feat: site-build-gate as external pkg

.gitignore

@@ -1,6 +1,5 @@
 # Dependencies
 /node_modules
-/scripts/site-build-gate/node_modules/
 
 # Production
 /build

AGENTS.md

@@ -49,8 +49,10 @@ Netlify build or deployment responsible for merge eligibility:
 
 ## Static build gate contract
 
-- Learn commits the complete checksum-bound Node.js 22 gate under `scripts/site-build-gate/` and
-  runs it locally after Docusaurus. CI and deployment do not fetch or execute the SEO repository.
+- Learn installs the SEO-owned Node.js 22 gate as the published npm package
+  `@netdata/site-build-gate` and runs it locally after Docusaurus. Its major version is the
+  ruleset version and must match `config/site-build-gate-baseline.json`. CI and deployment do not
+  fetch or execute the SEO repository.
 - Learn declares `/docs/collecting-metrics/collectors` as its segment-safe integration route
   prefix. The generic page-weight diagnostic excludes that route family; integration pages remain
   subject to every non-weight rule, so this is not a whole-page validation bypass.

README.md

@@ -41,8 +41,7 @@ Please also look at the [style guide](https://github.com/netdata/netdata/blob/ma
     ```
 
 3. Install Yarn Classic 1.22.22 and the locked dependencies. Netlify selects Yarn because
-   this repository tracks `yarn.lock`; npm 10.9.9 remains pinned for the nested build-gate
-   install run by `build:netlify`.
+   this repository tracks `yarn.lock`.
 
     ```bash
     npm install --global yarn@1.22.22
@@ -74,8 +73,8 @@ the plugin's asset list; the site build gate requires the page to have a title.
 ### Dependency update authority
 
 The root JavaScript dependency authority is `package.json` plus Yarn Classic `yarn.lock`. Do not
-add a root `package-lock.json`. The npm lock below `scripts/site-build-gate/` is a separate,
-website-owned vendor contract and remains npm-managed. Dependabot watches the root Yarn graph and
+add a root `package-lock.json`. The site build gate is the published `@netdata/site-build-gate`
+package, so its parser dependencies are part of the root Yarn graph. Dependabot watches that graph and
 GitHub Actions; owner-controlled vendor packages are intentionally excluded from automatic updates.
 
 Root Yarn resolutions are only used for security releases that are compatible with every selected

package.json

@@ -19,7 +19,7 @@
 		"docusaurus": "docusaurus",
 		"start": "docusaurus start",
 		"build": "docusaurus build",
-		"build:netlify": "node scripts/verify-git-history.js && node scripts/verify-indexnow-vendor.js && npm ci --prefix scripts/site-build-gate --ignore-scripts --no-audit && docusaurus build && node scripts/run-post-build-gates.mjs",
+		"build:netlify": "node scripts/verify-git-history.js && node scripts/verify-indexnow-vendor.js && docusaurus build && node scripts/run-post-build-gates.mjs",
 		"swizzle": "docusaurus swizzle",
 		"deploy": "docusaurus deploy",
 		"clear": "docusaurus clear",
@@ -73,6 +73,7 @@
 	},
 	"devDependencies": {
 		"@docusaurus/faster": "3.10.2",
+		"@netdata/site-build-gate": "^10.1.0",
 		"@tailwindcss/postcss": "^4.3.3",
 		"@testing-library/dom": "^10.4.2",
 		"@testing-library/jest-dom": "^7.0.1",

scripts/run-post-build-gates.mjs

@@ -21,7 +21,7 @@ const strictGeneratedCorpusGates = [
   ['scripts/verify-rendered-indexability.js'],
   ['scripts/verify-cloudflare-rum.js', 'build'],
   [
-    'scripts/site-build-gate/site_build_gate.mjs',
+    'node_modules/@netdata/site-build-gate/site_build_gate.mjs',
     '--build-dir',
     'build',
     '--site-origin',