@reddoorla/maintenance 0.88.2 → 0.88.3

package/dist/{chunk-ANJNTAMM.js → chunk-WPL5GERE.js}

@@ -292,9 +292,11 @@ export {
   collectRenovateAlerts,
   collectCiAlerts,
   collectTurnstileGuardrailAlerts,
+  NOTIFY_BOUNCE_THRESHOLD,
   NOTIFY_BOUNCE_WINDOW_DAYS,
   collectNotifyBounceAlerts,
   collectAnalyticsFailures,
+  prismicAckIsLive,
   collectPrismicDriftAlerts
 };
-//# sourceMappingURL=chunk-ANJNTAMM.js.map
+//# sourceMappingURL=chunk-WPL5GERE.js.map

package/dist/{chunk-A2UNJIKH.js → chunk-XKDCR4UE.js}

@@ -2,7 +2,7 @@ import {
   ANALYZE_SKIPPED,
   PROBES_SKIPPED,
   resolveBusinessName
-} from "./chunk-7TMWBXX7.js";
+} from "./chunk-CEW5PEHZ.js";
 import {
   escapeHtml,
   safeUrl
@@ -110,6 +110,9 @@ function buildProbesSection(p, businessNameUsed) {
   }
   const recognition = p.brandedRecognized ? "<p>When the engines were asked about the business by name, they recognized it.</p>" : businessNameUsed ? "<p>When the engines were asked about the business by name, they did not recognize it \u2014 a real citation of the site never showed up, even with the name handed to them.</p>" : "<p>The engines did not recognize the business \u2014 there was no business name available to ask them with, so this reflects a harder starting point than a named query would.</p>";
   const categoryCaveat = byKind.has("category") ? "" : `<p class="muted"><strong>No buyer-question (category) query was tested here</strong> \u2014 only name-recognition. An engine echoing back a name it was just given says nothing about whether a buyer who had never heard of the business would be shown it; treat the line above as a floor, not a visibility signal.</p>`;
+  const tally = p.categoryProbes;
+  const missing = tally ? tally.attempted - tally.answered : 0;
+  const degradedNotice = tally && missing > 0 ? `<p class="muted"><strong>${missing} of ${tally.attempted} buyer-question searches did not come back</strong> \u2014 the engine errored on them. They are counted as "not found", so the visibility figure above is a floor: the real number could be higher, not lower. Worth re-running before drawing a conclusion from it.</p>` : "";
   const groups = KIND_ORDER.filter((k) => byKind.has(k)).map((kind) => {
     const answers = byKind.get(kind) ?? [];
     const cards = answers.map(
@@ -128,7 +131,7 @@ function buildProbesSection(p, businessNameUsed) {
     return `<h3>${escapeHtml(KIND_LABEL[kind])}</h3>${cards}`;
   }).join("");
   const competitors = p.competitorsSeen.length ? `<h3>Who the engines cited instead</h3><ul>${p.competitorsSeen.map((c) => `<li>${escapeHtml(c.domain)} \u2014 ${c.count} time${c.count === 1 ? "" : "s"}</li>`).join("")}</ul>` : "";
-  return recognition + categoryCaveat + groups + competitors;
+  return recognition + categoryCaveat + degradedNotice + groups + competitors;
 }
 function buildFindabilitySection(c) {
   const accessBlock = !c.crawlerAccessMeasured ? `<p class="muted">Crawler access: not measured \u2014 ${STAGE_FAILED_MESSAGE}.</p>` : c.crawlerAccess.blockedAi.length ? `<p><strong>Blocked AI crawlers:</strong> ${escapeHtml(
@@ -279,4 +282,4 @@ function renderProspectReport(result) {
 export {
   renderProspectReport
 };
-//# sourceMappingURL=chunk-A2UNJIKH.js.map
+//# sourceMappingURL=chunk-XKDCR4UE.js.map

package/dist/chunk-XKDCR4UE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prospect/render.ts"],"sourcesContent":["import { escapeHtml, safeUrl } from \"../util/html.js\";\nimport { hostnameOf } from \"../util/url.js\";\nimport { ANALYZE_SKIPPED, PROBES_SKIPPED } from \"./pipeline.js\";\nimport { resolveBusinessName } from \"./probes.js\";\nimport type {\n  AnalyzeResult,\n  ChecksResult,\n  Fix,\n  LighthouseScores,\n  ProbeAnswer,\n  ProbesResult,\n  ProspectAuditResult,\n  StageResult,\n} from \"./types.js\";\n\nconst RED = \"#d71920\";\nconst IMPACT_ORDER: Record<Fix[\"impact\"], number> = { high: 0, medium: 1, low: 2 };\nconst KIND_LABEL: Record<ProbeAnswer[\"kind\"], string> = {\n  branded: \"Branded — asked about the business by name\",\n  category: \"Category — the questions a buyer would actually type\",\n  competitor: \"Competitor — head-to-head comparisons\",\n};\nconst KIND_ORDER: ProbeAnswer[\"kind\"][] = [\"category\", \"branded\", \"competitor\"];\n\n/** Terse product mapping so a recipient who has never seen a crawler's raw\n *  user-agent string can place it — factual labelling, not a voice change. */\nconst AI_AGENT_LABELS: Record<string, string> = {\n  GPTBot: \"ChatGPT\",\n  \"OAI-SearchBot\": \"ChatGPT's search results\",\n  ClaudeBot: \"Claude\",\n  PerplexityBot: \"Perplexity\",\n  \"Google-Extended\": \"Gemini and Google's AI Overviews\",\n  CCBot: \"Common Crawl, used to train many AI models\",\n};\n\nfunction describeAgent(agent: string): string {\n  const label = AI_AGENT_LABELS[agent];\n  return label ? `${agent} (feeds ${label})` : agent;\n}\n\n/** Every genuine stage failure collapses to this one phrase — the real error\n *  (status codes, retry counts, timeouts — operator vocabulary) stays in the\n *  persisted JSON and CLI output for operators, but never reaches a stranger\n *  who would read it as broken software rather than a diagnostic. */\nconst STAGE_FAILED_MESSAGE = \"we could not complete this part of the analysis\";\n\nconst STYLES = `\n  :root { color-scheme: light; }\n  * { box-sizing: border-box; }\n  body { margin: 0; background: #faf8f5; color: #1a1a1a;\n    font: 16px/1.6 -apple-system, BlinkMacSystemFont, \"Segoe UI\", Helvetica, Arial, sans-serif; }\n  .wrap { max-width: 860px; margin: 0 auto; padding: 48px 24px 80px; }\n  h1, h2, h3 { font-family: Besley, Georgia, \"Times New Roman\", serif; font-weight: 600; line-height: 1.2; }\n  h1 { font-size: 40px; margin: 0 0 8px; }\n  h2 { font-size: 26px; margin: 48px 0 12px; border-top: 2px solid #e6e1da; padding-top: 24px; }\n  h3 { font-size: 18px; margin: 24px 0 8px; }\n  .lede { color: #57544f; margin: 0 0 8px; }\n  .scores { display: grid; grid-template-columns: repeat(auto-fit, minmax(160px, 1fr)); gap: 12px; margin: 32px 0; }\n  .score { background: #fff; border: 1px solid #e6e1da; border-radius: 8px; padding: 16px; }\n  .score .n { font-family: Besley, Georgia, serif; font-size: 38px; line-height: 1; color: ${RED}; }\n  .score .n.na { font-size: 18px; color: #8a857e; }\n  .score .l { font-size: 13px; letter-spacing: .08em; text-transform: uppercase; color: #57544f; margin-top: 8px; }\n  .score .hint { font-size: 12px; color: #8a857e; margin-top: 4px; }\n  .card { background: #fff; border: 1px solid #e6e1da; border-radius: 8px; padding: 16px; margin: 12px 0; }\n  .q { font-weight: 600; }\n  .tag { display: inline-block; font-size: 12px; letter-spacing: .06em; text-transform: uppercase;\n    border-radius: 999px; padding: 2px 10px; border: 1px solid currentColor; }\n  .yes { color: #14663c; } .partial { color: #8a6d00; } .no { color: ${RED}; }\n  ul { padding-left: 20px; } li { margin: 6px 0; }\n  .muted { color: #8a857e; }\n  .cta { margin-top: 56px; background: ${RED}; color: #fff; border-radius: 8px; padding: 24px 28px; }\n  .cta h2 { border: 0; padding: 0; margin: 0 0 8px; color: #fff; }\n  .cta a { color: #fff; }\n  table { width: 100%; border-collapse: collapse; margin-top: 8px; }\n  td, th { text-align: left; padding: 6px 8px; border-bottom: 1px solid #eee; vertical-align: top; }\n  @media print {\n    body { background: #fff; }\n    .card, .score, .cta { break-inside: avoid; }\n    /* Browsers default \"print background graphics\" OFF, which drops the red\n       .cta background but keeps its white text — the only ask in the report\n       would otherwise print white-on-white and vanish. Fall back to dark\n       text on no background with a visible border instead of relying on the\n       background for contrast. */\n    .cta { background: none; color: #1a1a1a; border: 2px solid ${RED}; }\n    .cta h2, .cta a { color: #1a1a1a; }\n  }\n`;\n\nfunction scoreCard(label: string, value: number | null, hint?: string): string {\n  const n =\n    value === null ? `<div class=\"n na\">Not measured</div>` : `<div class=\"n\">${value}</div>`;\n  const hintHtml = hint ? `<div class=\"hint\">${escapeHtml(hint)}</div>` : \"\";\n  return `<div class=\"score\">${n}<div class=\"l\">${escapeHtml(label)}</div>${hintHtml}</div>`;\n}\n\n/** Body for a stage that succeeded, or a uniform \"Not measured\" note when it didn't. */\nfunction stageBody<T>(stage: StageResult<T>, body: (data: T) => string): string {\n  return stage.ok ? body(stage.data) : notMeasuredNote();\n}\n\n/** The stage's real error is deliberately not a parameter here — see\n *  STAGE_FAILED_MESSAGE above. Every genuine failure reads the same\n *  client-safe way, regardless of what actually broke. */\nfunction notMeasuredNote(): string {\n  return `<p class=\"muted\">Not measured — ${STAGE_FAILED_MESSAGE}.</p>`;\n}\n\n/** A stage a human deliberately turned off (--no-probes, or analyze skipped\n *  because checks failed upstream) must read as \"you asked us to skip this\" —\n *  never as \"we tried and could not\", which is what a bare \"Not measured —\n *  {error}\" would otherwise imply. Compares against the pipeline's exported\n *  constants rather than a retyped string literal. */\nfunction skippableStageNote(error: string, skipConstant: string, skipMessage: string): string {\n  if (error === skipConstant) {\n    return `<p class=\"muted\">${escapeHtml(skipMessage)}</p>`;\n  }\n  return notMeasuredNote();\n}\n\n/** `new Date(iso).toLocaleDateString()` never throws on a bad timestamp — it\n *  silently returns \"Invalid Date\" — so a try/catch here is dead code. Guard\n *  on getTime() instead, and fall back to the raw ISO string so a corrupt\n *  timestamp is at least visibly a timestamp rather than the literal words\n *  \"Invalid Date\". */\nfunction formatIsoDate(iso: string): string {\n  const d = new Date(iso);\n  if (Number.isNaN(d.getTime())) return iso;\n  return d.toLocaleDateString(\"en-US\", {\n    year: \"numeric\",\n    month: \"long\",\n    day: \"numeric\",\n    timeZone: \"UTC\",\n  });\n}\n\n/** The probes section leads the report, so a branded-only run (analyze\n *  failed upstream and supplied no buyer questions, or every category query\n *  itself failed) must not let the branded recognition line read as a\n *  positive discoverability finding on its own — an engine echoing a name\n *  it was just handed proves nothing about whether a buyer who never named\n *  the business would find it. */\n/** `businessNameUsed` is whether the engines were actually queried with the\n *  business NAME — not merely whether one existed. `resolveBusinessName` falls\n *  back to the bare domain for anything it cannot use, so a name can be present\n *  and still never reach a query. Without this gate, \"even with the name handed\n *  to them\" is a false claim: whenever businessName was empty, and (until the\n *  caller was fixed) whenever the name was rejected and the probes searched for\n *  the domain instead. Never derived from the raw ProbesResult, which has no\n *  way to say \"no name was available\". */\nfunction buildProbesSection(p: ProbesResult, businessNameUsed: boolean): string {\n  const byKind = new Map<ProbeAnswer[\"kind\"], ProbeAnswer[]>();\n  for (const a of p.answers) {\n    const bucket = byKind.get(a.kind) ?? [];\n    bucket.push(a);\n    byKind.set(a.kind, bucket);\n  }\n\n  const recognition = p.brandedRecognized\n    ? \"<p>When the engines were asked about the business by name, they recognized it.</p>\"\n    : businessNameUsed\n      ? \"<p>When the engines were asked about the business by name, they did not recognize it — a real citation of the site never showed up, even with the name handed to them.</p>\"\n      : \"<p>The engines did not recognize the business — there was no business name available to ask them with, so this reflects a harder starting point than a named query would.</p>\";\n\n  const categoryCaveat = byKind.has(\"category\")\n    ? \"\"\n    : `<p class=\"muted\"><strong>No buyer-question (category) query was tested here</strong> — only name-recognition. An engine echoing back a name it was just given says nothing about whether a buyer who had never heard of the business would be shown it; treat the line above as a floor, not a visibility signal.</p>`;\n\n  // A degraded run says so. The score now divides by what was ASKED, so failed\n  // probes push it DOWN rather than silently inflating it — which is the safe\n  // direction, but only if the reader is told the run was incomplete. Silence\n  // here would trade one misleading number for another.\n  // Bound to a local so the narrowing survives into the template — `missing > 0`\n  // says nothing to the compiler about `p.categoryProbes` itself, and a stored\n  // report from before the field existed genuinely does not have it.\n  const tally = p.categoryProbes;\n  const missing = tally ? tally.attempted - tally.answered : 0;\n  const degradedNotice =\n    tally && missing > 0\n      ? `<p class=\"muted\"><strong>${missing} of ${tally.attempted} buyer-question searches did not come back</strong> — the engine errored on them. They are counted as \"not found\", so the visibility figure above is a floor: the real number could be higher, not lower. Worth re-running before drawing a conclusion from it.</p>`\n      : \"\";\n\n  const groups = KIND_ORDER.filter((k) => byKind.has(k))\n    .map((kind) => {\n      const answers = byKind.get(kind) ?? [];\n      const cards = answers\n        .map(\n          (a) => `<div class=\"card\">\n          <div class=\"q\">${escapeHtml(a.engine)} · “${escapeHtml(a.query)}”</div>\n          <p class=\"muted\">Asked ${escapeHtml(formatIsoDate(a.askedAt))}</p>\n          <p>${escapeHtml(a.snippet)}${a.truncated ? \"…\" : \"\"}</p>\n          <p class=\"muted\">${\n            // The scorer's own decision, recorded on the answer — NOT\n            // `domainCited || brandMentioned`, which is a looser rule. Using the\n            // loose one printed \"You were named in this answer\" above a card\n            // contributing zero to the score beside it. Reports persisted before\n            // the field existed fall back to what they already said.\n            (a.countedAsVisible ?? (a.domainCited || a.brandMentioned))\n              ? \"You were named in this answer.\"\n              : \"You were not named in this answer.\"\n          }${a.citedDomains.length ? ` Sources the engine retrieved: ${escapeHtml(a.citedDomains.join(\", \"))}` : \"\"}</p>\n        </div>`,\n        )\n        .join(\"\");\n      return `<h3>${escapeHtml(KIND_LABEL[kind])}</h3>${cards}`;\n    })\n    .join(\"\");\n\n  const competitors = p.competitorsSeen.length\n    ? `<h3>Who the engines cited instead</h3><ul>${p.competitorsSeen\n        .map((c) => `<li>${escapeHtml(c.domain)} — ${c.count} time${c.count === 1 ? \"\" : \"s\"}</li>`)\n        .join(\"\")}</ul>`\n    : \"\";\n\n  return recognition + categoryCaveat + degradedNotice + groups + competitors;\n}\n\n/** crawlerAccessMeasured is false only when the robots.txt fetch itself\n *  failed, so the blocked/allowed lists are empty out of ignorance, not\n *  because we confirmed access. Saying \"every crawler can reach the site\" in\n *  that case would manufacture a finding from our own missing data.\n *  sitemapMeasured/llmsTxtMeasured get the same treatment as\n *  crawlerAccessMeasured: a failed fetch reads as \"not measured\", never as a\n *  confirmed \"missing\" — that's a claim about the prospect's site we haven't\n *  earned. Item 1: none of the three \"not measured\" lines below take the raw\n *  fetch error as input anymore — status codes and transport vocabulary\n *  (\"503 Service Unavailable\", \"ETIMEDOUT\") are operator vocabulary, same as\n *  a stage failure (see STAGE_FAILED_MESSAGE); the real error still lives in\n *  the persisted JSON and CLI output, never in this client-facing page. */\nfunction buildFindabilitySection(c: ChecksResult): string {\n  const accessBlock = !c.crawlerAccessMeasured\n    ? `<p class=\"muted\">Crawler access: not measured — ${STAGE_FAILED_MESSAGE}.</p>`\n    : c.crawlerAccess.blockedAi.length\n      ? `<p><strong>Blocked AI crawlers:</strong> ${escapeHtml(\n          c.crawlerAccess.blockedAi.map(describeAgent).join(\", \"),\n        )}</p>`\n      : `<p>Every AI crawler we checked can reach the site.</p>`;\n  const classical =\n    c.crawlerAccessMeasured && c.crawlerAccess.blockedClassical.length\n      ? `<p><strong>Blocked search crawlers:</strong> ${escapeHtml(\n          c.crawlerAccess.blockedClassical.join(\", \"),\n        )}</p>`\n      : \"\";\n  const sitemapLine = c.sitemapMeasured\n    ? `<li>sitemap.xml: ${c.sitemapPresent ? \"present\" : \"missing\"}</li>`\n    : `<li>sitemap.xml: not measured — ${STAGE_FAILED_MESSAGE}.</li>`;\n  const llmsLine = c.llmsTxtMeasured\n    ? `<li>llms.txt: ${c.llmsTxtPresent ? \"present\" : \"missing\"}</li>`\n    : `<li>llms.txt: not measured — ${STAGE_FAILED_MESSAGE}.</li>`;\n  return `${accessBlock}${classical}\n    <ul>\n      ${sitemapLine}\n      ${llmsLine}\n      <li>Pages missing a meta description: ${c.meta.missingDescription} of ${c.meta.pageCount}</li>\n      <li>Pages missing a canonical URL: ${c.meta.missingCanonical} of ${c.meta.pageCount}</li>\n      <li>Pages missing share images/titles: ${c.meta.missingSocial} of ${c.meta.pageCount}</li>\n      <li>Security headers missing: ${\n        c.securityHeaders.missing.length ? escapeHtml(c.securityHeaders.missing.join(\", \")) : \"none\"\n      }</li>\n      ${\n        c.meta.pagesWithoutExtract > 0\n          ? `<li><strong>${c.meta.pagesWithoutExtract}</strong> additional page${\n              c.meta.pagesWithoutExtract === 1 ? \"\" : \"s\"\n            } produced no readable content at all and ${\n              c.meta.pagesWithoutExtract === 1 ? \"is\" : \"are\"\n            } not counted in the ${c.meta.pageCount} pages above.</li>`\n          : \"\"\n      }\n    </ul>`;\n}\n\n/** Lighthouse runs as its own independent pipeline stage (see pipeline.ts) —\n *  it does not depend on `checks` succeeding. Rendering it off `result.checks`\n *  would throw away real, measured performance/SEO/accessibility numbers\n *  whenever an unrelated stage failed, so this reads `result.lighthouse`\n *  directly and is rendered unconditionally, not nested inside the checks\n *  degrade path. */\nfunction buildLighthouseBlock(lh: StageResult<LighthouseScores>): string {\n  return lh.ok\n    ? `<p class=\"muted\">Lighthouse — performance ${lh.data.performance ?? \"not measured\"},\n       SEO ${lh.data.seo ?? \"not measured\"}, accessibility ${lh.data.accessibility ?? \"not measured\"}.</p>`\n    : `<p class=\"muted\">Lighthouse not measured — ${STAGE_FAILED_MESSAGE}.</p>`;\n}\n\nfunction buildReadabilitySection(c: ChecksResult): string {\n  const jsLine =\n    c.jsDependence.avgMissing === null\n      ? `<p class=\"muted\">JavaScript-dependence: not measured — no page produced a comparable raw/rendered pair.</p>`\n      : `<p><strong>${Math.round(c.jsDependence.avgMissing * 100)}%</strong> of the words a visitor reads only appear after JavaScript runs.\n    Most AI crawlers do not run JavaScript, so that share of your site is invisible to them.</p>`;\n  return `${jsLine}\n    <ul>\n      <li>Structured data found: ${c.schema.typesFound.length ? escapeHtml(c.schema.typesFound.join(\", \")) : \"none\"}</li>\n      <li>Expected structured data missing: ${\n        c.schema.missingExpected.length ? escapeHtml(c.schema.missingExpected.join(\", \")) : \"none\"\n      }</li>\n      <li>Pages without a top-level heading: ${c.headings.pagesWithoutH1} of ${c.meta.pageCount}</li>\n      ${\n        c.meta.pagesWithoutExtract > 0\n          ? `<li><strong>${c.meta.pagesWithoutExtract}</strong> page${\n              c.meta.pagesWithoutExtract === 1 ? \"\" : \"s\"\n            } produced no extract at all — excluded from every figure above, not counted as readable or unreadable.</li>`\n          : \"\"\n      }\n    </ul>`;\n}\n\n/** The report's whole premise is claims the recipient can go check — so the\n *  one quoted passage of evidence links to the page it came from (via\n *  safeUrl; a null/non-http page renders as plain escaped text, no dead\n *  \"#\" anchor). `answered`/`impact`/`effort` are escaped even though a zod\n *  enum constrains them upstream — the renderer should not depend on\n *  another file staying in sync to stay safe. */\nfunction buildAnswersSection(a: AnalyzeResult): string {\n  const rows = a.buyerQuestions\n    .map((q) => {\n      const answered = escapeHtml(q.answered);\n      const evidenceText = q.evidence ? escapeHtml(q.evidence) : null;\n      const evidenceHref = q.evidence && q.page ? safeUrl(q.page) : null;\n      const evidenceCell =\n        evidenceText === null\n          ? '<span class=\"muted\">no passage on the site</span>'\n          : evidenceHref && evidenceHref !== \"#\"\n            ? `<a href=\"${escapeHtml(evidenceHref)}\" target=\"_blank\" rel=\"noopener noreferrer\">${evidenceText}</a>`\n            : evidenceText;\n      return `<tr>\n          <td>${escapeHtml(q.question)}</td>\n          <td><span class=\"tag ${answered}\">${answered}</span></td>\n          <td>${evidenceCell}</td>\n        </tr>`;\n    })\n    .join(\"\");\n  return `<p>${escapeHtml(a.narrative.answers)}</p>\n    <table><tr><th>What buyers ask</th><th>Answered</th><th>Evidence</th></tr>${rows}</table>`;\n}\n\nexport function renderProspectReport(result: ProspectAuditResult): string {\n  const host = hostnameOf(result.url);\n  // `businessName` is the searchable NAME (possibly \"\"), never the\n  // description. An empty/missing name is itself a finding — fall back to\n  // the hostname rather than printing nothing, or worse, printing \"\" as if\n  // it were a verified fact about the business.\n  const name = result.businessName && result.businessName.trim() ? result.businessName : host;\n  const date = formatIsoDate(result.generatedAt);\n\n  const findabilitySection = stageBody(result.checks, buildFindabilitySection);\n  const lighthouseBlock = buildLighthouseBlock(result.lighthouse);\n  const readabilitySection = stageBody(result.checks, buildReadabilitySection);\n\n  // A real business name was resolved and handed to the engines only when\n  // `result.businessName` is non-empty — the same value the pipeline\n  // actually queried with (see pipeline.ts). Used to gate the probes\n  // section's \"even with the name handed to them\" phrasing (Fix 6).\n  // Whether the engines were actually queried with the NAME, which is not the\n  // same as whether a name existed. resolveBusinessName falls back to the bare\n  // domain for anything it cannot use, and this line used to read the\n  // un-resolved value — so a report could claim the engines were given the name\n  // \"even with the name handed to them\" while the probes had in fact searched\n  // for \"stlouisroofing.com\". Resolve it the same way probes.ts does.\n  const businessNameUsed = Boolean(\n    result.businessName &&\n    result.businessName.trim() &&\n    resolveBusinessName(result.businessName, result.url) === result.businessName.trim(),\n  );\n\n  const fixes = result.analyze.ok\n    ? (() => {\n        const sorted = [...result.analyze.data.fixes].sort(\n          (x, y) => IMPACT_ORDER[x.impact] - IMPACT_ORDER[y.impact],\n        );\n        if (sorted.length === 0) {\n          // A genuinely well-optimized site: a bare empty list reads as a\n          // rendering bug, not a compliment. Say so directly, and keep this\n          // section as a pitch — it's the one the salesperson is sending\n          // the report to make.\n          return `<p>Nothing here reads as urgent — the essentials are already in place.\n          Reddoor can still help push this further: tightening structured data, monitoring\n          how the answer engines describe you, and keeping pace as they change.</p>`;\n        }\n        return `<ol>${sorted\n          .map((f) => {\n            const impact = escapeHtml(f.impact);\n            const effort = escapeHtml(f.effort);\n            return `<li><strong>${escapeHtml(f.title)}</strong> — ${escapeHtml(f.why)}\n          <span class=\"muted\">(${impact} impact, ${effort} effort)</span></li>`;\n          })\n          .join(\"\")}</ol>`;\n      })()\n    : skippableStageNote(\n        result.analyze.error,\n        ANALYZE_SKIPPED,\n        \"Skipped — the checks stage failed, so there was nothing to build fixes from.\",\n      );\n\n  const probesSectionFinal = result.probes.ok\n    ? buildProbesSection(result.probes.data, businessNameUsed)\n    : skippableStageNote(\n        result.probes.error,\n        PROBES_SKIPPED,\n        \"This audit did not run the AI-visibility probes.\",\n      );\n\n  const answersSectionFinal = result.analyze.ok\n    ? buildAnswersSection(result.analyze.data)\n    : skippableStageNote(\n        result.analyze.error,\n        ANALYZE_SKIPPED,\n        \"Skipped — the checks stage failed, so there were no buyer questions to check.\",\n      );\n\n  const description = result.analyze.ok ? result.analyze.data.business : null;\n  const narrative = result.analyze.ok\n    ? `<p class=\"lede\">${escapeHtml(description ?? \"\")}</p>\n       <p class=\"lede\">${escapeHtml(result.analyze.data.narrative.findability)}\n       ${escapeHtml(result.analyze.data.narrative.readability)}</p>`\n    : \"\";\n\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n<meta name=\"robots\" content=\"noindex\" />\n<title>Can AI find ${escapeHtml(name)}? — Reddoor audit</title>\n<link rel=\"preconnect\" href=\"https://fonts.googleapis.com\" />\n<link href=\"https://fonts.googleapis.com/css2?family=Besley:wght@400;600&display=swap\" rel=\"stylesheet\" />\n<style>${STYLES}</style>\n</head>\n<body>\n<div class=\"wrap\">\n  <h1>Can AI and Google actually find ${escapeHtml(name)}?</h1>\n  <p class=\"lede\"><a href=\"${escapeHtml(safeUrl(result.url))}\" target=\"_blank\" rel=\"noopener noreferrer\">${escapeHtml(result.url)}</a> · audited ${escapeHtml(date)} by Reddoor Creative</p>\n  ${narrative}\n\n  <p class=\"muted\">Each score below runs 0–100 — read it as a score, not a percentage.</p>\n  <div class=\"scores\">\n    ${scoreCard(\"Findability\", result.scores.findability, \"How easily AI and search crawlers can find and reach your site — crawl rules, sitemap, key metadata\")}\n    ${scoreCard(\"Readability\", result.scores.readability, \"How much of your site's content those crawlers can actually read once they're in — most don't run JavaScript\")}\n    ${scoreCard(\"Answers\", result.scores.answers, \"How many buyer questions your site's own content answers — separate from what the AI engines say back\")}\n    ${scoreCard(\"AI Visibility\", result.scores.aiVisibility, \"Based on buyer questions — not questions that name the business directly\")}\n  </div>\n\n  <h2>What the AI engines said about you</h2>\n  ${probesSectionFinal}\n\n  <h2>What the crawlers can reach</h2>\n  ${findabilitySection}\n  ${lighthouseBlock}\n\n  <h2>What the crawlers can read</h2>\n  ${readabilitySection}\n\n  <h2>The questions your buyers ask</h2>\n  ${answersSectionFinal}\n\n  <h2>What to fix first</h2>\n  ${fixes}\n\n  <div class=\"cta\">\n    <h2>Want this fixed?</h2>\n    <p>Reddoor Creative rebuilds sites so answer engines can read, quote and recommend them.\n    Reply to the email this link came from, or start at\n    <a href=\"https://reddoorla.com/\">reddoorla.com</a>.</p>\n  </div>\n</div>\n</body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,IAAM,MAAM;AACZ,IAAM,eAA8C,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,EAAE;AACjF,IAAM,aAAkD;AAAA,EACtD,SAAS;AAAA,EACT,UAAU;AAAA,EACV,YAAY;AACd;AACA,IAAM,aAAoC,CAAC,YAAY,WAAW,YAAY;AAI9E,IAAM,kBAA0C;AAAA,EAC9C,QAAQ;AAAA,EACR,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,eAAe;AAAA,EACf,mBAAmB;AAAA,EACnB,OAAO;AACT;AAEA,SAAS,cAAc,OAAuB;AAC5C,QAAM,QAAQ,gBAAgB,KAAK;AACnC,SAAO,QAAQ,GAAG,KAAK,WAAW,KAAK,MAAM;AAC/C;AAMA,IAAM,uBAAuB;AAE7B,IAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6FAa8E,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uEAQzB,GAAG;AAAA;AAAA;AAAA,yCAGjC,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iEAaqB,GAAG;AAAA;AAAA;AAAA;AAKpE,SAAS,UAAU,OAAe,OAAsB,MAAuB;AAC7E,QAAM,IACJ,UAAU,OAAO,yCAAyC,kBAAkB,KAAK;AACnF,QAAM,WAAW,OAAO,qBAAqB,WAAW,IAAI,CAAC,WAAW;AACxE,SAAO,sBAAsB,CAAC,kBAAkB,WAAW,KAAK,CAAC,SAAS,QAAQ;AACpF;AAGA,SAAS,UAAa,OAAuB,MAAmC;AAC9E,SAAO,MAAM,KAAK,KAAK,MAAM,IAAI,IAAI,gBAAgB;AACvD;AAKA,SAAS,kBAA0B;AACjC,SAAO,wCAAmC,oBAAoB;AAChE;AAOA,SAAS,mBAAmB,OAAe,cAAsB,aAA6B;AAC5F,MAAI,UAAU,cAAc;AAC1B,WAAO,oBAAoB,WAAW,WAAW,CAAC;AAAA,EACpD;AACA,SAAO,gBAAgB;AACzB;AAOA,SAAS,cAAc,KAAqB;AAC1C,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,MAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,SAAO,EAAE,mBAAmB,SAAS;AAAA,IACnC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,UAAU;AAAA,EACZ,CAAC;AACH;AAgBA,SAAS,mBAAmB,GAAiB,kBAAmC;AAC9E,QAAM,SAAS,oBAAI,IAAwC;AAC3D,aAAW,KAAK,EAAE,SAAS;AACzB,UAAM,SAAS,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC;AACtC,WAAO,KAAK,CAAC;AACb,WAAO,IAAI,EAAE,MAAM,MAAM;AAAA,EAC3B;AAEA,QAAM,cAAc,EAAE,oBAClB,uFACA,mBACE,oLACA;AAEN,QAAM,iBAAiB,OAAO,IAAI,UAAU,IACxC,KACA;AASJ,QAAM,QAAQ,EAAE;AAChB,QAAM,UAAU,QAAQ,MAAM,YAAY,MAAM,WAAW;AAC3D,QAAM,iBACJ,SAAS,UAAU,IACf,4BAA4B,OAAO,OAAO,MAAM,SAAS,6QACzD;AAEN,QAAM,SAAS,WAAW,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC,EAClD,IAAI,CAAC,SAAS;AACb,UAAM,UAAU,OAAO,IAAI,IAAI,KAAK,CAAC;AACrC,UAAM,QAAQ,QACX;AAAA,MACC,CAAC,MAAM;AAAA,2BACU,WAAW,EAAE,MAAM,CAAC,eAAO,WAAW,EAAE,KAAK,CAAC;AAAA,mCACtC,WAAW,cAAc,EAAE,OAAO,CAAC,CAAC;AAAA,eACxD,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,WAAM,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOhD,EAAE,qBAAqB,EAAE,eAAe,EAAE,kBACvC,mCACA,oCACN,GAAG,EAAE,aAAa,SAAS,kCAAkC,WAAW,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE;AAAA;AAAA,IAE3G,EACC,KAAK,EAAE;AACV,WAAO,OAAO,WAAW,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK;AAAA,EACzD,CAAC,EACA,KAAK,EAAE;AAEV,QAAM,cAAc,EAAE,gBAAgB,SAClC,6CAA6C,EAAE,gBAC5C,IAAI,CAAC,MAAM,OAAO,WAAW,EAAE,MAAM,CAAC,WAAM,EAAE,KAAK,QAAQ,EAAE,UAAU,IAAI,KAAK,GAAG,OAAO,EAC1F,KAAK,EAAE,CAAC,UACX;AAEJ,SAAO,cAAc,iBAAiB,iBAAiB,SAAS;AAClE;AAcA,SAAS,wBAAwB,GAAyB;AACxD,QAAM,cAAc,CAAC,EAAE,wBACnB,wDAAmD,oBAAoB,UACvE,EAAE,cAAc,UAAU,SACxB,4CAA4C;AAAA,IAC1C,EAAE,cAAc,UAAU,IAAI,aAAa,EAAE,KAAK,IAAI;AAAA,EACxD,CAAC,SACD;AACN,QAAM,YACJ,EAAE,yBAAyB,EAAE,cAAc,iBAAiB,SACxD,gDAAgD;AAAA,IAC9C,EAAE,cAAc,iBAAiB,KAAK,IAAI;AAAA,EAC5C,CAAC,SACD;AACN,QAAM,cAAc,EAAE,kBAClB,oBAAoB,EAAE,iBAAiB,YAAY,SAAS,UAC5D,wCAAmC,oBAAoB;AAC3D,QAAM,WAAW,EAAE,kBACf,iBAAiB,EAAE,iBAAiB,YAAY,SAAS,UACzD,qCAAgC,oBAAoB;AACxD,SAAO,GAAG,WAAW,GAAG,SAAS;AAAA;AAAA,QAE3B,WAAW;AAAA,QACX,QAAQ;AAAA,8CAC8B,EAAE,KAAK,kBAAkB,OAAO,EAAE,KAAK,SAAS;AAAA,2CACnD,EAAE,KAAK,gBAAgB,OAAO,EAAE,KAAK,SAAS;AAAA,+CAC1C,EAAE,KAAK,aAAa,OAAO,EAAE,KAAK,SAAS;AAAA,sCAElF,EAAE,gBAAgB,QAAQ,SAAS,WAAW,EAAE,gBAAgB,QAAQ,KAAK,IAAI,CAAC,IAAI,MACxF;AAAA,QAEE,EAAE,KAAK,sBAAsB,IACzB,eAAe,EAAE,KAAK,mBAAmB,4BACvC,EAAE,KAAK,wBAAwB,IAAI,KAAK,GAC1C,4CACE,EAAE,KAAK,wBAAwB,IAAI,OAAO,KAC5C,uBAAuB,EAAE,KAAK,SAAS,uBACvC,EACN;AAAA;AAEN;AAQA,SAAS,qBAAqB,IAA2C;AACvE,SAAO,GAAG,KACN,kDAA6C,GAAG,KAAK,eAAe,cAAc;AAAA,aAC3E,GAAG,KAAK,OAAO,cAAc,mBAAmB,GAAG,KAAK,iBAAiB,cAAc,UAC9F,mDAA8C,oBAAoB;AACxE;AAEA,SAAS,wBAAwB,GAAyB;AACxD,QAAM,SACJ,EAAE,aAAa,eAAe,OAC1B,qHACA,cAAc,KAAK,MAAM,EAAE,aAAa,aAAa,GAAG,CAAC;AAAA;AAE/D,SAAO,GAAG,MAAM;AAAA;AAAA,mCAEiB,EAAE,OAAO,WAAW,SAAS,WAAW,EAAE,OAAO,WAAW,KAAK,IAAI,CAAC,IAAI,MAAM;AAAA,8CAE3G,EAAE,OAAO,gBAAgB,SAAS,WAAW,EAAE,OAAO,gBAAgB,KAAK,IAAI,CAAC,IAAI,MACtF;AAAA,+CACyC,EAAE,SAAS,cAAc,OAAO,EAAE,KAAK,SAAS;AAAA,QAEvF,EAAE,KAAK,sBAAsB,IACzB,eAAe,EAAE,KAAK,mBAAmB,iBACvC,EAAE,KAAK,wBAAwB,IAAI,KAAK,GAC1C,qHACA,EACN;AAAA;AAEN;AAQA,SAAS,oBAAoB,GAA0B;AACrD,QAAM,OAAO,EAAE,eACZ,IAAI,CAAC,MAAM;AACV,UAAM,WAAW,WAAW,EAAE,QAAQ;AACtC,UAAM,eAAe,EAAE,WAAW,WAAW,EAAE,QAAQ,IAAI;AAC3D,UAAM,eAAe,EAAE,YAAY,EAAE,OAAO,QAAQ,EAAE,IAAI,IAAI;AAC9D,UAAM,eACJ,iBAAiB,OACb,sDACA,gBAAgB,iBAAiB,MAC/B,YAAY,WAAW,YAAY,CAAC,+CAA+C,YAAY,SAC/F;AACR,WAAO;AAAA,gBACG,WAAW,EAAE,QAAQ,CAAC;AAAA,iCACL,QAAQ,KAAK,QAAQ;AAAA,gBACtC,YAAY;AAAA;AAAA,EAExB,CAAC,EACA,KAAK,EAAE;AACV,SAAO,MAAM,WAAW,EAAE,UAAU,OAAO,CAAC;AAAA,gFACkC,IAAI;AACpF;AAEO,SAAS,qBAAqB,QAAqC;AACxE,QAAM,OAAO,WAAW,OAAO,GAAG;AAKlC,QAAM,OAAO,OAAO,gBAAgB,OAAO,aAAa,KAAK,IAAI,OAAO,eAAe;AACvF,QAAM,OAAO,cAAc,OAAO,WAAW;AAE7C,QAAM,qBAAqB,UAAU,OAAO,QAAQ,uBAAuB;AAC3E,QAAM,kBAAkB,qBAAqB,OAAO,UAAU;AAC9D,QAAM,qBAAqB,UAAU,OAAO,QAAQ,uBAAuB;AAY3E,QAAM,mBAAmB;AAAA,IACvB,OAAO,gBACP,OAAO,aAAa,KAAK,KACzB,oBAAoB,OAAO,cAAc,OAAO,GAAG,MAAM,OAAO,aAAa,KAAK;AAAA,EACpF;AAEA,QAAM,QAAQ,OAAO,QAAQ,MACxB,MAAM;AACL,UAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,KAAK,KAAK,EAAE;AAAA,MAC5C,CAAC,GAAG,MAAM,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM;AAAA,IAC1D;AACA,QAAI,OAAO,WAAW,GAAG;AAKvB,aAAO;AAAA;AAAA;AAAA,IAGT;AACA,WAAO,OAAO,OACX,IAAI,CAAC,MAAM;AACV,YAAM,SAAS,WAAW,EAAE,MAAM;AAClC,YAAM,SAAS,WAAW,EAAE,MAAM;AAClC,aAAO,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,GAAG,CAAC;AAAA,iCACpD,MAAM,YAAY,MAAM;AAAA,IAC/C,CAAC,EACA,KAAK,EAAE,CAAC;AAAA,EACb,GAAG,IACH;AAAA,IACE,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,EACF;AAEJ,QAAM,qBAAqB,OAAO,OAAO,KACrC,mBAAmB,OAAO,OAAO,MAAM,gBAAgB,IACvD;AAAA,IACE,OAAO,OAAO;AAAA,IACd;AAAA,IACA;AAAA,EACF;AAEJ,QAAM,sBAAsB,OAAO,QAAQ,KACvC,oBAAoB,OAAO,QAAQ,IAAI,IACvC;AAAA,IACE,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,EACF;AAEJ,QAAM,cAAc,OAAO,QAAQ,KAAK,OAAO,QAAQ,KAAK,WAAW;AACvE,QAAM,YAAY,OAAO,QAAQ,KAC7B,mBAAmB,WAAW,eAAe,EAAE,CAAC;AAAA,yBAC7B,WAAW,OAAO,QAAQ,KAAK,UAAU,WAAW,CAAC;AAAA,SACrE,WAAW,OAAO,QAAQ,KAAK,UAAU,WAAW,CAAC,SACxD;AAEJ,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAMY,WAAW,IAAI,CAAC;AAAA;AAAA;AAAA,SAG5B,MAAM;AAAA;AAAA;AAAA;AAAA,wCAIyB,WAAW,IAAI,CAAC;AAAA,6BAC3B,WAAW,QAAQ,OAAO,GAAG,CAAC,CAAC,+CAA+C,WAAW,OAAO,GAAG,CAAC,qBAAkB,WAAW,IAAI,CAAC;AAAA,IAC/J,SAAS;AAAA;AAAA;AAAA;AAAA,MAIP,UAAU,eAAe,OAAO,OAAO,aAAa,0GAAqG,CAAC;AAAA,MAC1J,UAAU,eAAe,OAAO,OAAO,aAAa,mHAA8G,CAAC;AAAA,MACnK,UAAU,WAAW,OAAO,OAAO,SAAS,4GAAuG,CAAC;AAAA,MACpJ,UAAU,iBAAiB,OAAO,OAAO,cAAc,+EAA0E,CAAC;AAAA;AAAA;AAAA;AAAA,IAIpI,kBAAkB;AAAA;AAAA;AAAA,IAGlB,kBAAkB;AAAA,IAClB,eAAe;AAAA;AAAA;AAAA,IAGf,kBAAkB;AAAA;AAAA;AAAA,IAGlB,mBAAmB;AAAA;AAAA;AAAA,IAGnB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWT;","names":[]}

package/dist/{chunk-K6SLF6GI.js → chunk-XSOINOPY.js}

@@ -1,3 +1,6 @@
+import {
+  convertToPnpm
+} from "./chunk-XIDUYLSR.js";
 import {
   svelteCodemods
 } from "./chunk-IYSEC543.js";
@@ -10,9 +13,6 @@ import {
 import {
   onboard
 } from "./chunk-7RJ2HMMJ.js";
-import {
-  convertToPnpm
-} from "./chunk-XIDUYLSR.js";
 import {
   syncConfigs
 } from "./chunk-7UAYMAKR.js";
@@ -143,4 +143,4 @@ export {
   DEFAULT_INIT_STEPS,
   init
 };
-//# sourceMappingURL=chunk-K6SLF6GI.js.map
+//# sourceMappingURL=chunk-XSOINOPY.js.map

package/dist/cli/bin.js

@@ -153,7 +153,7 @@ cli.command(
   "Write the report to this file (the CI workflow posts it as a PR comment)"
 ).action(
   async (site, opts) => runOrExit(
-    async () => (await import("../prismic-models-NJN5JORF.js")).runPrismicModelsCommand(site, opts),
+    async () => (await import("../prismic-models-IJWZW2EO.js")).runPrismicModelsCommand(site, opts),
     opts
   )
 );
@@ -230,14 +230,14 @@ cli.command(
   "--fleet <inventory>",
   'Inventory file (.json or .mjs/.js), or "airtable" to read from Websites table'
 ).option("--workdir <path>", "Clone target for fleet mode (default ~/.reddoor-maint/sites)").action(
-  async (site, opts) => runOrExit(async () => (await import("../init-FGTYNGUI.js")).runInitCommand(site, opts), opts)
+  async (site, opts) => runOrExit(async () => (await import("../init-32AWPS7A.js")).runInitCommand(site, opts), opts)
 );
 cli.command(
   "launch <site>",
   "Bootstrap + first-audit a site, then draft its launch email for approval."
 ).action(
   async (site, opts) => runOrExit(
-    async () => (await import("../launch-5H7LPEGP.js")).runLaunchCommand(site, opts),
+    async () => (await import("../launch-52WUE4TZ.js")).runLaunchCommand(site, opts),
     opts
   )
 );
@@ -273,7 +273,7 @@ cli.command(
   "Operator self-tests. kind=email: preview a report email for a site (or --all) to yourself."
 ).option("--type <type>", "Report type: announcement (default) | maintenance | testing | launch").option("--to <addr>", "Recipient(s), comma-separated. Default: OPERATOR_EMAIL.").option("--all", "Send a preview for every maintenance site (to --to/operator).").option("--dry-run", "Render only; write reports/<slug>/selftest-<type>.html; do not send.").action(
   async (kind, site, opts) => runOrExit(
-    async () => (await import("../selftest-NZTR4SM2.js")).runSelftestCommand(kind, site, opts),
+    async () => (await import("../selftest-DIZ5JD2X.js")).runSelftestCommand(kind, site, opts),
     opts
   )
 );
@@ -309,7 +309,7 @@ cli.command(
   "Email the internal sheet (scores, what wasn't measured, top fixes, the link) to PROSPECT_AUDIT_RECIPIENTS."
 ).action(
   async (url, opts) => runOrExit(
-    async () => (await import("../prospect-audit-JMBRVXSG.js")).runProspectAuditCommand(url, opts),
+    async () => (await import("../prospect-audit-WJQI7V5V.js")).runProspectAuditCommand(url, opts),
     opts
   )
 );
@@ -330,7 +330,7 @@ cli.command("report [site]", "Draft or send maintenance/testing reports.").optio
   "Regenerate one UNSENT report's stored HTML from its current row, so the console preview shows edited commentary. Refuses a sent report."
 ).action(
   async (site, opts) => runOrExit(
-    async () => (await import("../report-TALY5P3L.js")).runReportCommand(site, opts),
+    async () => (await import("../report-2LM2SX67.js")).runReportCommand(site, opts),
     opts
   )
 );
@@ -339,7 +339,7 @@ cli.command(
   "Sweep the fleet for GitHub signals (Renovate-failing/CI/last-commit) and write Airtable."
 ).option("--fleet", "Run across every site in the Airtable inventory.").option("--write-airtable", "Write each site's signals back to its Websites row.").action(
   async (opts) => runOrExit(
-    async () => (await import("../github-signals-GWGCKEE2.js")).runGitHubSignalsCommand({
+    async () => (await import("../github-signals-DB25UWY4.js")).runGitHubSignalsCommand({
       fleet: opts.fleet,
       writeAirtable: opts.writeAirtable
     }),
@@ -360,8 +360,11 @@ cli.command(
 cli.command(
   "db <action>",
   "Operate the libSQL store (migrate | replay-deadletters | import-airtable | parity | sync | backfill-header-images | backfill-digest-state | dump | verify-dump | restore)."
-).option("--file <path>", "verify-dump: the dump file to load into a scratch engine").action(
-  async (action, opts) => runOrExit(async () => (await import("../db-V6UIS433.js")).runDbCommand(action, opts), opts)
+).option("--file <path>", "verify-dump / restore: the dump file to load").option(
+  "--url <url>",
+  "restore: the TARGET database to load into. Required, never defaulted \u2014 a restore that could fall back to the ambient TURSO_DATABASE_URL is one keystroke from overwriting production."
+).action(
+  async (action, opts) => runOrExit(async () => (await import("../db-DXUUAMXT.js")).runDbCommand(action, opts), opts)
 );
 cli.command(
   "submissions <action>",
@@ -408,7 +411,7 @@ cli.command(
   "freeze: JSON declaring slots the template has no token for (video poster, a panel rebuilt from a baked image). Keys must start with 'x.'"
 ).action(
   async (action, dir, opts) => runOrExit(
-    async () => (await import("../blux-DN4MI532.js")).runBluxCommand(action, dir, opts),
+    async () => (await import("../blux-EATHOHKK.js")).runBluxCommand(action, dir, opts),
     opts
   )
 );

package/dist/cli/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/bin.ts","../../src/cli/version.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { cac } from \"cac\";\nimport type { AuditName, RecipeName } from \"../types.js\";\nimport { loadCredentialsIntoEnv } from \"../util/credentials.js\";\nimport { resolvePackageVersion } from \"./version.js\";\n\n// Command modules are loaded LAZILY (dynamic `import()` inside each `.action()`),\n// never eagerly at the top. An eager `import { runReportCommand } from\n// \"./commands/report.js\"` would pull EVERY command's transitive dependency chain\n// into the CLI's startup graph — report/announce/launch drag in mjml + resend +\n// @google-analytics/data, `db` drags in the libSQL/kysely stack, etc. Those heavy\n// packages are `devDependencies` (this repo's CLI/functions/audits use them); a\n// consuming fleet site installs @reddoorla/maintenance only for `./forms` +\n// `./configs/*` and runs just `reddoor-maint audit --only a11y` in CI. Lazy\n// loading keeps that path (and `--help`/`--version`) free of the report/db\n// chains, so those packages never land in a consumer's node_modules. The\n// smoke-dist gate asserts bin.js's STATIC import closure stays free of them.\n\n// Load credentials from ~/.config/reddoor-maint/credentials.env before any\n// command runs, so AIRTABLE_PAT/AIRTABLE_BASE_ID/RESEND_API_KEY/etc. are\n// available from any cwd. Shell-exported env vars still win. Silent on\n// missing file — commands that need the credentials will fail with their\n// own clear error.\nloadCredentialsIntoEnv();\n\nconst here = dirname(fileURLToPath(import.meta.url));\nconst version = resolvePackageVersion(here);\n\nconst AUDIT_DESCRIPTIONS: Record<AuditName, string> = {\n  deps: \"Diff site package.json against the bundled baseline version map.\",\n  lighthouse: \"Run @lhci/cli autorun using the canonical lighthouserc.\",\n  a11y: \"Playwright + axe against the canonical a11y routes.\",\n  security:\n    \"GitHub Dependabot alerts (prod+dev) for repo-backed sites; falls back to pnpm/npm audit (prod-deps) with no repo/token.\",\n  lint: \"ESLint + Prettier using the canonical configs.\",\n  domain: \"DNS resolve + TLS cert expiry against the deployed URL (checkout-free).\",\n  browser:\n    \"Playwright across desktop engines + mobile devices + link-check against the deployed URL (checkout-free).\",\n  \"netlify-deploy\":\n    \"Latest production deploy health via the Netlify API by site id (checkout-free; needs NETLIFY_PAT).\",\n  \"function-health\":\n    \"GET {deployedUrl}/health and read its ok/prismic/forms status (checkout-free).\",\n  smoke: \"Run the site's own `pnpm test:smoke` suite in its checkout (clone-based).\",\n  \"form-e2e\":\n    \"Submit the real production contact form in test-mode against the deployed URL (checkout-free).\",\n};\n\nconst RECIPE_DESCRIPTIONS: Record<RecipeName, string> = {\n  \"sync-configs\": \"Overwrite a site's canonical configs to match @reddoorla/maintenance.\",\n  \"bump-deps\": \"Bump dependencies and commit the lockfile change.\",\n  \"svelte-4-to-5\": \"Run the 7-commit Svelte 4 → 5 upgrade recipe.\",\n  \"svelte-codemods\":\n    \"Apply Svelte 5 gotcha codemods to an already-migrated site (state_referenced_locally, etc.).\",\n  \"convert-to-pnpm\": \"Convert an npm/yarn site to pnpm (lockfile, packageManager, scripts).\",\n  onboard: \"Install @reddoorla/maintenance + audit deps on a site (preferred first step).\",\n  \"a11y-fixtures-page\":\n    \"Write src/routes/dev/a11y-fixtures/+page.svelte (stub for lhci + axe targets).\",\n  \"health-endpoint\":\n    \"Write src/routes/health/+server.ts (function-health probe for the report gate).\",\n  \"smoke-suite\": \"Add the smoke suite (test:smoke + playwright config + /health smoke routes).\",\n  \"self-updating\":\n    \"Bootstrap Renovate + repo protection (writes renovate configs via PR, wires ruleset, disables platform auto-merge; ci.yml comes from the starter and is deliberately not managed).\",\n  \"prismic-ci\":\n    \"Add the Prismic model delivery workflow to a site via PR (dry delta comment on PRs, push to Prismic on merge to main).\",\n  init: \"Run the full onboarding chain (convert-to-pnpm → onboard → sync-configs → svelte-codemods → a11y-fixtures-page → health-endpoint → smoke-suite → audit).\",\n};\n\n/** Run a command thunk and surface its result, falling back to a clean error\n * message on throw. Wraps the ~10-line try/catch every `.action()` used to\n * duplicate. `verbose` flips between full stack and message-only.\n *\n * On success it sets `process.exitCode` and RETURNS rather than calling\n * `process.exit()` right after `console.log()`. `process.exit()` does not wait\n * for stdout to flush when stdout is a pipe, so a large `--json` payload piped\n * to another process would get truncated mid-write. Setting `exitCode` and\n * returning lets Node drain stdout and exit naturally with the right code. A\n * non-zero `code` still yields a non-zero process exit.\n *\n * The error path keeps `process.exit()` — error messages are small (one line),\n * always go to stderr, and exiting immediately is the desired fail-fast. */\nexport async function runOrExit(\n  fn: () => Promise<{ output: string; code: number }>,\n  opts: { verbose?: boolean },\n): Promise<void> {\n  try {\n    const { output, code } = await fn();\n    console.log(output);\n    process.exitCode = code;\n    return;\n  } catch (err) {\n    const e = err as { exitCode?: number; message?: string; stack?: string };\n    console.error(opts.verbose ? (e.stack ?? e.message) : (e.message ?? String(err)));\n    process.exit(e.exitCode ?? 1);\n  }\n}\n\nconst cli = cac(\"reddoor-maint\");\n\ncli.option(\"--cwd <path>\", \"Override working directory (default: process.cwd())\");\ncli.option(\"--verbose\", \"Verbose output (full stack on errors)\");\n\ncli.command(\"list-audits\", \"Print the available audits.\").action(() => {\n  for (const [name, desc] of Object.entries(AUDIT_DESCRIPTIONS)) {\n    console.log(`${name.padEnd(12)} ${desc}`);\n  }\n});\n\ncli.command(\"list-recipes\", \"Print the available recipes.\").action(() => {\n  for (const [name, desc] of Object.entries(RECIPE_DESCRIPTIONS)) {\n    console.log(`${name.padEnd(16)} ${desc}`);\n  }\n});\n\ncli\n  .command(\"audit [site]\", \"Run audits against a site (default: cwd).\")\n  .option(\"--only <names>\", \"Comma-separated audit names (e.g. deps,lighthouse)\")\n  .option(\"--json\", \"Machine-readable JSON output\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .option(\n    \"--write-airtable [slug]\",\n    \"After lighthouse runs, write pScore/rScore/bpScore/seoScore + timestamp to the matching Websites row. Slug defaults to cwd's package.json#name.\",\n  )\n  .option(\"--fail-on-violations\", \"Exit non-zero if any a11y violations are found (for CI gates)\")\n  .option(\n    \"--url <url>\",\n    \"Audit this deployed URL with lighthouse (no dev server); single-site. Pair with --only lighthouse — other audits still use the local checkout.\",\n  )\n  .option(\n    \"--concurrency <n>\",\n    \"Max sites to audit in parallel in --fleet mode (default: all at once). Use 1 for sequential (CI).\",\n  )\n  .action(\n    async (\n      site,\n      opts: {\n        only?: string;\n        json?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n        writeAirtable?: string | boolean;\n        failOnViolations?: boolean;\n        url?: string;\n        concurrency?: string;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/audit.js\")).runAuditCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"sync-configs [site]\", \"Sync canonical configs into a site.\")\n  .option(\"--only <names>\", \"Comma-separated config names (e.g. eslint,prettier)\")\n  .option(\"--dry\", \"Print diff without writing\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        only?: string;\n        dry?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/sync-configs.js\")).runSyncConfigsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"bump-deps [site]\", \"Bump dependencies.\")\n  .option(\"--group <group>\", \"patch | minor | major\", { default: \"minor\" })\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        group?: string;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/bump-deps.js\")).runBumpDepsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"self-updating [site]\",\n    \"Bootstrap a repo to keep itself updated (Renovate + protection; platform auto-merge off; ci.yml is the starter's, not managed here).\",\n  )\n  .option(\"--dry\", \"List what would be enabled without writing or opening PRs\")\n  .option(\"--fleet <inventory>\", 'Inventory file (.json or .mjs/.js), or \"airtable\"')\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        dry?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/self-updating.js\")).runSelfUpdatingCommand(site, opts),\n        opts,\n      ),\n  );\n\n// Fleet-wide, this opens ONE PULL REQUEST PER REPOSITORY and never pushes to a\n// client's main. `--dry` exists because that is the only way to see the blast\n// radius before firing it. Both directions of the flag ↔ option link are pinned\n// by tests/cli/prismic-ci-command.test.ts.\ncli\n  .command(\n    \"prismic-ci [site]\",\n    \"Add the Prismic model delivery workflow to a site via PR (one PR per repo; never pushes to main).\",\n  )\n  .option(\"--dry\", \"List the sites that would be offered the workflow, without opening any PR\")\n  .option(\"--fleet <inventory>\", 'Inventory file (.json or .mjs/.js), or \"airtable\"')\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        dry?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/prismic-ci.js\")).runPrismicCiCommand(site, opts),\n        opts,\n      ),\n  );\n\n// EVERY flag below must be one the command actually reads, and every option the\n// command reads must appear below. cac rejects an unknown option outright, so a\n// missing line here is a hard error in whatever workflow types the flag; a line\n// here with no handler is the silent no-op — it parses, it lands in `opts`, and\n// nothing ever looks at it. Both directions are pinned by\n// tests/cli/prismic-models-registration.test.ts, the second one at the type level\n// against `PrismicModelsCommandOptions`.\ncli\n  .command(\n    \"prismic-models [site]\",\n    \"Compare a site's Prismic models against its repo (dry by default).\",\n  )\n  .option(\n    \"--apply\",\n    \"Push local models to Prismic. Never deletes — remote-only models are reported.\",\n  )\n  .option(\"--pull\", \"Write remote-only models into the repo (single-site; review + PR the result).\")\n  .option(\"--tokens\", \"Print the per-site write-token doctor: which env var, present?, reads?\")\n  .option(\"--fleet <inventory>\", 'Inventory file (.json or .mjs/.js), or \"airtable\". Read-only.')\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .option(\"--write-airtable\", \"Fleet mode: persist each site's verdict to its Websites row\")\n  .option(\n    \"--comment-file <path>\",\n    \"Write the report to this file (the CI workflow posts it as a PR comment)\",\n  )\n  .action(\n    async (\n      site,\n      opts: {\n        apply?: boolean;\n        pull?: boolean;\n        tokens?: boolean;\n        fleet?: string;\n        workdir?: string;\n        writeAirtable?: boolean;\n        commentFile?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/prismic-models.js\")).runPrismicModelsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"upgrade <upgrade> [site]\", \"Run a named upgrade recipe (svelte-4-to-5).\")\n  .example(\"reddoor-maint upgrade svelte-4-to-5 ./my-site\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      upgrade: string,\n      site: string | undefined,\n      opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/upgrade.js\")).runUpgradeCommand(upgrade, site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"convert-to-pnpm [site]\",\n    \"Convert an npm/yarn site to pnpm (lockfile, packageManager, scripts).\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/convert-to-pnpm.js\")).runConvertToPnpmCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"svelte-codemods [site]\", \"Apply Svelte 5 gotcha codemods to an already-migrated site.\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/svelte-codemods.js\")).runSvelteCodemodsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"health-endpoint [site]\",\n    \"Write src/routes/health/+server.ts (function-health probe for the report gate).\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/health-endpoint.js\")).runHealthEndpointCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"smoke-suite [site]\",\n    \"Add the smoke suite (test:smoke + playwright config + /health smoke routes).\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () => (await import(\"./commands/smoke-suite.js\")).runSmokeSuiteCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"onboard [site]\",\n    \"Install @reddoorla/maintenance + audit deps on a site (run after convert-to-pnpm).\",\n  )\n  .option(\"--audits <names>\", \"Comma-separated audit subset: lighthouse,a11y (default: both)\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        audits?: string;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/onboard.js\")).runOnboardCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"init [site]\",\n    \"One-shot guided onboarding: convert-to-pnpm → onboard → sync-configs → svelte-codemods → a11y-fixtures-page → health-endpoint → smoke-suite → audit.\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(async () => (await import(\"./commands/init.js\")).runInitCommand(site, opts), opts),\n  );\n\ncli\n  .command(\n    \"launch <site>\",\n    \"Bootstrap + first-audit a site, then draft its launch email for approval.\",\n  )\n  .action(async (site: string, opts: { cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () => (await import(\"./commands/launch.js\")).runLaunchCommand(site, opts),\n      opts,\n    ),\n  );\n\ncli\n  .command(\"header-image [site]\", \"Generate a site's report header image from its live homepage.\")\n  .option(\"--all\", \"Every live site with no Header image yet (backfill)\")\n  .option(\"--force\", \"With --all, regenerate sites that already have one\")\n  .option(\"--write-airtable\", \"Upload to the Websites row instead of writing a local file\")\n  .option(\"--out-dir <path>\", \"Directory for local output (default: reports/)\")\n  .option(\"--settle-ms <ms>\", \"Override the post-load settle delay for slow/animated homepages\")\n  .action(\n    async (\n      site: string | undefined,\n      opts: {\n        all?: boolean;\n        force?: boolean;\n        writeAirtable?: boolean;\n        outDir?: string;\n        settleMs?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/header-image.js\")).runHeaderImageCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"announce [site]\",\n    \"Draft the monthly-report announcement email for maintenance sites (all, or one) for approval.\",\n  )\n  .action(async (site: string | undefined, opts: { cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () => (await import(\"./commands/announce.js\")).runAnnounceCommand(site, opts),\n      opts,\n    ),\n  );\n\ncli\n  .command(\n    \"forms-notify-target [site]\",\n    \"Show who a form submission would email, and optionally flip the pre-launch guard (read-back confirmed).\",\n  )\n  .option(\"--set <on|off>\", \"Flip the guard: on = route to operator, off = restore.\")\n  .option(\"--restore <status>\", \"Status to restore with --set off. Required; never inferred.\")\n  .action(\n    async (\n      site: string | undefined,\n      opts: { set?: string; restore?: string; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/forms-notify-target.js\")).runFormsNotifyTargetCommand(\n            site,\n            opts,\n          ),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"selftest <kind> [site]\",\n    \"Operator self-tests. kind=email: preview a report email for a site (or --all) to yourself.\",\n  )\n  .option(\"--type <type>\", \"Report type: announcement (default) | maintenance | testing | launch\")\n  .option(\"--to <addr>\", \"Recipient(s), comma-separated. Default: OPERATOR_EMAIL.\")\n  .option(\"--all\", \"Send a preview for every maintenance site (to --to/operator).\")\n  .option(\"--dry-run\", \"Render only; write reports/<slug>/selftest-<type>.html; do not send.\")\n  .action(\n    async (\n      kind: string,\n      site: string | undefined,\n      opts: {\n        type?: string;\n        to?: string;\n        all?: boolean;\n        dryRun?: boolean;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/selftest.js\")).runSelftestCommand(kind, site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"preflight [site]\",\n    \"Read-only pre-send checks: recipients, header image, pending drafts, schedule hygiene.\",\n  )\n  .option(\"--type <type>\", \"Report type: announcement (default) | maintenance | testing\")\n  .option(\n    \"--all\",\n    \"Fleet mode: announcement→maintenance sites; maintenance/testing→all schedulable sites.\",\n  )\n  .action(\n    async (\n      site: string | undefined,\n      opts: { type?: string; all?: boolean; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/preflight.js\")).runPreflightCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"ensure-site <slug>\", \"Create/verify the Airtable Websites row for a new site.\")\n  .option(\"--name <display name>\", \"Human Name for the row (client-facing copy uses it verbatim).\")\n  .option(\"--url <url>\", \"Deployed URL (e.g. the Netlify site URL).\")\n  .option(\"--contact <email>\", \"point of contact — the client address reports resolve to.\")\n  .option(\"--git-repo <owner/repo>\", \"GitHub identity. Default on create: reddoorla/<slug>.\")\n  .action(\n    async (\n      slug: string,\n      opts: {\n        name?: string;\n        url?: string;\n        contact?: string;\n        gitRepo?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/ensure-site.js\")).runEnsureSiteCommand(slug, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"prospect-audit <url>\",\n    \"AEO/SEO audit an external prospect's site and publish the report.\",\n  )\n  .option(\n    \"--business <name>\",\n    \"The prospect's business name (defaults to what the model reads off the site).\",\n  )\n  .option(\n    \"--competitors <list>\",\n    \"Comma-separated competitor domains to add comparison probes for.\",\n  )\n  .option(\"--no-probes\", \"Skip the live AI-visibility probes (tier 3).\")\n  .option(\"--out <file>\", \"Also write the rendered report to this file.\")\n  .option(\"--json\", \"Print the raw result JSON instead of the report summary.\")\n  .option(\n    \"--email\",\n    \"Email the internal sheet (scores, what wasn't measured, top fixes, the link) to PROSPECT_AUDIT_RECIPIENTS.\",\n  )\n  .action(\n    async (\n      url: string,\n      opts: {\n        business?: string;\n        competitors?: string;\n        probes?: boolean;\n        out?: string;\n        json?: boolean;\n        email?: boolean;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/prospect-audit.js\")).runProspectAuditCommand(url, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"report [site]\", \"Draft or send maintenance/testing reports.\")\n  .option(\"--due\", \"Scan all Websites and draft overdue reports.\")\n  .option(\"--type <type>\", \"Single-site draft report type: Maintenance (default) or Testing.\")\n  .option(\n    \"--preview\",\n    \"Single-site dry run; writes reports/<slug>/draft.html, never touches Airtable.\",\n  )\n  .option(\n    \"--enrich\",\n    \"With --preview: also fetch GA + Search Console, so the render exercises those credentials for real. Still writes nothing.\",\n  )\n  .option(\n    \"--send-ready\",\n    \"Send all Reports with Draft ready=true AND Approved to send=true AND Sent at IS NULL.\",\n  )\n  .option(\n    \"--digest\",\n    \"Email the operator one daily digest of reports ready for approval (skips when empty).\",\n  )\n  .option(\n    \"--rerender <reportId>\",\n    \"Regenerate one UNSENT report's stored HTML from its current row, so the console preview shows edited commentary. Refuses a sent report.\",\n  )\n  .action(\n    async (\n      site,\n      opts: {\n        due?: boolean;\n        type?: string;\n        preview?: boolean;\n        enrich?: boolean;\n        sendReady?: boolean;\n        digest?: boolean;\n        rerender?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/report.js\")).runReportCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"github-signals\",\n    \"Sweep the fleet for GitHub signals (Renovate-failing/CI/last-commit) and write Airtable.\",\n  )\n  .option(\"--fleet\", \"Run across every site in the Airtable inventory.\")\n  .option(\"--write-airtable\", \"Write each site's signals back to its Websites row.\")\n  .action(\n    async (opts: { fleet?: boolean; writeAirtable?: boolean; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/github-signals.js\")).runGitHubSignalsCommand({\n            fleet: opts.fleet,\n            writeAirtable: opts.writeAirtable,\n          }),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"protection-audit\",\n    \"Verify every public org repo carries a sound branch ruleset (empty bypass, PR-required).\",\n  )\n  .option(\"--org <org>\", \"GitHub org to sweep (enumerated from the API, never a hand list).\")\n  .action(async (opts: { org?: string; cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () =>\n        (await import(\"./commands/protection-audit.js\")).runProtectionAuditCommand({\n          org: opts.org,\n        }),\n      opts,\n    ),\n  );\n\ncli\n  .command(\n    \"db <action>\",\n    \"Operate the libSQL store (migrate | replay-deadletters | import-airtable | parity | sync | backfill-header-images | backfill-digest-state | dump | verify-dump | restore).\",\n  )\n  .option(\"--file <path>\", \"verify-dump: the dump file to load into a scratch engine\")\n  .action(async (action: string, opts: { file?: string; cwd?: string; verbose?: boolean }) =>\n    runOrExit(async () => (await import(\"./commands/db.js\")).runDbCommand(action, opts), opts),\n  );\n\ncli\n  .command(\n    \"submissions <action>\",\n    \"Operate on stored form submissions. rescore: re-run the CURRENT spam classifier over the status='new' backlog (dry-run by default; only 'new' rows are ever touched).\",\n  )\n  .option(\"--dry-run\", \"Print the would-be re-buckets without writing (the default).\")\n  .option(\n    \"--apply\",\n    \"Write the re-buckets: status → spam_auto, spam_score/spam_reason replaced with the new verdict + 'retro-rescore' marker.\",\n  )\n  .action(\n    async (\n      action: string,\n      opts: { dryRun?: boolean; apply?: boolean; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/submissions.js\")).runSubmissionsCommand(action, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"renovate-dispatch\",\n    \"Trigger Renovate on fleet sites the security sweep flagged with critical/high vulns.\",\n  )\n  .option(\"--fleet\", \"Run across every active, repo-backed site in the Airtable inventory.\")\n  .action(async (opts: { fleet?: boolean; cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () =>\n        (await import(\"./commands/renovate-dispatch.js\")).runRenovateDispatchCommand({\n          fleet: opts.fleet,\n          // #539 Phase 5: mirror the auto-fix counter into site_health.\n          siteMirror: await (await import(\"../db/site-mirror.js\")).makeSiteMirror(),\n        }),\n      opts,\n    ),\n  );\n\ncli\n  .command(\n    \"blux <action> [dir]\",\n    \"Blux conversion pipeline. emit: export dir → migration plan + custom types + theme + review manifest. migrate: emitted plan → live Prismic (needs PRISMIC_REPOSITORY_NAME + PRISMIC_WRITE_TOKEN). validate: content coverage of a rendered site against the export answer key. grid: parse rendered index.html → grid-tree.json (layout tree). convert: parse+classify index.html + assemble IR → migration-plan.json + blux-presentation.json + theme.css (+ map-config.json), offline. catalog: parse each page + classify every band to a blux_section → migration-plan.json only (no sidecar), offline.\",\n  )\n  .option(\n    \"--out <dir>\",\n    \"Output directory for emit/grid/convert/catalog (default: <exportDir>/blux-out)\",\n  )\n  .option(\"--converted-base <url>\", \"Converted-site base URL for the review manifest\")\n  .option(\"--blux-base <url>\", \"Original Blux site base URL (default: https://<site.json domain>)\")\n  .option(\n    \"--probe\",\n    \"Reconstruct + HEAD-probe CDN URLs for used assets the HTML scrape missed (network)\",\n  )\n  .option(\n    \"--against <target>\",\n    \"validate: rendered HTML of the converted site — a file path or http(s) URL\",\n  )\n  .option(\n    \"--site <slug>\",\n    \"freeze/migrate-frozen: site slug naming <slug>.slots.json (default: slugified dir name)\",\n  )\n  .option(\n    \"--extra-slots <path>\",\n    \"freeze: JSON declaring slots the template has no token for (video poster, a panel rebuilt from a baked image). Keys must start with 'x.'\",\n  )\n  .action(\n    async (\n      action: string,\n      dir: string | undefined,\n      opts: {\n        out?: string;\n        convertedBase?: string;\n        bluxBase?: string;\n        probe?: boolean;\n        against?: string;\n        site?: string;\n        extraSlots?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/blux.js\")).runBluxCommand(action, dir, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"webflow <action> [target]\",\n    \"Webflow import pipeline. capture: live-crawl a base url → <out>/ir.json, progress on stderr. docs: convert a saved ir.json → docs.json + assets.json (offline). migrate: push a capture dir's docs.json + assets.json to Prismic via the shared runner (needs PRISMIC_REPOSITORY_NAME + PRISMIC_WRITE_TOKEN).\",\n  )\n  .option(\n    \"--out <dir>\",\n    \"Output directory for capture (default: webflow-out) / docs (default: dirname of the ir.json)\",\n  )\n  .action(\n    async (\n      action: string,\n      target: string | undefined,\n      opts: { out?: string; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/webflow.js\")).runWebflowCommand(action, target, opts),\n        opts,\n      ),\n  );\n\ncli.help();\ncli.version(version);\n\n// A typo'd / unrecognized subcommand (e.g. `reddoor-maint auditt`) otherwise\n// falls through cac with no matched command and exits 0 — a cron/CI typo would\n// \"succeed\" silently. cac emits `command:*` at the end of parse() exactly when\n// a positional arg was given but matched no command (a bare `reddoor-maint`,\n// `--help`, and `--version` do NOT trigger it: they have no leading positional\n// or are handled before this fires). Turn that into a clear stderr error +\n// non-zero exit. process.argv[2] is the first positional, i.e. the bad command.\ncli.on(\"command:*\", () => {\n  const unknown = cli.args[0] ?? process.argv[2] ?? \"\";\n  console.error(\n    `error: unknown command '${unknown}'. Run 'reddoor-maint --help' to see available commands.`,\n  );\n  process.exit(1);\n});\n\ncli.parse();\n","import { readFileSync, existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\n/**\n * Read the @reddoorla/maintenance package version, given the directory of a\n * file that lives inside the package. Walks UP looking for the first\n * `package.json` whose `name` matches. Defensive against bundling-layout\n * changes — the older \"two levels up\" assumption held for `dist/cli/bin.js`\n * but would silently mis-read (or return \"unknown\") if tsup ever moved bin\n * to a different depth. Same walk-up pattern as the self-version helper.\n *\n * Returns \"unknown\" when no matching package.json is reachable (Yarn PnP\n * setups stash manifests inside .zip caches; the readFileSync there fails\n * before any name check).\n */\nexport function resolvePackageVersion(fromDir: string): string {\n  try {\n    let dir = fromDir;\n    while (true) {\n      const candidate = join(dir, \"package.json\");\n      if (existsSync(candidate)) {\n        const raw = readFileSync(candidate, \"utf-8\");\n        const pkg = JSON.parse(raw) as { name?: string; version?: string };\n        if (pkg.name === \"@reddoorla/maintenance\") {\n          return pkg.version ?? \"unknown\";\n        }\n      }\n      const parent = dirname(dir);\n      if (parent === dir) return \"unknown\";\n      dir = parent;\n    }\n  } catch {\n    return \"unknown\";\n  }\n}\n"],"mappings":";;;;;;AACA,SAAS,WAAAA,gBAAe;AACxB,SAAS,qBAAqB;AAC9B,SAAS,WAAW;;;ACHpB,SAAS,cAAc,kBAAkB;AACzC,SAAS,SAAS,YAAY;AAcvB,SAAS,sBAAsB,SAAyB;AAC7D,MAAI;AACF,QAAI,MAAM;AACV,WAAO,MAAM;AACX,YAAM,YAAY,KAAK,KAAK,cAAc;AAC1C,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,MAAM,aAAa,WAAW,OAAO;AAC3C,cAAM,MAAM,KAAK,MAAM,GAAG;AAC1B,YAAI,IAAI,SAAS,0BAA0B;AACzC,iBAAO,IAAI,WAAW;AAAA,QACxB;AAAA,MACF;AACA,YAAM,SAAS,QAAQ,GAAG;AAC1B,UAAI,WAAW,IAAK,QAAO;AAC3B,YAAM;AAAA,IACR;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ADTA,uBAAuB;AAEvB,IAAM,OAAOC,SAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,IAAM,UAAU,sBAAsB,IAAI;AAE1C,IAAM,qBAAgD;AAAA,EACpD,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,UACE;AAAA,EACF,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SACE;AAAA,EACF,kBACE;AAAA,EACF,mBACE;AAAA,EACF,OAAO;AAAA,EACP,YACE;AACJ;AAEA,IAAM,sBAAkD;AAAA,EACtD,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,mBACE;AAAA,EACF,mBAAmB;AAAA,EACnB,SAAS;AAAA,EACT,sBACE;AAAA,EACF,mBACE;AAAA,EACF,eAAe;AAAA,EACf,iBACE;AAAA,EACF,cACE;AAAA,EACF,MAAM;AACR;AAeA,eAAsB,UACpB,IACA,MACe;AACf,MAAI;AACF,UAAM,EAAE,QAAQ,KAAK,IAAI,MAAM,GAAG;AAClC,YAAQ,IAAI,MAAM;AAClB,YAAQ,WAAW;AACnB;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,YAAQ,MAAM,KAAK,UAAW,EAAE,SAAS,EAAE,UAAY,EAAE,WAAW,OAAO,GAAG,CAAE;AAChF,YAAQ,KAAK,EAAE,YAAY,CAAC;AAAA,EAC9B;AACF;AAEA,IAAM,MAAM,IAAI,eAAe;AAE/B,IAAI,OAAO,gBAAgB,qDAAqD;AAChF,IAAI,OAAO,aAAa,uCAAuC;AAE/D,IAAI,QAAQ,eAAe,6BAA6B,EAAE,OAAO,MAAM;AACrE,aAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,kBAAkB,GAAG;AAC7D,YAAQ,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC,IAAI,IAAI,EAAE;AAAA,EAC1C;AACF,CAAC;AAED,IAAI,QAAQ,gBAAgB,8BAA8B,EAAE,OAAO,MAAM;AACvE,aAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,mBAAmB,GAAG;AAC9D,YAAQ,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC,IAAI,IAAI,EAAE;AAAA,EAC1C;AACF,CAAC;AAED,IACG,QAAQ,gBAAgB,2CAA2C,EACnE,OAAO,kBAAkB,oDAAoD,EAC7E,OAAO,UAAU,8BAA8B,EAC/C;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,wBAAwB,+DAA+D,EAC9F;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAaA;AAAA,IACE,aAAa,MAAM,OAAO,qBAAqB,GAAG,gBAAgB,MAAM,IAAI;AAAA,IAC5E;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,uBAAuB,qCAAqC,EACpE,OAAO,kBAAkB,qDAAqD,EAC9E,OAAO,SAAS,4BAA4B,EAC5C;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SASA;AAAA,IACE,aAAa,MAAM,OAAO,6BAA4B,GAAG,sBAAsB,MAAM,IAAI;AAAA,IACzF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,oBAAoB,oBAAoB,EAChD,OAAO,mBAAmB,yBAAyB,EAAE,SAAS,QAAQ,CAAC,EACvE;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aAAa,MAAM,OAAO,0BAAyB,GAAG,mBAAmB,MAAM,IAAI;AAAA,IACnF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,SAAS,2DAA2D,EAC3E,OAAO,uBAAuB,mDAAmD,EACjF,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aACG,MAAM,OAAO,8BAA6B,GAAG,uBAAuB,MAAM,IAAI;AAAA,IACjF;AAAA,EACF;AACJ;AAMF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,SAAS,2EAA2E,EAC3F,OAAO,uBAAuB,mDAAmD,EACjF,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aAAa,MAAM,OAAO,2BAA0B,GAAG,oBAAoB,MAAM,IAAI;AAAA,IACrF;AAAA,EACF;AACJ;AASF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,UAAU,+EAA+E,EAChG,OAAO,YAAY,wEAAwE,EAC3F,OAAO,uBAAuB,+DAA+D,EAC7F,OAAO,oBAAoB,8DAA8D,EACzF,OAAO,oBAAoB,6DAA6D,EACxF;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAYA;AAAA,IACE,aACG,MAAM,OAAO,+BAA8B,GAAG,wBAAwB,MAAM,IAAI;AAAA,IACnF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,4BAA4B,6CAA6C,EACjF,QAAQ,+CAA+C,EACvD;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,SACA,MACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,wBAAuB,GAAG,kBAAkB,SAAS,MAAM,IAAI;AAAA,IACzF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aACG,MAAM,OAAO,gCAA+B,GAAG,wBAAwB,MAAM,IAAI;AAAA,IACpF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,0BAA0B,6DAA6D,EAC/F;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aACG,MAAM,OAAO,gCAA+B,GAAG,yBAAyB,MAAM,IAAI;AAAA,IACrF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aACG,MAAM,OAAO,gCAA+B,GAAG,yBAAyB,MAAM,IAAI;AAAA,IACrF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aAAa,MAAM,OAAO,4BAA2B,GAAG,qBAAqB,MAAM,IAAI;AAAA,IACvF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,+DAA+D,EAC1F;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aAAa,MAAM,OAAO,wBAAuB,GAAG,kBAAkB,MAAM,IAAI;AAAA,IAChF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX,UAAU,aAAa,MAAM,OAAO,qBAAoB,GAAG,eAAe,MAAM,IAAI,GAAG,IAAI;AAC/F;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EAAO,OAAO,MAAc,SAC3B;AAAA,IACE,aAAa,MAAM,OAAO,uBAAsB,GAAG,iBAAiB,MAAM,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEF,IACG,QAAQ,uBAAuB,+DAA+D,EAC9F,OAAO,SAAS,qDAAqD,EACrE,OAAO,WAAW,oDAAoD,EACtE,OAAO,oBAAoB,4DAA4D,EACvF,OAAO,oBAAoB,gDAAgD,EAC3E,OAAO,oBAAoB,iEAAiE,EAC5F;AAAA,EACC,OACE,MACA,SAUA;AAAA,IACE,aAAa,MAAM,OAAO,6BAA4B,GAAG,sBAAsB,MAAM,IAAI;AAAA,IACzF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EAAO,OAAO,MAA0B,SACvC;AAAA,IACE,aAAa,MAAM,OAAO,yBAAwB,GAAG,mBAAmB,MAAM,IAAI;AAAA,IAClF;AAAA,EACF;AACF;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,kBAAkB,wDAAwD,EACjF,OAAO,sBAAsB,6DAA6D,EAC1F;AAAA,EACC,OACE,MACA,SAEA;AAAA,IACE,aACG,MAAM,OAAO,oCAAmC,GAAG;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAAA,IACF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,sEAAsE,EAC9F,OAAO,eAAe,yDAAyD,EAC/E,OAAO,SAAS,+DAA+D,EAC/E,OAAO,aAAa,sEAAsE,EAC1F;AAAA,EACC,OACE,MACA,MACA,SASA;AAAA,IACE,aAAa,MAAM,OAAO,yBAAwB,GAAG,mBAAmB,MAAM,MAAM,IAAI;AAAA,IACxF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,6DAA6D,EACrF;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,0BAAyB,GAAG,oBAAoB,MAAM,IAAI;AAAA,IACpF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,sBAAsB,yDAAyD,EACvF,OAAO,yBAAyB,+DAA+D,EAC/F,OAAO,eAAe,2CAA2C,EACjE,OAAO,qBAAqB,gEAA2D,EACvF,OAAO,2BAA2B,uDAAuD,EACzF;AAAA,EACC,OACE,MACA,SASA;AAAA,IACE,aAAa,MAAM,OAAO,4BAA2B,GAAG,qBAAqB,MAAM,IAAI;AAAA,IACvF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,eAAe,8CAA8C,EACpE,OAAO,gBAAgB,8CAA8C,EACrE,OAAO,UAAU,0DAA0D,EAC3E;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,KACA,SAWA;AAAA,IACE,aACG,MAAM,OAAO,+BAA8B,GAAG,wBAAwB,KAAK,IAAI;AAAA,IAClF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,iBAAiB,4CAA4C,EACrE,OAAO,SAAS,8CAA8C,EAC9D,OAAO,iBAAiB,kEAAkE,EAC1F;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAYA;AAAA,IACE,aAAa,MAAM,OAAO,uBAAsB,GAAG,iBAAiB,MAAM,IAAI;AAAA,IAC9E;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,WAAW,kDAAkD,EACpE,OAAO,oBAAoB,qDAAqD,EAChF;AAAA,EACC,OAAO,SACL;AAAA,IACE,aACG,MAAM,OAAO,+BAA8B,GAAG,wBAAwB;AAAA,MACrE,OAAO,KAAK;AAAA,MACZ,eAAe,KAAK;AAAA,IACtB,CAAC;AAAA,IACH;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,eAAe,mEAAmE,EACzF;AAAA,EAAO,OAAO,SACb;AAAA,IACE,aACG,MAAM,OAAO,iCAAgC,GAAG,0BAA0B;AAAA,MACzE,KAAK,KAAK;AAAA,IACZ,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,0DAA0D,EAClF;AAAA,EAAO,OAAO,QAAgB,SAC7B,UAAU,aAAa,MAAM,OAAO,mBAAkB,GAAG,aAAa,QAAQ,IAAI,GAAG,IAAI;AAC3F;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,aAAa,8DAA8D,EAClF;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,QACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,4BAA2B,GAAG,sBAAsB,QAAQ,IAAI;AAAA,IAC1F;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,WAAW,sEAAsE,EACxF;AAAA,EAAO,OAAO,SACb;AAAA,IACE,aACG,MAAM,OAAO,kCAAiC,GAAG,2BAA2B;AAAA,MAC3E,OAAO,KAAK;AAAA;AAAA,MAEZ,YAAY,OAAO,MAAM,OAAO,4BAAsB,GAAG,eAAe;AAAA,IAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,0BAA0B,iDAAiD,EAClF,OAAO,qBAAqB,mEAAmE,EAC/F;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,QACA,KACA,SAYA;AAAA,IACE,aAAa,MAAM,OAAO,qBAAoB,GAAG,eAAe,QAAQ,KAAK,IAAI;AAAA,IACjF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,QACA,QACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,wBAAuB,GAAG,kBAAkB,QAAQ,QAAQ,IAAI;AAAA,IAC1F;AAAA,EACF;AACJ;AAEF,IAAI,KAAK;AACT,IAAI,QAAQ,OAAO;AASnB,IAAI,GAAG,aAAa,MAAM;AACxB,QAAM,UAAU,IAAI,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,KAAK;AAClD,UAAQ;AAAA,IACN,2BAA2B,OAAO;AAAA,EACpC;AACA,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,IAAI,MAAM;","names":["dirname","dirname"]}
+{"version":3,"sources":["../../src/cli/bin.ts","../../src/cli/version.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { dirname } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { cac } from \"cac\";\nimport type { AuditName, RecipeName } from \"../types.js\";\nimport { loadCredentialsIntoEnv } from \"../util/credentials.js\";\nimport { resolvePackageVersion } from \"./version.js\";\n\n// Command modules are loaded LAZILY (dynamic `import()` inside each `.action()`),\n// never eagerly at the top. An eager `import { runReportCommand } from\n// \"./commands/report.js\"` would pull EVERY command's transitive dependency chain\n// into the CLI's startup graph — report/announce/launch drag in mjml + resend +\n// @google-analytics/data, `db` drags in the libSQL/kysely stack, etc. Those heavy\n// packages are `devDependencies` (this repo's CLI/functions/audits use them); a\n// consuming fleet site installs @reddoorla/maintenance only for `./forms` +\n// `./configs/*` and runs just `reddoor-maint audit --only a11y` in CI. Lazy\n// loading keeps that path (and `--help`/`--version`) free of the report/db\n// chains, so those packages never land in a consumer's node_modules. The\n// smoke-dist gate asserts bin.js's STATIC import closure stays free of them.\n\n// Load credentials from ~/.config/reddoor-maint/credentials.env before any\n// command runs, so AIRTABLE_PAT/AIRTABLE_BASE_ID/RESEND_API_KEY/etc. are\n// available from any cwd. Shell-exported env vars still win. Silent on\n// missing file — commands that need the credentials will fail with their\n// own clear error.\nloadCredentialsIntoEnv();\n\nconst here = dirname(fileURLToPath(import.meta.url));\nconst version = resolvePackageVersion(here);\n\nconst AUDIT_DESCRIPTIONS: Record<AuditName, string> = {\n  deps: \"Diff site package.json against the bundled baseline version map.\",\n  lighthouse: \"Run @lhci/cli autorun using the canonical lighthouserc.\",\n  a11y: \"Playwright + axe against the canonical a11y routes.\",\n  security:\n    \"GitHub Dependabot alerts (prod+dev) for repo-backed sites; falls back to pnpm/npm audit (prod-deps) with no repo/token.\",\n  lint: \"ESLint + Prettier using the canonical configs.\",\n  domain: \"DNS resolve + TLS cert expiry against the deployed URL (checkout-free).\",\n  browser:\n    \"Playwright across desktop engines + mobile devices + link-check against the deployed URL (checkout-free).\",\n  \"netlify-deploy\":\n    \"Latest production deploy health via the Netlify API by site id (checkout-free; needs NETLIFY_PAT).\",\n  \"function-health\":\n    \"GET {deployedUrl}/health and read its ok/prismic/forms status (checkout-free).\",\n  smoke: \"Run the site's own `pnpm test:smoke` suite in its checkout (clone-based).\",\n  \"form-e2e\":\n    \"Submit the real production contact form in test-mode against the deployed URL (checkout-free).\",\n};\n\nconst RECIPE_DESCRIPTIONS: Record<RecipeName, string> = {\n  \"sync-configs\": \"Overwrite a site's canonical configs to match @reddoorla/maintenance.\",\n  \"bump-deps\": \"Bump dependencies and commit the lockfile change.\",\n  \"svelte-4-to-5\": \"Run the 7-commit Svelte 4 → 5 upgrade recipe.\",\n  \"svelte-codemods\":\n    \"Apply Svelte 5 gotcha codemods to an already-migrated site (state_referenced_locally, etc.).\",\n  \"convert-to-pnpm\": \"Convert an npm/yarn site to pnpm (lockfile, packageManager, scripts).\",\n  onboard: \"Install @reddoorla/maintenance + audit deps on a site (preferred first step).\",\n  \"a11y-fixtures-page\":\n    \"Write src/routes/dev/a11y-fixtures/+page.svelte (stub for lhci + axe targets).\",\n  \"health-endpoint\":\n    \"Write src/routes/health/+server.ts (function-health probe for the report gate).\",\n  \"smoke-suite\": \"Add the smoke suite (test:smoke + playwright config + /health smoke routes).\",\n  \"self-updating\":\n    \"Bootstrap Renovate + repo protection (writes renovate configs via PR, wires ruleset, disables platform auto-merge; ci.yml comes from the starter and is deliberately not managed).\",\n  \"prismic-ci\":\n    \"Add the Prismic model delivery workflow to a site via PR (dry delta comment on PRs, push to Prismic on merge to main).\",\n  init: \"Run the full onboarding chain (convert-to-pnpm → onboard → sync-configs → svelte-codemods → a11y-fixtures-page → health-endpoint → smoke-suite → audit).\",\n};\n\n/** Run a command thunk and surface its result, falling back to a clean error\n * message on throw. Wraps the ~10-line try/catch every `.action()` used to\n * duplicate. `verbose` flips between full stack and message-only.\n *\n * On success it sets `process.exitCode` and RETURNS rather than calling\n * `process.exit()` right after `console.log()`. `process.exit()` does not wait\n * for stdout to flush when stdout is a pipe, so a large `--json` payload piped\n * to another process would get truncated mid-write. Setting `exitCode` and\n * returning lets Node drain stdout and exit naturally with the right code. A\n * non-zero `code` still yields a non-zero process exit.\n *\n * The error path keeps `process.exit()` — error messages are small (one line),\n * always go to stderr, and exiting immediately is the desired fail-fast. */\nexport async function runOrExit(\n  fn: () => Promise<{ output: string; code: number }>,\n  opts: { verbose?: boolean },\n): Promise<void> {\n  try {\n    const { output, code } = await fn();\n    console.log(output);\n    process.exitCode = code;\n    return;\n  } catch (err) {\n    const e = err as { exitCode?: number; message?: string; stack?: string };\n    console.error(opts.verbose ? (e.stack ?? e.message) : (e.message ?? String(err)));\n    process.exit(e.exitCode ?? 1);\n  }\n}\n\nconst cli = cac(\"reddoor-maint\");\n\ncli.option(\"--cwd <path>\", \"Override working directory (default: process.cwd())\");\ncli.option(\"--verbose\", \"Verbose output (full stack on errors)\");\n\ncli.command(\"list-audits\", \"Print the available audits.\").action(() => {\n  for (const [name, desc] of Object.entries(AUDIT_DESCRIPTIONS)) {\n    console.log(`${name.padEnd(12)} ${desc}`);\n  }\n});\n\ncli.command(\"list-recipes\", \"Print the available recipes.\").action(() => {\n  for (const [name, desc] of Object.entries(RECIPE_DESCRIPTIONS)) {\n    console.log(`${name.padEnd(16)} ${desc}`);\n  }\n});\n\ncli\n  .command(\"audit [site]\", \"Run audits against a site (default: cwd).\")\n  .option(\"--only <names>\", \"Comma-separated audit names (e.g. deps,lighthouse)\")\n  .option(\"--json\", \"Machine-readable JSON output\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .option(\n    \"--write-airtable [slug]\",\n    \"After lighthouse runs, write pScore/rScore/bpScore/seoScore + timestamp to the matching Websites row. Slug defaults to cwd's package.json#name.\",\n  )\n  .option(\"--fail-on-violations\", \"Exit non-zero if any a11y violations are found (for CI gates)\")\n  .option(\n    \"--url <url>\",\n    \"Audit this deployed URL with lighthouse (no dev server); single-site. Pair with --only lighthouse — other audits still use the local checkout.\",\n  )\n  .option(\n    \"--concurrency <n>\",\n    \"Max sites to audit in parallel in --fleet mode (default: all at once). Use 1 for sequential (CI).\",\n  )\n  .action(\n    async (\n      site,\n      opts: {\n        only?: string;\n        json?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n        writeAirtable?: string | boolean;\n        failOnViolations?: boolean;\n        url?: string;\n        concurrency?: string;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/audit.js\")).runAuditCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"sync-configs [site]\", \"Sync canonical configs into a site.\")\n  .option(\"--only <names>\", \"Comma-separated config names (e.g. eslint,prettier)\")\n  .option(\"--dry\", \"Print diff without writing\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        only?: string;\n        dry?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/sync-configs.js\")).runSyncConfigsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"bump-deps [site]\", \"Bump dependencies.\")\n  .option(\"--group <group>\", \"patch | minor | major\", { default: \"minor\" })\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        group?: string;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/bump-deps.js\")).runBumpDepsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"self-updating [site]\",\n    \"Bootstrap a repo to keep itself updated (Renovate + protection; platform auto-merge off; ci.yml is the starter's, not managed here).\",\n  )\n  .option(\"--dry\", \"List what would be enabled without writing or opening PRs\")\n  .option(\"--fleet <inventory>\", 'Inventory file (.json or .mjs/.js), or \"airtable\"')\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        dry?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/self-updating.js\")).runSelfUpdatingCommand(site, opts),\n        opts,\n      ),\n  );\n\n// Fleet-wide, this opens ONE PULL REQUEST PER REPOSITORY and never pushes to a\n// client's main. `--dry` exists because that is the only way to see the blast\n// radius before firing it. Both directions of the flag ↔ option link are pinned\n// by tests/cli/prismic-ci-command.test.ts.\ncli\n  .command(\n    \"prismic-ci [site]\",\n    \"Add the Prismic model delivery workflow to a site via PR (one PR per repo; never pushes to main).\",\n  )\n  .option(\"--dry\", \"List the sites that would be offered the workflow, without opening any PR\")\n  .option(\"--fleet <inventory>\", 'Inventory file (.json or .mjs/.js), or \"airtable\"')\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        dry?: boolean;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/prismic-ci.js\")).runPrismicCiCommand(site, opts),\n        opts,\n      ),\n  );\n\n// EVERY flag below must be one the command actually reads, and every option the\n// command reads must appear below. cac rejects an unknown option outright, so a\n// missing line here is a hard error in whatever workflow types the flag; a line\n// here with no handler is the silent no-op — it parses, it lands in `opts`, and\n// nothing ever looks at it. Both directions are pinned by\n// tests/cli/prismic-models-registration.test.ts, the second one at the type level\n// against `PrismicModelsCommandOptions`.\ncli\n  .command(\n    \"prismic-models [site]\",\n    \"Compare a site's Prismic models against its repo (dry by default).\",\n  )\n  .option(\n    \"--apply\",\n    \"Push local models to Prismic. Never deletes — remote-only models are reported.\",\n  )\n  .option(\"--pull\", \"Write remote-only models into the repo (single-site; review + PR the result).\")\n  .option(\"--tokens\", \"Print the per-site write-token doctor: which env var, present?, reads?\")\n  .option(\"--fleet <inventory>\", 'Inventory file (.json or .mjs/.js), or \"airtable\". Read-only.')\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .option(\"--write-airtable\", \"Fleet mode: persist each site's verdict to its Websites row\")\n  .option(\n    \"--comment-file <path>\",\n    \"Write the report to this file (the CI workflow posts it as a PR comment)\",\n  )\n  .action(\n    async (\n      site,\n      opts: {\n        apply?: boolean;\n        pull?: boolean;\n        tokens?: boolean;\n        fleet?: string;\n        workdir?: string;\n        writeAirtable?: boolean;\n        commentFile?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/prismic-models.js\")).runPrismicModelsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"upgrade <upgrade> [site]\", \"Run a named upgrade recipe (svelte-4-to-5).\")\n  .example(\"reddoor-maint upgrade svelte-4-to-5 ./my-site\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      upgrade: string,\n      site: string | undefined,\n      opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/upgrade.js\")).runUpgradeCommand(upgrade, site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"convert-to-pnpm [site]\",\n    \"Convert an npm/yarn site to pnpm (lockfile, packageManager, scripts).\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/convert-to-pnpm.js\")).runConvertToPnpmCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"svelte-codemods [site]\", \"Apply Svelte 5 gotcha codemods to an already-migrated site.\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/svelte-codemods.js\")).runSvelteCodemodsCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"health-endpoint [site]\",\n    \"Write src/routes/health/+server.ts (function-health probe for the report gate).\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/health-endpoint.js\")).runHealthEndpointCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"smoke-suite [site]\",\n    \"Add the smoke suite (test:smoke + playwright config + /health smoke routes).\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () => (await import(\"./commands/smoke-suite.js\")).runSmokeSuiteCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"onboard [site]\",\n    \"Install @reddoorla/maintenance + audit deps on a site (run after convert-to-pnpm).\",\n  )\n  .option(\"--audits <names>\", \"Comma-separated audit subset: lighthouse,a11y (default: both)\")\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (\n      site,\n      opts: {\n        audits?: string;\n        fleet?: string;\n        workdir?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/onboard.js\")).runOnboardCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"init [site]\",\n    \"One-shot guided onboarding: convert-to-pnpm → onboard → sync-configs → svelte-codemods → a11y-fixtures-page → health-endpoint → smoke-suite → audit.\",\n  )\n  .option(\n    \"--fleet <inventory>\",\n    'Inventory file (.json or .mjs/.js), or \"airtable\" to read from Websites table',\n  )\n  .option(\"--workdir <path>\", \"Clone target for fleet mode (default ~/.reddoor-maint/sites)\")\n  .action(\n    async (site, opts: { fleet?: string; workdir?: string; cwd?: string; verbose?: boolean }) =>\n      runOrExit(async () => (await import(\"./commands/init.js\")).runInitCommand(site, opts), opts),\n  );\n\ncli\n  .command(\n    \"launch <site>\",\n    \"Bootstrap + first-audit a site, then draft its launch email for approval.\",\n  )\n  .action(async (site: string, opts: { cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () => (await import(\"./commands/launch.js\")).runLaunchCommand(site, opts),\n      opts,\n    ),\n  );\n\ncli\n  .command(\"header-image [site]\", \"Generate a site's report header image from its live homepage.\")\n  .option(\"--all\", \"Every live site with no Header image yet (backfill)\")\n  .option(\"--force\", \"With --all, regenerate sites that already have one\")\n  .option(\"--write-airtable\", \"Upload to the Websites row instead of writing a local file\")\n  .option(\"--out-dir <path>\", \"Directory for local output (default: reports/)\")\n  .option(\"--settle-ms <ms>\", \"Override the post-load settle delay for slow/animated homepages\")\n  .action(\n    async (\n      site: string | undefined,\n      opts: {\n        all?: boolean;\n        force?: boolean;\n        writeAirtable?: boolean;\n        outDir?: string;\n        settleMs?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/header-image.js\")).runHeaderImageCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"announce [site]\",\n    \"Draft the monthly-report announcement email for maintenance sites (all, or one) for approval.\",\n  )\n  .action(async (site: string | undefined, opts: { cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () => (await import(\"./commands/announce.js\")).runAnnounceCommand(site, opts),\n      opts,\n    ),\n  );\n\ncli\n  .command(\n    \"forms-notify-target [site]\",\n    \"Show who a form submission would email, and optionally flip the pre-launch guard (read-back confirmed).\",\n  )\n  .option(\"--set <on|off>\", \"Flip the guard: on = route to operator, off = restore.\")\n  .option(\"--restore <status>\", \"Status to restore with --set off. Required; never inferred.\")\n  .action(\n    async (\n      site: string | undefined,\n      opts: { set?: string; restore?: string; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/forms-notify-target.js\")).runFormsNotifyTargetCommand(\n            site,\n            opts,\n          ),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"selftest <kind> [site]\",\n    \"Operator self-tests. kind=email: preview a report email for a site (or --all) to yourself.\",\n  )\n  .option(\"--type <type>\", \"Report type: announcement (default) | maintenance | testing | launch\")\n  .option(\"--to <addr>\", \"Recipient(s), comma-separated. Default: OPERATOR_EMAIL.\")\n  .option(\"--all\", \"Send a preview for every maintenance site (to --to/operator).\")\n  .option(\"--dry-run\", \"Render only; write reports/<slug>/selftest-<type>.html; do not send.\")\n  .action(\n    async (\n      kind: string,\n      site: string | undefined,\n      opts: {\n        type?: string;\n        to?: string;\n        all?: boolean;\n        dryRun?: boolean;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/selftest.js\")).runSelftestCommand(kind, site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"preflight [site]\",\n    \"Read-only pre-send checks: recipients, header image, pending drafts, schedule hygiene.\",\n  )\n  .option(\"--type <type>\", \"Report type: announcement (default) | maintenance | testing\")\n  .option(\n    \"--all\",\n    \"Fleet mode: announcement→maintenance sites; maintenance/testing→all schedulable sites.\",\n  )\n  .action(\n    async (\n      site: string | undefined,\n      opts: { type?: string; all?: boolean; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/preflight.js\")).runPreflightCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"ensure-site <slug>\", \"Create/verify the Airtable Websites row for a new site.\")\n  .option(\"--name <display name>\", \"Human Name for the row (client-facing copy uses it verbatim).\")\n  .option(\"--url <url>\", \"Deployed URL (e.g. the Netlify site URL).\")\n  .option(\"--contact <email>\", \"point of contact — the client address reports resolve to.\")\n  .option(\"--git-repo <owner/repo>\", \"GitHub identity. Default on create: reddoorla/<slug>.\")\n  .action(\n    async (\n      slug: string,\n      opts: {\n        name?: string;\n        url?: string;\n        contact?: string;\n        gitRepo?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/ensure-site.js\")).runEnsureSiteCommand(slug, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"prospect-audit <url>\",\n    \"AEO/SEO audit an external prospect's site and publish the report.\",\n  )\n  .option(\n    \"--business <name>\",\n    \"The prospect's business name (defaults to what the model reads off the site).\",\n  )\n  .option(\n    \"--competitors <list>\",\n    \"Comma-separated competitor domains to add comparison probes for.\",\n  )\n  .option(\"--no-probes\", \"Skip the live AI-visibility probes (tier 3).\")\n  .option(\"--out <file>\", \"Also write the rendered report to this file.\")\n  .option(\"--json\", \"Print the raw result JSON instead of the report summary.\")\n  .option(\n    \"--email\",\n    \"Email the internal sheet (scores, what wasn't measured, top fixes, the link) to PROSPECT_AUDIT_RECIPIENTS.\",\n  )\n  .action(\n    async (\n      url: string,\n      opts: {\n        business?: string;\n        competitors?: string;\n        probes?: boolean;\n        out?: string;\n        json?: boolean;\n        email?: boolean;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/prospect-audit.js\")).runProspectAuditCommand(url, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\"report [site]\", \"Draft or send maintenance/testing reports.\")\n  .option(\"--due\", \"Scan all Websites and draft overdue reports.\")\n  .option(\"--type <type>\", \"Single-site draft report type: Maintenance (default) or Testing.\")\n  .option(\n    \"--preview\",\n    \"Single-site dry run; writes reports/<slug>/draft.html, never touches Airtable.\",\n  )\n  .option(\n    \"--enrich\",\n    \"With --preview: also fetch GA + Search Console, so the render exercises those credentials for real. Still writes nothing.\",\n  )\n  .option(\n    \"--send-ready\",\n    \"Send all Reports with Draft ready=true AND Approved to send=true AND Sent at IS NULL.\",\n  )\n  .option(\n    \"--digest\",\n    \"Email the operator one daily digest of reports ready for approval (skips when empty).\",\n  )\n  .option(\n    \"--rerender <reportId>\",\n    \"Regenerate one UNSENT report's stored HTML from its current row, so the console preview shows edited commentary. Refuses a sent report.\",\n  )\n  .action(\n    async (\n      site,\n      opts: {\n        due?: boolean;\n        type?: string;\n        preview?: boolean;\n        enrich?: boolean;\n        sendReady?: boolean;\n        digest?: boolean;\n        rerender?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/report.js\")).runReportCommand(site, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"github-signals\",\n    \"Sweep the fleet for GitHub signals (Renovate-failing/CI/last-commit) and write Airtable.\",\n  )\n  .option(\"--fleet\", \"Run across every site in the Airtable inventory.\")\n  .option(\"--write-airtable\", \"Write each site's signals back to its Websites row.\")\n  .action(\n    async (opts: { fleet?: boolean; writeAirtable?: boolean; cwd?: string; verbose?: boolean }) =>\n      runOrExit(\n        async () =>\n          (await import(\"./commands/github-signals.js\")).runGitHubSignalsCommand({\n            fleet: opts.fleet,\n            writeAirtable: opts.writeAirtable,\n          }),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"protection-audit\",\n    \"Verify every public org repo carries a sound branch ruleset (empty bypass, PR-required).\",\n  )\n  .option(\"--org <org>\", \"GitHub org to sweep (enumerated from the API, never a hand list).\")\n  .action(async (opts: { org?: string; cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () =>\n        (await import(\"./commands/protection-audit.js\")).runProtectionAuditCommand({\n          org: opts.org,\n        }),\n      opts,\n    ),\n  );\n\ncli\n  .command(\n    \"db <action>\",\n    \"Operate the libSQL store (migrate | replay-deadletters | import-airtable | parity | sync | backfill-header-images | backfill-digest-state | dump | verify-dump | restore).\",\n  )\n  .option(\"--file <path>\", \"verify-dump / restore: the dump file to load\")\n  .option(\n    \"--url <url>\",\n    \"restore: the TARGET database to load into. Required, never defaulted — a restore \" +\n      \"that could fall back to the ambient TURSO_DATABASE_URL is one keystroke from \" +\n      \"overwriting production.\",\n  )\n  .action(\n    async (\n      action: string,\n      opts: { file?: string; url?: string; cwd?: string; verbose?: boolean },\n    ) => runOrExit(async () => (await import(\"./commands/db.js\")).runDbCommand(action, opts), opts),\n  );\n\ncli\n  .command(\n    \"submissions <action>\",\n    \"Operate on stored form submissions. rescore: re-run the CURRENT spam classifier over the status='new' backlog (dry-run by default; only 'new' rows are ever touched).\",\n  )\n  .option(\"--dry-run\", \"Print the would-be re-buckets without writing (the default).\")\n  .option(\n    \"--apply\",\n    \"Write the re-buckets: status → spam_auto, spam_score/spam_reason replaced with the new verdict + 'retro-rescore' marker.\",\n  )\n  .action(\n    async (\n      action: string,\n      opts: { dryRun?: boolean; apply?: boolean; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/submissions.js\")).runSubmissionsCommand(action, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"renovate-dispatch\",\n    \"Trigger Renovate on fleet sites the security sweep flagged with critical/high vulns.\",\n  )\n  .option(\"--fleet\", \"Run across every active, repo-backed site in the Airtable inventory.\")\n  .action(async (opts: { fleet?: boolean; cwd?: string; verbose?: boolean }) =>\n    runOrExit(\n      async () =>\n        (await import(\"./commands/renovate-dispatch.js\")).runRenovateDispatchCommand({\n          fleet: opts.fleet,\n          // #539 Phase 5: mirror the auto-fix counter into site_health.\n          siteMirror: await (await import(\"../db/site-mirror.js\")).makeSiteMirror(),\n        }),\n      opts,\n    ),\n  );\n\ncli\n  .command(\n    \"blux <action> [dir]\",\n    \"Blux conversion pipeline. emit: export dir → migration plan + custom types + theme + review manifest. migrate: emitted plan → live Prismic (needs PRISMIC_REPOSITORY_NAME + PRISMIC_WRITE_TOKEN). validate: content coverage of a rendered site against the export answer key. grid: parse rendered index.html → grid-tree.json (layout tree). convert: parse+classify index.html + assemble IR → migration-plan.json + blux-presentation.json + theme.css (+ map-config.json), offline. catalog: parse each page + classify every band to a blux_section → migration-plan.json only (no sidecar), offline.\",\n  )\n  .option(\n    \"--out <dir>\",\n    \"Output directory for emit/grid/convert/catalog (default: <exportDir>/blux-out)\",\n  )\n  .option(\"--converted-base <url>\", \"Converted-site base URL for the review manifest\")\n  .option(\"--blux-base <url>\", \"Original Blux site base URL (default: https://<site.json domain>)\")\n  .option(\n    \"--probe\",\n    \"Reconstruct + HEAD-probe CDN URLs for used assets the HTML scrape missed (network)\",\n  )\n  .option(\n    \"--against <target>\",\n    \"validate: rendered HTML of the converted site — a file path or http(s) URL\",\n  )\n  .option(\n    \"--site <slug>\",\n    \"freeze/migrate-frozen: site slug naming <slug>.slots.json (default: slugified dir name)\",\n  )\n  .option(\n    \"--extra-slots <path>\",\n    \"freeze: JSON declaring slots the template has no token for (video poster, a panel rebuilt from a baked image). Keys must start with 'x.'\",\n  )\n  .action(\n    async (\n      action: string,\n      dir: string | undefined,\n      opts: {\n        out?: string;\n        convertedBase?: string;\n        bluxBase?: string;\n        probe?: boolean;\n        against?: string;\n        site?: string;\n        extraSlots?: string;\n        cwd?: string;\n        verbose?: boolean;\n      },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/blux.js\")).runBluxCommand(action, dir, opts),\n        opts,\n      ),\n  );\n\ncli\n  .command(\n    \"webflow <action> [target]\",\n    \"Webflow import pipeline. capture: live-crawl a base url → <out>/ir.json, progress on stderr. docs: convert a saved ir.json → docs.json + assets.json (offline). migrate: push a capture dir's docs.json + assets.json to Prismic via the shared runner (needs PRISMIC_REPOSITORY_NAME + PRISMIC_WRITE_TOKEN).\",\n  )\n  .option(\n    \"--out <dir>\",\n    \"Output directory for capture (default: webflow-out) / docs (default: dirname of the ir.json)\",\n  )\n  .action(\n    async (\n      action: string,\n      target: string | undefined,\n      opts: { out?: string; cwd?: string; verbose?: boolean },\n    ) =>\n      runOrExit(\n        async () => (await import(\"./commands/webflow.js\")).runWebflowCommand(action, target, opts),\n        opts,\n      ),\n  );\n\ncli.help();\ncli.version(version);\n\n// A typo'd / unrecognized subcommand (e.g. `reddoor-maint auditt`) otherwise\n// falls through cac with no matched command and exits 0 — a cron/CI typo would\n// \"succeed\" silently. cac emits `command:*` at the end of parse() exactly when\n// a positional arg was given but matched no command (a bare `reddoor-maint`,\n// `--help`, and `--version` do NOT trigger it: they have no leading positional\n// or are handled before this fires). Turn that into a clear stderr error +\n// non-zero exit. process.argv[2] is the first positional, i.e. the bad command.\ncli.on(\"command:*\", () => {\n  const unknown = cli.args[0] ?? process.argv[2] ?? \"\";\n  console.error(\n    `error: unknown command '${unknown}'. Run 'reddoor-maint --help' to see available commands.`,\n  );\n  process.exit(1);\n});\n\ncli.parse();\n","import { readFileSync, existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\n/**\n * Read the @reddoorla/maintenance package version, given the directory of a\n * file that lives inside the package. Walks UP looking for the first\n * `package.json` whose `name` matches. Defensive against bundling-layout\n * changes — the older \"two levels up\" assumption held for `dist/cli/bin.js`\n * but would silently mis-read (or return \"unknown\") if tsup ever moved bin\n * to a different depth. Same walk-up pattern as the self-version helper.\n *\n * Returns \"unknown\" when no matching package.json is reachable (Yarn PnP\n * setups stash manifests inside .zip caches; the readFileSync there fails\n * before any name check).\n */\nexport function resolvePackageVersion(fromDir: string): string {\n  try {\n    let dir = fromDir;\n    while (true) {\n      const candidate = join(dir, \"package.json\");\n      if (existsSync(candidate)) {\n        const raw = readFileSync(candidate, \"utf-8\");\n        const pkg = JSON.parse(raw) as { name?: string; version?: string };\n        if (pkg.name === \"@reddoorla/maintenance\") {\n          return pkg.version ?? \"unknown\";\n        }\n      }\n      const parent = dirname(dir);\n      if (parent === dir) return \"unknown\";\n      dir = parent;\n    }\n  } catch {\n    return \"unknown\";\n  }\n}\n"],"mappings":";;;;;;AACA,SAAS,WAAAA,gBAAe;AACxB,SAAS,qBAAqB;AAC9B,SAAS,WAAW;;;ACHpB,SAAS,cAAc,kBAAkB;AACzC,SAAS,SAAS,YAAY;AAcvB,SAAS,sBAAsB,SAAyB;AAC7D,MAAI;AACF,QAAI,MAAM;AACV,WAAO,MAAM;AACX,YAAM,YAAY,KAAK,KAAK,cAAc;AAC1C,UAAI,WAAW,SAAS,GAAG;AACzB,cAAM,MAAM,aAAa,WAAW,OAAO;AAC3C,cAAM,MAAM,KAAK,MAAM,GAAG;AAC1B,YAAI,IAAI,SAAS,0BAA0B;AACzC,iBAAO,IAAI,WAAW;AAAA,QACxB;AAAA,MACF;AACA,YAAM,SAAS,QAAQ,GAAG;AAC1B,UAAI,WAAW,IAAK,QAAO;AAC3B,YAAM;AAAA,IACR;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ADTA,uBAAuB;AAEvB,IAAM,OAAOC,SAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,IAAM,UAAU,sBAAsB,IAAI;AAE1C,IAAM,qBAAgD;AAAA,EACpD,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,UACE;AAAA,EACF,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SACE;AAAA,EACF,kBACE;AAAA,EACF,mBACE;AAAA,EACF,OAAO;AAAA,EACP,YACE;AACJ;AAEA,IAAM,sBAAkD;AAAA,EACtD,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,iBAAiB;AAAA,EACjB,mBACE;AAAA,EACF,mBAAmB;AAAA,EACnB,SAAS;AAAA,EACT,sBACE;AAAA,EACF,mBACE;AAAA,EACF,eAAe;AAAA,EACf,iBACE;AAAA,EACF,cACE;AAAA,EACF,MAAM;AACR;AAeA,eAAsB,UACpB,IACA,MACe;AACf,MAAI;AACF,UAAM,EAAE,QAAQ,KAAK,IAAI,MAAM,GAAG;AAClC,YAAQ,IAAI,MAAM;AAClB,YAAQ,WAAW;AACnB;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,IAAI;AACV,YAAQ,MAAM,KAAK,UAAW,EAAE,SAAS,EAAE,UAAY,EAAE,WAAW,OAAO,GAAG,CAAE;AAChF,YAAQ,KAAK,EAAE,YAAY,CAAC;AAAA,EAC9B;AACF;AAEA,IAAM,MAAM,IAAI,eAAe;AAE/B,IAAI,OAAO,gBAAgB,qDAAqD;AAChF,IAAI,OAAO,aAAa,uCAAuC;AAE/D,IAAI,QAAQ,eAAe,6BAA6B,EAAE,OAAO,MAAM;AACrE,aAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,kBAAkB,GAAG;AAC7D,YAAQ,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC,IAAI,IAAI,EAAE;AAAA,EAC1C;AACF,CAAC;AAED,IAAI,QAAQ,gBAAgB,8BAA8B,EAAE,OAAO,MAAM;AACvE,aAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,mBAAmB,GAAG;AAC9D,YAAQ,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC,IAAI,IAAI,EAAE;AAAA,EAC1C;AACF,CAAC;AAED,IACG,QAAQ,gBAAgB,2CAA2C,EACnE,OAAO,kBAAkB,oDAAoD,EAC7E,OAAO,UAAU,8BAA8B,EAC/C;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,wBAAwB,+DAA+D,EAC9F;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAaA;AAAA,IACE,aAAa,MAAM,OAAO,qBAAqB,GAAG,gBAAgB,MAAM,IAAI;AAAA,IAC5E;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,uBAAuB,qCAAqC,EACpE,OAAO,kBAAkB,qDAAqD,EAC9E,OAAO,SAAS,4BAA4B,EAC5C;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SASA;AAAA,IACE,aAAa,MAAM,OAAO,6BAA4B,GAAG,sBAAsB,MAAM,IAAI;AAAA,IACzF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,oBAAoB,oBAAoB,EAChD,OAAO,mBAAmB,yBAAyB,EAAE,SAAS,QAAQ,CAAC,EACvE;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aAAa,MAAM,OAAO,0BAAyB,GAAG,mBAAmB,MAAM,IAAI;AAAA,IACnF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,SAAS,2DAA2D,EAC3E,OAAO,uBAAuB,mDAAmD,EACjF,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aACG,MAAM,OAAO,8BAA6B,GAAG,uBAAuB,MAAM,IAAI;AAAA,IACjF;AAAA,EACF;AACJ;AAMF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,SAAS,2EAA2E,EAC3F,OAAO,uBAAuB,mDAAmD,EACjF,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aAAa,MAAM,OAAO,2BAA0B,GAAG,oBAAoB,MAAM,IAAI;AAAA,IACrF;AAAA,EACF;AACJ;AASF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,UAAU,+EAA+E,EAChG,OAAO,YAAY,wEAAwE,EAC3F,OAAO,uBAAuB,+DAA+D,EAC7F,OAAO,oBAAoB,8DAA8D,EACzF,OAAO,oBAAoB,6DAA6D,EACxF;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAYA;AAAA,IACE,aACG,MAAM,OAAO,+BAA8B,GAAG,wBAAwB,MAAM,IAAI;AAAA,IACnF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,4BAA4B,6CAA6C,EACjF,QAAQ,+CAA+C,EACvD;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,SACA,MACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,wBAAuB,GAAG,kBAAkB,SAAS,MAAM,IAAI;AAAA,IACzF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aACG,MAAM,OAAO,gCAA+B,GAAG,wBAAwB,MAAM,IAAI;AAAA,IACpF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,0BAA0B,6DAA6D,EAC/F;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aACG,MAAM,OAAO,gCAA+B,GAAG,yBAAyB,MAAM,IAAI;AAAA,IACrF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aACG,MAAM,OAAO,gCAA+B,GAAG,yBAAyB,MAAM,IAAI;AAAA,IACrF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX;AAAA,IACE,aAAa,MAAM,OAAO,4BAA2B,GAAG,qBAAqB,MAAM,IAAI;AAAA,IACvF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,+DAA+D,EAC1F;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OACE,MACA,SAQA;AAAA,IACE,aAAa,MAAM,OAAO,wBAAuB,GAAG,kBAAkB,MAAM,IAAI;AAAA,IAChF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,oBAAoB,8DAA8D,EACzF;AAAA,EACC,OAAO,MAAM,SACX,UAAU,aAAa,MAAM,OAAO,qBAAoB,GAAG,eAAe,MAAM,IAAI,GAAG,IAAI;AAC/F;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EAAO,OAAO,MAAc,SAC3B;AAAA,IACE,aAAa,MAAM,OAAO,uBAAsB,GAAG,iBAAiB,MAAM,IAAI;AAAA,IAC9E;AAAA,EACF;AACF;AAEF,IACG,QAAQ,uBAAuB,+DAA+D,EAC9F,OAAO,SAAS,qDAAqD,EACrE,OAAO,WAAW,oDAAoD,EACtE,OAAO,oBAAoB,4DAA4D,EACvF,OAAO,oBAAoB,gDAAgD,EAC3E,OAAO,oBAAoB,iEAAiE,EAC5F;AAAA,EACC,OACE,MACA,SAUA;AAAA,IACE,aAAa,MAAM,OAAO,6BAA4B,GAAG,sBAAsB,MAAM,IAAI;AAAA,IACzF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EAAO,OAAO,MAA0B,SACvC;AAAA,IACE,aAAa,MAAM,OAAO,yBAAwB,GAAG,mBAAmB,MAAM,IAAI;AAAA,IAClF;AAAA,EACF;AACF;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,kBAAkB,wDAAwD,EACjF,OAAO,sBAAsB,6DAA6D,EAC1F;AAAA,EACC,OACE,MACA,SAEA;AAAA,IACE,aACG,MAAM,OAAO,oCAAmC,GAAG;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAAA,IACF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,sEAAsE,EAC9F,OAAO,eAAe,yDAAyD,EAC/E,OAAO,SAAS,+DAA+D,EAC/E,OAAO,aAAa,sEAAsE,EAC1F;AAAA,EACC,OACE,MACA,MACA,SASA;AAAA,IACE,aAAa,MAAM,OAAO,yBAAwB,GAAG,mBAAmB,MAAM,MAAM,IAAI;AAAA,IACxF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,6DAA6D,EACrF;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,0BAAyB,GAAG,oBAAoB,MAAM,IAAI;AAAA,IACpF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,sBAAsB,yDAAyD,EACvF,OAAO,yBAAyB,+DAA+D,EAC/F,OAAO,eAAe,2CAA2C,EACjE,OAAO,qBAAqB,gEAA2D,EACvF,OAAO,2BAA2B,uDAAuD,EACzF;AAAA,EACC,OACE,MACA,SASA;AAAA,IACE,aAAa,MAAM,OAAO,4BAA2B,GAAG,qBAAqB,MAAM,IAAI;AAAA,IACvF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,eAAe,8CAA8C,EACpE,OAAO,gBAAgB,8CAA8C,EACrE,OAAO,UAAU,0DAA0D,EAC3E;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,KACA,SAWA;AAAA,IACE,aACG,MAAM,OAAO,+BAA8B,GAAG,wBAAwB,KAAK,IAAI;AAAA,IAClF;AAAA,EACF;AACJ;AAEF,IACG,QAAQ,iBAAiB,4CAA4C,EACrE,OAAO,SAAS,8CAA8C,EAC9D,OAAO,iBAAiB,kEAAkE,EAC1F;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,MACA,SAYA;AAAA,IACE,aAAa,MAAM,OAAO,uBAAsB,GAAG,iBAAiB,MAAM,IAAI;AAAA,IAC9E;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,WAAW,kDAAkD,EACpE,OAAO,oBAAoB,qDAAqD,EAChF;AAAA,EACC,OAAO,SACL;AAAA,IACE,aACG,MAAM,OAAO,+BAA8B,GAAG,wBAAwB;AAAA,MACrE,OAAO,KAAK;AAAA,MACZ,eAAe,KAAK;AAAA,IACtB,CAAC;AAAA,IACH;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,eAAe,mEAAmE,EACzF;AAAA,EAAO,OAAO,SACb;AAAA,IACE,aACG,MAAM,OAAO,iCAAgC,GAAG,0BAA0B;AAAA,MACzE,KAAK,KAAK;AAAA,IACZ,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,iBAAiB,8CAA8C,EACtE;AAAA,EACC;AAAA,EACA;AAGF,EACC;AAAA,EACC,OACE,QACA,SACG,UAAU,aAAa,MAAM,OAAO,mBAAkB,GAAG,aAAa,QAAQ,IAAI,GAAG,IAAI;AAChG;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,aAAa,8DAA8D,EAClF;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,QACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,4BAA2B,GAAG,sBAAsB,QAAQ,IAAI;AAAA,IAC1F;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,WAAW,sEAAsE,EACxF;AAAA,EAAO,OAAO,SACb;AAAA,IACE,aACG,MAAM,OAAO,kCAAiC,GAAG,2BAA2B;AAAA,MAC3E,OAAO,KAAK;AAAA;AAAA,MAEZ,YAAY,OAAO,MAAM,OAAO,4BAAsB,GAAG,eAAe;AAAA,IAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,0BAA0B,iDAAiD,EAClF,OAAO,qBAAqB,mEAAmE,EAC/F;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,QACA,KACA,SAYA;AAAA,IACE,aAAa,MAAM,OAAO,qBAAoB,GAAG,eAAe,QAAQ,KAAK,IAAI;AAAA,IACjF;AAAA,EACF;AACJ;AAEF,IACG;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,OACE,QACA,QACA,SAEA;AAAA,IACE,aAAa,MAAM,OAAO,wBAAuB,GAAG,kBAAkB,QAAQ,QAAQ,IAAI;AAAA,IAC1F;AAAA,EACF;AACJ;AAEF,IAAI,KAAK;AACT,IAAI,QAAQ,OAAO;AASnB,IAAI,GAAG,aAAa,MAAM;AACxB,QAAM,UAAU,IAAI,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,KAAK;AAClD,UAAQ;AAAA,IACN,2BAA2B,OAAO;AAAA,EACpC;AACA,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,IAAI,MAAM;","names":["dirname","dirname"]}

package/dist/cli/commands/audit.js

@@ -253,7 +253,7 @@ ${formatUnmeasuredSmokeSummary(results)}`;
 ${wb.summary}`;
     } else {
       const { resolveSlugFromCwd } = await import("../../lighthouse-airtable-3GUWHETW.js");
-      const { writeAuditsToAirtable } = await import("../../write-audits-to-airtable-OBHGR7DQ.js");
+      const { writeAuditsToAirtable } = await import("../../write-audits-to-airtable-OPBJXGS4.js");
       const slug = typeof opts.writeAirtable === "string" && opts.writeAirtable.length > 0 ? opts.writeAirtable : await resolveSlugFromCwd(cwd);
       let writeSummary = null;
       await new Listr(
@@ -293,7 +293,7 @@ ${notice}`;
 }
 async function runFleetWriteBack(args) {
   const { results, which, deps = {} } = args;
-  const { writeFleetAuditsToAirtable, formatFleetWriteSummary, fleetWriteFailed } = await import("../../write-audits-to-airtable-OBHGR7DQ.js");
+  const { writeFleetAuditsToAirtable, formatFleetWriteSummary, fleetWriteFailed } = await import("../../write-audits-to-airtable-OPBJXGS4.js");
   let base;
   if (deps.openBase) {
     base = deps.openBase();

package/dist/{db-V6UIS433.js → db-DXUUAMXT.js}

@@ -162,7 +162,7 @@ async function runDbCommand(action, opts) {
   if (action === "backfill-digest-state") {
     const { readDbConfig, openDb } = await import("./client-JYKPVCJX.js");
     const db = await openDb(opts.url ? { url: opts.url } : readDbConfig());
-    const { readDigestState: readTurso, writeDigestState: writeTurso } = await import("./digest-state-CRZRNGDI.js");
+    const { readDigestState: readTurso, writeDigestState: writeTurso } = await import("./digest-state-3KHZF7GD.js");
     const existing = await readTurso(db);
     if (Object.keys(existing).length > 0) {
       return {
@@ -309,4 +309,4 @@ async function runDbCommand(action, opts) {
 export {
   runDbCommand
 };
-//# sourceMappingURL=db-V6UIS433.js.map
+//# sourceMappingURL=db-DXUUAMXT.js.map

package/dist/{digest-2JEAEJK6.js → digest-NBLECFM7.js}

@@ -13,7 +13,7 @@ import {
   collectRenovateAlerts,
   collectTurnstileGuardrailAlerts,
   collectVulnAlerts
-} from "./chunk-ANJNTAMM.js";
+} from "./chunk-WPL5GERE.js";
 import "./chunk-6I6L3CMX.js";
 import "./chunk-PZR4EBPY.js";
 import {
@@ -163,20 +163,59 @@ async function fetchNotifyBounceCounts(now) {
 async function readDigestStateFromDb() {
   const [{ openDb, readDbConfig }, { readDigestState }] = await Promise.all([
     import("./client-JYKPVCJX.js"),
-    import("./digest-state-CRZRNGDI.js")
+    import("./digest-state-3KHZF7GD.js")
   ]);
   return readDigestState(await openDb(readDbConfig()));
 }
+async function writeRollupOnce(options, now) {
+  if (options.cockpitRollup) {
+    await options.cockpitRollup.write(now);
+    return "written";
+  }
+  return writeCockpitRollupToDb(now);
+}
 async function writeDigestStateToDb(next) {
   const [{ openDb, readDbConfig }, { writeDigestState: writeDigestState2 }] = await Promise.all([
     import("./client-JYKPVCJX.js"),
-    import("./digest-state-CRZRNGDI.js")
+    import("./digest-state-3KHZF7GD.js")
   ]);
   await writeDigestState2(await openDb(readDbConfig()), next);
 }
-async function persistDigestState(base, next, writeState) {
+async function writeCockpitRollupToDb(now) {
+  if (!process.env.TURSO_DATABASE_URL) return "absent";
+  const [{ openDb, readDbConfig }, { writeCockpitRollup }, screenouts, submissions, collectors] = await Promise.all([
+    import("./client-JYKPVCJX.js"),
+    import("./digest-state-3KHZF7GD.js"),
+    import("./screenouts-7P5GOZMV.js"),
+    import("./submissions-3I3GAQAX.js"),
+    import("./digest-collectors-NM7WUWQP.js")
+  ]);
+  const db = await openDb(readDbConfig());
+  const SCREEN_OUT_WINDOW_DAYS = 30;
+  const screenOutSince = screenouts.screenOutsSince(now, SCREEN_OUT_WINDOW_DAYS);
+  const bounceSince = screenouts.screenOutsSince(now, collectors.NOTIFY_BOUNCE_WINDOW_DAYS);
+  const totals = { honeypot: 0, tooFast: 0, markedSpam: 0 };
+  for (const t of (await screenouts.listScreenOutsSince(db, screenOutSince)).values()) {
+    totals.honeypot += t.honeypot;
+    totals.tooFast += t.tooFast;
+    totals.markedSpam += t.markedSpam;
+  }
+  const bounces = await submissions.countNotifyBouncedBySite(db, bounceSince);
+  await writeCockpitRollup(db, {
+    spamTotals: totals,
+    notifyBounces: Object.fromEntries(bounces),
+    windowDays: {
+      screenOuts: SCREEN_OUT_WINDOW_DAYS,
+      bounces: collectors.NOTIFY_BOUNCE_WINDOW_DAYS
+    },
+    computedAt: now.toISOString()
+  });
+  return "written";
+}
+async function persistDigestState(base, next, writeState, writeRollup) {
   let turso = 0;
   let airtable = 0;
+  let rollup = "0";
   try {
     await (writeState ?? writeDigestStateToDb)(next);
     turso = 1;
@@ -189,7 +228,15 @@ async function persistDigestState(base, next, writeState) {
   } catch (e) {
     console.warn(`\u26A0 digest state write failed (airtable): ${e.message}`);
   }
-  console.log(`DIGEST_STATE_WRITE turso=${turso} airtable=${airtable}`);
+  if (writeRollup) {
+    try {
+      rollup = await writeRollup() === "absent" ? "absent" : "1";
+    } catch (e) {
+      rollup = "0";
+      console.warn(`\u26A0 cockpit rollup write failed: ${e.message}`);
+    }
+  }
+  console.log(`DIGEST_STATE_WRITE turso=${turso} airtable=${airtable} rollup=${rollup}`);
 }
 var SUBMISSIONS_DIGEST_WINDOW_MS = 24 * 60 * 60 * 1e3;
 async function fetchSubmissionsDigestCounts(now) {
@@ -298,7 +345,12 @@ async function runDigest(options) {
       (it) => it.kind !== "vuln" || it.autoFixExhausted === true
     );
     if (readyForYourYes.length === 0 && needsAttention.length === 0) {
-      await persistDigestState(base, next, options.digestState?.write);
+      await persistDigestState(
+        base,
+        next,
+        options.digestState?.write,
+        () => writeRollupOnce(options, today)
+      );
       return { output: "Digest skipped (nothing ready, nothing needs attention).", code: 0 };
     }
     const counts = options.submissionCounts !== void 0 ? options.submissionCounts : await fetchSubmissionsDigestCounts(today);
@@ -326,7 +378,12 @@ async function runDigest(options) {
       }
       throw err;
     }
-    await persistDigestState(base, next, options.digestState?.write);
+    await persistDigestState(
+      base,
+      next,
+      options.digestState?.write,
+      () => writeRollupOnce(options, today)
+    );
     return { output: `Digest sent to ${to.join(", ")} (${result.messageId})`, code: 0 };
   } catch (err) {
     if (typeof err.exitCode === "number") {
@@ -367,4 +424,4 @@ export {
   renderDigestHtml,
   runDigest
 };
-//# sourceMappingURL=digest-2JEAEJK6.js.map
+//# sourceMappingURL=digest-NBLECFM7.js.map