@brandlab-digital/conformance 1.0.0-rc.8 → 1.0.0

package/dist/rendered-content.d.ts

@@ -0,0 +1,36 @@
+export interface RenderedContentSample {
+    id: string;
+    mainText: string;
+    /**
+     * Page-specific values such as a suburb or council name. These are used only
+     * to detect pages that are otherwise exact token substitutions.
+     */
+    variationTokens?: readonly string[];
+}
+export interface RenderedContentSimilarityOptions {
+    warningThreshold?: number;
+    shingleSize?: number;
+    /** Limits the diagnostic comparison set deterministically. */
+    sampleLimit?: number;
+}
+export interface RenderedContentSimilarityFinding {
+    leftId: string;
+    rightId: string;
+    score: number;
+    severity: 'warning';
+}
+export interface RenderedContentDuplicateFinding {
+    leftId: string;
+    rightId: string;
+    kind: 'exact-duplicate' | 'token-substitution';
+    severity: 'blocker';
+}
+export declare function normalizeRenderedContent(value: string): string;
+/**
+ * Operational duplicate protection. This deliberately blocks only exact
+ * copied output and explicit location-token substitutions.
+ */
+export declare function evaluateRenderedContentDuplicates(samples: readonly RenderedContentSample[]): RenderedContentDuplicateFinding[];
+export declare function fiveWordShingleSimilarity(left: string, right: string): number;
+export declare function evaluateRenderedContentSimilarity(samples: readonly RenderedContentSample[], options?: RenderedContentSimilarityOptions): RenderedContentSimilarityFinding[];
+//# sourceMappingURL=rendered-content.d.ts.map

package/dist/rendered-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rendered-content.d.ts","sourceRoot":"","sources":["../src/rendered-content.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,gCAAgC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,iBAAiB,GAAG,oBAAoB,CAAA;IAC9C,QAAQ,EAAE,SAAS,CAAA;CACpB;AAWD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,UAErD;AA4BD;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,SAAS,qBAAqB,EAAE,qCAiD1C;AAWD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAYpE;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,SAAS,qBAAqB,EAAE,EACzC,OAAO,GAAE,gCAAqC,sCAyD/C"}

package/dist/rendered-content.js

@@ -0,0 +1,146 @@
+function normalizedWords(value) {
+    return value
+        .normalize('NFKC')
+        .toLowerCase()
+        .replace(/[\p{P}\p{S}]+/gu, ' ')
+        .split(/\s+/)
+        .filter(Boolean);
+}
+export function normalizeRenderedContent(value) {
+    return normalizedWords(value).join(' ');
+}
+function assertUniqueSampleIds(samples) {
+    const duplicateId = samples.find((sample, index) => samples.slice(0, index).some((candidate) => candidate.id === sample.id));
+    if (duplicateId) {
+        throw new Error(`Rendered-content sample ID "${duplicateId.id}" is duplicated.`);
+    }
+}
+function normalizeWithoutVariationTokens(sample) {
+    let normalized = normalizeRenderedContent(sample.mainText);
+    const tokens = [...(sample.variationTokens ?? [])]
+        .map(normalizeRenderedContent)
+        .filter(Boolean)
+        .sort((left, right) => right.length - left.length);
+    for (const token of tokens) {
+        const escaped = token.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+        normalized = normalized.replace(new RegExp(`(?:^|\\s)${escaped}(?=\\s|$)`, 'g'), ' location');
+    }
+    return normalized.trim().replace(/\s+/g, ' ');
+}
+/**
+ * Operational duplicate protection. This deliberately blocks only exact
+ * copied output and explicit location-token substitutions.
+ */
+export function evaluateRenderedContentDuplicates(samples) {
+    assertUniqueSampleIds(samples);
+    const prepared = samples.map((sample) => ({
+        ...sample,
+        normalized: normalizeRenderedContent(sample.mainText),
+        withoutVariationTokens: normalizeWithoutVariationTokens(sample),
+    }));
+    const findings = [];
+    for (let leftIndex = 0; leftIndex < prepared.length; leftIndex += 1) {
+        const left = prepared[leftIndex];
+        if (!left.normalized)
+            continue;
+        for (let rightIndex = leftIndex + 1; rightIndex < prepared.length; rightIndex += 1) {
+            const right = prepared[rightIndex];
+            if (!right.normalized)
+                continue;
+            if (left.normalized === right.normalized) {
+                findings.push({
+                    leftId: left.id,
+                    rightId: right.id,
+                    kind: 'exact-duplicate',
+                    severity: 'blocker',
+                });
+                continue;
+            }
+            if (left.variationTokens?.length &&
+                right.variationTokens?.length &&
+                left.withoutVariationTokens === right.withoutVariationTokens) {
+                findings.push({
+                    leftId: left.id,
+                    rightId: right.id,
+                    kind: 'token-substitution',
+                    severity: 'blocker',
+                });
+            }
+        }
+    }
+    return findings.sort((left, right) => left.leftId.localeCompare(right.leftId) ||
+        left.rightId.localeCompare(right.rightId));
+}
+function shingles(value, size) {
+    const words = normalizedWords(value);
+    const values = new Set();
+    for (let index = 0; index <= words.length - size; index += 1) {
+        values.add(words.slice(index, index + size).join(' '));
+    }
+    return values;
+}
+export function fiveWordShingleSimilarity(left, right) {
+    const leftShingles = shingles(left, 5);
+    const rightShingles = shingles(right, 5);
+    if (leftShingles.size === 0 && rightShingles.size === 0)
+        return 1;
+    if (leftShingles.size === 0 || rightShingles.size === 0)
+        return 0;
+    let intersection = 0;
+    for (const shingle of leftShingles) {
+        if (rightShingles.has(shingle))
+            intersection += 1;
+    }
+    const union = leftShingles.size + rightShingles.size - intersection;
+    return union === 0 ? 0 : intersection / union;
+}
+export function evaluateRenderedContentSimilarity(samples, options = {}) {
+    const warningThreshold = options.warningThreshold ?? 0.55;
+    const shingleSize = options.shingleSize ?? 5;
+    const sampleLimit = options.sampleLimit ?? 100;
+    if (warningThreshold < 0 || warningThreshold > 1) {
+        throw new Error('Rendered-content warningThreshold must be between zero and one.');
+    }
+    if (!Number.isInteger(shingleSize) || shingleSize < 2 || shingleSize > 10) {
+        throw new Error('Rendered-content shingleSize must be an integer from 2 to 10.');
+    }
+    if (!Number.isInteger(sampleLimit) || sampleLimit < 2) {
+        throw new Error('Rendered-content sampleLimit must be an integer of at least two.');
+    }
+    assertUniqueSampleIds(samples);
+    const prepared = [...samples]
+        .sort((left, right) => left.id.localeCompare(right.id))
+        .slice(0, sampleLimit)
+        .map((sample) => ({
+        ...sample,
+        shingleSet: shingles(sample.mainText, shingleSize),
+    }));
+    const findings = [];
+    for (let leftIndex = 0; leftIndex < prepared.length; leftIndex += 1) {
+        const left = prepared[leftIndex];
+        for (let rightIndex = leftIndex + 1; rightIndex < prepared.length; rightIndex += 1) {
+            const right = prepared[rightIndex];
+            if (left.shingleSet.size === 0 || right.shingleSet.size === 0)
+                continue;
+            let intersection = 0;
+            for (const shingle of left.shingleSet) {
+                if (right.shingleSet.has(shingle))
+                    intersection += 1;
+            }
+            const union = left.shingleSet.size + right.shingleSet.size - intersection;
+            const score = union === 0 ? 0 : intersection / union;
+            if (score < warningThreshold)
+                continue;
+            findings.push({
+                leftId: left.id,
+                rightId: right.id,
+                score,
+                severity: 'warning',
+            });
+        }
+    }
+    return findings.sort((left, right) => right.score - left.score ||
+        left.leftId.localeCompare(right.leftId) ||
+        left.rightId.localeCompare(right.rightId));
+}
+//# sourceMappingURL=rendered-content.js.map

package/dist/rendered-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rendered-content.js","sourceRoot":"","sources":["../src/rendered-content.ts"],"names":[],"mappings":"AA+BA,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK;SACT,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;SAC/B,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,OAAO,CAAC,CAAA;AACpB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAyC;IACtE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACjD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CACxE,CAAA;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,CAAC,EAAE,kBAAkB,CAAC,CAAA;IAClF,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,MAA6B;IACpE,IAAI,UAAU,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;SAC/C,GAAG,CAAC,wBAAwB,CAAC;SAC7B,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAEpD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;QAC5D,UAAU,GAAG,UAAU,CAAC,OAAO,CAC7B,IAAI,MAAM,CAAC,YAAY,OAAO,WAAW,EAAE,GAAG,CAAC,EAC/C,WAAW,CACZ,CAAA;IACH,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAyC;IAEzC,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,GAAG,MAAM;QACT,UAAU,EAAE,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrD,sBAAsB,EAAE,+BAA+B,CAAC,MAAM,CAAC;KAChE,CAAC,CAAC,CAAA;IACH,MAAM,QAAQ,GAAsC,EAAE,CAAA;IAEtD,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAE,CAAA;QACjC,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,SAAQ;QAC9B,KACE,IAAI,UAAU,GAAG,SAAS,GAAG,CAAC,EAC9B,UAAU,GAAG,QAAQ,CAAC,MAAM,EAC5B,UAAU,IAAI,CAAC,EACf,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAE,CAAA;YACnC,IAAI,CAAC,KAAK,CAAC,UAAU;gBAAE,SAAQ;YAC/B,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzC,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAA;gBACF,SAAQ;YACV,CAAC;YACD,IACE,IAAI,CAAC,eAAe,EAAE,MAAM;gBAC5B,KAAK,CAAC,eAAe,EAAE,MAAM;gBAC7B,IAAI,CAAC,sBAAsB,KAAK,KAAK,CAAC,sBAAsB,EAC5D,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,IAAI,EAAE,oBAAoB;oBAC1B,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAC5C,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,KAAa;IACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACtC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACxC,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACjE,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAEjE,IAAI,YAAY,GAAG,CAAC,CAAA;IACpB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,YAAY,IAAI,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,GAAG,aAAa,CAAC,IAAI,GAAG,YAAY,CAAA;IACnE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,KAAK,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAyC,EACzC,UAA4C,EAAE;IAE9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAA;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAA;IAC9C,IAAI,gBAAgB,GAAG,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,EAAE,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;IACrF,CAAC;IAED,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SACtD,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;SACrB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,MAAM;QACT,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC;KACnD,CAAC,CAAC,CAAA;IACL,MAAM,QAAQ,GAAuC,EAAE,CAAA;IAEvD,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAE,CAAA;QACjC,KACE,IAAI,UAAU,GAAG,SAAS,GAAG,CAAC,EAC9B,UAAU,GAAG,QAAQ,CAAC,MAAM,EAC5B,UAAU,IAAI,CAAC,EACf,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAE,CAAA;YACnC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;gBAAE,SAAQ;YACvE,IAAI,YAAY,GAAG,CAAC,CAAA;YACpB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,YAAY,IAAI,CAAC,CAAA;YACtD,CAAC;YACD,MAAM,KAAK,GACT,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,YAAY,CAAA;YAC7D,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,KAAK,CAAA;YACpD,IAAI,KAAK,GAAG,gBAAgB;gBAAE,SAAQ;YACtC,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,KAAK;gBACL,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;QACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAC5C,CAAA;AACH,CAAC"}

package/dist/verification-policy.d.ts

@@ -0,0 +1,162 @@
+import type { BrandlabFinding, ConformanceSummary } from "./project.js";
+export declare const BRANDLAB_VERIFICATION_POLICY_VERSION = "simple-v1";
+export declare const BRANDLAB_VERIFICATION_FAMILIES: readonly [{
+    readonly id: "runtime-release";
+    readonly title: "Runtime and release";
+    readonly purpose: "Supported runtime and one reproducible Brandlab release.";
+}, {
+    readonly id: "project-verification";
+    readonly title: "Project verification";
+    readonly purpose: "Typecheck, tests and production build complete successfully.";
+}, {
+    readonly id: "contact-delivery";
+    readonly title: "Contact delivery";
+    readonly purpose: "Shared validation, delivery and provider-error handling.";
+}, {
+    readonly id: "analytics";
+    readonly title: "Analytics";
+    readonly purpose: "Canonical conversions run once without lead PII.";
+}, {
+    readonly id: "search-output";
+    readonly title: "Search output";
+    readonly purpose: "Search routing and structured data are safe and consistent.";
+}, {
+    readonly id: "business-data";
+    readonly title: "Business data";
+    readonly purpose: "Business visibility and route identity match declared facts.";
+}, {
+    readonly id: "output-safety";
+    readonly title: "Output safety";
+    readonly purpose: "Public output and protected shared behaviour remain safe.";
+}, {
+    readonly id: "accessibility";
+    readonly title: "Accessibility";
+    readonly purpose: "Representative browser routes have no serious accessibility failures.";
+}, {
+    readonly id: "deployment-provenance";
+    readonly title: "Deployment provenance";
+    readonly purpose: "The reviewed source, package release and deployment agree.";
+}];
+export type BrandlabVerificationFamilyId = (typeof BRANDLAB_VERIFICATION_FAMILIES)[number]["id"];
+export declare const BRANDLAB_VERIFICATION_CHECKS: readonly [{
+    readonly id: "runtime-supported";
+    readonly familyId: "runtime-release";
+    readonly title: "Supported runtime";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "release-consistency";
+    readonly familyId: "runtime-release";
+    readonly title: "Release consistency";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "project-build";
+    readonly familyId: "project-verification";
+    readonly title: "Typecheck, tests and build";
+    readonly staticEvidence: false;
+}, {
+    readonly id: "contact-runtime";
+    readonly familyId: "contact-delivery";
+    readonly title: "Shared contact runtime";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "contact-provider-errors";
+    readonly familyId: "contact-delivery";
+    readonly title: "Provider error handling";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "analytics-privacy";
+    readonly familyId: "analytics";
+    readonly title: "Analytics privacy";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "analytics-conversion";
+    readonly familyId: "analytics";
+    readonly title: "Canonical conversion events";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "search-routing";
+    readonly familyId: "search-output";
+    readonly title: "Canonical, robots and sitemap";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "structured-data";
+    readonly familyId: "search-output";
+    readonly title: "Structured data";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "business-identity";
+    readonly familyId: "business-data";
+    readonly title: "Business visibility";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "route-identity";
+    readonly familyId: "business-data";
+    readonly title: "Route identity";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "public-output-safety";
+    readonly familyId: "output-safety";
+    readonly title: "Public output hygiene";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "source-safety";
+    readonly familyId: "output-safety";
+    readonly title: "Protected source behaviour";
+    readonly staticEvidence: true;
+}, {
+    readonly id: "browser-accessibility";
+    readonly familyId: "accessibility";
+    readonly title: "Browser accessibility";
+    readonly staticEvidence: false;
+}, {
+    readonly id: "deployment-binding";
+    readonly familyId: "deployment-provenance";
+    readonly title: "Deployment binding";
+    readonly staticEvidence: false;
+}];
+export type BrandlabVerificationCheckId = (typeof BRANDLAB_VERIFICATION_CHECKS)[number]["id"];
+export type BrandlabVerificationStatus = "pass" | "warning" | "blocked" | "not_run";
+export type BrandlabVerificationEvidenceKind = "static" | "test" | "build" | "browser" | "deployment";
+export interface BrandlabVerificationEvidence {
+    checkId: BrandlabVerificationCheckId;
+    status: BrandlabVerificationStatus;
+    evidenceKind: BrandlabVerificationEvidenceKind;
+    message: string;
+    sourceRuleIds: string[];
+}
+export interface BrandlabOperationalFinding extends BrandlabFinding {
+    familyId: BrandlabVerificationFamilyId;
+    checkId: BrandlabVerificationCheckId;
+}
+export interface BrandlabVerificationCheckResult extends BrandlabVerificationEvidence {
+    title: string;
+    blockers: number;
+    warnings: number;
+    info: number;
+}
+export interface BrandlabVerificationFamilyResult {
+    id: BrandlabVerificationFamilyId;
+    title: string;
+    purpose: string;
+    status: BrandlabVerificationStatus;
+    blockers: number;
+    warnings: number;
+    info: number;
+    sourceRuleIds: string[];
+    checkIds: BrandlabVerificationCheckId[];
+}
+export interface BrandlabVerificationResult {
+    policyVersion: typeof BRANDLAB_VERIFICATION_POLICY_VERSION;
+    familyCount: typeof BRANDLAB_VERIFICATION_FAMILIES.length;
+    checkCount: typeof BRANDLAB_VERIFICATION_CHECKS.length;
+    status: BrandlabVerificationStatus;
+    summary: ConformanceSummary;
+    checks: BrandlabVerificationCheckResult[];
+    families: BrandlabVerificationFamilyResult[];
+}
+export declare function applyBrandlabVerificationPolicy(findings: readonly BrandlabFinding[], suppliedEvidence?: readonly BrandlabVerificationEvidence[]): {
+    operationalFindings: BrandlabOperationalFinding[];
+    verification: BrandlabVerificationResult;
+};
+export declare function summarizeVerificationFindings(findings: readonly BrandlabFinding[]): ConformanceSummary;
+//# sourceMappingURL=verification-policy.d.ts.map

package/dist/verification-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-policy.d.ts","sourceRoot":"","sources":["../src/verification-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAExE,eAAO,MAAM,oCAAoC,cAAc,CAAC;AAEhE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8CjC,CAAC;AAEX,MAAM,MAAM,4BAA4B,GACtC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAExD,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2F/B,CAAC;AAEX,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AACtD,MAAM,MAAM,0BAA0B,GAClC,MAAM,GACN,SAAS,GACT,SAAS,GACT,SAAS,CAAC;AACd,MAAM,MAAM,gCAAgC,GACxC,QAAQ,GACR,MAAM,GACN,OAAO,GACP,SAAS,GACT,YAAY,CAAC;AAEjB,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,2BAA2B,CAAC;IACrC,MAAM,EAAE,0BAA0B,CAAC;IACnC,YAAY,EAAE,gCAAgC,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,0BAA2B,SAAQ,eAAe;IACjE,QAAQ,EAAE,4BAA4B,CAAC;IACvC,OAAO,EAAE,2BAA2B,CAAC;CACtC;AAED,MAAM,WAAW,+BACf,SAAQ,4BAA4B;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gCAAgC;IAC/C,EAAE,EAAE,4BAA4B,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,0BAA0B,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,EAAE,2BAA2B,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,OAAO,oCAAoC,CAAC;IAC3D,WAAW,EAAE,OAAO,8BAA8B,CAAC,MAAM,CAAC;IAC1D,UAAU,EAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,0BAA0B,CAAC;IACnC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAC1C,QAAQ,EAAE,gCAAgC,EAAE,CAAC;CAC9C;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,SAAS,eAAe,EAAE,EACpC,gBAAgB,GAAE,SAAS,4BAA4B,EAAO,GAC7D;IACD,mBAAmB,EAAE,0BAA0B,EAAE,CAAC;IAClD,YAAY,EAAE,0BAA0B,CAAC;CAC1C,CAiGA;AA0FD,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,SAAS,eAAe,EAAE,GACnC,kBAAkB,CAWpB"}

package/dist/verification-policy.js

@@ -0,0 +1,309 @@
+export const BRANDLAB_VERIFICATION_POLICY_VERSION = "simple-v1";
+export const BRANDLAB_VERIFICATION_FAMILIES = [
+    {
+        id: "runtime-release",
+        title: "Runtime and release",
+        purpose: "Supported runtime and one reproducible Brandlab release.",
+    },
+    {
+        id: "project-verification",
+        title: "Project verification",
+        purpose: "Typecheck, tests and production build complete successfully.",
+    },
+    {
+        id: "contact-delivery",
+        title: "Contact delivery",
+        purpose: "Shared validation, delivery and provider-error handling.",
+    },
+    {
+        id: "analytics",
+        title: "Analytics",
+        purpose: "Canonical conversions run once without lead PII.",
+    },
+    {
+        id: "search-output",
+        title: "Search output",
+        purpose: "Search routing and structured data are safe and consistent.",
+    },
+    {
+        id: "business-data",
+        title: "Business data",
+        purpose: "Business visibility and route identity match declared facts.",
+    },
+    {
+        id: "output-safety",
+        title: "Output safety",
+        purpose: "Public output and protected shared behaviour remain safe.",
+    },
+    {
+        id: "accessibility",
+        title: "Accessibility",
+        purpose: "Representative browser routes have no serious accessibility failures.",
+    },
+    {
+        id: "deployment-provenance",
+        title: "Deployment provenance",
+        purpose: "The reviewed source, package release and deployment agree.",
+    },
+];
+export const BRANDLAB_VERIFICATION_CHECKS = [
+    {
+        id: "runtime-supported",
+        familyId: "runtime-release",
+        title: "Supported runtime",
+        staticEvidence: true,
+    },
+    {
+        id: "release-consistency",
+        familyId: "runtime-release",
+        title: "Release consistency",
+        staticEvidence: true,
+    },
+    {
+        id: "project-build",
+        familyId: "project-verification",
+        title: "Typecheck, tests and build",
+        staticEvidence: false,
+    },
+    {
+        id: "contact-runtime",
+        familyId: "contact-delivery",
+        title: "Shared contact runtime",
+        staticEvidence: true,
+    },
+    {
+        id: "contact-provider-errors",
+        familyId: "contact-delivery",
+        title: "Provider error handling",
+        staticEvidence: true,
+    },
+    {
+        id: "analytics-privacy",
+        familyId: "analytics",
+        title: "Analytics privacy",
+        staticEvidence: true,
+    },
+    {
+        id: "analytics-conversion",
+        familyId: "analytics",
+        title: "Canonical conversion events",
+        staticEvidence: true,
+    },
+    {
+        id: "search-routing",
+        familyId: "search-output",
+        title: "Canonical, robots and sitemap",
+        staticEvidence: true,
+    },
+    {
+        id: "structured-data",
+        familyId: "search-output",
+        title: "Structured data",
+        staticEvidence: true,
+    },
+    {
+        id: "business-identity",
+        familyId: "business-data",
+        title: "Business visibility",
+        staticEvidence: true,
+    },
+    {
+        id: "route-identity",
+        familyId: "business-data",
+        title: "Route identity",
+        staticEvidence: true,
+    },
+    {
+        id: "public-output-safety",
+        familyId: "output-safety",
+        title: "Public output hygiene",
+        staticEvidence: true,
+    },
+    {
+        id: "source-safety",
+        familyId: "output-safety",
+        title: "Protected source behaviour",
+        staticEvidence: true,
+    },
+    {
+        id: "browser-accessibility",
+        familyId: "accessibility",
+        title: "Browser accessibility",
+        staticEvidence: false,
+    },
+    {
+        id: "deployment-binding",
+        familyId: "deployment-provenance",
+        title: "Deployment binding",
+        staticEvidence: false,
+    },
+];
+export function applyBrandlabVerificationPolicy(findings, suppliedEvidence = []) {
+    const operationalFindings = findings.map((finding) => {
+        const checkId = checkForFinding(finding);
+        const familyId = familyForCheck(checkId);
+        return { ...finding, familyId, checkId };
+    });
+    const checks = BRANDLAB_VERIFICATION_CHECKS.map((definition) => {
+        const scopedFindings = operationalFindings.filter((finding) => finding.checkId === definition.id);
+        const scopedEvidence = suppliedEvidence.filter((evidence) => evidence.checkId === definition.id);
+        const blockers = scopedFindings.filter((finding) => finding.severity === "blocker").length +
+            scopedEvidence.filter((evidence) => evidence.status === "blocked").length;
+        const warnings = scopedFindings.filter((finding) => finding.severity === "warning").length +
+            scopedEvidence.filter((evidence) => evidence.status === "warning").length;
+        const info = scopedFindings.filter((finding) => finding.severity === "info").length;
+        const sourceRuleIds = [
+            ...new Set([
+                ...scopedFindings.map((finding) => finding.ruleId),
+                ...scopedEvidence.flatMap((evidence) => evidence.sourceRuleIds),
+            ]),
+        ].sort();
+        const status = blockers > 0
+            ? "blocked"
+            : warnings > 0
+                ? "warning"
+                : definition.staticEvidence ||
+                    scopedEvidence.some((evidence) => evidence.status === "pass")
+                    ? "pass"
+                    : "not_run";
+        const evidenceKind = scopedEvidence.at(-1)?.evidenceKind ??
+            (definition.staticEvidence ? "static" : expectedEvidenceKind(definition.id));
+        const message = blockers > 0
+            ? `${blockers} blocking finding(s).`
+            : warnings > 0
+                ? `${warnings} warning finding(s).`
+                : scopedEvidence.at(-1)?.message ??
+                    (definition.staticEvidence
+                        ? "The static evaluator completed this check without an operational finding."
+                        : "This check was not executed by the static evaluator.");
+        return {
+            checkId: definition.id,
+            title: definition.title,
+            status,
+            evidenceKind,
+            message,
+            sourceRuleIds,
+            blockers,
+            warnings,
+            info,
+        };
+    });
+    const families = BRANDLAB_VERIFICATION_FAMILIES.map((definition) => {
+        const scoped = checks.filter((check) => BRANDLAB_VERIFICATION_CHECKS.some((candidate) => candidate.id === check.checkId && candidate.familyId === definition.id));
+        const blockers = scoped.reduce((total, check) => total + check.blockers, 0);
+        const warnings = scoped.reduce((total, check) => total + check.warnings, 0);
+        const info = scoped.reduce((total, check) => total + check.info, 0);
+        return {
+            ...definition,
+            status: aggregateStatus(scoped.map((check) => check.status)),
+            blockers,
+            warnings,
+            info,
+            sourceRuleIds: [...new Set(scoped.flatMap((check) => check.sourceRuleIds))].sort(),
+            checkIds: scoped.map((check) => check.checkId),
+        };
+    });
+    const summary = summarizeVerificationFindings(operationalFindings);
+    return {
+        operationalFindings,
+        verification: {
+            policyVersion: BRANDLAB_VERIFICATION_POLICY_VERSION,
+            familyCount: BRANDLAB_VERIFICATION_FAMILIES.length,
+            checkCount: BRANDLAB_VERIFICATION_CHECKS.length,
+            status: aggregateStatus(families.map((family) => family.status)),
+            summary,
+            checks,
+            families,
+        },
+    };
+}
+function familyForCheck(checkId) {
+    return BRANDLAB_VERIFICATION_CHECKS.find((check) => check.id === checkId)
+        .familyId;
+}
+function checkForFinding(finding) {
+    const id = finding.ruleId;
+    const surface = finding.surface;
+    if (surface === "release")
+        return "release-consistency";
+    if (surface === "runtime" ||
+        surface === "headers" ||
+        surface === "security" ||
+        surface === "environment") {
+        return "runtime-supported";
+    }
+    if (surface === "project-verification" || surface === "build") {
+        return "project-build";
+    }
+    if (surface.startsWith("contact")) {
+        return /(?:provider|resend|returned-error|delivery-error)/i.test(id)
+            ? "contact-provider-errors"
+            : "contact-runtime";
+    }
+    if (surface === "analytics") {
+        return /\b(?:pii|privacy|email|phone-number|lead-diagnostic|public-env)\b/i.test(id)
+            ? "analytics-privacy"
+            : "analytics-conversion";
+    }
+    if (surface === "metadata" ||
+        surface === "sitemap" ||
+        surface === "sitemap-catalog" ||
+        surface === "robots" ||
+        surface === "breadcrumbs" ||
+        surface === "search-certification") {
+        return "search-routing";
+    }
+    if (surface === "schema" ||
+        surface === "schema-graph" ||
+        surface === "reviews" ||
+        surface === "project-reviews" ||
+        surface.startsWith("google-reviews")) {
+        return "structured-data";
+    }
+    if (surface === "business" || surface === "location-proof") {
+        return "business-identity";
+    }
+    if (surface === "routes")
+        return "route-identity";
+    if (surface === "accessibility")
+        return "browser-accessibility";
+    if (surface === "deployment")
+        return "deployment-binding";
+    if (surface === "content" ||
+        surface === "location-quality" ||
+        id.includes("rendered-content")) {
+        return "public-output-safety";
+    }
+    return "source-safety";
+}
+function expectedEvidenceKind(checkId) {
+    if (checkId === "project-build")
+        return "build";
+    if (checkId === "browser-accessibility")
+        return "browser";
+    if (checkId === "deployment-binding")
+        return "deployment";
+    return "static";
+}
+function aggregateStatus(statuses) {
+    if (statuses.includes("blocked"))
+        return "blocked";
+    if (statuses.includes("warning"))
+        return "warning";
+    if (statuses.includes("not_run"))
+        return "not_run";
+    return "pass";
+}
+export function summarizeVerificationFindings(findings) {
+    const blockers = findings.filter((finding) => finding.severity === "blocker").length;
+    const warnings = findings.filter((finding) => finding.severity === "warning").length;
+    const info = findings.filter((finding) => finding.severity === "info").length;
+    return {
+        status: blockers > 0 ? "blocked" : warnings > 0 ? "warning" : "pass",
+        total: findings.length,
+        blockers,
+        warnings,
+        info,
+    };
+}
+//# sourceMappingURL=verification-policy.js.map