@se-studio/site-check 2.6.3 → 2.7.1

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 2.7.1
+
+### Patch Changes
+
+- Updated dependencies
+  - @se-studio/contentful-rest-api@1.12.0
+
+## 2.7.0
+
+### Minor Changes
+
+- Add build route policy validation (`parseNextBuildRouteTable`, `validateBuildRoutePolicy`, `validate-build-routes` CLI) and SSG guardrail templates for marketing sites.
+
 ## 2.6.3
 
 ### Patch Changes

package/dist/smoke-test/build-route-policy.d.ts

@@ -0,0 +1,39 @@
+/** Next.js build route table symbols (app router). */
+export type NextBuildRouteSymbol = 'static' | 'ssg' | 'dynamic';
+export interface ParsedBuildRoute {
+    symbol: NextBuildRouteSymbol;
+    route: string;
+}
+/** Per-app policy committed beside smoke.cases.json. */
+export interface BuildRoutePolicy {
+    /** Routes that may be ƒ (dynamic) — e.g. CMS index pages, preview, download handlers. */
+    allowedDynamic: string[];
+    /** Segment routes that must be ○ or ●, never ƒ. */
+    mustBeSsgOrStatic: string[];
+}
+export interface BuildRoutePolicyViolation {
+    kind: 'must_be_ssg_or_static' | 'unexpected_dynamic' | 'parse_failure';
+    route: string;
+    symbol: NextBuildRouteSymbol;
+    message: string;
+}
+export interface BuildRoutePolicyResult {
+    routes: ParsedBuildRoute[];
+    violations: BuildRoutePolicyViolation[];
+}
+/** Parse the Route (app) table from `next build` stdout. */
+export declare function parseNextBuildRouteTable(buildOutput: string): ParsedBuildRoute[];
+/** Validate parsed build routes against a committed policy file. */
+export declare function validateBuildRoutePolicy(routes: ParsedBuildRoute[], policy: BuildRoutePolicy): BuildRoutePolicyResult;
+export declare function formatBuildRoutePolicyReport(result: BuildRoutePolicyResult): string;
+export declare function getBuildRoutePolicyExitCode(result: BuildRoutePolicyResult): number;
+export interface LoadBuildRoutePolicyOptions {
+    cwd?: string;
+}
+/** Load committed route-build-policy.json from an app directory. Returns null if missing. */
+export declare function loadBuildRoutePolicy(filename?: string, options?: LoadBuildRoutePolicyOptions): BuildRoutePolicy | null;
+/** Parse and validate `next build` stdout against a policy file in cwd. */
+export declare function validateBuildRoutesFromBuildOutput(buildOutput: string, options?: LoadBuildRoutePolicyOptions & {
+    policyFile?: string;
+}): BuildRoutePolicyResult | null;
+//# sourceMappingURL=build-route-policy.d.ts.map

package/dist/smoke-test/build-route-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-route-policy.d.ts","sourceRoot":"","sources":["../../src/smoke-test/build-route-policy.ts"],"names":[],"mappings":"AAGA,sDAAsD;AACtD,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,yFAAyF;IACzF,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mDAAmD;IACnD,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,uBAAuB,GAAG,oBAAoB,GAAG,eAAe,CAAC;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,oBAAoB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,UAAU,EAAE,yBAAyB,EAAE,CAAC;CACzC;AAQD,4DAA4D;AAC5D,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAsChF;AAQD,oEAAoE;AACpE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,gBAAgB,EAAE,EAC1B,MAAM,EAAE,gBAAgB,GACvB,sBAAsB,CA0BxB;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAenF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAElF;AAED,MAAM,WAAW,2BAA2B;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAClC,QAAQ,SAA4B,EACpC,OAAO,GAAE,2BAAgC,GACxC,gBAAgB,GAAG,IAAI,CAezB;AAED,2EAA2E;AAC3E,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,2BAA2B,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAClE,sBAAsB,GAAG,IAAI,CAoB/B"}

package/dist/smoke-test/build-route-policy.js

@@ -0,0 +1,121 @@
+import fs from 'node:fs';
+import path from 'node:path';
+const SYMBOL_MAP = {
+    '○': 'static',
+    '●': 'ssg',
+    ƒ: 'dynamic',
+};
+/** Parse the Route (app) table from `next build` stdout. */
+export function parseNextBuildRouteTable(buildOutput) {
+    const routes = [];
+    let inRouteTable = false;
+    for (const line of buildOutput.split('\n')) {
+        if (line.includes('Route (app)')) {
+            inRouteTable = true;
+            continue;
+        }
+        if (!inRouteTable) {
+            continue;
+        }
+        if (line.includes('First Load JS shared by all') || line.includes('Middleware')) {
+            break;
+        }
+        const match = line.match(/^[┌├└]\s+([○●ƒ])\s+(\S+)/);
+        if (!match) {
+            continue;
+        }
+        const symbolChar = match[1];
+        const route = match[2];
+        if (!symbolChar || !route) {
+            continue;
+        }
+        const symbol = SYMBOL_MAP[symbolChar];
+        if (!symbol) {
+            continue;
+        }
+        routes.push({ symbol, route });
+    }
+    return routes;
+}
+function symbolLabel(symbol) {
+    if (symbol === 'static')
+        return '○ static';
+    if (symbol === 'ssg')
+        return '● SSG';
+    return 'ƒ dynamic';
+}
+/** Validate parsed build routes against a committed policy file. */
+export function validateBuildRoutePolicy(routes, policy) {
+    const violations = [];
+    const allowedDynamic = new Set(policy.allowedDynamic);
+    const mustBeSsgOrStatic = new Set(policy.mustBeSsgOrStatic);
+    for (const { route, symbol } of routes) {
+        if (mustBeSsgOrStatic.has(route) && symbol === 'dynamic') {
+            violations.push({
+                kind: 'must_be_ssg_or_static',
+                route,
+                symbol,
+                message: `${route} must be SSG/static (● or ○) but build reported ${symbolLabel(symbol)}`,
+            });
+        }
+        if (symbol === 'dynamic' && !allowedDynamic.has(route) && !mustBeSsgOrStatic.has(route)) {
+            violations.push({
+                kind: 'unexpected_dynamic',
+                route,
+                symbol,
+                message: `${route} is ${symbolLabel(symbol)} but not listed in allowedDynamic — add to route-build-policy.json if intentional`,
+            });
+        }
+    }
+    return { routes, violations };
+}
+export function formatBuildRoutePolicyReport(result) {
+    const lines = [];
+    lines.push('Build route policy');
+    lines.push(`  routes parsed: ${result.routes.length}`);
+    if (result.violations.length === 0) {
+        lines.push('  status: ok');
+        return lines.join('\n');
+    }
+    lines.push(`  violations: ${result.violations.length}`);
+    for (const v of result.violations) {
+        lines.push(`    - ${v.message}`);
+    }
+    return lines.join('\n');
+}
+export function getBuildRoutePolicyExitCode(result) {
+    return result.violations.length > 0 ? 1 : 0;
+}
+/** Load committed route-build-policy.json from an app directory. Returns null if missing. */
+export function loadBuildRoutePolicy(filename = 'route-build-policy.json', options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const filePath = path.join(cwd, filename);
+    if (!fs.existsSync(filePath)) {
+        return null;
+    }
+    const raw = fs.readFileSync(filePath, 'utf8');
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed.allowedDynamic) || !Array.isArray(parsed.mustBeSsgOrStatic)) {
+        throw new Error(`${filePath} must include allowedDynamic and mustBeSsgOrStatic arrays`);
+    }
+    return parsed;
+}
+/** Parse and validate `next build` stdout against a policy file in cwd. */
+export function validateBuildRoutesFromBuildOutput(buildOutput, options = {}) {
+    const policy = loadBuildRoutePolicy(options.policyFile, options);
+    if (!policy) {
+        return null;
+    }
+    const routes = parseNextBuildRouteTable(buildOutput);
+    const result = validateBuildRoutePolicy(routes, policy);
+    if (routes.length === 0) {
+        result.violations.push({
+            kind: 'parse_failure',
+            route: '',
+            symbol: 'dynamic',
+            message: 'No routes parsed from build output — capture next build stdout or check Route (app) table format',
+        });
+    }
+    return result;
+}
+//# sourceMappingURL=build-route-policy.js.map

package/dist/smoke-test/build-route-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-route-policy.js","sourceRoot":"","sources":["../../src/smoke-test/build-route-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA8B7B,MAAM,UAAU,GAAyC;IACvD,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,KAAK;IACV,CAAC,EAAE,SAAS;CACb,CAAC;AAEF,4DAA4D;AAC5D,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAChF,MAAM;QACR,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,MAA4B;IAC/C,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC3C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IACrC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CACtC,MAA0B,EAC1B,MAAwB;IAExB,MAAM,UAAU,GAAgC,EAAE,CAAC;IACnD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAE5D,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACvC,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,KAAK;gBACL,MAAM;gBACN,OAAO,EAAE,GAAG,KAAK,mDAAmD,WAAW,CAAC,MAAM,CAAC,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,oBAAoB;gBAC1B,KAAK;gBACL,MAAM;gBACN,OAAO,EAAE,GAAG,KAAK,OAAO,WAAW,CAAC,MAAM,CAAC,mFAAmF;aAC/H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAA8B;IACzE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA8B;IACxE,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAMD,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAClC,QAAQ,GAAG,yBAAyB,EACpC,UAAuC,EAAE;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IAEnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,2DAA2D,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kCAAkC,CAChD,WAAmB,EACnB,UAAiE,EAAE;IAEnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAExD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,SAAS;YACjB,OAAO,EACL,kGAAkG;SACrG,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/smoke-test/index.d.ts

@@ -1,4 +1,6 @@
 export { createProtectedFetch, requireDeploymentBaseUrl, requirePreviewBaseUrl, requireProtectionBypass, requireSitemapProdUrl, resolveDeploymentBaseUrl, resolvePreviewBaseUrl, resolveProductionSiteUrl, resolveProtectionBypass, resolveSitemapProdUrl, VERCEL_PROTECTION_BYPASS_HEADER, } from '../vercel-env.js';
+export type { BuildRoutePolicy, BuildRoutePolicyResult, BuildRoutePolicyViolation, NextBuildRouteSymbol, ParsedBuildRoute, } from './build-route-policy.js';
+export { formatBuildRoutePolicyReport, getBuildRoutePolicyExitCode, loadBuildRoutePolicy, parseNextBuildRouteTable, validateBuildRoutePolicy, validateBuildRoutesFromBuildOutput, } from './build-route-policy.js';
 export type { CacheLogAuditMatch, CacheLogAuditOptions, CacheLogAuditResult, CacheLogAuditSeverity, } from './cache-log-audit.js';
 export { auditCacheLogs, formatCacheLogAuditReport, getCacheLogAuditExitCode, } from './cache-log-audit.js';
 export { isCmsIntegrityEnabled, loadSmokeConfigFile } from './config.js';

package/dist/smoke-test/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/smoke-test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,uBAAuB,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,sCAAsC,EACtC,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,4BAA4B,EAC5B,iBAAiB,EACjB,gCAAgC,EAChC,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,0BAA0B,EAC1B,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/smoke-test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,uBAAuB,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,sCAAsC,EACtC,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,4BAA4B,EAC5B,iBAAiB,EACjB,gCAAgC,EAChC,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,0BAA0B,EAC1B,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/smoke-test/index.js

@@ -1,4 +1,5 @@
 export { createProtectedFetch, requireDeploymentBaseUrl, requirePreviewBaseUrl, requireProtectionBypass, requireSitemapProdUrl, resolveDeploymentBaseUrl, resolvePreviewBaseUrl, resolveProductionSiteUrl, resolveProtectionBypass, resolveSitemapProdUrl, VERCEL_PROTECTION_BYPASS_HEADER, } from '../vercel-env.js';
+export { formatBuildRoutePolicyReport, getBuildRoutePolicyExitCode, loadBuildRoutePolicy, parseNextBuildRouteTable, validateBuildRoutePolicy, validateBuildRoutesFromBuildOutput, } from './build-route-policy.js';
 export { auditCacheLogs, formatCacheLogAuditReport, getCacheLogAuditExitCode, } from './cache-log-audit.js';
 export { isCmsIntegrityEnabled, loadSmokeConfigFile } from './config.js';
 export { formatSmokeTestReport, getSmokeTestExitCode, isSmokeTestCacheVerifyResult, parseNextJsCacheHeader, runSmokeTest, runSmokeTestWithCacheVerify, } from './runner.js';

package/dist/smoke-test/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/smoke-test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,sCAAsC,EACtC,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/smoke-test/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,yBAAyB,CAAC;AAOjC,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,sCAAsC,EACtC,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,EAClB,+BAA+B,GAChC,MAAM,aAAa,CAAC"}

package/docs/llms.md

@@ -14,7 +14,7 @@ Site validation CLI, production SEO audits, and curated smoke tests for SE marke
 
 ## Smoke test (HTTP)
 
-Apps commit `smoke.cases.json`. Requires **^2.0.0** for static smoke; **^2.6.1** when `cmsIntegrity` is enabled.
+Apps commit `smoke.cases.json`. Requires **^2.0.0** for static smoke; **^2.6.1** when `cmsIntegrity` is enabled; **^2.7.0** for build route policy (`validate-build-routes`, `validateBuildRoutesFromBuildOutput`).
 
 ```ts
 import {
@@ -24,9 +24,13 @@ import {
   formatCombinedSmokeReport,
   getSmokeTestExitCode,
   getCombinedSmokeExitCode,
+  validateBuildRoutesFromBuildOutput,
+  formatBuildRoutePolicyReport,
 } from '@se-studio/site-check/smoke-test';
 ```
 
+**SSG guardrails:** commit `route-build-policy.json`; run `validate-build-routes` or `pnpm validate:routes`. Templates in package `templates/`.
+
 **Per-app scripts:**
 
 ```json

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@se-studio/site-check",
-  "version": "2.6.3",
+  "version": "2.7.1",
   "description": "Validate SE marketing sites (sitemap, llms.txt) and download markdown files preserving structure",
   "repository": {
     "type": "git",
@@ -45,15 +45,18 @@
     "site-check-screaming-frog": "./dist/screaming-frog-cli.js",
     "smoke-test-one": "./smoke-test-one.mjs",
     "smoke-test-deploy-check": "./smoke-test-deploy-check.mjs",
-    "smoke-test-live": "./smoke-test-live.mjs"
+    "smoke-test-live": "./smoke-test-live.mjs",
+    "validate-build-routes": "./validate-build-routes.mjs"
   },
   "files": [
     "dist",
     "docs",
+    "templates",
     "*.md",
     "smoke-test-one.mjs",
     "smoke-test-deploy-check.mjs",
-    "smoke-test-live.mjs"
+    "smoke-test-live.mjs",
+    "validate-build-routes.mjs"
   ],
   "keywords": [
     "sitemap",
@@ -71,7 +74,7 @@
     "url": "https://github.com/Something-Else-Studio/se-core-product/issues"
   },
   "dependencies": {
-    "@se-studio/contentful-rest-api": "1.11.0",
+    "@se-studio/contentful-rest-api": "1.12.0",
     "@se-studio/core-data-types": "1.5.1"
   },
   "devDependencies": {

package/smoke-test-one.mjs

@@ -13,6 +13,7 @@
  *   SMOKE_TEST_READY_PATH=/             — path polled until server responds
  *   SMOKE_TEST_USE_RUNNING_SERVER=true  — reuse server already on port (default true)
  *   SMOKE_TEST_SKIP_BUILD=true          — skip pnpm build when SERVER_SCRIPT=start (post-build deploy check)
+ *   SMOKE_TEST_VALIDATE_ROUTES=false    — skip route-build-policy.json check after build (default on when file exists)
  *   SMOKE_TEST_SKIP_INTEGRITY=true      — HTTP smoke only (set by smoke-test-one when cmsIntegrity runs in parallel)
  *   LOG_CMS_FETCH=1                     — set when VERIFY_CACHE or AUDIT_CACHE_LOGS is true
  */
@@ -176,6 +177,11 @@ async function loadCacheLogAudit() {
   return import(modulePath);
 }
 
+async function loadBuildRoutePolicy() {
+  const modulePath = path.join(packageDir, 'dist/smoke-test/build-route-policy.js');
+  return import(modulePath);
+}
+
 async function loadSmokeIntegrityModules() {
   const [staticModule, configModule, integrityModule] = await Promise.all([
     import(path.join(packageDir, 'dist/smoke-test/static.js')),
@@ -229,27 +235,54 @@ const readyPath = env.SMOKE_TEST_READY_PATH ?? '/';
 const readyUrl = `${baseUrl}${readyPath.startsWith('/') ? readyPath : `/${readyPath}`}`;
 const isProductionStart = serverScript === 'start';
 const skipBuild = (env.SMOKE_TEST_SKIP_BUILD ?? '').toLowerCase() === 'true';
+const validateRoutes = (env.SMOKE_TEST_VALIDATE_ROUTES ?? 'true').toLowerCase() !== 'false';
+const routePolicyPath = path.join(appDir, 'route-build-policy.json');
 const startTimeoutMs = isProductionStart ? 120_000 : 300_000;
 
 const logBuffer = { text: '' };
 
 if (isProductionStart && !skipBuild) {
+  const captureBuildOutput =
+    auditCacheLogsEnabled || (validateRoutes && fs.existsSync(routePolicyPath));
+
   console.log('Building app...');
   const buildResult = spawnSync('pnpm', ['build'], {
     cwd: appDir,
-    stdio: auditCacheLogsEnabled ? 'pipe' : 'inherit',
+    stdio: captureBuildOutput ? 'pipe' : 'inherit',
     env,
-    encoding: auditCacheLogsEnabled ? 'utf8' : undefined,
+    encoding: captureBuildOutput ? 'utf8' : undefined,
   });
-  if (auditCacheLogsEnabled) {
+  if (captureBuildOutput) {
     logBuffer.text += buildResult.stdout ?? '';
     logBuffer.text += buildResult.stderr ?? '';
     if (buildResult.stdout) process.stdout.write(buildResult.stdout);
     if (buildResult.stderr) process.stderr.write(buildResult.stderr);
+
+    if (validateRoutes && fs.existsSync(routePolicyPath)) {
+      const buildLogPath = path.join(appDir, '.next', 'validate-routes-build.log');
+      fs.mkdirSync(path.dirname(buildLogPath), { recursive: true });
+      fs.writeFileSync(buildLogPath, logBuffer.text);
+    }
   }
   if (buildResult.status !== 0) {
     process.exit(buildResult.status ?? 1);
   }
+
+  if (validateRoutes && fs.existsSync(routePolicyPath)) {
+    const {
+      formatBuildRoutePolicyReport,
+      getBuildRoutePolicyExitCode,
+      validateBuildRoutesFromBuildOutput,
+    } = await loadBuildRoutePolicy();
+    const routeResult = validateBuildRoutesFromBuildOutput(logBuffer.text, { cwd: appDir });
+    if (routeResult) {
+      console.log('');
+      console.log(formatBuildRoutePolicyReport(routeResult));
+      if (getBuildRoutePolicyExitCode(routeResult) !== 0) {
+        process.exit(1);
+      }
+    }
+  }
 }
 
 const enableCmsFetchLog = verifyCache || auditCacheLogsEnabled;

package/templates/biome-ssg-guardrails.override.json

@@ -0,0 +1,27 @@
+{
+  "includes": ["**/src/app/layout.tsx", "**/src/app/(cms-routes)/**", "**/src/project/**"],
+  "linter": {
+    "rules": {
+      "style": {
+        "noRestrictedImports": {
+          "level": "error",
+          "options": {
+            "paths": {
+              "next/headers": {
+                "message": "Do not use next/headers in SSG surfaces (headers, cookies, draftMode break on-demand SSG in production). Use client-side window.location or createHubSpotBootstrapScript() with no args instead."
+              },
+              "next/server": {
+                "importNames": ["connection"],
+                "message": "Do not use connection() in SSG surfaces — it forces dynamic rendering and breaks on-demand SSG routes in production."
+              },
+              "next/cache": {
+                "importNames": ["unstable_noStore"],
+                "message": "Do not use unstable_noStore() in SSG surfaces — it opts out of static generation and breaks on-demand SSG routes in production."
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/templates/route-build-policy.example.json

@@ -0,0 +1,18 @@
+{
+  "allowedDynamic": [
+    "/",
+    "/articles",
+    "/tags",
+    "/people",
+    "/_not-found",
+    "/download/[assetId]/[filename]"
+  ],
+  "mustBeSsgOrStatic": [
+    "/[level1]",
+    "/[level1]/[...slugs]",
+    "/articles/[articleType]",
+    "/articles/[articleType]/[...slugs]",
+    "/tags/[tag]",
+    "/people/[person]"
+  ]
+}

package/validate-build-routes.mjs

@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+
+/**
+ * Validate Next.js build route table against route-build-policy.json.
+ * Usage: validate-build-routes  (from app directory)
+ *
+ * Env:
+ *   VALIDATE_ROUTES_SKIP_BUILD=true  — assume build already ran; read .next/validate-routes-build.log
+ *   VALIDATE_ROUTES_IGNORE=true      — skip entirely (exit 0)
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { spawnSync } from 'node:child_process';
+
+const packageDir = path.dirname(fileURLToPath(import.meta.url));
+const appDir = process.cwd();
+const policyPath = path.join(appDir, 'route-build-policy.json');
+const buildLogPath = path.join(appDir, '.next', 'validate-routes-build.log');
+
+if ((process.env.VALIDATE_ROUTES_IGNORE ?? '').toLowerCase() === 'true') {
+  console.log('Skipped (VALIDATE_ROUTES_IGNORE=true).');
+  process.exit(0);
+}
+
+if (!fs.existsSync(policyPath)) {
+  console.log('Skipped (no route-build-policy.json).');
+  process.exit(0);
+}
+
+const {
+  formatBuildRoutePolicyReport,
+  getBuildRoutePolicyExitCode,
+  validateBuildRoutesFromBuildOutput,
+} = await import(path.join(packageDir, 'dist/smoke-test/build-route-policy.js'));
+
+let buildOutput = '';
+
+if ((process.env.VALIDATE_ROUTES_SKIP_BUILD ?? '').toLowerCase() === 'true') {
+  if (!fs.existsSync(buildLogPath)) {
+    console.error(
+      `Missing ${buildLogPath}. Run pnpm build first or unset VALIDATE_ROUTES_SKIP_BUILD.`,
+    );
+    process.exit(1);
+  }
+  buildOutput = fs.readFileSync(buildLogPath, 'utf8');
+} else {
+  console.log('Building app for route policy validation...');
+  const buildResult = spawnSync('pnpm', ['build'], {
+    cwd: appDir,
+    env: process.env,
+    encoding: 'utf8',
+  });
+
+  buildOutput = `${buildResult.stdout ?? ''}${buildResult.stderr ?? ''}`;
+  fs.mkdirSync(path.dirname(buildLogPath), { recursive: true });
+  fs.writeFileSync(buildLogPath, buildOutput);
+
+  if (buildResult.status !== 0) {
+    if (buildResult.stdout) process.stdout.write(buildResult.stdout);
+    if (buildResult.stderr) process.stderr.write(buildResult.stderr);
+    process.exit(buildResult.status ?? 1);
+  }
+}
+
+const result = validateBuildRoutesFromBuildOutput(buildOutput, { cwd: appDir });
+if (!result) {
+  console.log('Skipped (route-build-policy.json could not be loaded).');
+  process.exit(0);
+}
+
+console.log(formatBuildRoutePolicyReport(result));
+process.exit(getBuildRoutePolicyExitCode(result));