gazetta 0.6.0 → 0.8.0

package/dist/validation/validators/accessibility.js

@@ -0,0 +1,106 @@
+/**
+ * Accessibility validator (Validation Cut 3).
+ *
+ * Runs axe-core (https://github.com/dequelabs/axe-core) against the rendered
+ * HTML of each page. axe-core ships ~90 rules covering WCAG 2.1 / 2.2 A + AA;
+ * we run a sensible default subset (some rules are too noisy on dynamic
+ * content) and surface violations as `warn` at background, `warn` at
+ * pre-publish (operator promotes to error via `publishAudit.strict` in Cut 4).
+ *
+ * jsdom provides the DOM for axe-core to run against. Per-page cost
+ * (jsdom parse + axe run) is ~50-100ms at envelope. Acceptable for the
+ * background scanner; pre-publish gate is opt-in for heavy validators.
+ *
+ * Rendered output is supplied via `input.renderedOutput` (Cut 3 contract).
+ *
+ * # SOLID lenses
+ *
+ * - SRP: this validator owns the a11y check. Render-for-analysis produces
+ *   the bytes; jsdom + axe analyze; the validator translates findings.
+ * - DIP: depends on `RenderedOutputAccess` interface, not the renderer.
+ * - OCP: rule subset is configurable; new operator-tunable rule sets ship
+ *   via per-site config without changing this file.
+ */
+import axe from 'axe-core';
+import { JSDOM } from 'jsdom';
+/**
+ * Rules we exclude by default. Each is a documented call:
+ *   - `region` — fires on every page without a `<main>` / landmark.
+ *     Many Gazetta sites use simple landing pages where this is noise.
+ *   - `color-contrast` — requires computed styles, which jsdom doesn't
+ *     compute reliably. False positives outweigh value in the background
+ *     scanner. Operators wanting it run lighthouse at pre-publish (Cut 4).
+ *   - `landmark-one-main` — same rationale as `region`.
+ *   - `page-has-heading-one` — landing pages legitimately omit h1
+ *     (the page name is in the nav / breadcrumb).
+ */
+const DEFAULT_DISABLED_RULES = ['region', 'color-contrast', 'landmark-one-main', 'page-has-heading-one'];
+export const accessibility = {
+    source: 'gazetta',
+    name: 'accessibility',
+    stages: ['background', 'pre-publish', 'cli'],
+    defaultSeverity() {
+        // axe findings are warns at every Gazetta stage; operator promotes to
+        // error via publishAudit.strict at pre-publish (Cut 4).
+        return 'warn';
+    },
+    async validate(input) {
+        const { scope, renderedOutput } = input;
+        if (scope.kind !== 'background' && scope.kind !== 'pre-publish')
+            return [];
+        if (!renderedOutput)
+            return [];
+        const items = scope.kind === 'background' ? [scope.item] : [...scope.items];
+        const issues = [];
+        for (const item of items) {
+            if (item.kind !== 'page')
+                continue; // fragments are partials, not full HTML
+            const html = await renderedOutput.htmlFor(item);
+            if (!html)
+                continue;
+            const violations = await runAxe(html);
+            for (const v of violations) {
+                for (const node of v.nodes) {
+                    issues.push({
+                        validator: 'accessibility',
+                        severity: 'warn',
+                        message: `${v.id}: ${v.help} — ${node.target.join(' > ')} (${v.helpUrl})`,
+                        itemPath: item.itemPath,
+                    });
+                }
+            }
+        }
+        return issues;
+    },
+};
+/**
+ * Run axe-core against `html` in a fresh jsdom. Returns the list of
+ * violations found. Falls back to an empty list on any error — we don't
+ * want a parse failure to block the entire scan.
+ */
+async function runAxe(html) {
+    let dom;
+    try {
+        dom = new JSDOM(html, { runScripts: 'outside-only' });
+    }
+    catch {
+        return [];
+    }
+    try {
+        // Inject axe-core into the jsdom window context. axe.source is the
+        // bundled JS string; eval'ing it in the window installs `window.axe`.
+        dom.window.eval(axe.source);
+        const win = dom.window;
+        const results = await win.axe.run(dom.window.document, {
+            rules: Object.fromEntries(DEFAULT_DISABLED_RULES.map(id => [id, { enabled: false }])),
+        });
+        return results.violations ?? [];
+    }
+    catch {
+        return [];
+    }
+    finally {
+        dom.window.close();
+    }
+}
+//# sourceMappingURL=accessibility.js.map

package/dist/validation/validators/accessibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessibility.js","sourceRoot":"","sources":["../../../src/validation/validators/accessibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAG7B;;;;;;;;;;GAUG;AACH,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAA;AAoBxG,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,eAAe;IACrB,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAU;IAErD,eAAe;QACb,sEAAsE;QACtE,wDAAwD;QACxD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAqB;QAClC,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,KAAK,CAAA;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,CAAA;QAC1E,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,CAAA;QAE9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QAC3E,MAAM,MAAM,GAAY,EAAE,CAAA;QAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAQ,CAAC,wCAAwC;YAC3E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC/C,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;YACrC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS,EAAE,eAAe;wBAC1B,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG;wBACzE,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA;AAED;;;;GAIG;AACH,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,GAAU,CAAA;IACd,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC;QACH,mEAAmE;QACnE,sEAAsE;QACtE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAE,GAAqC,CAAC,MAAM,CAAC,CAAA;QAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,MAA6F,CAAA;QAC7G,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;YACrD,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;SACtF,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,UAAU,IAAI,EAAE,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC"}

package/dist/validation/validators/aliasof-points-to-archived.d.ts

@@ -0,0 +1,40 @@
+/**
+ * P5: aliasOf-points-to-archived.
+ *
+ * Per `design-soft-delete.md` Q11 stage matrix: warn at background,
+ * pre-publish, and cli. Defensive against the Q3 G1 invariant being
+ * violated through direct manifest edits or external git pulls.
+ *
+ * The check: when an archive's `aliasOf` target IS itself archived,
+ * warn. Per Q3 G1 lock, archives' aliasOf must point at LIVE items.
+ * If it points at another archive, the renderer's one-hop resolution
+ * lands on an archived item → which then needs another hop → chain.
+ *
+ * # Difference from P3 (circular-alias)
+ *
+ *   - P3 detects CYCLES (A → B → A) and chains longer than 1 hop
+ *   - P5 detects "alias target is archived" specifically (one hop is
+ *     enough; the target being archived violates Q3 G1 even without
+ *     a chain)
+ *
+ * P3 catches the chain pathology; P5 catches the simpler "you aliased
+ * to an archive, but archives shouldn't be alias targets" mistake.
+ *
+ * # Why warn (not error)
+ *
+ * Per design Q11. The render-time behavior depends on whether the
+ * archived target itself has an aliasOf — if it does, the renderer
+ * follows the chain (which violates Q3 G1, surfacing as P3 error).
+ * If it doesn't (pure soft-delete), the renderer emits 410. Either
+ * way, the situation is recoverable — author rewrites the alias to
+ * a live target.
+ *
+ * # SOLID
+ *
+ *   - SRP: one check (aliasOf points at archive); doesn't overlap
+ *     with P2 (target missing) or P3 (chain).
+ *   - DIP: consumes Site; no extra I/O.
+ */
+import type { Validator } from '../types.js';
+export declare const aliasOfPointsToArchived: Validator;
+//# sourceMappingURL=aliasof-points-to-archived.d.ts.map

package/dist/validation/validators/aliasof-points-to-archived.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliasof-points-to-archived.d.ts","sourceRoot":"","sources":["../../../src/validation/validators/aliasof-points-to-archived.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,KAAK,EAAS,SAAS,EAAkB,MAAM,aAAa,CAAA;AAEnE,eAAO,MAAM,uBAAuB,EAAE,SAgCrC,CAAA"}

package/dist/validation/validators/aliasof-points-to-archived.js

@@ -0,0 +1,34 @@
+export const aliasOfPointsToArchived = {
+    source: 'gazetta',
+    name: 'aliasOf-points-to-archived',
+    stages: ['background', 'pre-publish', 'cli'],
+    defaultSeverity() {
+        return 'warn';
+    },
+    async validate(input) {
+        const { scope, site } = input;
+        if (scope.kind !== 'background')
+            return [];
+        const manifest = scope.manifest;
+        if (manifest.archived !== true)
+            return [];
+        if (typeof manifest.aliasOf !== 'string' || manifest.aliasOf.length === 0)
+            return [];
+        const targetName = manifest.aliasOf;
+        const targetMap = scope.item.kind === 'page' ? site.pages : site.fragments;
+        const target = targetMap.get(targetName);
+        if (!target)
+            return []; // P2 (dangling-alias) handles missing
+        if (target.archived !== true)
+            return []; // target is live — fine
+        return [
+            {
+                validator: 'aliasOf-points-to-archived',
+                severity: 'warn',
+                message: `${scope.item.kind} "${scope.item.name}" aliases "${targetName}", which is itself archived. Archives' aliasOf must point at live items (Q3 G1 invariant).`,
+                itemPath: scope.item.itemPath,
+            },
+        ];
+    },
+};
+//# sourceMappingURL=aliasof-points-to-archived.js.map

package/dist/validation/validators/aliasof-points-to-archived.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliasof-points-to-archived.js","sourceRoot":"","sources":["../../../src/validation/validators/aliasof-points-to-archived.ts"],"names":[],"mappings":"AAuCA,MAAM,CAAC,MAAM,uBAAuB,GAAc;IAChD,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,4BAA4B;IAClC,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAU;IAErD,eAAe;QACb,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAqB;QAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,CAAA;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAE/B,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QACzC,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAEpF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAA;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAA;QAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAA,CAAC,sCAAsC;QAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA,CAAC,wBAAwB;QAEhE,OAAO;YACL;gBACE,SAAS,EAAE,4BAA4B;gBACvC,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,cAAc,UAAU,4FAA4F;gBACnK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;aAC9B;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/validation/validators/alt-required.d.ts

@@ -0,0 +1,3 @@
+import type { Validator } from '../types.js';
+export declare const altRequired: Validator;
+//# sourceMappingURL=alt-required.d.ts.map

package/dist/validation/validators/alt-required.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alt-required.d.ts","sourceRoot":"","sources":["../../../src/validation/validators/alt-required.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAS,SAAS,EAAkB,MAAM,aAAa,CAAA;AAQnE,eAAO,MAAM,WAAW,EAAE,SAmDzB,CAAA"}

package/dist/validation/validators/alt-required.js

@@ -0,0 +1,118 @@
+/**
+ * altRequired validator (Validation Cut 3).
+ *
+ * Walks the page/fragment's template schema, finds fields declared as
+ * `embeddedAsset({ altRequired: true })`, then for each `_asset` reference
+ * in content at those paths verifies that the **resolved alt** is non-null.
+ *
+ * The resolved alt is the per-reference override (`{ _asset, alt }` — alt
+ * field on the reference itself); when absent, the asset's own default alt
+ * (read from `assets/{name}.asset.json`); when both null, the issue fires.
+ *
+ * Locked at `error` severity at every stage per design-validation.md:
+ * "altRequired is `error` at save-delta + background; warns are not promoted
+ *  (template author's intent IS the gate)."
+ *
+ * # SOLID lenses
+ *
+ *   - SRP: validator owns alt-resolution; the schema walker (`findAltRequiredPaths`)
+ *     is its own module, testable in isolation.
+ *   - DIP: depends on `loadTemplate` for the schema and `storage.exists` /
+ *     `storage.readFile` for asset metadata. No direct coupling to a renderer.
+ *   - OCP: adding new altRequired field shapes (e.g., a future `videoAsset`
+ *     with required captions) is one new walker case + one validator branch.
+ */
+import { z } from 'zod';
+import { loadTemplate } from '../../template-loader.js';
+import { findAltRequiredPaths, readAtPath } from '../alt-required-walker.js';
+export const altRequired = {
+    source: 'gazetta',
+    name: 'altRequired',
+    stages: ['save-delta', 'background', 'pre-publish', 'cli'],
+    defaultSeverity() {
+        return 'error';
+    },
+    async validate(input) {
+        const { scope, site, storage } = input;
+        if (scope.kind !== 'save-delta' && scope.kind !== 'background')
+            return [];
+        const manifest = scope.kind === 'save-delta' ? scope.after : scope.manifest;
+        const templatesDir = site.templatesDir;
+        if (!templatesDir)
+            return [];
+        if (!manifest.template)
+            return [];
+        const tpl = await tryLoadTemplate(storage, templatesDir, manifest.template);
+        if (!tpl)
+            return []; // template missing — referenced-template-exists handles it
+        const jsonSchema = await safeToJsonSchema(tpl.schema);
+        if (!jsonSchema)
+            return [];
+        const requiredPaths = findAltRequiredPaths(jsonSchema);
+        if (requiredPaths.length === 0)
+            return [];
+        const issues = [];
+        for (const path of requiredPaths) {
+            const refs = readAtPath(manifest.content, path);
+            for (const raw of refs) {
+                const ref = raw;
+                if (!ref || typeof ref !== 'object' || !ref._asset)
+                    continue;
+                if (typeof ref.alt === 'string' && ref.alt.length > 0)
+                    continue; // per-ref override satisfies
+                // Per-ref alt is empty string ('') means decorative — also valid.
+                if (ref.alt === '')
+                    continue;
+                const fallback = await readAssetAlt(storage, ref._asset);
+                if (typeof fallback === 'string')
+                    continue; // asset default satisfies
+                issues.push({
+                    validator: 'altRequired',
+                    severity: 'error',
+                    message: `Asset "${ref._asset}" referenced at "${path}" requires alt text. ` +
+                        `Set alt on the reference, or set the asset's default alt.`,
+                    itemPath: scope.item.itemPath,
+                    contentPath: path,
+                });
+            }
+        }
+        return issues;
+    },
+};
+async function tryLoadTemplate(storage, templatesDir, name) {
+    try {
+        return await loadTemplate(storage, templatesDir, name);
+    }
+    catch {
+        return null;
+    }
+}
+async function safeToJsonSchema(schema) {
+    try {
+        return z.toJSONSchema(schema);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Read the asset's default alt from `assets/{name}.asset.json`. Returns
+ * the alt string when set (including empty string for decorative); `null`
+ * when the asset doesn't exist OR its alt is null/undefined.
+ */
+async function readAssetAlt(storage, name) {
+    const path = `assets/${name}.asset.json`;
+    try {
+        if (!(await storage.exists(path)))
+            return null;
+        const raw = await storage.readFile(path);
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.alt === 'string')
+            return parsed.alt;
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=alt-required.js.map

package/dist/validation/validators/alt-required.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alt-required.js","sourceRoot":"","sources":["../../../src/validation/validators/alt-required.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAGvD,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAO5E,MAAM,CAAC,MAAM,WAAW,GAAc;IACpC,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,CAAU;IAEnE,eAAe;QACb,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAqB;QAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,CAAA;QACzE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAA;QAE3E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;QACtC,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAA;QAC5B,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAA;QAEjC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAC3E,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAA,CAAC,2DAA2D;QAE/E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAA;QAE1B,MAAM,aAAa,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;QACtD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAEzC,MAAM,MAAM,GAAY,EAAE,CAAA;QAC1B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,GAAkC,CAAA;gBAC9C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM;oBAAE,SAAQ;gBAC5D,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;oBAAE,SAAQ,CAAC,6BAA6B;gBAC7F,kEAAkE;gBAClE,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE;oBAAE,SAAQ;gBAC5B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;gBACxD,IAAI,OAAO,QAAQ,KAAK,QAAQ;oBAAE,SAAQ,CAAC,0BAA0B;gBACrE,MAAM,CAAC,IAAI,CAAC;oBACV,SAAS,EAAE,aAAa;oBACxB,QAAQ,EAAE,OAAO;oBACjB,OAAO,EACL,UAAU,GAAG,CAAC,MAAM,oBAAoB,IAAI,uBAAuB;wBACnE,2DAA2D;oBAC7D,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;oBAC7B,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA;AAED,KAAK,UAAU,eAAe,CAC5B,OAAwB,EACxB,YAAoB,EACpB,IAAY;IAEZ,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAAe;IAC7C,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,YAAY,CAAC,MAAmB,CAA4B,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,OAAwB,EAAE,IAAY;IAChE,MAAM,IAAI,GAAG,UAAU,IAAI,aAAa,CAAA;IACxC,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAC9C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAA;QACzD,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,GAAG,CAAA;QACrD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/validation/validators/archive-not-supported-on-target.d.ts

@@ -0,0 +1,3 @@
+import type { Validator } from '../types.js';
+export declare const archiveNotSupportedOnTarget: Validator;
+//# sourceMappingURL=archive-not-supported-on-target.d.ts.map

package/dist/validation/validators/archive-not-supported-on-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-not-supported-on-target.d.ts","sourceRoot":"","sources":["../../../src/validation/validators/archive-not-supported-on-target.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAS,SAAS,EAAkB,MAAM,aAAa,CAAA;AAEnE,eAAO,MAAM,2BAA2B,EAAE,SAqCzC,CAAA"}

package/dist/validation/validators/archive-not-supported-on-target.js

@@ -0,0 +1,38 @@
+import { canServeRedirects } from '../../runtime/runtime-capabilities.js';
+export const archiveNotSupportedOnTarget = {
+    source: 'gazetta',
+    name: 'archive-not-supported-on-target',
+    stages: ['background', 'pre-publish', 'cli'],
+    defaultSeverity() {
+        return 'warn';
+    },
+    async validate(input) {
+        const { scope, site } = input;
+        if (scope.kind !== 'background')
+            return [];
+        const manifest = scope.manifest;
+        // Only fires for archived items.
+        if (manifest.archived !== true)
+            return [];
+        // Consume the shared runtime-capabilities primitive so all four
+        // capability-gap surfaces (boot validate, author modal,
+        // validator scanner, pre-publish gate) report the same answer.
+        const targets = (site.manifest.targets ?? {});
+        const incompatibleTargets = [];
+        for (const [name, target] of Object.entries(targets)) {
+            if (!canServeRedirects(target))
+                incompatibleTargets.push(name);
+        }
+        if (incompatibleTargets.length === 0)
+            return [];
+        return [
+            {
+                validator: 'archive-not-supported-on-target',
+                severity: 'warn',
+                message: `${scope.item.kind} "${scope.item.name}" is archived. Targets without a worker won't emit 301/410 — visitors will see the host's natural 404 instead. Affected: ${incompatibleTargets.join(', ')}.`,
+                itemPath: scope.item.itemPath,
+            },
+        ];
+    },
+};
+//# sourceMappingURL=archive-not-supported-on-target.js.map

package/dist/validation/validators/archive-not-supported-on-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-not-supported-on-target.js","sourceRoot":"","sources":["../../../src/validation/validators/archive-not-supported-on-target.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAGzE,MAAM,CAAC,MAAM,2BAA2B,GAAc;IACpD,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,iCAAiC;IACvC,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAU;IAErD,eAAe;QACb,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAqB;QAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,CAAA;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAE/B,iCAAiC;QACjC,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QAEzC,gEAAgE;QAChE,wDAAwD;QACxD,+DAA+D;QAC/D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAiC,CAAA;QAC7E,MAAM,mBAAmB,GAAa,EAAE,CAAA;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChE,CAAC;QAED,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAE/C,OAAO;YACL;gBACE,SAAS,EAAE,iCAAiC;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,4HAA4H,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC5M,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;aAC9B;SACF,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/validation/validators/broken-links.d.ts

@@ -0,0 +1,3 @@
+import type { Validator } from '../types.js';
+export declare const brokenLinks: Validator;
+//# sourceMappingURL=broken-links.d.ts.map

package/dist/validation/validators/broken-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broken-links.d.ts","sourceRoot":"","sources":["../../../src/validation/validators/broken-links.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAS,SAAS,EAAkB,MAAM,aAAa,CAAA;AAGnE,eAAO,MAAM,WAAW,EAAE,SAyCzB,CAAA"}

package/dist/validation/validators/broken-links.js

@@ -0,0 +1,190 @@
+/**
+ * broken-links validator (Validation Cut 4).
+ *
+ * Walks the rendered HTML for `<a href>`, `<link href>`, and `<img src>` /
+ * `<source src>` etc., extracts internal-link references (paths that should
+ * resolve within this site), and verifies each one points to either:
+ *   - An existing page route in `site.pages` / `site.pageLocales`
+ *   - An existing asset path (`/assets/...`)
+ *
+ * External links (http(s)://other-domain.com) are NOT checked — they go
+ * stale independent of publish; a publish gate isn't the right place for
+ * URL-rot detection (that's a periodic background concern, deferred).
+ *
+ * Stages: background + pre-publish. Severity is uniformly `warn`;
+ * operators who want broken links to block publish opt into
+ * `publishAudit.strict` on the destination target — strict promotion
+ * in the publish-audit orchestrator turns warns into errors at the
+ * gate (matches the validator matrix in `design-validation.md`).
+ *
+ * Rendered output is supplied via `input.renderedOutput` (Cut 3 contract).
+ *
+ * # SOLID lenses
+ *
+ *   - SRP: this validator owns broken-link detection. Render-for-analysis
+ *     produces the bytes; this consumes them.
+ *   - DIP: depends on `RenderedOutputAccess` interface, not the renderer.
+ *   - OCP: external-link rot detection ships as a separate validator
+ *     (e.g., `link-rot`) when concrete demand surfaces; this one stays
+ *     focused on internal integrity.
+ */
+import { JSDOM } from 'jsdom';
+export const brokenLinks = {
+    source: 'gazetta',
+    name: 'broken-links',
+    stages: ['background', 'pre-publish', 'cli'],
+    defaultSeverity() {
+        // Per design-validation.md "Stage × validator matrix": broken-links
+        // is warn at every stage. Operators who want it to block publish
+        // opt into publishAudit.strict on the destination target — strict
+        // promotion in the publish-audit orchestrator turns warns into
+        // errors. The validator itself stays uniformly warn.
+        return 'warn';
+    },
+    async validate(input) {
+        const { scope, site, renderedOutput } = input;
+        if (scope.kind !== 'background' && scope.kind !== 'pre-publish')
+            return [];
+        if (!renderedOutput)
+            return [];
+        const items = scope.kind === 'background' ? [scope.item] : [...scope.items];
+        const issues = [];
+        for (const item of items) {
+            if (item.kind !== 'page')
+                continue; // fragments are partials; rendered output is per-page
+            const html = await renderedOutput.htmlFor(item);
+            if (!html)
+                continue;
+            const refs = extractInternalRefs(html);
+            for (const ref of refs) {
+                const reason = checkRef(ref, site);
+                if (reason) {
+                    issues.push({
+                        validator: 'broken-links',
+                        severity: 'warn',
+                        message: `${ref}: ${reason}`,
+                        itemPath: item.itemPath,
+                    });
+                }
+            }
+        }
+        return issues;
+    },
+};
+/**
+ * Extract internal href / src values from rendered HTML. "Internal" means:
+ *   - relative ("/about", "../foo", "page.html")
+ *   - same-origin absolute (rare in our render output, but just in case)
+ *
+ * External links (`http://`, `https://`, `mailto:`, etc.) and anchor-only
+ * links (`#section`) are filtered out.
+ */
+function extractInternalRefs(html) {
+    let dom;
+    try {
+        dom = new JSDOM(html);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    try {
+        const selectors = ['a[href]', 'link[href]', 'img[src]', 'source[src]', 'video[src]', 'audio[src]', 'script[src]'];
+        for (const sel of selectors) {
+            for (const el of dom.window.document.querySelectorAll(sel)) {
+                const attr = el.hasAttribute('href') ? 'href' : 'src';
+                const value = el.getAttribute(attr);
+                if (!value)
+                    continue;
+                if (isInternal(value))
+                    out.push(value);
+            }
+        }
+    }
+    finally {
+        dom.window.close();
+    }
+    return out;
+}
+function isInternal(value) {
+    // Anchor-only.
+    if (value.startsWith('#'))
+        return false;
+    // Pseudo-protocols.
+    if (/^(?:mailto|tel|javascript|data):/i.test(value))
+        return false;
+    // Absolute URL with scheme — external by definition.
+    if (/^[a-z][a-z0-9+.-]*:\/\//i.test(value))
+        return false;
+    // Protocol-relative URL — external.
+    if (value.startsWith('//'))
+        return false;
+    return true;
+}
+/**
+ * Check one internal reference against the site. Returns null when valid,
+ * a human-readable reason when broken.
+ */
+function checkRef(ref, site) {
+    // Strip query + hash before matching.
+    const cleanRef = ref.split('?')[0].split('#')[0];
+    if (!cleanRef)
+        return null; // pure ?query or #hash — can't validate
+    // Asset references: `/assets/{hash}.ext` shape — accept any well-formed
+    // assets/ path; the resolver guarantees these were emitted from real
+    // refs at render time, so a broken one means the renderer itself failed
+    // and we'd already have a different issue.
+    if (cleanRef.startsWith('/assets/') || cleanRef.startsWith('assets/'))
+        return null;
+    // Build the route lookup set from site.pages + locale variants.
+    const routes = new Set();
+    for (const page of site.pages.values()) {
+        if (page.route)
+            routes.add(normalizeRoute(page.route));
+    }
+    for (const entry of site.pageLocales.values()) {
+        for (const variant of entry.locales.values()) {
+            if (variant.route)
+                routes.add(normalizeRoute(variant.route));
+        }
+    }
+    // Exact match against a known route.
+    const target = normalizeRoute(cleanRef);
+    if (routes.has(target))
+        return null;
+    // Dynamic-route patterns like `/blog/:slug` — accept any path that matches
+    // the pattern's static prefix.
+    for (const route of routes) {
+        if (matchesDynamicRoute(target, route))
+            return null;
+    }
+    return `link does not match any page route or asset path`;
+}
+function normalizeRoute(path) {
+    if (!path.startsWith('/'))
+        path = '/' + path;
+    if (path.length > 1 && path.endsWith('/'))
+        path = path.slice(0, -1);
+    return path;
+}
+/**
+ * Test whether `target` (concrete path) could match `pattern` (with `:param`
+ * placeholders). Same length + every segment is either equal or pattern has
+ * `:` prefix.
+ */
+function matchesDynamicRoute(target, pattern) {
+    if (!pattern.includes(':'))
+        return false;
+    const ts = target.split('/').filter(Boolean);
+    const ps = pattern.split('/').filter(Boolean);
+    if (ts.length !== ps.length)
+        return false;
+    for (let i = 0; i < ps.length; i++) {
+        if (ps[i].startsWith(':'))
+            continue;
+        if (ps[i] !== ts[i])
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=broken-links.js.map

package/dist/validation/validators/broken-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broken-links.js","sourceRoot":"","sources":["../../../src/validation/validators/broken-links.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAI7B,MAAM,CAAC,MAAM,WAAW,GAAc;IACpC,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAU;IAErD,eAAe;QACb,oEAAoE;QACpE,iEAAiE;QACjE,kEAAkE;QAClE,+DAA+D;QAC/D,qDAAqD;QACrD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAqB;QAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,KAAK,CAAA;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,EAAE,CAAA;QAC1E,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,CAAA;QAE9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QAC3E,MAAM,MAAM,GAAY,EAAE,CAAA;QAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAQ,CAAC,sDAAsD;YACzF,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC/C,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;YACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBAClC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC;wBACV,SAAS,EAAE,cAAc;wBACzB,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,GAAG,GAAG,KAAK,MAAM,EAAE;wBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,GAAU,CAAA;IACd,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,CAAA;QACjH,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;gBACrD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;gBACnC,IAAI,CAAC,KAAK;oBAAE,SAAQ;gBACpB,IAAI,UAAU,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,eAAe;IACf,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACvC,oBAAoB;IACpB,IAAI,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACjE,qDAAqD;IACrD,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACxD,oCAAoC;IACpC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAU;IACvC,sCAAsC;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAA,CAAC,wCAAwC;IAEnE,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,2CAA2C;IAC3C,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAElF,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnC,2EAA2E;IAC3E,+BAA+B;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACrD,CAAC;IAED,OAAO,kDAAkD,CAAA;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,GAAG,GAAG,IAAI,CAAA;IAC5C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACnE,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAc,EAAE,OAAe;IAC1D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7C,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QACnC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;IACnC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/validation/validators/circular-alias.d.ts

@@ -0,0 +1,36 @@
+/**
+ * P3: circular-alias.
+ *
+ * Per `design-soft-delete.md` Q11 stage matrix: error at background,
+ * pre-publish, and cli (no save-delta — by Q3 G1 invariant the flatten
+ * cascade prevents chains-by-construction; this validator is defensive
+ * for cases where the invariant breaks via direct manifest edits).
+ *
+ * The check: walk the alias chain `archive A → aliasOf B → ...`. The
+ * Q3 G1 invariant says aliases never chain — every archive's aliasOf
+ * points at a LIVE item (or a missing one, which P2 surfaces). If the
+ * walk hits a chain longer than 1 hop OR loops back to itself, that's
+ * a violation of the invariant and gets flagged.
+ *
+ * # Why error
+ *
+ * Chains break the alias-aware renderer's assumption (one-hop resolution
+ * per design Q3 G1). Cycles cause infinite resolution loops. Both must
+ * block publish.
+ *
+ * # No save-delta stage
+ *
+ * The rename route's flatten cascade (Cut 6) maintains the invariant
+ * on every rename — chains can't be introduced through normal flow.
+ * Save-delta gating exists for direct manifest edits OR external git
+ * pulls that re-introduce a chain. The background scanner catches
+ * those once it next runs; the publish gate blocks at the next ship.
+ *
+ * # SOLID
+ *
+ *   - SRP: one check (chain detection); doesn't overlap with P2 or P5.
+ *   - DIP: consumes Site; no extra I/O.
+ */
+import type { Validator } from '../types.js';
+export declare const circularAlias: Validator;
+//# sourceMappingURL=circular-alias.d.ts.map

package/dist/validation/validators/circular-alias.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circular-alias.d.ts","sourceRoot":"","sources":["../../../src/validation/validators/circular-alias.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAS,SAAS,EAAkB,MAAM,aAAa,CAAA;AAInE,eAAO,MAAM,aAAa,EAAE,SA2C3B,CAAA"}