@pseolint/core 0.4.1 → 0.5.3

package/dist/ai/manifest/diff.js

@@ -0,0 +1,139 @@
+/** HTML-escape a string for safe interpolation into attribute or text content. */
+function escapeHtml(s) {
+    return s
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+function serializeJsonLd(block) {
+    return `<script type="application/ld+json">\n${JSON.stringify(block, null, 2)}\n</script>`;
+}
+/**
+ * Convert a single page-change into a `PatchDiff`. Pure transformation —
+ * does not validate (use `validatePageChange` for that). The two should
+ * be called in sequence at manifest finalization: validate first, drop
+ * failures, then diff the survivors.
+ */
+export function diffPageChange(c) {
+    switch (c.type) {
+        case "replace_h1":
+            return {
+                kind: "text_replace",
+                field: "h1",
+                before: c.before,
+                after: c.after,
+                reason: c.reason,
+            };
+        case "rewrite_meta":
+            return {
+                kind: "text_replace",
+                field: c.field === "title" ? "title" : "meta_description",
+                before: c.before,
+                after: c.after,
+                reason: c.reason,
+            };
+        case "add_jsonld":
+            return {
+                kind: "html_insert",
+                target: "head",
+                description: `JSON-LD block (@type: ${(() => {
+                    const t = c.block["@type"];
+                    if (typeof t === "string")
+                        return t;
+                    if (Array.isArray(t))
+                        return t.filter((x) => typeof x === "string").join(", ");
+                    return "unknown";
+                })()})`,
+                html: serializeJsonLd(c.block),
+                reason: c.reason,
+            };
+        case "add_faq_block":
+            return {
+                kind: "html_insert",
+                target: "body",
+                description: "FAQ block",
+                html: c.html,
+                reason: c.reason,
+            };
+        case "rewrite_intro":
+            return {
+                kind: "text_replace",
+                field: "intro",
+                before: c.before,
+                after: c.after,
+                reason: c.reason,
+            };
+        case "add_internal_link":
+            // Escape both anchor text and href to prevent XSS in the rendered
+            // snippet. The validator already enforces same-host + non-empty
+            // anchor; this is defense in depth at the diff layer.
+            return {
+                kind: "html_insert",
+                target: "after_h1",
+                description: `Internal link → ${c.to}`,
+                html: `<a href="${escapeHtml(c.to)}">${escapeHtml(c.anchor)}</a>`,
+                reason: c.reason,
+            };
+        case "remove_thin_block":
+            return {
+                kind: "html_remove",
+                selector: c.selector,
+                reason: c.reason,
+            };
+    }
+}
+/** Convert a single domain patch into a `PatchDiff`. */
+export function diffDomainPatch(p) {
+    switch (p.type) {
+        case "robots_txt":
+            return {
+                kind: "file_replace",
+                path: "/robots.txt",
+                before: p.before,
+                after: p.after,
+                reason: p.reason,
+            };
+        case "sitemap_xml":
+            return {
+                kind: "file_replace",
+                path: "/sitemap.xml",
+                before: p.before,
+                after: p.after,
+                reason: p.reason,
+            };
+        case "canonical_strategy":
+            return {
+                kind: "guidance",
+                topic: "canonical_strategy",
+                text: p.after,
+                reason: p.reason,
+            };
+    }
+}
+/**
+ * Walk every patch in a manifest and produce a structured-diff projection.
+ * Mirrors the manifest's tree structure so the UI can render side-by-side
+ * (page list / template clusters / domain-level), each populated with
+ * already-typed patch diffs.
+ */
+export function diffManifest(manifest) {
+    return {
+        pages: manifest.pages.map((p) => ({
+            url: p.url,
+            diffs: p.changes.map(diffPageChange),
+        })),
+        templates: manifest.templates.map((t) => ({
+            templateId: t.templateId,
+            affectedUrlCount: t.affectedUrlCount,
+            recommendation: t.recommendation,
+            examples: t.examples.map((e) => ({
+                url: e.url,
+                diffs: e.changes.map(diffPageChange),
+            })),
+        })),
+        domainLevel: manifest.domainLevel.map(diffDomainPatch),
+    };
+}
+//# sourceMappingURL=diff.js.map

package/dist/ai/manifest/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../src/ai/manifest/diff.ts"],"names":[],"mappings":"AAoDA,kFAAkF;AAClF,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,wCAAwC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC;AAC7F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAa;IAC1C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,YAAY;YACf,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;gBACzD,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,YAAY;YACf,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,yBACX,CAAC,GAAG,EAAE;oBACJ,MAAM,CAAC,GAAI,CAAC,CAAC,KAAiC,CAAC,OAAO,CAAC,CAAC;oBACxD,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,OAAO,CAAC,CAAC;oBACpC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;wBAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC5F,OAAO,SAAS,CAAC;gBACnB,CAAC,CAAC,EACJ,GAAG;gBACH,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC9B,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,mBAAmB;YACtB,kEAAkE;YAClE,gEAAgE;YAChE,sDAAsD;YACtD,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,UAAU;gBAClB,WAAW,EAAE,mBAAmB,CAAC,CAAC,EAAE,EAAE;gBACtC,IAAI,EAAE,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;gBACjE,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;IACN,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,eAAe,CAAC,CAAc;IAC5C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,YAAY;YACf,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,oBAAoB;gBAC3B,IAAI,EAAE,CAAC,CAAC,KAAK;gBACb,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC;IACN,CAAC;AACH,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAAqB;IAChD,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;SACrC,CAAC,CAAC;QACH,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;aACrC,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/ai/manifest/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Manifest validation layer. Patches proposed by the LLM via `finish_audit`
+ * pass through these validators before the manifest is persisted to R2.
+ * Failures are not silently dropped — the caller (web app's session
+ * finalization) decides whether to retry the LLM, drop the failed patches,
+ * or surface them as a "needs human review" subset.
+ *
+ * Phase 4 batch 1 = validators only. Diff generation + ZIP bundle export
+ * land in batch 2.
+ */
+export { validateAddJsonLd, validateReplaceH1, validateRewriteMeta, validateAddFaqBlock, validateRewriteIntro, validateAddInternalLink, validateRemoveThinBlock, validatePageChange, validateRobotsTxt, validateSitemapXml, validateCanonicalStrategy, validateDomainPatch, } from "./validators/index.js";
+export type { ValidationOk, ValidationErr, ValidationResult } from "./validators/index.js";
+export { VALID, fail } from "./validators/index.js";
+export { validateManifest, } from "./validate-manifest.js";
+export type { ManifestValidationReport, PatchValidationFailure, } from "./validate-manifest.js";
+export { diffPageChange, diffDomainPatch, diffManifest, } from "./diff.js";
+export type { PatchDiff, ManifestDiff } from "./diff.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/manifest/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ai/manifest/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,cAAc,EACd,eAAe,EACf,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/ai/manifest/index.js

@@ -0,0 +1,15 @@
+/**
+ * Manifest validation layer. Patches proposed by the LLM via `finish_audit`
+ * pass through these validators before the manifest is persisted to R2.
+ * Failures are not silently dropped — the caller (web app's session
+ * finalization) decides whether to retry the LLM, drop the failed patches,
+ * or surface them as a "needs human review" subset.
+ *
+ * Phase 4 batch 1 = validators only. Diff generation + ZIP bundle export
+ * land in batch 2.
+ */
+export { validateAddJsonLd, validateReplaceH1, validateRewriteMeta, validateAddFaqBlock, validateRewriteIntro, validateAddInternalLink, validateRemoveThinBlock, validatePageChange, validateRobotsTxt, validateSitemapXml, validateCanonicalStrategy, validateDomainPatch, } from "./validators/index.js";
+export { VALID, fail } from "./validators/index.js";
+export { validateManifest, } from "./validate-manifest.js";
+export { diffPageChange, diffDomainPatch, diffManifest, } from "./diff.js";
+//# sourceMappingURL=index.js.map

package/dist/ai/manifest/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ai/manifest/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EACL,cAAc,EACd,eAAe,EACf,YAAY,GACb,MAAM,WAAW,CAAC"}

package/dist/ai/manifest/validate-manifest.d.ts

@@ -0,0 +1,37 @@
+import type { FixManifest } from "../orchestrator/finish-tool.js";
+export interface PatchValidationFailure {
+    /** Where in the manifest the failed patch lives. Used by the manifest UI to highlight + drop. */
+    location: {
+        kind: "page_patch";
+        pageIndex: number;
+        changeIndex: number;
+        pageUrl: string;
+        patchType: string;
+    } | {
+        kind: "template_patch";
+        templateIndex: number;
+        exampleIndex: number;
+        changeIndex: number;
+        templateId: string;
+        patchType: string;
+    } | {
+        kind: "domain_patch";
+        index: number;
+        patchType: string;
+    };
+    reason: string;
+}
+export interface ManifestValidationReport {
+    totalPatches: number;
+    validPatches: number;
+    failures: PatchValidationFailure[];
+}
+/**
+ * Walk every patch in the manifest and return a per-failure report. Does
+ * NOT mutate the manifest — the caller decides what to do (drop failed
+ * patches, surface them in a "rejected" section, retry the LLM with
+ * feedback). Phase 4's manifest-finalization step will use this to filter
+ * the manifest before persistence.
+ */
+export declare function validateManifest(manifest: FixManifest): ManifestValidationReport;
+//# sourceMappingURL=validate-manifest.d.ts.map

package/dist/ai/manifest/validate-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-manifest.d.ts","sourceRoot":"","sources":["../../../src/ai/manifest/validate-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAGlE,MAAM,WAAW,sBAAsB;IACrC,iGAAiG;IACjG,QAAQ,EACJ;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAClG;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GACnI;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,sBAAsB,EAAE,CAAC;CACpC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,wBAAwB,CA6DhF"}

package/dist/ai/manifest/validate-manifest.js

@@ -0,0 +1,67 @@
+import { validatePageChange, validateDomainPatch } from "./validators/index.js";
+/**
+ * Walk every patch in the manifest and return a per-failure report. Does
+ * NOT mutate the manifest — the caller decides what to do (drop failed
+ * patches, surface them in a "rejected" section, retry the LLM with
+ * feedback). Phase 4's manifest-finalization step will use this to filter
+ * the manifest before persistence.
+ */
+export function validateManifest(manifest) {
+    const failures = [];
+    let total = 0;
+    manifest.pages.forEach((page, pageIndex) => {
+        page.changes.forEach((change, changeIndex) => {
+            total += 1;
+            const result = validatePageChange(change);
+            if (!result.valid) {
+                failures.push({
+                    location: {
+                        kind: "page_patch",
+                        pageIndex,
+                        changeIndex,
+                        pageUrl: page.url,
+                        patchType: change.type,
+                    },
+                    reason: result.reason,
+                });
+            }
+        });
+    });
+    manifest.templates.forEach((template, templateIndex) => {
+        template.examples.forEach((example, exampleIndex) => {
+            example.changes.forEach((change, changeIndex) => {
+                total += 1;
+                const result = validatePageChange(change);
+                if (!result.valid) {
+                    failures.push({
+                        location: {
+                            kind: "template_patch",
+                            templateIndex,
+                            exampleIndex,
+                            changeIndex,
+                            templateId: template.templateId,
+                            patchType: change.type,
+                        },
+                        reason: result.reason,
+                    });
+                }
+            });
+        });
+    });
+    manifest.domainLevel.forEach((patch, index) => {
+        total += 1;
+        const result = validateDomainPatch(patch);
+        if (!result.valid) {
+            failures.push({
+                location: { kind: "domain_patch", index, patchType: patch.type },
+                reason: result.reason,
+            });
+        }
+    });
+    return {
+        totalPatches: total,
+        validPatches: total - failures.length,
+        failures,
+    };
+}
+//# sourceMappingURL=validate-manifest.js.map

package/dist/ai/manifest/validate-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-manifest.js","sourceRoot":"","sources":["../../../src/ai/manifest/validate-manifest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAiBhF;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAqB;IACpD,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QACzC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;YAC3C,KAAK,IAAI,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE;wBACR,IAAI,EAAE,YAAY;wBAClB,SAAS;wBACT,WAAW;wBACX,OAAO,EAAE,IAAI,CAAC,GAAG;wBACjB,SAAS,EAAE,MAAM,CAAC,IAAI;qBACvB;oBACD,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE;QACrD,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE;YAClD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;gBAC9C,KAAK,IAAI,CAAC,CAAC;gBACX,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAClB,QAAQ,CAAC,IAAI,CAAC;wBACZ,QAAQ,EAAE;4BACR,IAAI,EAAE,gBAAgB;4BACtB,aAAa;4BACb,YAAY;4BACZ,WAAW;4BACX,UAAU,EAAE,QAAQ,CAAC,UAAU;4BAC/B,SAAS,EAAE,MAAM,CAAC,IAAI;yBACvB;wBACD,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5C,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE;gBAChE,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,YAAY,EAAE,KAAK;QACnB,YAAY,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM;QACrC,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/ai/manifest/validators/domain-patches.d.ts

@@ -0,0 +1,15 @@
+import type { FixManifest } from "../../orchestrator/finish-tool.js";
+import { type ValidationResult } from "./types.js";
+type DomainPatch = FixManifest["domainLevel"][number];
+export declare function validateRobotsTxt(p: DomainPatch): ValidationResult;
+export declare function validateSitemapXml(p: DomainPatch): ValidationResult;
+/**
+ * canonical_strategy is freeform guidance text describing how the site
+ * should structure its canonicals (e.g. "always self-canonical except for
+ * paginated views which point to page 1"). Validation just rejects empty
+ * or trivially-short text — content quality is the LLM's call.
+ */
+export declare function validateCanonicalStrategy(p: DomainPatch): ValidationResult;
+export declare function validateDomainPatch(p: DomainPatch): ValidationResult;
+export {};
+//# sourceMappingURL=domain-patches.d.ts.map

package/dist/ai/manifest/validators/domain-patches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-patches.d.ts","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/domain-patches.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEhE,KAAK,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AActD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAqBlE;AAgBD,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAoCnE;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,WAAW,GAAG,gBAAgB,CAM1E;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,WAAW,GAAG,gBAAgB,CASpE"}

package/dist/ai/manifest/validators/domain-patches.js

@@ -0,0 +1,110 @@
+import { fail, VALID } from "./types.js";
+/**
+ * robots.txt validation: parse line-by-line, require at least one
+ * `User-agent:` directive, reject lines that aren't either a comment, blank,
+ * or a recognized directive (User-agent, Disallow, Allow, Sitemap,
+ * Crawl-delay).
+ *
+ * Not as strict as a real robots-parser library — but catches the failure
+ * modes the LLM is most likely to produce (bad directive names, missing
+ * User-agent block, accidental markdown).
+ */
+const RECOGNIZED_DIRECTIVE_RE = /^(user-agent|disallow|allow|sitemap|crawl-delay|host)\s*:/i;
+export function validateRobotsTxt(p) {
+    const text = p.after.trim();
+    if (!text)
+        return fail("robots_txt: after-text is empty");
+    const lines = text.split(/\r?\n/);
+    let sawUserAgent = false;
+    let lineNo = 0;
+    for (const raw of lines) {
+        lineNo += 1;
+        const line = raw.trim();
+        if (!line)
+            continue;
+        if (line.startsWith("#"))
+            continue;
+        if (!RECOGNIZED_DIRECTIVE_RE.test(line)) {
+            return fail(`robots_txt: unrecognized directive on line ${lineNo}: ${line.slice(0, 60)}`);
+        }
+        if (/^user-agent\s*:/i.test(line))
+            sawUserAgent = true;
+    }
+    if (!sawUserAgent) {
+        return fail("robots_txt: no User-agent directive present");
+    }
+    return VALID;
+}
+/**
+ * sitemap.xml validation: require a recognizable root element (`<urlset>` or
+ * `<sitemapindex>`), require well-formed XML structure (matching open/close
+ * tags), require each `<url>` to carry a `<loc>` child.
+ *
+ * Skips full XSD validation — pulling in a libxml binding for one patch
+ * type isn't worth the deploy weight. The structural checks catch the
+ * common LLM failure modes.
+ */
+const URLSET_RE = /<urlset[\s>]/i;
+const SITEMAPINDEX_RE = /<sitemapindex[\s>]/i;
+const URL_BLOCK_RE = /<url[\s>][\s\S]*?<\/url>/gi;
+const LOC_RE = /<loc>[\s\S]*?<\/loc>/i;
+export function validateSitemapXml(p) {
+    const xml = p.after.trim();
+    if (!xml)
+        return fail("sitemap_xml: after-text is empty");
+    const isUrlset = URLSET_RE.test(xml);
+    const isIndex = SITEMAPINDEX_RE.test(xml);
+    if (!isUrlset && !isIndex) {
+        return fail("sitemap_xml: missing <urlset> or <sitemapindex> root element");
+    }
+    // Cheap well-formed-ness check: count opening vs closing tags for the
+    // root element and `<url>` blocks. Mismatch indicates malformed XML.
+    if (isUrlset) {
+        const opens = (xml.match(/<urlset[\s>]/gi) ?? []).length;
+        const closes = (xml.match(/<\/urlset>/gi) ?? []).length;
+        if (opens !== closes) {
+            return fail("sitemap_xml: <urlset> open/close tag count mismatch");
+        }
+        const urlBlocks = xml.match(URL_BLOCK_RE) ?? [];
+        if (urlBlocks.length === 0) {
+            return fail("sitemap_xml: <urlset> has no <url> children");
+        }
+        for (const block of urlBlocks) {
+            if (!LOC_RE.test(block)) {
+                return fail("sitemap_xml: <url> block missing <loc>");
+            }
+        }
+    }
+    else {
+        const opens = (xml.match(/<sitemapindex[\s>]/gi) ?? []).length;
+        const closes = (xml.match(/<\/sitemapindex>/gi) ?? []).length;
+        if (opens !== closes) {
+            return fail("sitemap_xml: <sitemapindex> open/close tag count mismatch");
+        }
+    }
+    return VALID;
+}
+/**
+ * canonical_strategy is freeform guidance text describing how the site
+ * should structure its canonicals (e.g. "always self-canonical except for
+ * paginated views which point to page 1"). Validation just rejects empty
+ * or trivially-short text — content quality is the LLM's call.
+ */
+export function validateCanonicalStrategy(p) {
+    const after = p.after.trim();
+    if (after.length < 30) {
+        return fail(`canonical_strategy: too short (${after.length} < 30 chars) — needs concrete guidance`);
+    }
+    return VALID;
+}
+export function validateDomainPatch(p) {
+    switch (p.type) {
+        case "robots_txt":
+            return validateRobotsTxt(p);
+        case "sitemap_xml":
+            return validateSitemapXml(p);
+        case "canonical_strategy":
+            return validateCanonicalStrategy(p);
+    }
+}
+//# sourceMappingURL=domain-patches.js.map

package/dist/ai/manifest/validators/domain-patches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain-patches.js","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/domain-patches.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAyB,MAAM,YAAY,CAAC;AAIhE;;;;;;;;;GASG;AACH,MAAM,uBAAuB,GAAG,4DAA4D,CAAC;AAE7F,MAAM,UAAU,iBAAiB,CAAC,CAAc;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,8CAA8C,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,YAAY,GAAG,IAAI,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAG,eAAe,CAAC;AAClC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAC9C,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAClD,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAEvC,MAAM,UAAU,kBAAkB,CAAC,CAAc;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC9E,CAAC;IAED,sEAAsE;IACtE,qEAAqE;IACrE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACxD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/D,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC9D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,CAAc;IACtD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,kCAAkC,KAAK,CAAC,MAAM,wCAAwC,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAc;IAChD,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,YAAY;YACf,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC9B,KAAK,aAAa;YAChB,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,oBAAoB;YACvB,OAAO,yBAAyB,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/ai/manifest/validators/index.d.ts

@@ -0,0 +1,5 @@
+export { VALID, fail } from "./types.js";
+export type { ValidationOk, ValidationErr, ValidationResult } from "./types.js";
+export { validateAddJsonLd, validateReplaceH1, validateRewriteMeta, validateAddFaqBlock, validateRewriteIntro, validateAddInternalLink, validateRemoveThinBlock, validatePageChange, } from "./page-changes.js";
+export { validateRobotsTxt, validateSitemapXml, validateCanonicalStrategy, validateDomainPatch, } from "./domain-patches.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/manifest/validators/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACzC,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC"}

package/dist/ai/manifest/validators/index.js

@@ -0,0 +1,4 @@
+export { VALID, fail } from "./types.js";
+export { validateAddJsonLd, validateReplaceH1, validateRewriteMeta, validateAddFaqBlock, validateRewriteIntro, validateAddInternalLink, validateRemoveThinBlock, validatePageChange, } from "./page-changes.js";
+export { validateRobotsTxt, validateSitemapXml, validateCanonicalStrategy, validateDomainPatch, } from "./domain-patches.js";
+//# sourceMappingURL=index.js.map

package/dist/ai/manifest/validators/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAGzC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC"}

package/dist/ai/manifest/validators/page-changes.d.ts

@@ -0,0 +1,36 @@
+import type { FixManifest } from "../../orchestrator/finish-tool.js";
+import { type ValidationResult } from "./types.js";
+type PageChange = FixManifest["pages"][number]["changes"][number];
+/** Schema.org required-property check for proposed JSON-LD blocks. */
+export declare function validateAddJsonLd(c: Extract<PageChange, {
+    type: "add_jsonld";
+}>): ValidationResult;
+export declare function validateReplaceH1(c: Extract<PageChange, {
+    type: "replace_h1";
+}>): ValidationResult;
+export declare function validateRewriteMeta(c: Extract<PageChange, {
+    type: "rewrite_meta";
+}>): ValidationResult;
+/**
+ * HTML-safety check using a cheerio-based allowlist. Rejects script/iframe/
+ * object/embed/form/style elements and any href/src that uses
+ * javascript:/data:/vbscript: schemes. Defense in depth — the LLM-generated
+ * patch is being prepared for paste into a CMS, not auto-applied, but a
+ * malicious patch in a public manifest is still a footgun.
+ */
+export declare function validateAddFaqBlock(c: Extract<PageChange, {
+    type: "add_faq_block";
+}>): ValidationResult;
+export declare function validateRewriteIntro(c: Extract<PageChange, {
+    type: "rewrite_intro";
+}>): ValidationResult;
+export declare function validateAddInternalLink(c: Extract<PageChange, {
+    type: "add_internal_link";
+}>): ValidationResult;
+export declare function validateRemoveThinBlock(c: Extract<PageChange, {
+    type: "remove_thin_block";
+}>): ValidationResult;
+/** Dispatcher: routes a `PageChange` to its specific validator. */
+export declare function validatePageChange(c: PageChange): ValidationResult;
+export {};
+//# sourceMappingURL=page-changes.d.ts.map

package/dist/ai/manifest/validators/page-changes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-changes.d.ts","sourceRoot":"","sources":["../../../../src/ai/manifest/validators/page-changes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEhE,KAAK,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AA6ClE,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,GAAG,gBAAgB,CAqBlG;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC,GAAG,gBAAgB,CAMlG;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,GAAG,gBAAgB,CAWtG;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,GAAG,gBAAgB,CAuCvG;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,GAAG,gBAAgB,CAOxG;AAED,wBAAgB,uBAAuB,CACrC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC,GACpD,gBAAgB,CA0BlB;AAED,wBAAgB,uBAAuB,CACrC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC,GACpD,gBAAgB,CAYlB;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAiBlE"}