@brandlab-digital/conformance 3.12.0 → 3.13.0

package/README.md

@@ -21,7 +21,9 @@ Proprietary software © Brandlab Digital Marketing. All rights reserved. Publish
 A site adopts Site System v2 by declaring `siteSystem: { tier: 'shell' | 'enquiry' | 'full' }` in
 `brandlab.config.ts` (`newBuild: true` for new builds and redesigns; `samples` adds pages to check; `labels`,
 `freeQuotes`, `thirdParties` and `phones` record the quote labels, free-quote offer, third-party hosts and extra
-`tel:` links the shell rules accept). Without it, nothing in the gate blocks.
+`tel:` links the shell rules accept; `refreshExceptions` lists estate families allowed to refresh more often than
+every 7 days, each `{ family, revalidateSeconds, reason, decisionId }`, for W3 from 3.13.0). Without it, nothing in
+the gate blocks.
 
 - `brandlab-ready` (after `next build` and the site-system journeys) writes `docs/ready/ready-report.md` and
   `.json`: every check with its tier, whether it blocks for this site, its status (pass, fail, not run, excepted,
@@ -41,3 +43,32 @@ A site adopts Site System v2 by declaring `siteSystem: { tier: 'shell' | 'enquir
   `brandlab-ready --launch` also fails until every step is recorded.
 - Rule modules export a `SiteSystemRenderedRunner` from `@brandlab-digital/conformance/site-system` and are
   listed in `SITE_SYSTEM_RENDERED_RUNNERS`.
+- W2 (shell tier, from 3.13.0) runs inside the site-system journeys on each sampled page at 390 x 844 and
+  1440 x 900: at most 8 prefetched pages on landing and 12 after a full scroll; none from footer, header panel,
+  drawer, area (`coverage`), nearby (`nearby-areas`), map (`area-map`, `data-area-map`), finder or other-services
+  links (a site marks its own lists with `data-bl-links="area|nearby|map|finder|other-services"`), none through a
+  hidden link and never the current page. Compressed prefetch bytes above twice the page's own HTML add a warning.
+- `brandlab-prefetch-probe <url> [--viewport 390x844 ...] [--json] [--strict]` measures one page locally (a local
+  build, a preview or a live page) in headless Chromium: the pages prefetched on landing and after a full scroll at
+  each viewport, their compressed and decoded bytes, the edge cache result and the W2 result. No request leaves for
+  another site, and it never crawls.
+
+## Cost guards (from 3.13.0)
+
+- **W5** (static, shell): `vercel.json` `regions` equal `brandlab.config.ts` `hosting.originRegion` (Sydney,
+  `syd1`, when there is no hosting block). Any other region needs an `origin-region-v1` decision whose `reviewBy`
+  is at most six months after `decidedOn`; the check fails once `reviewBy` passes (Sydney time). The engineering
+  check `vercel-region` (`brandlab-verify --engineering`, inside every site's `npm run verify`) applies the same
+  rule except the date: a lapsed `reviewBy` never stops a build, a fix or a rollback.
+- **W10** (rendered, shell): the built `robots.txt` (or the running site's, with `--base-url`; a Preview that
+  answers noindex, or a build made for a Preview whose `robots.txt` disallows everything, is not judged) lets every search and answer crawler (site-core `BRANDLAB_SEARCH_CRAWLERS`) fetch
+  home and the representative routes, and gives none of them a Crawl-delay. Firewall rules that match on the user
+  agent (`vercel.json` `routes` with `mitigate`, and `hosting.firewall`) must not deny or challenge them; a rate
+  limit on one is a warning.
+- **W9** (journey, full): `defineBrandlabSiteSystemTests({ pages: { families: [...] } })` names one built page per
+  dynamic route family; an unknown slug answers the shared 404, the uppercase slug answers it too or redirects once
+  (301 or 308) to its exact lowercase form, and `?utm_source=x` serves the same cacheable page as the clean URL. **W9-params** (static, full): no page under a dynamic route reads `searchParams`.
+- `brandlab-edge-probe [--json] <url>...` (run locally as `npm run probe:edge`, at most 25 URLs) logs
+  `x-vercel-cache`, `age`, `x-vercel-id` (edge and function region) and time to first byte for each page, its RSC
+  payload and its `_tree` prefetch, and a GET to each origin's `/api/contact` (expected 405). It is the measuring
+  stick of the origin-region benchmark (`operations/shared-platform/ORIGIN_REGION.md`).

package/dist/current-release.js

@@ -23,23 +23,23 @@ export const BRANDLAB_CURRENT_RUNTIME_RELEASE = Object.freeze({
     "kind": "brandlab-runtime-release-contract",
     "packages": {
         "@brandlab-digital/conformance": {
-            "version": "3.12.0"
+            "version": "3.13.0"
         },
         "@brandlab-digital/eslint-plugin": {
-            "version": "3.12.0"
+            "version": "3.13.0"
         },
         "@brandlab-digital/site-core": {
-            "version": "3.12.0"
+            "version": "3.13.0"
         },
         "@brandlab-digital/site-next": {
-            "version": "3.12.0"
+            "version": "3.13.0"
         }
     },
-    "releaseVersion": "3.12.0",
+    "releaseVersion": "3.13.0",
     "runtime": {
         "bundler": "turbopack",
         "cacheComponents": false,
-        "next": "16.3.8",
+        "next": "16.4.2",
         "nextVersionPolicy": "exact",
         "node": "24.x",
         "packageManager": "npm@11.14.1",

package/dist/current-release.js.map

@@ -1 +1 @@
-{"version":3,"file":"current-release.js","sourceRoot":"","sources":["../src/current-release.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,wEAAwE;AACxE,OAAO,EAEL,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAC7D;IACE,cAAc,EAAE;QACd,uCAAuC;QACvC,8BAA8B;QAC9B,yBAAyB;QACzB,6BAA6B;QAC7B,0BAA0B;QAC1B,4BAA4B;QAC5B,kCAAkC;QAClC,wCAAwC;QACxC,yBAAyB;KAC1B;IACD,WAAW,EAAE;QACX,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,mBAAmB;QACpC,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE,QAAQ;KAChB;IACD,MAAM,EAAE,mCAAmC;IAC3C,UAAU,EAAE;QACV,+BAA+B,EAAE;YAC/B,SAAS,EAAE,QAAQ;SACpB;QACD,iCAAiC,EAAE;YACjC,SAAS,EAAE,QAAQ;SACpB;QACD,6BAA6B,EAAE;YAC7B,SAAS,EAAE,QAAQ;SACpB;QACD,6BAA6B,EAAE;YAC7B,SAAS,EAAE,QAAQ;SACpB;KACF;IACD,gBAAgB,EAAE,QAAQ;IAC1B,SAAS,EAAE;QACT,SAAS,EAAE,WAAW;QACtB,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,QAAQ;QAChB,mBAAmB,EAAE,OAAO;QAC5B,MAAM,EAAE,MAAM;QACd,gBAAgB,EAAE,aAAa;QAC/B,OAAO,EAAE,QAAQ;QACjB,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,QAAQ;QACjB,YAAY,EAAE,OAAO;KACtB;IACD,eAAe,EAAE,sCAAsC;CACxD,CAC6C,CAAC;AAE/C,sCAAsC,CAAC,gCAAgC,CAAC,CAAC","sourcesContent":["// Generated by standards/scripts/generate-conformance-current-release.mjs.\n// Each exact package release verifies its own current runtime contract.\nimport {\n  type BrandlabRuntimeReleaseContract,\n  validateBrandlabRuntimeReleaseContract,\n} from \"./release-manifest.js\";\n\nexport const BRANDLAB_CURRENT_RUNTIME_RELEASE = Object.freeze(\n{\n  \"capabilities\": [\n    \"typed-project-business-and-route-data\",\n    \"essential-search-foundations\",\n    \"shared-contact-delivery\",\n    \"privacy-safe-lead-analytics\",\n    \"security-patched-runtime\",\n    \"live-google-review-summary\",\n    \"high-signal-project-verification\",\n    \"packed-positive-and-negative-consumers\",\n    \"changesets-oidc-release\"\n  ],\n  \"contracts\": {\n    \"analytics\": \"analytics-v4\",\n    \"architecture\": \"architecture-v7\",\n    \"configuration\": \"project-config-v7\",\n    \"contact\": \"contact-v4\",\n    \"seo\": \"seo-v4\"\n  },\n  \"kind\": \"brandlab-runtime-release-contract\",\n  \"packages\": {\n    \"@brandlab-digital/conformance\": {\n      \"version\": \"3.12.0\"\n    },\n    \"@brandlab-digital/eslint-plugin\": {\n      \"version\": \"3.12.0\"\n    },\n    \"@brandlab-digital/site-core\": {\n      \"version\": \"3.12.0\"\n    },\n    \"@brandlab-digital/site-next\": {\n      \"version\": \"3.12.0\"\n    }\n  },\n  \"releaseVersion\": \"3.12.0\",\n  \"runtime\": {\n    \"bundler\": \"turbopack\",\n    \"cacheComponents\": false,\n    \"next\": \"16.3.8\",\n    \"nextVersionPolicy\": \"exact\",\n    \"node\": \"24.x\",\n    \"packageManager\": \"npm@11.14.1\",\n    \"react\": \"19.2.8\",\n    \"reactDom\": \"19.2.8\",\n    \"router\": \"app\",\n    \"sharp\": \"0.35.5\",\n    \"typescript\": \"6.0.3\"\n  },\n  \"schemaVersion\": \"brandlab.runtime-release-contract.v1\"\n},\n) as unknown as BrandlabRuntimeReleaseContract;\n\nvalidateBrandlabRuntimeReleaseContract(BRANDLAB_CURRENT_RUNTIME_RELEASE);\n"]}
+{"version":3,"file":"current-release.js","sourceRoot":"","sources":["../src/current-release.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,wEAAwE;AACxE,OAAO,EAEL,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAC7D;IACE,cAAc,EAAE;QACd,uCAAuC;QACvC,8BAA8B;QAC9B,yBAAyB;QACzB,6BAA6B;QAC7B,0BAA0B;QAC1B,4BAA4B;QAC5B,kCAAkC;QAClC,wCAAwC;QACxC,yBAAyB;KAC1B;IACD,WAAW,EAAE;QACX,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,iBAAiB;QACjC,eAAe,EAAE,mBAAmB;QACpC,SAAS,EAAE,YAAY;QACvB,KAAK,EAAE,QAAQ;KAChB;IACD,MAAM,EAAE,mCAAmC;IAC3C,UAAU,EAAE;QACV,+BAA+B,EAAE;YAC/B,SAAS,EAAE,QAAQ;SACpB;QACD,iCAAiC,EAAE;YACjC,SAAS,EAAE,QAAQ;SACpB;QACD,6BAA6B,EAAE;YAC7B,SAAS,EAAE,QAAQ;SACpB;QACD,6BAA6B,EAAE;YAC7B,SAAS,EAAE,QAAQ;SACpB;KACF;IACD,gBAAgB,EAAE,QAAQ;IAC1B,SAAS,EAAE;QACT,SAAS,EAAE,WAAW;QACtB,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,QAAQ;QAChB,mBAAmB,EAAE,OAAO;QAC5B,MAAM,EAAE,MAAM;QACd,gBAAgB,EAAE,aAAa;QAC/B,OAAO,EAAE,QAAQ;QACjB,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,QAAQ;QACjB,YAAY,EAAE,OAAO;KACtB;IACD,eAAe,EAAE,sCAAsC;CACxD,CAC6C,CAAC;AAE/C,sCAAsC,CAAC,gCAAgC,CAAC,CAAC","sourcesContent":["// Generated by standards/scripts/generate-conformance-current-release.mjs.\n// Each exact package release verifies its own current runtime contract.\nimport {\n  type BrandlabRuntimeReleaseContract,\n  validateBrandlabRuntimeReleaseContract,\n} from \"./release-manifest.js\";\n\nexport const BRANDLAB_CURRENT_RUNTIME_RELEASE = Object.freeze(\n{\n  \"capabilities\": [\n    \"typed-project-business-and-route-data\",\n    \"essential-search-foundations\",\n    \"shared-contact-delivery\",\n    \"privacy-safe-lead-analytics\",\n    \"security-patched-runtime\",\n    \"live-google-review-summary\",\n    \"high-signal-project-verification\",\n    \"packed-positive-and-negative-consumers\",\n    \"changesets-oidc-release\"\n  ],\n  \"contracts\": {\n    \"analytics\": \"analytics-v4\",\n    \"architecture\": \"architecture-v7\",\n    \"configuration\": \"project-config-v7\",\n    \"contact\": \"contact-v4\",\n    \"seo\": \"seo-v4\"\n  },\n  \"kind\": \"brandlab-runtime-release-contract\",\n  \"packages\": {\n    \"@brandlab-digital/conformance\": {\n      \"version\": \"3.13.0\"\n    },\n    \"@brandlab-digital/eslint-plugin\": {\n      \"version\": \"3.13.0\"\n    },\n    \"@brandlab-digital/site-core\": {\n      \"version\": \"3.13.0\"\n    },\n    \"@brandlab-digital/site-next\": {\n      \"version\": \"3.13.0\"\n    }\n  },\n  \"releaseVersion\": \"3.13.0\",\n  \"runtime\": {\n    \"bundler\": \"turbopack\",\n    \"cacheComponents\": false,\n    \"next\": \"16.4.2\",\n    \"nextVersionPolicy\": \"exact\",\n    \"node\": \"24.x\",\n    \"packageManager\": \"npm@11.14.1\",\n    \"react\": \"19.2.8\",\n    \"reactDom\": \"19.2.8\",\n    \"router\": \"app\",\n    \"sharp\": \"0.35.5\",\n    \"typescript\": \"6.0.3\"\n  },\n  \"schemaVersion\": \"brandlab.runtime-release-contract.v1\"\n},\n) as unknown as BrandlabRuntimeReleaseContract;\n\nvalidateBrandlabRuntimeReleaseContract(BRANDLAB_CURRENT_RUNTIME_RELEASE);\n"]}

package/dist/edge-probe-cli.d.ts

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+export declare const EDGE_PROBE_MAX_URLS = 25;
+export type EdgeProbeKind = "page" | "rsc" | "tree" | "contact";
+export interface EdgeProbeRequest {
+    readonly kind: EdgeProbeKind;
+    readonly url: string;
+    readonly headers: Readonly<Record<string, string>>;
+    /** The status the request should answer; only the contact GET has one (405). */
+    readonly expectStatus?: number;
+}
+export interface EdgeProbeResult {
+    readonly kind: EdgeProbeKind;
+    readonly url: string;
+    readonly status: number | null;
+    readonly cache: string | null;
+    readonly age: string | null;
+    readonly vercelId: string | null;
+    /** The function region from x-vercel-id when the request reached a function. */
+    readonly functionRegion: string | null;
+    readonly edgeRegion: string | null;
+    readonly ttfbMs: number | null;
+    readonly problem?: string;
+}
+/** The requests for the given URLs: page, RSC and `_tree` for each, then one contact GET per origin. */
+export declare function planEdgeProbe(urls: readonly string[]): EdgeProbeRequest[];
+/** `syd1::iad1::abc-123` → edge syd1, function iad1; `syd1::abc-123` (served at the edge) → edge syd1, no function. */
+export declare function vercelIdRegions(vercelId: string | null): {
+    edge: string | null;
+    function: string | null;
+};
+/** One result as a row of the plain-text table. */
+export declare function formatEdgeProbeRow(result: EdgeProbeResult): string;
+type Fetcher = (url: string, init: {
+    headers: Record<string, string>;
+    redirect: "manual";
+    signal?: AbortSignal;
+}) => Promise<{
+    status: number;
+    headers: {
+        get(name: string): string | null;
+    };
+    body?: {
+        cancel(): Promise<void>;
+    } | null;
+}>;
+export declare function runEdgeProbe(requests: readonly EdgeProbeRequest[], options?: {
+    fetch?: Fetcher;
+    now?: () => number;
+}): Promise<EdgeProbeResult[]>;
+export declare function runEdgeProbeCli(argv: readonly string[], io: {
+    stdout: (text: string) => void;
+    stderr: (text: string) => void;
+}, options?: {
+    fetch?: Fetcher;
+}): Promise<number>;
+export {};
+//# sourceMappingURL=edge-probe-cli.d.ts.map

package/dist/edge-probe-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge-probe-cli.d.ts","sourceRoot":"","sources":["../src/edge-probe-cli.ts"],"names":[],"mappings":";AAgBA,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wGAAwG;AACxG,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAsBzE;AAED,uHAAuH;AACvH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAKzG;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAWlE;AAED,KAAK,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,KAAK,OAAO,CAAC;IAC3H,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9C,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;CAC3C,CAAC,CAAC;AAEH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CA8B3J;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAczL"}

package/dist/edge-probe-cli.js

@@ -0,0 +1,134 @@
+#!/usr/bin/env node
+/**
+ * brandlab-edge-probe (3.13.0): `npm run probe:edge`, run on a laptop, never in CI. For each fixed URL it requests the
+ * page, its RSC payload and its `_tree` segment prefetch the way the Next 16 router does, then makes one GET to
+ * `/api/contact` on each origin (which answers 405), and logs `x-vercel-cache`, `age`, `x-vercel-id` and the time to
+ * first byte. It is the measuring stick for the origin-region benchmark (operations/shared-platform/ORIGIN_REGION.md):
+ * `x-vercel-id` reads `<edge>::<function region>::<id>`, so `syd1::iad1::…` on `/api/contact` confirms a Washington
+ * function. A handful of requests, never a crawl: at most 25 URLs.
+ *
+ *   npx brandlab-edge-probe https://www.example.com.au/ https://www.example.com.au/services/blocked-drains
+ *   npx brandlab-edge-probe --json https://www.example.com.au/
+ */
+import { realpathSync } from "node:fs";
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+export const EDGE_PROBE_MAX_URLS = 25;
+/** The requests for the given URLs: page, RSC and `_tree` for each, then one contact GET per origin. */
+export function planEdgeProbe(urls) {
+    if (urls.length === 0)
+        throw new Error("Name at least one URL to probe.");
+    if (urls.length > EDGE_PROBE_MAX_URLS)
+        throw new Error(`Probe at most ${EDGE_PROBE_MAX_URLS} URLs; this is a measurement, not a crawl.`);
+    const requests = [];
+    const origins = [];
+    for (const raw of urls) {
+        let url;
+        try {
+            url = new URL(raw);
+        }
+        catch {
+            throw new Error(`"${raw}" is not an absolute URL such as https://www.example.com.au/services.`);
+        }
+        if (url.protocol !== "https:" && url.protocol !== "http:")
+            throw new Error(`"${raw}" is not an http(s) URL.`);
+        url.hash = "";
+        const href = url.toString();
+        requests.push({ kind: "page", url: href, headers: { accept: "text/html" } });
+        requests.push({ kind: "rsc", url: href, headers: { rsc: "1" } });
+        requests.push({ kind: "tree", url: href, headers: { rsc: "1", "next-router-prefetch": "1", "next-router-segment-prefetch": "/_tree" } });
+        if (!origins.includes(url.origin))
+            origins.push(url.origin);
+    }
+    for (const origin of origins)
+        requests.push({ kind: "contact", url: `${origin}/api/contact`, headers: { accept: "application/json" }, expectStatus: 405 });
+    return requests;
+}
+/** `syd1::iad1::abc-123` → edge syd1, function iad1; `syd1::abc-123` (served at the edge) → edge syd1, no function. */
+export function vercelIdRegions(vercelId) {
+    if (!vercelId)
+        return { edge: null, function: null };
+    const parts = vercelId.split("::");
+    const region = (part) => (part && /^[a-z]{3}\d$/.test(part) ? part : null);
+    return { edge: region(parts[0]), function: parts.length >= 3 ? region(parts[1]) : null };
+}
+/** One result as a row of the plain-text table. */
+export function formatEdgeProbeRow(result) {
+    const cells = [
+        result.kind.padEnd(7),
+        String(result.status ?? "-").padEnd(4),
+        (result.cache ?? "-").padEnd(8),
+        `age ${result.age ?? "-"}`.padEnd(10),
+        `${result.ttfbMs === null ? "-" : `${result.ttfbMs} ms`}`.padStart(8),
+        `${result.edgeRegion ?? "-"}${result.functionRegion ? ` -> ${result.functionRegion}` : ""}`.padEnd(14),
+        result.url,
+    ];
+    return `${cells.join("  ")}${result.problem ? `  (${result.problem})` : ""}`;
+}
+export async function runEdgeProbe(requests, options = {}) {
+    const fetcher = options.fetch ?? globalThis.fetch;
+    const now = options.now ?? (() => performance.now());
+    const results = [];
+    for (const request of requests) {
+        const started = now();
+        try {
+            const response = await fetcher(request.url, { headers: { ...request.headers, "user-agent": "brandlab-edge-probe" }, redirect: "manual", signal: AbortSignal.timeout(30_000) });
+            const ttfbMs = Math.round(now() - started);
+            await response.body?.cancel().catch(() => undefined);
+            const vercelId = response.headers.get("x-vercel-id");
+            const regions = vercelIdRegions(vercelId);
+            const problem = request.expectStatus !== undefined && response.status !== request.expectStatus ? `expected ${request.expectStatus}` : undefined;
+            results.push({
+                kind: request.kind,
+                url: request.url,
+                status: response.status,
+                cache: response.headers.get("x-vercel-cache"),
+                age: response.headers.get("age"),
+                vercelId,
+                functionRegion: regions.function,
+                edgeRegion: regions.edge,
+                ttfbMs,
+                ...(problem ? { problem } : {}),
+            });
+        }
+        catch (error) {
+            results.push({ kind: request.kind, url: request.url, status: null, cache: null, age: null, vercelId: null, functionRegion: null, edgeRegion: null, ttfbMs: null, problem: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    return results;
+}
+export async function runEdgeProbeCli(argv, io, options = {}) {
+    try {
+        const json = argv.includes("--json");
+        const urls = argv.filter((argument) => argument !== "--json");
+        const unknown = urls.find((argument) => argument.startsWith("--"));
+        if (unknown)
+            throw new Error(`Unknown option ${unknown}. Usage: brandlab-edge-probe [--json] <url>...`);
+        const results = await runEdgeProbe(planEdgeProbe(urls), options);
+        if (json)
+            io.stdout(`${JSON.stringify(results, null, 2)}\n`);
+        else
+            io.stdout(`${results.map(formatEdgeProbeRow).join("\n")}\n`);
+        return results.some((result) => result.problem) ? 1 : 0;
+    }
+    catch (error) {
+        io.stderr(`${error instanceof Error ? error.message : String(error)}\n`);
+        return 2;
+    }
+}
+function isEntrypoint(moduleUrl, argvPath) {
+    if (!argvPath)
+        return false;
+    try {
+        return realpathSync(fileURLToPath(moduleUrl)) === realpathSync(resolve(argvPath));
+    }
+    catch {
+        return false;
+    }
+}
+if (isEntrypoint(import.meta.url, process.argv[1])) {
+    runEdgeProbeCli(process.argv.slice(2), { stdout: (value) => process.stdout.write(value), stderr: (value) => process.stderr.write(value) }).then((code) => {
+        process.exitCode = code;
+    });
+}
+//# sourceMappingURL=edge-probe-cli.js.map

package/dist/edge-probe-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge-probe-cli.js","sourceRoot":"","sources":["../src/edge-probe-cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AA0BtC,wGAAwG;AACxG,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,GAAG,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,mBAAmB,4CAA4C,CAAC,CAAC;IACzI,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,uEAAuE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,0BAA0B,CAAC,CAAC;QAC9G,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,8BAA8B,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,cAAc,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3J,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,IAAwB,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,kBAAkB,CAAC,MAAuB;IACxD,MAAM,KAAK,GAAG;QACZ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrE,GAAG,MAAM,CAAC,UAAU,IAAI,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACtG,MAAM,CAAC,GAAG;KACX,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/E,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAqC,EAAE,UAAmD,EAAE;IAC7H,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAK,UAAU,CAAC,KAA4B,CAAC;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/K,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;YAC3C,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAChJ,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBAC7C,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAChC,QAAQ;gBACR,cAAc,EAAE,OAAO,CAAC,QAAQ;gBAChC,UAAU,EAAE,OAAO,CAAC,IAAI;gBACxB,MAAM;gBACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtO,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB,EAAE,EAAsE,EAAE,UAA+B,EAAE;IACtK,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,gDAAgD,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,IAAI;YAAE,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;;YACxD,EAAE,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,QAA4B;IACnE,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACvJ,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["#!/usr/bin/env node\n/**\n * brandlab-edge-probe (3.13.0): `npm run probe:edge`, run on a laptop, never in CI. For each fixed URL it requests the\n * page, its RSC payload and its `_tree` segment prefetch the way the Next 16 router does, then makes one GET to\n * `/api/contact` on each origin (which answers 405), and logs `x-vercel-cache`, `age`, `x-vercel-id` and the time to\n * first byte. It is the measuring stick for the origin-region benchmark (operations/shared-platform/ORIGIN_REGION.md):\n * `x-vercel-id` reads `<edge>::<function region>::<id>`, so `syd1::iad1::…` on `/api/contact` confirms a Washington\n * function. A handful of requests, never a crawl: at most 25 URLs.\n *\n *   npx brandlab-edge-probe https://www.example.com.au/ https://www.example.com.au/services/blocked-drains\n *   npx brandlab-edge-probe --json https://www.example.com.au/\n */\nimport { realpathSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nexport const EDGE_PROBE_MAX_URLS = 25;\n\nexport type EdgeProbeKind = \"page\" | \"rsc\" | \"tree\" | \"contact\";\n\nexport interface EdgeProbeRequest {\n  readonly kind: EdgeProbeKind;\n  readonly url: string;\n  readonly headers: Readonly<Record<string, string>>;\n  /** The status the request should answer; only the contact GET has one (405). */\n  readonly expectStatus?: number;\n}\n\nexport interface EdgeProbeResult {\n  readonly kind: EdgeProbeKind;\n  readonly url: string;\n  readonly status: number | null;\n  readonly cache: string | null;\n  readonly age: string | null;\n  readonly vercelId: string | null;\n  /** The function region from x-vercel-id when the request reached a function. */\n  readonly functionRegion: string | null;\n  readonly edgeRegion: string | null;\n  readonly ttfbMs: number | null;\n  readonly problem?: string;\n}\n\n/** The requests for the given URLs: page, RSC and `_tree` for each, then one contact GET per origin. */\nexport function planEdgeProbe(urls: readonly string[]): EdgeProbeRequest[] {\n  if (urls.length === 0) throw new Error(\"Name at least one URL to probe.\");\n  if (urls.length > EDGE_PROBE_MAX_URLS) throw new Error(`Probe at most ${EDGE_PROBE_MAX_URLS} URLs; this is a measurement, not a crawl.`);\n  const requests: EdgeProbeRequest[] = [];\n  const origins: string[] = [];\n  for (const raw of urls) {\n    let url: URL;\n    try {\n      url = new URL(raw);\n    } catch {\n      throw new Error(`\"${raw}\" is not an absolute URL such as https://www.example.com.au/services.`);\n    }\n    if (url.protocol !== \"https:\" && url.protocol !== \"http:\") throw new Error(`\"${raw}\" is not an http(s) URL.`);\n    url.hash = \"\";\n    const href = url.toString();\n    requests.push({ kind: \"page\", url: href, headers: { accept: \"text/html\" } });\n    requests.push({ kind: \"rsc\", url: href, headers: { rsc: \"1\" } });\n    requests.push({ kind: \"tree\", url: href, headers: { rsc: \"1\", \"next-router-prefetch\": \"1\", \"next-router-segment-prefetch\": \"/_tree\" } });\n    if (!origins.includes(url.origin)) origins.push(url.origin);\n  }\n  for (const origin of origins) requests.push({ kind: \"contact\", url: `${origin}/api/contact`, headers: { accept: \"application/json\" }, expectStatus: 405 });\n  return requests;\n}\n\n/** `syd1::iad1::abc-123` → edge syd1, function iad1; `syd1::abc-123` (served at the edge) → edge syd1, no function. */\nexport function vercelIdRegions(vercelId: string | null): { edge: string | null; function: string | null } {\n  if (!vercelId) return { edge: null, function: null };\n  const parts = vercelId.split(\"::\");\n  const region = (part: string | undefined) => (part && /^[a-z]{3}\\d$/.test(part) ? part : null);\n  return { edge: region(parts[0]), function: parts.length >= 3 ? region(parts[1]) : null };\n}\n\n/** One result as a row of the plain-text table. */\nexport function formatEdgeProbeRow(result: EdgeProbeResult): string {\n  const cells = [\n    result.kind.padEnd(7),\n    String(result.status ?? \"-\").padEnd(4),\n    (result.cache ?? \"-\").padEnd(8),\n    `age ${result.age ?? \"-\"}`.padEnd(10),\n    `${result.ttfbMs === null ? \"-\" : `${result.ttfbMs} ms`}`.padStart(8),\n    `${result.edgeRegion ?? \"-\"}${result.functionRegion ? ` -> ${result.functionRegion}` : \"\"}`.padEnd(14),\n    result.url,\n  ];\n  return `${cells.join(\"  \")}${result.problem ? `  (${result.problem})` : \"\"}`;\n}\n\ntype Fetcher = (url: string, init: { headers: Record<string, string>; redirect: \"manual\"; signal?: AbortSignal }) => Promise<{\n  status: number;\n  headers: { get(name: string): string | null };\n  body?: { cancel(): Promise<void> } | null;\n}>;\n\nexport async function runEdgeProbe(requests: readonly EdgeProbeRequest[], options: { fetch?: Fetcher; now?: () => number } = {}): Promise<EdgeProbeResult[]> {\n  const fetcher = options.fetch ?? (globalThis.fetch as unknown as Fetcher);\n  const now = options.now ?? (() => performance.now());\n  const results: EdgeProbeResult[] = [];\n  for (const request of requests) {\n    const started = now();\n    try {\n      const response = await fetcher(request.url, { headers: { ...request.headers, \"user-agent\": \"brandlab-edge-probe\" }, redirect: \"manual\", signal: AbortSignal.timeout(30_000) });\n      const ttfbMs = Math.round(now() - started);\n      await response.body?.cancel().catch(() => undefined);\n      const vercelId = response.headers.get(\"x-vercel-id\");\n      const regions = vercelIdRegions(vercelId);\n      const problem = request.expectStatus !== undefined && response.status !== request.expectStatus ? `expected ${request.expectStatus}` : undefined;\n      results.push({\n        kind: request.kind,\n        url: request.url,\n        status: response.status,\n        cache: response.headers.get(\"x-vercel-cache\"),\n        age: response.headers.get(\"age\"),\n        vercelId,\n        functionRegion: regions.function,\n        edgeRegion: regions.edge,\n        ttfbMs,\n        ...(problem ? { problem } : {}),\n      });\n    } catch (error) {\n      results.push({ kind: request.kind, url: request.url, status: null, cache: null, age: null, vercelId: null, functionRegion: null, edgeRegion: null, ttfbMs: null, problem: error instanceof Error ? error.message : String(error) });\n    }\n  }\n  return results;\n}\n\nexport async function runEdgeProbeCli(argv: readonly string[], io: { stdout: (text: string) => void; stderr: (text: string) => void }, options: { fetch?: Fetcher } = {}): Promise<number> {\n  try {\n    const json = argv.includes(\"--json\");\n    const urls = argv.filter((argument) => argument !== \"--json\");\n    const unknown = urls.find((argument) => argument.startsWith(\"--\"));\n    if (unknown) throw new Error(`Unknown option ${unknown}. Usage: brandlab-edge-probe [--json] <url>...`);\n    const results = await runEdgeProbe(planEdgeProbe(urls), options);\n    if (json) io.stdout(`${JSON.stringify(results, null, 2)}\\n`);\n    else io.stdout(`${results.map(formatEdgeProbeRow).join(\"\\n\")}\\n`);\n    return results.some((result) => result.problem) ? 1 : 0;\n  } catch (error) {\n    io.stderr(`${error instanceof Error ? error.message : String(error)}\\n`);\n    return 2;\n  }\n}\n\nfunction isEntrypoint(moduleUrl: string, argvPath: string | undefined): boolean {\n  if (!argvPath) return false;\n  try {\n    return realpathSync(fileURLToPath(moduleUrl)) === realpathSync(resolve(argvPath));\n  } catch {\n    return false;\n  }\n}\n\nif (isEntrypoint(import.meta.url, process.argv[1])) {\n  runEdgeProbeCli(process.argv.slice(2), { stdout: (value) => process.stdout.write(value), stderr: (value) => process.stderr.write(value) }).then((code) => {\n    process.exitCode = code;\n  });\n}\n"]}

package/dist/engineering.d.ts

@@ -17,7 +17,10 @@ export interface EngineeringCheck {
     coverage: string;
     outstandingEvidence: readonly string[];
 }
-/** The Vercel function region of every Brandlab site (3.2.1): Sydney. */
+/**
+ * The default Vercel function region (3.2.1): Sydney. From 3.13.0 a site may record another in brandlab.config.ts
+ * (`hosting.originRegion`) with an origin-region-v1 decision; `vercel.json` regions must equal the recorded value.
+ */
 export declare const BRANDLAB_FUNCTION_REGION = "syd1";
 /**
  * The Vercel ignored build step of every Brandlab site (3.3.3). Exit 0 skips a deployment, anything else builds it:

package/dist/engineering.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engineering.d.ts","sourceRoot":"","sources":["../src/engineering.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,yBAAyB,sGAAuG,CAAC;AAE9I,oFAAoF;AACpF,eAAO,MAAM,+BAA+B,4IAC+F,CAAC;AAE5I,iFAAiF;AACjF,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASrE,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,MAAM,CAAC;AAC5D,MAAM,WAAW,kBAAkB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,0BAA0B,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AACxI,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAqBD,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,iOAC6K,CAAC;AAqBzN,iGAAiG;AACjG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAyBxE;AAwCD,uDAAuD;AACvD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CA2B5G"}
+{"version":3,"file":"engineering.d.ts","sourceRoot":"","sources":["../src/engineering.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,yBAAyB,sGAAuG,CAAC;AAE9I,oFAAoF;AACpF,eAAO,MAAM,+BAA+B,4IAC+F,CAAC;AAE5I,iFAAiF;AACjF,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASrE,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,SAAS,GAAG,MAAM,CAAC;AAC5D,MAAM,WAAW,kBAAkB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,0BAA0B,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AACxI,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAqBD;;;GAGG;AACH,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,iOAC6K,CAAC;AAqBzN,iGAAiG;AACjG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAyBxE;AAwCD,uDAAuD;AACvD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CA2B5G"}

package/dist/engineering.js

@@ -4,6 +4,8 @@ import ts from 'typescript';
 import { globMatch } from './glob.js';
 import { collectBrandlabSource, createBrandlabModuleResolver, findImportedCalls, isDirectory, lineOfNode, listModuleReferences, objectPropertyValue, parseBrandlabSourceFile, walkProjectFiles, } from './source-files.js';
 import { describeCapabilities } from './static-rules.js';
+import { originRegionProblems } from './origin-region.js';
+import { parseProjectHosting } from './site-system/config.js';
 export const ENGINEERING_FAST_COMMANDS = ['typecheck', 'lint', 'test', 'check:unused', 'check:unused:production', 'check:standards'];
 /** The exact fast verification command from the Brandlab 3.0 target (section 6). */
 export const BRANDLAB_EXPECTED_VERIFY_SCRIPT = 'npm run check:standards && npm run typecheck && npm run lint && npm run test && npm run check:unused && npm run check:unused:production';
@@ -29,7 +31,10 @@ const CODE_OR_STYLE = /\.(?:[cm]?[jt]sx?|mdx|css)$/;
 const PASCAL_COMPONENT = /^[A-Z][A-Za-z0-9]*\.tsx$/;
 const CAMEL_MODULE = /^[a-z][A-Za-z0-9]*(?:\.d)?\.ts$/;
 const SEMVER = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
-/** The Vercel function region of every Brandlab site (3.2.1): Sydney. */
+/**
+ * The default Vercel function region (3.2.1): Sydney. From 3.13.0 a site may record another in brandlab.config.ts
+ * (`hosting.originRegion`) with an origin-region-v1 decision; `vercel.json` regions must equal the recorded value.
+ */
 export const BRANDLAB_FUNCTION_REGION = 'syd1';
 /**
  * The Vercel ignored build step of every Brandlab site (3.3.3). Exit 0 skips a deployment, anything else builds it:
@@ -79,7 +84,7 @@ export function checkEngineeringStructure(root) {
     inspectServerBoundaries(root, capabilities, source, add);
     inspectTests(root, capabilities, add);
     inspectToolPresets(root, add);
-    inspectDelivery(root, add);
+    inspectDelivery(root, add, config);
     return { status: findings.some(finding => finding.severity === 'blocker') ? 'blocked' : 'pass', findings,
         coverage: 'Static layout, naming, command, dependency-pin, tool-preset, CI, deployment and documentation structure only. This is not engineering-standard completion.',
         outstandingEvidence: ['Usage and deletion review including assets, configuration and dynamic references', 'Business data and component/style ownership review', 'Clean install, fast checks and production build', 'Full discovered technical URL estate', 'All distinct page families and important browser journeys', 'Exact-source protected Preview', 'Reporting/Ads provider cutover and authorised production verification'] };
@@ -637,12 +642,15 @@ function inspectToolPresets(root, add) {
     }
 }
 // --- CI, dependencies, Vercel and docs (section 6) ---------------------------
-function inspectDelivery(root, add) {
+/** A day before any decision, so a recorded decision's reviewBy never counts as passed. */
+const ORIGIN_DECISION_NEVER_LAPSED = '0000-01-01';
+function inspectDelivery(root, add, config) {
     const workflowDirectory = join(root, '.github/workflows');
     const workflows = isDirectory(workflowDirectory) ? readdirSync(workflowDirectory).filter(name => /\.ya?ml$/.test(name)).sort() : [];
-    const callers = workflows.filter(name => /uses\s*:\s*['"]?RomieDandan\/brandlab\/\.github\/workflows\/verify-next\.yml@/.test(readFileSync(join(workflowDirectory, name), 'utf8')));
+    // CI v2 (verify-next-v2.yml, 3.13.0) is the same verifier with draft, ready-for-review and merge depths.
+    const callers = workflows.filter(name => /uses\s*:\s*['"]?RomieDandan\/brandlab\/\.github\/workflows\/verify-next(?:-v2)?\.yml@/.test(readFileSync(join(workflowDirectory, name), 'utf8')));
     if (callers.length !== 1 || callers[0] !== 'verify.yml') {
-        add('.github/workflows/verify.yml', 'ci-workflow', `Exactly one .github/workflows/verify.yml calls RomieDandan/brandlab/.github/workflows/verify-next.yml at the fleet SHA (found ${callers.length ? callers.join(', ') : 'none'}).`);
+        add('.github/workflows/verify.yml', 'ci-workflow', `Exactly one .github/workflows/verify.yml calls RomieDandan/brandlab/.github/workflows/verify-next.yml (or verify-next-v2.yml) at the fleet SHA (found ${callers.length ? callers.join(', ') : 'none'}).`);
     }
     for (const path of ['.github/dependabot.yml', '.github/dependabot.yaml', 'renovate.json', 'renovate.json5', '.github/renovate.json', '.renovaterc', '.renovaterc.json']) {
         if (existsSync(join(root, path)))
@@ -658,15 +666,12 @@ function inspectDelivery(root, add) {
     }
     if (installCommand !== 'npm ci')
         add('vercel.json', 'vercel-install', 'vercel.json sets installCommand to "npm ci".');
-    let regions;
-    try {
-        regions = vercel === null ? undefined : JSON.parse(vercel).regions;
-    }
-    catch {
-        regions = undefined;
-    }
-    if (!Array.isArray(regions) || regions.length !== 1 || regions[0] !== BRANDLAB_FUNCTION_REGION) {
-        add('vercel.json', 'vercel-region', `vercel.json runs the server functions in Sydney: "regions": ["${BRANDLAB_FUNCTION_REGION}"] (found ${regions === undefined ? 'no regions' : JSON.stringify(regions)}). The visitors are in Australia; a Washington (iad1) function adds a Pacific round trip to every request it serves.`);
+    // W5 (3.13.0): the regions equal the recorded origin region, Sydney unless an origin-region-v1 decision says otherwise.
+    // This check runs inside every site's `npm run verify`, so it never judges the date: a lapsed reviewBy must not stop
+    // a build, a fix or a rollback. The lapse fails only the ready gate's W5 (as site-core's config validation does).
+    const hosting = config === null ? undefined : parseProjectHosting(config);
+    for (const problem of originRegionProblems({ hosting, vercelJson: vercel, today: ORIGIN_DECISION_NEVER_LAPSED })) {
+        add(problem.startsWith('vercel.json') ? 'vercel.json' : 'brandlab.config.ts', 'vercel-region', problem);
     }
     let ignoreCommand;
     try {