ax-audit 4.2.1 → 6.0.0

package/dist/checks/ai-directives.d.ts

@@ -1,57 +0,0 @@
-import type { CheckContext, CheckResult, CheckMeta } from '../types.js';
-/**
- * "ai-directives" — the page-level controls that actually govern whether your
- * content can appear in an AI answer.
- *
- * robots.txt decides whether a crawler may *fetch* a page. These directives
- * decide what may be *done* with it once fetched, and unlike most of the
- * machine-readable signals in this audit, the two largest vendors document that
- * they honor them:
- *
- * - Google: `nosnippet` "will also prevent the content from being used as a
- *   direct input for AI Overviews and AI Mode"; `max-snippet:[n]` limits how
- *   much may be used; `data-nosnippet` scopes the exclusion to part of a page.
- * - Microsoft: `noarchive` excludes a page from Copilot grounding entirely;
- *   `nocache` limits Copilot to the URL, title and snippet.
- *
- * The most common misconception this check corrects is about `Google-Extended`.
- * Operators disallow it expecting to leave AI Overviews. It does not do that:
- * it governs Gemini training and grounding in Gemini Apps and Vertex AI, while
- * AI Overviews and AI Mode follow Googlebot and the snippet directives. A site
- * that disallows `Google-Extended` and sets no snippet directive has opted out
- * of the thing it probably did not mind and stayed in the thing it did.
- *
- * `noai` and `noimageai` are reported as declared preferences. No major AI
- * operator has committed to honoring them, and saying otherwise would be
- * misleading.
- */
-export declare const meta: CheckMeta;
-/** Directive tokens parsed out of a robots meta tag or `X-Robots-Tag` header. */
-export interface ParsedDirectives {
-    /** Bare tokens, lowercased. */
-    tokens: Set<string>;
-    /** `max-snippet` value, or `null` when absent. `-1` means unlimited. */
-    maxSnippet: number | null;
-    /** Which sources declared directives, for the report. */
-    sources: string[];
-}
-/**
- * Parse robots directives from meta tags and `X-Robots-Tag`.
- *
- * `X-Robots-Tag` may name a user agent before its directives
- * (`X-Robots-Tag: googlebot: noindex`) and may repeat, which HTTP folds into
- * one comma-separated value. Both forms are handled; a UA-scoped rule counts
- * because the audit reports the strictest thing any major crawler is told.
- */
-export declare function parseDirectives(html: string, headers: Record<string, string>): ParsedDirectives;
-/**
- * Count `data-nosnippet` regions and judge whether they cover the page's
- * substance. Scoping a cookie banner is housekeeping; wrapping `<main>` removes
- * the page from AI answers.
- */
-export declare function analyseDataNosnippet(html: string): {
-    count: number;
-    coversMain: boolean;
-};
-export default function check(ctx: CheckContext): Promise<CheckResult>;
-//# sourceMappingURL=ai-directives.d.ts.map

package/dist/checks/ai-directives.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ai-directives.d.ts","sourceRoot":"","sources":["../../src/checks/ai-directives.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAW,MAAM,aAAa,CAAC;AAIjF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,IAAI,EAAE,SAKlB,CAAC;AAEF,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,+BAA+B;IAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,wEAAwE;IACxE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,yDAAyD;IACzD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB,CAyC/F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAIzF;AAED,wBAA8B,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAgK3E"}

package/dist/checks/ai-directives.js

@@ -1,263 +0,0 @@
-import { guideUrl } from '../guide-urls.js';
-import { buildResult } from './utils.js';
-import { getMetaContent } from './html-utils.js';
-/**
- * "ai-directives" — the page-level controls that actually govern whether your
- * content can appear in an AI answer.
- *
- * robots.txt decides whether a crawler may *fetch* a page. These directives
- * decide what may be *done* with it once fetched, and unlike most of the
- * machine-readable signals in this audit, the two largest vendors document that
- * they honor them:
- *
- * - Google: `nosnippet` "will also prevent the content from being used as a
- *   direct input for AI Overviews and AI Mode"; `max-snippet:[n]` limits how
- *   much may be used; `data-nosnippet` scopes the exclusion to part of a page.
- * - Microsoft: `noarchive` excludes a page from Copilot grounding entirely;
- *   `nocache` limits Copilot to the URL, title and snippet.
- *
- * The most common misconception this check corrects is about `Google-Extended`.
- * Operators disallow it expecting to leave AI Overviews. It does not do that:
- * it governs Gemini training and grounding in Gemini Apps and Vertex AI, while
- * AI Overviews and AI Mode follow Googlebot and the snippet directives. A site
- * that disallows `Google-Extended` and sets no snippet directive has opted out
- * of the thing it probably did not mind and stayed in the thing it did.
- *
- * `noai` and `noimageai` are reported as declared preferences. No major AI
- * operator has committed to honoring them, and saying otherwise would be
- * misleading.
- */
-export const meta = {
-    id: 'ai-directives',
-    name: 'AI Directives',
-    description: 'Checks page-level robots directives that govern AI answers and summaries',
-    category: 'access',
-};
-/**
- * Parse robots directives from meta tags and `X-Robots-Tag`.
- *
- * `X-Robots-Tag` may name a user agent before its directives
- * (`X-Robots-Tag: googlebot: noindex`) and may repeat, which HTTP folds into
- * one comma-separated value. Both forms are handled; a UA-scoped rule counts
- * because the audit reports the strictest thing any major crawler is told.
- */
-export function parseDirectives(html, headers) {
-    const tokens = new Set();
-    const sources = [];
-    let maxSnippet = null;
-    const consume = (value, source) => {
-        let sawAny = false;
-        for (const raw of value.split(',')) {
-            // Strip a leading `<user-agent>:` scope if present.
-            const segment = raw.includes(':') && !/^\s*max-(snippet|image-preview|video-preview)\s*:/i.test(raw)
-                ? raw.slice(raw.indexOf(':') + 1)
-                : raw;
-            const token = segment.trim().toLowerCase();
-            if (!token)
-                continue;
-            const snippet = token.match(/^max-snippet\s*:\s*(-?\d+)$/);
-            if (snippet) {
-                // `-1` means "no limit", so it must never win a minimum against a real
-                // cap. Normalise it to Infinity while comparing and restore it after.
-                const n = Number(snippet[1]) === -1 ? Infinity : Number(snippet[1]);
-                maxSnippet = maxSnippet === null ? n : Math.min(maxSnippet, n);
-                tokens.add('max-snippet');
-                sawAny = true;
-                continue;
-            }
-            tokens.add(token);
-            sawAny = true;
-        }
-        if (sawAny)
-            sources.push(source);
-    };
-    for (const name of ['robots', 'googlebot', 'bingbot', 'google', 'msnbot']) {
-        const content = getMetaContent(html, name);
-        if (content !== null)
-            consume(content, `<meta name="${name}">`);
-    }
-    if (headers['x-robots-tag'] !== undefined)
-        consume(headers['x-robots-tag'], 'X-Robots-Tag header');
-    return { tokens, maxSnippet: maxSnippet === Infinity ? -1 : maxSnippet, sources };
-}
-/**
- * Count `data-nosnippet` regions and judge whether they cover the page's
- * substance. Scoping a cookie banner is housekeeping; wrapping `<main>` removes
- * the page from AI answers.
- */
-export function analyseDataNosnippet(html) {
-    const matches = [...html.matchAll(/<([a-z][a-z0-9-]*)\b([^>]*\bdata-nosnippet\b[^>]*)>/gi)];
-    const coversMain = matches.some((m) => /^(main|article|body)$/i.test(m[1]));
-    return { count: matches.length, coversMain };
-}
-export default async function check(ctx) {
-    const start = performance.now();
-    const findings = [];
-    let score = 100;
-    if (!ctx.html || ctx.html.trim().length === 0) {
-        findings.push({
-            status: 'fail',
-            message: 'Homepage HTML unavailable — cannot read AI directives',
-            learnMoreUrl: guideUrl(meta.id, 'no-html'),
-        });
-        return buildResult(meta, 0, findings, start);
-    }
-    const { tokens, maxSnippet, sources } = parseDirectives(ctx.html, ctx.headers ?? {});
-    const has = (t) => tokens.has(t);
-    /* ── Indexability: the precondition for everything else ─────────────── */
-    if (has('noindex') || has('none')) {
-        findings.push({
-            status: 'fail',
-            message: 'Homepage is marked noindex',
-            detail: sources.join(', '),
-            hint: 'A noindex page is invisible to every search-grounded assistant, because they all cite from a search index. ' +
-                'If this is deliberate, nothing else in this check matters. If it is not, remove the directive.',
-            learnMoreUrl: guideUrl(meta.id, 'noindex'),
-        });
-        return buildResult(meta, 0, findings, start);
-    }
-    findings.push({ status: 'pass', message: 'Homepage is indexable' });
-    /* ── Snippet controls: Google AI Overviews and AI Mode ───────────────── */
-    if (has('nosnippet')) {
-        findings.push({
-            status: 'warn',
-            message: 'nosnippet excludes this page from Google AI Overviews and AI Mode',
-            detail: sources.join(', '),
-            hint: 'Google documents that nosnippet prevents content being used as a direct input for AI Overviews and AI Mode, ' +
-                'as well as suppressing the search snippet. Remove it if you want to be quoted; keep it if you do not.',
-            learnMoreUrl: guideUrl(meta.id, 'nosnippet'),
-        });
-        score -= 30;
-    }
-    else if (maxSnippet !== null && maxSnippet !== -1) {
-        if (maxSnippet === 0) {
-            findings.push({
-                status: 'warn',
-                message: 'max-snippet:0 has the same effect as nosnippet',
-                detail: sources.join(', '),
-                hint: 'A zero-character snippet limit excludes the page from AI Overviews and AI Mode as an input.',
-                learnMoreUrl: guideUrl(meta.id, 'nosnippet'),
-            });
-            score -= 30;
-        }
-        else {
-            findings.push({
-                status: maxSnippet < 160 ? 'warn' : 'pass',
-                message: `max-snippet:${maxSnippet} limits how much of this page an AI answer may use`,
-                detail: sources.join(', '),
-                ...(maxSnippet < 160
-                    ? {
-                        hint: 'Below roughly 160 characters there is little room for a useful quotation. Use max-snippet:-1 for no limit.',
-                        learnMoreUrl: guideUrl(meta.id, 'max-snippet'),
-                    }
-                    : {}),
-            });
-        }
-    }
-    else if (maxSnippet === -1) {
-        findings.push({ status: 'pass', message: 'max-snippet:-1 — no limit on snippet length' });
-    }
-    /* ── Copilot controls ────────────────────────────────────────────────── */
-    if (has('noarchive')) {
-        findings.push({
-            status: 'warn',
-            message: 'noarchive excludes this page from Microsoft Copilot grounding',
-            detail: sources.join(', '),
-            hint: 'Microsoft documents that noarchive means a page is not included in Copilot answers and not linked from them. ' +
-                'nocache is the lighter option: Copilot may use the URL, title and snippet but not the body.',
-            learnMoreUrl: guideUrl(meta.id, 'noarchive'),
-        });
-        score -= 30;
-    }
-    else if (has('nocache')) {
-        findings.push({
-            status: 'warn',
-            message: 'nocache limits Copilot to the URL, title and snippet of this page',
-            detail: sources.join(', '),
-            hint: 'Copilot may cite the page but not use its body. Remove nocache to allow full grounding.',
-            learnMoreUrl: guideUrl(meta.id, 'nocache'),
-        });
-        score -= 10;
-    }
-    /* ── Scoped exclusions ───────────────────────────────────────────────── */
-    const dataNosnippet = analyseDataNosnippet(ctx.html);
-    if (dataNosnippet.coversMain) {
-        findings.push({
-            status: 'warn',
-            message: 'data-nosnippet wraps the page’s main content',
-            detail: `${dataNosnippet.count} data-nosnippet region(s) found`,
-            hint: 'Scoping a cookie banner or a byline is housekeeping. Wrapping <main>, <article> or <body> removes the page from AI answers as surely as nosnippet does.',
-            learnMoreUrl: guideUrl(meta.id, 'data-nosnippet-main'),
-        });
-        score -= 20;
-    }
-    else if (dataNosnippet.count > 0) {
-        findings.push({
-            status: 'pass',
-            message: `${dataNosnippet.count} data-nosnippet region(s) — scoped exclusions, main content still quotable`,
-        });
-    }
-    if (has('noimageindex')) {
-        findings.push({
-            status: 'warn',
-            message: 'noimageindex keeps this page’s images out of image results and multimodal answers',
-            detail: sources.join(', '),
-            hint: 'Remove it if you want images cited alongside your text.',
-            learnMoreUrl: guideUrl(meta.id, 'noimageindex'),
-        });
-        score -= 5;
-    }
-    /* ── Declared preferences with no committed honorer ──────────────────── */
-    const declared = ['noai', 'noimageai'].filter(has);
-    if (declared.length > 0) {
-        findings.push({
-            status: 'pass',
-            message: `${declared.join(' and ')} declared`,
-            detail: 'A stated preference against AI use. No major AI operator documents honoring these tokens, so treat them as a ' +
-                'legal or ethical signal rather than an enforcement mechanism.',
-        });
-    }
-    if (has('notranslate')) {
-        findings.push({
-            status: 'pass',
-            message: 'notranslate declared — assistants should not offer a translated version',
-        });
-    }
-    /* ── The Google-Extended misconception ───────────────────────────────── */
-    await reportGoogleExtendedMismatch(ctx, tokens, findings);
-    if (findings.every((f) => f.status === 'pass')) {
-        findings.push({
-            status: 'pass',
-            message: 'No directive restricts how AI assistants may use this page',
-        });
-    }
-    return buildResult(meta, score, findings, start);
-}
-/**
- * Flag the most common mistaken belief about AI opt-outs: that disallowing
- * `Google-Extended` removes a site from AI Overviews. It does not, and a site
- * that made that assumption is opted out of Gemini training while remaining
- * fully quotable in the surface it was trying to leave.
- */
-async function reportGoogleExtendedMismatch(ctx, tokens, findings) {
-    const robots = await ctx.fetch(`${ctx.url}/robots.txt`);
-    if (!robots.ok)
-        return;
-    const { parseRobotsTxt, toBotEntries, intentBlocked } = await import('./robots-parser.js');
-    const blocked = intentBlocked(toBotEntries(parseRobotsTxt(robots.body)), 'Google-Extended');
-    if (!blocked)
-        return;
-    const restricted = tokens.has('nosnippet') || tokens.has('noindex');
-    if (restricted)
-        return;
-    findings.push({
-        status: 'warn',
-        message: 'Google-Extended is disallowed, but this page is still eligible for AI Overviews',
-        detail: 'robots.txt disallows Google-Extended; no nosnippet or max-snippet directive is set on the page.',
-        hint: 'Google-Extended governs Gemini training and grounding in Gemini Apps and Vertex AI. AI Overviews and AI Mode ' +
-            'follow Googlebot and the snippet directives instead. If the intent was to stay out of AI Overviews, use ' +
-            'nosnippet or max-snippet. If the intent was to opt out of training, this is already correct.',
-        learnMoreUrl: guideUrl(meta.id, 'google-extended-mismatch'),
-    });
-}
-//# sourceMappingURL=ai-directives.js.map

package/dist/checks/ai-directives.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ai-directives.js","sourceRoot":"","sources":["../../src/checks/ai-directives.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAc;IAC7B,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,0EAA0E;IACvF,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAYF;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAA+B;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,MAAc,EAAQ,EAAE;QACtD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,oDAAoD;YACpD,MAAM,OAAO,GACX,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC;gBAClF,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjC,CAAC,CAAC,GAAG,CAAC;YACV,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC3D,IAAI,OAAO,EAAE,CAAC;gBACZ,uEAAuE;gBACvE,sEAAsE;gBACtE,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,UAAU,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC/D,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBAC1B,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS;YACX,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,CAAC,OAAO,EAAE,eAAe,IAAI,IAAI,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAEnG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC,CAAC;IAC5F,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,KAAK,CAAC,GAAiB;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAG,GAAG,CAAC;IAEhB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uDAAuD;YAChE,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAElD,2EAA2E;IAE3E,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,4BAA4B;YACrC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,EACF,6GAA6G;gBAC7G,gGAAgG;YAClG,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAEpE,4EAA4E;IAE5E,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mEAAmE;YAC5E,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,EACF,8GAA8G;gBAC9G,uGAAuG;YACzG,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC;SAC7C,CAAC,CAAC;QACH,KAAK,IAAI,EAAE,CAAC;IACd,CAAC;SAAM,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACpD,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,gDAAgD;gBACzD,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1B,IAAI,EAAE,6FAA6F;gBACnG,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC;aAC7C,CAAC,CAAC;YACH,KAAK,IAAI,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC1C,OAAO,EAAE,eAAe,UAAU,oDAAoD;gBACtF,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1B,GAAG,CAAC,UAAU,GAAG,GAAG;oBAClB,CAAC,CAAC;wBACE,IAAI,EAAE,4GAA4G;wBAClH,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC;qBAC/C;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,4EAA4E;IAE5E,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,+DAA+D;YACxE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,EACF,+GAA+G;gBAC/G,6FAA6F;YAC/F,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC;SAC7C,CAAC,CAAC;QACH,KAAK,IAAI,EAAE,CAAC;IACd,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mEAAmE;YAC5E,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,yFAAyF;YAC/F,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAC;QACH,KAAK,IAAI,EAAE,CAAC;IACd,CAAC;IAED,4EAA4E;IAE5E,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,8CAA8C;YACvD,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,iCAAiC;YAC/D,IAAI,EAAE,yJAAyJ;YAC/J,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC;SACvD,CAAC,CAAC;QACH,KAAK,IAAI,EAAE,CAAC;IACd,CAAC;SAAM,IAAI,aAAa,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,4EAA4E;SAC5G,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,mFAAmF;YAC5F,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,yDAAyD;YAC/D,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC;SAChD,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,4EAA4E;IAE5E,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW;YAC7C,MAAM,EACJ,+GAA+G;gBAC/G,+DAA+D;SAClE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E,MAAM,4BAA4B,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE1D,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,4DAA4D;SACtE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,4BAA4B,CACzC,GAAiB,EACjB,MAAmB,EACnB,QAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO;IAEvB,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC5F,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,UAAU;QAAE,OAAO;IAEvB,QAAQ,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,iFAAiF;QAC1F,MAAM,EAAE,iGAAiG;QACzG,IAAI,EACF,+GAA+G;YAC/G,0GAA0G;YAC1G,8FAA8F;QAChG,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,0BAA0B,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC"}

package/dist/checks/api-discovery.d.ts

@@ -1,26 +0,0 @@
-import type { CheckContext, CheckResult, CheckMeta } from '../types.js';
-/**
- * "api-discovery" — can an agent find, and read, this site's API description?
- *
- * The check used to probe exactly one path, `/.well-known/openapi.json`. That
- * path is a folk convention: it is not in the IANA well-known registry, and the
- * OpenAPI specification itself recommends the file be named `openapi.json` or
- * `openapi.yaml` without prescribing a location. So a site doing everything
- * right at `/openapi.json` scored zero.
- *
- * There *is* a registered mechanism: RFC 9727 defines `/.well-known/api-catalog`,
- * a linkset of the APIs a publisher offers, each entry pointing at a
- * machine-readable description via `service-desc` and human documentation via
- * `service-doc` (RFC 8631). Adoption is tiny — a handful of publishers — but it
- * is the only standards-track answer, and checking it costs one request.
- *
- * The check therefore walks discovery in order of authority: the registered
- * catalog, then RFC 8631 link relations in headers and HTML, then the
- * conventional file locations. Whatever it finds, it validates the same way, so
- * broadening discovery can only raise a score, never lower one.
- */
-export declare const meta: CheckMeta;
-/** Pull `service-desc` hrefs out of an RFC 9264 linkset document. */
-export declare function serviceDescsFromLinkset(body: string): string[];
-export default function check(ctx: CheckContext): Promise<CheckResult>;
-//# sourceMappingURL=api-discovery.d.ts.map

package/dist/checks/api-discovery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-discovery.d.ts","sourceRoot":"","sources":["../../src/checks/api-discovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAOhG;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,IAAI,EAAE,SAMlB,CAAC;AAyEF,qEAAqE;AACrE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAW9D;AAWD,wBAA8B,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAuD3E"}