@aeptus/aexeo-emdash 0.8.8 → 0.8.10

package/CHANGELOG.md

@@ -6,6 +6,153 @@ and the project follows [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.8.10] - 2026-05-04
+
+Two follow-up quality fixes from Aeptus's 0.8.9 retest, plus
+four new product-level capabilities from the post-retest
+roadmap discussion.
+
+### Added (engine via bridge)
+
+- **`SOC006` enabled by default.** Missing `og:image` now
+  surfaces on every audit. The rule existed but was gated
+  behind `require_social_images = false`; flipped to true.
+- **`SOC009` (heuristic).** Recommends `summary_large_image`
+  when `twitter:card` is plain `summary`. Editors can keep
+  `summary` if they want; this is a nudge, not a blocker.
+- **`CNT006` (heuristic, low-confidence).** Generic-beneficiary
+  detector — flags abstract audience-needs copy
+  ("Needs speed and clarity to make decisions") that has no
+  concrete anchoring (numbers, named tools, quotes). Skips
+  when concrete-anchor tokens (`study`, `research`, etc.)
+  appear nearby. Editors can suppress via the new
+  `[route_kinds]` config block.
+- **`[route_kinds]` config block.** Named per-pattern rule
+  masking that compiles to virtual suppressions:
+  ```toml
+  [route_kinds.manifesto]
+  match = ["/foundations/"]
+  skip_rules = ["GEO007", "GEO008", "GEO010"]
+  noindex = false
+  ```
+  Bundles a path-pattern set with a stance (which rules
+  to skip, whether routes are intentionally noindex). Lighter
+  than scattering one suppression per rule × pattern.
+
+### Fixed
+
+- **Findings now attribute to document routes, not synthesized
+  HTML filenames.** v0.8.9's bridge set `page.path` to
+  `emdash/<route>.html`, which the plugin's
+  `evaluateAndPersistAll` then used as the bucket key when
+  distributing findings to document routes. The synthesized
+  filename never matched the documentRoutes set, so every
+  finding landed in a shadow bucket keyed by the filename and
+  the document's row in the admin showed zero findings. Bridge
+  now sets `page.path` to the document route directly
+  (`/about` rather than `emdash/about.html`); `Finding.path`
+  matches the bucket the plugin pre-populates.
+
+### Changed
+
+- **CMS evaluation suppresses site-wide infrastructure rule
+  groups.** The plugin's configured-mode evaluator now passes
+  a Config to `evaluateDocuments` that disables `robots`,
+  `sitemap`, `llm`, `surfaces`, `well_known`, `headers`, and
+  `deployment` rule groups. The CMS document set has no
+  robots.txt or sitemap.xml or llms.txt — those are the
+  host's deployed-site artifacts, audited by the CLI's
+  static-site mode against a real filesystem. Running them
+  against the bridge's synthetic CMS site produced
+  `missing robots.txt` / `missing sitemap.xml` / `missing
+  llms.txt` / `missing markdown mirrors` noise on every
+  refresh, none of which the editor could act on from inside
+  the CMS.
+
+  Per-page rule groups stay on: `html`, `social`, `schema`,
+  `content`, `structure`, `links`. Those audit per-document
+  content editors can actually fix.
+
+  CLI static-site audits are unaffected — they use
+  `Config::default()` with all groups on, against a
+  filesystem-rooted Site.
+
+### Notes for hosts upgrading from 0.8.9
+
+- No code changes required for any of the fixes or additions.
+- After bumping, the admin's findings page will show:
+  - Fewer findings overall (infrastructure noise is gone) and
+    every finding correctly attributed to its document route.
+  - **New** SOC006 findings on every document missing og:image.
+  - **New** SOC009 nudges on documents declaring
+    `twitter:card = summary`.
+  - **New** CNT006 nudges on documents whose visible text has
+    generic-beneficiary copy without concrete anchors.
+- If the new SOC/CNT findings are too noisy on a specific
+  route family, declare a `[route_kinds.X]` block in
+  `aexeo.toml` with `match` patterns and a `skip_rules` list.
+  Example:
+  ```toml
+  [route_kinds.manifesto]
+  match = ["/foundations/"]
+  skip_rules = ["CNT006", "GEO007"]
+  noindex = false
+  ```
+- For the infrastructure-level audit (robots/sitemap/llms/
+  well-known/etc.), run `aexeo-cli check` against your static
+  dist; that's where those rules belong.
+
+### CLI side (aexeo-cli, same release)
+
+- **`aexeo-cli crawl --cf-access-id … --cf-access-secret …`**
+  injects Cloudflare Access service-token headers
+  (`CF-Access-Client-Id` + `CF-Access-Client-Secret`) on every
+  fetch. Falls back to env vars `CF_ACCESS_CLIENT_ID` /
+  `CF_ACCESS_CLIENT_SECRET` when flags are absent. Closes the
+  loop for hosts whose preview deploys are behind Cloudflare
+  Access (Aeptus's CI was blocked on this).
+
+## [0.8.9] - 2026-05-04
+
+### Fixed
+
+- **`wasm_error: unreachable` on refresh in Astro dev.** v0.8.8
+  fixed the Astro/Vite startup regression but a second issue
+  remained: refresh evaluation traps with bare
+  `wasm_error: unreachable` in Node-loaded WASM. Root cause is
+  `std::time::Instant::now()` panicking on
+  `wasm32-unknown-unknown` ("time not implemented on this
+  platform"). Cloudflare Workers' workerd runtime appears to
+  provide a clock shim that masks the panic in production; Node's
+  experimental WASM ESM runner does not.
+
+  Fixed by adding `aexeo_core::time_shim::Instant` — a transparent
+  re-export of `std::time::Instant` on non-wasm targets, and a
+  no-op `Duration::ZERO` returner on `wasm32-unknown-unknown`.
+  Eval-path callers (`static_check.rs` + the intelligence
+  modules) swap their import; CLI and native tests still report
+  real timings on real OSes. The `RuleTiming` `elapsed_us` value
+  in `SiteCheckProfile` is `0` when the bridge runs in the
+  plugin, but no host consumes that field from the bridge today.
+
+### Added
+
+- **`console_error_panic_hook` in the bridge.** Future Rust
+  panics inside the bridge surface as console errors with
+  `file:line` + message instead of bare `unreachable` traps.
+  Installed lazily at every `#[wasm_bindgen]` entry point;
+  `set_once` is idempotent so repeated calls are cheap. Without
+  this, the v0.8.7→v0.8.8 `Instant::now()` panic was effectively
+  undebuggable from the host side — every future bridge bug now
+  carries its own diagnostic.
+
+### Notes for hosts upgrading from 0.8.8
+
+- No code changes required. Bump the package; refresh should
+  stop trapping in `pnpm dev` / `astro dev`.
+- Production behavior unchanged — the shim is only active on
+  the wasm32 build path.
+
 ## [0.8.8] - 2026-05-04
 
 ### Fixed
@@ -867,7 +1014,9 @@ First public release.
   `astro.config.mjs` for the WASM import to resolve to a
   precompiled `WebAssembly.Module`. Not optional.
 
-[Unreleased]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.8...HEAD
+[Unreleased]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.10...HEAD
+[0.8.10]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.9...aexeo-emdash-v0.8.10
+[0.8.9]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.8...aexeo-emdash-v0.8.9
 [0.8.8]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.7...aexeo-emdash-v0.8.8
 [0.8.7]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.6...aexeo-emdash-v0.8.7
 [0.8.6]: https://github.com/schiste/Aexeo/compare/aexeo-emdash-v0.8.5...aexeo-emdash-v0.8.6

package/dist/configured.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configured.d.ts","sourceRoot":"","sources":["../src/configured.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmFrD,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEhC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CACvC;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,uBAA4B,GAAG,OAAO,CA2H3E;AAID,eAAe,YAAY,CAAC"}
+{"version":3,"file":"configured.d.ts","sourceRoot":"","sources":["../src/configured.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA0HrD,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEhC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CACvC;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,uBAA4B,GAAG,OAAO,CA2H3E;AAID,eAAe,YAAY,CAAC"}

package/dist/configured.js

@@ -233,7 +233,10 @@ async function readFindings(kv, route) {
 var aexeo_emdash_bridge_bg_exports = {};
 __export(aexeo_emdash_bridge_bg_exports, {
   __wbg_Error_960c155d3d49e4c2: () => __wbg_Error_960c155d3d49e4c2,
+  __wbg_error_a6fa202b58aa1cd3: () => __wbg_error_a6fa202b58aa1cd3,
+  __wbg_new_227d7c05414eb861: () => __wbg_new_227d7c05414eb861,
   __wbg_set_wasm: () => __wbg_set_wasm,
+  __wbg_stack_3b0d974bbf31e44f: () => __wbg_stack_3b0d974bbf31e44f,
   __wbindgen_init_externref_table: () => __wbindgen_init_externref_table,
   evaluateDocuments: () => evaluateDocuments,
   generateFactsPrompt: () => generateFactsPrompt,
@@ -334,6 +337,28 @@ function __wbg_Error_960c155d3d49e4c2(arg0, arg1) {
   const ret = Error(getStringFromWasm0(arg0, arg1));
   return ret;
 }
+function __wbg_error_a6fa202b58aa1cd3(arg0, arg1) {
+  let deferred0_0;
+  let deferred0_1;
+  try {
+    deferred0_0 = arg0;
+    deferred0_1 = arg1;
+    console.error(getStringFromWasm0(arg0, arg1));
+  } finally {
+    wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+  }
+}
+function __wbg_new_227d7c05414eb861() {
+  const ret = new Error();
+  return ret;
+}
+function __wbg_stack_3b0d974bbf31e44f(arg0, arg1) {
+  const ret = arg1.stack;
+  const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+  const len1 = WASM_VECTOR_LEN;
+  getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+  getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+}
 function __wbindgen_init_externref_table() {
   const table = wasm.__wbindgen_externrefs;
   const offset = table.grow(4);
@@ -343,6 +368,13 @@ function __wbindgen_init_externref_table() {
   table.set(offset + 2, true);
   table.set(offset + 3, false);
 }
+var cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+  if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || cachedDataViewMemory0.buffer.detached === void 0 && cachedDataViewMemory0.buffer !== wasm.memory.buffer) {
+    cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+  }
+  return cachedDataViewMemory0;
+}
 function getStringFromWasm0(ptr, len) {
   ptr = ptr >>> 0;
   return decodeText(ptr, len);
@@ -1183,7 +1215,7 @@ function globToMatcher(pattern) {
 }
 
 // src/version.ts
-var PACKAGE_VERSION = "0.8.8";
+var PACKAGE_VERSION = "0.8.10";
 
 // src/configured.ts
 import { definePlugin } from "emdash";
@@ -1206,9 +1238,28 @@ function resolveCollections(explicit, include, exclude) {
   }
   return result;
 }
+var CMS_DISABLED_GROUPS = [
+  "robots",
+  "sitemap",
+  "llm",
+  "surfaces",
+  "well_known",
+  "headers",
+  "deployment"
+];
+function buildCmsContextConfig() {
+  const checks = {};
+  for (const group of CMS_DISABLED_GROUPS) {
+    checks[group] = false;
+  }
+  return JSON.stringify({ checks });
+}
 var inProcessEvaluator = async (documents) => {
   try {
-    const raw = await evaluateDocuments2(JSON.stringify(documents));
+    const raw = await evaluateDocuments2(
+      JSON.stringify(documents),
+      buildCmsContextConfig()
+    );
     const findings = JSON.parse(raw);
     if (!Array.isArray(findings)) {
       return {

package/dist/index.js

@@ -23,7 +23,7 @@ function buildAllowedHosts(evaluatorHost) {
 }
 
 // src/version.ts
-var PACKAGE_VERSION = "0.8.8";
+var PACKAGE_VERSION = "0.8.10";
 
 // src/sandbox.ts
 function aexeoPluginSandboxed(options = {}) {

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PACKAGE_VERSION = "0.8.8";
+export declare const PACKAGE_VERSION = "0.8.10";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,UAAU,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,WAAW,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeptus/aexeo-emdash",
-  "version": "0.8.8",
+  "version": "0.8.10",
   "description": "Aexeo SEO/GEO content evaluator as an emdash plugin",
   "license": "MIT",
   "author": "Aeptus",

package/wasm/aexeo_emdash_bridge_bg.js

@@ -117,6 +117,28 @@ export function __wbg_Error_960c155d3d49e4c2(arg0, arg1) {
     const ret = Error(getStringFromWasm0(arg0, arg1));
     return ret;
 }
+export function __wbg_error_a6fa202b58aa1cd3(arg0, arg1) {
+    let deferred0_0;
+    let deferred0_1;
+    try {
+        deferred0_0 = arg0;
+        deferred0_1 = arg1;
+        console.error(getStringFromWasm0(arg0, arg1));
+    } finally {
+        wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+    }
+}
+export function __wbg_new_227d7c05414eb861() {
+    const ret = new Error();
+    return ret;
+}
+export function __wbg_stack_3b0d974bbf31e44f(arg0, arg1) {
+    const ret = arg1.stack;
+    const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+}
 export function __wbindgen_init_externref_table() {
     const table = wasm.__wbindgen_externrefs;
     const offset = table.grow(4);
@@ -126,6 +148,14 @@ export function __wbindgen_init_externref_table() {
     table.set(offset + 2, true);
     table.set(offset + 3, false);
 }
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
 function getStringFromWasm0(ptr, len) {
     ptr = ptr >>> 0;
     return decodeText(ptr, len);

package/wasm/aexeo_emdash_bridge_bg.wasm.d.ts

@@ -5,9 +5,9 @@ export const evaluateDocuments: (a: number, b: number, c: number, d: number) =>
 export const generateFactsPrompt: (a: number, b: number) => [number, number, number, number];
 export const scoreIntelligence: (a: number, b: number, c: number, d: number) => [number, number, number, number];
 export const validateFactsManifest: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-export const __wbindgen_externrefs: WebAssembly.Table;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_externrefs: WebAssembly.Table;
 export const __externref_table_dealloc: (a: number) => void;
-export const __wbindgen_free: (a: number, b: number, c: number) => void;
 export const __wbindgen_start: () => void;