@designesy/score 0.6.0 → 0.7.1

package/README.md

@@ -1,6 +1,6 @@
 # @designesy/score
 
-Standalone 42-check design-contract scoring engine. Fetches a URL, extracts CSS + `:root` tokens, runs all checks locally, with **no server required**. Zero dependencies.
+Standalone 44-check design-contract scoring engine. Fetches a URL, extracts CSS + `:root` tokens, runs all checks locally, with **no server required**. No required dependencies.
 
 ## Install
 
@@ -54,14 +54,14 @@ console.log(result.fail);    // 3
 console.log(result.checks);  // [{ id: 'v01', status: 'PASS', detail: '...' }, ...]
 ```
 
-## The 42 checks
+## The 44 checks
 
 | Category | Checks | Weight |
 |---|---|---|
 | cadence | v14, v15, v16, v17, v18, v19, v20, v26, v28, x01, x02, x03 | 18 |
-| accessibility | v06, v22, v24, v25, v27, v35 | 15 |
+| accessibility | v06, v22, v24, v25, v27, v35, v44 | 15 |
 | semantic | v42, v43 | 12 |
-| motion | v05, v11, v12, v23 | 10 |
+| motion | v05, v11, v12, v23, v45 | 10 |
 | tokens | v01, v29 | 9 |
 | takt | v10, v13 | 8 |
 | copywriting | v38, v39, v40, v41 | 8 |
@@ -85,17 +85,19 @@ Plus 12 anti-slop deductions (S1 to S12) and 7 originality lifts (O1 to O7).
 
 ## Scope system
 
-- **contract** (default for designesy.org): All 42 checks active. Absence = WARN/FAIL.
+- **contract** (default for designesy.org): All 44 checks active. Absence = WARN/FAIL.
 - **universal** (default for external sites): Optional features SKIP on absence instead of penalizing.
 
 Auto-detect: `designesy.org` → contract, everything else → universal.
 
-## Zero dependencies
+## Dependencies
 
-Uses only Node.js built-ins:
+The engine uses only Node.js built-ins:
 - `node:https` for URL fetching (avoids the Windows libuv/undici crash)
 - `node:dns` for SSRF guard (DNS resolution validation)
-- No `ipaddr.js`, no `undici`, no `fetch()`, no external packages
+- No `ipaddr.js`, no `undici`, no `fetch()`
+
+One optional dependency: Google's [`@google/design.md`](https://github.com/google-labs-code/design.md) linter (Apache-2.0), the version the hosted engine runs. v37 uses it to lint a site's `/DESIGN.md`. npm installs it by default, `npx` included. Installed without it (`npm install --omit=optional`), v37 reports MANUAL (not run, weight 0) for a site that serves a DESIGN.md, and every other check is unchanged.
 
 ## SSRF guard
 

package/dist/cli.d.ts

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 /**
- * @designesy/score CLI — Score a URL against the 42-check Designesy engine.
+ * @designesy/score CLI — Score a URL against the 44-check Designesy engine.
  *
- * Runs the full 42-check scoring engine locally — no server required.
+ * Runs the full 44-check scoring engine locally — no server required.
  * Fetches the target URL, extracts CSS + :root tokens, runs all checks,
  * and prints a formatted report. Exits with code 1 when the score drops
  * below --min-score or the grade drops below --min-grade.

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 /**
- * @designesy/score CLI — Score a URL against the 42-check Designesy engine.
+ * @designesy/score CLI — Score a URL against the 44-check Designesy engine.
  *
- * Runs the full 42-check scoring engine locally — no server required.
+ * Runs the full 44-check scoring engine locally — no server required.
  * Fetches the target URL, extracts CSS + :root tokens, runs all checks,
  * and prints a formatted report. Exits with code 1 when the score drops
  * below --min-score or the grade drops below --min-grade.
@@ -98,10 +98,10 @@ function formatReport(result, url) {
 }
 function printUsage() {
     console.log(`
-designesy-score: Score a URL against the 42-check Designesy engine.
+designesy-score: Score a URL against the 44-check Designesy engine.
 
 Runs locally: no server required. Fetches the URL, extracts CSS + tokens,
-and runs all 42 checks in one process.
+and runs all 44 checks in one process.
 
 Usage:
   designesy-score <url> [options]
@@ -192,7 +192,7 @@ async function main() {
     // Progress and the gate verdict go to stderr: stdout carries only the
     // result, so --json and the JSON formats pipe straight into a parser.
     if (!args.quiet) {
-        console.error(`${DIM}Scoring ${url} locally (42-check engine, scope=${scope || 'auto'})…${RESET}`);
+        console.error(`${DIM}Scoring ${url} locally (44-check engine, scope=${scope || 'auto'})…${RESET}`);
     }
     let result;
     try {

package/dist/engine.d.ts

@@ -1,13 +1,14 @@
 /**
- * @designesy/score — 42-check design-contract scoring engine.
+ * @designesy/score — 44-check design-contract scoring engine.
  *
  * Scores a URL against the Designesy design-system contract: fetches the page,
- * extracts CSS + :root tokens, runs 40 deterministic checks, computes a weighted
- * score (0-100), assigns a letter grade (A-F), and applies anti-slop deductions
- * + originality lifts.
+ * extracts CSS + :root tokens, runs 44 checks (41 scored, 3 that need a
+ * browser), computes a weighted score (0-100), assigns a letter grade (A-F),
+ * and applies anti-slop deductions + originality lifts.
  *
- * Zero dependencies. Uses node:https (not fetch/undici) to avoid the Windows
- * libuv crash during process exit.
+ * No required dependencies. Uses node:https (not fetch/undici) to avoid the
+ * Windows libuv crash during process exit. One optional dependency,
+ * @google/design.md, lints /DESIGN.md for v37; without it v37 is MANUAL.
  *
  * Extracted from apps/site/app/api/score/route.ts — same engine, same checks,
  * same scoring math. The API route wraps this module; the CLI calls it directly.
@@ -26,6 +27,13 @@ export type CheckResult = {
     detail: string;
     weight?: number;
     remediation?: string;
+    /** Structured findings (v44, v45), capped at 20 with the rest counted in `truncated`. */
+    evidence?: CheckEvidence;
+};
+/** Structured findings a check attaches (v44, v45), capped at 20 with the rest counted. */
+export type CheckEvidence = {
+    findings: Array<Record<string, string | number | null>>;
+    truncated: number;
 };
 export type ScoreResult = {
     /**
@@ -147,9 +155,11 @@ export declare function scoreFromParts(input: ScorePartsInput): Promise<ScoreRes
 /**
  * The contract revision these checks implement, reported by every emission.
  * The site derives its copy from the contract source; this standalone engine
- * pins it here, once, and each release moves it.
+ * pins it here, once, and each release moves it. 0.6.0 shipped v0.4.1 while
+ * the site served v0.4.3; test/engine-1-2-0.test.mjs now reads the site's
+ * contract source and fails when the two differ.
  */
-export declare const CONTRACT_VERSION = "v0.4.1";
+export declare const CONTRACT_VERSION = "v0.4.3";
 /**
  * The one verdict rule, shared by every emission format.
  *