@reddoorla/maintenance 0.88.3 → 0.89.0

package/dist/{dump-EPL7AZFR.js.map → dump-QK7LNOGC.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/db/dump.ts"],"sourcesContent":["/**\n * Phase 1.5 of #539: a platform-auth-free SQL dump of the whole database.\n *\n * `turso db dump` needs a PLATFORM login (browser OAuth) — a nightly workflow\n * has only the DATABASE-level url+token it already holds for every other job.\n * So the dump speaks plain SQL through the same client: schema straight from\n * `sqlite_master`, then every row as an INSERT. The output loads into stock\n * `sqlite3` (libSQL IS SQLite), which is exactly how the rehearsed restore\n * proves it — and how a real disaster would replay it into a fresh database.\n *\n * Determinism: tables and rows are emitted in stable order (name, then rowid)\n * so two dumps of an unchanged database are byte-identical — a diffable backup.\n */\n\n/** Minimal execute surface: the @libsql/client `execute` we need. Injectable so\n *  tests run against :memory: without the real network client. */\nexport type SqlExecutor = {\n  execute: (sql: string) => Promise<{\n    columns: string[];\n    rows: Array<Record<string, unknown>>;\n  }>;\n};\n\nconst IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\nfunction quoteIdent(name: string): string {\n  return IDENT.test(name) ? name : `\"${name.replaceAll('\"', '\"\"')}\"`;\n}\n\nexport function sqlLiteral(v: unknown): string {\n  if (v === null || v === undefined) return \"NULL\";\n  if (typeof v === \"number\") return Number.isFinite(v) ? String(v) : \"NULL\";\n  if (typeof v === \"bigint\") return v.toString();\n  if (v instanceof Uint8Array || v instanceof ArrayBuffer) {\n    const bytes = v instanceof ArrayBuffer ? new Uint8Array(v) : v;\n    let hex = \"\";\n    for (const b of bytes) hex += b.toString(16).padStart(2, \"0\");\n    return `X'${hex}'`;\n  }\n  const str = String(v);\n  // A NUL cannot ride a single-quoted SQL literal. This used to strip them,\n  // justified as \"they cannot legitimately appear in this schema's TEXT\n  // columns\" — but `submissions` free text is attacker-supplied and SQLite\n  // stores NUL inside TEXT quite happily, so the backup would have silently\n  // differed from the origin with no signal. Emit the whole value as a hex blob\n  // cast back to text instead: lossless, and it round-trips through the\n  // rehearsal like any other literal.\n  if (str.includes(\"\\u0000\")) {\n    const bytes = new TextEncoder().encode(str);\n    let hex = \"\";\n    for (const b of bytes) hex += b.toString(16).padStart(2, \"0\");\n    return `CAST(X'${hex}' AS TEXT)`;\n  }\n  // Strings: standard SQL escaping — double the single quotes.\n  return `'${str.replaceAll(\"'\", \"''\")}'`;\n}\n\n/**\n * Dump schema + data as executable SQL. Skips SQLite's internal tables\n * (`sqlite_*`); includes indexes. Wrapped in a transaction so a partial load\n * fails atomically instead of leaving a half-restored scratch that could be\n * mistaken for a good one.\n */\nexport async function dumpDatabase(db: SqlExecutor, generatedAt: string): Promise<string> {\n  // Read the ORIGIN's own numbers BEFORE serialising anything. This is the\n  // whole point: it is the only measurement that does not come from the dump,\n  // so it is the only one that can notice the dump is short.\n  const manifest: DumpManifest = {\n    tables: await tableCounts(db),\n    blobBytes: await headerImageBytes(db),\n    generatedAt,\n  };\n  const out: string[] = [\n    // First line, so a truncated dump still carries what it CLAIMED to hold.\n    `${MANIFEST_PREFIX}${JSON.stringify(manifest)}`,\n    \"PRAGMA foreign_keys=OFF;\",\n    \"BEGIN TRANSACTION;\",\n  ];\n\n  const schema = await db.execute(\n    \"SELECT name, type, sql FROM sqlite_master \" +\n      \"WHERE sql IS NOT NULL AND name NOT LIKE 'sqlite_%' \" +\n      \"ORDER BY CASE type WHEN 'table' THEN 0 ELSE 1 END, name\",\n  );\n\n  const tables: string[] = [];\n  for (const row of schema.rows) {\n    out.push(`${String(row.sql).trim().replace(/;?$/, \"\")};`);\n    if (row.type === \"table\") tables.push(String(row.name));\n  }\n\n  for (const table of tables) {\n    const data = await db.execute(`SELECT * FROM ${quoteIdent(table)} ORDER BY rowid`);\n    if (data.rows.length === 0) continue;\n    const cols = data.columns.map(quoteIdent).join(\", \");\n    for (const row of data.rows) {\n      const values = data.columns.map((c) => sqlLiteral(row[c])).join(\", \");\n      out.push(`INSERT INTO ${quoteIdent(table)} (${cols}) VALUES (${values});`);\n    }\n  }\n\n  out.push(\"COMMIT;\");\n  return out.join(\"\\n\") + \"\\n\";\n}\n\n/** Marker for the origin manifest line, first line of every dump. */\nexport const MANIFEST_PREFIX = \"-- REDDOOR_DUMP_MANIFEST \";\n\n/** What the ORIGIN database held at dump time.\n *\n *  This exists because the restore rehearsal used to compare the dump against\n *  ITSELF: expected counts were parsed out of the dump text, and actual counts\n *  came from loading that same text. Both sides moved together, so a dump that\n *  collected 5 of 44 sites verified clean. A manifest read from the LIVE\n *  database before any rows are serialised is the only thing that can catch\n *  under-dumping.\n *\n *  `blobBytes` is the cheap content check. Row counts alone pass a dump in\n *  which every `header_image` came back NULL — and those bytes exist in no\n *  other store once Airtable is frozen. */\nexport type DumpManifest = {\n  tables: Record<string, number>;\n  blobBytes: number;\n  generatedAt: string;\n};\n\n/** Total stored header-image bytes, the one content signal cheap enough to\n *  check on every nightly run. */\nexport async function headerImageBytes(db: SqlExecutor): Promise<number> {\n  const r = await db.execute(\n    \"SELECT COALESCE(SUM(LENGTH(header_image)), 0) AS n FROM sites WHERE header_image IS NOT NULL\",\n  );\n  return Number(r.rows[0]?.n ?? 0);\n}\n\n/** Parse the manifest line from a dump, or null when the dump predates it. */\nexport function parseDumpManifest(sql: string): DumpManifest | null {\n  const line = sql.split(\"\\n\").find((l) => l.startsWith(MANIFEST_PREFIX));\n  if (!line) return null;\n  try {\n    return JSON.parse(line.slice(MANIFEST_PREFIX.length)) as DumpManifest;\n  } catch {\n    return null;\n  }\n}\n\n/** Per-table row counts — the cheap integrity check the restore rehearsal\n *  compares across original vs restored. */\nexport async function tableCounts(db: SqlExecutor): Promise<Record<string, number>> {\n  const schema = await db.execute(\n    \"SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name\",\n  );\n  const counts: Record<string, number> = {};\n  for (const row of schema.rows) {\n    const name = String(row.name);\n    const r = await db.execute(`SELECT COUNT(*) AS c FROM ${quoteIdent(name)}`);\n    counts[name] = Number(r.rows[0]?.c ?? 0);\n  }\n  return counts;\n}\n"],"mappings":";AAuBA,IAAM,QAAQ;AAEd,SAAS,WAAW,MAAsB;AACxC,SAAO,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,WAAW,KAAK,IAAI,CAAC;AACjE;AAEO,SAAS,WAAW,GAAoB;AAC7C,MAAI,MAAM,QAAQ,MAAM,OAAW,QAAO;AAC1C,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI;AACnE,MAAI,OAAO,MAAM,SAAU,QAAO,EAAE,SAAS;AAC7C,MAAI,aAAa,cAAc,aAAa,aAAa;AACvD,UAAM,QAAQ,aAAa,cAAc,IAAI,WAAW,CAAC,IAAI;AAC7D,QAAI,MAAM;AACV,eAAW,KAAK,MAAO,QAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC5D,WAAO,KAAK,GAAG;AAAA,EACjB;AACA,QAAM,MAAM,OAAO,CAAC;AAQpB,MAAI,IAAI,SAAS,IAAQ,GAAG;AAC1B,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,GAAG;AAC1C,QAAI,MAAM;AACV,eAAW,KAAK,MAAO,QAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC5D,WAAO,UAAU,GAAG;AAAA,EACtB;AAEA,SAAO,IAAI,IAAI,WAAW,KAAK,IAAI,CAAC;AACtC;AAQA,eAAsB,aAAa,IAAiB,aAAsC;AAIxF,QAAM,WAAyB;AAAA,IAC7B,QAAQ,MAAM,YAAY,EAAE;AAAA,IAC5B,WAAW,MAAM,iBAAiB,EAAE;AAAA,IACpC;AAAA,EACF;AACA,QAAM,MAAgB;AAAA;AAAA,IAEpB,GAAG,eAAe,GAAG,KAAK,UAAU,QAAQ,CAAC;AAAA,IAC7C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,EAGF;AAEA,QAAM,SAAmB,CAAC;AAC1B,aAAW,OAAO,OAAO,MAAM;AAC7B,QAAI,KAAK,GAAG,OAAO,IAAI,GAAG,EAAE,KAAK,EAAE,QAAQ,OAAO,EAAE,CAAC,GAAG;AACxD,QAAI,IAAI,SAAS,QAAS,QAAO,KAAK,OAAO,IAAI,IAAI,CAAC;AAAA,EACxD;AAEA,aAAW,SAAS,QAAQ;AAC1B,UAAM,OAAO,MAAM,GAAG,QAAQ,iBAAiB,WAAW,KAAK,CAAC,iBAAiB;AACjF,QAAI,KAAK,KAAK,WAAW,EAAG;AAC5B,UAAM,OAAO,KAAK,QAAQ,IAAI,UAAU,EAAE,KAAK,IAAI;AACnD,eAAW,OAAO,KAAK,MAAM;AAC3B,YAAM,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI;AACpE,UAAI,KAAK,eAAe,WAAW,KAAK,CAAC,KAAK,IAAI,aAAa,MAAM,IAAI;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,KAAK,SAAS;AAClB,SAAO,IAAI,KAAK,IAAI,IAAI;AAC1B;AAGO,IAAM,kBAAkB;AAsB/B,eAAsB,iBAAiB,IAAkC;AACvE,QAAM,IAAI,MAAM,GAAG;AAAA,IACjB;AAAA,EACF;AACA,SAAO,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;AACjC;AAGO,SAAS,kBAAkB,KAAkC;AAClE,QAAM,OAAO,IAAI,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,eAAe,CAAC;AACtE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,WAAO,KAAK,MAAM,KAAK,MAAM,gBAAgB,MAAM,CAAC;AAAA,EACtD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,YAAY,IAAkD;AAClF,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,EACF;AACA,QAAM,SAAiC,CAAC;AACxC,aAAW,OAAO,OAAO,MAAM;AAC7B,UAAM,OAAO,OAAO,IAAI,IAAI;AAC5B,UAAM,IAAI,MAAM,GAAG,QAAQ,6BAA6B,WAAW,IAAI,CAAC,EAAE;AAC1E,WAAO,IAAI,IAAI,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;AAAA,EACzC;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/db/dump.ts"],"sourcesContent":["/**\n * Phase 1.5 of #539: a platform-auth-free SQL dump of the whole database.\n *\n * `turso db dump` needs a PLATFORM login (browser OAuth) — a nightly workflow\n * has only the DATABASE-level url+token it already holds for every other job.\n * So the dump speaks plain SQL through the same client: schema straight from\n * `sqlite_master`, then every row as an INSERT. The output loads into stock\n * `sqlite3` (libSQL IS SQLite), which is exactly how the rehearsed restore\n * proves it — and how a real disaster would replay it into a fresh database.\n *\n * Determinism: tables and rows are emitted in stable order (name, then rowid)\n * so two dumps of an unchanged database are byte-identical — a diffable backup.\n */\n\n/** Minimal execute surface: the @libsql/client `execute` we need. Injectable so\n *  tests run against :memory: without the real network client. */\nexport type SqlExecutor = {\n  execute: (sql: string) => Promise<{\n    columns: string[];\n    rows: Array<Record<string, unknown>>;\n  }>;\n};\n\nconst IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;\n\nfunction quoteIdent(name: string): string {\n  return IDENT.test(name) ? name : `\"${name.replaceAll('\"', '\"\"')}\"`;\n}\n\nexport function sqlLiteral(v: unknown): string {\n  if (v === null || v === undefined) return \"NULL\";\n  if (typeof v === \"number\") return Number.isFinite(v) ? String(v) : \"NULL\";\n  if (typeof v === \"bigint\") return v.toString();\n  if (v instanceof Uint8Array || v instanceof ArrayBuffer) {\n    const bytes = v instanceof ArrayBuffer ? new Uint8Array(v) : v;\n    let hex = \"\";\n    for (const b of bytes) hex += b.toString(16).padStart(2, \"0\");\n    return `X'${hex}'`;\n  }\n  const str = String(v);\n  // A NUL cannot ride a single-quoted SQL literal. This used to strip them,\n  // justified as \"they cannot legitimately appear in this schema's TEXT\n  // columns\" — but `submissions` free text is attacker-supplied and SQLite\n  // stores NUL inside TEXT quite happily, so the backup would have silently\n  // differed from the origin with no signal. Emit the whole value as a hex blob\n  // cast back to text instead: lossless, and it round-trips through the\n  // rehearsal like any other literal.\n  if (str.includes(\"\\u0000\")) {\n    const bytes = new TextEncoder().encode(str);\n    let hex = \"\";\n    for (const b of bytes) hex += b.toString(16).padStart(2, \"0\");\n    return `CAST(X'${hex}' AS TEXT)`;\n  }\n  // Strings: standard SQL escaping — double the single quotes.\n  return `'${str.replaceAll(\"'\", \"''\")}'`;\n}\n\n/**\n * Dump schema + data as executable SQL. Skips SQLite's internal tables\n * (`sqlite_*`); includes indexes. Wrapped in a transaction so a partial load\n * fails atomically instead of leaving a half-restored scratch that could be\n * mistaken for a good one.\n */\nexport async function dumpDatabase(db: SqlExecutor, generatedAt: string): Promise<string> {\n  // Read the ORIGIN's own numbers BEFORE serialising anything. This is the\n  // whole point: it is the only measurement that does not come from the dump,\n  // so it is the only one that can notice the dump is short.\n  const manifest: DumpManifest = {\n    tables: await tableCounts(db),\n    blobBytes: await headerImageBytes(db),\n    generatedAt,\n  };\n  const out: string[] = [\n    // First line, so a truncated dump still carries what it CLAIMED to hold.\n    `${MANIFEST_PREFIX}${JSON.stringify(manifest)}`,\n    \"PRAGMA foreign_keys=OFF;\",\n    \"BEGIN TRANSACTION;\",\n  ];\n\n  const schema = await db.execute(\n    \"SELECT name, type, sql FROM sqlite_master \" +\n      \"WHERE sql IS NOT NULL AND name NOT LIKE 'sqlite_%' \" +\n      \"ORDER BY CASE type WHEN 'table' THEN 0 ELSE 1 END, name\",\n  );\n\n  const tables: string[] = [];\n  for (const row of schema.rows) {\n    out.push(`${String(row.sql).trim().replace(/;?$/, \"\")};`);\n    if (row.type === \"table\") tables.push(String(row.name));\n  }\n\n  for (const table of tables) {\n    const data = await db.execute(`SELECT * FROM ${quoteIdent(table)} ORDER BY rowid`);\n    if (data.rows.length === 0) continue;\n    const cols = data.columns.map(quoteIdent).join(\", \");\n    for (const row of data.rows) {\n      const values = data.columns.map((c) => sqlLiteral(row[c])).join(\", \");\n      out.push(`INSERT INTO ${quoteIdent(table)} (${cols}) VALUES (${values});`);\n    }\n  }\n\n  out.push(\"COMMIT;\");\n  return out.join(\"\\n\") + \"\\n\";\n}\n\n/** Marker for the origin manifest line, first line of every dump. */\nexport const MANIFEST_PREFIX = \"-- REDDOOR_DUMP_MANIFEST \";\n\n/** What the ORIGIN database held at dump time.\n *\n *  This exists because the restore rehearsal used to compare the dump against\n *  ITSELF: expected counts were parsed out of the dump text, and actual counts\n *  came from loading that same text. Both sides moved together, so a dump that\n *  collected 5 of 44 sites verified clean. A manifest read from the LIVE\n *  database before any rows are serialised is the only thing that can catch\n *  under-dumping.\n *\n *  `blobBytes` is the cheap content check. Row counts alone pass a dump in\n *  which every `header_image` came back NULL — and those bytes exist in no\n *  other store once Airtable is frozen. */\nexport type DumpManifest = {\n  tables: Record<string, number>;\n  blobBytes: number;\n  generatedAt: string;\n};\n\n/** Total stored header-image bytes, the one content signal cheap enough to\n *  check on every nightly run. */\nexport async function headerImageBytes(db: SqlExecutor): Promise<number> {\n  const r = await db.execute(\n    \"SELECT COALESCE(SUM(LENGTH(header_image)), 0) AS n FROM sites WHERE header_image IS NOT NULL\",\n  );\n  return Number(r.rows[0]?.n ?? 0);\n}\n\n/** Parse the manifest line from a dump, or null when the dump predates it. */\nexport function parseDumpManifest(sql: string): DumpManifest | null {\n  const line = sql.split(\"\\n\").find((l) => l.startsWith(MANIFEST_PREFIX));\n  if (!line) return null;\n  try {\n    return JSON.parse(line.slice(MANIFEST_PREFIX.length)) as DumpManifest;\n  } catch {\n    return null;\n  }\n}\n\n/** Per-table row counts — the cheap integrity check the restore rehearsal\n *  compares across original vs restored. */\nexport async function tableCounts(db: SqlExecutor): Promise<Record<string, number>> {\n  const schema = await db.execute(\n    \"SELECT name FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%' ORDER BY name\",\n  );\n  const counts: Record<string, number> = {};\n  for (const row of schema.rows) {\n    const name = String(row.name);\n    const r = await db.execute(`SELECT COUNT(*) AS c FROM ${quoteIdent(name)}`);\n    counts[name] = Number(r.rows[0]?.c ?? 0);\n  }\n  return counts;\n}\n\n/** Hosts that serve libSQL without authentication: `turso dev`, a local file,\n *  and the in-process scratch engine the nightly rehearsal loads into. */\n// `[::1]` keeps its brackets: WHATWG URL reports an IPv6 hostname bracketed,\n// so the bare form alone would classify a local IPv6 target as hosted.\nconst LOCAL_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"[::1]\", \"::1\"]);\n\n/** Does this restore target need an auth token?\n *\n *  `db restore` used to build its client from a url alone, which works against\n *  every target the tests and rehearsals had ever used — `:memory:` and a local\n *  `turso dev` — and 401s against every target a real recovery would have.\n *  Classifying the url lets the command refuse with a named reason before the\n *  network instead of surfacing an opaque SERVER_ERROR.\n *\n *  Fails CLOSED: a url we cannot parse is treated as needing a token, because\n *  the alternative is silently skipping auth and getting the 401 anyway. */\nexport function requiresAuthToken(url: string): boolean {\n  if (url === \":memory:\") return false;\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return true;\n  }\n  if (parsed.protocol === \"file:\") return false;\n  return !LOCAL_HOSTS.has(parsed.hostname);\n}\n"],"mappings":";AAuBA,IAAM,QAAQ;AAEd,SAAS,WAAW,MAAsB;AACxC,SAAO,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,WAAW,KAAK,IAAI,CAAC;AACjE;AAEO,SAAS,WAAW,GAAoB;AAC7C,MAAI,MAAM,QAAQ,MAAM,OAAW,QAAO;AAC1C,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI;AACnE,MAAI,OAAO,MAAM,SAAU,QAAO,EAAE,SAAS;AAC7C,MAAI,aAAa,cAAc,aAAa,aAAa;AACvD,UAAM,QAAQ,aAAa,cAAc,IAAI,WAAW,CAAC,IAAI;AAC7D,QAAI,MAAM;AACV,eAAW,KAAK,MAAO,QAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC5D,WAAO,KAAK,GAAG;AAAA,EACjB;AACA,QAAM,MAAM,OAAO,CAAC;AAQpB,MAAI,IAAI,SAAS,IAAQ,GAAG;AAC1B,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,GAAG;AAC1C,QAAI,MAAM;AACV,eAAW,KAAK,MAAO,QAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC5D,WAAO,UAAU,GAAG;AAAA,EACtB;AAEA,SAAO,IAAI,IAAI,WAAW,KAAK,IAAI,CAAC;AACtC;AAQA,eAAsB,aAAa,IAAiB,aAAsC;AAIxF,QAAM,WAAyB;AAAA,IAC7B,QAAQ,MAAM,YAAY,EAAE;AAAA,IAC5B,WAAW,MAAM,iBAAiB,EAAE;AAAA,IACpC;AAAA,EACF;AACA,QAAM,MAAgB;AAAA;AAAA,IAEpB,GAAG,eAAe,GAAG,KAAK,UAAU,QAAQ,CAAC;AAAA,IAC7C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,EAGF;AAEA,QAAM,SAAmB,CAAC;AAC1B,aAAW,OAAO,OAAO,MAAM;AAC7B,QAAI,KAAK,GAAG,OAAO,IAAI,GAAG,EAAE,KAAK,EAAE,QAAQ,OAAO,EAAE,CAAC,GAAG;AACxD,QAAI,IAAI,SAAS,QAAS,QAAO,KAAK,OAAO,IAAI,IAAI,CAAC;AAAA,EACxD;AAEA,aAAW,SAAS,QAAQ;AAC1B,UAAM,OAAO,MAAM,GAAG,QAAQ,iBAAiB,WAAW,KAAK,CAAC,iBAAiB;AACjF,QAAI,KAAK,KAAK,WAAW,EAAG;AAC5B,UAAM,OAAO,KAAK,QAAQ,IAAI,UAAU,EAAE,KAAK,IAAI;AACnD,eAAW,OAAO,KAAK,MAAM;AAC3B,YAAM,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI;AACpE,UAAI,KAAK,eAAe,WAAW,KAAK,CAAC,KAAK,IAAI,aAAa,MAAM,IAAI;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,KAAK,SAAS;AAClB,SAAO,IAAI,KAAK,IAAI,IAAI;AAC1B;AAGO,IAAM,kBAAkB;AAsB/B,eAAsB,iBAAiB,IAAkC;AACvE,QAAM,IAAI,MAAM,GAAG;AAAA,IACjB;AAAA,EACF;AACA,SAAO,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;AACjC;AAGO,SAAS,kBAAkB,KAAkC;AAClE,QAAM,OAAO,IAAI,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,eAAe,CAAC;AACtE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,WAAO,KAAK,MAAM,KAAK,MAAM,gBAAgB,MAAM,CAAC;AAAA,EACtD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,YAAY,IAAkD;AAClF,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,EACF;AACA,QAAM,SAAiC,CAAC;AACxC,aAAW,OAAO,OAAO,MAAM;AAC7B,UAAM,OAAO,OAAO,IAAI,IAAI;AAC5B,UAAM,IAAI,MAAM,GAAG,QAAQ,6BAA6B,WAAW,IAAI,CAAC,EAAE;AAC1E,WAAO,IAAI,IAAI,OAAO,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;AAAA,EACzC;AACA,SAAO;AACT;AAMA,IAAM,cAAc,oBAAI,IAAI,CAAC,aAAa,aAAa,SAAS,KAAK,CAAC;AAY/D,SAAS,kBAAkB,KAAsB;AACtD,MAAI,QAAQ,WAAY,QAAO;AAC/B,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,GAAG;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,OAAO,aAAa,QAAS,QAAO;AACxC,SAAO,CAAC,YAAY,IAAI,OAAO,QAAQ;AACzC;","names":[]}

package/dist/{email-FMMEUPX6.js → email-LJQT5J7F.js}

@@ -1,7 +1,7 @@
 import {
   renderProspectReport
-} from "./chunk-XKDCR4UE.js";
-import "./chunk-CEW5PEHZ.js";
+} from "./chunk-5PWB3JHJ.js";
+import "./chunk-DXKF552B.js";
 import {
   escapeHtml,
   safeUrl
@@ -68,17 +68,16 @@ function notMeasuredLines(result) {
     lines.push({ label: "Answers", reason: "the model found no buyer questions to check" });
   }
   if (!result.probes.ok) {
-    lines.push({ label: "AI Visibility", reason: result.probes.error });
+    lines.push({ label: "AI engine answers", reason: result.probes.error });
   } else if (result.scores.aiVisibility === null) {
-    lines.push({ label: "AI Visibility", reason: "no category (buyer-question) query ran" });
+    lines.push({ label: "AI engine answers", reason: "no category (buyer-question) query ran" });
   }
   return lines;
 }
 var SCORE_FIELDS = [
   { key: "findability", label: "Findability" },
   { key: "readability", label: "Readability" },
-  { key: "answers", label: "Answers" },
-  { key: "aiVisibility", label: "AI Visibility" }
+  { key: "answers", label: "Answers" }
 ];
 function scoresTableHtml(scores) {
   const cells = SCORE_FIELDS.map(({ key, label }) => {
@@ -202,4 +201,4 @@ export {
   parseProspectAuditRecipients,
   sendAuditEmail
 };
-//# sourceMappingURL=email-FMMEUPX6.js.map
+//# sourceMappingURL=email-LJQT5J7F.js.map

package/dist/{email-FMMEUPX6.js.map → email-LJQT5J7F.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/prospect/email.ts"],"sourcesContent":["import { escapeHtml, safeUrl } from \"../util/html.js\";\nimport { hostnameOf } from \"../util/url.js\";\nimport { renderProspectReport } from \"./render.js\";\nimport { defaultResendClient, type ResendClient } from \"../reports/send/resend.js\";\nimport type { AnalyzeResult, Fix, ProspectAuditResult, StageResult } from \"./types.js\";\n\n/**\n * Mirrors `reports/send/orchestrate.ts`'s `FROM_ADDRESS` (its line 18) — copied,\n * not imported, exactly like `digest.ts` and `recipes/selftest-email.ts` already\n * do. orchestrate.ts's own `FROM_ADDRESS` isn't exported, and importing it would\n * drag its whole Airtable/MJML dependency chain into this module's graph, which\n * stays lazy-loaded on purpose (see bin.ts's central-dep-blocker comment — this\n * module reaches `resend`, a devDependency, and must only ever be reached via a\n * dynamic `import()` from the CLI).\n */\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\n\nconst IMPACT_ORDER: Record<Fix[\"impact\"], number> = { high: 0, medium: 1, low: 2 };\n\n/** \"top few fixes\" per the design — enough to be useful on an internal sheet\n *  without turning it into the full client report. */\nconst TOP_FIX_COUNT = 3;\n\nexport type AuditEmailContent = {\n  subject: string;\n  html: string;\n  /** The FULL client-facing report (render.ts's `renderProspectReport`, pure\n   *  and deterministic like this function), so `sendAuditEmail` can attach it\n   *  without a second render call on the default path. */\n  attachmentHtml: string;\n};\n\n/** The searchable business name when the pipeline resolved one, else the\n *  hostname — mirrors render.ts's identical fallback (types.ts's businessName\n *  doc: \"Null when no name was ever resolved... itself a finding, not an\n *  error\"). Used for both the subject line and the sheet's own heading. */\nfunction resolveName(result: ProspectAuditResult): string {\n  return result.businessName && result.businessName.trim()\n    ? result.businessName\n    : hostnameOf(result.url);\n}\n\n/**\n * Mail subject headers are plain text, never HTML-rendered by a client — no\n * `escapeHtml` needed there (that would wrongly show literal \"&lt;\" etc. in\n * the subject line). A raw newline/control character IS worth collapsing:\n * a business name that embeds one (scraped page title, model output) would\n * otherwise visibly break the subject, and a stray CR/LF in a header value\n * is the classic email-header-injection vector — defense-in-depth even\n * though the Resend API's JSON transport already neutralizes it here.\n */\nfunction subjectSafe(s: string): string {\n  return s.replace(/\\s+/g, \" \").trim();\n}\n\n/** Local copy of render.ts's date formatter — small enough that importing it\n *  (render.ts doesn't export it) isn't worth the coupling. */\nfunction formatIsoDate(iso: string): string {\n  const d = new Date(iso);\n  if (Number.isNaN(d.getTime())) return iso;\n  return d.toLocaleDateString(\"en-US\", {\n    year: \"numeric\",\n    month: \"long\",\n    day: \"numeric\",\n    timeZone: \"UTC\",\n  });\n}\n\ntype NotMeasuredLine = { label: string; reason: string };\n\n/**\n * Everything on the sheet that reads \"not measured\", and why — in plain\n * words. Unlike render.ts's client-facing report (which collapses every\n * stage failure to STAGE_FAILED_MESSAGE so a stranger never sees operator\n * vocabulary), this email goes to Tucker/Tim/Erik: the real diagnostic\n * (a fetch error, an LLM timeout) is more useful to them than a sanitized\n * phrase, so stage `error` strings are surfaced verbatim (still escaped —\n * they can embed arbitrary text from a fetch response).\n *\n * The four-Scores branches mirror checks.ts's `computeScores` exactly: which\n * stage feeds which score, and the cases where that stage's OWN data still\n * nulls the score even though the stage itself succeeded (crawlerAccessMeasured\n * false, avgMissing null, empty buyerQuestions, a null visibilityScore). If\n * computeScores' conditions change, this needs the matching update.\n */\nfunction notMeasuredLines(result: ProspectAuditResult): NotMeasuredLine[] {\n  const lines: NotMeasuredLine[] = [];\n\n  if (!result.checks.ok) {\n    lines.push({\n      label: \"Findability\",\n      reason: `the checks stage failed — ${result.checks.error}`,\n    });\n    lines.push({\n      label: \"Readability\",\n      reason: `the checks stage failed — ${result.checks.error}`,\n    });\n  } else {\n    const c = result.checks.data;\n    if (result.scores.findability === null) {\n      lines.push({\n        label: \"Findability\",\n        reason: !c.crawlerAccessMeasured\n          ? \"robots.txt could not be fetched, so crawler access wasn't measured\"\n          : \"every crawled page failed to produce readable content\",\n      });\n    }\n    if (result.scores.readability === null) {\n      lines.push({\n        label: \"Readability\",\n        reason: \"no page produced a comparable raw/rendered pair to measure JavaScript dependence\",\n      });\n    }\n  }\n\n  if (!result.lighthouse.ok) {\n    lines.push({ label: \"Lighthouse\", reason: result.lighthouse.error });\n  }\n\n  if (!result.analyze.ok) {\n    lines.push({ label: \"Answers\", reason: result.analyze.error });\n  } else if (result.scores.answers === null) {\n    lines.push({ label: \"Answers\", reason: \"the model found no buyer questions to check\" });\n  }\n\n  if (!result.probes.ok) {\n    lines.push({ label: \"AI Visibility\", reason: result.probes.error });\n  } else if (result.scores.aiVisibility === null) {\n    lines.push({ label: \"AI Visibility\", reason: \"no category (buyer-question) query ran\" });\n  }\n\n  return lines;\n}\n\nconst SCORE_FIELDS: { key: keyof ProspectAuditResult[\"scores\"]; label: string }[] = [\n  { key: \"findability\", label: \"Findability\" },\n  { key: \"readability\", label: \"Readability\" },\n  { key: \"answers\", label: \"Answers\" },\n  { key: \"aiVisibility\", label: \"AI Visibility\" },\n];\n\nfunction scoresTableHtml(scores: ProspectAuditResult[\"scores\"]): string {\n  const cells = SCORE_FIELDS.map(({ key, label }) => {\n    const value = scores[key];\n    const display = value === null ? \"Not measured\" : String(value);\n    const valueStyle =\n      value === null ? \"color:#8a857e;font-size:14px;\" : \"color:#d71920;font-size:28px;\";\n    return `<td style=\"padding:12px 16px;border:1px solid #e6e1da;text-align:center;\">\n      <div style=\"font-weight:600;${valueStyle}\">${escapeHtml(display)}</div>\n      <div style=\"font-size:12px;letter-spacing:.04em;text-transform:uppercase;color:#57544f;margin-top:4px;\">${escapeHtml(label)}</div>\n    </td>`;\n  }).join(\"\");\n  return `<table role=\"presentation\" style=\"border-collapse:collapse;margin:16px 0;\"><tr>${cells}</tr></table>`;\n}\n\nfunction notMeasuredHtml(lines: NotMeasuredLine[]): string {\n  if (lines.length === 0) return \"\";\n  const items = lines\n    .map((l) => `<li><strong>${escapeHtml(l.label)}</strong> — ${escapeHtml(l.reason)}</li>`)\n    .join(\"\");\n  return `<h2 style=\"font-size:16px;margin:24px 0 8px;\">Not measured</h2><ul style=\"margin:0;padding-left:20px;\">${items}</ul>`;\n}\n\n/** analyze.error and fix titles/why are untrusted (LLM output, or text lifted\n *  from the prospect's own site) — every interpolation below is escaped. */\nfunction fixesHtml(analyze: StageResult<AnalyzeResult>): string {\n  if (!analyze.ok) {\n    return `<p style=\"color:#8a857e;margin:8px 0 0;\">Fixes not available — ${escapeHtml(analyze.error)}</p>`;\n  }\n  const top = [...analyze.data.fixes]\n    .sort((a, b) => IMPACT_ORDER[a.impact] - IMPACT_ORDER[b.impact])\n    .slice(0, TOP_FIX_COUNT);\n  if (top.length === 0) {\n    return `<p style=\"margin:8px 0 0;\">Nothing urgent — the essentials are already in place.</p>`;\n  }\n  const items = top\n    .map(\n      (f) =>\n        `<li><strong>${escapeHtml(f.title)}</strong> — ${escapeHtml(f.why)} <span style=\"color:#8a857e;\">(${escapeHtml(f.impact)} impact, ${escapeHtml(f.effort)} effort)</span></li>`,\n    )\n    .join(\"\");\n  return `<ol style=\"margin:8px 0 0;padding-left:20px;\">${items}</ol>`;\n}\n\nfunction linkHtml(link: string | null): string {\n  if (!link) {\n    return `<p style=\"margin:24px 0 0;color:#8a857e;\">No shareable link — the audit could not be saved to the database. The full report is attached to this email instead.</p>`;\n  }\n  const safe = safeUrl(link);\n  return `<p style=\"margin:24px 0 0;\"><strong>Full report:</strong> <a href=\"${escapeHtml(safe)}\">${escapeHtml(link)}</a></p>`;\n}\n\n/** This sheet is for us, and it says so. It carries the real reasons a stage did\n *  not run — useful internally, wrong in front of a prospect — so it has to be\n *  obvious that the shareable artefact is the attachment and the link, not this\n *  body. Without the label, the natural thing to do with a useful email is\n *  forward it. */\nconst INTERNAL_NOTE = `<p style=\"margin:24px 0 0;padding:12px 14px;background:#f4f2ef;border-left:3px solid #d71920;color:#57544f;font-size:14px;\">\n  Internal sheet — it names the reasons a section could not be measured. The\n  version to send a prospect is the linked report, also attached to this email.\n</p>`;\n\n/**\n * Build the internal sheet — a SHORT summary for Tucker/Tim/Erik, distinct\n * from the client-facing report render.ts builds. Pure: no IO, so it's safe\n * to call from a test with no network. `attachmentHtml` is the full report\n * (render.ts's `renderProspectReport`, itself pure), included here so\n * `sendAuditEmail`'s default path doesn't need a second render call.\n *\n * Every value that can trace back to the prospect's site or the model —\n * the business name, fixes, stage error text, the narrative-adjacent bits —\n * is escaped with `escapeHtml`/`safeUrl`, the same honesty-and-safety rule\n * render.ts follows for the client-facing report.\n */\nexport function buildAuditEmail(\n  result: ProspectAuditResult,\n  opts: { link: string | null },\n): AuditEmailContent {\n  const name = resolveName(result);\n  const subject = `Prospect audit — ${subjectSafe(name)}`;\n\n  const html = `<!doctype html>\n<html lang=\"en\">\n<head><meta charset=\"utf-8\" /><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" /></head>\n<body style=\"margin:0;padding:24px;background:#faf8f5;color:#1a1a1a;font:15px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;\">\n  <h1 style=\"font-size:22px;margin:0 0 4px;\">Prospect audit — ${escapeHtml(name)}</h1>\n  <p style=\"margin:0 0 16px;color:#57544f;\">\n    <a href=\"${escapeHtml(safeUrl(result.url))}\">${escapeHtml(result.url)}</a> · audited ${escapeHtml(formatIsoDate(result.generatedAt))}\n  </p>\n  ${scoresTableHtml(result.scores)}\n  ${notMeasuredHtml(notMeasuredLines(result))}\n  <h2 style=\"font-size:16px;margin:24px 0 8px;\">Top fixes</h2>\n  ${fixesHtml(result.analyze)}\n  ${linkHtml(opts.link)}\n  ${INTERNAL_NOTE}\n</body>\n</html>`;\n\n  return { subject, html, attachmentHtml: renderProspectReport(result) };\n}\n\n/**\n * Parse `PROSPECT_AUDIT_RECIPIENTS` (comma-separated) into a clean address\n * list: trimmed, empties dropped, case-insensitively deduped — mirrors\n * `reports/send/orchestrate.ts`'s `parseAddresses` for the same reasons (an\n * operator-typed env var, same typo surface). No address is ever hardcoded\n * anywhere in this module; an unset or empty var yields `[]`, which\n * `sendAuditEmail` treats as \"skip, and say why\" rather than an error.\n */\nexport function parseProspectAuditRecipients(raw: string | undefined | null): string[] {\n  if (!raw) return [];\n  const seen = new Set<string>();\n  const list: string[] = [];\n  for (const part of raw.split(\",\")) {\n    const trimmed = part.trim().toLowerCase();\n    if (!trimmed) continue;\n    if (seen.has(trimmed)) continue;\n    seen.add(trimmed);\n    list.push(trimmed);\n  }\n  return list;\n}\n\n/** Filesystem-safe attachment-filename fragment. Tiny local copy of the CLI's\n *  private `slugify` (prospect-audit.ts) — not worth exporting/sharing one\n *  three-line predicate across a module boundary. */\nfunction slugify(s: string): string {\n  const slug = s\n    .toLowerCase()\n    .replace(/[^a-z0-9.-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return slug || \"prospect\";\n}\n\nexport type SendAuditEmailOptions = {\n  link: string | null;\n  recipients: string[];\n  /**\n   * The persisted `prospect_audits` row id (from `createProspectAudit`), when\n   * persistence succeeded. Mirrors orchestrate.ts's\n   * `idempotencyKey: \\`report:${report.id}\\`` pattern, so re-sending for the\n   * SAME already-persisted audit dedupes at Resend instead of double-mailing.\n   * Null when persistence failed — the sheet can still be sent (it's built to\n   * survive independently of Turso), but then there is no stable row id, so\n   * the key falls back to `url`+`generatedAt`: that still protects a\n   * same-process double-call, though — unlike a DB id — it can't survive an\n   * entire pipeline rerun, which mints genuinely new content anyway.\n   */\n  auditId?: string | null;\n  /**\n   * The print-designed PDF leave-behind, when one was rendered.\n   *\n   * Optional on purpose: rendering it needs a live page and a headless browser,\n   * and neither is worth losing a delivered report over. Absent, the email goes\n   * exactly as it did before — the HTML sheet and the link — and the caller has\n   * already recorded a warning saying why.\n   */\n  pdf?: Buffer | null;\n  /** Defaults to `defaultResendClient()`. */\n  client?: ResendClient;\n  /** Test seam for the ATTACHMENT content only (production omits it and gets\n   *  the real `renderProspectReport` output `buildAuditEmail` already\n   *  computed) — lets a test of this function's sending mechanics (recipients,\n   *  idempotency key, attachment shape) skip re-deriving the full report. */\n  renderReport?: (result: ProspectAuditResult) => string;\n};\n\nexport type SendAuditEmailResult =\n  { sent: true; messageId: string; recipients: string[] } | { sent: false; reason: string };\n\n/**\n * Send the audit sheet with the full rendered report attached as an `.html`\n * file (base64), so the sheet survives independently of the link and of\n * Turso. Empty `recipients` is a legitimate, non-exceptional outcome (no\n * `PROSPECT_AUDIT_RECIPIENTS` configured) — returns `{sent:false}` rather\n * than throwing, so a caller can report it as a warning; a genuine send\n * failure (a throwing `client.send`) still propagates as a real exception.\n */\nexport async function sendAuditEmail(\n  result: ProspectAuditResult,\n  opts: SendAuditEmailOptions,\n): Promise<SendAuditEmailResult> {\n  if (opts.recipients.length === 0) {\n    return {\n      sent: false,\n      reason: \"no recipients configured (PROSPECT_AUDIT_RECIPIENTS is unset or empty)\",\n    };\n  }\n\n  const built = buildAuditEmail(result, { link: opts.link });\n  const attachmentHtml = opts.renderReport ? opts.renderReport(result) : built.attachmentHtml;\n  const client = opts.client ?? defaultResendClient();\n  const idempotencyKey = `prospect-audit:${opts.auditId ?? `${result.url}#${result.generatedAt}`}`;\n  const filename = `prospect-audit-${slugify(hostnameOf(result.url))}.html`;\n\n  const { messageId } = await client.send({\n    from: FROM_ADDRESS,\n    to: opts.recipients,\n    subject: built.subject,\n    html: built.html,\n    attachments: [\n      {\n        filename,\n        content: Buffer.from(attachmentHtml, \"utf-8\").toString(\"base64\"),\n        contentType: \"text/html\",\n      },\n      // The PDF goes second so the HTML sheet stays the first attachment it has\n      // always been, and appears only when one was actually rendered — an empty\n      // or broken attachment is worse than none.\n      ...(opts.pdf\n        ? [\n            {\n              filename: filename.replace(/\\.html$/, \".pdf\"),\n              content: opts.pdf.toString(\"base64\"),\n              contentType: \"application/pdf\",\n            },\n          ]\n        : []),\n    ],\n    idempotencyKey,\n  });\n\n  return { sent: true, messageId, recipients: opts.recipients };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,IAAM,eAAe;AAErB,IAAM,eAA8C,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,EAAE;AAIjF,IAAM,gBAAgB;AAetB,SAAS,YAAY,QAAqC;AACxD,SAAO,OAAO,gBAAgB,OAAO,aAAa,KAAK,IACnD,OAAO,eACP,WAAW,OAAO,GAAG;AAC3B;AAWA,SAAS,YAAY,GAAmB;AACtC,SAAO,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACrC;AAIA,SAAS,cAAc,KAAqB;AAC1C,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,MAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,SAAO,EAAE,mBAAmB,SAAS;AAAA,IACnC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,UAAU;AAAA,EACZ,CAAC;AACH;AAmBA,SAAS,iBAAiB,QAAgD;AACxE,QAAM,QAA2B,CAAC;AAElC,MAAI,CAAC,OAAO,OAAO,IAAI;AACrB,UAAM,KAAK;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,kCAA6B,OAAO,OAAO,KAAK;AAAA,IAC1D,CAAC;AACD,UAAM,KAAK;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,kCAA6B,OAAO,OAAO,KAAK;AAAA,IAC1D,CAAC;AAAA,EACH,OAAO;AACL,UAAM,IAAI,OAAO,OAAO;AACxB,QAAI,OAAO,OAAO,gBAAgB,MAAM;AACtC,YAAM,KAAK;AAAA,QACT,OAAO;AAAA,QACP,QAAQ,CAAC,EAAE,wBACP,uEACA;AAAA,MACN,CAAC;AAAA,IACH;AACA,QAAI,OAAO,OAAO,gBAAgB,MAAM;AACtC,YAAM,KAAK;AAAA,QACT,OAAO;AAAA,QACP,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,WAAW,IAAI;AACzB,UAAM,KAAK,EAAE,OAAO,cAAc,QAAQ,OAAO,WAAW,MAAM,CAAC;AAAA,EACrE;AAEA,MAAI,CAAC,OAAO,QAAQ,IAAI;AACtB,UAAM,KAAK,EAAE,OAAO,WAAW,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAAA,EAC/D,WAAW,OAAO,OAAO,YAAY,MAAM;AACzC,UAAM,KAAK,EAAE,OAAO,WAAW,QAAQ,8CAA8C,CAAC;AAAA,EACxF;AAEA,MAAI,CAAC,OAAO,OAAO,IAAI;AACrB,UAAM,KAAK,EAAE,OAAO,iBAAiB,QAAQ,OAAO,OAAO,MAAM,CAAC;AAAA,EACpE,WAAW,OAAO,OAAO,iBAAiB,MAAM;AAC9C,UAAM,KAAK,EAAE,OAAO,iBAAiB,QAAQ,yCAAyC,CAAC;AAAA,EACzF;AAEA,SAAO;AACT;AAEA,IAAM,eAA8E;AAAA,EAClF,EAAE,KAAK,eAAe,OAAO,cAAc;AAAA,EAC3C,EAAE,KAAK,eAAe,OAAO,cAAc;AAAA,EAC3C,EAAE,KAAK,WAAW,OAAO,UAAU;AAAA,EACnC,EAAE,KAAK,gBAAgB,OAAO,gBAAgB;AAChD;AAEA,SAAS,gBAAgB,QAA+C;AACtE,QAAM,QAAQ,aAAa,IAAI,CAAC,EAAE,KAAK,MAAM,MAAM;AACjD,UAAM,QAAQ,OAAO,GAAG;AACxB,UAAM,UAAU,UAAU,OAAO,iBAAiB,OAAO,KAAK;AAC9D,UAAM,aACJ,UAAU,OAAO,kCAAkC;AACrD,WAAO;AAAA,oCACyB,UAAU,KAAK,WAAW,OAAO,CAAC;AAAA,gHAC0C,WAAW,KAAK,CAAC;AAAA;AAAA,EAE/H,CAAC,EAAE,KAAK,EAAE;AACV,SAAO,kFAAkF,KAAK;AAChG;AAEA,SAAS,gBAAgB,OAAkC;AACzD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,QAAQ,MACX,IAAI,CAAC,MAAM,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,MAAM,CAAC,OAAO,EACvF,KAAK,EAAE;AACV,SAAO,0GAA0G,KAAK;AACxH;AAIA,SAAS,UAAU,SAA6C;AAC9D,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,uEAAkE,WAAW,QAAQ,KAAK,CAAC;AAAA,EACpG;AACA,QAAM,MAAM,CAAC,GAAG,QAAQ,KAAK,KAAK,EAC/B,KAAK,CAAC,GAAG,MAAM,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,CAAC,EAC9D,MAAM,GAAG,aAAa;AACzB,MAAI,IAAI,WAAW,GAAG;AACpB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,IACX;AAAA,IACC,CAAC,MACC,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,GAAG,CAAC,kCAAkC,WAAW,EAAE,MAAM,CAAC,YAAY,WAAW,EAAE,MAAM,CAAC;AAAA,EAC5J,EACC,KAAK,EAAE;AACV,SAAO,iDAAiD,KAAK;AAC/D;AAEA,SAAS,SAAS,MAA6B;AAC7C,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,QAAM,OAAO,QAAQ,IAAI;AACzB,SAAO,sEAAsE,WAAW,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC;AACpH;AAOA,IAAM,gBAAgB;AAAA;AAAA;AAAA;AAiBf,SAAS,gBACd,QACA,MACmB;AACnB,QAAM,OAAO,YAAY,MAAM;AAC/B,QAAM,UAAU,yBAAoB,YAAY,IAAI,CAAC;AAErD,QAAM,OAAO;AAAA;AAAA;AAAA;AAAA,qEAIiD,WAAW,IAAI,CAAC;AAAA;AAAA,eAEjE,WAAW,QAAQ,OAAO,GAAG,CAAC,CAAC,KAAK,WAAW,OAAO,GAAG,CAAC,qBAAkB,WAAW,cAAc,OAAO,WAAW,CAAC,CAAC;AAAA;AAAA,IAEpI,gBAAgB,OAAO,MAAM,CAAC;AAAA,IAC9B,gBAAgB,iBAAiB,MAAM,CAAC,CAAC;AAAA;AAAA,IAEzC,UAAU,OAAO,OAAO,CAAC;AAAA,IACzB,SAAS,KAAK,IAAI,CAAC;AAAA,IACnB,aAAa;AAAA;AAAA;AAIf,SAAO,EAAE,SAAS,MAAM,gBAAgB,qBAAqB,MAAM,EAAE;AACvE;AAUO,SAAS,6BAA6B,KAA0C;AACrF,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,OAAiB,CAAC;AACxB,aAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;AACjC,UAAM,UAAU,KAAK,KAAK,EAAE,YAAY;AACxC,QAAI,CAAC,QAAS;AACd,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,SAAK,KAAK,OAAO;AAAA,EACnB;AACA,SAAO;AACT;AAKA,SAAS,QAAQ,GAAmB;AAClC,QAAM,OAAO,EACV,YAAY,EACZ,QAAQ,iBAAiB,GAAG,EAC5B,QAAQ,YAAY,EAAE;AACzB,SAAO,QAAQ;AACjB;AA8CA,eAAsB,eACpB,QACA,MAC+B;AAC/B,MAAI,KAAK,WAAW,WAAW,GAAG;AAChC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,QAAQ,gBAAgB,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC;AACzD,QAAM,iBAAiB,KAAK,eAAe,KAAK,aAAa,MAAM,IAAI,MAAM;AAC7E,QAAM,SAAS,KAAK,UAAU,oBAAoB;AAClD,QAAM,iBAAiB,kBAAkB,KAAK,WAAW,GAAG,OAAO,GAAG,IAAI,OAAO,WAAW,EAAE;AAC9F,QAAM,WAAW,kBAAkB,QAAQ,WAAW,OAAO,GAAG,CAAC,CAAC;AAElE,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK;AAAA,IACtC,MAAM;AAAA,IACN,IAAI,KAAK;AAAA,IACT,SAAS,MAAM;AAAA,IACf,MAAM,MAAM;AAAA,IACZ,aAAa;AAAA,MACX;AAAA,QACE;AAAA,QACA,SAAS,OAAO,KAAK,gBAAgB,OAAO,EAAE,SAAS,QAAQ;AAAA,QAC/D,aAAa;AAAA,MACf;AAAA;AAAA;AAAA;AAAA,MAIA,GAAI,KAAK,MACL;AAAA,QACE;AAAA,UACE,UAAU,SAAS,QAAQ,WAAW,MAAM;AAAA,UAC5C,SAAS,KAAK,IAAI,SAAS,QAAQ;AAAA,UACnC,aAAa;AAAA,QACf;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO,EAAE,MAAM,MAAM,WAAW,YAAY,KAAK,WAAW;AAC9D;","names":[]}
+{"version":3,"sources":["../src/prospect/email.ts"],"sourcesContent":["import { escapeHtml, safeUrl } from \"../util/html.js\";\nimport { hostnameOf } from \"../util/url.js\";\nimport { renderProspectReport } from \"./render.js\";\nimport { defaultResendClient, type ResendClient } from \"../reports/send/resend.js\";\nimport type { AnalyzeResult, Fix, ProspectAuditResult, StageResult } from \"./types.js\";\n\n/**\n * Mirrors `reports/send/orchestrate.ts`'s `FROM_ADDRESS` (its line 18) — copied,\n * not imported, exactly like `digest.ts` and `recipes/selftest-email.ts` already\n * do. orchestrate.ts's own `FROM_ADDRESS` isn't exported, and importing it would\n * drag its whole Airtable/MJML dependency chain into this module's graph, which\n * stays lazy-loaded on purpose (see bin.ts's central-dep-blocker comment — this\n * module reaches `resend`, a devDependency, and must only ever be reached via a\n * dynamic `import()` from the CLI).\n */\nconst FROM_ADDRESS = \"Reddoor Reports <reports@reddoorla.com>\";\n\nconst IMPACT_ORDER: Record<Fix[\"impact\"], number> = { high: 0, medium: 1, low: 2 };\n\n/** \"top few fixes\" per the design — enough to be useful on an internal sheet\n *  without turning it into the full client report. */\nconst TOP_FIX_COUNT = 3;\n\nexport type AuditEmailContent = {\n  subject: string;\n  html: string;\n  /** The FULL client-facing report (render.ts's `renderProspectReport`, pure\n   *  and deterministic like this function), so `sendAuditEmail` can attach it\n   *  without a second render call on the default path. */\n  attachmentHtml: string;\n};\n\n/** The searchable business name when the pipeline resolved one, else the\n *  hostname — mirrors render.ts's identical fallback (types.ts's businessName\n *  doc: \"Null when no name was ever resolved... itself a finding, not an\n *  error\"). Used for both the subject line and the sheet's own heading. */\nfunction resolveName(result: ProspectAuditResult): string {\n  return result.businessName && result.businessName.trim()\n    ? result.businessName\n    : hostnameOf(result.url);\n}\n\n/**\n * Mail subject headers are plain text, never HTML-rendered by a client — no\n * `escapeHtml` needed there (that would wrongly show literal \"&lt;\" etc. in\n * the subject line). A raw newline/control character IS worth collapsing:\n * a business name that embeds one (scraped page title, model output) would\n * otherwise visibly break the subject, and a stray CR/LF in a header value\n * is the classic email-header-injection vector — defense-in-depth even\n * though the Resend API's JSON transport already neutralizes it here.\n */\nfunction subjectSafe(s: string): string {\n  return s.replace(/\\s+/g, \" \").trim();\n}\n\n/** Local copy of render.ts's date formatter — small enough that importing it\n *  (render.ts doesn't export it) isn't worth the coupling. */\nfunction formatIsoDate(iso: string): string {\n  const d = new Date(iso);\n  if (Number.isNaN(d.getTime())) return iso;\n  return d.toLocaleDateString(\"en-US\", {\n    year: \"numeric\",\n    month: \"long\",\n    day: \"numeric\",\n    timeZone: \"UTC\",\n  });\n}\n\ntype NotMeasuredLine = { label: string; reason: string };\n\n/**\n * Everything on the sheet that reads \"not measured\", and why — in plain\n * words. Unlike render.ts's client-facing report (which collapses every\n * stage failure to STAGE_FAILED_MESSAGE so a stranger never sees operator\n * vocabulary), this email goes to Tucker/Tim/Erik: the real diagnostic\n * (a fetch error, an LLM timeout) is more useful to them than a sanitized\n * phrase, so stage `error` strings are surfaced verbatim (still escaped —\n * they can embed arbitrary text from a fetch response).\n *\n * The four-Scores branches mirror checks.ts's `computeScores` exactly: which\n * stage feeds which score, and the cases where that stage's OWN data still\n * nulls the score even though the stage itself succeeded (crawlerAccessMeasured\n * false, avgMissing null, empty buyerQuestions, a null visibilityScore). If\n * computeScores' conditions change, this needs the matching update.\n */\nfunction notMeasuredLines(result: ProspectAuditResult): NotMeasuredLine[] {\n  const lines: NotMeasuredLine[] = [];\n\n  if (!result.checks.ok) {\n    lines.push({\n      label: \"Findability\",\n      reason: `the checks stage failed — ${result.checks.error}`,\n    });\n    lines.push({\n      label: \"Readability\",\n      reason: `the checks stage failed — ${result.checks.error}`,\n    });\n  } else {\n    const c = result.checks.data;\n    if (result.scores.findability === null) {\n      lines.push({\n        label: \"Findability\",\n        reason: !c.crawlerAccessMeasured\n          ? \"robots.txt could not be fetched, so crawler access wasn't measured\"\n          : \"every crawled page failed to produce readable content\",\n      });\n    }\n    if (result.scores.readability === null) {\n      lines.push({\n        label: \"Readability\",\n        reason: \"no page produced a comparable raw/rendered pair to measure JavaScript dependence\",\n      });\n    }\n  }\n\n  if (!result.lighthouse.ok) {\n    lines.push({ label: \"Lighthouse\", reason: result.lighthouse.error });\n  }\n\n  if (!result.analyze.ok) {\n    lines.push({ label: \"Answers\", reason: result.analyze.error });\n  } else if (result.scores.answers === null) {\n    lines.push({ label: \"Answers\", reason: \"the model found no buyer questions to check\" });\n  }\n\n  // Named for what the stage measures (the receipts section), not for the\n  // removed score label — the email no longer presents an AI Visibility score.\n  if (!result.probes.ok) {\n    lines.push({ label: \"AI engine answers\", reason: result.probes.error });\n  } else if (result.scores.aiVisibility === null) {\n    lines.push({ label: \"AI engine answers\", reason: \"no category (buyer-question) query ran\" });\n  }\n\n  return lines;\n}\n\n/** The three SITE scores. aiVisibility is deliberately absent — the report\n *  reorganised around what the client controls, and a visibility number in a\n *  score row reads as ours to move. It stays computed and stored; the report\n *  page presents the receipts. */\nconst SCORE_FIELDS: { key: keyof ProspectAuditResult[\"scores\"]; label: string }[] = [\n  { key: \"findability\", label: \"Findability\" },\n  { key: \"readability\", label: \"Readability\" },\n  { key: \"answers\", label: \"Answers\" },\n];\n\nfunction scoresTableHtml(scores: ProspectAuditResult[\"scores\"]): string {\n  const cells = SCORE_FIELDS.map(({ key, label }) => {\n    const value = scores[key];\n    const display = value === null ? \"Not measured\" : String(value);\n    const valueStyle =\n      value === null ? \"color:#8a857e;font-size:14px;\" : \"color:#d71920;font-size:28px;\";\n    return `<td style=\"padding:12px 16px;border:1px solid #e6e1da;text-align:center;\">\n      <div style=\"font-weight:600;${valueStyle}\">${escapeHtml(display)}</div>\n      <div style=\"font-size:12px;letter-spacing:.04em;text-transform:uppercase;color:#57544f;margin-top:4px;\">${escapeHtml(label)}</div>\n    </td>`;\n  }).join(\"\");\n  return `<table role=\"presentation\" style=\"border-collapse:collapse;margin:16px 0;\"><tr>${cells}</tr></table>`;\n}\n\nfunction notMeasuredHtml(lines: NotMeasuredLine[]): string {\n  if (lines.length === 0) return \"\";\n  const items = lines\n    .map((l) => `<li><strong>${escapeHtml(l.label)}</strong> — ${escapeHtml(l.reason)}</li>`)\n    .join(\"\");\n  return `<h2 style=\"font-size:16px;margin:24px 0 8px;\">Not measured</h2><ul style=\"margin:0;padding-left:20px;\">${items}</ul>`;\n}\n\n/** analyze.error and fix titles/why are untrusted (LLM output, or text lifted\n *  from the prospect's own site) — every interpolation below is escaped. */\nfunction fixesHtml(analyze: StageResult<AnalyzeResult>): string {\n  if (!analyze.ok) {\n    return `<p style=\"color:#8a857e;margin:8px 0 0;\">Fixes not available — ${escapeHtml(analyze.error)}</p>`;\n  }\n  const top = [...analyze.data.fixes]\n    .sort((a, b) => IMPACT_ORDER[a.impact] - IMPACT_ORDER[b.impact])\n    .slice(0, TOP_FIX_COUNT);\n  if (top.length === 0) {\n    return `<p style=\"margin:8px 0 0;\">Nothing urgent — the essentials are already in place.</p>`;\n  }\n  const items = top\n    .map(\n      (f) =>\n        `<li><strong>${escapeHtml(f.title)}</strong> — ${escapeHtml(f.why)} <span style=\"color:#8a857e;\">(${escapeHtml(f.impact)} impact, ${escapeHtml(f.effort)} effort)</span></li>`,\n    )\n    .join(\"\");\n  return `<ol style=\"margin:8px 0 0;padding-left:20px;\">${items}</ol>`;\n}\n\nfunction linkHtml(link: string | null): string {\n  if (!link) {\n    return `<p style=\"margin:24px 0 0;color:#8a857e;\">No shareable link — the audit could not be saved to the database. The full report is attached to this email instead.</p>`;\n  }\n  const safe = safeUrl(link);\n  return `<p style=\"margin:24px 0 0;\"><strong>Full report:</strong> <a href=\"${escapeHtml(safe)}\">${escapeHtml(link)}</a></p>`;\n}\n\n/** This sheet is for us, and it says so. It carries the real reasons a stage did\n *  not run — useful internally, wrong in front of a prospect — so it has to be\n *  obvious that the shareable artefact is the attachment and the link, not this\n *  body. Without the label, the natural thing to do with a useful email is\n *  forward it. */\nconst INTERNAL_NOTE = `<p style=\"margin:24px 0 0;padding:12px 14px;background:#f4f2ef;border-left:3px solid #d71920;color:#57544f;font-size:14px;\">\n  Internal sheet — it names the reasons a section could not be measured. The\n  version to send a prospect is the linked report, also attached to this email.\n</p>`;\n\n/**\n * Build the internal sheet — a SHORT summary for Tucker/Tim/Erik, distinct\n * from the client-facing report render.ts builds. Pure: no IO, so it's safe\n * to call from a test with no network. `attachmentHtml` is the full report\n * (render.ts's `renderProspectReport`, itself pure), included here so\n * `sendAuditEmail`'s default path doesn't need a second render call.\n *\n * Every value that can trace back to the prospect's site or the model —\n * the business name, fixes, stage error text, the narrative-adjacent bits —\n * is escaped with `escapeHtml`/`safeUrl`, the same honesty-and-safety rule\n * render.ts follows for the client-facing report.\n */\nexport function buildAuditEmail(\n  result: ProspectAuditResult,\n  opts: { link: string | null },\n): AuditEmailContent {\n  const name = resolveName(result);\n  const subject = `Prospect audit — ${subjectSafe(name)}`;\n\n  const html = `<!doctype html>\n<html lang=\"en\">\n<head><meta charset=\"utf-8\" /><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" /></head>\n<body style=\"margin:0;padding:24px;background:#faf8f5;color:#1a1a1a;font:15px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;\">\n  <h1 style=\"font-size:22px;margin:0 0 4px;\">Prospect audit — ${escapeHtml(name)}</h1>\n  <p style=\"margin:0 0 16px;color:#57544f;\">\n    <a href=\"${escapeHtml(safeUrl(result.url))}\">${escapeHtml(result.url)}</a> · audited ${escapeHtml(formatIsoDate(result.generatedAt))}\n  </p>\n  ${scoresTableHtml(result.scores)}\n  ${notMeasuredHtml(notMeasuredLines(result))}\n  <h2 style=\"font-size:16px;margin:24px 0 8px;\">Top fixes</h2>\n  ${fixesHtml(result.analyze)}\n  ${linkHtml(opts.link)}\n  ${INTERNAL_NOTE}\n</body>\n</html>`;\n\n  return { subject, html, attachmentHtml: renderProspectReport(result) };\n}\n\n/**\n * Parse `PROSPECT_AUDIT_RECIPIENTS` (comma-separated) into a clean address\n * list: trimmed, empties dropped, case-insensitively deduped — mirrors\n * `reports/send/orchestrate.ts`'s `parseAddresses` for the same reasons (an\n * operator-typed env var, same typo surface). No address is ever hardcoded\n * anywhere in this module; an unset or empty var yields `[]`, which\n * `sendAuditEmail` treats as \"skip, and say why\" rather than an error.\n */\nexport function parseProspectAuditRecipients(raw: string | undefined | null): string[] {\n  if (!raw) return [];\n  const seen = new Set<string>();\n  const list: string[] = [];\n  for (const part of raw.split(\",\")) {\n    const trimmed = part.trim().toLowerCase();\n    if (!trimmed) continue;\n    if (seen.has(trimmed)) continue;\n    seen.add(trimmed);\n    list.push(trimmed);\n  }\n  return list;\n}\n\n/** Filesystem-safe attachment-filename fragment. Tiny local copy of the CLI's\n *  private `slugify` (prospect-audit.ts) — not worth exporting/sharing one\n *  three-line predicate across a module boundary. */\nfunction slugify(s: string): string {\n  const slug = s\n    .toLowerCase()\n    .replace(/[^a-z0-9.-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return slug || \"prospect\";\n}\n\nexport type SendAuditEmailOptions = {\n  link: string | null;\n  recipients: string[];\n  /**\n   * The persisted `prospect_audits` row id (from `createProspectAudit`), when\n   * persistence succeeded. Mirrors orchestrate.ts's\n   * `idempotencyKey: \\`report:${report.id}\\`` pattern, so re-sending for the\n   * SAME already-persisted audit dedupes at Resend instead of double-mailing.\n   * Null when persistence failed — the sheet can still be sent (it's built to\n   * survive independently of Turso), but then there is no stable row id, so\n   * the key falls back to `url`+`generatedAt`: that still protects a\n   * same-process double-call, though — unlike a DB id — it can't survive an\n   * entire pipeline rerun, which mints genuinely new content anyway.\n   */\n  auditId?: string | null;\n  /**\n   * The print-designed PDF leave-behind, when one was rendered.\n   *\n   * Optional on purpose: rendering it needs a live page and a headless browser,\n   * and neither is worth losing a delivered report over. Absent, the email goes\n   * exactly as it did before — the HTML sheet and the link — and the caller has\n   * already recorded a warning saying why.\n   */\n  pdf?: Buffer | null;\n  /** Defaults to `defaultResendClient()`. */\n  client?: ResendClient;\n  /** Test seam for the ATTACHMENT content only (production omits it and gets\n   *  the real `renderProspectReport` output `buildAuditEmail` already\n   *  computed) — lets a test of this function's sending mechanics (recipients,\n   *  idempotency key, attachment shape) skip re-deriving the full report. */\n  renderReport?: (result: ProspectAuditResult) => string;\n};\n\nexport type SendAuditEmailResult =\n  { sent: true; messageId: string; recipients: string[] } | { sent: false; reason: string };\n\n/**\n * Send the audit sheet with the full rendered report attached as an `.html`\n * file (base64), so the sheet survives independently of the link and of\n * Turso. Empty `recipients` is a legitimate, non-exceptional outcome (no\n * `PROSPECT_AUDIT_RECIPIENTS` configured) — returns `{sent:false}` rather\n * than throwing, so a caller can report it as a warning; a genuine send\n * failure (a throwing `client.send`) still propagates as a real exception.\n */\nexport async function sendAuditEmail(\n  result: ProspectAuditResult,\n  opts: SendAuditEmailOptions,\n): Promise<SendAuditEmailResult> {\n  if (opts.recipients.length === 0) {\n    return {\n      sent: false,\n      reason: \"no recipients configured (PROSPECT_AUDIT_RECIPIENTS is unset or empty)\",\n    };\n  }\n\n  const built = buildAuditEmail(result, { link: opts.link });\n  const attachmentHtml = opts.renderReport ? opts.renderReport(result) : built.attachmentHtml;\n  const client = opts.client ?? defaultResendClient();\n  const idempotencyKey = `prospect-audit:${opts.auditId ?? `${result.url}#${result.generatedAt}`}`;\n  const filename = `prospect-audit-${slugify(hostnameOf(result.url))}.html`;\n\n  const { messageId } = await client.send({\n    from: FROM_ADDRESS,\n    to: opts.recipients,\n    subject: built.subject,\n    html: built.html,\n    attachments: [\n      {\n        filename,\n        content: Buffer.from(attachmentHtml, \"utf-8\").toString(\"base64\"),\n        contentType: \"text/html\",\n      },\n      // The PDF goes second so the HTML sheet stays the first attachment it has\n      // always been, and appears only when one was actually rendered — an empty\n      // or broken attachment is worse than none.\n      ...(opts.pdf\n        ? [\n            {\n              filename: filename.replace(/\\.html$/, \".pdf\"),\n              content: opts.pdf.toString(\"base64\"),\n              contentType: \"application/pdf\",\n            },\n          ]\n        : []),\n    ],\n    idempotencyKey,\n  });\n\n  return { sent: true, messageId, recipients: opts.recipients };\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,IAAM,eAAe;AAErB,IAAM,eAA8C,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,EAAE;AAIjF,IAAM,gBAAgB;AAetB,SAAS,YAAY,QAAqC;AACxD,SAAO,OAAO,gBAAgB,OAAO,aAAa,KAAK,IACnD,OAAO,eACP,WAAW,OAAO,GAAG;AAC3B;AAWA,SAAS,YAAY,GAAmB;AACtC,SAAO,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACrC;AAIA,SAAS,cAAc,KAAqB;AAC1C,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,MAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,SAAO,EAAE,mBAAmB,SAAS;AAAA,IACnC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,UAAU;AAAA,EACZ,CAAC;AACH;AAmBA,SAAS,iBAAiB,QAAgD;AACxE,QAAM,QAA2B,CAAC;AAElC,MAAI,CAAC,OAAO,OAAO,IAAI;AACrB,UAAM,KAAK;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,kCAA6B,OAAO,OAAO,KAAK;AAAA,IAC1D,CAAC;AACD,UAAM,KAAK;AAAA,MACT,OAAO;AAAA,MACP,QAAQ,kCAA6B,OAAO,OAAO,KAAK;AAAA,IAC1D,CAAC;AAAA,EACH,OAAO;AACL,UAAM,IAAI,OAAO,OAAO;AACxB,QAAI,OAAO,OAAO,gBAAgB,MAAM;AACtC,YAAM,KAAK;AAAA,QACT,OAAO;AAAA,QACP,QAAQ,CAAC,EAAE,wBACP,uEACA;AAAA,MACN,CAAC;AAAA,IACH;AACA,QAAI,OAAO,OAAO,gBAAgB,MAAM;AACtC,YAAM,KAAK;AAAA,QACT,OAAO;AAAA,QACP,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,WAAW,IAAI;AACzB,UAAM,KAAK,EAAE,OAAO,cAAc,QAAQ,OAAO,WAAW,MAAM,CAAC;AAAA,EACrE;AAEA,MAAI,CAAC,OAAO,QAAQ,IAAI;AACtB,UAAM,KAAK,EAAE,OAAO,WAAW,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAAA,EAC/D,WAAW,OAAO,OAAO,YAAY,MAAM;AACzC,UAAM,KAAK,EAAE,OAAO,WAAW,QAAQ,8CAA8C,CAAC;AAAA,EACxF;AAIA,MAAI,CAAC,OAAO,OAAO,IAAI;AACrB,UAAM,KAAK,EAAE,OAAO,qBAAqB,QAAQ,OAAO,OAAO,MAAM,CAAC;AAAA,EACxE,WAAW,OAAO,OAAO,iBAAiB,MAAM;AAC9C,UAAM,KAAK,EAAE,OAAO,qBAAqB,QAAQ,yCAAyC,CAAC;AAAA,EAC7F;AAEA,SAAO;AACT;AAMA,IAAM,eAA8E;AAAA,EAClF,EAAE,KAAK,eAAe,OAAO,cAAc;AAAA,EAC3C,EAAE,KAAK,eAAe,OAAO,cAAc;AAAA,EAC3C,EAAE,KAAK,WAAW,OAAO,UAAU;AACrC;AAEA,SAAS,gBAAgB,QAA+C;AACtE,QAAM,QAAQ,aAAa,IAAI,CAAC,EAAE,KAAK,MAAM,MAAM;AACjD,UAAM,QAAQ,OAAO,GAAG;AACxB,UAAM,UAAU,UAAU,OAAO,iBAAiB,OAAO,KAAK;AAC9D,UAAM,aACJ,UAAU,OAAO,kCAAkC;AACrD,WAAO;AAAA,oCACyB,UAAU,KAAK,WAAW,OAAO,CAAC;AAAA,gHAC0C,WAAW,KAAK,CAAC;AAAA;AAAA,EAE/H,CAAC,EAAE,KAAK,EAAE;AACV,SAAO,kFAAkF,KAAK;AAChG;AAEA,SAAS,gBAAgB,OAAkC;AACzD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,QAAQ,MACX,IAAI,CAAC,MAAM,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,MAAM,CAAC,OAAO,EACvF,KAAK,EAAE;AACV,SAAO,0GAA0G,KAAK;AACxH;AAIA,SAAS,UAAU,SAA6C;AAC9D,MAAI,CAAC,QAAQ,IAAI;AACf,WAAO,uEAAkE,WAAW,QAAQ,KAAK,CAAC;AAAA,EACpG;AACA,QAAM,MAAM,CAAC,GAAG,QAAQ,KAAK,KAAK,EAC/B,KAAK,CAAC,GAAG,MAAM,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,CAAC,EAC9D,MAAM,GAAG,aAAa;AACzB,MAAI,IAAI,WAAW,GAAG;AACpB,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,IACX;AAAA,IACC,CAAC,MACC,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,GAAG,CAAC,kCAAkC,WAAW,EAAE,MAAM,CAAC,YAAY,WAAW,EAAE,MAAM,CAAC;AAAA,EAC5J,EACC,KAAK,EAAE;AACV,SAAO,iDAAiD,KAAK;AAC/D;AAEA,SAAS,SAAS,MAA6B;AAC7C,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,QAAM,OAAO,QAAQ,IAAI;AACzB,SAAO,sEAAsE,WAAW,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC;AACpH;AAOA,IAAM,gBAAgB;AAAA;AAAA;AAAA;AAiBf,SAAS,gBACd,QACA,MACmB;AACnB,QAAM,OAAO,YAAY,MAAM;AAC/B,QAAM,UAAU,yBAAoB,YAAY,IAAI,CAAC;AAErD,QAAM,OAAO;AAAA;AAAA;AAAA;AAAA,qEAIiD,WAAW,IAAI,CAAC;AAAA;AAAA,eAEjE,WAAW,QAAQ,OAAO,GAAG,CAAC,CAAC,KAAK,WAAW,OAAO,GAAG,CAAC,qBAAkB,WAAW,cAAc,OAAO,WAAW,CAAC,CAAC;AAAA;AAAA,IAEpI,gBAAgB,OAAO,MAAM,CAAC;AAAA,IAC9B,gBAAgB,iBAAiB,MAAM,CAAC,CAAC;AAAA;AAAA,IAEzC,UAAU,OAAO,OAAO,CAAC;AAAA,IACzB,SAAS,KAAK,IAAI,CAAC;AAAA,IACnB,aAAa;AAAA;AAAA;AAIf,SAAO,EAAE,SAAS,MAAM,gBAAgB,qBAAqB,MAAM,EAAE;AACvE;AAUO,SAAS,6BAA6B,KAA0C;AACrF,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,OAAiB,CAAC;AACxB,aAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;AACjC,UAAM,UAAU,KAAK,KAAK,EAAE,YAAY;AACxC,QAAI,CAAC,QAAS;AACd,QAAI,KAAK,IAAI,OAAO,EAAG;AACvB,SAAK,IAAI,OAAO;AAChB,SAAK,KAAK,OAAO;AAAA,EACnB;AACA,SAAO;AACT;AAKA,SAAS,QAAQ,GAAmB;AAClC,QAAM,OAAO,EACV,YAAY,EACZ,QAAQ,iBAAiB,GAAG,EAC5B,QAAQ,YAAY,EAAE;AACzB,SAAO,QAAQ;AACjB;AA8CA,eAAsB,eACpB,QACA,MAC+B;AAC/B,MAAI,KAAK,WAAW,WAAW,GAAG;AAChC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,QAAQ,gBAAgB,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC;AACzD,QAAM,iBAAiB,KAAK,eAAe,KAAK,aAAa,MAAM,IAAI,MAAM;AAC7E,QAAM,SAAS,KAAK,UAAU,oBAAoB;AAClD,QAAM,iBAAiB,kBAAkB,KAAK,WAAW,GAAG,OAAO,GAAG,IAAI,OAAO,WAAW,EAAE;AAC9F,QAAM,WAAW,kBAAkB,QAAQ,WAAW,OAAO,GAAG,CAAC,CAAC;AAElE,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK;AAAA,IACtC,MAAM;AAAA,IACN,IAAI,KAAK;AAAA,IACT,SAAS,MAAM;AAAA,IACf,MAAM,MAAM;AAAA,IACZ,aAAa;AAAA,MACX;AAAA,QACE;AAAA,QACA,SAAS,OAAO,KAAK,gBAAgB,OAAO,EAAE,SAAS,QAAQ;AAAA,QAC/D,aAAa;AAAA,MACf;AAAA;AAAA;AAAA;AAAA,MAIA,GAAI,KAAK,MACL;AAAA,QACE;AAAA,UACE,UAAU,SAAS,QAAQ,WAAW,MAAM;AAAA,UAC5C,SAAS,KAAK,IAAI,SAAS,QAAQ;AAAA,UACnC,aAAa;AAAA,QACf;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO,EAAE,MAAM,MAAM,WAAW,YAAY,KAAK,WAAW;AAC9D;","names":[]}

package/dist/{ensure-site-FU6527OU.js → ensure-site-NSNY2QHN.js}

@@ -66,7 +66,7 @@ async function runEnsureSiteCommand(slug, opts) {
   if (!slug) return { output: "Provide a <slug> (e.g. `ensure-site roalson`).", code: 2 };
   try {
     const base = openBase(readAirtableConfig());
-    const { makeSiteMirror } = await import("./site-mirror-Q763PLGG.js");
+    const { makeSiteMirror } = await import("./site-mirror-RQTEAID5.js");
     const result = await ensureSite(
       base,
       {
@@ -93,4 +93,4 @@ async function runEnsureSiteCommand(slug, opts) {
 export {
   runEnsureSiteCommand
 };
-//# sourceMappingURL=ensure-site-FU6527OU.js.map
+//# sourceMappingURL=ensure-site-NSNY2QHN.js.map

package/dist/{fleet-state-R5LU7IC3.js → fleet-state-3LQUQHYD.js}

@@ -15,7 +15,7 @@ import {
   mirrorSiteFields,
   mirrorSiteInsert,
   storeRenderedHtml
-} from "./chunk-GQDDWYU2.js";
+} from "./chunk-QBAAZY7W.js";
 import "./chunk-P6AORG32.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
@@ -38,4 +38,4 @@ export {
   mirrorSiteInsert,
   storeRenderedHtml
 };
-//# sourceMappingURL=fleet-state-R5LU7IC3.js.map
+//# sourceMappingURL=fleet-state-3LQUQHYD.js.map

package/dist/{forms-notify-target-SGDGXXK5.js → forms-notify-target-LYSKME5L.js}

@@ -143,7 +143,7 @@ async function runFormsNotifyTargetCommand(site, opts) {
     return { output: `--set must be 'on' or 'off' (got '${opts.set}')`, code: 2 };
   }
   try {
-    const { makeSiteMirror } = await import("./site-mirror-Q763PLGG.js");
+    const { makeSiteMirror } = await import("./site-mirror-RQTEAID5.js");
     const result = await formsNotifyTarget({
       siteMirror: await makeSiteMirror(),
       site: site.trim(),
@@ -163,4 +163,4 @@ export {
   formatNotifyTarget,
   runFormsNotifyTargetCommand
 };
-//# sourceMappingURL=forms-notify-target-SGDGXXK5.js.map
+//# sourceMappingURL=forms-notify-target-LYSKME5L.js.map

package/dist/freeze-A6MUCZU4.js

@@ -0,0 +1,9 @@
+import {
+  TURSO_IS_AUTHORITATIVE,
+  mirrorWrite
+} from "./chunk-SVAAONYB.js";
+export {
+  TURSO_IS_AUTHORITATIVE,
+  mirrorWrite
+};
+//# sourceMappingURL=freeze-A6MUCZU4.js.map

package/dist/{github-signals-DB25UWY4.js → github-signals-4YML6NY5.js}

@@ -3,9 +3,9 @@ import {
 } from "./chunk-PZQ3WED2.js";
 import {
   formatFleetWriteSummary
-} from "./chunk-6UCVWYDA.js";
-import "./chunk-RUPPWAD6.js";
+} from "./chunk-QLIUDTY6.js";
 import "./chunk-7BZUOZPU.js";
+import "./chunk-SVAAONYB.js";
 import {
   detectSignalEvents,
   fleetSweptEvent
@@ -91,7 +91,7 @@ async function runGitHubSignalsCommand(opts, deps = {}) {
   );
   const sweptAt = (/* @__PURE__ */ new Date()).toISOString();
   const makeMirror = deps.makeMirror ?? (async () => {
-    const { makeHealthMirrorBestEffort } = await import("./health-mirror-GCDN7BJL.js");
+    const { makeHealthMirrorBestEffort } = await import("./health-mirror-7LKC7Q5Z.js");
     return makeHealthMirrorBestEffort();
   });
   const mirror = await makeMirror();
@@ -156,4 +156,4 @@ export {
   githubSignalsExitCode,
   runGitHubSignalsCommand
 };
-//# sourceMappingURL=github-signals-DB25UWY4.js.map
+//# sourceMappingURL=github-signals-4YML6NY5.js.map

package/dist/{health-mirror-GCDN7BJL.js → health-mirror-7LKC7Q5Z.js}

@@ -1,10 +1,10 @@
-import {
-  TURSO_IS_AUTHORITATIVE
-} from "./chunk-RUPPWAD6.js";
 import {
   mirrorHealthFields,
   mirrorScheduleFields
-} from "./chunk-GQDDWYU2.js";
+} from "./chunk-QBAAZY7W.js";
+import {
+  TURSO_IS_AUTHORITATIVE
+} from "./chunk-SVAAONYB.js";
 import "./chunk-P6AORG32.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
@@ -43,4 +43,4 @@ export {
   makeHealthMirrorBestEffort,
   makeScheduleMirrorBestEffort
 };
-//# sourceMappingURL=health-mirror-GCDN7BJL.js.map
+//# sourceMappingURL=health-mirror-7LKC7Q5Z.js.map

package/dist/index.d.ts

@@ -129,6 +129,13 @@ type FormSubmitOutcome = {
      *  `elapsedMs` — is what the budget check must compare against. Undefined
      *  when no POST was observed. */
     postElapsedMs?: number;
+    /** The probe's filled values were wiped by a client re-render (2026-08-31:
+     *  a hydration mismatch on reddoor's /contact recreated the form subtree,
+     *  discarding the fills AND the injected hidden fields, so the click hit an
+     *  empty form and native `required` validation blocked the submit) and were
+     *  re-filled once before the click. On a pass this is production proof the
+     *  wipe happens; on a failure it says one refill wasn't enough. */
+    refilled?: boolean;
 } | {
     testModeUndeclared: true;
 };
@@ -1006,10 +1013,8 @@ interface ReportsTable {
  *
  *  `rendered_html` stays deliberately OUT even though the drafting path now
  *  writes it: bodies go through `storeRenderedHtml`, so a request handler
- *  holding a patch cannot accidentally write megabytes of HTML. `sent_at` and
- *  `resend_message_id` stay out because nothing but the send batch writes them
- *  and the hourly sync converges those. */
-type ReportMirrorPatch = Partial<Pick<ReportsTable, "approved_to_send" | "approved_at" | "approved_by" | "send_override" | "override_reason" | "override_by" | "override_at" | "delivery_status" | "commentary" | "draft_ready" | "lighthouse_performance" | "lighthouse_accessibility" | "lighthouse_best_practices" | "lighthouse_seo" | "ga_users_current" | "ga_users_previous" | "search_found_page1" | "search_position" | "completed_on">>;
+ *  holding a patch cannot accidentally write megabytes of HTML. */
+type ReportMirrorPatch = Partial<Pick<ReportsTable, "approved_to_send" | "approved_at" | "approved_by" | "send_override" | "override_reason" | "override_by" | "override_at" | "delivery_status" | "commentary" | "draft_ready" | "lighthouse_performance" | "lighthouse_accessibility" | "lighthouse_best_practices" | "lighthouse_seo" | "ga_users_current" | "ga_users_previous" | "search_found_page1" | "search_position" | "completed_on" | "sent_at" | "resend_message_id">>;
 
 /** #539 Phase 5: the Turso write-through for the Reports write surface.
  *
@@ -1255,6 +1260,13 @@ type OrchestrateOptions = {
      *  updates. Injected rather than defaulted — this function is called directly
      *  by tests, and a default would open a real libSQL handle inside the suite. */
     siteMirror?: SiteMirror;
+    /** #643 (the freeze): Turso write-through for the `Sent at` / `Resend message
+     *  ID` stamp. stampSent is what removes a row from listSendableReports, so
+     *  once it lands there is no replay left to converge a lost mirror — and the
+     *  console's already-sent guards (approve, the commentary lock, re-render)
+     *  read `sent_at` from Turso. Injected like siteMirror; the CLI wires it
+     *  through `mirrorWrite` so the freeze switch owns the error semantics. */
+    reportSentMirror?: (reportId: string, sentAt: Date, messageId: string | null) => Promise<void>;
 };
 declare function sendApprovedReports(options?: OrchestrateOptions): Promise<{
     output: string;

package/dist/index.js

@@ -1,18 +1,23 @@
 import "./chunk-2SLED3NB.js";
 import {
   draftReportForSite
-} from "./chunk-J3WEZGIN.js";
+} from "./chunk-ZRI5VRPG.js";
+import "./chunk-YFAXOD7Z.js";
+import {
+  upgradeSvelte4to5
+} from "./chunk-Z3KYFUN6.js";
 import {
   DEFAULT_INIT_STEPS,
   a11yFixturesPage,
   init
-} from "./chunk-XSOINOPY.js";
+} from "./chunk-62NYED6E.js";
 import {
   convertToPnpm
 } from "./chunk-XIDUYLSR.js";
 import {
   svelteCodemods
 } from "./chunk-IYSEC543.js";
+import "./chunk-J7SZQUCW.js";
 import "./chunk-BQRFQSGY.js";
 import "./chunk-Y53WOQIJ.js";
 import {
@@ -20,19 +25,14 @@ import {
   selfCaretRange,
   selfPackageVersion
 } from "./chunk-7RJ2HMMJ.js";
-import "./chunk-YFAXOD7Z.js";
 import {
   bumpDeps
 } from "./chunk-2NJQLSEU.js";
 import "./chunk-R53VL3RI.js";
-import {
-  upgradeSvelte4to5
-} from "./chunk-Z3KYFUN6.js";
-import "./chunk-J7SZQUCW.js";
-import "./chunk-WPL5GERE.js";
+import "./chunk-ZOCJBJQV.js";
 import {
   approveBlockers
-} from "./chunk-6I6L3CMX.js";
+} from "./chunk-KGUKL3CV.js";
 import {
   findDueReports
 } from "./chunk-PZR4EBPY.js";
@@ -40,12 +40,12 @@ import {
   parseAddresses,
   sendApprovedReports,
   withGlobalCc
-} from "./chunk-DGZWFI2G.js";
-import "./chunk-BRYXFH77.js";
-import "./chunk-NYUYNYQL.js";
+} from "./chunk-VBEKL445.js";
 import {
   isPendingApproval
 } from "./chunk-F3JWOPTG.js";
+import "./chunk-BRYXFH77.js";
+import "./chunk-NYUYNYQL.js";
 import {
   checklistFor,
   gatingFields,
@@ -56,14 +56,8 @@ import {
 } from "./chunk-PR343K7F.js";
 import "./chunk-IY6256GK.js";
 import "./chunk-HN6I2XWI.js";
-import "./chunk-XP5WM2LV.js";
+import "./chunk-SKI23ZZH.js";
 import "./chunk-GECESMVS.js";
-import {
-  domainFromUrl,
-  generateHeaderImage,
-  loadHeadline,
-  loadPlate
-} from "./chunk-5UINJNAJ.js";
 import {
   BLURRED_CID,
   CHECK_CID,
@@ -71,6 +65,12 @@ import {
   renderReportHtml,
   rendersCommentary
 } from "./chunk-KJGKZLCT.js";
+import {
+  domainFromUrl,
+  generateHeaderImage,
+  loadHeadline,
+  loadPlate
+} from "./chunk-5UINJNAJ.js";
 import {
   escapeHtml,
   safeUrl
@@ -84,9 +84,9 @@ import {
 import "./chunk-WEKL2HYJ.js";
 import {
   syncConfigs
-} from "./chunk-7UAYMAKR.js";
-import "./chunk-73UFRZKY.js";
+} from "./chunk-3VQWSE3F.js";
 import "./chunk-3G25KIWW.js";
+import "./chunk-73UFRZKY.js";
 import "./chunk-OTGB6YQO.js";
 import {
   ALL_AUDIT_NAMES,
@@ -96,7 +96,7 @@ import {
   runAudits,
   runAuditsAcross,
   securityAudit
-} from "./chunk-B23FFWU4.js";
+} from "./chunk-AEXJDCJN.js";
 import "./chunk-LKGVSM2O.js";
 import "./chunk-GASBX52O.js";
 import "./chunk-XHHMM5HX.js";

package/dist/{init-32AWPS7A.js → init-NHKADHB6.js}

@@ -8,19 +8,19 @@ import {
 } from "./chunk-Q47DU255.js";
 import {
   init
-} from "./chunk-XSOINOPY.js";
+} from "./chunk-62NYED6E.js";
 import "./chunk-XIDUYLSR.js";
 import "./chunk-IYSEC543.js";
+import "./chunk-J7SZQUCW.js";
 import "./chunk-BQRFQSGY.js";
 import "./chunk-Y53WOQIJ.js";
 import "./chunk-7RJ2HMMJ.js";
 import "./chunk-R53VL3RI.js";
-import "./chunk-J7SZQUCW.js";
-import "./chunk-7UAYMAKR.js";
-import "./chunk-73UFRZKY.js";
+import "./chunk-3VQWSE3F.js";
 import "./chunk-3G25KIWW.js";
+import "./chunk-73UFRZKY.js";
 import "./chunk-OTGB6YQO.js";
-import "./chunk-B23FFWU4.js";
+import "./chunk-AEXJDCJN.js";
 import "./chunk-LKGVSM2O.js";
 import "./chunk-GASBX52O.js";
 import "./chunk-XHHMM5HX.js";
@@ -110,4 +110,4 @@ async function runInitCommand(site, opts) {
 export {
   runInitCommand
 };
-//# sourceMappingURL=init-32AWPS7A.js.map
+//# sourceMappingURL=init-NHKADHB6.js.map

package/dist/{launch-52WUE4TZ.js → launch-VQJ4Z35C.js}

@@ -4,12 +4,12 @@ import {
 import "./chunk-MNDIED4M.js";
 import {
   writeAuditsToAirtable
-} from "./chunk-6UCVWYDA.js";
-import "./chunk-RUPPWAD6.js";
+} from "./chunk-QLIUDTY6.js";
 import {
   hasRealScores,
   lighthouseScoresFromResult
 } from "./chunk-7BZUOZPU.js";
+import "./chunk-SVAAONYB.js";
 import {
   resolveSites
 } from "./chunk-Q47DU255.js";
@@ -42,7 +42,7 @@ import {
 import "./chunk-73UFRZKY.js";
 import {
   runAudits
-} from "./chunk-B23FFWU4.js";
+} from "./chunk-AEXJDCJN.js";
 import "./chunk-LKGVSM2O.js";
 import "./chunk-GASBX52O.js";
 import "./chunk-XHHMM5HX.js";
@@ -241,8 +241,8 @@ async function runLaunchCommand(site, opts) {
   if (!target) {
     return { output: `No site resolved for "${site}".`, code: 1 };
   }
-  const { makeReportMirror } = await import("./report-mirror-AAK3MXHY.js");
-  const { makeSiteMirror } = await import("./site-mirror-Q763PLGG.js");
+  const { makeReportMirror } = await import("./report-mirror-3ENU6OOK.js");
+  const { makeSiteMirror } = await import("./site-mirror-RQTEAID5.js");
   const result = await launch(target, {
     reportMirror: await makeReportMirror(),
     siteMirror: await makeSiteMirror()
@@ -252,4 +252,4 @@ async function runLaunchCommand(site, opts) {
 export {
   runLaunchCommand
 };
-//# sourceMappingURL=launch-52WUE4TZ.js.map
+//# sourceMappingURL=launch-VQJ4Z35C.js.map

package/dist/{orchestrate-JNKCWU5K.js → orchestrate-6HROYTM6.js}

@@ -4,15 +4,15 @@ import {
   parseAddresses,
   sendApprovedReports,
   withGlobalCc
-} from "./chunk-DGZWFI2G.js";
+} from "./chunk-VBEKL445.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
 import "./chunk-IY6256GK.js";
 import "./chunk-HN6I2XWI.js";
-import "./chunk-XP5WM2LV.js";
+import "./chunk-SKI23ZZH.js";
 import "./chunk-GECESMVS.js";
-import "./chunk-5UINJNAJ.js";
 import "./chunk-KJGKZLCT.js";
+import "./chunk-5UINJNAJ.js";
 import "./chunk-BGTYPVLT.js";
 import "./chunk-7NYN2P6I.js";
 import "./chunk-WEKL2HYJ.js";
@@ -28,4 +28,4 @@ export {
   sendApprovedReports,
   withGlobalCc
 };
-//# sourceMappingURL=orchestrate-JNKCWU5K.js.map
+//# sourceMappingURL=orchestrate-6HROYTM6.js.map

package/dist/{parity-NBYZUBFU.js → parity-623WNFZG.js}

@@ -1,8 +1,8 @@
 import {
   checkFleetParity,
   formatParityResult
-} from "./chunk-7FFUBF4I.js";
-import "./chunk-GQDDWYU2.js";
+} from "./chunk-AX22DH6S.js";
+import "./chunk-QBAAZY7W.js";
 import "./chunk-P6AORG32.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
@@ -11,4 +11,4 @@ export {
   checkFleetParity,
   formatParityResult
 };
-//# sourceMappingURL=parity-NBYZUBFU.js.map
+//# sourceMappingURL=parity-623WNFZG.js.map

package/dist/{pipeline-YIBIQ7XK.js → pipeline-MQJD4CKN.js}

@@ -1,12 +1,16 @@
 import {
   ANALYZE_SKIPPED,
   PROBES_SKIPPED,
+  envAnalyzeDeps,
+  envEngines,
   runProspectAudit
-} from "./chunk-CEW5PEHZ.js";
+} from "./chunk-DXKF552B.js";
 import "./chunk-RARREDQE.js";
 export {
   ANALYZE_SKIPPED,
   PROBES_SKIPPED,
+  envAnalyzeDeps,
+  envEngines,
   runProspectAudit
 };
-//# sourceMappingURL=pipeline-YIBIQ7XK.js.map
+//# sourceMappingURL=pipeline-MQJD4CKN.js.map

package/dist/{preflight-IMTYDDD4.js → preflight-LIN5NCYU.js}

@@ -1,16 +1,16 @@
 import {
   preflight
-} from "./chunk-6I6L3CMX.js";
+} from "./chunk-KGUKL3CV.js";
 import "./chunk-PZR4EBPY.js";
-import "./chunk-DGZWFI2G.js";
+import "./chunk-VBEKL445.js";
 import "./chunk-F3JWOPTG.js";
 import "./chunk-VAD43MOR.js";
 import "./chunk-IY6256GK.js";
 import "./chunk-HN6I2XWI.js";
-import "./chunk-XP5WM2LV.js";
+import "./chunk-SKI23ZZH.js";
 import "./chunk-GECESMVS.js";
-import "./chunk-5UINJNAJ.js";
 import "./chunk-KJGKZLCT.js";
+import "./chunk-5UINJNAJ.js";
 import "./chunk-BGTYPVLT.js";
 import "./chunk-7NYN2P6I.js";
 import "./chunk-WEKL2HYJ.js";
@@ -67,4 +67,4 @@ async function runPreflightCommand(site, opts) {
 export {
   runPreflightCommand
 };
-//# sourceMappingURL=preflight-IMTYDDD4.js.map
+//# sourceMappingURL=preflight-LIN5NCYU.js.map

package/dist/{prismic-ci-MY2U6NN7.js → prismic-ci-PZ5LCPWT.js}

@@ -1,10 +1,10 @@
+import {
+  runRecipeOverSites
+} from "./chunk-VPJ7N6P7.js";
 import {
   noWorkingTreeFailure,
   readPrismicConfig
 } from "./chunk-VNB5XBQ4.js";
-import {
-  runRecipeOverSites
-} from "./chunk-VPJ7N6P7.js";
 import {
   appendSkipNotice,
   fleetWorkdir,
@@ -444,4 +444,4 @@ export {
   formatPrismicCiResults,
   runPrismicCiCommand
 };
-//# sourceMappingURL=prismic-ci-MY2U6NN7.js.map
+//# sourceMappingURL=prismic-ci-PZ5LCPWT.js.map