blume 2.0.3 → 2.1.1

package/dist/cli/{chunk-wrr3j9w9.js → chunk-e6atmn4h.js}

@@ -19,27 +19,42 @@ import {
   writeAgentReport,
   fixPrompt,
   launchInstalledAgent
-} from "./chunk-1d7ve1dm.js";
+} from "./chunk-42t4jxdx.js";
 import {
   routeSetFor,
   frontmatter_default,
+  isPatternPath,
+  patternDestination,
   gradeExternal,
   probeAll,
   applyBaseToAstroRedirects,
   deployPlatform
-} from "./chunk-pv29h0wf.js";
+} from "./chunk-ehweg4fr.js";
 import {
   normalizeBasePath,
   normalizePath,
   stripBasePath
-} from "./chunk-3em5wd2y.js";
+} from "./chunk-zccbjcj0.js";
 import {
   deployStaticDir,
   examplesRouteBase
-} from "./chunk-5m5nmvyq.js";
+} from "./chunk-gb420vvz.js";
+import {
+  parseColor,
+  composite,
+  contrastRatio,
+  MIN_TEXT_CONTRAST,
+  themeInk,
+  labelOn,
+  resolveAccent,
+  resolveAction
+} from "./chunk-cm89scdv.js";
 import {
   scanProject
-} from "./chunk-j85vccga.js";
+} from "./chunk-ncj7w596.js";
+import {
+  parseIgnoreFlag
+} from "./chunk-j134vrp2.js";
 
 // src/cli/commands/audit.ts
 import { defineCommand } from "citty";
@@ -116,7 +131,11 @@ var resolveHref = (pageUrl, href, origin, deployBase = "") => {
     if (origin && parsed.origin === origin) {
       const served = decodePath(parsed.pathname);
       if (!underBase(deployBase, served)) {
-        return { kind: "outside-base", path: normalizePath(served) };
+        return {
+          absolute: true,
+          kind: "outside-base",
+          path: normalizePath(served)
+        };
       }
       return {
         hash: parsed.hash.slice(1),
@@ -135,7 +154,11 @@ var resolveHref = (pageUrl, href, origin, deployBase = "") => {
   }
   const served = decodePath(resolved.pathname);
   if (target.startsWith("/") && !underBase(deployBase, served)) {
-    return { kind: "outside-base", path: normalizePath(served) };
+    return {
+      absolute: false,
+      kind: "outside-base",
+      path: normalizePath(served)
+    };
   }
   return {
     hash: resolved.hash.slice(1),
@@ -337,6 +360,105 @@ var contentChecks = {
   tier: "static"
 };
 
+// src/audit/checks/contrast.ts
+var MODES = ["light", "dark"];
+var fillPair = (key, fill, page, mode) => ({
+  fix: `Neither white nor dark text reaches ${MIN_TEXT_CONTRAST}:1 on this shade. Move \`${key}\`'s ${mode} shade lighter or darker.`,
+  key,
+  label: key === "theme.action" ? "The call-to-action label" : "Button labels on the accent",
+  surface: composite(fill, page),
+  text: parseColor(labelOn(fill, mode)) ?? fill
+});
+var accentPairs = (fill, page, mode) => [
+  {
+    fix: `${mode === "light" ? "Darken" : "Lighten"} \`theme.accent\`'s ${mode} shade (\`theme.accent: { light, dark }\`).`,
+    key: "theme.accent",
+    label: "Accent text on the page",
+    surface: page,
+    text: fill
+  },
+  fillPair("theme.accent", fill, page, mode)
+];
+var backgroundPairs = (page, mode) => {
+  const fix = `Pick a \`theme.background\` ${mode} color further from the text color.`;
+  return [
+    {
+      fix,
+      key: "theme.background",
+      label: "Body text on the page",
+      surface: page,
+      text: themeInk(mode, "foreground")
+    },
+    {
+      fix,
+      key: "theme.background",
+      label: "Secondary text on the page",
+      surface: page,
+      text: themeInk(mode, "mutedForeground")
+    }
+  ];
+};
+var modeColors = (theme, mode) => {
+  const unread = [];
+  const read = (color) => {
+    const parsed = parseColor(color.value);
+    if (!parsed) {
+      unread.push(color);
+    }
+    return parsed;
+  };
+  const custom = theme.background?.[mode];
+  const customPage = custom === undefined ? null : read({ key: "theme.background", value: custom });
+  if (custom !== undefined && !customPage) {
+    return { pairs: [], unread };
+  }
+  const page = customPage ?? themeInk(mode, "background");
+  const pairs = customPage ? backgroundPairs(customPage, mode) : [];
+  const accent = read({
+    key: "theme.accent",
+    value: resolveAccent(theme)[mode]
+  });
+  if (accent) {
+    pairs.push(...accentPairs(accent, page, mode));
+  }
+  const action = resolveAction(theme);
+  const actionFill = action && read({ key: "theme.action", value: action[mode] });
+  if (actionFill) {
+    pairs.push(fillPair("theme.action", actionFill, page, mode));
+  }
+  return { pairs, unread };
+};
+var contrastChecks = {
+  category: "accessibility",
+  run(context) {
+    const { theme } = context.project.config;
+    const site = {
+      file: context.project.context.configFile ?? undefined,
+      url: "/"
+    };
+    const found = [];
+    const reported = new Set;
+    for (const mode of MODES) {
+      const { pairs, unread } = modeColors(theme, mode);
+      for (const color of unread) {
+        const id = `${color.key}:${color.value}`;
+        if (!reported.has(id)) {
+          reported.add(id);
+          found.push(finding("BLUME_AUDIT_THEME_COLOR_UNCHECKED", site, `\`${color.key}\` is "${color.value}", which the audit can't read as a color, so its contrast went unchecked.`));
+        }
+      }
+      for (const pair of pairs) {
+        const ratio = contrastRatio(pair.text, pair.surface);
+        if (ratio < MIN_TEXT_CONTRAST) {
+          found.push(finding("BLUME_AUDIT_THEME_CONTRAST_LOW", site, `${pair.label} in ${mode} mode is ${ratio.toFixed(2)}:1, under the ${MIN_TEXT_CONTRAST}:1 WCAG AA asks of body text (\`${pair.key}\`).`, pair.fix));
+        }
+      }
+    }
+    return found;
+  },
+  tier: "static"
+};
+
 // src/audit/checks/dns-aid.ts
 var RR_SVCB = 64;
 var RR_HTTPS = 65;
@@ -495,6 +617,68 @@ var duplicateChecks = {
   tier: "static"
 };
 
+// src/audit/redirects.ts
+var pathOnly = (value) => {
+  const cut = value.search(/[?#]/u);
+  return cut === -1 ? value : value.slice(0, cut);
+};
+var resolveRedirects = (redirects, served) => {
+  const byFrom = new Map;
+  for (const redirect of redirects) {
+    byFrom.set(normalizePath(redirect.from), redirect);
+  }
+  const hopFrom = (path) => byFrom.get(path)?.to ?? patternDestination(redirects, path);
+  return redirects.map((redirect) => {
+    const from = normalizePath(redirect.from);
+    if (isPatternPath(redirect.from)) {
+      return { ...redirect, chain: [from], outcome: "pattern" };
+    }
+    const chain = [from];
+    const seen = new Set([from]);
+    let current = redirect.to;
+    for (;; ) {
+      if (/^https?:\/\//iu.test(current)) {
+        chain.push(current);
+        break;
+      }
+      const next = normalizePath(pathOnly(current));
+      if (seen.has(next)) {
+        chain.push(next);
+        return {
+          ...redirect,
+          chain,
+          outcome: "loop"
+        };
+      }
+      chain.push(next);
+      seen.add(next);
+      const hop = hopFrom(next);
+      if (hop === undefined) {
+        break;
+      }
+      current = hop;
+    }
+    const destination = chain.at(-1) ?? from;
+    const external = /^https?:\/\//iu.test(destination);
+    if (!(external || served(destination))) {
+      return { ...redirect, chain, outcome: "broken" };
+    }
+    return {
+      ...redirect,
+      chain,
+      outcome: chain.length > 2 ? "chain" : "ok"
+    };
+  });
+};
+var redirectAt = (redirects, path) => {
+  const exact = redirects.find((entry) => normalizePath(entry.from) === path);
+  if (exact) {
+    return exact;
+  }
+  const to = patternDestination(redirects, path);
+  return to === undefined ? undefined : { to };
+};
+
 // src/audit/checks/indexability.ts
 var parseCanonical = (canonical) => {
   try {
@@ -538,7 +722,7 @@ var canonicalChecks = (context, page) => {
   if (target === normalizePath(page.url)) {
     return found;
   }
-  const redirect = context.redirects.find((entry) => normalizePath(entry.from) === target);
+  const redirect = redirectAt(context.redirects, target);
   if (redirect) {
     found.push(finding("BLUME_AUDIT_CANONICAL_BAD_TARGET", pageSite(context, page, ["seo", "canonical"]), `Canonical points at ${target}, which is a redirect to ${redirect.to}.`));
   } else if (context.byUrl.has(target)) {
@@ -643,7 +827,7 @@ var hreflangChecks = (context, page) => {
       continue;
     }
     const target = context.byUrl.get(path);
-    const redirect = context.redirects.find((entry) => normalizePath(entry.from) === path);
+    const redirect = redirectAt(context.redirects, path);
     if (redirect) {
       found.push(finding("BLUME_AUDIT_HREFLANG_BAD_TARGET", pageSite(context, page), `hreflang="${alternate.lang}" points at ${path}, which redirects to ${redirect.to}.`));
     } else if (!target) {
@@ -758,7 +942,6 @@ var anchorResolves = (target, fragment) => {
     return target.ids.has(fragment);
   }
 };
-var redirectFrom = (context, path) => context.redirects.find((entry) => normalizePath(entry.from) === path);
 var linkChecks = {
   category: "links",
   run(context) {
@@ -793,6 +976,9 @@ var linkChecks = {
         return;
       }
       if (resolved.kind === "outside-base") {
+        if (resolved.absolute) {
+          return;
+        }
         if (link.content) {
           found.push(finding("BLUME_AUDIT_LINK_TO_BROKEN", pageSite(context, page), `Link to ${link.href} is missing deployment.base (${deployBase}), so the deployed site does not serve it.`));
         } else if (!brokenChrome.has(resolved.path)) {
@@ -811,7 +997,7 @@ var linkChecks = {
         found.push(finding("BLUME_AUDIT_INTERNAL_LINK_NOFOLLOW", pageSite(context, page), `Internal link to ${resolved.path} is rel="nofollow".`));
       }
       const { path } = resolved;
-      const redirect = redirectFrom(context, path);
+      const redirect = redirectAt(context.redirects, path);
       if (redirect) {
         if (link.content) {
           found.push(finding("BLUME_AUDIT_LINK_TO_REDIRECT", pageSite(context, page), `Link to ${path} goes through a redirect to ${redirect.to}.`));
@@ -838,7 +1024,7 @@ var linkChecks = {
       found.push(finding("BLUME_AUDIT_LINK_TO_BROKEN", { url: page.url }, `Navigation links to ${path}, which the build does not serve.`, "Fix the entry in your navigation config or meta file."));
     }
     for (const [path, page] of redirectedChrome) {
-      const redirect = redirectFrom(context, path);
+      const redirect = redirectAt(context.redirects, path);
       found.push(finding("BLUME_AUDIT_LINK_TO_REDIRECT", { url: page.url }, `Navigation links to ${path}, which redirects to ${redirect?.to}.`, "Point the navigation entry straight at the destination."));
     }
     for (const [key, page] of brokenChromeAnchors) {
@@ -846,7 +1032,10 @@ var linkChecks = {
     }
     const homeUrl = normalizeBasePath(context.project.config.basePath) || "/";
     for (const page of orphanPages(context.pages, context.graph, homeUrl)) {
-      found.push(finding("BLUME_AUDIT_ORPHAN_PAGE", pageSite(context, page), "No other page's body links here — it is reachable only from the sidebar."));
+      const fromNavigation = [
+        ...context.graph.chromeIn.get(page.url) ?? []
+      ].some((from) => from !== page.url);
+      found.push(finding("BLUME_AUDIT_ORPHAN_PAGE", pageSite(context, page), fromNavigation ? "No other page's body links here — it is reachable only from the sidebar." : "No page links here, from its body or from navigation, so readers and crawlers can't reach it."));
     }
     return found;
   },
@@ -962,6 +1151,33 @@ var servedPageChecks = (context, page, result, origin) => {
   }
   return found;
 };
+var liveRedirects = (context) => context.redirects.filter((redirect) => (redirect.outcome === "ok" || redirect.outcome === "chain") && !context.byUrl.has(normalizePath(redirect.from)));
+var liveRedirectCheck = (context, redirect, result, deployBase) => {
+  const from = normalizePath(redirect.from);
+  const site = {
+    file: context.project.context.configFile ?? undefined,
+    url: from
+  };
+  const landed = result.redirected && result.finalUrl ? normalizePath(stripBasePath(deployBase, decodePath(new URL(result.finalUrl).pathname))) : from;
+  if (landed === from) {
+    let answer = `could not be reached (${result.error ?? "no response"})`;
+    if (result.timedOut) {
+      answer = "did not respond in time";
+    } else if (result.status !== undefined) {
+      answer = `answered it with HTTP ${result.status} instead`;
+    }
+    const found = finding("BLUME_AUDIT_REDIRECT_NOT_SERVED", site, `${from} should redirect to ${redirect.to}, but the live site ${answer}.`);
+    return result.ok ? { ...found, severity: "warning" } : found;
+  }
+  const destination = redirect.chain.at(-1) ?? from;
+  if (/^https?:\/\//iu.test(destination) || landed === destination) {
+    return null;
+  }
+  return {
+    ...finding("BLUME_AUDIT_REDIRECT_NOT_SERVED", site, `${from} redirects to ${landed} on the live site, not to ${destination}.`),
+    severity: "warning"
+  };
+};
 var networkChecks = {
   category: "network",
   async run(context) {
@@ -974,7 +1190,16 @@ var networkChecks = {
     const targets = context.pages.map((page) => liveUrl(origin, page, deployBase));
     const robotsUrl = new URL(`${deployBase}/robots.txt`, origin).toString();
     const sitemapUrl = new URL(`${deployBase}/sitemap.xml`, origin).toString();
-    const results = await probeAll([...targets, robotsUrl, sitemapUrl]);
+    const redirects = liveRedirects(context).map((redirect) => [
+      redirect,
+      new URL(`${deployBase}${redirect.from}`, origin).toString()
+    ]);
+    const results = await probeAll([
+      ...targets,
+      robotsUrl,
+      sitemapUrl,
+      ...redirects.map(([, url]) => url)
+    ]);
     for (const page of context.pages) {
       const result = results.get(liveUrl(origin, page, deployBase));
       if (!result) {
@@ -987,6 +1212,13 @@ var networkChecks = {
       }
       found.push(...servedPageChecks(context, page, result, origin));
     }
+    for (const [redirect, url] of redirects) {
+      const result = results.get(url);
+      const wrong = liveRedirectCheck(context, redirect, result, deployBase);
+      if (wrong) {
+        found.push(wrong);
+      }
+    }
     const robots = results.get(robotsUrl);
     if (context.project.config.seo.robots && robots && !robots.ok) {
       found.push(finding("BLUME_AUDIT_ROBOTS_NOT_ACCESSIBLE", { url: "/robots.txt" }, `robots.txt is not reachable at ${robotsUrl}.`));
@@ -1008,7 +1240,7 @@ var externalChecks = {
     for (const page of context.pages) {
       for (const link of page.links) {
         const resolved = resolveHref(page.url, link.href, origin, deployBase);
-        if (resolved.kind !== "external") {
+        if (resolved.kind !== "external" || context.ignore(resolved.url)) {
           continue;
         }
         const pages = linkers.get(resolved.url);
@@ -1135,7 +1367,7 @@ var redirectChecks = {
     for (const redirect of context.redirects) {
       const from = normalizePath(redirect.from);
       if (context.byUrl.has(from)) {
-        found.push(finding("BLUME_AUDIT_REDIRECT_SOURCE_IS_PAGE", { ...site, url: from }, `A redirect is configured from ${from}, but ${from} is also a real page — the redirect never fires.`));
+        found.push(finding("BLUME_AUDIT_REDIRECT_SOURCE_IS_PAGE", { ...site, url: from }, `A redirect is configured from ${from}, but ${from} is also a real page — readers get one or the other, depending on the host.`));
         continue;
       }
       if (redirect.outcome === "loop") {
@@ -1161,6 +1393,18 @@ var redirectChecks = {
 // src/audit/checks/robots.ts
 import robotsParser from "robots-parser";
 var MATCH_ORIGIN = "https://robots-audit.invalid";
+var USER_AGENT_LINE = /^\s*user-agent\s*:\s*(?<agent>[^#]*)/iu;
+var namedAgents = (raw) => {
+  const agents = new Map;
+  for (const line of raw.split(/\r?\n/u)) {
+    const agent = USER_AGENT_LINE.exec(line)?.groups?.agent?.trim() ?? "";
+    const key = agent.toLowerCase().split("/")[0]?.trim() ?? "";
+    if (key && key !== "*" && !agents.has(key)) {
+      agents.set(key, agent);
+    }
+  }
+  return [...agents.values()];
+};
 var robotsChecks = {
   category: "robots",
   run(context) {
@@ -1180,6 +1424,12 @@ var robotsChecks = {
     }
     const parser = robotsParser(`${MATCH_ORIGIN}/robots.txt`, robots.raw);
     const lines = robots.raw.split(/\r?\n/u);
+    const ruleAt = (url, agent) => {
+      const line = parser.getMatchingLineNumber(url, agent);
+      return { line, rule: line > 0 ? lines[line - 1]?.trim() : undefined };
+    };
+    const agents = namedAgents(robots.raw);
+    const blockedFor = new Map;
     for (const loc of context.sitemap?.urls ?? []) {
       let pathname;
       try {
@@ -1190,11 +1440,29 @@ var robotsChecks = {
       const path = normalizePath(pathname);
       const url = `${MATCH_ORIGIN}${pathname}`;
       if (parser.isDisallowed(url, "*")) {
-        const line = parser.getMatchingLineNumber(url, "*");
-        const rule = line > 0 ? lines[line - 1]?.trim() : undefined;
+        const { rule } = ruleAt(url, "*");
         found.push(finding("BLUME_AUDIT_ROBOTS_DISALLOWS_INDEXABLE", { file: robots.file, url: path }, `robots.txt "${rule ?? "Disallow"}" blocks ${path}, which sitemap.xml advertises.`));
+        continue;
+      }
+      for (const agent of agents) {
+        if (!parser.isDisallowed(url, agent)) {
+          continue;
+        }
+        const blocked = blockedFor.get(agent);
+        if (blocked) {
+          blocked.push(url);
+        } else {
+          blockedFor.set(agent, [url]);
+        }
       }
     }
+    for (const [agent, urls] of blockedFor) {
+      const [first = ""] = urls;
+      const { line, rule } = ruleAt(first, agent);
+      const path = normalizePath(new URL(first).pathname);
+      const more = urls.length > 1 ? ` and ${urls.length - 1} more` : "";
+      found.push(finding("BLUME_AUDIT_ROBOTS_BLOCKS_CRAWLER", { file: robots.file, line, url: "/robots.txt" }, `robots.txt "${rule ?? "Disallow"}" blocks ${agent} from ${path}${more}, which sitemap.xml advertises.`));
+    }
     return found;
   },
   tier: "static"
@@ -1238,7 +1506,7 @@ var checkListedUrl = (context, loc, origin, file, deployBase) => {
   const path = normalizePath(stripBasePath(deployBase, decodePath(parsed.pathname)));
   const page = context.byUrl.get(path);
   if (!page) {
-    const redirect = context.redirects.find((entry) => normalizePath(entry.from) === path);
+    const redirect = redirectAt(context.redirects, path);
     return [
       finding("BLUME_AUDIT_SITEMAP_BAD_URL", { file, url: loc }, redirect ? `sitemap.xml lists ${path}, which redirects to ${redirect.to}.` : `sitemap.xml lists ${path}, which the build does not serve.`)
     ];
@@ -1779,56 +2047,6 @@ var crawlStaticDir = async (options) => {
   };
 };
 
-// src/audit/redirects.ts
-var pathOnly = (value) => {
-  const cut = value.search(/[?#]/u);
-  return cut === -1 ? value : value.slice(0, cut);
-};
-var resolveRedirects = (redirects, served) => {
-  const byFrom = new Map;
-  for (const redirect of redirects) {
-    byFrom.set(normalizePath(redirect.from), redirect);
-  }
-  return redirects.map((redirect) => {
-    const from = normalizePath(redirect.from);
-    const chain = [from];
-    const seen = new Set([from]);
-    let current = redirect.to;
-    for (;; ) {
-      if (/^https?:\/\//iu.test(current)) {
-        chain.push(current);
-        break;
-      }
-      const next = normalizePath(pathOnly(current));
-      if (seen.has(next)) {
-        chain.push(next);
-        return {
-          ...redirect,
-          chain,
-          outcome: "loop"
-        };
-      }
-      chain.push(next);
-      seen.add(next);
-      const hop = byFrom.get(next);
-      if (!hop) {
-        break;
-      }
-      current = hop.to;
-    }
-    const destination = chain.at(-1) ?? from;
-    const external = /^https?:\/\//iu.test(destination);
-    if (!(external || served(destination))) {
-      return { ...redirect, chain, outcome: "broken" };
-    }
-    return {
-      ...redirect,
-      chain,
-      outcome: chain.length > 2 ? "chain" : "ok"
-    };
-  });
-};
-
 // src/audit/terms.ts
 var shortId = (id) => id.replace("BLUME_AUDIT_", "").toLowerCase();
 var checkTerms = () => [
@@ -1856,6 +2074,7 @@ var MODULES = [
   ogImageChecks,
   i18nChecks,
   assetChecks,
+  contrastChecks,
   sitemapChecks,
   robotsChecks,
   llmsChecks,
@@ -1915,6 +2134,7 @@ var runAudit = async (options) => {
     byUrl,
     files: crawl.files,
     graph: buildGraph(crawl.pages, siteOrigin(project.config.deployment.options.site), normalizeBasePath(project.config.deployment.options.base)),
+    ignore: options.ignore ?? (() => false),
     llms: crawl.llms,
     origin,
     pages: crawl.pages,
@@ -1996,6 +2216,11 @@ var auditCommand = defineCommand({
       description: "Exit non-zero at this severity or above: error | warning | info. Defaults to error.",
       type: "string"
     },
+    ignore: {
+      description: 'With --external, skip outbound links whose URL matches this glob (e.g. "https://example.com/**"). Repeat it for more; internal links are always checked.',
+      type: "string",
+      valueHint: "glob"
+    },
     json: {
       description: "Emit the report as JSON on stdout (for CI/editors).",
       type: "boolean"
@@ -2026,7 +2251,7 @@ var auditCommand = defineCommand({
     }
   },
   meta: commandMeta.audit,
-  async run({ args }) {
+  async run({ args, rawArgs }) {
     if (args["list-checks"]) {
       process.stdout.write(formatCatalog());
       return;
@@ -2055,11 +2280,13 @@ var auditCommand = defineCommand({
     const only = splitTerms(args.only);
     const skip = splitTerms(args.skip);
     rejectUnknownTerms([...only, ...skip]);
+    const ignore = parseIgnoreFlag(rawArgs);
     let result;
     try {
       const project = await scanProject(root, { mode: "build" });
       result = await runAudit({
         external: args.external,
+        ignore,
         only,
         origin: args.url,
         project,
@@ -2113,5 +2340,5 @@ export {
   shouldFail
 };
 
-//# debugId=E1B16241D184BD6E64756E2164756E21
-//# sourceMappingURL=chunk-wrr3j9w9.js.map
+//# debugId=E0347EF127A1E50964756E2164756E21
+//# sourceMappingURL=chunk-e6atmn4h.js.map