAAQ,KAAK,qCAAiC,EAAY,OAAO,EAAE;AAAA,MACrE;AACA,aAAO,EAAE,QAAQ,4DAA4D,MAAM,EAAE;AAAA,IACvF;AAMA,UAAM,SACJ,QAAQ,qBAAqB,SACzB,QAAQ,mBACR,MAAM,6BAA6B,KAAK;AAC9C,UAAM,cAAc,8BAA8B,QAAQ,KAAK;AAE/D,UAAM,OAAO,iBAAiB,EAAE,iBAAiB,gBAAgB,YAAY,CAAC;AAC9E,UAAM,SAAS,QAAQ,UAAU,oBAAoB;AACrD,UAAM,KAAK,CAAC,cAAc,CAAC;AAC3B,UAAM,IAAI,gBAAgB;AAC1B,UAAM,aAAa,MAAM,IAAI,WAAW;AACxC,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,KAAK;AAAA,QACzB,MAAM;AAAA,QACN;AAAA,QACA,SAAS,qBAAgB,cAAc,KAAK,CAAC,KAAK,CAAC,IAAI,UAAU;AAAA,QACjE;AAAA,QACA,gBAAgB,UAAU,cAAc,KAAK,CAAC;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,KAAK;AAaZ,UAAI,sBAAsB,GAAG,GAAG;AAG9B,eAAO;AAAA,UACL,QACE;AAAA,UACF,MAAM;AAAA,QACR;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAKA,QAAI;AACF,YAAM,iBAAiB,MAAM,IAAI;AAAA,IACnC,SAAS,GAAG;AACV,cAAQ,KAAK,qCAAiC,EAAY,OAAO,EAAE;AAAA,IACrE;AACA,WAAO,EAAE,QAAQ,kBAAkB,GAAG,KAAK,IAAI,CAAC,KAAK,OAAO,SAAS,KAAK,MAAM,EAAE;AAAA,EACpF,SAAS,KAAK;AAGZ,QAAI,OAAQ,IAA+B,aAAa,UAAU;AAChE,YAAM;AAAA,IACR;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,EAAE,QAAQ,kBAAkB,OAAO,IAAI,MAAM,EAAE;AAAA,EACxD;AACF;AAIO,SAAS,iBAAiB,UAAkC;AACjE,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mCAU0B,GAAG;AAAA,kBACpB,aAAa,SAAS,eAAe,CAAC;AAAA,kBACtC,iBAAiB,SAAS,cAAc,CAAC;AAAA,kBACzC,mBAAmB,SAAS,WAAW,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAS1D;","names":[]}
+{"version":3,"sources":["../src/reports/digest.ts"],"sourcesContent":["// src/reports/digest.ts\nimport { openBase, readAirtableConfig, type AirtableBase } from \"./airtable/client.js\";\nimport { listAllReports, isPendingApproval } from \"./airtable/reports.js\";\nimport type { ReportRow } from \"./airtable/reports.js\";\nimport { listWebsites, siteSlug, type WebsiteRow } from \"./airtable/websites.js\";\nimport { defaultResendClient, type ResendClient } from \"./send/resend.js\";\nimport { isIdempotencyConflict } from \"./send/idempotency.js\";\nimport {\n  collectVulnAlerts,\n  collectDeliveryFailures,\n  collectPreflightBlocked,\n  collectLighthouseAlerts,\n  collectRenovateAlerts,\n  collectCiAlerts,\n  collectAnalyticsFailures,\n  collectTurnstileGuardrailAlerts,\n  collectNotifyBounceAlerts,\n  collectPrismicDriftAlerts,\n  NOTIFY_BOUNCE_WINDOW_DAYS,\n} from \"../alerts/digest-collectors.js\";\nimport { diffAttention, readDigestState, writeDigestState } from \"../alerts/digest-state.js\";\nimport { escapeHtml as esc } from \"../util/html.js\";\nimport { operatorEmail } from \"../util/operator.js\";\nimport type {\n  AttentionItem,\n  AttentionSeverity,\n  AttentionStatus,\n  ReadyItem,\n  DigestSections,\n  SubmissionsDigestSection,\n} from \"../alerts/attention.js\";\n// Type-only: erased at compile time, so the kysely/libsql devDependency never loads\n// in a consuming fleet site (the runtime read is the dynamic import in\n// fetchSubmissionsDigestCounts, same rule as fetchNotifyBounceCounts).\nimport type { SiteSubmissionCounts } from \"../db/submissions.js\";\n\n// The attention/digest contract lives in `../alerts/attention.ts` (a dependency-free\n// types module) so the `alerts/*` collectors can depend on it without importing back\n// from this renderer/IO module — see attention.ts for the cycle it breaks. Re-exported\n// here so existing `from \"./digest.js\"` type importers keep resolving.\nexport type {\n  AttentionItem,\n  AttentionSeverity,\n  AttentionStatus,\n  ReadyItem,\n  DigestSections,\n  SubmissionsDigestSection,\n} from \"../alerts/attention.js\";\n\nconst GREY = \"#757575\";\nconst RED = \"#C00\";\n\n/** Shared anchor style — Gmail does not inherit font-family into <a> tags. */\nconst ANCHOR_STYLE = `color:${RED};font-family:helvetica,sans-serif`;\n\nfunction readySection(items: ReadyItem[]): string {\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Ready for your yes</h2>`;\n  if (items.length === 0) {\n    return `${heading}<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">Nothing waiting on you.</p>`;\n  }\n  const rows = items\n    .map((it) => {\n      const safeUrl = it.dashboardUrl.startsWith(\"https://\") ? it.dashboardUrl : undefined;\n      const link = safeUrl\n        ? `<a href=\"${esc(safeUrl)}\" style=\"${ANCHOR_STYLE}\">review &amp; approve</a>`\n        : `review &amp; approve`;\n      return `\n      <tr>\n        <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">\n          <strong style=\"color:#222\">${esc(it.siteName)}</strong> — ${esc(it.reportType)} (${esc(it.period)})\n          — ${link}\n        </td>\n      </tr>`;\n    })\n    .join(\"\");\n  return `${heading}<table role=\"presentation\" style=\"border-collapse:collapse;margin:0\">${rows}</table>`;\n}\n\nconst SEVERITY_ORDER: Record<AttentionSeverity, number> = { critical: 0, warning: 1 };\n\n/** Render the per-item status badge (\"NEW\"/\"WORSE\"); standing items get nothing. */\nfunction attentionBadge(status?: AttentionStatus): string {\n  if (status === \"new\")\n    return `<strong style=\"color:${RED};font-family:helvetica,sans-serif\">NEW</strong> `;\n  if (status === \"worse\")\n    return `<strong style=\"color:${RED};font-family:helvetica,sans-serif\">WORSE</strong> `;\n  return \"\";\n}\n\nfunction attentionSection(items: AttentionItem[]): string {\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Needs attention</h2>`;\n  if (items.length === 0) {\n    return `${heading}<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">All clear — nothing needs attention.</p>`;\n  }\n\n  // Group by siteName, preserving first-seen site order; sort within a site by\n  // severity (critical first).\n  const bySite = new Map<string, AttentionItem[]>();\n  for (const it of items) {\n    const bucket = bySite.get(it.siteName);\n    if (bucket) bucket.push(it);\n    else bySite.set(it.siteName, [it]);\n  }\n\n  const groups = [...bySite.entries()]\n    .map(([siteName, siteItems]) => {\n      const sorted = [...siteItems].sort(\n        (a, b) => SEVERITY_ORDER[a.severity] - SEVERITY_ORDER[b.severity],\n      );\n      const rows = sorted\n        .map((it) => {\n          const safeUrl = it.url?.startsWith(\"https://\") ? it.url : undefined;\n          const titleHtml = safeUrl\n            ? `<a href=\"${esc(safeUrl)}\" style=\"${ANCHOR_STYLE}\">${esc(it.title)}</a>`\n            : esc(it.title);\n          return `\n          <tr>\n            <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">${attentionBadge(it.status)}${titleHtml}</td>\n          </tr>`;\n        })\n        .join(\"\");\n      return `\n      <tr>\n        <td style=\"color:#222;font-family:helvetica,sans-serif;font-size:16px;font-weight:700;padding:8px 0 4px\">${esc(siteName)}</td>\n      </tr>\n      ${rows}`;\n    })\n    .join(\"\");\n\n  return `${heading}<table role=\"presentation\" style=\"border-collapse:collapse;margin:0\">${groups}</table>`;\n}\n\n/** The \"Submissions (24h)\" telemetry block: fleet totals + a per-site glance line.\n *  Context, not an alarm — absent/null section or all-zero totals render nothing\n *  (no-noise), and the section never triggers a send on its own (see runDigest). */\nfunction submissionsSection(s: SubmissionsDigestSection | null | undefined): string {\n  if (!s) return \"\";\n  if (s.leads === 0 && s.signups === 0 && s.spamAuto === 0) return \"\";\n  const heading = `<h2 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:20px;font-weight:700;margin:32px 0 8px\">Submissions (24h)</h2>`;\n  // All three terms always render together — omitting a zero term next to a nonzero\n  // one reads as \"not measured\" rather than \"none\"; simplest honest form.\n  const totals = [\n    `${s.leads} new lead${s.leads === 1 ? \"\" : \"s\"}`,\n    `${s.signups} newsletter/RSVP signup${s.signups === 1 ? \"\" : \"s\"}`,\n    `${s.spamAuto} auto-filtered spam`,\n  ].join(\" · \");\n  const totalLine = `<p style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;margin:0\">${totals}</p>`;\n  if (s.bySite.length === 0) return `${heading}${totalLine}`;\n  const rows = s.bySite\n    .map((site) => {\n      const parts: string[] = [];\n      if (site.leads > 0) parts.push(`${site.leads} lead${site.leads === 1 ? \"\" : \"s\"}`);\n      if (site.signups > 0) parts.push(`${site.signups} signup${site.signups === 1 ? \"\" : \"s\"}`);\n      if (site.spamAuto > 0) parts.push(`${site.spamAuto} auto-filtered`);\n      return `\n      <tr>\n        <td style=\"color:${GREY};font-family:helvetica,sans-serif;font-size:16px;line-height:24px;padding-bottom:8px\">\n          <strong style=\"color:#222\">${esc(site.siteName)}</strong> — ${parts.join(\" · \")}\n        </td>\n      </tr>`;\n    })\n    .join(\"\");\n  return `${heading}${totalLine}<table role=\"presentation\" style=\"border-collapse:collapse;margin:8px 0 0\">${rows}</table>`;\n}\n\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\n\n/** UTC \"YYYY-MM-DD\" — the Resend idempotency key suffix, so a same-day cron re-fire dedupes. */\nfunction digestDateKey(d: Date): string {\n  return d.toISOString().slice(0, 10);\n}\n\n/**\n * The gate for \"Ready for your yes\": Draft ready ∧ ¬Approved to send ∧ Sent at BLANK.\n *\n * Implemented as `listAllReports(base).filter(...)` (the authorized deviation from the plan's\n * draft, which pre-dated Slice 1's merged fix): `listAllReports` already calls `mapRow`, which\n * handles `Period` correctly, so no local `rawToReportRow` duplicate is needed. The JS filter\n * does real work — the test fake does NOT evaluate `filterByFormula` — so correctness is\n * test-provable here.\n *\n * Exported: the fleet homepage (Task 3.5b) reuses it for the pending-approval count.\n */\nexport async function listPendingApproval(base: AirtableBase): Promise<ReportRow[]> {\n  return (await listAllReports(base)).filter(isPendingApproval);\n}\n\n// ── collectAttention (IO wrapper, sibling to runDigest) ──────────────────────\n\nexport type CollectAttentionDeps = {\n  base: AirtableBase;\n  /** Same baseUrl value runDigest threads; used for the /s/<slug> links. */\n  baseUrl: string;\n  /** Pre-fetched Websites rows. When supplied (runDigest already read them),\n   *  collectAttention reuses them instead of issuing a second `listWebsites`. */\n  websites?: WebsiteRow[];\n  /** Pre-fetched Reports rows. When supplied (runDigest already read them),\n   *  collectAttention reuses them instead of issuing a second `listAllReports`. */\n  reports?: ReportRow[];\n  /** Clock for the GitHub-signals staleness gate (collectCiAlerts /\n   *  collectRenovateAlerts skip a >3-day-stale sweep). Defaults to wall-clock;\n   *  runDigest threads its run-start `today` so a quiet repo's frozen CI/Renovate\n   *  signal stops badging once its sweep goes stale. */\n  now?: Date;\n  /** Pre-fetched per-site bounced-lead-notification counts (tests, or a caller with\n   *  an open db). When omitted, collectAttention reads them from libSQL itself —\n   *  defensively, so a missing TURSO env or a Turso blip drops just this signal. */\n  notifyBounces?: ReadonlyMap<string, number>;\n};\n\n/** Per-site bounced-notification counts for the notify-bounce collector, read from\n *  libSQL over the collector's own window. The db modules are imported DYNAMICALLY:\n *  src/db/submissions.ts pulls kysely at top level, and kysely/libsql live in\n *  devDependencies consuming fleet sites don't install — a static import here would\n *  crash their CLI at require time (same rule as openDb's own lazy loads). Any\n *  failure (no TURSO env, Turso down) logs and yields an empty map: the digest\n *  must never blank over a missing optional signal. */\nasync function fetchNotifyBounceCounts(now: Date): Promise<ReadonlyMap<string, number>> {\n  try {\n    const [{ openDb, readDbConfig }, { countNotifyBouncedBySite }, { screenOutsSince }] =\n      await Promise.all([\n        import(\"../db/client.js\"),\n        import(\"../db/submissions.js\"),\n        import(\"../db/screenouts.js\"),\n      ]);\n    const db = await openDb(readDbConfig());\n    return await countNotifyBouncedBySite(db, screenOutsSince(now, NOTIFY_BOUNCE_WINDOW_DAYS));\n  } catch (e) {\n    console.warn(`⚠ notify-bounce counts unavailable (libSQL): ${(e as Error).message}`);\n    return new Map();\n  }\n}\n\n/** The \"Submissions (24h)\" telemetry window — a precise 24h ISO-timestamp compare\n *  (unlike screenOutsSince's date-only strings). */\nconst SUBMISSIONS_DIGEST_WINDOW_MS = 24 * 60 * 60 * 1000;\n\n/** Per-site submission counts for the digest telemetry section, read from libSQL.\n *  Dynamic imports + fail-soft for the same reason as fetchNotifyBounceCounts:\n *  kysely/libsql are devDependencies consuming fleet sites don't install, and a\n *  Turso blip must drop just this section, never the digest. Returns null (not an\n *  empty map) on failure so the renderer can omit the section rather than claim a\n *  quiet fleet. */\nasync function fetchSubmissionsDigestCounts(\n  now: Date,\n): Promise<ReadonlyMap<string, SiteSubmissionCounts> | null> {\n  try {\n    const [{ openDb, readDbConfig }, { countSubmissionsSinceBySite }] = await Promise.all([\n      import(\"../db/client.js\"),\n      import(\"../db/submissions.js\"),\n    ]);\n    const db = await openDb(readDbConfig());\n    return await countSubmissionsSinceBySite(\n      db,\n      new Date(now.getTime() - SUBMISSIONS_DIGEST_WINDOW_MS).toISOString(),\n    );\n  } catch (e) {\n    console.warn(`⚠ submissions telemetry unavailable (libSQL): ${(e as Error).message}`);\n    return null;\n  }\n}\n\n/** Assemble the \"Submissions (24h)\" section from the per-site counts. PURE (exported\n *  for direct tests). Totals sum ALL map entries — an orphan site id still counts in\n *  the fleet totals. bySite lists only ids that resolve in `sitesById` AND carry any\n *  nonzero count, sorted by total volume desc then siteName A-Z. null counts (libSQL\n *  unavailable) → null (section omitted). */\nexport function buildSubmissionsDigestSection(\n  counts: ReadonlyMap<string, SiteSubmissionCounts> | null,\n  sitesById: ReadonlyMap<string, WebsiteRow>,\n): SubmissionsDigestSection | null {\n  if (counts === null) return null;\n  let leads = 0;\n  let signups = 0;\n  let spamAuto = 0;\n  const bySite: SubmissionsDigestSection[\"bySite\"] = [];\n  for (const [siteId, c] of counts) {\n    leads += c.leads;\n    signups += c.signups;\n    spamAuto += c.spamAuto;\n    const site = sitesById.get(siteId);\n    if (site && c.leads + c.signups + c.spamAuto > 0) {\n      bySite.push({ siteName: site.name, ...c });\n    }\n  }\n  bySite.sort(\n    (a, b) =>\n      b.leads + b.signups + b.spamAuto - (a.leads + a.signups + a.spamAuto) ||\n      a.siteName.localeCompare(b.siteName),\n  );\n  return { leads, signups, spamAuto, bySite };\n}\n\n/** Run a single collector under a try/catch: a thrown collector logs and yields []\n *  so one broken signal never blanks the whole \"Needs attention\" section. */\nfunction runCollector(label: string, fn: () => AttentionItem[]): AttentionItem[] {\n  try {\n    return fn();\n  } catch (e) {\n    console.warn(`⚠ attention collector \"${label}\" failed: ${(e as Error).message}`);\n    return [];\n  }\n}\n\n/**\n * Fetch the free signals once (listAllReports + listWebsites) — or reuse the\n * `reports`/`websites` arrays runDigest already read, so a single run reads each\n * table once — build the sitesById map the delivery collector needs, and run each\n * pure collector isolated. Returns the union of items; diffing/badging happens in\n * runDigest.\n *\n * The Renovate + CI signals come from the SAME persisted collectors the operator\n * cockpit (`buildCockpitModel`) runs — `collectRenovateAlerts` (key\n * `renovate:<siteId>`) and `collectCiAlerts` (key `ci:<siteId>`), reading the\n * nightly-persisted `renovateFailingCis`/`defaultBranchCi` fields. This is the\n * key-space unification: because the digest writes the shared Digest State\n * snapshot with these same keys, the cockpit's NEW/WORSE diff finds them and the\n * two surfaces agree (the prior live per-PR `renovate:<repo>#<n>` sweep never\n * matched the cockpit's keys, so its cards badged NEW forever).\n */\nexport async function collectAttention(deps: CollectAttentionDeps): Promise<AttentionItem[]> {\n  const reports = deps.reports ?? (await listAllReports(deps.base));\n  const websites = deps.websites ?? (await listWebsites(deps.base));\n  const now = deps.now ?? new Date();\n  const notifyBounces = deps.notifyBounces ?? (await fetchNotifyBounceCounts(now));\n  const sitesById = new Map<string, WebsiteRow>(websites.map((w) => [w.id, w]));\n  return [\n    ...runCollector(\"vuln\", () => collectVulnAlerts(websites, deps.baseUrl)),\n    ...runCollector(\"delivery\", () => collectDeliveryFailures(reports, sitesById, deps.baseUrl)),\n    ...runCollector(\"preflight\", () => collectPreflightBlocked(reports, sitesById, deps.baseUrl)),\n    ...runCollector(\"lighthouse\", () => collectLighthouseAlerts(websites, deps.baseUrl)),\n    ...runCollector(\"renovate\", () => collectRenovateAlerts(websites, deps.baseUrl, now)),\n    ...runCollector(\"ci\", () => collectCiAlerts(websites, deps.baseUrl, now)),\n    ...runCollector(\"analytics\", () => collectAnalyticsFailures(websites, deps.baseUrl, now)),\n    ...runCollector(\"turnstile\", () =>\n      collectTurnstileGuardrailAlerts(websites, deps.baseUrl, now),\n    ),\n    ...runCollector(\"notify-bounce\", () =>\n      collectNotifyBounceAlerts(websites, notifyBounces, deps.baseUrl),\n    ),\n    // Same collector the cockpit runs, over the same persisted `Prismic Models`\n    // columns and the same keys — so the snapshot this digest writes is the one\n    // the cockpit diffs NEW/WORSE against, and the two surfaces agree.\n    ...runCollector(\"prismic-drift\", () => collectPrismicDriftAlerts(websites, deps.baseUrl, now)),\n  ];\n}\n\nexport type DigestRunOptions = {\n  resend?: ResendClient;\n  /** Dashboard origin for the /s/<slug> links, e.g. \"https://reddoor-maintenance.netlify.app\". */\n  baseUrl: string;\n  /**\n   * Inject a pre-opened Airtable base (tests, server handlers).\n   * When omitted, `openBase(readAirtableConfig())` is called from the environment.\n   */\n  base?: AirtableBase;\n  /** Per-site submission counts for the \"Submissions (24h)\" section. undefined =\n   *  fetch from libSQL; null = simulate unavailable (section omitted); a Map =\n   *  injected (tests). */\n  submissionCounts?: ReadonlyMap<string, SiteSubmissionCounts> | null;\n  /**\n   * The run clock. Production omits it and gets `new Date()`.\n   *\n   * Injectable because several collectors this run feeds are AGE-SENSITIVE —\n   * `collectPrismicDriftAlerts` alone changes an item's key and its wording once\n   * a verdict crosses `PRISMIC_DRIFT_STALE_DAYS` — so a digest test that cannot\n   * fix the clock is asserting on the day it happens to run. Two did, and both\n   * went red four days after they were written, reporting the staleness wording\n   * as if the drift wiring had broken. `collectAttention` already takes a `now`\n   * for exactly this reason; this threads the same lever one layer out.\n   */\n  now?: Date;\n};\n\nexport async function runDigest(\n  options: DigestRunOptions,\n): Promise<{ output: string; code: number }> {\n  // Capture clock BEFORE any await so the idempotency key can't roll past midnight mid-run.\n  const today = options.now ?? new Date();\n  try {\n    const base = options.base ?? openBase(readAirtableConfig());\n    // Read each table ONCE for the whole run, then thread the arrays into\n    // collectAttention so it doesn't re-fetch (was: listWebsites ×2, listAllReports\n    // ×2). Pending is derived in-line with listPendingApproval's exact predicate.\n    const reports = await listAllReports(base);\n    const websites = await listWebsites(base);\n    const sites = new Map(websites.map((w) => [w.id, w]));\n\n    const pending = reports.filter(isPendingApproval);\n\n    const readyForYourYes: ReadyItem[] = [];\n    const baseUrl = options.baseUrl.replace(/\\/$/, \"\");\n    for (const r of pending) {\n      const site = sites.get(r.siteId);\n      if (!site) continue; // orphan report → skip rather than render a broken link\n      // An empty Name slugs to \"\" → `/s/` is a dead link (getWebsiteBySlug can't\n      // match it). Fall back to the fleet homepage so the operator still lands\n      // somewhere usable instead of a 404.\n      const slug = siteSlug(site.name);\n      readyForYourYes.push({\n        siteName: site.name,\n        reportType: r.reportType,\n        period: r.period ?? \"—\",\n        dashboardUrl: slug ? `${baseUrl}/s/${slug}` : baseUrl,\n      });\n    }\n\n    // M5: collect the free signals (isolated), diff against yesterday's snapshot.\n    // Renovate + CI come from the persisted collectors (the same ones the cockpit\n    // runs), so the snapshot this digest writes carries the `renovate:<siteId>` /\n    // `ci:<siteId>` keys the cockpit diffs against — no live GitHub sweep here.\n    const collected = await collectAttention({\n      base,\n      baseUrl: options.baseUrl,\n      websites,\n      reports,\n      now: today,\n    });\n    const prior = await readDigestState(base);\n    const { tagged, next } = diffAttention(collected, prior, digestDateKey(today));\n    // The operator only HEARS about a vuln once Renovate's auto-fix is exhausted\n    // (tried and failed a couple of nightly cycles) — before that the fleet is\n    // still self-patching and the cockpit's amber Watch band is the only surface.\n    // Filter the EMAIL list only: `next` (written below) must keep every vuln key\n    // so the cockpit's diff against this same snapshot stays consistent, and so\n    // the exhausted-flip diffs as WORSE instead of arriving pre-badged-away.\n    const needsAttention = tagged.filter(\n      (it) => it.kind !== \"vuln\" || it.autoFixExhausted === true,\n    );\n\n    // No-noise default: skip entirely when there's nothing to report.\n    if (readyForYourYes.length === 0 && needsAttention.length === 0) {\n      // Persist `next` even on a skip: a key that resolved on a quiet day clears so a\n      // later recurrence diffs as NEW (spec §10), and — since the skip can now fire\n      // with muted pre-exhaustion vulns collected — their keys keep snapshotting so\n      // the eventual exhausted-flip diffs as WORSE. Wrapped: a write failure can't\n      // fail the skip.\n      try {\n        await writeDigestState(base, next);\n      } catch (e) {\n        console.warn(`⚠ digest state write failed: ${(e as Error).message}`);\n      }\n      return { output: \"Digest skipped (nothing ready, nothing needs attention).\", code: 0 };\n    }\n\n    // Submissions telemetry rides only on a digest that is ALREADY sending — the\n    // skip predicate above is deliberately unchanged (leads already fire their own\n    // ingest-time notification; this is context, not an alarm), and fetching AFTER\n    // the skip check keeps quiet days from touching libSQL at all.\n    const counts =\n      options.submissionCounts !== undefined\n        ? options.submissionCounts\n        : await fetchSubmissionsDigestCounts(today);\n    const submissions = buildSubmissionsDigestSection(counts, sites);\n\n    const html = renderDigestHtml({ readyForYourYes, needsAttention, submissions });\n    const client = options.resend ?? defaultResendClient();\n    const to = [operatorEmail()];\n    const n = readyForYourYes.length;\n    const reportWord = n === 1 ? \"report\" : \"reports\";\n    let result: Awaited<ReturnType<typeof client.send>>;\n    try {\n      result = await client.send({\n        from: FROM_ADDRESS,\n        to,\n        subject: `Your fleet — ${digestDateKey(today)}: ${n} ${reportWord} ready for your yes`,\n        html,\n        idempotencyKey: `digest-${digestDateKey(today)}`,\n      });\n    } catch (err) {\n      // A same-UTC-day re-run whose content changed re-sends with the same\n      // `digest-<date>` idempotency key but a DIFFERENT body. Resend rejects that\n      // with a 409 (`invalid_idempotent_request`) — \"This idempotency key has been\n      // used ... but the request body was modified ...\". The operator already got\n      // today's digest on the first send, so re-sending a changed version same-day\n      // would just be a duplicate: treat it as an \"already sent today\" no-op.\n      //\n      // ResendClient (send/resend.ts) wraps the API error as a plain Error and only\n      // preserves the *message* string (no name/statusCode), so the message\n      // substring is the only reliable discriminator — match defensively on it.\n      // Any OTHER send error re-throws to the outer catch → {code:1}, so a genuine\n      // Resend/network failure still fails loudly.\n      if (isIdempotencyConflict(err)) {\n        // Do NOT write the snapshot: the first send already persisted it; writing\n        // this run's `next` would diff against the first run's snapshot and mis-badge.\n        return {\n          output:\n            \"Digest already sent today (content changed since the first send) — skipped to avoid a duplicate.\",\n          code: 0,\n        };\n      }\n      throw err;\n    }\n    // Persist the next snapshot AFTER a successful send. A write failure is caught +\n    // logged: the digest already went out, tomorrow re-news at worst. (The send-FAILURE\n    // path never reaches here — the outer catch returns code 1 with no write, preserving\n    // the NEW badge for the retry.)\n    try {\n      await writeDigestState(base, next);\n    } catch (e) {\n      console.warn(`⚠ digest state write failed: ${(e as Error).message}`);\n    }\n    return { output: `Digest sent to ${to.join(\", \")} (${result.messageId})`, code: 0 };\n  } catch (err) {\n    // Re-throw config errors (exitCode=2: missing env vars, bad config) so runOrExit\n    // surfaces them with the correct process exit code rather than collapsing to 1.\n    if (typeof (err as { exitCode?: unknown }).exitCode === \"number\") {\n      throw err;\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    return { output: `digest failed: ${message}`, code: 1 };\n  }\n}\n\n/** Pure render of the unified daily operator digest. No IO — the caller (runDigest)\n *  collects the rows and decides whether to send. */\nexport function renderDigestHtml(sections: DigestSections): string {\n  return `<!doctype html>\n<html>\n  <head><meta charset=\"utf-8\"></head>\n  <body style=\"margin:0;padding:0;background:#ffffff\">\n    <table width=\"100%\" style=\"border-collapse:collapse\">\n      <tr>\n        <td align=\"center\" style=\"padding:24px\">\n          <table width=\"600\" style=\"border-collapse:collapse\">\n            <tr>\n              <td>\n                <h1 style=\"color:${RED};font-family:helvetica,sans-serif;font-size:24px;font-weight:700;margin:0 0 8px\">Your fleet today</h1>\n                ${readySection(sections.readyForYourYes)}\n                ${attentionSection(sections.needsAttention)}\n                ${submissionsSection(sections.submissions)}\n              </td>\n            </tr>\n          </table>\n        </td>\n      </tr>\n    </table>\n  </body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAM,OAAO;AACb,IAAM,MAAM;AAGZ,IAAM,eAAe,SAAS,GAAG;AAEjC,SAAS,aAAa,OAA4B;AAChD,QAAM,UAAU,oBAAoB,GAAG;AACvC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,OAAO,mBAAmB,IAAI;AAAA,EAC1C;AACA,QAAM,OAAO,MACV,IAAI,CAAC,OAAO;AACX,UAAM,UAAU,GAAG,aAAa,WAAW,UAAU,IAAI,GAAG,eAAe;AAC3E,UAAM,OAAO,UACT,YAAY,WAAI,OAAO,CAAC,YAAY,YAAY,+BAChD;AACJ,WAAO;AAAA;AAAA,2BAEc,IAAI;AAAA,uCACQ,WAAI,GAAG,QAAQ,CAAC,oBAAe,WAAI,GAAG,UAAU,CAAC,KAAK,WAAI,GAAG,MAAM,CAAC;AAAA,mBAC7F,IAAI;AAAA;AAAA;AAAA,EAGd,CAAC,EACA,KAAK,EAAE;AACV,SAAO,GAAG,OAAO,wEAAwE,IAAI;AAC/F;AAEA,IAAM,iBAAoD,EAAE,UAAU,GAAG,SAAS,EAAE;AAGpF,SAAS,eAAe,QAAkC;AACxD,MAAI,WAAW;AACb,WAAO,wBAAwB,GAAG;AACpC,MAAI,WAAW;AACb,WAAO,wBAAwB,GAAG;AACpC,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAgC;AACxD,QAAM,UAAU,oBAAoB,GAAG;AACvC,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,GAAG,OAAO,mBAAmB,IAAI;AAAA,EAC1C;AAIA,QAAM,SAAS,oBAAI,IAA6B;AAChD,aAAW,MAAM,OAAO;AACtB,UAAM,SAAS,OAAO,IAAI,GAAG,QAAQ;AACrC,QAAI,OAAQ,QAAO,KAAK,EAAE;AAAA,QACrB,QAAO,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,EACnC;AAEA,QAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,CAAC,EAChC,IAAI,CAAC,CAAC,UAAU,SAAS,MAAM;AAC9B,UAAM,SAAS,CAAC,GAAG,SAAS,EAAE;AAAA,MAC5B,CAAC,GAAG,MAAM,eAAe,EAAE,QAAQ,IAAI,eAAe,EAAE,QAAQ;AAAA,IAClE;AACA,UAAM,OAAO,OACV,IAAI,CAAC,OAAO;AACX,YAAM,UAAU,GAAG,KAAK,WAAW,UAAU,IAAI,GAAG,MAAM;AAC1D,YAAM,YAAY,UACd,YAAY,WAAI,OAAO,CAAC,YAAY,YAAY,KAAK,WAAI,GAAG,KAAK,CAAC,SAClE,WAAI,GAAG,KAAK;AAChB,aAAO;AAAA;AAAA,+BAEc,IAAI,yFAAyF,eAAe,GAAG,MAAM,CAAC,GAAG,SAAS;AAAA;AAAA,IAEzJ,CAAC,EACA,KAAK,EAAE;AACV,WAAO;AAAA;AAAA,mHAEsG,WAAI,QAAQ,CAAC;AAAA;AAAA,QAExH,IAAI;AAAA,EACR,CAAC,EACA,KAAK,EAAE;AAEV,SAAO,GAAG,OAAO,wEAAwE,MAAM;AACjG;AAKA,SAAS,mBAAmB,GAAwD;AAClF,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,EAAE,UAAU,KAAK,EAAE,YAAY,KAAK,EAAE,aAAa,EAAG,QAAO;AACjE,QAAM,UAAU,oBAAoB,GAAG;AAGvC,QAAM,SAAS;AAAA,IACb,GAAG,EAAE,KAAK,YAAY,EAAE,UAAU,IAAI,KAAK,GAAG;AAAA,IAC9C,GAAG,EAAE,OAAO,0BAA0B,EAAE,YAAY,IAAI,KAAK,GAAG;AAAA,IAChE,GAAG,EAAE,QAAQ;AAAA,EACf,EAAE,KAAK,QAAK;AACZ,QAAM,YAAY,mBAAmB,IAAI,8DAA8D,MAAM;AAC7G,MAAI,EAAE,OAAO,WAAW,EAAG,QAAO,GAAG,OAAO,GAAG,SAAS;AACxD,QAAM,OAAO,EAAE,OACZ,IAAI,CAAC,SAAS;AACb,UAAM,QAAkB,CAAC;AACzB,QAAI,KAAK,QAAQ,EAAG,OAAM,KAAK,GAAG,KAAK,KAAK,QAAQ,KAAK,UAAU,IAAI,KAAK,GAAG,EAAE;AACjF,QAAI,KAAK,UAAU,EAAG,OAAM,KAAK,GAAG,KAAK,OAAO,UAAU,KAAK,YAAY,IAAI,KAAK,GAAG,EAAE;AACzF,QAAI,KAAK,WAAW,EAAG,OAAM,KAAK,GAAG,KAAK,QAAQ,gBAAgB;AAClE,WAAO;AAAA;AAAA,2BAEc,IAAI;AAAA,uCACQ,WAAI,KAAK,QAAQ,CAAC,oBAAe,MAAM,KAAK,QAAK,CAAC;AAAA;AAAA;AAAA,EAGrF,CAAC,EACA,KAAK,EAAE;AACV,SAAO,GAAG,OAAO,GAAG,SAAS,8EAA8E,IAAI;AACjH;AAEA,IAAM,eAAe;AAGrB,SAAS,cAAc,GAAiB;AACtC,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACpC;AAaA,eAAsB,oBAAoB,MAA0C;AAClF,UAAQ,MAAM,eAAe,IAAI,GAAG,OAAO,iBAAiB;AAC9D;AAgCA,eAAe,wBAAwB,KAAiD;AACtF,MAAI;AACF,UAAM,CAAC,EAAE,QAAQ,aAAa,GAAG,EAAE,yBAAyB,GAAG,EAAE,gBAAgB,CAAC,IAChF,MAAM,QAAQ,IAAI;AAAA,MAChB,OAAO,sBAAiB;AAAA,MACxB,OAAO,2BAAsB;AAAA,MAC7B,OAAO,0BAAqB;AAAA,IAC9B,CAAC;AACH,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,WAAO,MAAM,yBAAyB,IAAI,gBAAgB,KAAK,yBAAyB,CAAC;AAAA,EAC3F,SAAS,GAAG;AACV,YAAQ,KAAK,qDAAiD,EAAY,OAAO,EAAE;AACnF,WAAO,oBAAI,IAAI;AAAA,EACjB;AACF;AAIA,IAAM,+BAA+B,KAAK,KAAK,KAAK;AAQpD,eAAe,6BACb,KAC2D;AAC3D,MAAI;AACF,UAAM,CAAC,EAAE,QAAQ,aAAa,GAAG,EAAE,4BAA4B,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpF,OAAO,sBAAiB;AAAA,MACxB,OAAO,2BAAsB;AAAA,IAC/B,CAAC;AACD,UAAM,KAAK,MAAM,OAAO,aAAa,CAAC;AACtC,WAAO,MAAM;AAAA,MACX;AAAA,MACA,IAAI,KAAK,IAAI,QAAQ,IAAI,4BAA4B,EAAE,YAAY;AAAA,IACrE;AAAA,EACF,SAAS,GAAG;AACV,YAAQ,KAAK,sDAAkD,EAAY,OAAO,EAAE;AACpF,WAAO;AAAA,EACT;AACF;AAOO,SAAS,8BACd,QACA,WACiC;AACjC,MAAI,WAAW,KAAM,QAAO;AAC5B,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,MAAI,WAAW;AACf,QAAM,SAA6C,CAAC;AACpD,aAAW,CAAC,QAAQ,CAAC,KAAK,QAAQ;AAChC,aAAS,EAAE;AACX,eAAW,EAAE;AACb,gBAAY,EAAE;AACd,UAAM,OAAO,UAAU,IAAI,MAAM;AACjC,QAAI,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,GAAG;AAChD,aAAO,KAAK,EAAE,UAAU,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,IAC3C;AAAA,EACF;AACA,SAAO;AAAA,IACL,CAAC,GAAG,MACF,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAC5D,EAAE,SAAS,cAAc,EAAE,QAAQ;AAAA,EACvC;AACA,SAAO,EAAE,OAAO,SAAS,UAAU,OAAO;AAC5C;AAIA,SAAS,aAAa,OAAe,IAA4C;AAC/E,MAAI;AACF,WAAO,GAAG;AAAA,EACZ,SAAS,GAAG;AACV,YAAQ,KAAK,+BAA0B,KAAK,aAAc,EAAY,OAAO,EAAE;AAC/E,WAAO,CAAC;AAAA,EACV;AACF;AAkBA,eAAsB,iBAAiB,MAAsD;AAC3F,QAAM,UAAU,KAAK,WAAY,MAAM,eAAe,KAAK,IAAI;AAC/D,QAAM,WAAW,KAAK,YAAa,MAAM,aAAa,KAAK,IAAI;AAC/D,QAAM,MAAM,KAAK,OAAO,oBAAI,KAAK;AACjC,QAAM,gBAAgB,KAAK,iBAAkB,MAAM,wBAAwB,GAAG;AAC9E,QAAM,YAAY,IAAI,IAAwB,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,SAAO;AAAA,IACL,GAAG,aAAa,QAAQ,MAAM,kBAAkB,UAAU,KAAK,OAAO,CAAC;AAAA,IACvE,GAAG,aAAa,YAAY,MAAM,wBAAwB,SAAS,WAAW,KAAK,OAAO,CAAC;AAAA,IAC3F,GAAG,aAAa,aAAa,MAAM,wBAAwB,SAAS,WAAW,KAAK,OAAO,CAAC;AAAA,IAC5F,GAAG,aAAa,cAAc,MAAM,wBAAwB,UAAU,KAAK,OAAO,CAAC;AAAA,IACnF,GAAG,aAAa,YAAY,MAAM,sBAAsB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACpF,GAAG,aAAa,MAAM,MAAM,gBAAgB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACxE,GAAG,aAAa,aAAa,MAAM,yBAAyB,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,IACxF,GAAG;AAAA,MAAa;AAAA,MAAa,MAC3B,gCAAgC,UAAU,KAAK,SAAS,GAAG;AAAA,IAC7D;AAAA,IACA,GAAG;AAAA,MAAa;AAAA,MAAiB,MAC/B,0BAA0B,UAAU,eAAe,KAAK,OAAO;AAAA,IACjE;AAAA;AAAA;AAAA;AAAA,IAIA,GAAG,aAAa,iBAAiB,MAAM,0BAA0B,UAAU,KAAK,SAAS,GAAG,CAAC;AAAA,EAC/F;AACF;AA6BA,eAAsB,UACpB,SAC2C;AAE3C,QAAM,QAAQ,QAAQ,OAAO,oBAAI,KAAK;AACtC,MAAI;AACF,UAAM,OAAO,QAAQ,QAAQ,SAAS,mBAAmB,CAAC;AAI1D,UAAM,UAAU,MAAM,eAAe,IAAI;AACzC,UAAM,WAAW,MAAM,aAAa,IAAI;AACxC,UAAM,QAAQ,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAEpD,UAAM,UAAU,QAAQ,OAAO,iBAAiB;AAEhD,UAAM,kBAA+B,CAAC;AACtC,UAAM,UAAU,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AACjD,eAAW,KAAK,SAAS;AACvB,YAAM,OAAO,MAAM,IAAI,EAAE,MAAM;AAC/B,UAAI,CAAC,KAAM;AAIX,YAAM,OAAO,SAAS,KAAK,IAAI;AAC/B,sBAAgB,KAAK;AAAA,QACnB,UAAU,KAAK;AAAA,QACf,YAAY,EAAE;AAAA,QACd,QAAQ,EAAE,UAAU;AAAA,QACpB,cAAc,OAAO,GAAG,OAAO,MAAM,IAAI,KAAK;AAAA,MAChD,CAAC;AAAA,IACH;AAMA,UAAM,YAAY,MAAM,iBAAiB;AAAA,MACvC;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP,CAAC;AACD,UAAM,QAAQ,MAAM,gBAAgB,IAAI;AACxC,UAAM,EAAE,QAAQ,KAAK,IAAI,cAAc,WAAW,OAAO,cAAc,KAAK,CAAC;AAO7E,UAAM,iBAAiB,OAAO;AAAA,MAC5B,CAAC,OAAO,GAAG,SAAS,UAAU,GAAG,qBAAqB;AAAA,IACxD;AAGA,QAAI,gBAAgB,WAAW,KAAK,eAAe,WAAW,GAAG;AAM/D,UAAI;AACF,cAAM,iBAAiB,MAAM,IAAI;AAAA,MACnC,SAAS,GAAG;AACV,gBAAQ,KAAK,qCAAiC,EAAY,OAAO,EAAE;AAAA,MACrE;AACA,aAAO,EAAE,QAAQ,4DAA4D,MAAM,EAAE;AAAA,IACvF;AAMA,UAAM,SACJ,QAAQ,qBAAqB,SACzB,QAAQ,mBACR,MAAM,6BAA6B,KAAK;AAC9C,UAAM,cAAc,8BAA8B,QAAQ,KAAK;AAE/D,UAAM,OAAO,iBAAiB,EAAE,iBAAiB,gBAAgB,YAAY,CAAC;AAC9E,UAAM,SAAS,QAAQ,UAAU,oBAAoB;AACrD,UAAM,KAAK,CAAC,cAAc,CAAC;AAC3B,UAAM,IAAI,gBAAgB;AAC1B,UAAM,aAAa,MAAM,IAAI,WAAW;AACxC,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,KAAK;AAAA,QACzB,MAAM;AAAA,QACN;AAAA,QACA,SAAS,qBAAgB,cAAc,KAAK,CAAC,KAAK,CAAC,IAAI,UAAU;AAAA,QACjE;AAAA,QACA,gBAAgB,UAAU,cAAc,KAAK,CAAC;AAAA,MAChD,CAAC;AAAA,IACH,SAAS,KAAK;AAaZ,UAAI,sBAAsB,GAAG,GAAG;AAG9B,eAAO;AAAA,UACL,QACE;AAAA,UACF,MAAM;AAAA,QACR;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAKA,QAAI;AACF,YAAM,iBAAiB,MAAM,IAAI;AAAA,IACnC,SAAS,GAAG;AACV,cAAQ,KAAK,qCAAiC,EAAY,OAAO,EAAE;AAAA,IACrE;AACA,WAAO,EAAE,QAAQ,kBAAkB,GAAG,KAAK,IAAI,CAAC,KAAK,OAAO,SAAS,KAAK,MAAM,EAAE;AAAA,EACpF,SAAS,KAAK;AAGZ,QAAI,OAAQ,IAA+B,aAAa,UAAU;AAChE,YAAM;AAAA,IACR;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,WAAO,EAAE,QAAQ,kBAAkB,OAAO,IAAI,MAAM,EAAE;AAAA,EACxD;AACF;AAIO,SAAS,iBAAiB,UAAkC;AACjE,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mCAU0B,GAAG;AAAA,kBACpB,aAAa,SAAS,eAAe,CAAC;AAAA,kBACtC,iBAAiB,SAAS,cAAc,CAAC;AAAA,kBACzC,mBAAmB,SAAS,WAAW,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAS1D;","names":[]}

package/dist/{email-VTTTKKL5.js → email-KJXASVH5.js}

@@ -1,7 +1,7 @@
 import {
   renderProspectReport
-} from "./chunk-W7Z3BGCI.js";
-import "./chunk-X3B723J4.js";
+} from "./chunk-DEWJMMG3.js";
+import "./chunk-HSI6Q7MI.js";
 import {
   escapeHtml,
   safeUrl
@@ -192,4 +192,4 @@ export {
   parseProspectAuditRecipients,
   sendAuditEmail
 };
-//# sourceMappingURL=email-VTTTKKL5.js.map
+//# sourceMappingURL=email-KJXASVH5.js.map

package/dist/{ensure-site-DFTB7MN3.js → ensure-site-4DCEBAPM.js}

@@ -7,7 +7,7 @@ import {
   listWebsites,
   siteSlug,
   toAirtableStatus
-} from "./chunk-LDWZSLSU.js";
+} from "./chunk-7NYN2P6I.js";
 import "./chunk-6VAL7XJT.js";
 
 // src/reports/airtable/ensure-site.ts
@@ -16,7 +16,7 @@ var COLS = {
   pointOfContact: "point of contact",
   gitRepo: "Git repo"
 };
-async function ensureSite(base, input) {
+async function ensureSite(base, input, mirror) {
   const slug = siteSlug(input.slug);
   if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);
   if (input.displayName && siteSlug(input.displayName) !== slug)
@@ -33,9 +33,11 @@ async function ensureSite(base, input) {
     if (input.url) fields[COLS.url] = input.url;
     if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;
     const created = await base(WEBSITES_TABLE).create([{ fields }]);
+    const rec = created[0];
+    await mirror?.created({ id: rec.id, fields: rec.fields });
     return {
       status: "created",
-      siteId: created[0].id,
+      siteId: rec.id,
       updatedFields: [],
       skippedMismatches: []
     };
@@ -54,6 +56,7 @@ async function ensureSite(base, input) {
   const updatedFields = Object.keys(updates);
   if (updatedFields.length > 0) {
     await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);
+    await mirror?.site(existing.id, updates);
   }
   return { status: "exists", siteId: existing.id, updatedFields, skippedMismatches };
 }
@@ -63,13 +66,18 @@ async function runEnsureSiteCommand(slug, opts) {
   if (!slug) return { output: "Provide a <slug> (e.g. `ensure-site roalson`).", code: 2 };
   try {
     const base = openBase(readAirtableConfig());
-    const result = await ensureSite(base, {
-      slug,
-      ...opts.name ? { displayName: opts.name } : {},
-      ...opts.url ? { url: opts.url } : {},
-      ...opts.contact ? { pointOfContact: opts.contact } : {},
-      ...opts.gitRepo ? { gitRepo: opts.gitRepo } : {}
-    });
+    const { makeSiteMirror } = await import("./site-mirror-NIREX5ME.js");
+    const result = await ensureSite(
+      base,
+      {
+        slug,
+        ...opts.name ? { displayName: opts.name } : {},
+        ...opts.url ? { url: opts.url } : {},
+        ...opts.contact ? { pointOfContact: opts.contact } : {},
+        ...opts.gitRepo ? { gitRepo: opts.gitRepo } : {}
+      },
+      await makeSiteMirror()
+    );
     const filled = result.updatedFields.length > 0 ? ` \u2014 filled blank field(s): ${result.updatedFields.join(", ")}` : "";
     const skipped = result.skippedMismatches.length > 0 ? ` \u2014 differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(", ")}` : "";
     const nameNote = result.status === "created" && !opts.name ? ` \u2014 Name set to "${slug}"; retitle in Airtable before forms/announce go live (or re-create with --name)` : "";
@@ -85,4 +93,4 @@ async function runEnsureSiteCommand(slug, opts) {
 export {
   runEnsureSiteCommand
 };
-//# sourceMappingURL=ensure-site-DFTB7MN3.js.map
+//# sourceMappingURL=ensure-site-4DCEBAPM.js.map

package/dist/ensure-site-4DCEBAPM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reports/airtable/ensure-site.ts","../src/cli/commands/ensure-site.ts"],"sourcesContent":["import type { FieldSet, Records } from \"airtable\";\nimport type { AirtableBase } from \"./client.js\";\nimport { WEBSITES_TABLE, listWebsites, siteSlug } from \"./websites.js\";\nimport { toAirtableStatus } from \"./site-status.js\";\n\nexport type EnsureSiteInput = {\n  /** Canonical slug — matches by siteSlug(Name); the Name on create when no displayName given. */\n  slug: string;\n  /** Human display name written to Name on create. Name is consumed VERBATIM in\n   *  client-facing copy (forms auto-reply intro, report subjects), so a bare\n   *  machine slug there reads as \"Thanks for reaching out to acme-co.\" Must\n   *  slugify to the same slug or the row wouldn't be found on re-run. */\n  displayName?: string;\n  url?: string;\n  pointOfContact?: string;\n  /** owner/repo. Default on create: `reddoorla/<slug>`. */\n  gitRepo?: string;\n};\n\n/** #539 Phase 5. Structurally typed rather than importing the db layer's\n *  `SiteMirror`, so this module stays the leaf it has always been — a real\n *  `SiteMirror` satisfies it. Two ops because `ensureSite` has two write paths,\n *  and the create one is the reason this exists: every other site mirror is an\n *  UPDATE, which does nothing for a row that does not exist yet. */\nexport type EnsureSiteMirror = {\n  created: (rec: { id: string; fields: Record<string, unknown> }) => Promise<void>;\n  site: (siteId: string, fields: Record<string, unknown>) => Promise<void>;\n};\n\nexport type EnsureSiteResult = {\n  status: \"created\" | \"exists\";\n  siteId: string;\n  /** Airtable column names written on the exists path (create path writes all). */\n  updatedFields: string[];\n  /** Inputs that DIFFERED from an existing non-blank cell and were left\n   *  untouched (fill-blanks-only) — surfaced so a resumed bootstrap with a\n   *  corrected value doesn't silently discard it. */\n  skippedMismatches: string[];\n};\n\n/** Column-name map (load-bearing magic strings — see websites.ts's mapRow header). */\nconst COLS = {\n  url: \"url\",\n  pointOfContact: \"point of contact\",\n  gitRepo: \"Git repo\",\n} as const;\n\n/**\n * Find-or-create the Websites row for a slug so a new site exists in the fleet\n * inventory (audits, form-ingest slug resolution, reports) from day one.\n *\n * Fill-blanks-only on the exists path: this command runs from a bootstrap skill\n * that may be re-run to resume — it must never clobber operator-edited cells.\n * Frequencies are deliberately NOT set (launch flips the lifecycle); Status is\n * only written on create (\"building\" — Airtable's \"in development\" until the\n * stage-2 vocabulary switch flips).\n */\nexport async function ensureSite(\n  base: AirtableBase,\n  input: EnsureSiteInput,\n  mirror?: EnsureSiteMirror,\n): Promise<EnsureSiteResult> {\n  const slug = siteSlug(input.slug);\n  if (!slug) throw new Error(`ensure-site: '${input.slug}' does not slugify to a usable slug`);\n  if (input.displayName && siteSlug(input.displayName) !== slug)\n    throw new Error(\n      `ensure-site: display name '${input.displayName}' slugifies to '${siteSlug(input.displayName)}', not '${slug}' — the row would not be found on re-run`,\n    );\n\n  const existing = (await listWebsites(base)).find((w) => siteSlug(w.name) === slug);\n\n  if (!existing) {\n    const fields: FieldSet = {\n      Name: input.displayName ?? slug,\n      Status: toAirtableStatus(\"building\"),\n      [COLS.gitRepo]: input.gitRepo ?? `reddoorla/${slug}`,\n    };\n    if (input.url) fields[COLS.url] = input.url;\n    if (input.pointOfContact) fields[COLS.pointOfContact] = input.pointOfContact;\n    const created = (await base(WEBSITES_TABLE).create([{ fields }])) as Records<FieldSet>;\n    const rec = created[0]!;\n    // The mirror gets what Airtable STORED, never the `fields` we sent: parity\n    // diffs Turso against the stored record, so mapping our own payload would\n    // diverge the moment Airtable normalises a value.\n    await mirror?.created({ id: rec.id, fields: rec.fields as Record<string, unknown> });\n    return {\n      status: \"created\",\n      siteId: rec.id,\n      updatedFields: [],\n      skippedMismatches: [],\n    };\n  }\n\n  const updates: FieldSet = {};\n  const skippedMismatches: string[] = [];\n  const blank = (v: unknown) => v === null || v === undefined || v === \"\";\n  const consider = (column: string, provided: string | undefined, current: unknown) => {\n    if (!provided) return;\n    if (blank(current)) updates[column] = provided;\n    else if (current !== provided) skippedMismatches.push(column);\n  };\n  consider(COLS.url, input.url, existing.url || null);\n  consider(COLS.pointOfContact, input.pointOfContact, existing.pointOfContact);\n  consider(COLS.gitRepo, input.gitRepo, existing.gitRepo);\n\n  const updatedFields = Object.keys(updates);\n  if (updatedFields.length > 0) {\n    await base(WEBSITES_TABLE).update([{ id: existing.id, fields: updates }]);\n    // The fill-blanks path writes real cells too — a resumed bootstrap that only\n    // filled a blank `url` would otherwise leave Turso stale until the sync.\n    await mirror?.site(existing.id, updates);\n  }\n  return { status: \"exists\", siteId: existing.id, updatedFields, skippedMismatches };\n}\n","import { openBase, readAirtableConfig } from \"../../reports/airtable/client.js\";\nimport { ensureSite } from \"../../reports/airtable/ensure-site.js\";\n\nexport type EnsureSiteCommandOptions = {\n  name?: string;\n  url?: string;\n  contact?: string;\n  gitRepo?: string;\n  cwd?: string;\n};\n\n/**\n * `ensure-site <slug>` — create/verify the fleet-inventory row for a new site.\n * Day-one step of the /new-site bootstrap skill. Fill-blanks-only; safe to re-run.\n */\nexport async function runEnsureSiteCommand(\n  slug: string | undefined,\n  opts: EnsureSiteCommandOptions,\n): Promise<{ output: string; code: number }> {\n  if (!slug) return { output: \"Provide a <slug> (e.g. `ensure-site roalson`).\", code: 2 };\n  try {\n    const base = openBase(readAirtableConfig());\n    // #539 Phase 5: bootstrapping a site CREATES the Websites row, so this is\n    // the one site path that needs an INSERT mirror — every other one updates.\n    const { makeSiteMirror } = await import(\"../../db/site-mirror.js\");\n    const result = await ensureSite(\n      base,\n      {\n        slug,\n        ...(opts.name ? { displayName: opts.name } : {}),\n        ...(opts.url ? { url: opts.url } : {}),\n        ...(opts.contact ? { pointOfContact: opts.contact } : {}),\n        ...(opts.gitRepo ? { gitRepo: opts.gitRepo } : {}),\n      },\n      await makeSiteMirror(),\n    );\n    const filled =\n      result.updatedFields.length > 0\n        ? ` — filled blank field(s): ${result.updatedFields.join(\", \")}`\n        : \"\";\n    const skipped =\n      result.skippedMismatches.length > 0\n        ? ` — differs from existing, left untouched (edit in Airtable): ${result.skippedMismatches.join(\", \")}`\n        : \"\";\n    const nameNote =\n      result.status === \"created\" && !opts.name\n        ? ` — Name set to \"${slug}\"; retitle in Airtable before forms/announce go live (or re-create with --name)`\n        : \"\";\n    return {\n      output: `[${slug}] ${result.status} (${result.siteId})${filled}${skipped}${nameNote}`,\n      code: 0,\n    };\n  } catch (err) {\n    const e = err as { message?: string; exitCode?: number };\n    return { output: e.message ?? String(err), code: e.exitCode ?? 1 };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAyCA,IAAM,OAAO;AAAA,EACX,KAAK;AAAA,EACL,gBAAgB;AAAA,EAChB,SAAS;AACX;AAYA,eAAsB,WACpB,MACA,OACA,QAC2B;AAC3B,QAAM,OAAO,SAAS,MAAM,IAAI;AAChC,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,iBAAiB,MAAM,IAAI,qCAAqC;AAC3F,MAAI,MAAM,eAAe,SAAS,MAAM,WAAW,MAAM;AACvD,UAAM,IAAI;AAAA,MACR,8BAA8B,MAAM,WAAW,mBAAmB,SAAS,MAAM,WAAW,CAAC,WAAW,IAAI;AAAA,IAC9G;AAEF,QAAM,YAAY,MAAM,aAAa,IAAI,GAAG,KAAK,CAAC,MAAM,SAAS,EAAE,IAAI,MAAM,IAAI;AAEjF,MAAI,CAAC,UAAU;AACb,UAAM,SAAmB;AAAA,MACvB,MAAM,MAAM,eAAe;AAAA,MAC3B,QAAQ,iBAAiB,UAAU;AAAA,MACnC,CAAC,KAAK,OAAO,GAAG,MAAM,WAAW,aAAa,IAAI;AAAA,IACpD;AACA,QAAI,MAAM,IAAK,QAAO,KAAK,GAAG,IAAI,MAAM;AACxC,QAAI,MAAM,eAAgB,QAAO,KAAK,cAAc,IAAI,MAAM;AAC9D,UAAM,UAAW,MAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,UAAM,MAAM,QAAQ,CAAC;AAIrB,UAAM,QAAQ,QAAQ,EAAE,IAAI,IAAI,IAAI,QAAQ,IAAI,OAAkC,CAAC;AACnF,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ,IAAI;AAAA,MACZ,eAAe,CAAC;AAAA,MAChB,mBAAmB,CAAC;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,UAAoB,CAAC;AAC3B,QAAM,oBAA8B,CAAC;AACrC,QAAM,QAAQ,CAAC,MAAe,MAAM,QAAQ,MAAM,UAAa,MAAM;AACrE,QAAM,WAAW,CAAC,QAAgB,UAA8B,YAAqB;AACnF,QAAI,CAAC,SAAU;AACf,QAAI,MAAM,OAAO,EAAG,SAAQ,MAAM,IAAI;AAAA,aAC7B,YAAY,SAAU,mBAAkB,KAAK,MAAM;AAAA,EAC9D;AACA,WAAS,KAAK,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI;AAClD,WAAS,KAAK,gBAAgB,MAAM,gBAAgB,SAAS,cAAc;AAC3E,WAAS,KAAK,SAAS,MAAM,SAAS,SAAS,OAAO;AAEtD,QAAM,gBAAgB,OAAO,KAAK,OAAO;AACzC,MAAI,cAAc,SAAS,GAAG;AAC5B,UAAM,KAAK,cAAc,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAGxE,UAAM,QAAQ,KAAK,SAAS,IAAI,OAAO;AAAA,EACzC;AACA,SAAO,EAAE,QAAQ,UAAU,QAAQ,SAAS,IAAI,eAAe,kBAAkB;AACnF;;;AClGA,eAAsB,qBACpB,MACA,MAC2C;AAC3C,MAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,kDAAkD,MAAM,EAAE;AACtF,MAAI;AACF,UAAM,OAAO,SAAS,mBAAmB,CAAC;AAG1C,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,2BAAyB;AACjE,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,KAAK,OAAO,EAAE,aAAa,KAAK,KAAK,IAAI,CAAC;AAAA,QAC9C,GAAI,KAAK,MAAM,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC;AAAA,QACpC,GAAI,KAAK,UAAU,EAAE,gBAAgB,KAAK,QAAQ,IAAI,CAAC;AAAA,QACvD,GAAI,KAAK,UAAU,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,MAClD;AAAA,MACA,MAAM,eAAe;AAAA,IACvB;AACA,UAAM,SACJ,OAAO,cAAc,SAAS,IAC1B,kCAA6B,OAAO,cAAc,KAAK,IAAI,CAAC,KAC5D;AACN,UAAM,UACJ,OAAO,kBAAkB,SAAS,IAC9B,qEAAgE,OAAO,kBAAkB,KAAK,IAAI,CAAC,KACnG;AACN,UAAM,WACJ,OAAO,WAAW,aAAa,CAAC,KAAK,OACjC,wBAAmB,IAAI,oFACvB;AACN,WAAO;AAAA,MACL,QAAQ,IAAI,IAAI,KAAK,OAAO,MAAM,KAAK,OAAO,MAAM,IAAI,MAAM,GAAG,OAAO,GAAG,QAAQ;AAAA,MACnF,MAAM;AAAA,IACR;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,WAAO,EAAE,QAAQ,EAAE,WAAW,OAAO,GAAG,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,EACnE;AACF;","names":[]}

package/dist/fleet-state-7TJ2GYT2.js

@@ -0,0 +1,39 @@
+import {
+  getReportById,
+  getReportHtml,
+  getSiteById,
+  getSiteBySlug,
+  listAllReports,
+  listReportsForSite,
+  listSites,
+  mirrorHealthFields,
+  mirrorReportInsert,
+  mirrorReportPatch,
+  mirrorScheduleFields,
+  mirrorSiteField,
+  mirrorSiteFields,
+  mirrorSiteInsert,
+  storeRenderedHtml
+} from "./chunk-HHMMUR4P.js";
+import "./chunk-P6AORG32.js";
+import "./chunk-F3JWOPTG.js";
+import "./chunk-VAD43MOR.js";
+import "./chunk-7NYN2P6I.js";
+export {
+  getReportById,
+  getReportHtml,
+  getSiteById,
+  getSiteBySlug,
+  listAllReports,
+  listReportsForSite,
+  listSites,
+  mirrorHealthFields,
+  mirrorReportInsert,
+  mirrorReportPatch,
+  mirrorScheduleFields,
+  mirrorSiteField,
+  mirrorSiteFields,
+  mirrorSiteInsert,
+  storeRenderedHtml
+};
+//# sourceMappingURL=fleet-state-7TJ2GYT2.js.map