@casoon/astro-post-audit 0.1.3 → 0.2.1

package/bin/install.cjs

@@ -6,6 +6,7 @@
  */
 
 const { execSync } = require("child_process");
+const crypto = require("crypto");
 const fs = require("fs");
 const path = require("path");
 const https = require("https");
@@ -81,6 +82,68 @@ async function download(url, dest) {
   });
 }
 
+/**
+ * Download a URL and return the contents as a Buffer.
+ */
+async function downloadToBuffer(url) {
+  return new Promise((resolve, reject) => {
+    const follow = (url, redirects = 0) => {
+      if (redirects > 5) {
+        reject(new Error("Too many redirects"));
+        return;
+      }
+
+      https.get(url, (res) => {
+        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+          follow(res.headers.location, redirects + 1);
+          return;
+        }
+
+        if (res.statusCode !== 200) {
+          reject(new Error(`Download failed: HTTP ${res.statusCode} from ${url}`));
+          return;
+        }
+
+        const chunks = [];
+        res.on("data", (chunk) => chunks.push(chunk));
+        res.on("end", () => resolve(Buffer.concat(chunks)));
+      }).on("error", reject);
+    };
+
+    follow(url);
+  });
+}
+
+/**
+ * Verify SHA256 hash of a file against the expected hash from the checksum file.
+ * The checksum file format is: "<hex_hash>  <filename>\n"
+ */
+function verifySha256(filePath, checksumContent, archiveFilename) {
+  const fileBuffer = fs.readFileSync(filePath);
+  const actualHash = crypto.createHash("sha256").update(fileBuffer).digest("hex");
+
+  // Parse checksum file: each line is "<hash>  <filename>" (two spaces)
+  const lines = checksumContent.toString("utf-8").trim().split("\n");
+  for (const line of lines) {
+    const match = line.match(/^([0-9a-f]{64})\s+(.+)$/);
+    if (match && match[2].trim() === archiveFilename) {
+      const expectedHash = match[1];
+      if (actualHash !== expectedHash) {
+        throw new Error(
+          `SHA256 mismatch for ${archiveFilename}!\n` +
+          `  Expected: ${expectedHash}\n` +
+          `  Actual:   ${actualHash}\n` +
+          "The downloaded binary may have been tampered with. Aborting install."
+        );
+      }
+      console.log(`  SHA256 verified: ${actualHash}`);
+      return;
+    }
+  }
+
+  console.warn(`  Warning: SHA256 checksum not found for ${archiveFilename} — skipping verification.`);
+}
+
 async function main() {
   const target = getPlatformTarget();
   const binaryName = getBinaryName();
@@ -95,6 +158,7 @@ async function main() {
 
   const url = getDownloadUrl(target);
   const archiveExt = process.platform === "win32" ? ".zip" : ".tar.gz";
+  const archiveFilename = `${PACKAGE}-v${VERSION}-${target}${archiveExt}`;
   const archivePath = path.join(binDir, `download${archiveExt}`);
 
   console.log(`Downloading ${PACKAGE} v${VERSION} for ${target}...`);
@@ -103,6 +167,22 @@ async function main() {
   try {
     await download(url, archivePath);
 
+    // Verify SHA256 checksum
+    const checksumUrl = `${url}.sha256`;
+    try {
+      const checksumData = await downloadToBuffer(checksumUrl);
+      verifySha256(archivePath, checksumData, archiveFilename);
+    } catch (checksumErr) {
+      if (checksumErr.message.includes("SHA256 mismatch")) {
+        // Hash mismatch is fatal — abort immediately
+        fs.unlinkSync(archivePath);
+        throw checksumErr;
+      }
+      // Checksum file not available (older release) — warn and continue
+      console.warn(`  Warning: Could not download checksum file: ${checksumErr.message}`);
+      console.warn("  Skipping SHA256 verification.");
+    }
+
     // Extract
     if (process.platform === "win32") {
       // Use PowerShell to extract zip on Windows

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 export { default } from './integration.js';
-export type { PostAuditOptions } from './integration.js';
+export type { PostAuditOptions, RulesConfig } from './integration.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/integration.d.ts

@@ -1,27 +1,234 @@
 import type { AstroIntegration } from 'astro';
+/**
+ * Inline rules config that mirrors the Rust config structure.
+ * All sections and fields are optional — only set what you want to override.
+ */
+export interface RulesConfig {
+    /** Site-level settings. */
+    site?: {
+        /** Base URL for canonical/sitemap checks. Also settable via `site` option or Astro's `site` config. */
+        base_url?: string;
+    };
+    /** File filters — glob patterns to include or exclude pages from all checks. */
+    filters?: {
+        /** Only check files matching these glob patterns. Merged with the top-level `include` option. */
+        include?: string[];
+        /** Skip files matching these glob patterns (e.g. `["404.html", "drafts/**"]`). Merged with the top-level `exclude` option. */
+        exclude?: string[];
+    };
+    /** URL normalization rules for internal link and canonical consistency. */
+    url_normalization?: {
+        /** Trailing slash policy. `"always"`: require trailing slash, `"never"`: forbid, `"ignore"`: no check. @default "always" */
+        trailing_slash?: 'always' | 'never' | 'ignore';
+        /** Whether `index.html` in URLs is allowed. `"forbid"`: warn on `/page/index.html` links, `"allow"`: permit them. @default "forbid" */
+        index_html?: 'forbid' | 'allow';
+    };
+    /** Canonical `<link rel="canonical">` tag checks. */
+    canonical?: {
+        /** Every page must have a canonical tag. @default true */
+        require?: boolean;
+        /** Canonical URL must be absolute (not relative). @default true */
+        absolute?: boolean;
+        /** Canonical must point to the same origin as `site`. @default true */
+        same_origin?: boolean;
+        /** Canonical must be a self-reference (point to the page itself). @default false */
+        self_reference?: boolean;
+    };
+    /** Robots meta tag checks. */
+    robots_meta?: {
+        /** Don't warn on pages with `noindex`. @default true */
+        allow_noindex?: boolean;
+        /** Treat any `noindex` page as an error. @default false */
+        fail_if_noindex?: boolean;
+    };
+    /** Internal link consistency checks. */
+    links?: {
+        /** Check that internal links resolve to existing pages. @default true */
+        check_internal?: boolean;
+        /** Broken internal links are errors (not just warnings). @default true */
+        fail_on_broken?: boolean;
+        /** Warn on query parameters (`?foo=bar`) in internal links. @default true */
+        forbid_query_params_internal?: boolean;
+        /** Validate that `#fragment` targets exist in the linked page. @default false */
+        check_fragments?: boolean;
+        /** Warn about pages with no incoming internal links (orphan pages). @default false */
+        detect_orphan_pages?: boolean;
+        /** Warn on `http://` in internal links (mixed content). @default true */
+        check_mixed_content?: boolean;
+    };
+    /** Sitemap cross-reference checks. */
+    sitemap?: {
+        /** `sitemap.xml` must exist in `dist/`. @default false */
+        require?: boolean;
+        /** Canonical URLs should appear in the sitemap. @default true */
+        canonical_must_be_in_sitemap?: boolean;
+        /** Sitemap must not contain non-canonical URLs. @default false */
+        forbid_noncanonical_in_sitemap?: boolean;
+        /** Every sitemap URL must correspond to a page in `dist/`. @default true */
+        entries_must_exist_in_dist?: boolean;
+    };
+    /** `robots.txt` file checks. */
+    robots_txt?: {
+        /** `robots.txt` must exist. @default false */
+        require?: boolean;
+        /** `robots.txt` must contain a link to the sitemap. @default false */
+        require_sitemap_link?: boolean;
+    };
+    /** Basic HTML structure checks. */
+    html_basics?: {
+        /** `<html lang="...">` attribute is required. @default true */
+        lang_attr_required?: boolean;
+        /** `<title>` tag is required and must be non-empty. @default true */
+        title_required?: boolean;
+        /** `<meta name="description">` is required. @default false */
+        meta_description_required?: boolean;
+        /** `<meta name="viewport">` is required. @default true */
+        viewport_required?: boolean;
+        /** Warn if `<title>` exceeds this character length. @default 60 */
+        title_max_length?: number;
+        /** Warn if meta description exceeds this character length. @default 160 */
+        meta_description_max_length?: number;
+    };
+    /** Heading hierarchy checks. */
+    headings?: {
+        /** Page must have at least one `<h1>`. @default true */
+        require_h1?: boolean;
+        /** Only one `<h1>` per page. @default true */
+        single_h1?: boolean;
+        /** No heading level gaps (e.g. `<h2>` followed by `<h4>`). @default false */
+        no_skip?: boolean;
+    };
+    /** Accessibility (a11y) heuristics — static checks, no layout computation. */
+    a11y?: {
+        /** `<img>` elements must have an `alt` attribute. @default true */
+        img_alt_required?: boolean;
+        /** Allow images with `role="presentation"` or `aria-hidden="true"` to skip `alt`. @default true */
+        allow_decorative_images?: boolean;
+        /** `<a>` elements must have an accessible name (text, `aria-label`, or `aria-labelledby`). @default true */
+        a_accessible_name_required?: boolean;
+        /** `<button>` elements must have an accessible name. @default true */
+        button_name_required?: boolean;
+        /** Form controls must have an associated `<label>`. @default true */
+        label_for_required?: boolean;
+        /** Warn on generic link text like "click here", "mehr", "weiter". @default true */
+        warn_generic_link_text?: boolean;
+        /** Warn if `aria-hidden="true"` is set on a focusable element. @default true */
+        aria_hidden_focusable_check?: boolean;
+        /** Require a skip navigation link (e.g. `<a href="#main-content">`). @default false */
+        require_skip_link?: boolean;
+    };
+    /** Asset reference and size checks. Enable via `checkAssets` option or set fields here. */
+    assets?: {
+        /** Check that `<img>`, `<script>`, `<link>` references resolve to files in `dist/`. @default false */
+        check_broken_assets?: boolean;
+        /** Warn if `<img>` is missing `width`/`height` attributes (CLS prevention). @default false */
+        check_image_dimensions?: boolean;
+        /** Warn if any image file exceeds this size in KB. Off by default. */
+        max_image_size_kb?: number;
+        /** Warn if any JS file exceeds this size in KB. Off by default. */
+        max_js_size_kb?: number;
+        /** Warn if any CSS file exceeds this size in KB. Off by default. */
+        max_css_size_kb?: number;
+        /** Warn if asset filenames lack a cache-busting hash. @default false */
+        require_hashed_filenames?: boolean;
+    };
+    /** Open Graph and Twitter Card meta tag checks. */
+    opengraph?: {
+        /** Require `og:title` meta tag. @default false */
+        require_og_title?: boolean;
+        /** Require `og:description` meta tag. @default false */
+        require_og_description?: boolean;
+        /** Require `og:image` meta tag. @default false */
+        require_og_image?: boolean;
+        /** Require `twitter:card` meta tag. @default false */
+        require_twitter_card?: boolean;
+    };
+    /** Structured data (JSON-LD) validation. Enable via `checkStructuredData` option or set fields here. */
+    structured_data?: {
+        /** Validate JSON-LD syntax and semantics (`@context`, `@type`, required properties). @default false */
+        check_json_ld?: boolean;
+        /** Every page must contain at least one JSON-LD block. @default false */
+        require_json_ld?: boolean;
+    };
+    /** Hreflang checks for multilingual sites. */
+    hreflang?: {
+        /** Enable hreflang link checks. @default false */
+        check_hreflang?: boolean;
+        /** Require an `x-default` hreflang entry. @default false */
+        require_x_default?: boolean;
+        /** Hreflang must include a self-referencing entry. @default false */
+        require_self_reference?: boolean;
+        /** Hreflang links must be reciprocal (A→B and B→A). @default false */
+        require_reciprocal?: boolean;
+    };
+    /** Security heuristic checks. Enable via `checkSecurity` option or set fields here. */
+    security?: {
+        /** Warn on `target="_blank"` without `rel="noopener"`. @default true */
+        check_target_blank?: boolean;
+        /** Warn on `http://` resource URLs (mixed content). @default true */
+        check_mixed_content?: boolean;
+        /** Warn on inline `<script>` tags. @default false */
+        warn_inline_scripts?: boolean;
+    };
+    /** Duplicate content detection. Enable via `checkDuplicates` option or set fields here. */
+    content_quality?: {
+        /** Warn if multiple pages share the same `<title>`. @default false */
+        detect_duplicate_titles?: boolean;
+        /** Warn if multiple pages share the same meta description. @default false */
+        detect_duplicate_descriptions?: boolean;
+        /** Warn if multiple pages share the same `<h1>`. @default false */
+        detect_duplicate_h1?: boolean;
+        /** Warn if pages have identical content (by hash). @default false */
+        detect_duplicate_pages?: boolean;
+    };
+    /**
+     * Override severity per rule ID.
+     * @example `{ "html/title-too-long": "off", "a11y/img-alt-missing": "error" }`
+     */
+    severity?: Record<string, 'error' | 'warning' | 'info' | 'off'>;
+    /** @deprecated Not yet implemented — will be ignored. */
+    external_links?: {
+        enabled?: boolean;
+        timeout_ms?: number;
+        max_concurrent?: number;
+        fail_on_broken?: boolean;
+        allow_domains?: string[];
+        block_domains?: string[];
+    };
+}
 export interface PostAuditOptions {
-    /** Path to rules.toml config file */
+    /** Path to a TOML config file. Mutually exclusive with `rules`. */
     config?: string;
-    /** Base URL (auto-detected from Astro site config if not set) */
+    /** Inline rules config. Mutually exclusive with `config`. */
+    rules?: RulesConfig;
+    /** Base URL (auto-detected from Astro's `site` config if not set) */
     site?: string;
     /** Treat warnings as errors */
     strict?: boolean;
-    /** Output format: 'text' or 'json' */
+    /** Output format */
     format?: 'text' | 'json';
+    /** Maximum number of errors before aborting */
+    maxErrors?: number;
+    /** Glob patterns to include */
+    include?: string[];
     /** Glob patterns to exclude */
     exclude?: string[];
-    /** Skip sitemap checks */
+    /** Skip sitemap.xml checks */
     noSitemapCheck?: boolean;
     /** Enable asset reference checking */
     checkAssets?: boolean;
-    /** Enable structured data validation */
+    /** Enable structured data (JSON-LD) validation */
     checkStructuredData?: boolean;
     /** Enable security heuristic checks */
     checkSecurity?: boolean;
     /** Enable duplicate content detection */
     checkDuplicates?: boolean;
-    /** Disable the integration (useful for dev) */
+    /** Show page properties overview instead of running checks */
+    pageOverview?: boolean;
+    /** Disable the integration (useful for dev mode) */
     disable?: boolean;
+    /** Throw an AstroError when the audit finds errors (fails the build). Default: false */
+    throwOnError?: boolean;
 }
 export default function postAudit(options?: PostAuditOptions): AstroIntegration;
 //# sourceMappingURL=integration.d.ts.map

package/dist/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../src/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAM9C,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0BAA0B;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sCAAsC;IACtC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wCAAwC;IACxC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,uCAAuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+CAA+C;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,CAAC,OAAO,UAAU,SAAS,CAC/B,OAAO,GAAE,gBAAqB,GAC7B,gBAAgB,CAyElB"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"","sources":["../src/integration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAM9C;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,IAAI,CAAC,EAAE;QACL,uGAAuG;QACvG,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,gFAAgF;IAChF,OAAO,CAAC,EAAE;QACR,iGAAiG;QACjG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,8HAA8H;QAC9H,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE;QAClB,4HAA4H;QAC5H,cAAc,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;QAC/C,uIAAuI;QACvI,UAAU,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;KACjC,CAAC;IACF,qDAAqD;IACrD,SAAS,CAAC,EAAE;QACV,0DAA0D;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,mEAAmE;QACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,uEAAuE;QACvE,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,oFAAoF;QACpF,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,CAAC;IACF,8BAA8B;IAC9B,WAAW,CAAC,EAAE;QACZ,wDAAwD;QACxD,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,2DAA2D;QAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;IACF,wCAAwC;IACxC,KAAK,CAAC,EAAE;QACN,yEAAyE;QACzE,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,0EAA0E;QAC1E,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,6EAA6E;QAC7E,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC,iFAAiF;QACjF,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,sFAAsF;QACtF,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,yEAAyE;QACzE,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,sCAAsC;IACtC,OAAO,CAAC,EAAE;QACR,0DAA0D;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iEAAiE;QACjE,4BAA4B,CAAC,EAAE,OAAO,CAAC;QACvC,kEAAkE;QAClE,8BAA8B,CAAC,EAAE,OAAO,CAAC;QACzC,4EAA4E;QAC5E,0BAA0B,CAAC,EAAE,OAAO,CAAC;KACtC,CAAC;IACF,gCAAgC;IAChC,UAAU,CAAC,EAAE;QACX,8CAA8C;QAC9C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,sEAAsE;QACtE,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,mCAAmC;IACnC,WAAW,CAAC,EAAE;QACZ,+DAA+D;QAC/D,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,qEAAqE;QACrE,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,8DAA8D;QAC9D,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC,0DAA0D;QAC1D,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,mEAAmE;QACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,2EAA2E;QAC3E,2BAA2B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,gCAAgC;IAChC,QAAQ,CAAC,EAAE;QACT,wDAAwD;QACxD,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,8CAA8C;QAC9C,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,6EAA6E;QAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,8EAA8E;IAC9E,IAAI,CAAC,EAAE;QACL,mEAAmE;QACnE,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,mGAAmG;QACnG,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,4GAA4G;QAC5G,0BAA0B,CAAC,EAAE,OAAO,CAAC;QACrC,sEAAsE;QACtE,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,qEAAqE;QACrE,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,mFAAmF;QACnF,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,gFAAgF;QAChF,2BAA2B,CAAC,EAAE,OAAO,CAAC;QACtC,uFAAuF;QACvF,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,2FAA2F;IAC3F,MAAM,CAAC,EAAE;QACP,sGAAsG;QACtG,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,8FAA8F;QAC9F,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,sEAAsE;QACtE,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,mEAAmE;QACnE,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,oEAAoE;QACpE,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,wEAAwE;QACxE,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,CAAC;IACF,mDAAmD;IACnD,SAAS,CAAC,EAAE;QACV,kDAAkD;QAClD,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,wDAAwD;QACxD,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,kDAAkD;QAClD,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,sDAAsD;QACtD,oBAAoB,CAAC,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,wGAAwG;IACxG,eAAe,CAAC,EAAE;QAChB,uGAAuG;QACvG,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,yEAAyE;QACzE,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;IACF,8CAA8C;IAC9C,QAAQ,CAAC,EAAE;QACT,kDAAkD;QAClD,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,4DAA4D;QAC5D,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAC5B,qEAAqE;QACrE,sBAAsB,CAAC,EAAE,OAAO,CAAC;QACjC,sEAAsE;QACtE,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,CAAC;IACF,uFAAuF;IACvF,QAAQ,CAAC,EAAE;QACT,wEAAwE;QACxE,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,qEAAqE;QACrE,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,qDAAqD;QACrD,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,2FAA2F;IAC3F,eAAe,CAAC,EAAE;QAChB,sEAAsE;QACtE,uBAAuB,CAAC,EAAE,OAAO,CAAC;QAClC,6EAA6E;QAC7E,6BAA6B,CAAC,EAAE,OAAO,CAAC;QACxC,mEAAmE;QACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,qEAAqE;QACrE,sBAAsB,CAAC,EAAE,OAAO,CAAC;KAClC,CAAC;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC;IAChE,yDAAyD;IACzD,cAAc,CAAC,EAAE;QACf,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sCAAsC;IACtC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kDAAkD;IAClD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,uCAAuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,8DAA8D;IAC9D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oDAAoD;IACpD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wFAAwF;IACxF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAUD,MAAM,CAAC,OAAO,UAAU,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,gBAAgB,CAuGlF"}

package/dist/integration.js

@@ -2,6 +2,12 @@ import { execFileSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
+function resolveBinaryPath() {
+    const binDir = join(dirname(fileURLToPath(import.meta.url)), '..', 'bin');
+    const binaryName = process.platform === 'win32' ? 'astro-post-audit.exe' : 'astro-post-audit';
+    const binaryPath = join(binDir, binaryName);
+    return existsSync(binaryPath) ? binaryPath : null;
+}
 export default function postAudit(options = {}) {
     let siteUrl;
     return {
@@ -13,27 +19,29 @@ export default function postAudit(options = {}) {
             'astro:build:done': ({ dir, logger }) => {
                 if (options.disable)
                     return;
-                const distPath = fileURLToPath(dir);
-                const binDir = join(dirname(fileURLToPath(import.meta.url)), '..', 'bin');
-                const binaryName = process.platform === 'win32'
-                    ? 'astro-post-audit.exe'
-                    : 'astro-post-audit';
-                const binaryPath = join(binDir, binaryName);
-                if (!existsSync(binaryPath)) {
+                // Validate mutual exclusion: config and rules cannot both be set
+                if (options.config && options.rules) {
+                    throw new Error('astro-post-audit: "config" and "rules" are mutually exclusive. ' +
+                        'Use "config" to point to a config file, OR use "rules" to provide inline config — not both.');
+                }
+                // Validate that rules is a non-empty object if provided
+                if (options.rules && typeof options.rules === 'object' && Object.keys(options.rules).length === 0) {
+                    logger.warn('astro-post-audit: "rules" is an empty object — using default config.');
+                }
+                const binaryPath = resolveBinaryPath();
+                if (!binaryPath) {
                     logger.warn('astro-post-audit binary not found. Run "npm rebuild @casoon/astro-post-audit".');
                     return;
                 }
+                const distPath = fileURLToPath(dir);
                 const args = [distPath];
-                // Use site from options, or auto-detect from Astro config
+                // --site: explicit option > Astro config auto-detect
                 const site = options.site ?? siteUrl;
                 if (site)
                     args.push('--site', site);
+                // Boolean flags
                 if (options.strict)
                     args.push('--strict');
-                if (options.format)
-                    args.push('--format', options.format);
-                if (options.config)
-                    args.push('--config', options.config);
                 if (options.noSitemapCheck)
                     args.push('--no-sitemap-check');
                 if (options.checkAssets)
@@ -44,14 +52,39 @@ export default function postAudit(options = {}) {
                     args.push('--check-security');
                 if (options.checkDuplicates)
                     args.push('--check-duplicates');
+                if (options.pageOverview)
+                    args.push('--page-overview');
+                // Value flags
+                if (options.format)
+                    args.push('--format', options.format);
+                if (options.maxErrors != null)
+                    args.push('--max-errors', String(options.maxErrors));
+                // Array flags
+                if (options.include) {
+                    for (const pattern of options.include) {
+                        args.push('--include', pattern);
+                    }
+                }
                 if (options.exclude) {
                     for (const pattern of options.exclude) {
                         args.push('--exclude', pattern);
                     }
                 }
+                // Config: explicit file path OR pipe inline rules via stdin
+                let stdinInput;
+                if (options.config) {
+                    args.push('--config', options.config);
+                }
+                else if (options.rules) {
+                    args.push('--config-stdin');
+                    stdinInput = JSON.stringify(options.rules);
+                }
                 logger.info('Running post-build audit...');
                 try {
-                    execFileSync(binaryPath, args, { stdio: 'inherit' });
+                    execFileSync(binaryPath, args, {
+                        stdio: stdinInput ? ['pipe', 'inherit', 'inherit'] : 'inherit',
+                        input: stdinInput,
+                    });
                     logger.info('All checks passed!');
                 }
                 catch (err) {
@@ -59,6 +92,9 @@ export default function postAudit(options = {}) {
                         ? err.status
                         : undefined;
                     if (exitCode === 1) {
+                        if (options.throwOnError) {
+                            throw new Error('astro-post-audit found issues. See output above.');
+                        }
                         logger.warn('Audit found issues. See output above.');
                     }
                     else {

package/dist/integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=integration.test.d.ts.map

package/dist/integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.test.d.ts","sourceRoot":"","sources":["../src/integration.test.ts"],"names":[],"mappings":""}

package/dist/integration.test.js

@@ -0,0 +1,94 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import postAudit from './integration.js';
+// ==========================================================================
+// postAudit integration factory
+// ==========================================================================
+describe('postAudit', () => {
+    it('returns an AstroIntegration with correct name', () => {
+        const integration = postAudit();
+        assert.equal(integration.name, 'astro-post-audit');
+        assert.ok(integration.hooks);
+    });
+    it('accepts empty options', () => {
+        const integration = postAudit({});
+        assert.equal(integration.name, 'astro-post-audit');
+    });
+    it('accepts all option types', () => {
+        const options = {
+            strict: true,
+            format: 'json',
+            maxErrors: 5,
+            include: ['**/*.html'],
+            exclude: ['drafts/**'],
+            noSitemapCheck: true,
+            checkAssets: true,
+            checkStructuredData: true,
+            checkSecurity: true,
+            checkDuplicates: true,
+            pageOverview: false,
+            disable: false,
+            throwOnError: true,
+        };
+        const integration = postAudit(options);
+        assert.equal(integration.name, 'astro-post-audit');
+    });
+    it('throws when both config and rules are set', () => {
+        const integration = postAudit({
+            config: '/path/to/rules.toml',
+            rules: { canonical: { require: true } },
+        });
+        // Simulate astro:build:done hook
+        const hook = integration.hooks['astro:build:done'];
+        assert.throws(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }), {
+            message: /mutually exclusive/,
+        });
+    });
+    it('does not throw when only config is set', () => {
+        const integration = postAudit({ config: '/path/to/rules.toml' });
+        const hook = integration.hooks['astro:build:done'];
+        // Should not throw (will just warn about missing binary)
+        assert.doesNotThrow(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }));
+    });
+    it('does not throw when only rules is set', () => {
+        const integration = postAudit({
+            rules: { canonical: { require: true } },
+        });
+        const hook = integration.hooks['astro:build:done'];
+        assert.doesNotThrow(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }));
+    });
+    it('skips execution when disabled', () => {
+        const integration = postAudit({ disable: true });
+        const hook = integration.hooks['astro:build:done'];
+        // Should return immediately without doing anything
+        assert.doesNotThrow(() => hook({
+            dir: new URL('file:///tmp/dist/'),
+            logger: {
+                info: () => { },
+                warn: () => { },
+                error: () => { },
+            },
+        }));
+    });
+});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@casoon/astro-post-audit",
-  "version": "0.1.3",
-  "description": "Fast post-build auditor for Astro sites: SEO, links, and lightweight WCAG checks",
+  "version": "0.2.1",
+  "description": "Astro integration for post-build auditing: SEO, links, and lightweight WCAG checks",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -17,6 +17,8 @@
   },
   "scripts": {
     "build": "tsc",
+    "test": "tsc && node --test dist/integration.test.js",
+    "prepublishOnly": "tsc",
     "postinstall": "node bin/install.cjs"
   },
   "files": [
@@ -51,16 +53,11 @@
     "arm64"
   ],
   "peerDependencies": {
-    "astro": "^5.0.0 || ^6.0.0-beta.0 || ^6.0.0"
-  },
-  "peerDependenciesMeta": {
-    "astro": {
-      "optional": true
-    }
+    "astro": "^5.0.0 || ^6.0.0-beta.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",
-    "astro": "^6.0.0-beta.15",
+    "astro": "^5.0.0",
     "typescript": "^5.9.3"
   }
 }