@casoon/astro-post-audit 0.1.3 → 0.2.0

package/bin/install.cjs

@@ -6,6 +6,7 @@
  */
 
 const { execSync } = require("child_process");
+const crypto = require("crypto");
 const fs = require("fs");
 const path = require("path");
 const https = require("https");
@@ -81,6 +82,68 @@ async function download(url, dest) {
   });
 }
 
+/**
+ * Download a URL and return the contents as a Buffer.
+ */
+async function downloadToBuffer(url) {
+  return new Promise((resolve, reject) => {
+    const follow = (url, redirects = 0) => {
+      if (redirects > 5) {
+        reject(new Error("Too many redirects"));
+        return;
+      }
+
+      https.get(url, (res) => {
+        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+          follow(res.headers.location, redirects + 1);
+          return;
+        }
+
+        if (res.statusCode !== 200) {
+          reject(new Error(`Download failed: HTTP ${res.statusCode} from ${url}`));
+          return;
+        }
+
+        const chunks = [];
+        res.on("data", (chunk) => chunks.push(chunk));
+        res.on("end", () => resolve(Buffer.concat(chunks)));
+      }).on("error", reject);
+    };
+
+    follow(url);
+  });
+}
+
+/**
+ * Verify SHA256 hash of a file against the expected hash from the checksum file.
+ * The checksum file format is: "<hex_hash>  <filename>\n"
+ */
+function verifySha256(filePath, checksumContent, archiveFilename) {
+  const fileBuffer = fs.readFileSync(filePath);
+  const actualHash = crypto.createHash("sha256").update(fileBuffer).digest("hex");
+
+  // Parse checksum file: each line is "<hash>  <filename>" (two spaces)
+  const lines = checksumContent.toString("utf-8").trim().split("\n");
+  for (const line of lines) {
+    const match = line.match(/^([0-9a-f]{64})\s+(.+)$/);
+    if (match && match[2].trim() === archiveFilename) {
+      const expectedHash = match[1];
+      if (actualHash !== expectedHash) {
+        throw new Error(
+          `SHA256 mismatch for ${archiveFilename}!\n` +
+          `  Expected: ${expectedHash}\n` +
+          `  Actual:   ${actualHash}\n` +
+          "The downloaded binary may have been tampered with. Aborting install."
+        );
+      }
+      console.log(`  SHA256 verified: ${actualHash}`);
+      return;
+    }
+  }
+
+  console.warn(`  Warning: SHA256 checksum not found for ${archiveFilename} — skipping verification.`);
+}
+
 async function main() {
   const target = getPlatformTarget();
   const binaryName = getBinaryName();
@@ -95,6 +158,7 @@ async function main() {
 
   const url = getDownloadUrl(target);
   const archiveExt = process.platform === "win32" ? ".zip" : ".tar.gz";
+  const archiveFilename = `${PACKAGE}-v${VERSION}-${target}${archiveExt}`;
   const archivePath = path.join(binDir, `download${archiveExt}`);
 
   console.log(`Downloading ${PACKAGE} v${VERSION} for ${target}...`);
@@ -103,6 +167,22 @@ async function main() {
   try {
     await download(url, archivePath);
 
+    // Verify SHA256 checksum
+    const checksumUrl = `${url}.sha256`;
+    try {
+      const checksumData = await downloadToBuffer(checksumUrl);
+      verifySha256(archivePath, checksumData, archiveFilename);
+    } catch (checksumErr) {
+      if (checksumErr.message.includes("SHA256 mismatch")) {
+        // Hash mismatch is fatal — abort immediately
+        fs.unlinkSync(archivePath);
+        throw checksumErr;
+      }
+      // Checksum file not available (older release) — warn and continue
+      console.warn(`  Warning: Could not download checksum file: ${checksumErr.message}`);
+      console.warn("  Skipping SHA256 verification.");
+    }
+
     // Extract
     if (process.platform === "win32") {
       // Use PowerShell to extract zip on Windows

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-export { default } from './integration.js';
-export type { PostAuditOptions } from './integration.js';
+export { default, rulesToToml } from './integration.js';
+export type { PostAuditOptions, RulesConfig } from './integration.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACxD,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -1 +1 @@
-export { default } from './integration.js';
+export { default, rulesToToml } from './integration.js';

package/dist/integration.d.ts

@@ -1,27 +1,152 @@
 import type { AstroIntegration } from 'astro';
+/**
+ * Inline rules config that mirrors the Rust rules.toml structure.
+ * All sections and fields are optional — only set what you want to override.
+ */
+export interface RulesConfig {
+    site?: {
+        base_url?: string;
+    };
+    url_normalization?: {
+        trailing_slash?: 'always' | 'never' | 'ignore';
+        index_html?: 'forbid' | 'allow';
+    };
+    canonical?: {
+        require?: boolean;
+        absolute?: boolean;
+        same_origin?: boolean;
+        self_reference?: boolean;
+    };
+    robots_meta?: {
+        allow_noindex?: boolean;
+        fail_if_noindex?: boolean;
+    };
+    links?: {
+        check_internal?: boolean;
+        fail_on_broken?: boolean;
+        forbid_query_params_internal?: boolean;
+        check_fragments?: boolean;
+        detect_orphan_pages?: boolean;
+        check_mixed_content?: boolean;
+    };
+    sitemap?: {
+        require?: boolean;
+        canonical_must_be_in_sitemap?: boolean;
+        forbid_noncanonical_in_sitemap?: boolean;
+        entries_must_exist_in_dist?: boolean;
+    };
+    robots_txt?: {
+        require?: boolean;
+        require_sitemap_link?: boolean;
+    };
+    html_basics?: {
+        lang_attr_required?: boolean;
+        title_required?: boolean;
+        meta_description_required?: boolean;
+        viewport_required?: boolean;
+        title_max_length?: number;
+        meta_description_max_length?: number;
+    };
+    headings?: {
+        require_h1?: boolean;
+        single_h1?: boolean;
+        no_skip?: boolean;
+    };
+    a11y?: {
+        img_alt_required?: boolean;
+        allow_decorative_images?: boolean;
+        a_accessible_name_required?: boolean;
+        button_name_required?: boolean;
+        label_for_required?: boolean;
+        warn_generic_link_text?: boolean;
+        aria_hidden_focusable_check?: boolean;
+        require_skip_link?: boolean;
+    };
+    assets?: {
+        check_broken_assets?: boolean;
+        check_image_dimensions?: boolean;
+        max_image_size_kb?: number;
+        max_js_size_kb?: number;
+        max_css_size_kb?: number;
+        require_hashed_filenames?: boolean;
+    };
+    opengraph?: {
+        require_og_title?: boolean;
+        require_og_description?: boolean;
+        require_og_image?: boolean;
+        require_twitter_card?: boolean;
+    };
+    structured_data?: {
+        check_json_ld?: boolean;
+        require_json_ld?: boolean;
+    };
+    hreflang?: {
+        check_hreflang?: boolean;
+        require_x_default?: boolean;
+        require_self_reference?: boolean;
+        require_reciprocal?: boolean;
+    };
+    security?: {
+        check_target_blank?: boolean;
+        check_mixed_content?: boolean;
+        warn_inline_scripts?: boolean;
+    };
+    content_quality?: {
+        detect_duplicate_titles?: boolean;
+        detect_duplicate_descriptions?: boolean;
+        detect_duplicate_h1?: boolean;
+        detect_duplicate_pages?: boolean;
+    };
+    /** Custom severity overrides per rule ID. Maps rule IDs to 'error' | 'warning' | 'info' | 'off'. */
+    severity?: Record<string, 'error' | 'warning' | 'info' | 'off'>;
+    /** @deprecated Not yet implemented — will be ignored. */
+    external_links?: {
+        enabled?: boolean;
+        timeout_ms?: number;
+        max_concurrent?: number;
+        fail_on_broken?: boolean;
+        allow_domains?: string[];
+        block_domains?: string[];
+    };
+}
 export interface PostAuditOptions {
-    /** Path to rules.toml config file */
+    /** Path to rules.toml config file. Mutually exclusive with `rules`. */
     config?: string;
-    /** Base URL (auto-detected from Astro site config if not set) */
+    /** Inline rules config (generates a temporary rules.toml). Mutually exclusive with `config`. */
+    rules?: RulesConfig;
+    /** Base URL (auto-detected from Astro's `site` config if not set) */
     site?: string;
     /** Treat warnings as errors */
     strict?: boolean;
-    /** Output format: 'text' or 'json' */
+    /** Output format */
     format?: 'text' | 'json';
+    /** Maximum number of errors before aborting */
+    maxErrors?: number;
+    /** Glob patterns to include */
+    include?: string[];
     /** Glob patterns to exclude */
     exclude?: string[];
-    /** Skip sitemap checks */
+    /** Skip sitemap.xml checks */
     noSitemapCheck?: boolean;
     /** Enable asset reference checking */
     checkAssets?: boolean;
-    /** Enable structured data validation */
+    /** Enable structured data (JSON-LD) validation */
     checkStructuredData?: boolean;
     /** Enable security heuristic checks */
     checkSecurity?: boolean;
     /** Enable duplicate content detection */
     checkDuplicates?: boolean;
-    /** Disable the integration (useful for dev) */
+    /** Show page properties overview instead of running checks */
+    pageOverview?: boolean;
+    /** Disable the integration (useful for dev mode) */
     disable?: boolean;
+    /** Throw an AstroError when the audit finds errors (fails the build). Default: false */
+    throwOnError?: boolean;
 }
+/**
+ * Serialize a RulesConfig object to TOML format.
+ * @internal Exported for testing only.
+ */
+export declare function rulesToToml(rules: RulesConfig): string;
 export default function postAudit(options?: PostAuditOptions): AstroIntegration;
 //# sourceMappingURL=integration.d.ts.map

package/dist/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../src/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAM9C,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0BAA0B;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sCAAsC;IACtC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wCAAwC;IACxC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,uCAAuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+CAA+C;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,CAAC,OAAO,UAAU,SAAS,CAC/B,OAAO,GAAE,gBAAqB,GAC7B,gBAAgB,CAyElB"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../src/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAO9C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE;QAClB,cAAc,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;QAC/C,UAAU,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;KACjC,CAAC;IACF,SAAS,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;IACF,KAAK,CAAC,EAAE;QACN,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC,8BAA8B,CAAC,EAAE,OAAO,CAAC;QACzC,0BAA0B,CAAC,EAAE,OAAO,CAAC;KACtC,CAAC;IACF,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,2BAA2B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,0BAA0B,CAAC,EAAE,OAAO,CAAC;QACrC,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,2BAA2B,CAAC,EAAE,OAAO,CAAC;QACtC,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,MAAM,CAAC,EAAE;QACP,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,CAAC;IACF,SAAS,CAAC,EAAE;QACV,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,eAAe,CAAC,EAAE;QAChB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,eAAe,CAAC,EAAE;QAChB,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;KAClC,CAAC;IACF,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC;IAChE,yDAAyD;IACzD,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sCAAsC;IACtC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kDAAkD;IAClD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,uCAAuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oDAAoD;IACpD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wFAAwF;IACxF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAuBtD;AAUD,MAAM,CAAC,OAAO,UAAU,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,gBAAgB,CAgHlF"}

package/dist/integration.js

@@ -1,7 +1,44 @@
 import { execFileSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, mkdtempSync, writeFileSync, unlinkSync, rmdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
+import { tmpdir } from 'node:os';
 import { fileURLToPath } from 'node:url';
+/**
+ * Serialize a RulesConfig object to TOML format.
+ * @internal Exported for testing only.
+ */
+export function rulesToToml(rules) {
+    const lines = [];
+    for (const [section, values] of Object.entries(rules)) {
+        if (values == null || typeof values !== 'object')
+            continue;
+        lines.push(`[${section}]`);
+        for (const [key, val] of Object.entries(values)) {
+            if (val === undefined)
+                continue;
+            // Quote keys that contain special chars (e.g. rule IDs like "html/lang-missing")
+            const tomlKey = /^[a-zA-Z0-9_-]+$/.test(key) ? key : `"${key}"`;
+            if (typeof val === 'string') {
+                lines.push(`${tomlKey} = "${val}"`);
+            }
+            else if (Array.isArray(val)) {
+                const items = val.map((v) => `"${v}"`).join(', ');
+                lines.push(`${tomlKey} = [${items}]`);
+            }
+            else {
+                lines.push(`${tomlKey} = ${val}`);
+            }
+        }
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+function resolveBinaryPath() {
+    const binDir = join(dirname(fileURLToPath(import.meta.url)), '..', 'bin');
+    const binaryName = process.platform === 'win32' ? 'astro-post-audit.exe' : 'astro-post-audit';
+    const binaryPath = join(binDir, binaryName);
+    return existsSync(binaryPath) ? binaryPath : null;
+}
 export default function postAudit(options = {}) {
     let siteUrl;
     return {
@@ -13,27 +50,29 @@ export default function postAudit(options = {}) {
             'astro:build:done': ({ dir, logger }) => {
                 if (options.disable)
                     return;
-                const distPath = fileURLToPath(dir);
-                const binDir = join(dirname(fileURLToPath(import.meta.url)), '..', 'bin');
-                const binaryName = process.platform === 'win32'
-                    ? 'astro-post-audit.exe'
-                    : 'astro-post-audit';
-                const binaryPath = join(binDir, binaryName);
-                if (!existsSync(binaryPath)) {
+                // Validate mutual exclusion: config and rules cannot both be set
+                if (options.config && options.rules) {
+                    throw new Error('astro-post-audit: "config" and "rules" are mutually exclusive. ' +
+                        'Use "config" to point to a rules.toml file, OR use "rules" to provide inline config — not both.');
+                }
+                // Validate that rules is a non-empty object if provided
+                if (options.rules && typeof options.rules === 'object' && Object.keys(options.rules).length === 0) {
+                    logger.warn('astro-post-audit: "rules" is an empty object — using default config.');
+                }
+                const binaryPath = resolveBinaryPath();
+                if (!binaryPath) {
                     logger.warn('astro-post-audit binary not found. Run "npm rebuild @casoon/astro-post-audit".');
                     return;
                 }
+                const distPath = fileURLToPath(dir);
                 const args = [distPath];
-                // Use site from options, or auto-detect from Astro config
+                // --site: explicit option > Astro config auto-detect
                 const site = options.site ?? siteUrl;
                 if (site)
                     args.push('--site', site);
+                // Boolean flags
                 if (options.strict)
                     args.push('--strict');
-                if (options.format)
-                    args.push('--format', options.format);
-                if (options.config)
-                    args.push('--config', options.config);
                 if (options.noSitemapCheck)
                     args.push('--no-sitemap-check');
                 if (options.checkAssets)
@@ -44,11 +83,35 @@ export default function postAudit(options = {}) {
                     args.push('--check-security');
                 if (options.checkDuplicates)
                     args.push('--check-duplicates');
+                if (options.pageOverview)
+                    args.push('--page-overview');
+                // Value flags
+                if (options.format)
+                    args.push('--format', options.format);
+                if (options.maxErrors != null)
+                    args.push('--max-errors', String(options.maxErrors));
+                // Array flags
+                if (options.include) {
+                    for (const pattern of options.include) {
+                        args.push('--include', pattern);
+                    }
+                }
                 if (options.exclude) {
                     for (const pattern of options.exclude) {
                         args.push('--exclude', pattern);
                     }
                 }
+                // Config: explicit file path OR generate temp from inline rules
+                let tempConfigPath;
+                if (options.config) {
+                    args.push('--config', options.config);
+                }
+                else if (options.rules) {
+                    const tempDir = mkdtempSync(join(tmpdir(), 'astro-post-audit-'));
+                    tempConfigPath = join(tempDir, 'rules.toml');
+                    writeFileSync(tempConfigPath, rulesToToml(options.rules), 'utf-8');
+                    args.push('--config', tempConfigPath);
+                }
                 logger.info('Running post-build audit...');
                 try {
                     execFileSync(binaryPath, args, { stdio: 'inherit' });
@@ -59,12 +122,27 @@ export default function postAudit(options = {}) {
                         ? err.status
                         : undefined;
                     if (exitCode === 1) {
+                        if (options.throwOnError) {
+                            throw new Error('astro-post-audit found issues. See output above.');
+                        }
                         logger.warn('Audit found issues. See output above.');
                     }
                     else {
                         logger.error(`Audit failed with exit code ${exitCode ?? 'unknown'}`);
                     }
                 }
+                finally {
+                    // Clean up temp config
+                    if (tempConfigPath) {
+                        try {
+                            unlinkSync(tempConfigPath);
+                            rmdirSync(dirname(tempConfigPath));
+                        }
+                        catch {
+                            // ignore cleanup errors
+                        }
+                    }
+                }
             },
         },
     };

package/dist/integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=integration.test.d.ts.map

package/dist/integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.test.d.ts","sourceRoot":"","sources":["../src/integration.test.ts"],"names":[],"mappings":""}

package/dist/integration.test.js

@@ -0,0 +1,160 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import postAudit, { rulesToToml } from './integration.js';
+// ==========================================================================
+// rulesToToml serialization
+// ==========================================================================
+describe('rulesToToml', () => {
+    it('serializes boolean values', () => {
+        const rules = {
+            canonical: { require: true, absolute: false },
+        };
+        const toml = rulesToToml(rules);
+        assert.ok(toml.includes('[canonical]'));
+        assert.ok(toml.includes('require = true'));
+        assert.ok(toml.includes('absolute = false'));
+    });
+    it('serializes string values with quotes', () => {
+        const rules = {
+            url_normalization: { trailing_slash: 'always', index_html: 'forbid' },
+        };
+        const toml = rulesToToml(rules);
+        assert.ok(toml.includes('[url_normalization]'));
+        assert.ok(toml.includes('trailing_slash = "always"'));
+        assert.ok(toml.includes('index_html = "forbid"'));
+    });
+    it('serializes numeric values', () => {
+        const rules = {
+            html_basics: { title_max_length: 60, meta_description_max_length: 160 },
+        };
+        const toml = rulesToToml(rules);
+        assert.ok(toml.includes('title_max_length = 60'));
+        assert.ok(toml.includes('meta_description_max_length = 160'));
+    });
+    it('serializes array values', () => {
+        const rules = {
+            external_links: {
+                allow_domains: ['example.com', 'test.org'],
+            },
+        };
+        const toml = rulesToToml(rules);
+        assert.ok(toml.includes('[external_links]'));
+        assert.ok(toml.includes('allow_domains = ["example.com", "test.org"]'));
+    });
+    it('skips undefined values', () => {
+        const rules = {
+            canonical: { require: true },
+        };
+        const toml = rulesToToml(rules);
+        // Only 'require' should be present, not 'absolute', 'same_origin', 'self_reference'
+        assert.ok(toml.includes('require = true'));
+        assert.ok(!toml.includes('absolute'));
+        assert.ok(!toml.includes('same_origin'));
+    });
+    it('handles empty rules', () => {
+        const toml = rulesToToml({});
+        assert.equal(toml, '');
+    });
+    it('handles multiple sections', () => {
+        const rules = {
+            canonical: { require: true },
+            headings: { require_h1: true, single_h1: false },
+        };
+        const toml = rulesToToml(rules);
+        assert.ok(toml.includes('[canonical]'));
+        assert.ok(toml.includes('[headings]'));
+        assert.ok(toml.includes('require_h1 = true'));
+        assert.ok(toml.includes('single_h1 = false'));
+    });
+});
+// ==========================================================================
+// postAudit integration factory
+// ==========================================================================
+describe('postAudit', () => {
+    it('returns an AstroIntegration with correct name', () => {
+        const integration = postAudit();
+        assert.equal(integration.name, 'astro-post-audit');
+        assert.ok(integration.hooks);
+    });
+    it('accepts empty options', () => {
+        const integration = postAudit({});
+        assert.equal(integration.name, 'astro-post-audit');
+    });
+    it('accepts all option types', () => {
+        const options = {
+            strict: true,
+            format: 'json',
+            maxErrors: 5,
+            include: ['**/*.html'],
+            exclude: ['drafts/**'],
+            noSitemapCheck: true,
+            checkAssets: true,
+            checkStructuredData: true,
+            checkSecurity: true,
+            checkDuplicates: true,
+            pageOverview: false,
+            disable: false,
+            throwOnError: true,
+        };
+        const integration = postAudit(options);
+        assert.equal(integration.name, 'astro-post-audit');
+    });
+    it('throws when both config and rules are set', () => {
+        const integration = postAudit({
+            config: '/path/to/rules.toml',
+            rules: { canonical: { require: true } },
+        });
+        // Simulate astro:build:done hook
+        const hook = integration.hooks['astro:build:done'];
+        assert.throws(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }), {
+            message: /mutually exclusive/,
+        });
+    });
+    it('does not throw when only config is set', () => {
+        const integration = postAudit({ config: '/path/to/rules.toml' });
+        const hook = integration.hooks['astro:build:done'];
+        // Should not throw (will just warn about missing binary)
+        assert.doesNotThrow(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }));
+    });
+    it('does not throw when only rules is set', () => {
+        const integration = postAudit({
+            rules: { canonical: { require: true } },
+        });
+        const hook = integration.hooks['astro:build:done'];
+        assert.doesNotThrow(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }));
+    });
+    it('skips execution when disabled', () => {
+        const integration = postAudit({ disable: true });
+        const hook = integration.hooks['astro:build:done'];
+        // Should return immediately without doing anything
+        assert.doesNotThrow(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }));
+    });
+});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@casoon/astro-post-audit",
-  "version": "0.1.3",
-  "description": "Fast post-build auditor for Astro sites: SEO, links, and lightweight WCAG checks",
+  "version": "0.2.0",
+  "description": "Astro integration for post-build auditing: SEO, links, and lightweight WCAG checks",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -17,6 +17,8 @@
   },
   "scripts": {
     "build": "tsc",
+    "test": "tsc && node --test dist/integration.test.js",
+    "prepublishOnly": "tsc",
     "postinstall": "node bin/install.cjs"
   },
   "files": [
@@ -51,16 +53,11 @@
     "arm64"
   ],
   "peerDependencies": {
-    "astro": "^5.0.0 || ^6.0.0-beta.0 || ^6.0.0"
-  },
-  "peerDependenciesMeta": {
-    "astro": {
-      "optional": true
-    }
+    "astro": "^5.0.0 || ^6.0.0-beta.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",
-    "astro": "^6.0.0-beta.15",
+    "astro": "^5.0.0",
     "typescript": "^5.9.3"
   }
 }