laxy-verify 1.2.2 → 1.3.0

package/dist/config.js

@@ -1,255 +1,360 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConfigParseError = void 0;
-exports.fetchTeamThresholds = fetchTeamThresholds;
-exports.loadConfig = loadConfig;
-const fs = __importStar(require("node:fs"));
-const path = __importStar(require("node:path"));
-const yaml = __importStar(require("js-yaml"));
-const auth_js_1 = require("./auth.js");
-const DEFAULT_CONFIG = {
-    framework: "auto",
-    build_command: "",
-    dev_command: "",
-    package_manager: "auto",
-    port: 3000,
-    build_timeout: 300,
-    dev_timeout: 60,
-    lighthouse_runs: 1,
-    thresholds: {
-        performance: 70,
-        accessibility: 85,
-        seo: 80,
-        bestPractices: 80,
-    },
-    fail_on: "bronze",
-    crawl: false,
-    max_crawl_depth: 3,
-    max_crawl_pages: 10,
-    browsers: ["chromium"],
-};
-const VALID_FAIL_ON = ["unverified", "bronze", "silver", "gold"];
-class ConfigParseError extends Error {
-    constructor(msg) {
-        super(msg);
-        this.name = "ConfigParseError";
-    }
-}
-exports.ConfigParseError = ConfigParseError;
-function parseYaml(filePath) {
-    const content = fs.readFileSync(filePath, "utf-8");
-    const raw = yaml.load(content);
-    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-        throw new ConfigParseError("Invalid YAML structure in .laxy.yml");
-    }
-    const result = {};
-    if (typeof raw.framework === "string")
-        result.framework = raw.framework;
-    if (typeof raw.build_command === "string")
-        result.build_command = raw.build_command;
-    if (typeof raw.dev_command === "string")
-        result.dev_command = raw.dev_command;
-    if (typeof raw.package_manager === "string")
-        result.package_manager = raw.package_manager;
-    if (typeof raw.port === "number")
-        result.port = raw.port;
-    if (typeof raw.build_timeout === "number")
-        result.build_timeout = raw.build_timeout;
-    if (typeof raw.dev_timeout === "number")
-        result.dev_timeout = raw.dev_timeout;
-    if (typeof raw.lighthouse_runs === "number")
-        result.lighthouse_runs = raw.lighthouse_runs;
-    if (typeof raw.crawl === "boolean")
-        result.crawl = raw.crawl;
-    if (typeof raw.max_crawl_depth === "number")
-        result.max_crawl_depth = raw.max_crawl_depth;
-    if (typeof raw.max_crawl_pages === "number")
-        result.max_crawl_pages = raw.max_crawl_pages;
-    if (Array.isArray(raw.browsers)) {
-        const validBrowsers = ["chromium", "firefox", "webkit"];
-        const browsers = raw.browsers
-            .filter((b) => typeof b === "string" && validBrowsers.includes(b));
-        if (browsers.length > 0)
-            result.browsers = browsers;
-    }
-    if (typeof raw.fail_on === "string") {
-        const f = raw.fail_on;
-        if (!VALID_FAIL_ON.includes(f)) {
-            throw new ConfigParseError(`Invalid fail_on value: "${f}". Must be one of: ${VALID_FAIL_ON.join(", ")}`);
-        }
-        result.fail_on = f;
-    }
-    if (typeof raw.thresholds === "object" &&
-        raw.thresholds !== null &&
-        !Array.isArray(raw.thresholds)) {
-        const t = raw.thresholds;
-        const thr = {};
-        if (typeof t.performance === "number")
-            thr.performance = t.performance;
-        if (typeof t.accessibility === "number")
-            thr.accessibility = t.accessibility;
-        if (typeof t.seo === "number")
-            thr.seo = t.seo;
-        if (typeof t.best_practices === "number")
-            thr.bestPractices = t.best_practices;
-        result.thresholds = thr;
-    }
-    if (Array.isArray(raw.scenarios)) {
-        const scenarios = [];
-        for (const item of raw.scenarios) {
-            if (typeof item === "object" &&
-                item !== null &&
-                typeof item.name === "string" &&
-                Array.isArray(item.steps)) {
-                const rawScenario = item;
-                const steps = [];
-                for (const rawStep of rawScenario.steps) {
-                    if (typeof rawStep === "object" && rawStep !== null) {
-                        const s = rawStep;
-                        const step = {};
-                        if (typeof s.goto === "string")
-                            step.goto = s.goto;
-                        if (typeof s.fill === "string")
-                            step.fill = s.fill;
-                        if (typeof s.with === "string")
-                            step.with = s.with;
-                        if (typeof s.click === "string")
-                            step.click = s.click;
-                        if (typeof s.expect_visible === "string")
-                            step.expect_visible = s.expect_visible;
-                        if (typeof s.expect_text === "string")
-                            step.expect_text = s.expect_text;
-                        if (typeof s.wait === "number")
-                            step.wait = s.wait;
-                        steps.push(step);
-                    }
-                }
-                scenarios.push({ name: String(rawScenario.name), steps });
-            }
-        }
-        if (scenarios.length > 0) {
-            result.scenarios = scenarios;
-        }
-    }
-    return result;
-}
-/**
- * 로그인된 CLI 토큰으로 팀 공통 임계값을 서버에서 가져온다.
- * 토큰 없음 / 팀 없음 / 네트워크 오류 시 null 반환 (graceful degradation).
- */
-async function fetchTeamThresholds() {
-    const token = (0, auth_js_1.loadToken)();
-    if (!token)
-        return null;
-    try {
-        const res = await fetch(`${auth_js_1.LAXY_API_URL}/api/v1/team-thresholds`, {
-            headers: { Authorization: `Bearer ${token}` },
-            signal: AbortSignal.timeout(5000),
-        });
-        if (!res.ok)
-            return null;
-        const data = (await res.json());
-        return data.thresholds ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-function loadConfig(options) {
-    const configPath = options.configPath ?? path.join(options.dir, ".laxy.yml");
-    let base = {};
-    const hasLocalConfig = fs.existsSync(configPath);
-    if (hasLocalConfig) {
-        base = parseYaml(configPath);
-    }
-    // 팀 임계값: 로컬 .laxy.yml에 thresholds가 없을 때만 적용
-    const team = options.teamThresholds ?? null;
-    const teamThresholdFallback = (!hasLocalConfig || !base.thresholds) && team
-        ? {
-            performance: team.performance,
-            accessibility: team.accessibility,
-            seo: team.seo,
-            bestPractices: team.best_practices,
-        }
-        : {};
-    const teamFailOnFallback = (!hasLocalConfig || !base.fail_on) && team ? team.fail_on : undefined;
-    const config = {
-        ...DEFAULT_CONFIG,
-        framework: base.framework ?? DEFAULT_CONFIG.framework,
-        build_command: base.build_command ?? DEFAULT_CONFIG.build_command,
-        dev_command: base.dev_command ?? DEFAULT_CONFIG.dev_command,
-        package_manager: base.package_manager ?? DEFAULT_CONFIG.package_manager,
-        port: base.port ?? DEFAULT_CONFIG.port,
-        build_timeout: base.build_timeout ?? DEFAULT_CONFIG.build_timeout,
-        dev_timeout: base.dev_timeout ?? DEFAULT_CONFIG.dev_timeout,
-        lighthouse_runs: base.lighthouse_runs ?? DEFAULT_CONFIG.lighthouse_runs,
-        fail_on: base.fail_on ?? teamFailOnFallback ?? DEFAULT_CONFIG.fail_on,
-        scenarios: base.scenarios,
-        crawl: base.crawl ?? DEFAULT_CONFIG.crawl,
-        max_crawl_depth: base.max_crawl_depth ?? DEFAULT_CONFIG.max_crawl_depth,
-        max_crawl_pages: base.max_crawl_pages ?? DEFAULT_CONFIG.max_crawl_pages,
-        browsers: base.browsers ?? DEFAULT_CONFIG.browsers,
-    };
-    config.thresholds = {
-        ...DEFAULT_CONFIG.thresholds,
-        ...teamThresholdFallback,
-        ...(base.thresholds ?? {}),
-    };
-    // CLI flag overrides
-    if (options.cliFlags?.failOn !== undefined) {
-        if (!VALID_FAIL_ON.includes(options.cliFlags.failOn)) {
-            throw new ConfigParseError(`Invalid --fail-on value: "${options.cliFlags.failOn}". Must be one of: ${VALID_FAIL_ON.join(", ")}`);
-        }
-        config.fail_on = options.cliFlags.failOn;
-    }
-    // CI mode: apply CI defaults
-    const ciMode = options.ciMode;
-    if (ciMode) {
-        // dev_timeout: 90s in CI
-        if (!base.dev_timeout) {
-            config.dev_timeout = 90;
-        }
-        // lighthouse_runs: default to 3 in CI, but explicit config file value wins
-        if (!base.lighthouse_runs) {
-            config.lighthouse_runs = 3;
-        }
-    }
-    // Skip lighthouse: max grade is Bronze
-    if (options.cliFlags?.skipLighthouse) {
-        // Effectively disables Lighthouse grading
-    }
-    return { ...config, ciMode };
-}
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigParseError = void 0;
+exports.fetchTeamThresholds = fetchTeamThresholds;
+exports.loadConfig = loadConfig;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const yaml = __importStar(require("js-yaml"));
+const auth_js_1 = require("./auth.js");
+const DEFAULT_CONFIG = {
+    framework: "auto",
+    build_command: "",
+    dev_command: "",
+    package_manager: "auto",
+    port: 3000,
+    build_timeout: 300,
+    dev_timeout: 60,
+    lighthouse_runs: 3,
+    thresholds: {
+        performance: 70,
+        accessibility: 85,
+        seo: 80,
+        bestPractices: 80,
+    },
+    fail_on: "bronze",
+    crawl: false,
+    max_crawl_depth: 3,
+    max_crawl_pages: 10,
+    browsers: ["chromium"],
+    max_lighthouse_routes: 5,
+    visual_diff: {
+        pixelmatchThreshold: 0.1,
+        warnThreshold: 30,
+        rollbackThreshold: 60,
+        ignoreSelectors: [],
+        disableAnimations: true,
+    },
+    typecheck: false,
+    secret_scan: false,
+    secret_scan_ignore_paths: [],
+    bundle_size: false,
+    outdated_check: false,
+    a11y_deep: false,
+    seo_deep: false,
+    vitals_budget: false,
+};
+const VALID_FAIL_ON = ["unverified", "bronze", "silver", "gold"];
+class ConfigParseError extends Error {
+    constructor(msg) {
+        super(msg);
+        this.name = "ConfigParseError";
+    }
+}
+exports.ConfigParseError = ConfigParseError;
+function parseYaml(filePath) {
+    const content = fs.readFileSync(filePath, "utf-8");
+    const raw = yaml.load(content);
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+        throw new ConfigParseError("Invalid YAML structure in .laxy.yml");
+    }
+    const result = {};
+    if (typeof raw.framework === "string")
+        result.framework = raw.framework;
+    if (typeof raw.build_command === "string")
+        result.build_command = raw.build_command;
+    if (typeof raw.dev_command === "string")
+        result.dev_command = raw.dev_command;
+    if (typeof raw.package_manager === "string")
+        result.package_manager = raw.package_manager;
+    if (typeof raw.port === "number")
+        result.port = raw.port;
+    if (typeof raw.build_timeout === "number")
+        result.build_timeout = raw.build_timeout;
+    if (typeof raw.dev_timeout === "number")
+        result.dev_timeout = raw.dev_timeout;
+    if (typeof raw.lighthouse_runs === "number")
+        result.lighthouse_runs = raw.lighthouse_runs;
+    if (typeof raw.crawl === "boolean")
+        result.crawl = raw.crawl;
+    if (typeof raw.max_crawl_depth === "number")
+        result.max_crawl_depth = raw.max_crawl_depth;
+    if (typeof raw.max_crawl_pages === "number")
+        result.max_crawl_pages = raw.max_crawl_pages;
+    if (Array.isArray(raw.browsers)) {
+        const validBrowsers = ["chromium", "firefox", "webkit"];
+        const browsers = raw.browsers
+            .filter((b) => typeof b === "string" && validBrowsers.includes(b));
+        if (browsers.length > 0)
+            result.browsers = browsers;
+    }
+    if (Array.isArray(raw.lighthouse_routes)) {
+        const routes = raw.lighthouse_routes
+            .filter((r) => typeof r === "string" && r.startsWith("/"))
+            .slice(0, 20);
+        if (routes.length > 0)
+            result.lighthouse_routes = routes;
+    }
+    if (Array.isArray(raw.extra_routes)) {
+        const routes = raw.extra_routes
+            .filter((r) => typeof r === "string" && r.startsWith("/"))
+            .slice(0, 20);
+        if (routes.length > 0)
+            result.extra_routes = routes;
+    }
+    if (typeof raw.max_lighthouse_routes === "number") {
+        result.max_lighthouse_routes = Math.max(1, Math.min(20, raw.max_lighthouse_routes));
+    }
+    if (typeof raw.visual_diff === "object" &&
+        raw.visual_diff !== null &&
+        !Array.isArray(raw.visual_diff)) {
+        const vd = raw.visual_diff;
+        const visualDiff = {};
+        if (typeof vd.pixelmatch_threshold === "number") {
+            visualDiff.pixelmatchThreshold = Math.max(0, Math.min(1, vd.pixelmatch_threshold));
+        }
+        if (typeof vd.warn_threshold === "number") {
+            visualDiff.warnThreshold = Math.max(0, Math.min(100, vd.warn_threshold));
+        }
+        if (typeof vd.rollback_threshold === "number") {
+            visualDiff.rollbackThreshold = Math.max(0, Math.min(100, vd.rollback_threshold));
+        }
+        if (Array.isArray(vd.ignore_selectors)) {
+            visualDiff.ignoreSelectors = vd.ignore_selectors
+                .filter((selector) => typeof selector === "string" && selector.trim().length > 0)
+                .slice(0, 30);
+        }
+        if (typeof vd.disable_animations === "boolean") {
+            visualDiff.disableAnimations = vd.disable_animations;
+        }
+        result.visual_diff = visualDiff;
+    }
+    if (typeof raw.fail_on === "string") {
+        const f = raw.fail_on;
+        if (!VALID_FAIL_ON.includes(f)) {
+            throw new ConfigParseError(`Invalid fail_on value: "${f}". Must be one of: ${VALID_FAIL_ON.join(", ")}`);
+        }
+        result.fail_on = f;
+    }
+    if (typeof raw.thresholds === "object" &&
+        raw.thresholds !== null &&
+        !Array.isArray(raw.thresholds)) {
+        const t = raw.thresholds;
+        const thr = {};
+        if (typeof t.performance === "number")
+            thr.performance = t.performance;
+        if (typeof t.accessibility === "number")
+            thr.accessibility = t.accessibility;
+        if (typeof t.seo === "number")
+            thr.seo = t.seo;
+        if (typeof t.best_practices === "number")
+            thr.bestPractices = t.best_practices;
+        result.thresholds = thr;
+    }
+    if (Array.isArray(raw.scenarios)) {
+        const scenarios = [];
+        for (const item of raw.scenarios) {
+            if (typeof item === "object" &&
+                item !== null &&
+                typeof item.name === "string" &&
+                Array.isArray(item.steps)) {
+                const rawScenario = item;
+                const steps = [];
+                for (const rawStep of rawScenario.steps) {
+                    if (typeof rawStep === "object" && rawStep !== null) {
+                        const s = rawStep;
+                        const step = {};
+                        if (typeof s.goto === "string")
+                            step.goto = s.goto;
+                        if (typeof s.fill === "string")
+                            step.fill = s.fill;
+                        if (typeof s.with === "string")
+                            step.with = s.with;
+                        if (typeof s.click === "string")
+                            step.click = s.click;
+                        if (typeof s.expect_visible === "string")
+                            step.expect_visible = s.expect_visible;
+                        if (typeof s.expect_text === "string")
+                            step.expect_text = s.expect_text;
+                        if (typeof s.wait === "number")
+                            step.wait = s.wait;
+                        steps.push(step);
+                    }
+                }
+                scenarios.push({ name: String(rawScenario.name), steps });
+            }
+        }
+        if (scenarios.length > 0) {
+            result.scenarios = scenarios;
+        }
+    }
+    if (typeof raw.typecheck === "boolean")
+        result.typecheck = raw.typecheck;
+    if (typeof raw.secret_scan === "boolean")
+        result.secret_scan = raw.secret_scan;
+    if (Array.isArray(raw.secret_scan_ignore_paths)) {
+        result.secret_scan_ignore_paths = raw.secret_scan_ignore_paths
+            .filter((p) => typeof p === "string");
+    }
+    if (typeof raw.bundle_size === "boolean")
+        result.bundle_size = raw.bundle_size;
+    if (typeof raw.outdated_check === "boolean")
+        result.outdated_check = raw.outdated_check;
+    if (typeof raw.a11y_deep === "boolean")
+        result.a11y_deep = raw.a11y_deep;
+    if (typeof raw.seo_deep === "boolean")
+        result.seo_deep = raw.seo_deep;
+    if (typeof raw.vitals_budget === "boolean")
+        result.vitals_budget = raw.vitals_budget;
+    return result;
+}
+/**
+ * 로그인된 CLI 토큰으로 팀 공통 임계값을 서버에서 가져온다.
+ * 토큰 없음 / 팀 없음 / 네트워크 오류 시 null 반환 (graceful degradation).
+ */
+async function fetchTeamThresholds() {
+    const token = (0, auth_js_1.loadToken)();
+    if (!token)
+        return null;
+    try {
+        const res = await fetch(`${auth_js_1.LAXY_API_URL}/api/v1/team-thresholds`, {
+            headers: { Authorization: `Bearer ${token}` },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        return data.thresholds ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function loadConfig(options) {
+    const configPath = options.configPath ?? path.join(options.dir, ".laxy.yml");
+    let base = {};
+    const hasLocalConfig = fs.existsSync(configPath);
+    if (hasLocalConfig) {
+        base = parseYaml(configPath);
+    }
+    // 팀 임계값: 로컬 .laxy.yml에 thresholds가 없을 때만 적용
+    const team = options.teamThresholds ?? null;
+    const teamThresholdFallback = (!hasLocalConfig || !base.thresholds) && team
+        ? {
+            performance: team.performance,
+            accessibility: team.accessibility,
+            seo: team.seo,
+            bestPractices: team.best_practices,
+        }
+        : {};
+    const teamFailOnFallback = (!hasLocalConfig || !base.fail_on) && team ? team.fail_on : undefined;
+    const config = {
+        ...DEFAULT_CONFIG,
+        framework: base.framework ?? DEFAULT_CONFIG.framework,
+        build_command: base.build_command ?? DEFAULT_CONFIG.build_command,
+        dev_command: base.dev_command ?? DEFAULT_CONFIG.dev_command,
+        package_manager: base.package_manager ?? DEFAULT_CONFIG.package_manager,
+        port: base.port ?? DEFAULT_CONFIG.port,
+        build_timeout: base.build_timeout ?? DEFAULT_CONFIG.build_timeout,
+        dev_timeout: base.dev_timeout ?? DEFAULT_CONFIG.dev_timeout,
+        lighthouse_runs: base.lighthouse_runs ?? DEFAULT_CONFIG.lighthouse_runs,
+        fail_on: base.fail_on ?? teamFailOnFallback ?? DEFAULT_CONFIG.fail_on,
+        scenarios: base.scenarios,
+        crawl: base.crawl ?? DEFAULT_CONFIG.crawl,
+        max_crawl_depth: base.max_crawl_depth ?? DEFAULT_CONFIG.max_crawl_depth,
+        max_crawl_pages: base.max_crawl_pages ?? DEFAULT_CONFIG.max_crawl_pages,
+        browsers: base.browsers ?? DEFAULT_CONFIG.browsers,
+        lighthouse_routes: base.lighthouse_routes,
+        extra_routes: base.extra_routes,
+        max_lighthouse_routes: base.max_lighthouse_routes ?? DEFAULT_CONFIG.max_lighthouse_routes,
+        visual_diff: {
+            ...DEFAULT_CONFIG.visual_diff,
+            ...(base.visual_diff ?? {}),
+        },
+        typecheck: base.typecheck ?? DEFAULT_CONFIG.typecheck,
+        secret_scan: base.secret_scan ?? DEFAULT_CONFIG.secret_scan,
+        secret_scan_ignore_paths: base.secret_scan_ignore_paths ?? DEFAULT_CONFIG.secret_scan_ignore_paths,
+        bundle_size: base.bundle_size ?? DEFAULT_CONFIG.bundle_size,
+        outdated_check: base.outdated_check ?? DEFAULT_CONFIG.outdated_check,
+        a11y_deep: base.a11y_deep ?? DEFAULT_CONFIG.a11y_deep,
+        seo_deep: base.seo_deep ?? DEFAULT_CONFIG.seo_deep,
+        vitals_budget: base.vitals_budget ?? DEFAULT_CONFIG.vitals_budget,
+    };
+    config.thresholds = {
+        ...DEFAULT_CONFIG.thresholds,
+        ...teamThresholdFallback,
+        ...(base.thresholds ?? {}),
+    };
+    // CLI flag overrides
+    if (options.cliFlags?.failOn !== undefined) {
+        if (!VALID_FAIL_ON.includes(options.cliFlags.failOn)) {
+            throw new ConfigParseError(`Invalid --fail-on value: "${options.cliFlags.failOn}". Must be one of: ${VALID_FAIL_ON.join(", ")}`);
+        }
+        config.fail_on = options.cliFlags.failOn;
+    }
+    // CI mode: apply CI defaults
+    const ciMode = options.ciMode;
+    if (ciMode) {
+        // dev_timeout: 90s in CI
+        if (!base.dev_timeout) {
+            config.dev_timeout = 90;
+        }
+        // lighthouse_runs: default to 3 in CI, but explicit config file value wins
+        if (!base.lighthouse_runs) {
+            config.lighthouse_runs = 3;
+        }
+    }
+    // Skip lighthouse: max grade is Bronze
+    if (options.cliFlags?.skipLighthouse) {
+        // Effectively disables Lighthouse grading
+    }
+    // CLI flag overrides for new checks
+    if (options.cliFlags?.typecheck !== undefined)
+        config.typecheck = options.cliFlags.typecheck;
+    if (options.cliFlags?.secretScan !== undefined)
+        config.secret_scan = options.cliFlags.secretScan;
+    if (options.cliFlags?.bundleSize !== undefined)
+        config.bundle_size = options.cliFlags.bundleSize;
+    if (options.cliFlags?.outdatedCheck !== undefined)
+        config.outdated_check = options.cliFlags.outdatedCheck;
+    if (options.cliFlags?.a11yDeep !== undefined)
+        config.a11y_deep = options.cliFlags.a11yDeep;
+    if (options.cliFlags?.seoDeep !== undefined)
+        config.seo_deep = options.cliFlags.seoDeep;
+    if (options.cliFlags?.vitalsBudget !== undefined)
+        config.vitals_budget = options.cliFlags.vitalsBudget;
+    return { ...config, ciMode };
+}