@reddoorla/maintenance 0.90.1 → 0.91.0

package/dist/{chunk-WS6NU475.js → chunk-22GKJO5F.js}

@@ -1,6 +1,6 @@
 import {
   runMigrations
-} from "./chunk-MFHS7IQ2.js";
+} from "./chunk-OCNSIBMP.js";
 import {
   defaultCredentialsPath
 } from "./chunk-6VAL7XJT.js";
@@ -48,4 +48,4 @@ export {
   readDbConfig,
   openDb
 };
-//# sourceMappingURL=chunk-WS6NU475.js.map
+//# sourceMappingURL=chunk-22GKJO5F.js.map

package/dist/{chunk-NYUYNYQL.js → chunk-7MKT4I5T.js}

@@ -9,6 +9,18 @@ function isValidToken(s) {
 function newProspectAuditId() {
   return `pa_${crypto.randomUUID()}`;
 }
+function siteKey(url) {
+  const raw = url.trim();
+  if (raw === "") return "";
+  try {
+    const u = new URL(/^[a-z][a-z0-9+.-]*:\/\//i.test(raw) ? raw : `https://${raw}`);
+    const host = u.hostname.toLowerCase().replace(/^www\./, "");
+    const path = u.pathname.replace(/\/+$/, "");
+    return `${host}${path}`;
+  } catch {
+    return raw;
+  }
+}
 async function createProspectAudit(db, audit) {
   const id = newProspectAuditId();
   const token = generateToken();
@@ -16,6 +28,7 @@ async function createProspectAudit(db, audit) {
     id,
     token,
     url: audit.url,
+    site_key: siteKey(audit.url),
     business: audit.business,
     created_at: (/* @__PURE__ */ new Date()).toISOString(),
     status: audit.status ?? "complete",
@@ -40,9 +53,10 @@ export {
   generateToken,
   isValidToken,
   newProspectAuditId,
+  siteKey,
   createProspectAudit,
   getProspectAuditByToken,
   MAX_RECENT_PROSPECT_AUDITS,
   listRecentProspectAudits
 };
-//# sourceMappingURL=chunk-NYUYNYQL.js.map
+//# sourceMappingURL=chunk-7MKT4I5T.js.map

package/dist/chunk-7MKT4I5T.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/prospect-audits.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport type { Db } from \"./client.js\";\n\n/** 16 random bytes → 22-char base64url string: unguessable, URL-safe. */\nexport function generateToken(): string {\n  return randomBytes(16).toString(\"base64url\");\n}\n\n/** Anything not exactly generateToken()-shaped is a probe, not a report. */\nexport function isValidToken(s: string): boolean {\n  return /^[A-Za-z0-9_-]{22}$/.test(s);\n}\n\n/** Opaque, collision-free id (mirrors newSubmissionId / newDeadLetterId).\n *  crypto is a Node 20 global — no new dep. Nothing reads this format; `token`\n *  is the public handle. */\nexport function newProspectAuditId(): string {\n  return `pa_${crypto.randomUUID()}`;\n}\n\n/** \"complete\" when every pipeline stage succeeded; \"partial\" when any stage\n *  failed or was deliberately skipped (StageResult's `ok: false` covers\n *  both — the pipeline doesn't distinguish them at this layer). The report\n *  itself already degrades each failed section to \"not measured\"; this is\n *  what lets a future dashboard tell complete from partial without\n *  deserializing the whole result_json. */\nexport type ProspectAuditStatus = \"complete\" | \"partial\";\n\n/**\n * The lineage handle for a site: one key for every way of writing its address.\n *\n * `url` is kept exactly as it was given, because what we audited is a fact\n * about the run. It is the wrong thing to group by, though, and the corpus\n * already proves it — `beachfrontdentistry.com` and `beachfrontdentistry.com/`\n * are two separate histories in the table today, as are the two spellings of\n * ludlowkingsley.com. Nothing has broken only because nothing yet compares two\n * audits of one site. The moment the report offers a before and an after, a\n * trailing slash turns a returning client into a stranger.\n *\n * Scheme, a leading \"www.\", a trailing slash, a query string and a fragment all\n * go: none of them distinguish one site from another. The path stays, because a\n * site living in a subdirectory genuinely is a different site.\n *\n * Never throws. A key we cannot compute must not take an audit down with it —\n * an unparseable input falls back to its trimmed self, which groups nothing and\n * so is no worse than having no key at all.\n */\nexport function siteKey(url: string): string {\n  const raw = url.trim();\n  if (raw === \"\") return \"\";\n  try {\n    const u = new URL(/^[a-z][a-z0-9+.-]*:\\/\\//i.test(raw) ? raw : `https://${raw}`);\n    const host = u.hostname.toLowerCase().replace(/^www\\./, \"\");\n    const path = u.pathname.replace(/\\/+$/, \"\");\n    return `${host}${path}`;\n  } catch {\n    return raw;\n  }\n}\n\nexport type NewProspectAudit = {\n  url: string;\n  business: string | null;\n  resultJson: string;\n  /** Defaults to \"complete\" — the column's own SQL default — for callers\n   *  (tests, ad-hoc scripts) that don't track per-stage outcomes. The\n   *  prospect-audit CLI, the only real writer, always computes and passes\n   *  this explicitly. */\n  status?: ProspectAuditStatus;\n};\n\nexport async function createProspectAudit(\n  db: Db,\n  audit: NewProspectAudit,\n): Promise<{ id: string; token: string }> {\n  const id = newProspectAuditId();\n  const token = generateToken();\n  await db\n    .insertInto(\"prospect_audits\")\n    .values({\n      id,\n      token,\n      url: audit.url,\n      site_key: siteKey(audit.url),\n      business: audit.business,\n      created_at: new Date().toISOString(),\n      status: audit.status ?? \"complete\",\n      result_json: audit.resultJson,\n    })\n    .execute();\n  return { id, token };\n}\n\nexport type ProspectAuditRow = {\n  id: string;\n  url: string;\n  business: string | null;\n  created_at: string;\n  status: string;\n  result_json: string;\n};\n\nexport async function getProspectAuditByToken(\n  db: Db,\n  token: string,\n): Promise<ProspectAuditRow | null> {\n  const row = await db\n    .selectFrom(\"prospect_audits\")\n    .select([\"id\", \"url\", \"business\", \"created_at\", \"status\", \"result_json\"])\n    .where(\"token\", \"=\", token)\n    .executeTakeFirst();\n  return row ?? null;\n}\n\n/** The columns the cockpit's /audits listing page shows. Deliberately NOT\n *  `result_json` — large, and useless to a list — but `token` IS selected:\n *  the listing needs it to build each row's `/r/{token}` link, so it's\n *  rendered only into an href, never displayed as a raw value. */\nexport type ProspectAuditListItem = {\n  id: string;\n  token: string;\n  url: string;\n  business: string | null;\n  status: string;\n  created_at: string;\n};\n\n/** Ceiling on `listRecentProspectAudits`' `limit`, enforced defensively (a\n *  caller passing 10_000 must not get 10_000 rows) — well past anything a\n *  listing page would ever render on one screen. */\nexport const MAX_RECENT_PROSPECT_AUDITS = 100;\n\n/** Clamp a caller-supplied limit into [1, MAX_RECENT_PROSPECT_AUDITS], with a\n *  safe fallback of 1 for anything non-finite (NaN, ±Infinity) rather than\n *  letting a bad input reach the query unclamped. */\nfunction clampLimit(limit: number): number {\n  const n = Number.isFinite(limit) ? Math.trunc(limit) : 1;\n  return Math.min(Math.max(n, 1), MAX_RECENT_PROSPECT_AUDITS);\n}\n\n/** Newest-first audits for the cockpit's /audits listing page, capped both\n *  defensively (see clampLimit) and by an index (migration 0010) so the\n *  ORDER BY never falls back to a raw scan + a temp b-tree sort — see the\n *  EXPLAIN-query-plan gate, tests/db/query-plans.test.ts. */\nexport async function listRecentProspectAudits(\n  db: Db,\n  limit: number,\n): Promise<ProspectAuditListItem[]> {\n  return db\n    .selectFrom(\"prospect_audits\")\n    .select([\"id\", \"token\", \"url\", \"business\", \"status\", \"created_at\"])\n    .orderBy(\"created_at\", \"desc\")\n    .limit(clampLimit(limit))\n    .execute();\n}\n"],"mappings":";AAAA,SAAS,mBAAmB;AAIrB,SAAS,gBAAwB;AACtC,SAAO,YAAY,EAAE,EAAE,SAAS,WAAW;AAC7C;AAGO,SAAS,aAAa,GAAoB;AAC/C,SAAO,sBAAsB,KAAK,CAAC;AACrC;AAKO,SAAS,qBAA6B;AAC3C,SAAO,MAAM,OAAO,WAAW,CAAC;AAClC;AA6BO,SAAS,QAAQ,KAAqB;AAC3C,QAAM,MAAM,IAAI,KAAK;AACrB,MAAI,QAAQ,GAAI,QAAO;AACvB,MAAI;AACF,UAAM,IAAI,IAAI,IAAI,2BAA2B,KAAK,GAAG,IAAI,MAAM,WAAW,GAAG,EAAE;AAC/E,UAAM,OAAO,EAAE,SAAS,YAAY,EAAE,QAAQ,UAAU,EAAE;AAC1D,UAAM,OAAO,EAAE,SAAS,QAAQ,QAAQ,EAAE;AAC1C,WAAO,GAAG,IAAI,GAAG,IAAI;AAAA,EACvB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAaA,eAAsB,oBACpB,IACA,OACwC;AACxC,QAAM,KAAK,mBAAmB;AAC9B,QAAM,QAAQ,cAAc;AAC5B,QAAM,GACH,WAAW,iBAAiB,EAC5B,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA,KAAK,MAAM;AAAA,IACX,UAAU,QAAQ,MAAM,GAAG;AAAA,IAC3B,UAAU,MAAM;AAAA,IAChB,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,QAAQ,MAAM,UAAU;AAAA,IACxB,aAAa,MAAM;AAAA,EACrB,CAAC,EACA,QAAQ;AACX,SAAO,EAAE,IAAI,MAAM;AACrB;AAWA,eAAsB,wBACpB,IACA,OACkC;AAClC,QAAM,MAAM,MAAM,GACf,WAAW,iBAAiB,EAC5B,OAAO,CAAC,MAAM,OAAO,YAAY,cAAc,UAAU,aAAa,CAAC,EACvE,MAAM,SAAS,KAAK,KAAK,EACzB,iBAAiB;AACpB,SAAO,OAAO;AAChB;AAkBO,IAAM,6BAA6B;AAK1C,SAAS,WAAW,OAAuB;AACzC,QAAM,IAAI,OAAO,SAAS,KAAK,IAAI,KAAK,MAAM,KAAK,IAAI;AACvD,SAAO,KAAK,IAAI,KAAK,IAAI,GAAG,CAAC,GAAG,0BAA0B;AAC5D;AAMA,eAAsB,yBACpB,IACA,OACkC;AAClC,SAAO,GACJ,WAAW,iBAAiB,EAC5B,OAAO,CAAC,MAAM,SAAS,OAAO,YAAY,UAAU,YAAY,CAAC,EACjE,QAAQ,cAAc,MAAM,EAC5B,MAAM,WAAW,KAAK,CAAC,EACvB,QAAQ;AACb;","names":[]}

package/dist/{chunk-W45FZEGE.js → chunk-DMPHP7UP.js}

@@ -1,7 +1,7 @@
 import {
   openDb,
   readDbConfig
-} from "./chunk-WS6NU475.js";
+} from "./chunk-22GKJO5F.js";
 
 // src/db/fleet-events.ts
 async function recordFleetEvent(db, e) {
@@ -47,4 +47,4 @@ async function recordFleetEventsBestEffort(events, now, open = () => openDb(read
 export {
   recordFleetEventsBestEffort
 };
-//# sourceMappingURL=chunk-W45FZEGE.js.map
+//# sourceMappingURL=chunk-DMPHP7UP.js.map

package/dist/{chunk-KGUKL3CV.js → chunk-E22WAIF2.js}

@@ -5,7 +5,7 @@ import {
 import {
   isProbablyEmail,
   parseAddresses
-} from "./chunk-VBEKL445.js";
+} from "./chunk-FCS36FDT.js";
 import {
   listAllReports
 } from "./chunk-F3JWOPTG.js";
@@ -341,4 +341,4 @@ export {
   preflight,
   approveBlockers
 };
-//# sourceMappingURL=chunk-KGUKL3CV.js.map
+//# sourceMappingURL=chunk-E22WAIF2.js.map

package/dist/{chunk-VBEKL445.js → chunk-FCS36FDT.js}

@@ -27,7 +27,7 @@ import {
 } from "./chunk-WEKL2HYJ.js";
 import {
   recordFleetEventsBestEffort
-} from "./chunk-W45FZEGE.js";
+} from "./chunk-DMPHP7UP.js";
 
 // src/reports/send/idempotency.ts
 function isIdempotencyConflict(err) {
@@ -227,4 +227,4 @@ export {
   parseAddresses,
   isProbablyEmail
 };
-//# sourceMappingURL=chunk-VBEKL445.js.map
+//# sourceMappingURL=chunk-FCS36FDT.js.map

package/dist/{chunk-5PWB3JHJ.js → chunk-H6BLTEFN.js}

@@ -2,7 +2,7 @@ import {
   ANALYZE_SKIPPED,
   PROBES_SKIPPED,
   resolveBusinessName
-} from "./chunk-DXKF552B.js";
+} from "./chunk-WVVT6SJK.js";
 import {
   escapeHtml,
   safeUrl
@@ -55,6 +55,7 @@ var STYLES = `
   .tag { display: inline-block; font-size: 12px; letter-spacing: .06em; text-transform: uppercase;
     border-radius: 999px; padding: 2px 10px; border: 1px solid currentColor; }
   .yes { color: #14663c; } .partial { color: #8a6d00; } .no { color: ${RED}; }
+  .unknown { color: #8a857e; border-style: dashed; }
   ul { padding-left: 20px; } li { margin: 6px 0; }
   .muted { color: #8a857e; }
   .cta { margin-top: 56px; background: ${RED}; color: #fff; border-radius: 8px; padding: 24px 28px; }
@@ -136,22 +137,33 @@ function buildProbesSection(p, businessNameUsed) {
 function buildFindabilitySection(c) {
   const accessBlock = !c.crawlerAccessMeasured ? `<p class="muted">Crawler access: not measured \u2014 ${STAGE_FAILED_MESSAGE}.</p>` : c.crawlerAccess.blockedAi.length ? `<p><strong>Blocked AI crawlers:</strong> ${escapeHtml(
     c.crawlerAccess.blockedAi.map(describeAgent).join(", ")
-  )}</p>` : `<p>Every AI crawler we checked can reach the site.</p>`;
+  )}</p>` : (
+    // Says what was measured, which is robots.txt, and no more. "Every AI
+    // crawler can reach the site" was a claim robots.txt cannot support:
+    // a CDN's bot management enforces its own answer and can contradict the
+    // file without the owner knowing. Confirmed on a live prospect: its
+    // robots.txt blocked nothing relevant, and its CDN returned 403 to one
+    // named AI crawler on every request while serving a browser and two
+    // other crawlers normally. The report said they were fine.
+    `<p>Nothing in your robots.txt blocks the AI crawlers we checked.</p>`
+  );
   const classical = c.crawlerAccessMeasured && c.crawlerAccess.blockedClassical.length ? `<p><strong>Blocked search crawlers:</strong> ${escapeHtml(
     c.crawlerAccess.blockedClassical.join(", ")
   )}</p>` : "";
   const sitemapLine = c.sitemapMeasured ? `<li>sitemap.xml: ${c.sitemapPresent ? "present" : "missing"}</li>` : `<li>sitemap.xml: not measured \u2014 ${STAGE_FAILED_MESSAGE}.</li>`;
-  const llmsLine = c.llmsTxtMeasured ? `<li>llms.txt: ${c.llmsTxtPresent ? "present" : "missing"}</li>` : `<li>llms.txt: not measured \u2014 ${STAGE_FAILED_MESSAGE}.</li>`;
+  const llmsFootnote = `<p class="muted"><strong>A note on llms.txt.</strong> You may have been told to
+    add one. We check for it \u2014 this site ${!c.llmsTxtMeasured ? "could not be checked" : c.llmsTxtPresent ? "has one" : "does not"} \u2014 but we do not score it and we will not recommend it. It is a 2024 proposal that no
+    answer engine has committed to reading, and adding one has no measured effect on whether you
+    are cited. If that changes we will say so and score it then.</p>`;
   return `${accessBlock}${classical}
     <ul>
       ${sitemapLine}
-      ${llmsLine}
       <li>Pages missing a meta description: ${c.meta.missingDescription} of ${c.meta.pageCount}</li>
       <li>Pages missing a canonical URL: ${c.meta.missingCanonical} of ${c.meta.pageCount}</li>
       <li>Pages missing share images/titles: ${c.meta.missingSocial} of ${c.meta.pageCount}</li>
       <li>Security headers missing: ${c.securityHeaders.missing.length ? escapeHtml(c.securityHeaders.missing.join(", ")) : "none"}</li>
       ${c.meta.pagesWithoutExtract > 0 ? `<li><strong>${c.meta.pagesWithoutExtract}</strong> additional page${c.meta.pagesWithoutExtract === 1 ? "" : "s"} produced no readable content at all and ${c.meta.pagesWithoutExtract === 1 ? "is" : "are"} not counted in the ${c.meta.pageCount} pages above.</li>` : ""}
-    </ul>`;
+    </ul>${llmsFootnote}`;
 }
 function buildLighthouseBlock(lh) {
   return lh.ok ? `<p class="muted">Lighthouse \u2014 performance ${lh.data.performance ?? "not measured"},
@@ -168,15 +180,22 @@ function buildReadabilitySection(c) {
       ${c.meta.pagesWithoutExtract > 0 ? `<li><strong>${c.meta.pagesWithoutExtract}</strong> page${c.meta.pagesWithoutExtract === 1 ? "" : "s"} produced no extract at all \u2014 excluded from every figure above, not counted as readable or unreadable.</li>` : ""}
     </ul>`;
 }
+var ANSWERED_LABEL = {
+  yes: "yes",
+  partial: "partial",
+  no: "no",
+  unknown: "not measured"
+};
 function buildAnswersSection(a) {
   const rows = a.buyerQuestions.map((q) => {
     const answered = escapeHtml(q.answered);
+    const label = escapeHtml(ANSWERED_LABEL[q.answered] ?? q.answered);
     const evidenceText = q.evidence ? escapeHtml(q.evidence) : null;
     const evidenceHref = q.evidence && q.page ? safeUrl(q.page) : null;
-    const evidenceCell = evidenceText === null ? '<span class="muted">no passage on the site</span>' : evidenceHref && evidenceHref !== "#" ? `<a href="${escapeHtml(evidenceHref)}" target="_blank" rel="noopener noreferrer">${evidenceText}</a>` : evidenceText;
+    const evidenceCell = q.answered === "unknown" ? '<span class="muted">we did not get a verdict on this question</span>' : evidenceText === null ? '<span class="muted">no passage on the site</span>' : evidenceHref && evidenceHref !== "#" ? `<a href="${escapeHtml(evidenceHref)}" target="_blank" rel="noopener noreferrer">${evidenceText}</a>` : evidenceText;
     return `<tr>
           <td>${escapeHtml(q.question)}</td>
-          <td><span class="tag ${answered}">${answered}</span></td>
+          <td><span class="tag ${answered}">${label}</span></td>
           <td>${evidenceCell}</td>
         </tr>`;
   }).join("");
@@ -281,4 +300,4 @@ function renderProspectReport(result) {
 export {
   renderProspectReport
 };
-//# sourceMappingURL=chunk-5PWB3JHJ.js.map
+//# sourceMappingURL=chunk-H6BLTEFN.js.map

package/dist/chunk-H6BLTEFN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/prospect/render.ts"],"sourcesContent":["import { escapeHtml, safeUrl } from \"../util/html.js\";\nimport { hostnameOf } from \"../util/url.js\";\nimport { ANALYZE_SKIPPED, PROBES_SKIPPED } from \"./pipeline.js\";\nimport { resolveBusinessName } from \"./probes.js\";\nimport type {\n  AnalyzeResult,\n  ChecksResult,\n  Fix,\n  LighthouseScores,\n  ProbeAnswer,\n  ProbesResult,\n  ProspectAuditResult,\n  StageResult,\n} from \"./types.js\";\n\nconst RED = \"#d71920\";\nconst IMPACT_ORDER: Record<Fix[\"impact\"], number> = { high: 0, medium: 1, low: 2 };\nconst KIND_LABEL: Record<ProbeAnswer[\"kind\"], string> = {\n  branded: \"Branded — asked about the business by name\",\n  category: \"Category — the questions a buyer would actually type\",\n  competitor: \"Competitor — head-to-head comparisons\",\n};\nconst KIND_ORDER: ProbeAnswer[\"kind\"][] = [\"category\", \"branded\", \"competitor\"];\n\n/** Terse product mapping so a recipient who has never seen a crawler's raw\n *  user-agent string can place it — factual labelling, not a voice change. */\nconst AI_AGENT_LABELS: Record<string, string> = {\n  GPTBot: \"ChatGPT\",\n  \"OAI-SearchBot\": \"ChatGPT's search results\",\n  ClaudeBot: \"Claude\",\n  PerplexityBot: \"Perplexity\",\n  \"Google-Extended\": \"Gemini and Google's AI Overviews\",\n  CCBot: \"Common Crawl, used to train many AI models\",\n};\n\nfunction describeAgent(agent: string): string {\n  const label = AI_AGENT_LABELS[agent];\n  return label ? `${agent} (feeds ${label})` : agent;\n}\n\n/** Every genuine stage failure collapses to this one phrase — the real error\n *  (status codes, retry counts, timeouts — operator vocabulary) stays in the\n *  persisted JSON and CLI output for operators, but never reaches a stranger\n *  who would read it as broken software rather than a diagnostic. */\nconst STAGE_FAILED_MESSAGE = \"we could not complete this part of the analysis\";\n\nconst STYLES = `\n  :root { color-scheme: light; }\n  * { box-sizing: border-box; }\n  body { margin: 0; background: #faf8f5; color: #1a1a1a;\n    font: 16px/1.6 -apple-system, BlinkMacSystemFont, \"Segoe UI\", Helvetica, Arial, sans-serif; }\n  .wrap { max-width: 860px; margin: 0 auto; padding: 48px 24px 80px; }\n  h1, h2, h3 { font-family: Besley, Georgia, \"Times New Roman\", serif; font-weight: 600; line-height: 1.2; }\n  h1 { font-size: 40px; margin: 0 0 8px; }\n  h2 { font-size: 26px; margin: 48px 0 12px; border-top: 2px solid #e6e1da; padding-top: 24px; }\n  h3 { font-size: 18px; margin: 24px 0 8px; }\n  .lede { color: #57544f; margin: 0 0 8px; }\n  .scores { display: grid; grid-template-columns: repeat(auto-fit, minmax(160px, 1fr)); gap: 12px; margin: 32px 0; }\n  .score { background: #fff; border: 1px solid #e6e1da; border-radius: 8px; padding: 16px; }\n  .score .n { font-family: Besley, Georgia, serif; font-size: 38px; line-height: 1; color: ${RED}; }\n  .score .n.na { font-size: 18px; color: #8a857e; }\n  .score .l { font-size: 13px; letter-spacing: .08em; text-transform: uppercase; color: #57544f; margin-top: 8px; }\n  .score .hint { font-size: 12px; color: #8a857e; margin-top: 4px; }\n  .card { background: #fff; border: 1px solid #e6e1da; border-radius: 8px; padding: 16px; margin: 12px 0; }\n  .q { font-weight: 600; }\n  .tag { display: inline-block; font-size: 12px; letter-spacing: .06em; text-transform: uppercase;\n    border-radius: 999px; padding: 2px 10px; border: 1px solid currentColor; }\n  .yes { color: #14663c; } .partial { color: #8a6d00; } .no { color: ${RED}; }\n  .unknown { color: #8a857e; border-style: dashed; }\n  ul { padding-left: 20px; } li { margin: 6px 0; }\n  .muted { color: #8a857e; }\n  .cta { margin-top: 56px; background: ${RED}; color: #fff; border-radius: 8px; padding: 24px 28px; }\n  .cta h2 { border: 0; padding: 0; margin: 0 0 8px; color: #fff; }\n  .cta a { color: #fff; }\n  table { width: 100%; border-collapse: collapse; margin-top: 8px; }\n  td, th { text-align: left; padding: 6px 8px; border-bottom: 1px solid #eee; vertical-align: top; }\n  @media print {\n    body { background: #fff; }\n    .card, .score, .cta { break-inside: avoid; }\n    /* Browsers default \"print background graphics\" OFF, which drops the red\n       .cta background but keeps its white text — the only ask in the report\n       would otherwise print white-on-white and vanish. Fall back to dark\n       text on no background with a visible border instead of relying on the\n       background for contrast. */\n    .cta { background: none; color: #1a1a1a; border: 2px solid ${RED}; }\n    .cta h2, .cta a { color: #1a1a1a; }\n  }\n`;\n\n/** One of the THREE site-score cards. AI Visibility used to be a fourth and\n *  was removed on purpose, matching the web report's control split: these\n *  three measure the site and move when the site is fixed; visibility is\n *  measured out in the world and reported with receipts in \"What the AI\n *  engines said about you\" — a fourth card said it was the same kind of claim,\n *  and ours to move. It is neither. `scores.aiVisibility` stays computed and\n *  stored; it just is not a card, here or in the email or CLI summary. */\nfunction scoreCard(label: string, value: number | null, hint?: string): string {\n  const n =\n    value === null ? `<div class=\"n na\">Not measured</div>` : `<div class=\"n\">${value}</div>`;\n  const hintHtml = hint ? `<div class=\"hint\">${escapeHtml(hint)}</div>` : \"\";\n  return `<div class=\"score\">${n}<div class=\"l\">${escapeHtml(label)}</div>${hintHtml}</div>`;\n}\n\n/** Body for a stage that succeeded, or a uniform \"Not measured\" note when it didn't. */\nfunction stageBody<T>(stage: StageResult<T>, body: (data: T) => string): string {\n  return stage.ok ? body(stage.data) : notMeasuredNote();\n}\n\n/** The stage's real error is deliberately not a parameter here — see\n *  STAGE_FAILED_MESSAGE above. Every genuine failure reads the same\n *  client-safe way, regardless of what actually broke. */\nfunction notMeasuredNote(): string {\n  return `<p class=\"muted\">Not measured — ${STAGE_FAILED_MESSAGE}.</p>`;\n}\n\n/** A stage a human deliberately turned off (--no-probes, or analyze skipped\n *  because checks failed upstream) must read as \"you asked us to skip this\" —\n *  never as \"we tried and could not\", which is what a bare \"Not measured —\n *  {error}\" would otherwise imply. Compares against the pipeline's exported\n *  constants rather than a retyped string literal. */\nfunction skippableStageNote(error: string, skipConstant: string, skipMessage: string): string {\n  if (error === skipConstant) {\n    return `<p class=\"muted\">${escapeHtml(skipMessage)}</p>`;\n  }\n  return notMeasuredNote();\n}\n\n/** `new Date(iso).toLocaleDateString()` never throws on a bad timestamp — it\n *  silently returns \"Invalid Date\" — so a try/catch here is dead code. Guard\n *  on getTime() instead, and fall back to the raw ISO string so a corrupt\n *  timestamp is at least visibly a timestamp rather than the literal words\n *  \"Invalid Date\". */\nfunction formatIsoDate(iso: string): string {\n  const d = new Date(iso);\n  if (Number.isNaN(d.getTime())) return iso;\n  return d.toLocaleDateString(\"en-US\", {\n    year: \"numeric\",\n    month: \"long\",\n    day: \"numeric\",\n    timeZone: \"UTC\",\n  });\n}\n\n/** The probes section leads the report, so a branded-only run (analyze\n *  failed upstream and supplied no buyer questions, or every category query\n *  itself failed) must not let the branded recognition line read as a\n *  positive discoverability finding on its own — an engine echoing a name\n *  it was just handed proves nothing about whether a buyer who never named\n *  the business would find it. */\n/** `businessNameUsed` is whether the engines were actually queried with the\n *  business NAME — not merely whether one existed. `resolveBusinessName` falls\n *  back to the bare domain for anything it cannot use, so a name can be present\n *  and still never reach a query. Without this gate, \"even with the name handed\n *  to them\" is a false claim: whenever businessName was empty, and (until the\n *  caller was fixed) whenever the name was rejected and the probes searched for\n *  the domain instead. Never derived from the raw ProbesResult, which has no\n *  way to say \"no name was available\". */\nfunction buildProbesSection(p: ProbesResult, businessNameUsed: boolean): string {\n  const byKind = new Map<ProbeAnswer[\"kind\"], ProbeAnswer[]>();\n  for (const a of p.answers) {\n    const bucket = byKind.get(a.kind) ?? [];\n    bucket.push(a);\n    byKind.set(a.kind, bucket);\n  }\n\n  const recognition = p.brandedRecognized\n    ? \"<p>When the engines were asked about the business by name, they recognized it.</p>\"\n    : businessNameUsed\n      ? \"<p>When the engines were asked about the business by name, they did not recognize it — a real citation of the site never showed up, even with the name handed to them.</p>\"\n      : \"<p>The engines did not recognize the business — there was no business name available to ask them with, so this reflects a harder starting point than a named query would.</p>\";\n\n  const categoryCaveat = byKind.has(\"category\")\n    ? \"\"\n    : `<p class=\"muted\"><strong>No buyer-question (category) query was tested here</strong> — only name-recognition. An engine echoing back a name it was just given says nothing about whether a buyer who had never heard of the business would be shown it; treat the line above as a floor, not a visibility signal.</p>`;\n\n  // A degraded run says so. The score now divides by what was ASKED, so failed\n  // probes push it DOWN rather than silently inflating it — which is the safe\n  // direction, but only if the reader is told the run was incomplete. Silence\n  // here would trade one misleading number for another.\n  // Bound to a local so the narrowing survives into the template — `missing > 0`\n  // says nothing to the compiler about `p.categoryProbes` itself, and a stored\n  // report from before the field existed genuinely does not have it.\n  const tally = p.categoryProbes;\n  const missing = tally ? tally.attempted - tally.answered : 0;\n  const degradedNotice =\n    tally && missing > 0\n      ? `<p class=\"muted\"><strong>${missing} of ${tally.attempted} buyer-question searches did not come back</strong> — the engine errored on them. They are counted as \"not found\", so the visibility figure above is a floor: the real number could be higher, not lower. Worth re-running before drawing a conclusion from it.</p>`\n      : \"\";\n\n  const groups = KIND_ORDER.filter((k) => byKind.has(k))\n    .map((kind) => {\n      const answers = byKind.get(kind) ?? [];\n      const cards = answers\n        .map(\n          (a) => `<div class=\"card\">\n          <div class=\"q\">${escapeHtml(a.engine)} · “${escapeHtml(a.query)}”</div>\n          <p class=\"muted\">Asked ${escapeHtml(formatIsoDate(a.askedAt))}</p>\n          <p>${escapeHtml(a.snippet)}${a.truncated ? \"…\" : \"\"}</p>\n          <p class=\"muted\">${\n            // The scorer's own decision, recorded on the answer — NOT\n            // `domainCited || brandMentioned`, which is a looser rule. Using the\n            // loose one printed \"You were named in this answer\" above a card\n            // contributing zero to the score beside it. Reports persisted before\n            // the field existed fall back to what they already said.\n            (a.countedAsVisible ?? (a.domainCited || a.brandMentioned))\n              ? \"You were named in this answer.\"\n              : \"You were not named in this answer.\"\n          }${a.citedDomains.length ? ` Sources the engine retrieved: ${escapeHtml(a.citedDomains.join(\", \"))}` : \"\"}</p>\n        </div>`,\n        )\n        .join(\"\");\n      return `<h3>${escapeHtml(KIND_LABEL[kind])}</h3>${cards}`;\n    })\n    .join(\"\");\n\n  const competitors = p.competitorsSeen.length\n    ? `<h3>Who the engines cited instead</h3><ul>${p.competitorsSeen\n        .map((c) => `<li>${escapeHtml(c.domain)} — ${c.count} time${c.count === 1 ? \"\" : \"s\"}</li>`)\n        .join(\"\")}</ul>`\n    : \"\";\n\n  return recognition + categoryCaveat + degradedNotice + groups + competitors;\n}\n\n/** crawlerAccessMeasured is false only when the robots.txt fetch itself\n *  failed, so the blocked/allowed lists are empty out of ignorance, not\n *  because we confirmed access. Saying \"every crawler can reach the site\" in\n *  that case would manufacture a finding from our own missing data.\n *  sitemapMeasured/llmsTxtMeasured get the same treatment as\n *  crawlerAccessMeasured: a failed fetch reads as \"not measured\", never as a\n *  confirmed \"missing\" — that's a claim about the prospect's site we haven't\n *  earned. Item 1: none of the three \"not measured\" lines below take the raw\n *  fetch error as input anymore — status codes and transport vocabulary\n *  (\"503 Service Unavailable\", \"ETIMEDOUT\") are operator vocabulary, same as\n *  a stage failure (see STAGE_FAILED_MESSAGE); the real error still lives in\n *  the persisted JSON and CLI output, never in this client-facing page. */\nfunction buildFindabilitySection(c: ChecksResult): string {\n  const accessBlock = !c.crawlerAccessMeasured\n    ? `<p class=\"muted\">Crawler access: not measured — ${STAGE_FAILED_MESSAGE}.</p>`\n    : c.crawlerAccess.blockedAi.length\n      ? `<p><strong>Blocked AI crawlers:</strong> ${escapeHtml(\n          c.crawlerAccess.blockedAi.map(describeAgent).join(\", \"),\n        )}</p>`\n      : // Says what was measured, which is robots.txt, and no more. \"Every AI\n        // crawler can reach the site\" was a claim robots.txt cannot support:\n        // a CDN's bot management enforces its own answer and can contradict the\n        // file without the owner knowing. Confirmed on a live prospect: its\n        // robots.txt blocked nothing relevant, and its CDN returned 403 to one\n        // named AI crawler on every request while serving a browser and two\n        // other crawlers normally. The report said they were fine.\n        `<p>Nothing in your robots.txt blocks the AI crawlers we checked.</p>`;\n  const classical =\n    c.crawlerAccessMeasured && c.crawlerAccess.blockedClassical.length\n      ? `<p><strong>Blocked search crawlers:</strong> ${escapeHtml(\n          c.crawlerAccess.blockedClassical.join(\", \"),\n        )}</p>`\n      : \"\";\n  const sitemapLine = c.sitemapMeasured\n    ? `<li>sitemap.xml: ${c.sitemapPresent ? \"present\" : \"missing\"}</li>`\n    : `<li>sitemap.xml: not measured — ${STAGE_FAILED_MESSAGE}.</li>`;\n  // llms.txt is no longer listed as a finding. It used to sit here as\n  // \"present\"/\"missing\" beside sitemap.xml, which put the two on equal footing\n  // — and \"missing\" beside a checklist reads as a job to do. Search crawlers\n  // demonstrably read a sitemap; no answer engine has documented reading\n  // llms.txt to build an answer. The footnote below says that outright instead\n  // of leaving a prospect to infer it, or to go and build one on our say-so.\n  const llmsFootnote = `<p class=\"muted\"><strong>A note on llms.txt.</strong> You may have been told to\n    add one. We check for it — this site ${\n      !c.llmsTxtMeasured ? \"could not be checked\" : c.llmsTxtPresent ? \"has one\" : \"does not\"\n    } — but we do not score it and we will not recommend it. It is a 2024 proposal that no\n    answer engine has committed to reading, and adding one has no measured effect on whether you\n    are cited. If that changes we will say so and score it then.</p>`;\n  return `${accessBlock}${classical}\n    <ul>\n      ${sitemapLine}\n      <li>Pages missing a meta description: ${c.meta.missingDescription} of ${c.meta.pageCount}</li>\n      <li>Pages missing a canonical URL: ${c.meta.missingCanonical} of ${c.meta.pageCount}</li>\n      <li>Pages missing share images/titles: ${c.meta.missingSocial} of ${c.meta.pageCount}</li>\n      <li>Security headers missing: ${\n        c.securityHeaders.missing.length ? escapeHtml(c.securityHeaders.missing.join(\", \")) : \"none\"\n      }</li>\n      ${\n        c.meta.pagesWithoutExtract > 0\n          ? `<li><strong>${c.meta.pagesWithoutExtract}</strong> additional page${\n              c.meta.pagesWithoutExtract === 1 ? \"\" : \"s\"\n            } produced no readable content at all and ${\n              c.meta.pagesWithoutExtract === 1 ? \"is\" : \"are\"\n            } not counted in the ${c.meta.pageCount} pages above.</li>`\n          : \"\"\n      }\n    </ul>${llmsFootnote}`;\n}\n\n/** Lighthouse runs as its own independent pipeline stage (see pipeline.ts) —\n *  it does not depend on `checks` succeeding. Rendering it off `result.checks`\n *  would throw away real, measured performance/SEO/accessibility numbers\n *  whenever an unrelated stage failed, so this reads `result.lighthouse`\n *  directly and is rendered unconditionally, not nested inside the checks\n *  degrade path. */\nfunction buildLighthouseBlock(lh: StageResult<LighthouseScores>): string {\n  return lh.ok\n    ? `<p class=\"muted\">Lighthouse — performance ${lh.data.performance ?? \"not measured\"},\n       SEO ${lh.data.seo ?? \"not measured\"}, accessibility ${lh.data.accessibility ?? \"not measured\"}.</p>`\n    : `<p class=\"muted\">Lighthouse not measured — ${STAGE_FAILED_MESSAGE}.</p>`;\n}\n\nfunction buildReadabilitySection(c: ChecksResult): string {\n  const jsLine =\n    c.jsDependence.avgMissing === null\n      ? `<p class=\"muted\">JavaScript-dependence: not measured — no page produced a comparable raw/rendered pair.</p>`\n      : `<p><strong>${Math.round(c.jsDependence.avgMissing * 100)}%</strong> of the words a visitor reads only appear after JavaScript runs.\n    Most AI crawlers do not run JavaScript, so that share of your site is invisible to them.</p>`;\n  return `${jsLine}\n    <ul>\n      <li>Structured data found: ${c.schema.typesFound.length ? escapeHtml(c.schema.typesFound.join(\", \")) : \"none\"}</li>\n      <li>Expected structured data missing: ${\n        c.schema.missingExpected.length ? escapeHtml(c.schema.missingExpected.join(\", \")) : \"none\"\n      }</li>\n      <li>Pages without a top-level heading: ${c.headings.pagesWithoutH1} of ${c.meta.pageCount}</li>\n      ${\n        c.meta.pagesWithoutExtract > 0\n          ? `<li><strong>${c.meta.pagesWithoutExtract}</strong> page${\n              c.meta.pagesWithoutExtract === 1 ? \"\" : \"s\"\n            } produced no extract at all — excluded from every figure above, not counted as readable or unreadable.</li>`\n          : \"\"\n      }\n    </ul>`;\n}\n\n/** The report's whole premise is claims the recipient can go check — so the\n *  one quoted passage of evidence links to the page it came from (via\n *  safeUrl; a null/non-http page renders as plain escaped text, no dead\n *  \"#\" anchor). `answered`/`impact`/`effort` are escaped even though a zod\n *  enum constrains them upstream — the renderer should not depend on\n *  another file staying in sync to stay safe. */\n/** What the verdict column says. \"unknown\" is OUR gap — the model returned no\n *  verdict for that question — so it must not be printed as a finding about the\n *  site, and must not look like one either. Matches the web report's labels. */\nconst ANSWERED_LABEL: Record<string, string> = {\n  yes: \"yes\",\n  partial: \"partial\",\n  no: \"no\",\n  unknown: \"not measured\",\n};\n\nfunction buildAnswersSection(a: AnalyzeResult): string {\n  const rows = a.buyerQuestions\n    .map((q) => {\n      const answered = escapeHtml(q.answered);\n      const label = escapeHtml(ANSWERED_LABEL[q.answered] ?? q.answered);\n      const evidenceText = q.evidence ? escapeHtml(q.evidence) : null;\n      const evidenceHref = q.evidence && q.page ? safeUrl(q.page) : null;\n      // An unmeasured question has no evidence for the same reason it has no\n      // verdict: we never got one back. Printing \"no passage on the site\" there\n      // reports our own missing measurement as a defect of theirs.\n      const evidenceCell =\n        q.answered === \"unknown\"\n          ? '<span class=\"muted\">we did not get a verdict on this question</span>'\n          : evidenceText === null\n            ? '<span class=\"muted\">no passage on the site</span>'\n            : evidenceHref && evidenceHref !== \"#\"\n              ? `<a href=\"${escapeHtml(evidenceHref)}\" target=\"_blank\" rel=\"noopener noreferrer\">${evidenceText}</a>`\n              : evidenceText;\n      return `<tr>\n          <td>${escapeHtml(q.question)}</td>\n          <td><span class=\"tag ${answered}\">${label}</span></td>\n          <td>${evidenceCell}</td>\n        </tr>`;\n    })\n    .join(\"\");\n  return `<p>${escapeHtml(a.narrative.answers)}</p>\n    <table><tr><th>What buyers ask</th><th>Answered</th><th>Evidence</th></tr>${rows}</table>`;\n}\n\nexport function renderProspectReport(result: ProspectAuditResult): string {\n  const host = hostnameOf(result.url);\n  // `businessName` is the searchable NAME (possibly \"\"), never the\n  // description. An empty/missing name is itself a finding — fall back to\n  // the hostname rather than printing nothing, or worse, printing \"\" as if\n  // it were a verified fact about the business.\n  const name = result.businessName && result.businessName.trim() ? result.businessName : host;\n  const date = formatIsoDate(result.generatedAt);\n\n  const findabilitySection = stageBody(result.checks, buildFindabilitySection);\n  const lighthouseBlock = buildLighthouseBlock(result.lighthouse);\n  const readabilitySection = stageBody(result.checks, buildReadabilitySection);\n\n  // A real business name was resolved and handed to the engines only when\n  // `result.businessName` is non-empty — the same value the pipeline\n  // actually queried with (see pipeline.ts). Used to gate the probes\n  // section's \"even with the name handed to them\" phrasing (Fix 6).\n  // Whether the engines were actually queried with the NAME, which is not the\n  // same as whether a name existed. resolveBusinessName falls back to the bare\n  // domain for anything it cannot use, and this line used to read the\n  // un-resolved value — so a report could claim the engines were given the name\n  // \"even with the name handed to them\" while the probes had in fact searched\n  // for \"stlouisroofing.com\". Resolve it the same way probes.ts does.\n  const businessNameUsed = Boolean(\n    result.businessName &&\n    result.businessName.trim() &&\n    resolveBusinessName(result.businessName, result.url) === result.businessName.trim(),\n  );\n\n  const fixes = result.analyze.ok\n    ? (() => {\n        const sorted = [...result.analyze.data.fixes].sort(\n          (x, y) => IMPACT_ORDER[x.impact] - IMPACT_ORDER[y.impact],\n        );\n        if (sorted.length === 0) {\n          // A genuinely well-optimized site: a bare empty list reads as a\n          // rendering bug, not a compliment. Say so directly, and keep this\n          // section as a pitch — it's the one the salesperson is sending\n          // the report to make.\n          return `<p>Nothing here reads as urgent — the essentials are already in place.\n          Reddoor can still help push this further: tightening structured data, monitoring\n          how the answer engines describe you, and keeping pace as they change.</p>`;\n        }\n        return `<ol>${sorted\n          .map((f) => {\n            const impact = escapeHtml(f.impact);\n            const effort = escapeHtml(f.effort);\n            return `<li><strong>${escapeHtml(f.title)}</strong> — ${escapeHtml(f.why)}\n          <span class=\"muted\">(${impact} impact, ${effort} effort)</span></li>`;\n          })\n          .join(\"\")}</ol>`;\n      })()\n    : skippableStageNote(\n        result.analyze.error,\n        ANALYZE_SKIPPED,\n        \"Skipped — the checks stage failed, so there was nothing to build fixes from.\",\n      );\n\n  const probesSectionFinal = result.probes.ok\n    ? buildProbesSection(result.probes.data, businessNameUsed)\n    : skippableStageNote(\n        result.probes.error,\n        PROBES_SKIPPED,\n        \"This audit did not run the AI-visibility probes.\",\n      );\n\n  const answersSectionFinal = result.analyze.ok\n    ? buildAnswersSection(result.analyze.data)\n    : skippableStageNote(\n        result.analyze.error,\n        ANALYZE_SKIPPED,\n        \"Skipped — the checks stage failed, so there were no buyer questions to check.\",\n      );\n\n  const description = result.analyze.ok ? result.analyze.data.business : null;\n  const narrative = result.analyze.ok\n    ? `<p class=\"lede\">${escapeHtml(description ?? \"\")}</p>\n       <p class=\"lede\">${escapeHtml(result.analyze.data.narrative.findability)}\n       ${escapeHtml(result.analyze.data.narrative.readability)}</p>`\n    : \"\";\n\n  return `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n<meta name=\"robots\" content=\"noindex\" />\n<title>Can AI find ${escapeHtml(name)}? — Reddoor audit</title>\n<link rel=\"preconnect\" href=\"https://fonts.googleapis.com\" />\n<link href=\"https://fonts.googleapis.com/css2?family=Besley:wght@400;600&display=swap\" rel=\"stylesheet\" />\n<style>${STYLES}</style>\n</head>\n<body>\n<div class=\"wrap\">\n  <h1>Can AI and Google actually find ${escapeHtml(name)}?</h1>\n  <p class=\"lede\"><a href=\"${escapeHtml(safeUrl(result.url))}\" target=\"_blank\" rel=\"noopener noreferrer\">${escapeHtml(result.url)}</a> · audited ${escapeHtml(date)} by Reddoor Creative</p>\n  ${narrative}\n\n  <p class=\"muted\">Each score below runs 0–100 — read it as a score, not a percentage.</p>\n  <div class=\"scores\">\n    ${scoreCard(\"Findability\", result.scores.findability, \"How easily AI and search crawlers can find and reach your site — crawl rules, sitemap, key metadata\")}\n    ${scoreCard(\"Readability\", result.scores.readability, \"How much of your site's content those crawlers can actually read once they're in — most don't run JavaScript\")}\n    ${scoreCard(\"Answers\", result.scores.answers, \"How many buyer questions your site's own content answers — separate from what the AI engines say back\")}\n  </div>\n\n  <h2>What the AI engines said about you</h2>\n  ${probesSectionFinal}\n\n  <h2>What the crawlers can reach</h2>\n  ${findabilitySection}\n  ${lighthouseBlock}\n\n  <h2>What the crawlers can read</h2>\n  ${readabilitySection}\n\n  <h2>The questions your buyers ask</h2>\n  ${answersSectionFinal}\n\n  <h2>What to fix first</h2>\n  ${fixes}\n\n  <div class=\"cta\">\n    <h2>Want this fixed?</h2>\n    <p>Reddoor Creative rebuilds sites so answer engines can read, quote and recommend them.\n    Reply to the email this link came from, or start at\n    <a href=\"https://reddoorla.com/\">reddoorla.com</a>.</p>\n  </div>\n</div>\n</body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,IAAM,MAAM;AACZ,IAAM,eAA8C,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,EAAE;AACjF,IAAM,aAAkD;AAAA,EACtD,SAAS;AAAA,EACT,UAAU;AAAA,EACV,YAAY;AACd;AACA,IAAM,aAAoC,CAAC,YAAY,WAAW,YAAY;AAI9E,IAAM,kBAA0C;AAAA,EAC9C,QAAQ;AAAA,EACR,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,eAAe;AAAA,EACf,mBAAmB;AAAA,EACnB,OAAO;AACT;AAEA,SAAS,cAAc,OAAuB;AAC5C,QAAM,QAAQ,gBAAgB,KAAK;AACnC,SAAO,QAAQ,GAAG,KAAK,WAAW,KAAK,MAAM;AAC/C;AAMA,IAAM,uBAAuB;AAE7B,IAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6FAa8E,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uEAQzB,GAAG;AAAA;AAAA;AAAA;AAAA,yCAIjC,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iEAaqB,GAAG;AAAA;AAAA;AAAA;AAYpE,SAAS,UAAU,OAAe,OAAsB,MAAuB;AAC7E,QAAM,IACJ,UAAU,OAAO,yCAAyC,kBAAkB,KAAK;AACnF,QAAM,WAAW,OAAO,qBAAqB,WAAW,IAAI,CAAC,WAAW;AACxE,SAAO,sBAAsB,CAAC,kBAAkB,WAAW,KAAK,CAAC,SAAS,QAAQ;AACpF;AAGA,SAAS,UAAa,OAAuB,MAAmC;AAC9E,SAAO,MAAM,KAAK,KAAK,MAAM,IAAI,IAAI,gBAAgB;AACvD;AAKA,SAAS,kBAA0B;AACjC,SAAO,wCAAmC,oBAAoB;AAChE;AAOA,SAAS,mBAAmB,OAAe,cAAsB,aAA6B;AAC5F,MAAI,UAAU,cAAc;AAC1B,WAAO,oBAAoB,WAAW,WAAW,CAAC;AAAA,EACpD;AACA,SAAO,gBAAgB;AACzB;AAOA,SAAS,cAAc,KAAqB;AAC1C,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,MAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AACtC,SAAO,EAAE,mBAAmB,SAAS;AAAA,IACnC,MAAM;AAAA,IACN,OAAO;AAAA,IACP,KAAK;AAAA,IACL,UAAU;AAAA,EACZ,CAAC;AACH;AAgBA,SAAS,mBAAmB,GAAiB,kBAAmC;AAC9E,QAAM,SAAS,oBAAI,IAAwC;AAC3D,aAAW,KAAK,EAAE,SAAS;AACzB,UAAM,SAAS,OAAO,IAAI,EAAE,IAAI,KAAK,CAAC;AACtC,WAAO,KAAK,CAAC;AACb,WAAO,IAAI,EAAE,MAAM,MAAM;AAAA,EAC3B;AAEA,QAAM,cAAc,EAAE,oBAClB,uFACA,mBACE,oLACA;AAEN,QAAM,iBAAiB,OAAO,IAAI,UAAU,IACxC,KACA;AASJ,QAAM,QAAQ,EAAE;AAChB,QAAM,UAAU,QAAQ,MAAM,YAAY,MAAM,WAAW;AAC3D,QAAM,iBACJ,SAAS,UAAU,IACf,4BAA4B,OAAO,OAAO,MAAM,SAAS,6QACzD;AAEN,QAAM,SAAS,WAAW,OAAO,CAAC,MAAM,OAAO,IAAI,CAAC,CAAC,EAClD,IAAI,CAAC,SAAS;AACb,UAAM,UAAU,OAAO,IAAI,IAAI,KAAK,CAAC;AACrC,UAAM,QAAQ,QACX;AAAA,MACC,CAAC,MAAM;AAAA,2BACU,WAAW,EAAE,MAAM,CAAC,eAAO,WAAW,EAAE,KAAK,CAAC;AAAA,mCACtC,WAAW,cAAc,EAAE,OAAO,CAAC,CAAC;AAAA,eACxD,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,WAAM,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOhD,EAAE,qBAAqB,EAAE,eAAe,EAAE,kBACvC,mCACA,oCACN,GAAG,EAAE,aAAa,SAAS,kCAAkC,WAAW,EAAE,aAAa,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE;AAAA;AAAA,IAE3G,EACC,KAAK,EAAE;AACV,WAAO,OAAO,WAAW,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK;AAAA,EACzD,CAAC,EACA,KAAK,EAAE;AAEV,QAAM,cAAc,EAAE,gBAAgB,SAClC,6CAA6C,EAAE,gBAC5C,IAAI,CAAC,MAAM,OAAO,WAAW,EAAE,MAAM,CAAC,WAAM,EAAE,KAAK,QAAQ,EAAE,UAAU,IAAI,KAAK,GAAG,OAAO,EAC1F,KAAK,EAAE,CAAC,UACX;AAEJ,SAAO,cAAc,iBAAiB,iBAAiB,SAAS;AAClE;AAcA,SAAS,wBAAwB,GAAyB;AACxD,QAAM,cAAc,CAAC,EAAE,wBACnB,wDAAmD,oBAAoB,UACvE,EAAE,cAAc,UAAU,SACxB,4CAA4C;AAAA,IAC1C,EAAE,cAAc,UAAU,IAAI,aAAa,EAAE,KAAK,IAAI;AAAA,EACxD,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQD;AAAA;AACN,QAAM,YACJ,EAAE,yBAAyB,EAAE,cAAc,iBAAiB,SACxD,gDAAgD;AAAA,IAC9C,EAAE,cAAc,iBAAiB,KAAK,IAAI;AAAA,EAC5C,CAAC,SACD;AACN,QAAM,cAAc,EAAE,kBAClB,oBAAoB,EAAE,iBAAiB,YAAY,SAAS,UAC5D,wCAAmC,oBAAoB;AAO3D,QAAM,eAAe;AAAA,gDAEjB,CAAC,EAAE,kBAAkB,yBAAyB,EAAE,iBAAiB,YAAY,UAC/E;AAAA;AAAA;AAGF,SAAO,GAAG,WAAW,GAAG,SAAS;AAAA;AAAA,QAE3B,WAAW;AAAA,8CAC2B,EAAE,KAAK,kBAAkB,OAAO,EAAE,KAAK,SAAS;AAAA,2CACnD,EAAE,KAAK,gBAAgB,OAAO,EAAE,KAAK,SAAS;AAAA,+CAC1C,EAAE,KAAK,aAAa,OAAO,EAAE,KAAK,SAAS;AAAA,sCAElF,EAAE,gBAAgB,QAAQ,SAAS,WAAW,EAAE,gBAAgB,QAAQ,KAAK,IAAI,CAAC,IAAI,MACxF;AAAA,QAEE,EAAE,KAAK,sBAAsB,IACzB,eAAe,EAAE,KAAK,mBAAmB,4BACvC,EAAE,KAAK,wBAAwB,IAAI,KAAK,GAC1C,4CACE,EAAE,KAAK,wBAAwB,IAAI,OAAO,KAC5C,uBAAuB,EAAE,KAAK,SAAS,uBACvC,EACN;AAAA,WACK,YAAY;AACvB;AAQA,SAAS,qBAAqB,IAA2C;AACvE,SAAO,GAAG,KACN,kDAA6C,GAAG,KAAK,eAAe,cAAc;AAAA,aAC3E,GAAG,KAAK,OAAO,cAAc,mBAAmB,GAAG,KAAK,iBAAiB,cAAc,UAC9F,mDAA8C,oBAAoB;AACxE;AAEA,SAAS,wBAAwB,GAAyB;AACxD,QAAM,SACJ,EAAE,aAAa,eAAe,OAC1B,qHACA,cAAc,KAAK,MAAM,EAAE,aAAa,aAAa,GAAG,CAAC;AAAA;AAE/D,SAAO,GAAG,MAAM;AAAA;AAAA,mCAEiB,EAAE,OAAO,WAAW,SAAS,WAAW,EAAE,OAAO,WAAW,KAAK,IAAI,CAAC,IAAI,MAAM;AAAA,8CAE3G,EAAE,OAAO,gBAAgB,SAAS,WAAW,EAAE,OAAO,gBAAgB,KAAK,IAAI,CAAC,IAAI,MACtF;AAAA,+CACyC,EAAE,SAAS,cAAc,OAAO,EAAE,KAAK,SAAS;AAAA,QAEvF,EAAE,KAAK,sBAAsB,IACzB,eAAe,EAAE,KAAK,mBAAmB,iBACvC,EAAE,KAAK,wBAAwB,IAAI,KAAK,GAC1C,qHACA,EACN;AAAA;AAEN;AAWA,IAAM,iBAAyC;AAAA,EAC7C,KAAK;AAAA,EACL,SAAS;AAAA,EACT,IAAI;AAAA,EACJ,SAAS;AACX;AAEA,SAAS,oBAAoB,GAA0B;AACrD,QAAM,OAAO,EAAE,eACZ,IAAI,CAAC,MAAM;AACV,UAAM,WAAW,WAAW,EAAE,QAAQ;AACtC,UAAM,QAAQ,WAAW,eAAe,EAAE,QAAQ,KAAK,EAAE,QAAQ;AACjE,UAAM,eAAe,EAAE,WAAW,WAAW,EAAE,QAAQ,IAAI;AAC3D,UAAM,eAAe,EAAE,YAAY,EAAE,OAAO,QAAQ,EAAE,IAAI,IAAI;AAI9D,UAAM,eACJ,EAAE,aAAa,YACX,yEACA,iBAAiB,OACf,sDACA,gBAAgB,iBAAiB,MAC/B,YAAY,WAAW,YAAY,CAAC,+CAA+C,YAAY,SAC/F;AACV,WAAO;AAAA,gBACG,WAAW,EAAE,QAAQ,CAAC;AAAA,iCACL,QAAQ,KAAK,KAAK;AAAA,gBACnC,YAAY;AAAA;AAAA,EAExB,CAAC,EACA,KAAK,EAAE;AACV,SAAO,MAAM,WAAW,EAAE,UAAU,OAAO,CAAC;AAAA,gFACkC,IAAI;AACpF;AAEO,SAAS,qBAAqB,QAAqC;AACxE,QAAM,OAAO,WAAW,OAAO,GAAG;AAKlC,QAAM,OAAO,OAAO,gBAAgB,OAAO,aAAa,KAAK,IAAI,OAAO,eAAe;AACvF,QAAM,OAAO,cAAc,OAAO,WAAW;AAE7C,QAAM,qBAAqB,UAAU,OAAO,QAAQ,uBAAuB;AAC3E,QAAM,kBAAkB,qBAAqB,OAAO,UAAU;AAC9D,QAAM,qBAAqB,UAAU,OAAO,QAAQ,uBAAuB;AAY3E,QAAM,mBAAmB;AAAA,IACvB,OAAO,gBACP,OAAO,aAAa,KAAK,KACzB,oBAAoB,OAAO,cAAc,OAAO,GAAG,MAAM,OAAO,aAAa,KAAK;AAAA,EACpF;AAEA,QAAM,QAAQ,OAAO,QAAQ,MACxB,MAAM;AACL,UAAM,SAAS,CAAC,GAAG,OAAO,QAAQ,KAAK,KAAK,EAAE;AAAA,MAC5C,CAAC,GAAG,MAAM,aAAa,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM;AAAA,IAC1D;AACA,QAAI,OAAO,WAAW,GAAG;AAKvB,aAAO;AAAA;AAAA;AAAA,IAGT;AACA,WAAO,OAAO,OACX,IAAI,CAAC,MAAM;AACV,YAAM,SAAS,WAAW,EAAE,MAAM;AAClC,YAAM,SAAS,WAAW,EAAE,MAAM;AAClC,aAAO,eAAe,WAAW,EAAE,KAAK,CAAC,oBAAe,WAAW,EAAE,GAAG,CAAC;AAAA,iCACpD,MAAM,YAAY,MAAM;AAAA,IAC/C,CAAC,EACA,KAAK,EAAE,CAAC;AAAA,EACb,GAAG,IACH;AAAA,IACE,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,EACF;AAEJ,QAAM,qBAAqB,OAAO,OAAO,KACrC,mBAAmB,OAAO,OAAO,MAAM,gBAAgB,IACvD;AAAA,IACE,OAAO,OAAO;AAAA,IACd;AAAA,IACA;AAAA,EACF;AAEJ,QAAM,sBAAsB,OAAO,QAAQ,KACvC,oBAAoB,OAAO,QAAQ,IAAI,IACvC;AAAA,IACE,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,EACF;AAEJ,QAAM,cAAc,OAAO,QAAQ,KAAK,OAAO,QAAQ,KAAK,WAAW;AACvE,QAAM,YAAY,OAAO,QAAQ,KAC7B,mBAAmB,WAAW,eAAe,EAAE,CAAC;AAAA,yBAC7B,WAAW,OAAO,QAAQ,KAAK,UAAU,WAAW,CAAC;AAAA,SACrE,WAAW,OAAO,QAAQ,KAAK,UAAU,WAAW,CAAC,SACxD;AAEJ,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAMY,WAAW,IAAI,CAAC;AAAA;AAAA;AAAA,SAG5B,MAAM;AAAA;AAAA;AAAA;AAAA,wCAIyB,WAAW,IAAI,CAAC;AAAA,6BAC3B,WAAW,QAAQ,OAAO,GAAG,CAAC,CAAC,+CAA+C,WAAW,OAAO,GAAG,CAAC,qBAAkB,WAAW,IAAI,CAAC;AAAA,IAC/J,SAAS;AAAA;AAAA;AAAA;AAAA,MAIP,UAAU,eAAe,OAAO,OAAO,aAAa,0GAAqG,CAAC;AAAA,MAC1J,UAAU,eAAe,OAAO,OAAO,aAAa,mHAA8G,CAAC;AAAA,MACnK,UAAU,WAAW,OAAO,OAAO,SAAS,4GAAuG,CAAC;AAAA;AAAA;AAAA;AAAA,IAItJ,kBAAkB;AAAA;AAAA;AAAA,IAGlB,kBAAkB;AAAA,IAClB,eAAe;AAAA;AAAA;AAAA,IAGf,kBAAkB;AAAA;AAAA;AAAA,IAGlB,mBAAmB;AAAA;AAAA;AAAA,IAGnB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWT;","names":[]}

package/dist/{chunk-ZOCJBJQV.js → chunk-MVDMKKBN.js}

@@ -1,6 +1,6 @@
 import {
   approveBlockers
-} from "./chunk-KGUKL3CV.js";
+} from "./chunk-E22WAIF2.js";
 import {
   ACTIVE_STATUSES,
   allActionableVulnsTransitive,
@@ -299,4 +299,4 @@ export {
   prismicAckIsLive,
   collectPrismicDriftAlerts
 };
-//# sourceMappingURL=chunk-ZOCJBJQV.js.map
+//# sourceMappingURL=chunk-MVDMKKBN.js.map

package/dist/{chunk-MFHS7IQ2.js → chunk-OCNSIBMP.js}

@@ -357,6 +357,32 @@ var MIGRATIONS = [
       CREATE INDEX IF NOT EXISTS idx_submissions_form_type
         ON submissions (form_type);
     `
+  },
+  {
+    // `url` is stored exactly as audited, which makes it a record of the run and
+    // a bad thing to group by: the table already holds beachfrontdentistry.com
+    // and beachfrontdentistry.com/ as two histories of one practice, and both
+    // spellings of ludlowkingsley.com. That costs nothing today because nothing
+    // compares two audits of one site — and becomes a returning client with no
+    // history the day the report offers a before and an after.
+    //
+    // Deliberately no SQL backfill. Doing it with lower()/replace()/rtrim()
+    // would mangle any URL containing "www." or "http://" away from its start,
+    // and a key that is quietly wrong is worse than one that is null. Existing
+    // rows are backfilled once with the real siteKey().
+    // Same ADD COLUMN caveat as 0003: no IF NOT EXISTS in SQLite, so the runner
+    // treats "duplicate column name" as already-applied. Kept as its own
+    // migration, separate from its index below, so that recovery path stays a
+    // single statement.
+    id: "0013_prospect_audits_site_key",
+    sql: `ALTER TABLE prospect_audits ADD COLUMN site_key TEXT;`
+  },
+  {
+    id: "0014_prospect_audits_site_key_index",
+    sql: `
+      CREATE INDEX IF NOT EXISTS idx_prospect_audits_site_key
+        ON prospect_audits (site_key, created_at DESC);
+    `
   }
 ];
 
@@ -391,4 +417,4 @@ async function runMigrations(client) {
 export {
   runMigrations
 };
-//# sourceMappingURL=chunk-MFHS7IQ2.js.map
+//# sourceMappingURL=chunk-OCNSIBMP.js.map

package/dist/{chunk-MFHS7IQ2.js.map → chunk-OCNSIBMP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/db/migrations.ts","../src/db/migrate.ts"],"sourcesContent":["/** Ordered, append-only list of standard-SQL migration scripts. Each runs once,\n *  tracked by `id` in the `_migrations` table (see migrate.ts). Statements use\n *  IF NOT EXISTS so even a partial re-apply is safe. Never edit a shipped script —\n *  add a new one. Every statement in a script MUST be independently idempotent:\n *  `migrate.ts` runs each script via `executeMultiple`, which is NOT transactional,\n *  so a mid-script failure can leave earlier statements applied and the id unrecorded\n *  — a re-run then re-executes the whole script. Standard SQLite SQL only (no\n *  Turso-specific syntax) so the host stays a connection-string swap. */\nexport type Migration = { id: string; sql: string };\n\nexport const MIGRATIONS: Migration[] = [\n  {\n    id: \"0001_init\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS submissions (\n        id TEXT PRIMARY KEY,\n        submission_id INTEGER,\n        site_id TEXT NOT NULL,\n        form_type TEXT NOT NULL,\n        name TEXT NOT NULL,\n        email TEXT NOT NULL,\n        phone TEXT,\n        message TEXT,\n        extra_fields TEXT,\n        source_url TEXT,\n        utm TEXT,\n        submitted_at TEXT,\n        status TEXT NOT NULL DEFAULT 'new',\n        notify_status TEXT NOT NULL DEFAULT 'skipped',\n        resend_message_id TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_submissions_site_submitted\n        ON submissions (site_id, submitted_at DESC);\n      CREATE INDEX IF NOT EXISTS idx_submissions_status\n        ON submissions (status);\n      CREATE TABLE IF NOT EXISTS spam_screenouts (\n        site_id TEXT NOT NULL,\n        date TEXT NOT NULL,\n        honeypot INTEGER NOT NULL DEFAULT 0,\n        too_fast INTEGER NOT NULL DEFAULT 0,\n        marked_spam INTEGER NOT NULL DEFAULT 0,\n        PRIMARY KEY (site_id, date)\n      );\n    `,\n  },\n  {\n    id: \"0002_fleet_events\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS fleet_events (\n        id TEXT PRIMARY KEY,\n        ts TEXT NOT NULL,\n        type TEXT NOT NULL,\n        site_id TEXT,\n        site_name TEXT,\n        summary TEXT NOT NULL,\n        data TEXT,\n        created_at TEXT NOT NULL\n      );\n      CREATE INDEX IF NOT EXISTS idx_fleet_events_ts ON fleet_events (ts);\n    `,\n  },\n  {\n    id: \"0003_add_spam_score\",\n    // SQLite `ADD COLUMN` has no `IF NOT EXISTS`, so it is NOT self-idempotent: if the\n    // `_migrations` marker is lost after the column is added (crash between statement\n    // and marker write), a re-run would throw `duplicate column name`. `migrate.ts`\n    // recognizes that error as already-applied and records the marker, keeping the\n    // runner idempotent (see `isAlreadyAppliedError`).\n    sql: `ALTER TABLE submissions ADD COLUMN spam_score REAL;`,\n  },\n  {\n    id: \"0004_add_spam_reason\",\n    sql: `ALTER TABLE submissions ADD COLUMN spam_reason TEXT;`,\n  },\n  {\n    // Outcome of the newsletter fan-out (site webhook + Mailchimp). Before this the\n    // results were console.error-only, so a rotated Mailchimp key or an outage would\n    // silently stop signups reaching the audience with no trace anywhere the operator\n    // looks — the row still read `notify=sent`, healthy. Same non-idempotent\n    // ADD COLUMN caveat as 0003.\n    id: \"0005_add_fanout_status\",\n    sql: `ALTER TABLE submissions ADD COLUMN fanout_status TEXT;`,\n  },\n  {\n    // Phase 0 of the Airtable → Turso migration (#539): a lead whose SITE LOOKUP\n    // fails must still land somewhere durable. On 2026-08-17 the Airtable quota\n    // outage made `getWebsiteBySlug` throw before `createSubmission` ran, so every\n    // lead in the window 502'd away unrecorded — while THIS store (which holds\n    // submissions) was healthy the whole time. Rows here are written only on that\n    // path and replayed through the normal pipeline once the lookup recovers\n    // (`db replay-deadletters`), producing an ordinary submissions row with real\n    // spam classification and notify. Deliberately a separate table rather than a\n    // nullable `submissions.site_id`: site_id is NOT NULL, every reader assumes a\n    // real rec id, and a sentinel would collapse dashboard grouping (the \"\" key\n    // hazard audit.ts already documents).\n    //\n    // `turnstile` stores the verification COMPUTED AT RECEIPT ({outcome, hostname}\n    // JSON) — tokens expire in 300s, so replay could never re-verify; it replays\n    // with the answer we already had.\n    id: \"0006_submission_deadletter\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS submission_deadletter (\n        id TEXT PRIMARY KEY,\n        site_slug TEXT NOT NULL,\n        payload TEXT NOT NULL,\n        turnstile TEXT NOT NULL,\n        error TEXT NOT NULL,\n        received_at TEXT NOT NULL,\n        replayed_at TEXT,\n        replay_outcome TEXT,\n        replay_submission_id TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_deadletter_unreplayed\n        ON submission_deadletter (replayed_at);\n    `,\n  },\n  {\n    // Phase 1.2 of the Airtable → Turso migration (#539): the fleet-state tables.\n    // Split by WRITER, not topic (design D2, confirmed by the 2026-08-23 writer\n    // map — every code-written column has exactly one writer):\n    //   sites         — operator (dashboard editor / console / launch flow)\n    //   site_health   — the nightly audit write-back, one batched upsert\n    //   site_schedule — updateNextDueDates (report cron, derived)\n    //   reports       — report drafting + the operator approve flow\n    // PKs are the Airtable `rec…` ids (design D1): 278+ submissions rows already\n    // reference them, and the parity harness diffs the two stores row-for-row.\n    //\n    // Naming: snake_case throughout; Airtable's misspellings (\"maintenence\") and\n    // display quirks die here. `sites.legacy` is a JSON object holding the 33\n    // populated-but-code-unreferenced columns (launch-era checklist, hosting\n    // reference cells) keyed by their original Airtable column name — data kept,\n    // schema not fossilized. The plaintext DNS/cms credential cells deliberately\n    // do NOT migrate at all (operator ruling 2026-08-23); they live on only in\n    // the frozen base. `site_health.analytics_soft_fail_at` is the column code\n    // always wanted (\"Analytics soft-fail at\") but no operator ever created in\n    // Airtable — it ships real here.\n    //\n    // reports.checklist is JSON keyed by the STABLE checklist key (\"deploy\",\n    // \"cms\", …, from src/reports/checklist.ts), not the Airtable column name —\n    // the importer translates, so \"Test: Verified After Updates\" stops leaking\n    // its legacy name into a second store.\n    id: \"0007_fleet_state\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS sites (\n        id TEXT PRIMARY KEY,\n        slug TEXT NOT NULL UNIQUE,\n        name TEXT NOT NULL,\n        url TEXT,\n        status TEXT,\n        point_of_contact TEXT,\n        maintenance_freq TEXT,\n        testing_freq TEXT,\n        maintenance_day TEXT,\n        testing_day TEXT,\n        ga4_property_id TEXT,\n        search_query TEXT,\n        search_console_property TEXT,\n        git_repo TEXT,\n        netlify_id TEXT,\n        report_recipients_to TEXT,\n        report_recipients_cc TEXT,\n        copy_intro TEXT,\n        copy_contact TEXT,\n        copy_footer TEXT,\n        newsletter_webhook TEXT,\n        mailchimp_api_key TEXT,\n        mailchimp_audience_id TEXT,\n        notify_routing TEXT,\n        require_turnstile INTEGER NOT NULL DEFAULT 0,\n        accepted_watch_conditions TEXT,\n        prismic_ack_until TEXT,\n        launched_at TEXT,\n        header_image BLOB,\n        header_image_filename TEXT,\n        header_image_type TEXT,\n        header_image_generated_at TEXT,\n        legacy TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_sites_status ON sites (status);\n\n      CREATE TABLE IF NOT EXISTS site_health (\n        site_id TEXT PRIMARY KEY,\n        p_score INTEGER,\n        r_score INTEGER,\n        bp_score INTEGER,\n        seo_score INTEGER,\n        lighthouse_at TEXT,\n        a11y_violations INTEGER,\n        deps_drifted INTEGER,\n        deps_major_behind INTEGER,\n        deps_outdated INTEGER,\n        deps_major_outdated INTEGER,\n        vulns_critical INTEGER,\n        vulns_high INTEGER,\n        vulns_moderate INTEGER,\n        vulns_low INTEGER,\n        security_audit_at TEXT,\n        security_advisories TEXT,\n        auto_fix_attempts INTEGER,\n        analytics_soft_fail_at TEXT,\n        cert_days_remaining INTEGER,\n        domain_checked_at TEXT,\n        deploy_status TEXT,\n        last_deploy_at TEXT,\n        deploy_log_url TEXT,\n        deploy_checked_at TEXT,\n        function_health TEXT,\n        cms_reachable TEXT,\n        turnstile_widget TEXT,\n        function_health_checked_at TEXT,\n        crossbrowser_ok INTEGER,\n        mobile_ok INTEGER,\n        links_ok INTEGER,\n        broken_links INTEGER,\n        browser_checked_at TEXT,\n        uptime_reachable TEXT,\n        titles_meta_ok TEXT,\n        smoke_ok TEXT,\n        last_smoke_at TEXT,\n        form_e2e_ok TEXT,\n        form_e2e_checked_at TEXT,\n        renovate_failing_cis INTEGER,\n        default_branch_ci TEXT,\n        last_commit_at TEXT,\n        github_signals_at TEXT,\n        prismic_models TEXT,\n        prismic_models_checked_at TEXT,\n        prismic_models_drift TEXT\n      );\n\n      CREATE TABLE IF NOT EXISTS site_schedule (\n        site_id TEXT PRIMARY KEY,\n        next_maintenance_at TEXT,\n        next_testing_at TEXT,\n        computed_at TEXT\n      );\n\n      CREATE TABLE IF NOT EXISTS reports (\n        id TEXT PRIMARY KEY,\n        site_id TEXT,\n        report_id TEXT,\n        report_type TEXT,\n        period TEXT,\n        period_start TEXT,\n        period_end TEXT,\n        completed_on TEXT,\n        lighthouse_performance INTEGER,\n        lighthouse_accessibility INTEGER,\n        lighthouse_best_practices INTEGER,\n        lighthouse_seo INTEGER,\n        ga_users_current INTEGER,\n        ga_users_previous INTEGER,\n        search_found_page1 INTEGER,\n        search_position REAL,\n        last_tested_date TEXT,\n        commentary TEXT,\n        subject_override TEXT,\n        draft_ready INTEGER NOT NULL DEFAULT 0,\n        approved_to_send INTEGER NOT NULL DEFAULT 0,\n        approved_at TEXT,\n        approved_by TEXT,\n        send_override INTEGER NOT NULL DEFAULT 0,\n        override_reason TEXT,\n        override_by TEXT,\n        override_at TEXT,\n        sent_at TEXT,\n        delivery_status TEXT,\n        resend_message_id TEXT,\n        checklist TEXT,\n        checklist_auto_evidence TEXT,\n        rendered_html TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_reports_site ON reports (site_id, period_start DESC);\n    `,\n  },\n  {\n    // Indexes the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts) proved the\n    // hot paths need — each serves a named query shape that otherwise full-scans\n    // submissions, the one unbounded-growth table:\n    //   submitted_at    — every windowed read (/submissions default page, digest\n    //                     per-site counts, duplicate/repeat-sender scans)\n    //   resend_message_id — the resend-webhook bounce lookup (markNotifyBouncedByMessageId)\n    //   submission_id   — createSubmission's MAX(submission_id)+1 display number,\n    //                     O(1) off the index instead of a scan per insert\n    //   spam_reason (partial, covering) — listSpamReasonsFiltered's facet tally\n    //                     reads ONLY spam_reason WHERE spam_reason IS NOT NULL;\n    //                     partial keeps it to the spam subset\n    //   spam_screenouts(date) — listScreenOutsSince windows on date, which the\n    //                     (site_id, date) PK can't serve\n    id: \"0008_query_plan_indexes\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_submissions_submitted\n        ON submissions (submitted_at DESC);\n      CREATE INDEX IF NOT EXISTS idx_submissions_spam_reason\n        ON submissions (spam_reason) WHERE spam_reason IS NOT NULL;\n      CREATE INDEX IF NOT EXISTS idx_submissions_resend_message\n        ON submissions (resend_message_id);\n      CREATE INDEX IF NOT EXISTS idx_submissions_display_number\n        ON submissions (submission_id);\n      CREATE INDEX IF NOT EXISTS idx_screenouts_date\n        ON spam_screenouts (date);\n    `,\n  },\n  {\n    // Prospect audits (spec 2026-08-24): one row per `prospect-audit` CLI run.\n    // `token` is the unguessable public handle for GET /r/{token}; `result_json`\n    // is the full ProspectAuditResult, re-rendered on every request so report\n    // styling updates apply to already-shared links.\n    id: \"0009_prospect_audits\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS prospect_audits (\n        id TEXT PRIMARY KEY,\n        token TEXT NOT NULL UNIQUE,\n        url TEXT NOT NULL,\n        business TEXT,\n        created_at TEXT NOT NULL,\n        status TEXT NOT NULL DEFAULT 'complete',\n        result_json TEXT NOT NULL\n      );\n    `,\n  },\n  {\n    // Cockpit /audits listing page (spec 2026-08-25, Piece 5):\n    // listRecentProspectAudits orders by created_at DESC with no WHERE clause —\n    // without this index that's a raw SCAN of prospect_audits followed by a temp\n    // b-tree sort, which the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts)\n    // fails the build on. DESC matches the query's own ORDER BY so SQLite can walk\n    // the index directly instead of sorting.\n    id: \"0010_prospect_audits_created_index\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_prospect_audits_created\n        ON prospect_audits (created_at DESC);\n    `,\n  },\n  {\n    // #609 (#539 Phase 5): the digest's prior-run snapshot moves off Airtable.\n    // Unlike the rest of Phase 5 this is a MIGRATION, not a dual-write — there\n    // is no Airtable counterpart left afterwards, so parity does not cover it.\n    //\n    // A single row holding the whole snapshot as JSON, keyed by a constant id.\n    // Both readers (runDigest's diff and the fleet homepage's NEW badges) need\n    // the ENTIRE map, so a keyed table would buy nothing on reads and its\n    // \"give me everything\" query would be a raw scan needing a justified entry\n    // in the EXPLAIN gate's allowlist. One row by primary key needs neither.\n    id: \"0011_digest_state\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS digest_state (\n        id TEXT PRIMARY KEY,\n        snapshot TEXT NOT NULL,\n        updated_at TEXT\n      );\n    `,\n  },\n  {\n    // form_type was the one SubmissionFilter key with an equality predicate and no\n    // index — countSubmissionsFiltered({formType}) raw-scanned `submissions`, twice\n    // per load of the submissions page. It shipped green because the EXPLAIN gate\n    // named its scenarios by hand and never wrote one for this shape; the gate is\n    // now driven by a filter matrix, which is what surfaced it.\n    //\n    // `submissions` is the one unbounded-growth table in the schema — append-only,\n    // one row per fleet lead forever — and Turso meters ROW SCANS, so this is the\n    // cost that grows without a ceiling.\n    id: \"0012_submissions_form_type_index\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_submissions_form_type\n        ON submissions (form_type);\n    `,\n  },\n];\n","import type { Client } from \"@libsql/client\";\nimport { MIGRATIONS } from \"./migrations.js\";\n\n/** True when an error means \"this DDL was already applied\" and re-applying is a\n *  no-op we can safely ignore. `CREATE ... IF NOT EXISTS` never throws, but SQLite\n *  `ALTER TABLE ... ADD COLUMN` has no `IF NOT EXISTS`, so a re-run after a lost\n *  `_migrations` marker throws `duplicate column name: …`. Treating that as\n *  already-applied keeps `runMigrations` idempotent for `ADD COLUMN` migrations —\n *  without it a lost marker would boot-loop `openDb()` on every call. */\nfunction isAlreadyAppliedError(err: unknown): boolean {\n  const message = err instanceof Error ? err.message : String(err);\n  return /duplicate column name/i.test(message);\n}\n\n/** Apply every not-yet-applied migration in order against a raw libSQL client,\n *  tracking applied ids in `_migrations`. Idempotent: ids already present are\n *  skipped, the DDL uses IF NOT EXISTS where it can, and an already-applied\n *  `ADD COLUMN` (recognized by its error) is swallowed so the marker is still\n *  recorded. Returns the ids applied this run. Runs on every openDb() — cheap\n *  (one indexed SELECT) and the gate every fresh Turso database needs before its\n *  first write. */\nexport async function runMigrations(client: Client): Promise<string[]> {\n  await client.execute(\n    \"CREATE TABLE IF NOT EXISTS _migrations (id TEXT PRIMARY KEY, applied_at TEXT NOT NULL)\",\n  );\n  const existing = await client.execute(\"SELECT id FROM _migrations\");\n  const applied = new Set(existing.rows.map((r) => String(r.id)));\n  const ran: string[] = [];\n  for (const m of MIGRATIONS) {\n    if (applied.has(m.id)) continue;\n    try {\n      await client.executeMultiple(m.sql);\n    } catch (err) {\n      // A re-run after a lost marker can re-execute a non-idempotent `ADD COLUMN`;\n      // treat \"already applied\" as success so we still record the marker below and\n      // never boot-loop. Any other error propagates unchanged.\n      if (!isAlreadyAppliedError(err)) throw err;\n    }\n    await client.execute({\n      sql: \"INSERT INTO _migrations (id, applied_at) VALUES (?, ?)\",\n      args: [m.id, new Date().toISOString()],\n    });\n    ran.push(m.id);\n  }\n  return ran;\n}\n"],"mappings":";AAUO,IAAM,aAA0B;AAAA,EACrC;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaP;AAAA,EACA;AAAA,IACE,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAgBE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyBE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoIP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAc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xWA,SAAS,sBAAsB,KAAuB;AACpD,QAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,SAAO,yBAAyB,KAAK,OAAO;AAC9C;AASA,eAAsB,cAAc,QAAmC;AACrE,QAAM,OAAO;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,MAAM,OAAO,QAAQ,4BAA4B;AAClE,QAAM,UAAU,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9D,QAAM,MAAgB,CAAC;AACvB,aAAW,KAAK,YAAY;AAC1B,QAAI,QAAQ,IAAI,EAAE,EAAE,EAAG;AACvB,QAAI;AACF,YAAM,OAAO,gBAAgB,EAAE,GAAG;AAAA,IACpC,SAAS,KAAK;AAIZ,UAAI,CAAC,sBAAsB,GAAG,EAAG,OAAM;AAAA,IACzC;AACA,UAAM,OAAO,QAAQ;AAAA,MACnB,KAAK;AAAA,MACL,MAAM,CAAC,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,CAAC;AAAA,IACvC,CAAC;AACD,QAAI,KAAK,EAAE,EAAE;AAAA,EACf;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/db/migrations.ts","../src/db/migrate.ts"],"sourcesContent":["/** Ordered, append-only list of standard-SQL migration scripts. Each runs once,\n *  tracked by `id` in the `_migrations` table (see migrate.ts). Statements use\n *  IF NOT EXISTS so even a partial re-apply is safe. Never edit a shipped script —\n *  add a new one. Every statement in a script MUST be independently idempotent:\n *  `migrate.ts` runs each script via `executeMultiple`, which is NOT transactional,\n *  so a mid-script failure can leave earlier statements applied and the id unrecorded\n *  — a re-run then re-executes the whole script. Standard SQLite SQL only (no\n *  Turso-specific syntax) so the host stays a connection-string swap. */\nexport type Migration = { id: string; sql: string };\n\nexport const MIGRATIONS: Migration[] = [\n  {\n    id: \"0001_init\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS submissions (\n        id TEXT PRIMARY KEY,\n        submission_id INTEGER,\n        site_id TEXT NOT NULL,\n        form_type TEXT NOT NULL,\n        name TEXT NOT NULL,\n        email TEXT NOT NULL,\n        phone TEXT,\n        message TEXT,\n        extra_fields TEXT,\n        source_url TEXT,\n        utm TEXT,\n        submitted_at TEXT,\n        status TEXT NOT NULL DEFAULT 'new',\n        notify_status TEXT NOT NULL DEFAULT 'skipped',\n        resend_message_id TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_submissions_site_submitted\n        ON submissions (site_id, submitted_at DESC);\n      CREATE INDEX IF NOT EXISTS idx_submissions_status\n        ON submissions (status);\n      CREATE TABLE IF NOT EXISTS spam_screenouts (\n        site_id TEXT NOT NULL,\n        date TEXT NOT NULL,\n        honeypot INTEGER NOT NULL DEFAULT 0,\n        too_fast INTEGER NOT NULL DEFAULT 0,\n        marked_spam INTEGER NOT NULL DEFAULT 0,\n        PRIMARY KEY (site_id, date)\n      );\n    `,\n  },\n  {\n    id: \"0002_fleet_events\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS fleet_events (\n        id TEXT PRIMARY KEY,\n        ts TEXT NOT NULL,\n        type TEXT NOT NULL,\n        site_id TEXT,\n        site_name TEXT,\n        summary TEXT NOT NULL,\n        data TEXT,\n        created_at TEXT NOT NULL\n      );\n      CREATE INDEX IF NOT EXISTS idx_fleet_events_ts ON fleet_events (ts);\n    `,\n  },\n  {\n    id: \"0003_add_spam_score\",\n    // SQLite `ADD COLUMN` has no `IF NOT EXISTS`, so it is NOT self-idempotent: if the\n    // `_migrations` marker is lost after the column is added (crash between statement\n    // and marker write), a re-run would throw `duplicate column name`. `migrate.ts`\n    // recognizes that error as already-applied and records the marker, keeping the\n    // runner idempotent (see `isAlreadyAppliedError`).\n    sql: `ALTER TABLE submissions ADD COLUMN spam_score REAL;`,\n  },\n  {\n    id: \"0004_add_spam_reason\",\n    sql: `ALTER TABLE submissions ADD COLUMN spam_reason TEXT;`,\n  },\n  {\n    // Outcome of the newsletter fan-out (site webhook + Mailchimp). Before this the\n    // results were console.error-only, so a rotated Mailchimp key or an outage would\n    // silently stop signups reaching the audience with no trace anywhere the operator\n    // looks — the row still read `notify=sent`, healthy. Same non-idempotent\n    // ADD COLUMN caveat as 0003.\n    id: \"0005_add_fanout_status\",\n    sql: `ALTER TABLE submissions ADD COLUMN fanout_status TEXT;`,\n  },\n  {\n    // Phase 0 of the Airtable → Turso migration (#539): a lead whose SITE LOOKUP\n    // fails must still land somewhere durable. On 2026-08-17 the Airtable quota\n    // outage made `getWebsiteBySlug` throw before `createSubmission` ran, so every\n    // lead in the window 502'd away unrecorded — while THIS store (which holds\n    // submissions) was healthy the whole time. Rows here are written only on that\n    // path and replayed through the normal pipeline once the lookup recovers\n    // (`db replay-deadletters`), producing an ordinary submissions row with real\n    // spam classification and notify. Deliberately a separate table rather than a\n    // nullable `submissions.site_id`: site_id is NOT NULL, every reader assumes a\n    // real rec id, and a sentinel would collapse dashboard grouping (the \"\" key\n    // hazard audit.ts already documents).\n    //\n    // `turnstile` stores the verification COMPUTED AT RECEIPT ({outcome, hostname}\n    // JSON) — tokens expire in 300s, so replay could never re-verify; it replays\n    // with the answer we already had.\n    id: \"0006_submission_deadletter\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS submission_deadletter (\n        id TEXT PRIMARY KEY,\n        site_slug TEXT NOT NULL,\n        payload TEXT NOT NULL,\n        turnstile TEXT NOT NULL,\n        error TEXT NOT NULL,\n        received_at TEXT NOT NULL,\n        replayed_at TEXT,\n        replay_outcome TEXT,\n        replay_submission_id TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_deadletter_unreplayed\n        ON submission_deadletter (replayed_at);\n    `,\n  },\n  {\n    // Phase 1.2 of the Airtable → Turso migration (#539): the fleet-state tables.\n    // Split by WRITER, not topic (design D2, confirmed by the 2026-08-23 writer\n    // map — every code-written column has exactly one writer):\n    //   sites         — operator (dashboard editor / console / launch flow)\n    //   site_health   — the nightly audit write-back, one batched upsert\n    //   site_schedule — updateNextDueDates (report cron, derived)\n    //   reports       — report drafting + the operator approve flow\n    // PKs are the Airtable `rec…` ids (design D1): 278+ submissions rows already\n    // reference them, and the parity harness diffs the two stores row-for-row.\n    //\n    // Naming: snake_case throughout; Airtable's misspellings (\"maintenence\") and\n    // display quirks die here. `sites.legacy` is a JSON object holding the 33\n    // populated-but-code-unreferenced columns (launch-era checklist, hosting\n    // reference cells) keyed by their original Airtable column name — data kept,\n    // schema not fossilized. The plaintext DNS/cms credential cells deliberately\n    // do NOT migrate at all (operator ruling 2026-08-23); they live on only in\n    // the frozen base. `site_health.analytics_soft_fail_at` is the column code\n    // always wanted (\"Analytics soft-fail at\") but no operator ever created in\n    // Airtable — it ships real here.\n    //\n    // reports.checklist is JSON keyed by the STABLE checklist key (\"deploy\",\n    // \"cms\", …, from src/reports/checklist.ts), not the Airtable column name —\n    // the importer translates, so \"Test: Verified After Updates\" stops leaking\n    // its legacy name into a second store.\n    id: \"0007_fleet_state\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS sites (\n        id TEXT PRIMARY KEY,\n        slug TEXT NOT NULL UNIQUE,\n        name TEXT NOT NULL,\n        url TEXT,\n        status TEXT,\n        point_of_contact TEXT,\n        maintenance_freq TEXT,\n        testing_freq TEXT,\n        maintenance_day TEXT,\n        testing_day TEXT,\n        ga4_property_id TEXT,\n        search_query TEXT,\n        search_console_property TEXT,\n        git_repo TEXT,\n        netlify_id TEXT,\n        report_recipients_to TEXT,\n        report_recipients_cc TEXT,\n        copy_intro TEXT,\n        copy_contact TEXT,\n        copy_footer TEXT,\n        newsletter_webhook TEXT,\n        mailchimp_api_key TEXT,\n        mailchimp_audience_id TEXT,\n        notify_routing TEXT,\n        require_turnstile INTEGER NOT NULL DEFAULT 0,\n        accepted_watch_conditions TEXT,\n        prismic_ack_until TEXT,\n        launched_at TEXT,\n        header_image BLOB,\n        header_image_filename TEXT,\n        header_image_type TEXT,\n        header_image_generated_at TEXT,\n        legacy TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_sites_status ON sites (status);\n\n      CREATE TABLE IF NOT EXISTS site_health (\n        site_id TEXT PRIMARY KEY,\n        p_score INTEGER,\n        r_score INTEGER,\n        bp_score INTEGER,\n        seo_score INTEGER,\n        lighthouse_at TEXT,\n        a11y_violations INTEGER,\n        deps_drifted INTEGER,\n        deps_major_behind INTEGER,\n        deps_outdated INTEGER,\n        deps_major_outdated INTEGER,\n        vulns_critical INTEGER,\n        vulns_high INTEGER,\n        vulns_moderate INTEGER,\n        vulns_low INTEGER,\n        security_audit_at TEXT,\n        security_advisories TEXT,\n        auto_fix_attempts INTEGER,\n        analytics_soft_fail_at TEXT,\n        cert_days_remaining INTEGER,\n        domain_checked_at TEXT,\n        deploy_status TEXT,\n        last_deploy_at TEXT,\n        deploy_log_url TEXT,\n        deploy_checked_at TEXT,\n        function_health TEXT,\n        cms_reachable TEXT,\n        turnstile_widget TEXT,\n        function_health_checked_at TEXT,\n        crossbrowser_ok INTEGER,\n        mobile_ok INTEGER,\n        links_ok INTEGER,\n        broken_links INTEGER,\n        browser_checked_at TEXT,\n        uptime_reachable TEXT,\n        titles_meta_ok TEXT,\n        smoke_ok TEXT,\n        last_smoke_at TEXT,\n        form_e2e_ok TEXT,\n        form_e2e_checked_at TEXT,\n        renovate_failing_cis INTEGER,\n        default_branch_ci TEXT,\n        last_commit_at TEXT,\n        github_signals_at TEXT,\n        prismic_models TEXT,\n        prismic_models_checked_at TEXT,\n        prismic_models_drift TEXT\n      );\n\n      CREATE TABLE IF NOT EXISTS site_schedule (\n        site_id TEXT PRIMARY KEY,\n        next_maintenance_at TEXT,\n        next_testing_at TEXT,\n        computed_at TEXT\n      );\n\n      CREATE TABLE IF NOT EXISTS reports (\n        id TEXT PRIMARY KEY,\n        site_id TEXT,\n        report_id TEXT,\n        report_type TEXT,\n        period TEXT,\n        period_start TEXT,\n        period_end TEXT,\n        completed_on TEXT,\n        lighthouse_performance INTEGER,\n        lighthouse_accessibility INTEGER,\n        lighthouse_best_practices INTEGER,\n        lighthouse_seo INTEGER,\n        ga_users_current INTEGER,\n        ga_users_previous INTEGER,\n        search_found_page1 INTEGER,\n        search_position REAL,\n        last_tested_date TEXT,\n        commentary TEXT,\n        subject_override TEXT,\n        draft_ready INTEGER NOT NULL DEFAULT 0,\n        approved_to_send INTEGER NOT NULL DEFAULT 0,\n        approved_at TEXT,\n        approved_by TEXT,\n        send_override INTEGER NOT NULL DEFAULT 0,\n        override_reason TEXT,\n        override_by TEXT,\n        override_at TEXT,\n        sent_at TEXT,\n        delivery_status TEXT,\n        resend_message_id TEXT,\n        checklist TEXT,\n        checklist_auto_evidence TEXT,\n        rendered_html TEXT\n      );\n      CREATE INDEX IF NOT EXISTS idx_reports_site ON reports (site_id, period_start DESC);\n    `,\n  },\n  {\n    // Indexes the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts) proved the\n    // hot paths need — each serves a named query shape that otherwise full-scans\n    // submissions, the one unbounded-growth table:\n    //   submitted_at    — every windowed read (/submissions default page, digest\n    //                     per-site counts, duplicate/repeat-sender scans)\n    //   resend_message_id — the resend-webhook bounce lookup (markNotifyBouncedByMessageId)\n    //   submission_id   — createSubmission's MAX(submission_id)+1 display number,\n    //                     O(1) off the index instead of a scan per insert\n    //   spam_reason (partial, covering) — listSpamReasonsFiltered's facet tally\n    //                     reads ONLY spam_reason WHERE spam_reason IS NOT NULL;\n    //                     partial keeps it to the spam subset\n    //   spam_screenouts(date) — listScreenOutsSince windows on date, which the\n    //                     (site_id, date) PK can't serve\n    id: \"0008_query_plan_indexes\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_submissions_submitted\n        ON submissions (submitted_at DESC);\n      CREATE INDEX IF NOT EXISTS idx_submissions_spam_reason\n        ON submissions (spam_reason) WHERE spam_reason IS NOT NULL;\n      CREATE INDEX IF NOT EXISTS idx_submissions_resend_message\n        ON submissions (resend_message_id);\n      CREATE INDEX IF NOT EXISTS idx_submissions_display_number\n        ON submissions (submission_id);\n      CREATE INDEX IF NOT EXISTS idx_screenouts_date\n        ON spam_screenouts (date);\n    `,\n  },\n  {\n    // Prospect audits (spec 2026-08-24): one row per `prospect-audit` CLI run.\n    // `token` is the unguessable public handle for GET /r/{token}; `result_json`\n    // is the full ProspectAuditResult, re-rendered on every request so report\n    // styling updates apply to already-shared links.\n    id: \"0009_prospect_audits\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS prospect_audits (\n        id TEXT PRIMARY KEY,\n        token TEXT NOT NULL UNIQUE,\n        url TEXT NOT NULL,\n        business TEXT,\n        created_at TEXT NOT NULL,\n        status TEXT NOT NULL DEFAULT 'complete',\n        result_json TEXT NOT NULL\n      );\n    `,\n  },\n  {\n    // Cockpit /audits listing page (spec 2026-08-25, Piece 5):\n    // listRecentProspectAudits orders by created_at DESC with no WHERE clause —\n    // without this index that's a raw SCAN of prospect_audits followed by a temp\n    // b-tree sort, which the EXPLAIN-query-plan gate (tests/db/query-plans.test.ts)\n    // fails the build on. DESC matches the query's own ORDER BY so SQLite can walk\n    // the index directly instead of sorting.\n    id: \"0010_prospect_audits_created_index\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_prospect_audits_created\n        ON prospect_audits (created_at DESC);\n    `,\n  },\n  {\n    // #609 (#539 Phase 5): the digest's prior-run snapshot moves off Airtable.\n    // Unlike the rest of Phase 5 this is a MIGRATION, not a dual-write — there\n    // is no Airtable counterpart left afterwards, so parity does not cover it.\n    //\n    // A single row holding the whole snapshot as JSON, keyed by a constant id.\n    // Both readers (runDigest's diff and the fleet homepage's NEW badges) need\n    // the ENTIRE map, so a keyed table would buy nothing on reads and its\n    // \"give me everything\" query would be a raw scan needing a justified entry\n    // in the EXPLAIN gate's allowlist. One row by primary key needs neither.\n    id: \"0011_digest_state\",\n    sql: `\n      CREATE TABLE IF NOT EXISTS digest_state (\n        id TEXT PRIMARY KEY,\n        snapshot TEXT NOT NULL,\n        updated_at TEXT\n      );\n    `,\n  },\n  {\n    // form_type was the one SubmissionFilter key with an equality predicate and no\n    // index — countSubmissionsFiltered({formType}) raw-scanned `submissions`, twice\n    // per load of the submissions page. It shipped green because the EXPLAIN gate\n    // named its scenarios by hand and never wrote one for this shape; the gate is\n    // now driven by a filter matrix, which is what surfaced it.\n    //\n    // `submissions` is the one unbounded-growth table in the schema — append-only,\n    // one row per fleet lead forever — and Turso meters ROW SCANS, so this is the\n    // cost that grows without a ceiling.\n    id: \"0012_submissions_form_type_index\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_submissions_form_type\n        ON submissions (form_type);\n    `,\n  },\n  {\n    // `url` is stored exactly as audited, which makes it a record of the run and\n    // a bad thing to group by: the table already holds beachfrontdentistry.com\n    // and beachfrontdentistry.com/ as two histories of one practice, and both\n    // spellings of ludlowkingsley.com. That costs nothing today because nothing\n    // compares two audits of one site — and becomes a returning client with no\n    // history the day the report offers a before and an after.\n    //\n    // Deliberately no SQL backfill. Doing it with lower()/replace()/rtrim()\n    // would mangle any URL containing \"www.\" or \"http://\" away from its start,\n    // and a key that is quietly wrong is worse than one that is null. Existing\n    // rows are backfilled once with the real siteKey().\n    // Same ADD COLUMN caveat as 0003: no IF NOT EXISTS in SQLite, so the runner\n    // treats \"duplicate column name\" as already-applied. Kept as its own\n    // migration, separate from its index below, so that recovery path stays a\n    // single statement.\n    id: \"0013_prospect_audits_site_key\",\n    sql: `ALTER TABLE prospect_audits ADD COLUMN site_key TEXT;`,\n  },\n  {\n    id: \"0014_prospect_audits_site_key_index\",\n    sql: `\n      CREATE INDEX IF NOT EXISTS idx_prospect_audits_site_key\n        ON prospect_audits (site_key, created_at DESC);\n    `,\n  },\n];\n","import type { Client } from \"@libsql/client\";\nimport { MIGRATIONS } from \"./migrations.js\";\n\n/** True when an error means \"this DDL was already applied\" and re-applying is a\n *  no-op we can safely ignore. `CREATE ... IF NOT EXISTS` never throws, but SQLite\n *  `ALTER TABLE ... ADD COLUMN` has no `IF NOT EXISTS`, so a re-run after a lost\n *  `_migrations` marker throws `duplicate column name: …`. Treating that as\n *  already-applied keeps `runMigrations` idempotent for `ADD COLUMN` migrations —\n *  without it a lost marker would boot-loop `openDb()` on every call. */\nfunction isAlreadyAppliedError(err: unknown): boolean {\n  const message = err instanceof Error ? err.message : String(err);\n  return /duplicate column name/i.test(message);\n}\n\n/** Apply every not-yet-applied migration in order against a raw libSQL client,\n *  tracking applied ids in `_migrations`. Idempotent: ids already present are\n *  skipped, the DDL uses IF NOT EXISTS where it can, and an already-applied\n *  `ADD COLUMN` (recognized by its error) is swallowed so the marker is still\n *  recorded. Returns the ids applied this run. Runs on every openDb() — cheap\n *  (one indexed SELECT) and the gate every fresh Turso database needs before its\n *  first write. */\nexport async function runMigrations(client: Client): Promise<string[]> {\n  await client.execute(\n    \"CREATE TABLE IF NOT EXISTS _migrations (id TEXT PRIMARY KEY, applied_at TEXT NOT NULL)\",\n  );\n  const existing = await client.execute(\"SELECT id FROM _migrations\");\n  const applied = new Set(existing.rows.map((r) => String(r.id)));\n  const ran: string[] = [];\n  for (const m of MIGRATIONS) {\n    if (applied.has(m.id)) continue;\n    try {\n      await client.executeMultiple(m.sql);\n    } catch (err) {\n      // A re-run after a lost marker can re-execute a non-idempotent `ADD COLUMN`;\n      // treat \"already applied\" as success so we still record the marker below and\n      // never boot-loop. Any other error propagates unchanged.\n      if (!isAlreadyAppliedError(err)) throw err;\n    }\n    await client.execute({\n      sql: \"INSERT INTO _migrations (id, applied_at) VALUES (?, ?)\",\n      args: [m.id, new Date().toISOString()],\n    });\n    ran.push(m.id);\n  }\n  return ran;\n}\n"],"mappings":";AAUO,IAAM,aAA0B;AAAA,EACrC;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA+BP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaP;AAAA,EACA;AAAA,IACE,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAME,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAgBE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyBE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoIP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAcE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA,EAIP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA,EAIP;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAgBE,IAAI;AAAA,IACJ,KAAK;AAAA,EACP;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,KAAK;AAAA;AAAA;AAAA;AAAA,EAIP;AACF;;;AClYA,SAAS,sBAAsB,KAAuB;AACpD,QAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,SAAO,yBAAyB,KAAK,OAAO;AAC9C;AASA,eAAsB,cAAc,QAAmC;AACrE,QAAM,OAAO;AAAA,IACX;AAAA,EACF;AACA,QAAM,WAAW,MAAM,OAAO,QAAQ,4BAA4B;AAClE,QAAM,UAAU,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9D,QAAM,MAAgB,CAAC;AACvB,aAAW,KAAK,YAAY;AAC1B,QAAI,QAAQ,IAAI,EAAE,EAAE,EAAG;AACvB,QAAI;AACF,YAAM,OAAO,gBAAgB,EAAE,GAAG;AAAA,IACpC,SAAS,KAAK;AAIZ,UAAI,CAAC,sBAAsB,GAAG,EAAG,OAAM;AAAA,IACzC;AACA,UAAM,OAAO,QAAQ;AAAA,MACnB,KAAK;AAAA,MACL,MAAM,CAAC,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,CAAC;AAAA,IACvC,CAAC;AACD,QAAI,KAAK,EAAE,EAAE;AAAA,EACf;AACA,SAAO;AACT;","names":[]}