@brandlab-digital/conformance 1.0.0-rc.18 → 1.0.0-rc.20

package/dist/project-config-v3.d.ts

@@ -1,6 +1,7 @@
 export declare const BRANDLAB_CONFIG_V3_RULESET_ID = "project-config-v3@1.0.0-rc.2";
 export declare const BRANDLAB_CONFIG_V4_RULESET_ID = "project-config-v4@1.0.0-rc.12";
-export type BrandlabInspectableConfigurationContract = "project-config-v3" | "project-config-v4";
+export declare const BRANDLAB_CONFIG_V5_RULESET_ID = "project-config-v5@1.0.0-rc.19";
+export type BrandlabInspectableConfigurationContract = "project-config-v3" | "project-config-v4" | "project-config-v5";
 export declare const BRANDLAB_CONFIG_V3_PROFILES: readonly ["next-local-service", "next-root-level", "next-static-legacy", "legacy-php"];
 export interface InspectedBrandlabProjectConfig {
     projectId: string;

package/dist/project-config-v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-config-v3.d.ts","sourceRoot":"","sources":["../src/project-config-v3.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,6BAA6B,iCAAiC,CAAC;AAC5E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAC7E,MAAM,MAAM,wCAAwC,GAChD,mBAAmB,GACnB,mBAAmB,CAAC;AAExB,eAAO,MAAM,2BAA2B,wFAK9B,CAAC;AA+CX,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,EAAE;QACN,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,mBAAmB,EAAE;QACnB,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACxD,CAAC;IACF,YAAY,EAAE;QACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,EAAE,OAAO,CAAC;QACxB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3C,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IACzC,YAAY,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,8BAA8B,GAAG,IAAI,CAAC;IAC9C,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAuLD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,wCAAwC,CAAA;CAAO,GAC3E,0BAA0B,CA6G5B;AA6/FD,sFAAsF;AACtF,wBAAgB,2CAA2C,CAAC,UAAU,EAAE,MAAM,UAe7E"}
+{"version":3,"file":"project-config-v3.d.ts","sourceRoot":"","sources":["../src/project-config-v3.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,6BAA6B,iCAAiC,CAAC;AAC5E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAC7E,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAC7E,MAAM,MAAM,wCAAwC,GAChD,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,CAAC;AAExB,eAAO,MAAM,2BAA2B,wFAK9B,CAAC;AA+CX,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,EAAE;QACN,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,mBAAmB,EAAE;QACnB,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KACxD,CAAC;IACF,YAAY,EAAE;QACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,EAAE,OAAO,CAAC;QACxB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3C,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IACzC,YAAY,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAC;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,8BAA8B,GAAG,IAAI,CAAC;IAC9C,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,qBAAqB,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAuOD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,wCAAwC,CAAA;CAAO,GAC3E,0BAA0B,CA6G5B;AA0gGD,sFAAsF;AACtF,wBAAgB,2CAA2C,CAAC,UAAU,EAAE,MAAM,UAe7E"}

package/dist/project-config-v3.js

@@ -8,6 +8,7 @@ import { extname, join, relative } from "node:path";
 import * as ts from "typescript";
 export const BRANDLAB_CONFIG_V3_RULESET_ID = "project-config-v3@1.0.0-rc.2";
 export const BRANDLAB_CONFIG_V4_RULESET_ID = "project-config-v4@1.0.0-rc.12";
+export const BRANDLAB_CONFIG_V5_RULESET_ID = "project-config-v5@1.0.0-rc.19";
 export const BRANDLAB_CONFIG_V3_PROFILES = [
     "next-local-service",
     "next-root-level",
@@ -184,6 +185,54 @@ const FORBIDDEN_CANDIDATE_EXPORTS = [
     },
 ];
 const PROTECTED_LOCAL_PATTERNS = [
+    {
+        ruleId: "brandlab-config-v3-circular-business-evidence",
+        minimumContract: "project-config-v5",
+        surface: "business",
+        pattern: /\b(?:existing-production-config|repository-config|source-code):/i,
+        expected: "Verified business facts cite independent evidence, not the repository value being verified.",
+        remediation: "Use structured official-registry, GBP, client-document, first-party-record or public-authority evidence; otherwise mark the fact unknown.",
+    },
+    {
+        ruleId: "brandlab-config-v3-service-area-public-address",
+        minimumContract: "project-config-v5",
+        surface: "business",
+        pattern: /\bmodel\s*:\s*["']service-area["'][\s\S]{0,1200}\baddressVisibility\s*:\s*["']public["']|\baddressVisibility\s*:\s*["']public["'][\s\S]{0,1200}\bmodel\s*:\s*["']service-area["']/i,
+        expected: "Customer-location-only service-area businesses keep address facts hidden.",
+        remediation: "Use model service-area, addressVisibility hidden and an unknown or not-applicable address fact.",
+    },
+    {
+        ruleId: "brandlab-config-v3-synthetic-review-proof",
+        minimumContract: "project-config-v5",
+        surface: "location-proof",
+        pattern: /\bregion-review:[^"'`\n]*[\s\S]{0,2400}\b(?:review\?\.\w+\s*\|\||trust\s+\w+|customer feedback across)\b/i,
+        expected: "Review proof exists only when an approved review record is bound to business.proof.",
+        remediation: "Remove fallback review proof and use verified review evidence or no review proof.",
+    },
+    {
+        ruleId: "brandlab-config-v3-local-programmatic-proof-derivation",
+        minimumContract: "project-config-v5",
+        surface: "location-proof",
+        pattern: /\bfunction\s+getProofLevelFromAssetIds\s*\(/,
+        expected: "Programmatic proof levels are derived by @brandlab-digital/site-core/locations.",
+        remediation: "Remove the project-local proof classifier and call defineLocationRouteQuality with business.proof.",
+    },
+    {
+        ruleId: "brandlab-config-v3-hardcoded-search-demand",
+        minimumContract: "project-config-v5",
+        surface: "location-quality",
+        pattern: /\bsearchDemand\s*:\s*["']medium["']/,
+        expected: "Search demand is observed from evidence or explicitly unknown.",
+        remediation: "Replace the assumed medium value with unknown or an evidence-backed observed record.",
+    },
+    {
+        ruleId: "brandlab-config-v3-hidden-focusable-content",
+        minimumContract: "project-config-v5",
+        surface: "accessibility",
+        pattern: /\baria-hidden\s*=\s*(?:\{\s*true\s*\}|["']true["'])[\s\S]{0,1200}<\s*(?:a|button|input|select|textarea)\b/i,
+        expected: "Collapsed or aria-hidden content contains no focusable controls.",
+        remediation: "Remove collapsed controls from the DOM or make every descendant unfocusable until the content is visible.",
+    },
     {
         ruleId: "brandlab-config-v3-local-contact-transport",
         surface: "contact",
@@ -239,7 +288,7 @@ const PROTECTED_LOCAL_PATTERNS = [
     },
 ];
 export function inspectBrandlabConfigV3(root, options = {}) {
-    const contractVersion = options.contractVersion ?? "project-config-v4";
+    const contractVersion = options.contractVersion ?? "project-config-v5";
     const issues = [];
     const configPath = join(root, "brandlab.config.ts");
     const usage = collectProjectImports(root, issues);
@@ -760,7 +809,7 @@ function validateCapabilities(capabilities, issues, contractVersion) {
         }
         else {
             addUnknownKeyIssues(capabilities.reviews, capabilities.reviews.provider === "google-places" &&
-                contractVersion === "project-config-v4"
+                contractVersion !== "project-config-v3"
                 ? new Set(["provider", "mode", "routeIds", "monthlyRequestLimit"])
                 : new Set(["provider"]), new Set(), "capabilities.reviews", issues);
             if (typeof capabilities.reviews.provider !== "string" ||
@@ -774,7 +823,7 @@ function validateCapabilities(capabilities, issues, contractVersion) {
                 }));
             }
             if (capabilities.reviews.provider === "google-places" &&
-                contractVersion === "project-config-v4") {
+                contractVersion !== "project-config-v3") {
                 if (typeof capabilities.reviews.mode !== "string" ||
                     !GOOGLE_REVIEWS_MODES.has(capabilities.reviews.mode)) {
                     issues.push(configIssue({
@@ -2882,8 +2931,7 @@ function addProtectedImplementationIssues(root, issues, contractVersion) {
         const source = readFileSync(file, "utf8");
         for (const rule of PROTECTED_LOCAL_PATTERNS) {
             if ("minimumContract" in rule &&
-                rule.minimumContract === "project-config-v4" &&
-                contractVersion !== "project-config-v4")
+                !configurationContractIncludes(contractVersion, rule.minimumContract))
                 continue;
             const match = rule.pattern.exec(source);
             if (!match || match.index === undefined)
@@ -2894,9 +2942,11 @@ function addProtectedImplementationIssues(root, issues, contractVersion) {
                 surface: rule.surface,
                 expected: rule.expected,
                 actual: `A protected local implementation was found in ${relativePath}.`,
-                remediation: rule.ruleId === "brandlab-config-v3-url-derived-breadcrumbs"
-                    ? "Use BrandlabRouteBreadcrumbs with the typed route catalog; keep path labels only as a development fallback."
-                    : "Keep only the thin project binding and consume the shared runtime.",
+                remediation: "remediation" in rule
+                    ? rule.remediation
+                    : rule.ruleId === "brandlab-config-v3-url-derived-breadcrumbs"
+                        ? "Use BrandlabRouteBreadcrumbs with the typed route catalog; keep path labels only as a development fallback."
+                        : "Keep only the thin project binding and consume the shared runtime.",
                 severity: "severity" in rule ? rule.severity : "blocker",
                 path: relativePath,
                 line,
@@ -2904,6 +2954,14 @@ function addProtectedImplementationIssues(root, issues, contractVersion) {
         }
     }
 }
+function configurationContractIncludes(actual, minimum) {
+    const order = {
+        "project-config-v3": 3,
+        "project-config-v4": 4,
+        "project-config-v5": 5,
+    };
+    return order[actual] >= order[minimum];
+}
 function walkSourceFiles(root) {
     if (!existsSync(root))
         return [];