@domandigital/craft 0.12.0 → 0.13.0

package/dist/audit.cjs

@@ -20,6 +20,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/audit/index.ts
 var audit_exports = {};
 __export(audit_exports, {
+  PROVENANCE_BUDGET_MS: () => PROVENANCE_BUDGET_MS,
+  PROVENANCE_MAX_IMAGES: () => PROVENANCE_MAX_IMAGES,
   VISUAL_MAX_HEIGHT: () => VISUAL_MAX_HEIGHT,
   audit: () => audit,
   collectInPage: () => collectInPage,
@@ -1033,14 +1035,14 @@ function contractionHits(ctx) {
   for (const doc2 of documents(ctx)) {
     if (doc2.words < 800) continue;
     const text = doc2.blocks.map((b) => withoutHeadings(b.text)).join("\n");
-    const count2 = (text.match(CONTRACTION) ?? []).length;
-    const rate = count2 * 1e3 / doc2.words;
+    const count3 = (text.match(CONTRACTION) ?? []).length;
+    const rate = count3 * 1e3 / doc2.words;
     if (rate < 1) {
       const first = sentences(doc2)[0];
       hits.push({
         path: doc2.path,
         offset: first?.offset ?? 0,
-        message: `${count2} contraction${count2 === 1 ? "" : "s"} in ${thousands(doc2.words)} words. Prose with none reads stiff; formal legal pages are the exception`
+        message: `${count3} contraction${count3 === 1 ? "" : "s"} in ${thousands(doc2.words)} words. Prose with none reads stiff; formal legal pages are the exception`
       });
     }
   }
@@ -1163,16 +1165,16 @@ function filler(words, seed = 1, options = {}) {
     return state % n;
   };
   const out = [];
-  let count2 = 0;
+  let count3 = 0;
   let i = 0;
-  while (count2 < words) {
+  while (count3 < words) {
     const length = uniform ?? shape[i % shape.length];
     const s = [];
     for (let w = 0; w < length; w += 1) s.push(FILLER_WORDS[next(FILLER_WORDS.length)]);
     if (contractions && i % 6 === 2) s.splice(1, 0, "we're");
     s[0] = s[0].charAt(0).toUpperCase() + s[0].slice(1);
     out.push(`${s.join(" ")}.`);
-    count2 += s.length;
+    count3 += s.length;
     i += 1;
   }
   const paragraphs = [];
@@ -2753,11 +2755,433 @@ var RENDERED_PATHS = {
   }
 };
 
+// src/fingerprint/index.ts
+var FINGERPRINT_VERSION = 2;
+var CHROMATIC = 0.03;
+var MIN_ACCENT_AREA = 2e4;
+var oklch = (value) => {
+  const parsed = parseColour(value);
+  return parsed && parsed.alpha > 0.5 ? parsed.oklch : null;
+};
+function accentOf(s) {
+  const buttons = /* @__PURE__ */ new Map();
+  for (const c of s.controls) {
+    const o = oklch(c.background);
+    if (o && o.c >= CHROMATIC) buttons.set(c.background, (buttons.get(c.background) ?? 0) + 1);
+  }
+  const topButton = [...buttons].sort((a, b) => b[1] - a[1])[0];
+  if (topButton) return oklch(topButton[0]);
+  const bg = s.colours.backgrounds.map((b) => ({ o: oklch(b.value), w: b.area })).filter((x) => x.o && x.o.c >= CHROMATIC && x.w >= MIN_ACCENT_AREA).sort((a, b) => b.w - a.w)[0];
+  if (bg) return bg.o;
+  const text = s.colours.text.map((t) => ({ o: oklch(t.value), w: t.chars })).filter((x) => x.o && x.o.c >= CHROMATIC).sort((a, b) => b.w - a.w)[0];
+  return text ? text.o : null;
+}
+function faces(s) {
+  const byChars = [...s.fonts].sort((a, b) => b.chars - a.chars);
+  const byDisplay = [...s.fonts].sort((a, b) => b.displayChars - a.displayChars);
+  const bodyName = normaliseFamily(byChars[0]?.family ?? "system-ui");
+  const displayName = normaliseFamily((byDisplay[0]?.displayChars ? byDisplay[0].family : byChars[0]?.family) ?? "system-ui");
+  return {
+    display: { family: displayName, class: fontClass(displayName) },
+    body: { family: bodyName, class: fontClass(bodyName) }
+  };
+}
+function median(values) {
+  if (values.length === 0) return null;
+  const sorted = [...values].sort((a, b) => a - b);
+  const mid = Math.floor(sorted.length / 2);
+  return sorted.length % 2 ? sorted[mid] : (sorted[mid - 1] + sorted[mid]) / 2;
+}
+function fingerprint(s) {
+  const effects = [];
+  if (s.effects.glass > 0) effects.push("glass-panel");
+  if (s.effects.gradientText > 0) effects.push("gradient-text");
+  if (s.effects.glows > 0 || s.effects.gradients.some((g) => g.radial)) effects.push("radial-spotlight-glow");
+  if (s.effects.gridBackgrounds > 0) effects.push("grid-background");
+  if (s.effects.marquees > 0) effects.push("marquee");
+  if (s.effects.hairlineShadowCards >= 3) effects.push("thin-border-wide-shadow");
+  if (s.effects.eyebrowChip) effects.push("hero-eyebrow-chip");
+  if (s.motion.introOverlay) effects.push("intro-cinematic");
+  const below = s.sections.filter((x) => x.top > s.viewport.height).length;
+  return {
+    version: FINGERPRINT_VERSION,
+    accent: accentOf(s),
+    ground: oklch(s.ground) ?? { l: 1, c: 0, h: 0 },
+    ...faces(s),
+    roundness: median(s.controls.map((c) => Math.min(0.5, c.radiusPx / Math.max(1, c.heightPx)))),
+    motion: below ? Math.min(1, s.motion.hiddenSections / below) : 0,
+    effects: effects.sort(),
+    layout: s.sections.map((x) => x.kind),
+    ...s.sections.length > 0 && s.sections.every((x) => x.role && x.geometry) ? {
+      sections: s.sections.map((x) => ({
+        role: x.role,
+        centred: x.geometry.centredShare,
+        width: x.geometry.contentWidthRatio,
+        symmetry: x.geometry.mirrorSymmetry,
+        controls: x.geometry.controls,
+        cards: x.cards,
+        background: x.geometry.background === s.ground ? null : oklch(x.geometry.background),
+        badges: (x.badges ?? []).map((b) => b.toLowerCase()),
+        avatars: x.avatars ?? 0,
+        carousel: x.carousel ?? false,
+        figures: x.figures ?? 0
+      }))
+    } : {}
+  };
+}
+
+// src/fingerprint/component.ts
+var PROMO_BADGE = /\b(?:most popular|popular|recommended|best value|best seller|bestseller|most chosen)\b/i;
+
+// src/snapshot/rendered-tells.ts
+var hit2 = (s, message, excerpt) => ({ path: s.url, offset: 0, message, excerpt: excerpt ?? message });
+var GROUND = "rgb(255, 255, 255)";
+var BAND = "rgb(31, 58, 46)";
+var geo = (patch = {}) => ({
+  centredShare: 0.1,
+  mirrorSymmetry: 0.6,
+  whitespaceRatio: 0.7,
+  contentWidthRatio: 0.85,
+  background: GROUND,
+  controls: 0,
+  ...patch
+});
+function withSection(index, patch, roles = []) {
+  const base = makeSnapshot();
+  return {
+    ...base,
+    sections: base.sections.map((s, i) => ({ ...s, role: roles[i] ?? s.kind, geometry: geo(), badges: [], avatars: 0, carousel: false, figures: 0, ...i === index ? patch : {} }))
+  };
+}
+var measured = (s) => s.geometry !== void 0 && s.role !== void 0;
+var RENDERED_TELLS = [
+  {
+    id: "cta-band-stock",
+    name: "Stock call-to-action band",
+    generation: 1,
+    severity: "warn",
+    surface: "rendered",
+    why: "A full-width coloured band with a centred heading, one line and one or two buttons is what a model closes every section run with. It asks for the booking the same way on every site.",
+    fix: "Keep the ask, change the band: put it where the decision is made (next to the prices, after the proof), in the client's own words, laid out like the rest of the page rather than as a centred slab.",
+    rendered: {
+      detect: (s) => s.sections.filter((x) => measured(x) && (x.role === "cta-band" || x.role === "footer-cta")).filter((x) => {
+        const g = x.geometry;
+        return g.centredShare >= 0.8 && g.background !== s.ground && g.controls >= 1 && g.controls <= 2 && g.contentWidthRatio <= 0.7;
+      }).map((x) => hit2(s, `a centred ${x.role === "footer-cta" ? "closing " : ""}band on its own colour with ${x.geometry.controls === 1 ? "one button" : "two buttons"}`, x.label)),
+      fixtures: {
+        flag: [
+          withSection(4, { role: "footer-cta", label: "Boiler out today?", geometry: geo({ centredShare: 1, background: BAND, controls: 1, contentWidthRatio: 0.45 }) }),
+          withSection(3, { role: "cta-band", label: "Ready to book?", geometry: geo({ centredShare: 0.9, background: BAND, controls: 2, contentWidthRatio: 0.5 }) })
+        ],
+        pass: [
+          makeSnapshot(),
+          // The same ask, laid out like the page: left-aligned on the ground.
+          withSection(4, { role: "footer-cta", label: "Book a visit", geometry: geo({ centredShare: 0.1, background: GROUND, controls: 1, contentWidthRatio: 0.85 }) })
+        ]
+      }
+    }
+  },
+  {
+    id: "pricing-trio-popular",
+    name: "Three-tier pricing with a popular badge",
+    generation: 1,
+    severity: "warn",
+    surface: "rendered",
+    why: "Three price cards with the middle one badged 'Most popular' is the SaaS pricing page, applied to a plumber or a salon whether or not anyone chose the middle option.",
+    fix: "Keep the prices. Show them the way the trade quotes (a price list, per job, per visit), and drop the badge unless it is true and the client can say how many people chose it.",
+    rendered: {
+      detect: (s) => s.sections.filter((x) => measured(x) && x.role === "pricing" && x.cards === 3).filter((x) => (x.badges ?? []).some((b) => PROMO_BADGE.test(b))).map((x) => hit2(s, `three price cards, one badged "${(x.badges ?? []).find((b) => PROMO_BADGE.test(b))}"`, x.label)),
+      fixtures: {
+        flag: [withSection(3, { role: "pricing", kind: "cards", cards: 3, badges: ["Most popular"], label: "Plans" })],
+        pass: [
+          makeSnapshot(),
+          withSection(3, { role: "pricing", kind: "cards", cards: 3, badges: [], label: "Prices" }),
+          withSection(3, { role: "pricing", kind: "text", cards: 0, badges: [], label: "Price list" })
+        ]
+      }
+    }
+  },
+  {
+    id: "testimonial-avatar-carousel",
+    name: "Avatar testimonial carousel",
+    generation: 1,
+    severity: "warn",
+    surface: "rendered",
+    why: "Round headshots over quotes in a sliding carousel is the stock testimonial block. Most visitors see the first slide only, and stock or AI faces make every quote read as invented.",
+    fix: "Show the reviews all at once, where they come from (the Google rating, the named job, the town), with real photos of the work rather than of the reviewer.",
+    rendered: {
+      detect: (s) => s.sections.filter((x) => measured(x) && x.role === "testimonials" && x.carousel === true && (x.avatars ?? 0) >= 2).map((x) => hit2(s, `${x.avatars} round portraits in a sliding testimonial carousel`, x.label)),
+      fixtures: {
+        flag: [withSection(2, { role: "testimonials", avatars: 3, carousel: true, label: "What our clients say" })],
+        pass: [
+          makeSnapshot(),
+          withSection(2, { role: "testimonials", avatars: 3, carousel: false, label: "Reviews" }),
+          withSection(2, { role: "testimonials", avatars: 0, carousel: true, label: "Reviews" })
+        ]
+      }
+    }
+  },
+  {
+    id: "faq-accordion-closer",
+    name: "FAQ accordion as the closer",
+    generation: 2,
+    severity: "warn",
+    surface: "rendered",
+    why: "Ending the page on a collapsed FAQ, often followed only by a band, is the model's default page ending. The answers a buyer needs are hidden behind clicks at the point they decide.",
+    fix: "Answer the questions that block a booking where they arise (price next to prices, area next to the map), and end on the call to action or the proof.",
+    rendered: {
+      detect: (s) => {
+        const body = s.sections.filter((x) => x.role !== "footer-cta" && x.role !== "cta-band");
+        const last = body[body.length - 1];
+        return last && measured(last) && last.role === "faq" ? [hit2(s, "the page ends on a question-and-answer list", last.label)] : [];
+      },
+      fixtures: {
+        flag: [
+          withSection(4, { role: "faq", label: "Common questions" }),
+          {
+            ...withSection(3, { role: "faq", label: "FAQ" }),
+            sections: withSection(3, { role: "faq", label: "FAQ" }).sections.map((x, i) => i === 4 ? { ...x, role: "footer-cta" } : x)
+          }
+        ],
+        pass: [makeSnapshot(), withSection(2, { role: "faq", label: "Common questions" })]
+      }
+    }
+  },
+  {
+    id: "stats-row",
+    name: "Row of big numbers",
+    generation: 1,
+    severity: "warn",
+    surface: "rendered",
+    why: "Three or four large figures in a row (500+ clients, 98% satisfaction, 10 years) is the stock proof block, and the numbers are often round, unsourced or invented.",
+    fix: "Keep a figure only if it is true and sourced, and put it in a sentence next to what it proves. One real number in context beats four in a row.",
+    rendered: {
+      detect: (s) => s.sections.filter((x, i) => measured(x) && (x.role === "stats" || x.kind === "stats") && (x.figures ?? 0) >= 3 && (x.figures ?? 0) <= 6 && !(i === 1 && s.sections[0]?.kind === "hero")).map((x) => hit2(s, `${x.figures} large figures in a row`, x.label)),
+      fixtures: {
+        flag: [withSection(3, { role: "stats", kind: "stats", figures: 4, label: "500+" })],
+        pass: [
+          makeSnapshot(),
+          withSection(3, { role: "text", kind: "text", figures: 1, label: "Since 2009" }),
+          withSection(1, { role: "stats", kind: "stats", figures: 4, label: "500+" })
+        ]
+      }
+    }
+  },
+  {
+    id: "centred-everything",
+    name: "Every section centred",
+    generation: 2,
+    severity: "warn",
+    surface: "rendered",
+    why: "When almost every section stacks a centred heading over centred text, the page has no reading line and every block looks like the one before. It is the layout nothing was decided for.",
+    fix: "Pick an alignment and hold it: left-aligned text with a clear edge, keeping centring for the one moment that earns it.",
+    rendered: {
+      detect: (s) => {
+        const m = s.sections.filter(measured);
+        if (m.length < 4) return [];
+        const centred = m.filter((x) => x.geometry.centredShare >= 0.7).length;
+        return centred / m.length >= 0.8 ? [hit2(s, `${centred} of ${m.length} sections centre their text`)] : [];
+      },
+      fixtures: {
+        flag: [{ ...makeSnapshot(), sections: makeSnapshot().sections.map((x) => ({ ...x, role: x.kind, geometry: geo({ centredShare: 0.9 }) })) }],
+        pass: [
+          makeSnapshot(),
+          { ...makeSnapshot(), sections: makeSnapshot().sections.map((x, i) => ({ ...x, role: x.kind, geometry: geo({ centredShare: i < 2 ? 0.9 : 0.1 }) })) }
+        ]
+      }
+    }
+  }
+];
+
+// src/snapshot/imagery-tells.ts
+var hit3 = (s, message, excerpt) => ({ path: s.url, offset: 0, message, excerpt: excerpt ?? message });
+var STOCK_PHOTO_HOSTS = {
+  "unsplash.com": "Unsplash",
+  "pexels.com": "Pexels",
+  "pixabay.com": "Pixabay",
+  "istockphoto.com": "iStock",
+  "gettyimages.com": "Getty Images",
+  "shutterstock.com": "Shutterstock",
+  "ftcdn.net": "Adobe Stock",
+  "dreamstime.com": "Dreamstime",
+  "depositphotos.com": "Depositphotos",
+  "freepik.com": "Freepik",
+  "rawpixel.com": "rawpixel",
+  "stocksnap.io": "StockSnap",
+  "burst.shopifycdn.com": "Burst",
+  "picsum.photos": "Lorem Picsum",
+  "loremflickr.com": "LoremFlickr",
+  "placehold.co": "a placeholder service",
+  "placeholder.com": "a placeholder service",
+  "dummyimage.com": "a placeholder service"
+};
+var STOCK_AVATAR_HOSTS = {
+  "randomuser.me": "randomuser.me",
+  "pravatar.cc": "Pravatar",
+  "dicebear.com": "DiceBear",
+  "xsgames.co": "a random-face service",
+  "thispersondoesnotexist.com": "a generated face",
+  "generated.photos": "a generated face"
+};
+var STOCK_FILENAMES = [
+  [/(?:^|[/_-])shutterstock[_-]?\d{4,}/i, "Shutterstock"],
+  [/(?:^|[/_-])istock(?:photo)?[_-]?\d{4,}/i, "iStock"],
+  [/(?:^|[/_-])adobestock[_-]?\d{4,}/i, "Adobe Stock"],
+  [/(?:^|[/_-])gettyimages[_-]?\d{4,}/i, "Getty Images"],
+  [/(?:^|[/_-])depositphotos[_-]?\d{4,}/i, "Depositphotos"],
+  [/(?:^|[/_-])dreamstime[_-]/i, "Dreamstime"],
+  [/(?:^|[/_-])pexels-[a-z0-9-]*\d{4,}/i, "Pexels"],
+  [/-unsplash\.(?:jpe?g|png|webp|avif)(?:[?#]|$)/i, "Unsplash"],
+  // Unsplash's photo ids: photo-<13-digit timestamp>-<12 hex>.
+  [/photo-1\d{12}-[0-9a-f]{12}/, "Unsplash"]
+];
+var byHost = (host, table) => {
+  if (!host) return null;
+  const h = host.toLowerCase();
+  for (const [domain, name] of Object.entries(table)) if (h === domain || h.endsWith(`.${domain}`)) return name;
+  return null;
+};
+function stockSource(image) {
+  const host = byHost(image.host, STOCK_PHOTO_HOSTS);
+  if (host) return host;
+  let path = image.src.replace(/^[a-z][a-z0-9+.-]*:\/\/[^/?#]*/i, "").replace(/[?#].*$/, "");
+  try {
+    path = decodeURIComponent(path);
+  } catch {
+  }
+  for (const [re, name] of STOCK_FILENAMES) if (re.test(path)) return name;
+  return null;
+}
+function stockAvatarSource(image) {
+  return byHost(image.host, STOCK_AVATAR_HOSTS) ?? stockSource(image);
+}
+var picture = (patch = {}) => ({
+  src: "https://example.test/images/boiler-swap-hinton.jpg",
+  host: "example.test",
+  width: 640,
+  height: 480,
+  top: 1800,
+  role: "photo",
+  alt: "The new combi boiler fitted in a kitchen cupboard in Hinton",
+  decorative: false,
+  section: 2,
+  background: false,
+  ...patch
+});
+var withImages = (images) => ({ ...makeSnapshot(), images });
+var AI_XMP = { digitalSourceType: "trainedAlgorithmicMedia", source: "xmp", c2pa: false, bytes: 48e3 };
+var NOTHING = { digitalSourceType: null, source: null, c2pa: false, bytes: 48e3 };
+var count2 = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+var IMAGERY_TELLS = [
+  {
+    id: "stock-photo",
+    name: "Stock photography",
+    generation: 1,
+    severity: "warn",
+    surface: "rendered",
+    why: "A picture from a stock library is the picture every other site in the trade can use. It shows a job the client did not do, in a kitchen that is not theirs, and a visitor who has seen it before stops believing the rest.",
+    fix: "Use a photo of the client's own work, premises or people, even a plain one taken on a phone. Where there is none yet, use fewer pictures rather than a library one.",
+    rendered: {
+      detect: (s) => {
+        const found = (s.images ?? []).filter((i) => i.role === "photo" || i.role === "illustration").map((i) => ({ image: i, from: stockSource(i) })).filter((x) => x.from);
+        if (found.length === 0) return [];
+        const names = [...new Set(found.map((x) => x.from))].join(", ");
+        return [hit3(s, `${count2(found.length, "picture")} from ${names}`, found[0].image.src)];
+      },
+      fixtures: {
+        flag: [
+          withImages([picture({ src: "https://images.unsplash.com/photo-1581578731548-c64695cc6952?w=1600", host: "images.unsplash.com", alt: "Plumber fixing a sink" })]),
+          // Downloaded and self-hosted, found by the library's own file name.
+          withImages([picture({ src: "https://example.test/img/shutterstock_1234567890.jpg" })])
+        ],
+        pass: [makeSnapshot(), withImages([picture()]), withImages([picture({ role: "icon", width: 48, height: 48, src: "https://images.unsplash.com/photo-1581578731548-c64695cc6952", host: "images.unsplash.com" })])]
+      }
+    }
+  },
+  {
+    id: "stock-avatar",
+    name: "Stock or placeholder faces",
+    generation: 1,
+    severity: "warn",
+    surface: "rendered",
+    why: "Round portraits from a placeholder-face service or a stock library next to reviews make every quote read as invented, and some of those faces are generated people who do not exist.",
+    fix: "Drop the portraits. Name the reviewer, the town and the job, and link the review to where it was left.",
+    rendered: {
+      detect: (s) => {
+        const found = (s.images ?? []).filter((i) => i.role === "avatar").map((i) => ({ image: i, from: stockAvatarSource(i) })).filter((x) => x.from);
+        if (found.length === 0) return [];
+        const names = [...new Set(found.map((x) => x.from))].join(", ");
+        return [hit3(s, `${count2(found.length, "portrait")} from ${names}`, found[0].image.src)];
+      },
+      fixtures: {
+        flag: [
+          withImages([picture(), picture({ role: "avatar", width: 56, height: 56, src: "https://i.pravatar.cc/150?img=12", host: "i.pravatar.cc", alt: "Sarah" })]),
+          withImages([picture({ role: "avatar", width: 64, height: 64, src: "https://images.unsplash.com/photo-1494790108377-be9c29b29330?crop=faces", host: "images.unsplash.com" })])
+        ],
+        pass: [makeSnapshot(), withImages([picture(), picture({ role: "avatar", width: 56, height: 56, src: "https://example.test/team/sam.jpg", alt: "Sam, engineer" })])]
+      }
+    }
+  },
+  {
+    id: "ai-image",
+    name: "Generated image",
+    generation: 2,
+    severity: "warn",
+    surface: "rendered",
+    why: "The file itself says a model made it (its XMP or Content Credentials name a trained-model source). A generated picture stands in for work the client did not photograph, and anyone can read the label.",
+    fix: "Replace it with a photo of the real thing: the work, the premises, the people. Where there is none yet, use fewer pictures.",
+    rendered: {
+      detect: (s) => {
+        const found = (s.images ?? []).filter((i) => i.provenance?.digitalSourceType);
+        if (found.length === 0) return [];
+        const first = found[0].provenance;
+        const where = first.source === "xmp" ? "its XMP metadata" : first.source === "c2pa" ? "its Content Credentials" : "its metadata";
+        return [hit3(s, `${count2(found.length, "image")} labelled as made by a generative model (${first.digitalSourceType} in ${where})`, found[0].src)];
+      },
+      fixtures: {
+        flag: [
+          withImages([picture({ provenance: AI_XMP })]),
+          withImages([picture({ provenance: { digitalSourceType: "compositeWithTrainedAlgorithmicMedia", source: "c2pa", c2pa: true, bytes: 12e4 } })])
+        ],
+        // Credentials that say nothing about a model, and an image never read, are not findings.
+        pass: [makeSnapshot(), withImages([picture({ provenance: NOTHING })]), withImages([picture({ provenance: { ...NOTHING, c2pa: true } })]), withImages([picture()])]
+      }
+    }
+  },
+  {
+    id: "no-real-imagery",
+    name: "No photograph on the page",
+    generation: 1,
+    severity: "warn",
+    surface: "rendered",
+    why: "A page with no photograph at all, only icons and illustrations, is the page a model builds when it has no assets. Icon tiles stand in for the evidence a buyer looks for: the work, the premises, the people.",
+    fix: "Add one real photo of the work where the claim is made: a finished job next to the service, the team next to the booking. One plain photo beats any number of icons.",
+    rendered: {
+      detect: (s) => {
+        if (!s.images || s.sections.length < 4) return [];
+        if (s.images.some((i) => i.role === "photo")) return [];
+        const icons = s.images.filter((i) => i.role === "icon" || i.role === "illustration").length;
+        return [hit3(s, `no photograph on the page${icons ? `: ${count2(icons, "icon or illustration", "icons and illustrations")} instead` : ""}`)];
+      },
+      fixtures: {
+        flag: [
+          withImages([picture({ role: "icon", width: 48, height: 48, src: "https://example.test/icons/wrench.svg" }), picture({ role: "illustration", width: 480, height: 360, src: "https://example.test/hero.svg" })]),
+          withImages([])
+        ],
+        // A snapshot with no image record is never judged; nor is a page too short to be a site.
+        pass: [makeSnapshot(), withImages([picture()]), { ...withImages([]), sections: makeSnapshot().sections.slice(0, 3) }]
+      }
+    }
+  }
+];
+
 // src/character/check.ts
-var CATALOGUE_VERSION = "2026.09.9";
-var CATALOGUE = [...SOURCE_TELLS, ...COPY_TELLS, ...RESEARCH_TELLS, ...DENSITY_TELLS].map(
-  (t) => RENDERED_PATHS[t.id] ? { ...t, rendered: RENDERED_PATHS[t.id] } : t
-);
+var CATALOGUE_VERSION = "2026.09.11";
+var CATALOGUE = [
+  ...[...SOURCE_TELLS, ...COPY_TELLS, ...RESEARCH_TELLS, ...DENSITY_TELLS].map((t) => RENDERED_PATHS[t.id] ? { ...t, rendered: RENDERED_PATHS[t.id] } : t),
+  ...RENDERED_TELLS,
+  ...IMAGERY_TELLS
+];
 function tellById(id) {
   return CATALOGUE.find((t) => t.id === id);
 }
@@ -2779,17 +3203,17 @@ var MARKER = /\b(?:copy|craft)-ok\b/;
 function marked(lines, line) {
   return MARKER.test(lines[line - 1] ?? "") || MARKER.test(lines[line - 2] ?? "");
 }
-function toFinding(tell, hit2, texts) {
-  const text = texts.get(hit2.path) ?? "";
+function toFinding(tell, hit4, texts) {
+  const text = texts.get(hit4.path) ?? "";
   return {
     tell: tell.id,
     name: tell.name,
     generation: tell.generation,
     severity: tell.severity,
-    path: hit2.path,
-    line: texts.has(hit2.path) ? lineAt(text, hit2.offset) : 0,
-    excerpt: hit2.excerpt ?? excerptAt(text, hit2.offset),
-    message: hit2.message,
+    path: hit4.path,
+    line: texts.has(hit4.path) ? lineAt(text, hit4.offset) : 0,
+    excerpt: hit4.excerpt ?? excerptAt(text, hit4.offset),
+    message: hit4.message,
     fix: tell.fix,
     ...tell.surface === "copy" ? { house: houseRule(tell.id, tell.name).tier } : {}
   };
@@ -2808,14 +3232,14 @@ function report(tells, files, run, options) {
   };
   const excepted = /* @__PURE__ */ new Map();
   for (const tell of selected) {
-    for (const hit2 of run(tell)) {
-      const exception = applied.find((e) => e.tell === tell.id && (!e.path || hit2.path.includes(e.path)));
+    for (const hit4 of run(tell)) {
+      const exception = applied.find((e) => e.tell === tell.id && (!e.path || hit4.path.includes(e.path)));
       if (exception) {
         excepted.set(exception, (excepted.get(exception) ?? 0) + 1);
         continue;
       }
-      const finding = toFinding(tell, hit2, texts);
-      if (marked(linesOf(hit2.path), finding.line)) {
+      const finding = toFinding(tell, hit4, texts);
+      if (marked(linesOf(hit4.path), finding.line)) {
         suppressed.push({ tell: tell.id, path: finding.path, line: finding.line });
         continue;
       }
@@ -2833,7 +3257,7 @@ function report(tells, files, run, options) {
     catalogueVersion: CATALOGUE_VERSION,
     findings,
     rejectedExceptions: rejected,
-    excepted: [...excepted].map(([e, count2]) => ({ tell: e.tell, because: e.because, count: count2 })),
+    excepted: [...excepted].map(([e, count3]) => ({ tell: e.tell, because: e.because, count: count3 })),
     suppressed,
     summary: {
       files: files.length,
@@ -2851,67 +3275,6 @@ function auditSnapshot(snapshot, options = {}) {
   return result;
 }
 
-// src/fingerprint/index.ts
-var FINGERPRINT_VERSION = 2;
-var CHROMATIC = 0.03;
-var MIN_ACCENT_AREA = 2e4;
-var oklch = (value) => {
-  const parsed = parseColour(value);
-  return parsed && parsed.alpha > 0.5 ? parsed.oklch : null;
-};
-function accentOf(s) {
-  const buttons = /* @__PURE__ */ new Map();
-  for (const c of s.controls) {
-    const o = oklch(c.background);
-    if (o && o.c >= CHROMATIC) buttons.set(c.background, (buttons.get(c.background) ?? 0) + 1);
-  }
-  const topButton = [...buttons].sort((a, b) => b[1] - a[1])[0];
-  if (topButton) return oklch(topButton[0]);
-  const bg = s.colours.backgrounds.map((b) => ({ o: oklch(b.value), w: b.area })).filter((x) => x.o && x.o.c >= CHROMATIC && x.w >= MIN_ACCENT_AREA).sort((a, b) => b.w - a.w)[0];
-  if (bg) return bg.o;
-  const text = s.colours.text.map((t) => ({ o: oklch(t.value), w: t.chars })).filter((x) => x.o && x.o.c >= CHROMATIC).sort((a, b) => b.w - a.w)[0];
-  return text ? text.o : null;
-}
-function faces(s) {
-  const byChars = [...s.fonts].sort((a, b) => b.chars - a.chars);
-  const byDisplay = [...s.fonts].sort((a, b) => b.displayChars - a.displayChars);
-  const bodyName = normaliseFamily(byChars[0]?.family ?? "system-ui");
-  const displayName = normaliseFamily((byDisplay[0]?.displayChars ? byDisplay[0].family : byChars[0]?.family) ?? "system-ui");
-  return {
-    display: { family: displayName, class: fontClass(displayName) },
-    body: { family: bodyName, class: fontClass(bodyName) }
-  };
-}
-function median(values) {
-  if (values.length === 0) return null;
-  const sorted = [...values].sort((a, b) => a - b);
-  const mid = Math.floor(sorted.length / 2);
-  return sorted.length % 2 ? sorted[mid] : (sorted[mid - 1] + sorted[mid]) / 2;
-}
-function fingerprint(s) {
-  const effects = [];
-  if (s.effects.glass > 0) effects.push("glass-panel");
-  if (s.effects.gradientText > 0) effects.push("gradient-text");
-  if (s.effects.glows > 0 || s.effects.gradients.some((g) => g.radial)) effects.push("radial-spotlight-glow");
-  if (s.effects.gridBackgrounds > 0) effects.push("grid-background");
-  if (s.effects.marquees > 0) effects.push("marquee");
-  if (s.effects.hairlineShadowCards >= 3) effects.push("thin-border-wide-shadow");
-  if (s.effects.eyebrowChip) effects.push("hero-eyebrow-chip");
-  if (s.motion.introOverlay) effects.push("intro-cinematic");
-  const below = s.sections.filter((x) => x.top > s.viewport.height).length;
-  return {
-    version: FINGERPRINT_VERSION,
-    accent: accentOf(s),
-    ground: oklch(s.ground) ?? { l: 1, c: 0, h: 0 },
-    ...faces(s),
-    roundness: median(s.controls.map((c) => Math.min(0.5, c.radiusPx / Math.max(1, c.heightPx)))),
-    motion: below ? Math.min(1, s.motion.hiddenSections / below) : 0,
-    effects: effects.sort(),
-    layout: s.sections.map((x) => x.kind),
-    ...s.sections.length > 0 && s.sections.every((x) => x.role && x.geometry) ? { sections: s.sections.map((x) => ({ role: x.role, centred: x.geometry.centredShare, width: x.geometry.contentWidthRatio })) } : {}
-  };
-}
-
 // src/audit/collect.ts
 function collectInPage() {
   const vw = window.innerWidth;
@@ -3151,7 +3514,7 @@ function collectInPage() {
     };
   };
   const CURRENCY = /[£$€]\s?\d/;
-  const roleOf = (el, kind, geo, b, cards, iconCards, last) => {
+  const roleOf = (el, kind, geo2, b, cards, iconCards, last) => {
     if (kind === "marquee" || kind === "hero") return kind;
     const heading = (el.querySelector("h1, h2, h3")?.textContent ?? "").toLowerCase();
     const leaves = Array.from(el.querySelectorAll("*")).slice(0, 1500);
@@ -3175,27 +3538,55 @@ function collectInPage() {
     if (portraits >= 3 && /team|people|meet|who we are/.test(heading)) return "team";
     if (kind === "stats" || kind === "logos") return kind;
     const words = (el.textContent ?? "").replace(/\s+/g, " ").trim().length;
-    const setApart = geo.background !== ground || geo.centredShare >= 0.6;
-    if (setApart && heading && b.height <= vh * 0.9 && geo.controls >= 1 && geo.controls <= 2 && words < 400 && cards < 3) return last ? "footer-cta" : "cta-band";
+    const setApart = geo2.background !== ground || geo2.centredShare >= 0.6;
+    if (setApart && heading && b.height <= vh * 0.9 && geo2.controls >= 1 && geo2.controls <= 2 && words < 400 && cards < 3) return last ? "footer-cta" : "cta-band";
     if (cards >= 3 && iconCards >= 2) return "features";
     return kind;
   };
+  const partsOf = (el) => {
+    const inside = Array.from(el.querySelectorAll("*")).slice(0, 1500).filter(shown);
+    const badges = [];
+    for (const n of inside) {
+      const t = ownText(n);
+      if (t.length < 2 || t.length > 24 || badges.length >= 5) continue;
+      const cs = style(n);
+      const r = box(n);
+      const radius = px(cs.borderTopLeftRadius);
+      const drawn = painted(cs.backgroundColor) || px(cs.borderTopWidth) >= 1;
+      if (drawn && r.height <= 40 && r.width <= 240 && radius >= r.height / 3 && !isControl(n)) badges.push(t);
+    }
+    const avatars = inside.filter((n) => {
+      if (n.tagName !== "IMG") return false;
+      const r = box(n);
+      const rad = style(n).borderTopLeftRadius;
+      const round = rad.endsWith("%") ? parseFloat(rad) >= 40 : px(rad) >= r.width * 0.4;
+      return r.width <= 96 && r.width >= 16 && Math.abs(r.width - r.height) <= r.width * 0.15 && round;
+    }).length;
+    const carousel = inside.some((n) => {
+      const cs = style(n);
+      if (n.getAttribute("aria-roledescription") === "carousel" || cs.scrollSnapType && cs.scrollSnapType !== "none") return true;
+      if (/^(auto|scroll|hidden)$/.test(cs.overflowX) && n.children.length >= 3 && n.scrollWidth > n.clientWidth * 1.2) return true;
+      return /^(BUTTON|A)$/.test(n.tagName) && /\b(prev|previous|next)\b/i.test(n.getAttribute("aria-label") ?? "");
+    });
+    return { badges, avatars, carousel };
+  };
   const kept = blocks.slice(0, 40);
   const sections = kept.map((el, index) => {
     const b = box(el);
     const heading = el.querySelector("h1, h2, h3");
     const label = (heading?.textContent ?? el.textContent ?? "").replace(/\s+/g, " ").trim().slice(0, 60);
-    const images = Array.from(el.querySelectorAll("img, svg")).filter((i) => shown(i) && box(i).height <= 90);
+    const images2 = Array.from(el.querySelectorAll("img, svg")).filter((i) => shown(i) && box(i).height <= 90);
     const textChars = (el.textContent ?? "").replace(/\s+/g, "").length;
     const numbers = Array.from(el.querySelectorAll("*")).filter((n) => /^[£$€]?\d[\d,.]*\s?(?:[%+kKmM★]|\/5|\+)?$/.test(ownText(n)) && px(style(n).fontSize) >= 24).length;
     const { cards, iconCards } = cardsIn(el);
     let kind = "text";
     if (marqueeTargets.some((t) => el.contains(t))) kind = "marquee";
     else if (h1 && el.contains(h1) || index === 0 && b.top < vh) kind = "hero";
-    else if (images.length >= 4 && textChars < 300) kind = "logos";
+    else if (images2.length >= 4 && textChars < 300) kind = "logos";
     else if (numbers >= 3 && textChars < 600) kind = "stats";
     else if (cards >= 3) kind = "cards";
     const geometry = geometryOf(el, b);
+    const parts2 = partsOf(el);
     return {
       top: Math.round(b.top),
       height: Math.round(b.height),
@@ -3205,7 +3596,9 @@ function collectInPage() {
       iconCards,
       hiddenAtLoad: b.top > vh && hiddenAtLoad(el),
       role: roleOf(el, kind, geometry, b, cards, iconCards, index === kept.length - 1),
-      geometry
+      geometry,
+      ...parts2,
+      figures: numbers
     };
   });
   if (header && sections.length === 0) {
@@ -3287,6 +3680,81 @@ function collectInPage() {
     const width = para.getBoundingClientRect().width - px(cs.paddingLeft) - px(cs.paddingRight);
     if (avg > 0 && width > 0) bodyLineLengthCh = Math.round(width / avg);
   }
+  const unwrap = (raw) => {
+    if (raw.startsWith("data:")) return raw.slice(0, 64);
+    try {
+      const u = new URL(raw, location.href);
+      const inner = /\/_(?:next|vercel)\/image$/.test(u.pathname) ? u.searchParams.get("url") : null;
+      if (inner) return new URL(inner, location.href).href;
+      const cf = u.pathname.match(/^\/cdn-cgi\/image\/[^/]+\/(.+)$/);
+      if (cf) return /^https?:\/\//.test(cf[1]) ? cf[1] : new URL(`/${cf[1]}`, location.href).href;
+      return u.href;
+    } catch {
+      return raw.slice(0, 200);
+    }
+  };
+  const roundBox = (el, w) => {
+    const rad = style(el).borderTopLeftRadius;
+    return rad.endsWith("%") ? parseFloat(rad) >= 40 : px(rad) >= w * 0.4;
+  };
+  const sectionOf = (el) => {
+    const i = kept.findIndex((k) => k.contains(el));
+    return i === -1 ? null : i;
+  };
+  const roleOfImage = (el, src, w, h, alt) => {
+    const vector = /\.svg(?:[?#]|$)/i.test(src) || src.startsWith("data:image/svg");
+    const square = Math.abs(w - h) <= w * 0.15;
+    if (w >= 16 && w <= 96 && square && (roundBox(el, w) || el.parentElement !== null && roundBox(el.parentElement, w))) return "avatar";
+    const section = sectionOf(el);
+    const hint = `${alt ?? ""} ${src} ${typeof el.className === "string" ? el.className : ""}`;
+    if (/\blogo\b/i.test(hint) || section !== null && sections[section]?.kind === "logos" || el.closest("header, footer, nav") && h <= 120) return "logo";
+    if (Math.max(w, h) <= (vector ? 120 : 72)) return "icon";
+    if (vector) return "illustration";
+    return w >= 160 && h >= 120 ? "photo" : "icon";
+  };
+  const images = [];
+  const seenImage = /* @__PURE__ */ new Set();
+  const addImage = (el, raw, alt, decorative, background) => {
+    const b = box(el);
+    if (!raw || b.width < 8 || b.height < 8) return;
+    const src = unwrap(raw);
+    const key = `${src} ${Math.round(b.top)} ${Math.round(b.left)}`;
+    if (seenImage.has(key)) return;
+    seenImage.add(key);
+    let host = null;
+    try {
+      host = src.startsWith("data:") ? null : new URL(src).hostname;
+    } catch {
+      host = null;
+    }
+    images.push({
+      src,
+      host,
+      width: Math.round(b.width),
+      height: Math.round(b.height),
+      top: Math.round(b.top),
+      role: roleOfImage(el, src, b.width, b.height, alt),
+      alt,
+      decorative,
+      section: sectionOf(el),
+      background
+    });
+  };
+  for (const img of Array.from(document.querySelectorAll("img")).slice(0, 400)) {
+    if (!shown(img)) continue;
+    const alt = img.getAttribute("alt");
+    const decorative = alt === "" || img.getAttribute("aria-hidden") === "true" || /^(?:presentation|none)$/.test(img.getAttribute("role") ?? "");
+    addImage(img, img.currentSrc || img.getAttribute("src") || "", alt, decorative, false);
+  }
+  for (const el of all) {
+    const bgImage = style(el).backgroundImage || "";
+    if (!bgImage.includes("url(")) continue;
+    const b = box(el);
+    if (b.width < 160 || b.height < 120 || !shown(el)) continue;
+    const m = bgImage.match(/url\(\s*["']?([^"')]+)["']?\s*\)/);
+    if (m) addImage(el, m[1], null, true, true);
+  }
+  images.sort((a, b) => b.width * b.height - a.width * a.height);
   const toList = (m) => Array.from(m, ([value, v]) => ({ value, area: Math.round(v.area), chars: v.chars })).sort((a, b) => b.area - a.area || b.chars - a.chars);
   const nums = (s) => Array.from(s).sort((a, b) => a - b);
   return {
@@ -3306,6 +3774,7 @@ function collectInPage() {
       return mean > 0 ? Math.round(sd / mean * 1e3) / 1e3 : null;
     })(),
     effects,
+    images: images.slice(0, 60),
     motion: {
       hiddenSections: sections.filter((s) => s.hiddenAtLoad).length,
       sections: sections.length,
@@ -3469,7 +3938,60 @@ function visualMeasures(img, maxSamples = 1e6) {
   };
 }
 
+// src/snapshot/provenance.ts
+var PROVENANCE_SCAN_BYTES = 256 * 1024;
+var AI_SOURCE_TYPES = ["compositeWithTrainedAlgorithmicMedia", "trainedAlgorithmicMedia"];
+var MARKER2 = new RegExp(`(?:${AI_SOURCE_TYPES.join("|")})`);
+var C2PA_BOX = /jumd[\s\S]{16,24}c2pa/;
+var C2PA_PNG = /caBX/;
+function latin1(bytes) {
+  let out = "";
+  for (let i = 0; i < bytes.length; i += 8192) {
+    out += String.fromCharCode(...bytes.subarray(i, Math.min(bytes.length, i + 8192)));
+  }
+  return out;
+}
+function xmpPackets(text) {
+  const out = [];
+  const open = /<x:xmpmeta\b|<\?xpacket begin/g;
+  let m;
+  while (m = open.exec(text)) {
+    const close = text.indexOf(m[0].startsWith("<x:") ? "</x:xmpmeta>" : "<?xpacket end", m.index);
+    out.push([m.index, close === -1 ? text.length : close]);
+    if (close === -1) break;
+    open.lastIndex = close;
+  }
+  return out;
+}
+function scanProvenance(bytes) {
+  const head = bytes.subarray(0, PROVENANCE_SCAN_BYTES);
+  const text = latin1(head);
+  const c2pa = C2PA_BOX.test(text) || text.startsWith("\x89PNG") && C2PA_PNG.test(text);
+  const m = MARKER2.exec(text);
+  if (!m) return { digitalSourceType: null, source: null, c2pa, bytes: head.length };
+  const inXmp = xmpPackets(text).some(([a, b]) => m.index >= a && m.index < b);
+  return { digitalSourceType: m[0], source: inXmp ? "xmp" : c2pa ? "c2pa" : "other", c2pa, bytes: head.length };
+}
+
 // src/audit/index.ts
+var PROVENANCE_MAX_IMAGES = 24;
+var PROVENANCE_BUDGET_MS = 2e4;
+async function readProvenance(page, images, timeoutMs) {
+  if (!page.request) return;
+  const deadline = Date.now() + PROVENANCE_BUDGET_MS;
+  const wanted = [...new Set(images.filter((i) => i.role !== "icon" && i.role !== "logo" && /^https?:\/\//.test(i.src)).map((i) => i.src))].slice(0, PROVENANCE_MAX_IMAGES);
+  for (const src of wanted) {
+    const left = deadline - Date.now();
+    if (left < 500) break;
+    try {
+      const res = await page.request.get(src, { headers: { Range: `bytes=0-${PROVENANCE_SCAN_BYTES - 1}` }, timeout: Math.min(timeoutMs, left) });
+      if (!res.ok()) continue;
+      const provenance = scanProvenance(await res.body());
+      for (const image of images) if (image.src === src) image.provenance = provenance;
+    } catch {
+    }
+  }
+}
 var VISUAL_MAX_HEIGHT = 6e3;
 async function loadPlaywright() {
   for (const name of ["playwright", "playwright-core"]) {
@@ -3488,6 +4010,7 @@ async function snapshotPage(page, url, options = {}) {
   await page.waitForTimeout(options.introWindowMs ?? 5e3);
   const late = await page.evaluate(overlayInPage).catch(() => false);
   const data = await page.evaluate(collectInPage);
+  if (data.images && options.provenance !== false) await readProvenance(page, data.images, 8e3);
   let visual;
   if (page.screenshot && options.visual !== false) {
     try {
@@ -3551,6 +4074,8 @@ async function audit(url, options = {}) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  PROVENANCE_BUDGET_MS,
+  PROVENANCE_MAX_IMAGES,
   VISUAL_MAX_HEIGHT,
   audit,
   collectInPage,