blume 2.1.0 → 2.1.2

package/dist/cli/chunk-150jk7km.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+
+// src/cli/build-failure.ts
+import { z } from "zod";
+var buildErrorSchema = z.looseObject({
+  errors: z.array(z.instanceof(Error)).optional(),
+  id: z.string().optional(),
+  loc: z.looseObject({
+    column: z.number().optional(),
+    file: z.string().optional(),
+    line: z.number().optional()
+  }).optional()
+});
+var blumeErrorSchema = z.looseObject({
+  diagnostic: z.object({
+    code: z.string(),
+    column: z.number().optional(),
+    docsUrl: z.string().optional(),
+    file: z.string().optional(),
+    line: z.number().optional(),
+    message: z.string(),
+    severity: z.enum(["error", "info", "warning"]),
+    suggestion: z.string().optional()
+  })
+});
+var failureDiagnostic = (error) => {
+  const raised = blumeErrorSchema.safeParse(error);
+  if (raised.success) {
+    return raised.data.diagnostic;
+  }
+  const parsed = buildErrorSchema.safeParse(error);
+  const { id, loc } = parsed.success ? parsed.data : {};
+  const name = error.name === "Error" ? "" : `${error.name}: `;
+  return {
+    code: "BLUME_BUILD_FAILED",
+    column: loc?.column,
+    file: loc?.file ?? id,
+    line: loc?.line,
+    message: `${name}${error.message}`,
+    severity: "error"
+  };
+};
+var astroBuildDiagnostics = (error) => {
+  const parsed = buildErrorSchema.safeParse(error);
+  const failures = parsed.success ? parsed.data.errors ?? [] : [];
+  return (failures.length > 0 ? failures : [error]).map(failureDiagnostic);
+};
+
+export { astroBuildDiagnostics };
+
+//# debugId=1B83F4391B57E32464756E2164756E21
+//# sourceMappingURL=chunk-150jk7km.js.map

package/dist/cli/chunk-150jk7km.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/build-failure.ts"],
+  "sourcesContent": [
+    "import { z } from \"zod\";\n\nimport type { Diagnostic } from \"../core/types.ts\";\n\n/**\n * The fields of an `astro build` rejection the report reads. Rolldown bundles\n * every plugin failure (an MDX compile error, say) into one error whose\n * `errors` holds each; a failure carries `loc` where the compiler pinned it,\n * or only `id`, the module that failed.\n */\nconst buildErrorSchema = z.looseObject({\n  errors: z.array(z.instanceof(Error)).optional(),\n  id: z.string().optional(),\n  loc: z\n    .looseObject({\n      column: z.number().optional(),\n      file: z.string().optional(),\n      line: z.number().optional(),\n    })\n    .optional(),\n});\n\n/**\n * The diagnostic a `BlumeError` thrown inside the build carries, such as a\n * failed hosted search sync in `astro:build:done`. The hook runs Blume's\n * source rather than the CLI bundle, so its error is another copy of the class\n * that the command's `instanceof BlumeError` doesn't recognize.\n */\nconst blumeErrorSchema = z.looseObject({\n  diagnostic: z.object({\n    code: z.string(),\n    column: z.number().optional(),\n    docsUrl: z.string().optional(),\n    file: z.string().optional(),\n    line: z.number().optional(),\n    message: z.string(),\n    severity: z.enum([\"error\", \"info\", \"warning\"]),\n    suggestion: z.string().optional(),\n  }),\n});\n\n/** One failure as a diagnostic at the file (and position) it names. */\nconst failureDiagnostic = (error: Error): Diagnostic => {\n  const raised = blumeErrorSchema.safeParse(error);\n  if (raised.success) {\n    return raised.data.diagnostic;\n  }\n  const parsed = buildErrorSchema.safeParse(error);\n  const { id, loc } = parsed.success ? parsed.data : {};\n  // A named error (`MDXError`, `CompilerError`) says which step failed.\n  const name = error.name === \"Error\" ? \"\" : `${error.name}: `;\n  return {\n    code: \"BLUME_BUILD_FAILED\",\n    column: loc?.column,\n    file: loc?.file ?? id,\n    line: loc?.line,\n    message: `${name}${error.message}`,\n    severity: \"error\",\n  };\n};\n\n/**\n * What `astro build` rejected with, as build diagnostics: one per failure\n * Rolldown collected, else the error itself. A page Blume's own checks pass\n * can still fail Astro's compile (MDX that doesn't parse) or render, and that\n * is a problem in the site, reported at its file, rather than an internal\n * error blaming Blume.\n */\nexport const astroBuildDiagnostics = (error: Error): Diagnostic[] => {\n  const parsed = buildErrorSchema.safeParse(error);\n  const failures = parsed.success ? (parsed.data.errors ?? []) : [];\n  return (failures.length > 0 ? failures : [error]).map(failureDiagnostic);\n};\n"
+  ],
+  "mappings": ";;;AAAA;AAUA,IAAM,mBAAmB,EAAE,YAAY;AAAA,EACrC,QAAQ,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,EAAE,SAAS;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EACxB,KAAK,EACF,YAAY;AAAA,IACX,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EACA,SAAS;AACd,CAAC;AAQD,IAAM,mBAAmB,EAAE,YAAY;AAAA,EACrC,YAAY,EAAE,OAAO;AAAA,IACnB,MAAM,EAAE,OAAO;AAAA,IACf,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,SAAS,EAAE,OAAO;AAAA,IAClB,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,SAAS,CAAC;AAAA,IAC7C,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,CAAC;AACH,CAAC;AAGD,IAAM,oBAAoB,CAAC,UAA6B;AAAA,EACtD,MAAM,SAAS,iBAAiB,UAAU,KAAK;AAAA,EAC/C,IAAI,OAAO,SAAS;AAAA,IAClB,OAAO,OAAO,KAAK;AAAA,EACrB;AAAA,EACA,MAAM,SAAS,iBAAiB,UAAU,KAAK;AAAA,EAC/C,QAAQ,IAAI,QAAQ,OAAO,UAAU,OAAO,OAAO,CAAC;AAAA,EAEpD,MAAM,OAAO,MAAM,SAAS,UAAU,KAAK,GAAG,MAAM;AAAA,EACpD,OAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK;AAAA,IACX,SAAS,GAAG,OAAO,MAAM;AAAA,IACzB,UAAU;AAAA,EACZ;AAAA;AAUK,IAAM,wBAAwB,CAAC,UAA+B;AAAA,EACnE,MAAM,SAAS,iBAAiB,UAAU,KAAK;AAAA,EAC/C,MAAM,WAAW,OAAO,UAAW,OAAO,KAAK,UAAU,CAAC,IAAK,CAAC;AAAA,EAChE,QAAQ,SAAS,SAAS,IAAI,WAAW,CAAC,KAAK,GAAG,IAAI,iBAAiB;AAAA;",
+  "debugId": "1B83F4391B57E32464756E2164756E21",
+  "names": []
+}

package/dist/cli/{chunk-y4ykbark.js → chunk-1f882900.js}

@@ -7,7 +7,7 @@ import {
   packageSrc,
   registry,
   findItem
-} from "./chunk-2f7n4qzt.js";
+} from "./chunk-dqhg54mr.js";
 
 // src/cli/commands/add.ts
 import { existsSync } from "node:fs";
@@ -96,4 +96,4 @@ export {
 };
 
 //# debugId=B640E77C94BA0A0364756E2164756E21
-//# sourceMappingURL=chunk-y4ykbark.js.map
+//# sourceMappingURL=chunk-1f882900.js.map

package/dist/cli/{chunk-5ffywsmb.js → chunk-297ajdcv.js}

@@ -2,7 +2,7 @@
 import {
   packageDirFrom,
   generateRuntime
-} from "./chunk-zf748avv.js";
+} from "./chunk-nbyvgnnm.js";
 import {
   loadEnvFiles,
   reportInternalError,
@@ -13,11 +13,11 @@ import {
 } from "./index.js";
 import {
   scanProject
-} from "./chunk-43zcf4gz.js";
+} from "./chunk-0pmb4tr4.js";
 import {
   serverFeatures,
   checkRequiredSecrets
-} from "./chunk-cy5bm0j0.js";
+} from "./chunk-ms9z66nz.js";
 
 // src/cli/yarn-pnp.ts
 import { existsSync } from "node:fs";
@@ -59,6 +59,9 @@ var prepareProject = async (options) => {
   let project;
   try {
     project = await scanProject(options.root, {
+      beforeSources: (config) => {
+        reportDiagnostics(checkRequiredSecrets(config), options.root);
+      },
       devServerUrl: options.devServerUrl,
       mode: options.mode,
       overrides: options.overrides,
@@ -112,11 +115,10 @@ var prepareProject = async (options) => {
   for (const warning of warnings) {
     logger.warn(warning);
   }
-  reportDiagnostics(checkRequiredSecrets(project.config), options.root);
   return project;
 };
 
 export { prepareProject };
 
-//# debugId=28CF8258A34C9DAE64756E2164756E21
-//# sourceMappingURL=chunk-5ffywsmb.js.map
+//# debugId=306EB25EAF65994264756E2164756E21
+//# sourceMappingURL=chunk-297ajdcv.js.map

package/dist/cli/{chunk-5ffywsmb.js.map → chunk-297ajdcv.js.map}

@@ -3,9 +3,9 @@
   "sources": ["../src/cli/yarn-pnp.ts", "../src/cli/prepare.ts"],
   "sourcesContent": [
     "import { existsSync } from \"node:fs\";\n\nimport { dirname, join } from \"pathe\";\n\nimport { packageDirFrom } from \"../astro/render-deps.ts\";\nimport type { Diagnostic } from \"../core/types.ts\";\n\n/** Whether `root` or one of its ancestors holds a Yarn Plug'n'Play manifest. */\nconst hasPnpManifest = (root: string): boolean => {\n  let dir = root;\n  while (true) {\n    if (existsSync(join(dir, \".pnp.cjs\")) || existsSync(join(dir, \".pnp.js\"))) {\n      return true;\n    }\n    const parent = dirname(dir);\n    if (parent === dir) {\n      return false;\n    }\n    dir = parent;\n  }\n};\n\n/**\n * The diagnostic for a project installed with Yarn Plug'n'Play, or null.\n *\n * Plug'n'Play installs no `node_modules`, and the Astro project Blume\n * generates in `.blume/` imports Astro and Blume's dependencies by name, which\n * only a `node_modules` tree resolves — so under PnP the build dies loading\n * `astro/config`, a failure that reads like a bug in Blume. Caught up front\n * instead: when the command runs under the PnP runtime (`process.versions.pnp`,\n * set by `yarn run`), or when a `.pnp.cjs` manifest sits in the project with no\n * `node_modules` copy of Blume beside it.\n */\nexport const yarnPnpDiagnostic = (\n  root: string,\n  pnpVersion: string | undefined = process.versions.pnp\n): Diagnostic | null => {\n  const underPnp =\n    pnpVersion !== undefined ||\n    (hasPnpManifest(root) && packageDirFrom(\"blume\", root) === null);\n  if (!underPnp) {\n    return null;\n  }\n  return {\n    code: \"BLUME_YARN_PNP\",\n    message:\n      \"Yarn Plug'n'Play isn't supported: the Astro project Blume generates in `.blume/` resolves Astro and Blume's dependencies from a `node_modules` folder, which Plug'n'Play doesn't create.\",\n    severity: \"error\",\n    suggestion:\n      \"Add `nodeLinker: node-modules` to `.yarnrc.yml`, run `yarn install`, then run this command again.\",\n  };\n};\n",
-    "import { generateRuntime } from \"../astro/generate.ts\";\nimport { BlumeError, hasErrors } from \"../core/diagnostics.ts\";\nimport { scanProject } from \"../core/project-graph.ts\";\nimport type {\n  BlumeProject,\n  BuildMode,\n  ConfigOverrides,\n} from \"../core/project-graph.ts\";\nimport { serverFeatures } from \"../core/server-features.ts\";\nimport { loadEnvFiles } from \"./env.ts\";\nimport { reportInternalError } from \"./internal-error.ts\";\nimport { logger, reportDiagnostics } from \"./log.ts\";\nimport { checkRequiredSecrets } from \"./required-secrets.ts\";\nimport { yarnPnpDiagnostic } from \"./yarn-pnp.ts\";\n\nexport interface PrepareOptions {\n  root: string;\n  mode?: BuildMode;\n  strict?: boolean;\n  /**\n   * Whether the command is strict only on request (`blume check --strict`),\n   * which changes how the abort message says to continue. Defaults to true in\n   * dev mode (`blume dev`, `blume sync`) and false otherwise, where strict is\n   * the default a user turns off with `--no-strict` (`blume build`).\n   */\n  strictOptIn?: boolean;\n  /** Local dev server URL, used as the `deployment.site` fallback (dev only). */\n  devServerUrl?: string;\n  /** Render drafts and fetch unpublished CMS content. */\n  preview?: boolean;\n  /** Force remote sources to re-fetch instead of serving the cached snapshot. */\n  refresh?: boolean;\n  /** CLI config overrides (e.g. `--output`, `--content-dir`). */\n  overrides?: ConfigOverrides;\n  /** Relocate the generated runtime (e.g. `.blume-verify` for `--isolated`). */\n  runtimeDir?: string;\n}\n\n/**\n * Scan the project, surface diagnostics, and (re)generate the `.blume` runtime.\n * In strict mode, any error aborts. Returns the resolved project.\n */\nexport const prepareProject = async (\n  options: PrepareOptions\n): Promise<BlumeProject> => {\n  // Under Yarn Plug'n'Play the generated runtime can't resolve anything; say\n  // so before scanning, instead of failing inside Astro's config load.\n  const pnp = yarnPnpDiagnostic(options.root);\n  if (pnp) {\n    reportDiagnostics([pnp], options.root);\n    process.exit(1);\n  }\n\n  // Load `.env` files from the project root before the scan: remote sources\n  // read their tokens from `process.env` during `scanProject`, and\n  // `loadEnvFiles` never overrides variables that are already set.\n  loadEnvFiles(options.root);\n\n  let project: BlumeProject;\n  try {\n    project = await scanProject(options.root, {\n      devServerUrl: options.devServerUrl,\n      mode: options.mode,\n      overrides: options.overrides,\n      preview: options.preview,\n      refresh: options.refresh,\n      runtimeDir: options.runtimeDir,\n    });\n  } catch (error) {\n    if (error instanceof BlumeError) {\n      reportDiagnostics([error.diagnostic], options.root);\n    } else {\n      reportInternalError(error);\n    }\n    process.exit(1);\n  }\n\n  // Hard gate: server-only features cannot ship in a static build.\n  if (\n    options.mode === \"build\" &&\n    project.config.deployment.options.output === \"static\"\n  ) {\n    const features = serverFeatures(project.config);\n    if (features.length > 0) {\n      // A host adapter already names the target, so only its\n      // `output: \"static\"` stands in the way; otherwise name one.\n      const { kind } = project.config.deployment;\n      reportDiagnostics(\n        [\n          {\n            code: \"BLUME_SERVER_FEATURE_REQUIRED\",\n            message: `${features.join(\", \")} ${features.length === 1 ? \"requires\" : \"require\"} server output, but this is a static build.`,\n            severity: \"error\",\n            suggestion:\n              kind === \"static\"\n                ? 'Set deployment to a host adapter from \"blume/deploy\" in blume.config.ts, e.g. `deployment: vercel()`.'\n                : `Drop \\`output: \"static\"\\` from \\`deployment: ${kind}()\\` in blume.config.ts to build for the server.`,\n          },\n        ],\n        options.root\n      );\n      process.exit(1);\n    }\n  }\n\n  const hadErrors = reportDiagnostics(project.diagnostics, options.root);\n  const dropped =\n    project.droppedPages > 0\n      ? `${project.droppedPages} page(s) failed frontmatter validation and were dropped from the site. `\n      : \"\";\n  const optIn = options.strictOptIn ?? options.mode === \"dev\";\n  if (hadErrors && options.strict) {\n    logger.error(\n      `Aborting due to errors. ${dropped}Fix the diagnostics above, or ${optIn ? \"drop --strict\" : \"pass --no-strict\"} to continue despite them.`\n    );\n    process.exit(1);\n  }\n  if (hasErrors(project.diagnostics) && !options.strict) {\n    logger.warn(\n      `Continuing despite errors. ${dropped}${optIn ? \"Pass --strict\" : \"Drop --no-strict\"} to fail instead.`\n    );\n  }\n\n  let warnings: string[];\n  try {\n    ({ warnings } = await generateRuntime(project));\n  } catch (error) {\n    // A config error the generator raised (an unplannable `components.ts`\n    // override, a missing font file) is the user's to fix, not an internal\n    // failure: report the diagnostic and stop, like a scan-time error.\n    if (error instanceof BlumeError) {\n      reportDiagnostics([error.diagnostic], options.root);\n      process.exit(1);\n    }\n    throw error;\n  }\n  for (const warning of warnings) {\n    logger.warn(warning);\n  }\n\n  // Fail-fast on missing runtime secrets: warn now, not at the first request.\n  reportDiagnostics(checkRequiredSecrets(project.config), options.root);\n\n  return project;\n};\n"
+    "import { generateRuntime } from \"../astro/generate.ts\";\nimport { BlumeError, hasErrors } from \"../core/diagnostics.ts\";\nimport { scanProject } from \"../core/project-graph.ts\";\nimport type {\n  BlumeProject,\n  BuildMode,\n  ConfigOverrides,\n} from \"../core/project-graph.ts\";\nimport { serverFeatures } from \"../core/server-features.ts\";\nimport { loadEnvFiles } from \"./env.ts\";\nimport { reportInternalError } from \"./internal-error.ts\";\nimport { logger, reportDiagnostics } from \"./log.ts\";\nimport { checkRequiredSecrets } from \"./required-secrets.ts\";\nimport { yarnPnpDiagnostic } from \"./yarn-pnp.ts\";\n\nexport interface PrepareOptions {\n  root: string;\n  mode?: BuildMode;\n  strict?: boolean;\n  /**\n   * Whether the command is strict only on request (`blume check --strict`),\n   * which changes how the abort message says to continue. Defaults to true in\n   * dev mode (`blume dev`, `blume sync`) and false otherwise, where strict is\n   * the default a user turns off with `--no-strict` (`blume build`).\n   */\n  strictOptIn?: boolean;\n  /** Local dev server URL, used as the `deployment.site` fallback (dev only). */\n  devServerUrl?: string;\n  /** Render drafts and fetch unpublished CMS content. */\n  preview?: boolean;\n  /** Force remote sources to re-fetch instead of serving the cached snapshot. */\n  refresh?: boolean;\n  /** CLI config overrides (e.g. `--output`, `--content-dir`). */\n  overrides?: ConfigOverrides;\n  /** Relocate the generated runtime (e.g. `.blume-verify` for `--isolated`). */\n  runtimeDir?: string;\n}\n\n/**\n * Scan the project, surface diagnostics, and (re)generate the `.blume` runtime.\n * In strict mode, any error aborts. Returns the resolved project.\n */\nexport const prepareProject = async (\n  options: PrepareOptions\n): Promise<BlumeProject> => {\n  // Under Yarn Plug'n'Play the generated runtime can't resolve anything; say\n  // so before scanning, instead of failing inside Astro's config load.\n  const pnp = yarnPnpDiagnostic(options.root);\n  if (pnp) {\n    reportDiagnostics([pnp], options.root);\n    process.exit(1);\n  }\n\n  // Load `.env` files from the project root before the scan: remote sources\n  // read their tokens from `process.env` during `scanProject`, and\n  // `loadEnvFiles` never overrides variables that are already set.\n  loadEnvFiles(options.root);\n\n  let project: BlumeProject;\n  try {\n    project = await scanProject(options.root, {\n      // Fail-fast on missing secrets: warn now, not at the first request, and\n      // before the sources fetch, so a source that can't authenticate on a\n      // fresh build still gets its variable named.\n      beforeSources: (config) => {\n        reportDiagnostics(checkRequiredSecrets(config), options.root);\n      },\n      devServerUrl: options.devServerUrl,\n      mode: options.mode,\n      overrides: options.overrides,\n      preview: options.preview,\n      refresh: options.refresh,\n      runtimeDir: options.runtimeDir,\n    });\n  } catch (error) {\n    if (error instanceof BlumeError) {\n      reportDiagnostics([error.diagnostic], options.root);\n    } else {\n      reportInternalError(error);\n    }\n    process.exit(1);\n  }\n\n  // Hard gate: server-only features cannot ship in a static build.\n  if (\n    options.mode === \"build\" &&\n    project.config.deployment.options.output === \"static\"\n  ) {\n    const features = serverFeatures(project.config);\n    if (features.length > 0) {\n      // A host adapter already names the target, so only its\n      // `output: \"static\"` stands in the way; otherwise name one.\n      const { kind } = project.config.deployment;\n      reportDiagnostics(\n        [\n          {\n            code: \"BLUME_SERVER_FEATURE_REQUIRED\",\n            message: `${features.join(\", \")} ${features.length === 1 ? \"requires\" : \"require\"} server output, but this is a static build.`,\n            severity: \"error\",\n            suggestion:\n              kind === \"static\"\n                ? 'Set deployment to a host adapter from \"blume/deploy\" in blume.config.ts, e.g. `deployment: vercel()`.'\n                : `Drop \\`output: \"static\"\\` from \\`deployment: ${kind}()\\` in blume.config.ts to build for the server.`,\n          },\n        ],\n        options.root\n      );\n      process.exit(1);\n    }\n  }\n\n  const hadErrors = reportDiagnostics(project.diagnostics, options.root);\n  const dropped =\n    project.droppedPages > 0\n      ? `${project.droppedPages} page(s) failed frontmatter validation and were dropped from the site. `\n      : \"\";\n  const optIn = options.strictOptIn ?? options.mode === \"dev\";\n  if (hadErrors && options.strict) {\n    logger.error(\n      `Aborting due to errors. ${dropped}Fix the diagnostics above, or ${optIn ? \"drop --strict\" : \"pass --no-strict\"} to continue despite them.`\n    );\n    process.exit(1);\n  }\n  if (hasErrors(project.diagnostics) && !options.strict) {\n    logger.warn(\n      `Continuing despite errors. ${dropped}${optIn ? \"Pass --strict\" : \"Drop --no-strict\"} to fail instead.`\n    );\n  }\n\n  let warnings: string[];\n  try {\n    ({ warnings } = await generateRuntime(project));\n  } catch (error) {\n    // A config error the generator raised (an unplannable `components.ts`\n    // override, a missing font file) is the user's to fix, not an internal\n    // failure: report the diagnostic and stop, like a scan-time error.\n    if (error instanceof BlumeError) {\n      reportDiagnostics([error.diagnostic], options.root);\n      process.exit(1);\n    }\n    throw error;\n  }\n  for (const warning of warnings) {\n    logger.warn(warning);\n  }\n\n  return project;\n};\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;AAAA;AAEA;AAMA,IAAM,iBAAiB,CAAC,SAA0B;AAAA,EAChD,IAAI,MAAM;AAAA,EACV,OAAO,MAAM;AAAA,IACX,IAAI,WAAW,KAAK,KAAK,UAAU,CAAC,KAAK,WAAW,KAAK,KAAK,SAAS,CAAC,GAAG;AAAA,MACzE,OAAO;AAAA,IACT;AAAA,IACA,MAAM,SAAS,QAAQ,GAAG;AAAA,IAC1B,IAAI,WAAW,KAAK;AAAA,MAClB,OAAO;AAAA,IACT;AAAA,IACA,MAAM;AAAA,EACR;AAAA;AAcK,IAAM,oBAAoB,CAC/B,MACA,aAAiC,QAAQ,SAAS,QAC5B;AAAA,EACtB,MAAM,WACJ,eAAe,aACd,eAAe,IAAI,KAAK,eAAe,SAAS,IAAI,MAAM;AAAA,EAC7D,IAAI,CAAC,UAAU;AAAA,IACb,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA,IACL,MAAM;AAAA,IACN,SACE;AAAA,IACF,UAAU;AAAA,IACV,YACE;AAAA,EACJ;AAAA;;;ACRK,IAAM,iBAAiB,OAC5B,YAC0B;AAAA,EAG1B,MAAM,MAAM,kBAAkB,QAAQ,IAAI;AAAA,EAC1C,IAAI,KAAK;AAAA,IACP,kBAAkB,CAAC,GAAG,GAAG,QAAQ,IAAI;AAAA,IACrC,QAAQ,KAAK,CAAC;AAAA,EAChB;AAAA,EAKA,aAAa,QAAQ,IAAI;AAAA,EAEzB,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,UAAU,MAAM,YAAY,QAAQ,MAAM;AAAA,MACxC,cAAc,QAAQ;AAAA,MACtB,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,SAAS,QAAQ;AAAA,MACjB,YAAY,QAAQ;AAAA,IACtB,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,IAAI,iBAAiB,YAAY;AAAA,MAC/B,kBAAkB,CAAC,MAAM,UAAU,GAAG,QAAQ,IAAI;AAAA,IACpD,EAAO;AAAA,MACL,oBAAoB,KAAK;AAAA;AAAA,IAE3B,QAAQ,KAAK,CAAC;AAAA;AAAA,EAIhB,IACE,QAAQ,SAAS,WACjB,QAAQ,OAAO,WAAW,QAAQ,WAAW,UAC7C;AAAA,IACA,MAAM,WAAW,eAAe,QAAQ,MAAM;AAAA,IAC9C,IAAI,SAAS,SAAS,GAAG;AAAA,MAGvB,QAAQ,SAAS,QAAQ,OAAO;AAAA,MAChC,kBACE;AAAA,QACE;AAAA,UACE,MAAM;AAAA,UACN,SAAS,GAAG,SAAS,KAAK,IAAI,KAAK,SAAS,WAAW,IAAI,aAAa;AAAA,UACxE,UAAU;AAAA,UACV,YACE,SAAS,WACL,0GACA,gDAAgD;AAAA,QACxD;AAAA,MACF,GACA,QAAQ,IACV;AAAA,MACA,QAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,kBAAkB,QAAQ,aAAa,QAAQ,IAAI;AAAA,EACrE,MAAM,UACJ,QAAQ,eAAe,IACnB,GAAG,QAAQ,wFACX;AAAA,EACN,MAAM,QAAQ,QAAQ,eAAe,QAAQ,SAAS;AAAA,EACtD,IAAI,aAAa,QAAQ,QAAQ;AAAA,IAC/B,OAAO,MACL,2BAA2B,wCAAwC,QAAQ,kBAAkB,8CAC/F;AAAA,IACA,QAAQ,KAAK,CAAC;AAAA,EAChB;AAAA,EACA,IAAI,UAAU,QAAQ,WAAW,KAAK,CAAC,QAAQ,QAAQ;AAAA,IACrD,OAAO,KACL,8BAA8B,UAAU,QAAQ,kBAAkB,qCACpE;AAAA,EACF;AAAA,EAEA,IAAI;AAAA,EACJ,IAAI;AAAA,KACD,EAAE,SAAS,IAAI,MAAM,gBAAgB,OAAO;AAAA,IAC7C,OAAO,OAAO;AAAA,IAId,IAAI,iBAAiB,YAAY;AAAA,MAC/B,kBAAkB,CAAC,MAAM,UAAU,GAAG,QAAQ,IAAI;AAAA,MAClD,QAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,IACA,MAAM;AAAA;AAAA,EAER,WAAW,WAAW,UAAU;AAAA,IAC9B,OAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAGA,kBAAkB,qBAAqB,QAAQ,MAAM,GAAG,QAAQ,IAAI;AAAA,EAEpE,OAAO;AAAA;",
-  "debugId": "28CF8258A34C9DAE64756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;AAAA;AAEA;AAMA,IAAM,iBAAiB,CAAC,SAA0B;AAAA,EAChD,IAAI,MAAM;AAAA,EACV,OAAO,MAAM;AAAA,IACX,IAAI,WAAW,KAAK,KAAK,UAAU,CAAC,KAAK,WAAW,KAAK,KAAK,SAAS,CAAC,GAAG;AAAA,MACzE,OAAO;AAAA,IACT;AAAA,IACA,MAAM,SAAS,QAAQ,GAAG;AAAA,IAC1B,IAAI,WAAW,KAAK;AAAA,MAClB,OAAO;AAAA,IACT;AAAA,IACA,MAAM;AAAA,EACR;AAAA;AAcK,IAAM,oBAAoB,CAC/B,MACA,aAAiC,QAAQ,SAAS,QAC5B;AAAA,EACtB,MAAM,WACJ,eAAe,aACd,eAAe,IAAI,KAAK,eAAe,SAAS,IAAI,MAAM;AAAA,EAC7D,IAAI,CAAC,UAAU;AAAA,IACb,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA,IACL,MAAM;AAAA,IACN,SACE;AAAA,IACF,UAAU;AAAA,IACV,YACE;AAAA,EACJ;AAAA;;;ACRK,IAAM,iBAAiB,OAC5B,YAC0B;AAAA,EAG1B,MAAM,MAAM,kBAAkB,QAAQ,IAAI;AAAA,EAC1C,IAAI,KAAK;AAAA,IACP,kBAAkB,CAAC,GAAG,GAAG,QAAQ,IAAI;AAAA,IACrC,QAAQ,KAAK,CAAC;AAAA,EAChB;AAAA,EAKA,aAAa,QAAQ,IAAI;AAAA,EAEzB,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,UAAU,MAAM,YAAY,QAAQ,MAAM;AAAA,MAIxC,eAAe,CAAC,WAAW;AAAA,QACzB,kBAAkB,qBAAqB,MAAM,GAAG,QAAQ,IAAI;AAAA;AAAA,MAE9D,cAAc,QAAQ;AAAA,MACtB,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,SAAS,QAAQ;AAAA,MACjB,SAAS,QAAQ;AAAA,MACjB,YAAY,QAAQ;AAAA,IACtB,CAAC;AAAA,IACD,OAAO,OAAO;AAAA,IACd,IAAI,iBAAiB,YAAY;AAAA,MAC/B,kBAAkB,CAAC,MAAM,UAAU,GAAG,QAAQ,IAAI;AAAA,IACpD,EAAO;AAAA,MACL,oBAAoB,KAAK;AAAA;AAAA,IAE3B,QAAQ,KAAK,CAAC;AAAA;AAAA,EAIhB,IACE,QAAQ,SAAS,WACjB,QAAQ,OAAO,WAAW,QAAQ,WAAW,UAC7C;AAAA,IACA,MAAM,WAAW,eAAe,QAAQ,MAAM;AAAA,IAC9C,IAAI,SAAS,SAAS,GAAG;AAAA,MAGvB,QAAQ,SAAS,QAAQ,OAAO;AAAA,MAChC,kBACE;AAAA,QACE;AAAA,UACE,MAAM;AAAA,UACN,SAAS,GAAG,SAAS,KAAK,IAAI,KAAK,SAAS,WAAW,IAAI,aAAa;AAAA,UACxE,UAAU;AAAA,UACV,YACE,SAAS,WACL,0GACA,gDAAgD;AAAA,QACxD;AAAA,MACF,GACA,QAAQ,IACV;AAAA,MACA,QAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,kBAAkB,QAAQ,aAAa,QAAQ,IAAI;AAAA,EACrE,MAAM,UACJ,QAAQ,eAAe,IACnB,GAAG,QAAQ,wFACX;AAAA,EACN,MAAM,QAAQ,QAAQ,eAAe,QAAQ,SAAS;AAAA,EACtD,IAAI,aAAa,QAAQ,QAAQ;AAAA,IAC/B,OAAO,MACL,2BAA2B,wCAAwC,QAAQ,kBAAkB,8CAC/F;AAAA,IACA,QAAQ,KAAK,CAAC;AAAA,EAChB;AAAA,EACA,IAAI,UAAU,QAAQ,WAAW,KAAK,CAAC,QAAQ,QAAQ;AAAA,IACrD,OAAO,KACL,8BAA8B,UAAU,QAAQ,kBAAkB,qCACpE;AAAA,EACF;AAAA,EAEA,IAAI;AAAA,EACJ,IAAI;AAAA,KACD,EAAE,SAAS,IAAI,MAAM,gBAAgB,OAAO;AAAA,IAC7C,OAAO,OAAO;AAAA,IAId,IAAI,iBAAiB,YAAY;AAAA,MAC/B,kBAAkB,CAAC,MAAM,UAAU,GAAG,QAAQ,IAAI;AAAA,MAClD,QAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,IACA,MAAM;AAAA;AAAA,EAER,WAAW,WAAW,UAAU;AAAA,IAC9B,OAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,OAAO;AAAA;",
+  "debugId": "306EB25EAF65994264756E2164756E21",
   "names": []
 }

package/dist/cli/{chunk-h2a48yhd.js → chunk-32khwcb6.js}

@@ -19,7 +19,7 @@ import {
   writeAgentReport,
   fixPrompt,
   launchInstalledAgent
-} from "./chunk-0gz36akr.js";
+} from "./chunk-dv2z0rzf.js";
 import {
   routeSetFor,
   frontmatter_default,
@@ -29,7 +29,7 @@ import {
   probeAll,
   applyBaseToAstroRedirects,
   deployPlatform
-} from "./chunk-xkz5xbtv.js";
+} from "./chunk-124fvmzq.js";
 import {
   normalizeBasePath,
   normalizePath,
@@ -38,7 +38,7 @@ import {
 import {
   deployStaticDir,
   examplesRouteBase
-} from "./chunk-4h8z9vv5.js";
+} from "./chunk-dpy8qdjf.js";
 import {
   parseColor,
   composite,
@@ -48,10 +48,13 @@ import {
   labelOn,
   resolveAccent,
   resolveAction
-} from "./chunk-cm89scdv.js";
+} from "./chunk-es8h0v3j.js";
 import {
   scanProject
-} from "./chunk-43zcf4gz.js";
+} from "./chunk-0pmb4tr4.js";
+import {
+  parseIgnoreFlag
+} from "./chunk-74wfhv79.js";
 
 // src/cli/commands/audit.ts
 import { defineCommand } from "citty";
@@ -128,7 +131,11 @@ var resolveHref = (pageUrl, href, origin, deployBase = "") => {
     if (origin && parsed.origin === origin) {
       const served = decodePath(parsed.pathname);
       if (!underBase(deployBase, served)) {
-        return { kind: "outside-base", path: normalizePath(served) };
+        return {
+          absolute: true,
+          kind: "outside-base",
+          path: normalizePath(served)
+        };
       }
       return {
         hash: parsed.hash.slice(1),
@@ -147,7 +154,11 @@ var resolveHref = (pageUrl, href, origin, deployBase = "") => {
   }
   const served = decodePath(resolved.pathname);
   if (target.startsWith("/") && !underBase(deployBase, served)) {
-    return { kind: "outside-base", path: normalizePath(served) };
+    return {
+      absolute: false,
+      kind: "outside-base",
+      path: normalizePath(served)
+    };
   }
   return {
     hash: resolved.hash.slice(1),
@@ -965,6 +976,9 @@ var linkChecks = {
         return;
       }
       if (resolved.kind === "outside-base") {
+        if (resolved.absolute) {
+          return;
+        }
         if (link.content) {
           found.push(finding("BLUME_AUDIT_LINK_TO_BROKEN", pageSite(context, page), `Link to ${link.href} is missing deployment.base (${deployBase}), so the deployed site does not serve it.`));
         } else if (!brokenChrome.has(resolved.path)) {
@@ -1018,7 +1032,10 @@ var linkChecks = {
     }
     const homeUrl = normalizeBasePath(context.project.config.basePath) || "/";
     for (const page of orphanPages(context.pages, context.graph, homeUrl)) {
-      found.push(finding("BLUME_AUDIT_ORPHAN_PAGE", pageSite(context, page), "No other page's body links here — it is reachable only from the sidebar."));
+      const fromNavigation = [
+        ...context.graph.chromeIn.get(page.url) ?? []
+      ].some((from) => from !== page.url);
+      found.push(finding("BLUME_AUDIT_ORPHAN_PAGE", pageSite(context, page), fromNavigation ? "No other page's body links here — it is reachable only from the sidebar." : "No page links here, from its body or from navigation, so readers and crawlers can't reach it."));
     }
     return found;
   },
@@ -1134,6 +1151,33 @@ var servedPageChecks = (context, page, result, origin) => {
   }
   return found;
 };
+var liveRedirects = (context) => context.redirects.filter((redirect) => (redirect.outcome === "ok" || redirect.outcome === "chain") && !context.byUrl.has(normalizePath(redirect.from)));
+var liveRedirectCheck = (context, redirect, result, deployBase) => {
+  const from = normalizePath(redirect.from);
+  const site = {
+    file: context.project.context.configFile ?? undefined,
+    url: from
+  };
+  const landed = result.redirected && result.finalUrl ? normalizePath(stripBasePath(deployBase, decodePath(new URL(result.finalUrl).pathname))) : from;
+  if (landed === from) {
+    let answer = `could not be reached (${result.error ?? "no response"})`;
+    if (result.timedOut) {
+      answer = "did not respond in time";
+    } else if (result.status !== undefined) {
+      answer = `answered it with HTTP ${result.status} instead`;
+    }
+    const found = finding("BLUME_AUDIT_REDIRECT_NOT_SERVED", site, `${from} should redirect to ${redirect.to}, but the live site ${answer}.`);
+    return result.ok ? { ...found, severity: "warning" } : found;
+  }
+  const destination = redirect.chain.at(-1) ?? from;
+  if (/^https?:\/\//iu.test(destination) || landed === destination) {
+    return null;
+  }
+  return {
+    ...finding("BLUME_AUDIT_REDIRECT_NOT_SERVED", site, `${from} redirects to ${landed} on the live site, not to ${destination}.`),
+    severity: "warning"
+  };
+};
 var networkChecks = {
   category: "network",
   async run(context) {
@@ -1146,7 +1190,16 @@ var networkChecks = {
     const targets = context.pages.map((page) => liveUrl(origin, page, deployBase));
     const robotsUrl = new URL(`${deployBase}/robots.txt`, origin).toString();
     const sitemapUrl = new URL(`${deployBase}/sitemap.xml`, origin).toString();
-    const results = await probeAll([...targets, robotsUrl, sitemapUrl]);
+    const redirects = liveRedirects(context).map((redirect) => [
+      redirect,
+      new URL(`${deployBase}${redirect.from}`, origin).toString()
+    ]);
+    const results = await probeAll([
+      ...targets,
+      robotsUrl,
+      sitemapUrl,
+      ...redirects.map(([, url]) => url)
+    ]);
     for (const page of context.pages) {
       const result = results.get(liveUrl(origin, page, deployBase));
       if (!result) {
@@ -1159,6 +1212,13 @@ var networkChecks = {
       }
       found.push(...servedPageChecks(context, page, result, origin));
     }
+    for (const [redirect, url] of redirects) {
+      const result = results.get(url);
+      const wrong = liveRedirectCheck(context, redirect, result, deployBase);
+      if (wrong) {
+        found.push(wrong);
+      }
+    }
     const robots = results.get(robotsUrl);
     if (context.project.config.seo.robots && robots && !robots.ok) {
       found.push(finding("BLUME_AUDIT_ROBOTS_NOT_ACCESSIBLE", { url: "/robots.txt" }, `robots.txt is not reachable at ${robotsUrl}.`));
@@ -1180,7 +1240,7 @@ var externalChecks = {
     for (const page of context.pages) {
       for (const link of page.links) {
         const resolved = resolveHref(page.url, link.href, origin, deployBase);
-        if (resolved.kind !== "external") {
+        if (resolved.kind !== "external" || context.ignore(resolved.url)) {
           continue;
         }
         const pages = linkers.get(resolved.url);
@@ -1307,7 +1367,7 @@ var redirectChecks = {
     for (const redirect of context.redirects) {
       const from = normalizePath(redirect.from);
       if (context.byUrl.has(from)) {
-        found.push(finding("BLUME_AUDIT_REDIRECT_SOURCE_IS_PAGE", { ...site, url: from }, `A redirect is configured from ${from}, but ${from} is also a real page — the redirect never fires.`));
+        found.push(finding("BLUME_AUDIT_REDIRECT_SOURCE_IS_PAGE", { ...site, url: from }, `A redirect is configured from ${from}, but ${from} is also a real page — readers get one or the other, depending on the host.`));
         continue;
       }
       if (redirect.outcome === "loop") {
@@ -1333,6 +1393,18 @@ var redirectChecks = {
 // src/audit/checks/robots.ts
 import robotsParser from "robots-parser";
 var MATCH_ORIGIN = "https://robots-audit.invalid";
+var USER_AGENT_LINE = /^\s*user-agent\s*:\s*(?<agent>[^#]*)/iu;
+var namedAgents = (raw) => {
+  const agents = new Map;
+  for (const line of raw.split(/\r?\n/u)) {
+    const agent = USER_AGENT_LINE.exec(line)?.groups?.agent?.trim() ?? "";
+    const key = agent.toLowerCase().split("/")[0]?.trim() ?? "";
+    if (key && key !== "*" && !agents.has(key)) {
+      agents.set(key, agent);
+    }
+  }
+  return [...agents.values()];
+};
 var robotsChecks = {
   category: "robots",
   run(context) {
@@ -1352,6 +1424,12 @@ var robotsChecks = {
     }
     const parser = robotsParser(`${MATCH_ORIGIN}/robots.txt`, robots.raw);
     const lines = robots.raw.split(/\r?\n/u);
+    const ruleAt = (url, agent) => {
+      const line = parser.getMatchingLineNumber(url, agent);
+      return { line, rule: line > 0 ? lines[line - 1]?.trim() : undefined };
+    };
+    const agents = namedAgents(robots.raw);
+    const blockedFor = new Map;
     for (const loc of context.sitemap?.urls ?? []) {
       let pathname;
       try {
@@ -1362,10 +1440,28 @@ var robotsChecks = {
       const path = normalizePath(pathname);
       const url = `${MATCH_ORIGIN}${pathname}`;
       if (parser.isDisallowed(url, "*")) {
-        const line = parser.getMatchingLineNumber(url, "*");
-        const rule = line > 0 ? lines[line - 1]?.trim() : undefined;
+        const { rule } = ruleAt(url, "*");
         found.push(finding("BLUME_AUDIT_ROBOTS_DISALLOWS_INDEXABLE", { file: robots.file, url: path }, `robots.txt "${rule ?? "Disallow"}" blocks ${path}, which sitemap.xml advertises.`));
+        continue;
       }
+      for (const agent of agents) {
+        if (!parser.isDisallowed(url, agent)) {
+          continue;
+        }
+        const blocked = blockedFor.get(agent);
+        if (blocked) {
+          blocked.push(url);
+        } else {
+          blockedFor.set(agent, [url]);
+        }
+      }
+    }
+    for (const [agent, urls] of blockedFor) {
+      const [first = ""] = urls;
+      const { line, rule } = ruleAt(first, agent);
+      const path = normalizePath(new URL(first).pathname);
+      const more = urls.length > 1 ? ` and ${urls.length - 1} more` : "";
+      found.push(finding("BLUME_AUDIT_ROBOTS_BLOCKS_CRAWLER", { file: robots.file, line, url: "/robots.txt" }, `robots.txt "${rule ?? "Disallow"}" blocks ${agent} from ${path}${more}, which sitemap.xml advertises.`));
     }
     return found;
   },
@@ -2038,6 +2134,7 @@ var runAudit = async (options) => {
     byUrl,
     files: crawl.files,
     graph: buildGraph(crawl.pages, siteOrigin(project.config.deployment.options.site), normalizeBasePath(project.config.deployment.options.base)),
+    ignore: options.ignore ?? (() => false),
     llms: crawl.llms,
     origin,
     pages: crawl.pages,
@@ -2119,6 +2216,11 @@ var auditCommand = defineCommand({
       description: "Exit non-zero at this severity or above: error | warning | info. Defaults to error.",
       type: "string"
     },
+    ignore: {
+      description: 'With --external, skip outbound links whose URL matches this glob (e.g. "https://example.com/**"). Repeat it for more; internal links are always checked.',
+      type: "string",
+      valueHint: "glob"
+    },
     json: {
       description: "Emit the report as JSON on stdout (for CI/editors).",
       type: "boolean"
@@ -2149,7 +2251,7 @@ var auditCommand = defineCommand({
     }
   },
   meta: commandMeta.audit,
-  async run({ args }) {
+  async run({ args, rawArgs }) {
     if (args["list-checks"]) {
       process.stdout.write(formatCatalog());
       return;
@@ -2178,11 +2280,13 @@ var auditCommand = defineCommand({
     const only = splitTerms(args.only);
     const skip = splitTerms(args.skip);
     rejectUnknownTerms([...only, ...skip]);
+    const ignore = parseIgnoreFlag(rawArgs);
     let result;
     try {
       const project = await scanProject(root, { mode: "build" });
       result = await runAudit({
         external: args.external,
+        ignore,
         only,
         origin: args.url,
         project,
@@ -2236,5 +2340,5 @@ export {
   shouldFail
 };
 
-//# debugId=5A0EAC80A1CBB9B964756E2164756E21
-//# sourceMappingURL=chunk-h2a48yhd.js.map
+//# debugId=E0347EF127A1E50964756E2164756E21
+//# sourceMappingURL=chunk-32khwcb6.js.map