fix(core): purge legacy i18n templates and resolve Z405 asset link graph bugs (#107)

* fix(cli): purge eradicated i18n configurations from zenzic init templates

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* fix(core): register non-markdown local links in asset graph to prevent Z405 false positives

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* docs: update CHANGELOG and RELEASE for v0.14.1

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* fix(release): delegate RELEASE.md to bumptool and revert manual bumps

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* chore: remove legacy i18n blocks from template config

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* release: bump version to 0.14.1

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* docs(gov): purify roadmap of historical milestones and align planned features to v0.15.0

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* feat(core): implement Z506 to detect malformed frontmatter boundaries

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* feat(core): implement Z506 to detect malformed frontmatter boundaries

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

---------

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

Author: PythonWoods-Dev

.bumpversion.toml

@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 [tool.bumpversion]
-current_version = "0.14.0"
+current_version = "0.14.1"
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<patch>\\d+)((?P<pre_l>a|b|rc)(?P<pre_n>\\d+))?"
 serialize = [
     "{major}.{minor}.{patch}{pre_l}{pre_n}",

.github/ISSUE_TEMPLATE/security_vulnerability.yml

@@ -29,7 +29,7 @@ body:
     attributes:
       label: Zenzic version
       description: Output of `zenzic --version`
-      placeholder: "0.14.0"
+      placeholder: "0.14.1"
     validations:
       required: true
 

.pre-commit-hooks.yaml

@@ -7,7 +7,7 @@
 #
 #   repos:
 #     - repo: https://github.com/PythonWoods/zenzic
-#       rev: v0.14.0
+#       rev: v0.14.1
 #       hooks:
 #         - id: zenzic-verify    # quality gate — corrisponde a `just verify` lato zenzic
 #         - id: zenzic-guard     # fast staged-file credential scan

.zenzic.toml

@@ -157,16 +157,6 @@ pattern  = "(?i)\\bclick here\\b|\\bclicca qui\\b"
 message  = "Avoid generic link text. Use a meaningful description for accessibility."
 severity = "error"
 
-# --- I18N PARITY (Optional) ---
-# [i18n]
-# enabled = true
-# base_lang = "en"
-# base_source = "docs"
-# strict_parity = true
-# require_frontmatter_parity = ["title", "description"]
-# [i18n.targets]
-# it = "i18n/it/docusaurus-plugin-content-docs/current"
-
 # --- GATE 4: CI/CD (GitHub Actions, Optional) ---
 # Add this workflow snippet to .github/workflows/zenzic.yml
 #

CHANGELOG.md

@@ -9,6 +9,16 @@ Versions follow [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [0.14.1] - Unreleased
+
+### Added
+
+- **Semantic Metadata Cross-Validation (Z507)**: Added to the planned roadmap for v0.15.0.
+
+### Fixed
+
+- **Core Link Parsing**: Extended `_MARKDOWN_ASSET_LINK_RE` to parse standard markdown links `[text](url)` and HTML `<a>` tags, resolving false positive `Z405` errors for non-markdown assets.
+
 ## [0.14.0] - Unreleased
 
 ### Breaking Changes

CITATION.cff

@@ -15,8 +15,8 @@ abstract: >-
   performs deterministic static analysis using a two-pass reference
   pipeline and a RE2-backed credential scanner, with zero subprocess
   calls and full SARIF 2.1.0 support for CI/CD integration.
-version: 0.14.0
-date-released: 2026-06-20
+version: 0.14.1
+date-released: 2026-06-21
 url: "https://zenzic.dev"
 repository-code: "https://github.com/PythonWoods/zenzic"
 repository-artifact: "https://pypi.org/project/zenzic/"

RELEASE.md

@@ -8,9 +8,9 @@
 
 | Field    | Value      |
 | :------- | :--------- |
-| Version  | v0.14.0     |
+| Version  | v0.14.1     |
 | Codename | Magnetite   |
-| Date     | 2026-06-20 |
+| Date     | 2026-06-21 |
 | Status   | Stable |
 
 ## Release Checklist
@@ -21,7 +21,7 @@ Before tagging, every item must be green:
 - [ ] `zenzic lab all` — all 20 scenarios exit with expected code
 - [ ] `zenzic score --stamp` committed — badge in README.md reflects current score
 - [ ] `zenzic check all .` — zero findings in the repo root
-- [ ] `pyproject.toml` version matches the tag (`0.14.0`)
+- [ ] `pyproject.toml` version matches the tag (`0.14.1`)
 - [ ] `CITATION.cff` version and date updated
 - [ ] `CHANGELOG.md` — `[Unreleased]` section moved to the new version heading
 - [ ] Update SECURITY.md support table (Add new release, demote previous to Critical/EOL).
@@ -54,11 +54,11 @@ git checkout main
 git pull origin main
 
 # 3. Tag the main branch and push
-git tag v0.14.0
+git tag v0.14.1
 git push origin main --tags
 ```
 
-- [ ] Create GitHub Release from the tag, using the `## v0.14.0` CHANGELOG section as the release body.
+- [ ] Create GitHub Release from the tag, using the `## v0.14.1` CHANGELOG section as the release body.
 
 ## Changelog Reference
 

ROADMAP.md

@@ -14,118 +14,37 @@ For the current release history, see [CHANGELOG.md](CHANGELOG.md).
 
 ---
 
-## v0.8.x
+## v0.14.0 (current)
 
-**Theme:** Tiered code governance, frozen security contracts, Sovereign Audit mode.
-
----
-
-## v0.9.x — Graphite
-
-**Theme:** Governance Engine, DQS Suppression Audit, Tiered Penalty Model.
-
----
-
-## v0.10.x — Magnetite
-
-**Theme:** Native CI/CD Integration, Orthogonal Filtering, and Debt Eradication.
-
-### Completed
-
-- **Native CI/CD Integration**: Native support for `--ci`, `github-annotations` output format, and automatic header suppression.
-- **Orthogonal Filtering**: Runtime filtering via `--only` for targeted, isolated gate checks.
-
-### Planned (WIP)
-
-- **Z407 BROKEN_CODE_REFERENCE — File Integrity Check**: Zenzic will scan Markdown
-  for backtick-quoted paths (e.g. `` `core/credentials.py` ``) and local file links,
-  then verify their physical existence in the repository at scan time. Missing targets
-  raise a Level 4 (Structure) finding. This eliminates "Phantom References" — stale
-  code paths left behind after refactoring.
-
-  > *Zenzic doesn't just check your links; it checks if your documentation knows
-  > where your code lives.*
-
-  Architectural note: the implementation extends `Resolver` with a new
-  `resolve_code_reference(path: str) -> Finding | None` method, reusing the
-  existing `_allowed_roots` boundary contract. No new subprocess calls.
-
-- **Dead Suppression Elimination (Z603)**: Detects inline `zenzic:ignore` directives
-  that do not correspond to any active finding. Prevents projects from accumulating
-  "phantom debt" — paying the 1-point DQS penalty for a suppression no longer needed
-  due to code fixes or configuration changes. Analogous to Ruff `RUF100` and ESLint
-  `--report-unused-disable-directives`. Implementation requires extending the
-  suppression engine (`suppressions.py`) to track which inline tags are consumed
-  during the scan lifecycle, then emitting a new `Z603` finding for unclaimed tags.
-
-- **Docusaurus Cross-Instance Resolver**: Upgrade `_docusaurus.py` to natively resolve
-  root-relative links (e.g., `/developers/page`) across multiple plugin instances,
-  eliminating the need for Z105 suppressions on inter-plugin routing. This includes
-  locale-aware prefix resolution (e.g., `/it/developers/`) so that translated pages
-  can link to sibling plugin instances without triggering Z105. Identified as a
-  structural gap when auditing `zenzic-doc`: Docusaurus rejects `../` relative paths
-  across plugin boundaries, forcing authors to use absolute URLs and manual
-  suppressions.
-
----
-
-## v0.11.x — Monorepo & DX (current)
-
-**Theme:** File integrity contracts, semantic schema validation, Plugin SDK, config hygiene.
-
-### Completed
-
-- **Monorepo Scalability**: Dynamic root resolution for Docusaurus (`docusaurus_site_root`), allowing Zenzic to operate seamlessly in nested `website/` architectures.
-- **Path-Aware Exclusion Engine**: Upgraded `excluded_dirs` to support `.gitignore` slash semantics, enabling strictly repo_root-relative targeting without false positives.
-- **Python 3.12+ RE2 Parity**: Custom `translate_glob_to_re2` implementation, eradicating `fnmatch` atomic group crashes and preserving DFA linear-time guarantees.
-- **DX Redesign**: Implementation of a visual progress bar and mathematical transparency via the `--breakdown` flag for DQS scoring.
-
-### Planned
-
-- `Z108 STALE_ALLOWLIST_ENTRY` (Issue #70): config-hygiene check for unused `absolute_path_allowlist`
-  entries (deferred from the v0.7.x cycle to avoid Pillar 3 violation; requires
-  `zenzic config` command).
-- Windows CI matrix parity for all check commands.
-
-- **Logic Site Map (LSM) — Documentation Topology Simplification**: The zenzic-doc
-  documentation corpus undergoes a formal deduplication pass following the Logic
-  Site Map protocol. Duplicate conceptual coverage (scoring, configuration reference,
-  ecosystem) is consolidated into canonical master pages; zombie files and superseded
-  ADRs are purged. Target: ≥30% reduction in total page count, 100% retention of
-  information fidelity.
-
-- **Plugin SDK** *(WIP)*: Stable AST adapter and rule APIs with semver guarantee.
-  Exposure of the two-pass reference pipeline to external rule authors.
-  Deprecation warnings for any v0.9 unstable API surfaces.
-- **Semantic Schemas**: YAML/JSON frontmatter validation against declared schemas
-  (e.g. `required_fields: [title, description]`). New finding tier `Z7xx`.
-- ~~**i18n schema parity (Z907)**~~ — **CANCELLED (ADR-034):** The Z602/Z907 I18N_PARITY scanner was eradicated in v0.14.0. Bilingual parity enforcement is deferred to future adapter plugins and will not be implemented in the core engine.
-- **Configurable finding tiers**: allow projects to promote/demote finding severity
-  via `[governance]` TOML section, with audit log of all overrides.
-
----
-
-## v0.12.0 — The Static Purity Pivot (planned)
-
-**Strategic Focus:** Deepen native support for Pure Static Engines (MkDocs, Sphinx, Hugo) where AST parsing guarantees 100% deterministic accuracy without bundler interference.
+**Theme:** Surgical removal of dead weight. Zero accumulation of inactive code paths.
 
-### The Great Migration
+### Delivered
 
-Tactical Bridge: zenzic-doc migrated to MkDocs Material and then to Zensical — completed in v0.13.0. ADR-020 (Mirror Law) has been deprecated; Zenzic is now English-Only.
+- **Zensical Migration & Docusaurus Eradication:** Complete architectural pivot to pure Markdown statics, purging legacy React AST dependencies.
+- **RE2 Enforcement:** Python 3.12+ RE2 parity with linear-time guarantees.
+- **TOML Strict Validation:** Path-aware exclusion engine and strict configuration hygiene.
+- **Z506 MALFORMED_FRONTMATTER:** Native built-in rule detecting malformed YAML frontmatter boundaries.
 
 ---
 
-## v0.14.0 — The Great Eradication (in progress)
+## v0.15.0 (planned)
 
-**Theme:** Surgical removal of dead weight. Zero accumulation of inactive code paths.
+**Theme:** Semantic Validation & Developer Experience.
 
-### Delivered
+### Planned Features
 
-- **Z602 I18N_PARITY Engine Eradicated (ADR-034):** `find_i18n_parity()` and 443 lines of bilingual scanner logic removed from the core. Z602 remains in the code namespace as `status="inactive"` for config forward-compatibility. `I18nConfig`/`I18nSource` models removed from `zenzic.models.config`.
-- **`LEGACY_TO_CODE` Deleted:** The `Z9xx → Zxxx` migration alias dictionary removed. All canonical code references updated.
-- **CodeDefinition.status field:** `NamedTuple` gains a `status: str = "active"` field. INACTIVE codes render as dim in `inspect codes`.
-- **Z506 MALFORMED_FRONTMATTER:** New built-in always-active rule that detects malformed YAML frontmatter opening delimiters on line 1. Severity `error`, −5.0 pts (Content). Gallery page and finding-codes reference updated.
-- **Breaking Changes:** Full list in CHANGELOG.md under `## [0.14.0]`.
+- **The Auto-Fix Engine (`zenzic fix`)**: Semantic `--dry-run` / `--apply` repair semantics for Z1xx and Z3xx findings.
+- **Custom Rules API v2 (AST Walker)**: Stable AST adapter and rule APIs with semver guarantee. Exposure of the two-pass reference pipeline to external rule authors.
+- **Z507 AUTHOR_NOT_FOUND**: Native support for cross-referencing Markdown frontmatter entities against framework-specific metadata files.
+- **The Bridge Architecture (TypeScript Docusaurus Plugin)**: Official plugin interface to support edge-case runtime frameworks outside the core engine.
+- **Z108 STALE_ALLOWLIST_ENTRY**: Config-hygiene check for unused `absolute_path_allowlist` entries.
+- **Semantic Schemas Validation**: YAML/JSON frontmatter validation against declared schemas (e.g. `required_fields: [title, description]`).
+- **Z407 BROKEN_CODE_REFERENCE**: Scan Markdown for backtick-quoted paths and verify their physical existence.
+- **Dead Suppression Elimination (Z603)**: Detects inline `zenzic:ignore` directives that do not correspond to any active finding.
+- **Configurable Finding Tiers**: Allow projects to promote/demote finding severity via `[governance]` TOML section.
+- **Readability & Style Engine**: Integrate pure readability metrics (Flesch-Kincaid) and style checks.
+- **Semantic Linting**: Implement AST-based rules to detect semantically duplicate headings and empty sections.
+- **Smart Link Graph & Connectivity Analysis**: Build a directed graph of the documentation to detect unlinked pages and navigation cycles.
 
 ---
 
@@ -135,26 +54,12 @@ Tactical Bridge: zenzic-doc migrated to MkDocs Material and then to Zensical —
 
 ### Goals
 
-- **API freeze**: all public symbols in `zenzic.rules`, `zenzic.models`, and
-  `zenzic.core.adapters` enter semver-stable contracts. No breaking changes without
-  a major version bump.
-- **Full Windows parity**: all features (including `signal`-based canary watchdog
-  replacement) validated on Windows Server and GitHub Actions Windows runners.
+- **API freeze**: all public symbols in `zenzic.rules`, `zenzic.models`, and `zenzic.core.adapters` enter semver-stable contracts. No breaking changes without a major version bump.
+- **Full Windows parity**: all features (including `signal`-based canary watchdog replacement) validated on Windows Server and GitHub Actions Windows runners.
 - **REUSE 4.x compliance**: migrate to REUSE 4.x specification when stable.
-- **Formal test coverage floor**: 85%+ branch coverage enforced in CI across all
-  three supported Python versions (current floor: 80%+ line coverage).
-- **Certified plugin ecosystem**: a curated registry of community plugins that meet
-  the Plugin SDK contract.
-- **Determinism audit**: formal proof-of-determinism report published for all
-  Core (`Z1xx`) and Security (`Z2xx`) finding codes.
-- **Auto-Fix Engine (`zenzic fix`)**: semantic `--dry-run` / `--apply` repair
-  semantics for Z1xx and Z3xx findings. `zenzic fix` never modifies Z2xx
-  (Security) findings — those require human review. Implementation is pure Python
-  with zero subprocess calls (Pillar 2 invariant). Status: design phase; no code
-  merged. Identified as GAP-001 in the Technical Debt Ledger.
-- **Readability & Style Engine (Issue #9)**: Integrate pure readability metrics (Flesch-Kincaid) and style checks tailored for technical documentation.
-- **Semantic Linting (Issue #8)**: Implement AST-based rules to detect semantically duplicate headings, empty sections, and inconsistent heading jumps.
-- **Smart Link Graph & Connectivity Analysis (Issue #7)**: Build a directed graph of the documentation to detect unlinked pages and navigation cycles.
+- **Formal test coverage floor**: 85%+ branch coverage enforced in CI across all three supported Python versions.
+- **Certified plugin ecosystem**: a curated registry of community plugins that meet the Plugin SDK contract.
+- **Determinism audit**: formal proof-of-determinism report published for all Core (`Z1xx`) and Security (`Z2xx`) finding codes.
 
 ---
 
@@ -172,4 +77,4 @@ These constraints apply across every future release:
 
 ---
 
-Roadmap last updated: 2026-06-11
+Roadmap last updated: 2026-06-21

pyproject.toml

@@ -13,7 +13,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "zenzic"
-version = "0.14.0"
+version = "0.14.1"
 description = "Engineering-grade, engine-agnostic static analyzer and credential scanner for Markdown documentation"
 readme = "README.md"
 requires-python = ">=3.10"

src/zenzic/__init__.py

@@ -2,5 +2,5 @@
 # SPDX-License-Identifier: Apache-2.0
 """Zenzic — engine-agnostic static analyzer and credential scanner for Markdown documentation."""
 
-__version__ = "0.14.0"
+__version__ = "0.14.1"
 __version_name__ = "Basalt"  # Release codename stored separately from the package version.