typo3-site-conformance

TYPO3 Site / Project Conformance Skill

Conformance and hardening for deployable TYPO3 v14 site/project repositories — the site/project counterpart to the extension-scoped typo3-conformance.

What this skill solves

TYPO3 work splits into two worlds: reusable extensions (packages, ext_emconf.php, Classes/, TER) and deployable sites (type: project, Docker/Compose, CI/CD, secrets, runtime). The existing conformance skill covers extensions; this one covers the site/project half — repository layout, container topology, Concourse pipeline, supply-chain gating, secret handling, and the Valkey/ofelia runtime — against the Netresearch gold standard.

The ruleset

The rule catalogue and a self-contained checker ship inside this skill, so running it needs nothing else:

• skills/typo3-site-conformance/checker/rules.json — the machine-readable rule catalogue (generated by gen_rules.py).
• skills/typo3-site-conformance/checker/check.py — python3 check.py <repo-path> (only pyyaml required).

typo3-14-gold is a runnable reference implementation that scores 100 % against this ruleset; typo3-project-standard is the human-readable companion. Both are Netresearch-internal and optional.

Use when

• A repository has composer.json "type": "project" and a root Compose file (compose.yaml/docker-compose.yml).
• You are reviewing or hardening container/Compose topology, a Concourse pipeline, supply-chain gating, or TYPO3 site config (config/system, config/sites).
• You are forking the gold skeleton to start a new customer site, or migrating a legacy support/typo3-NN/app-style repo.

For extension repos use typo3-conformance instead.

Expected outputs

• A pass/fail conformance verdict per rule family (STRUCT, CONTAINER, CI, DEPLOY, DEP, SEC, DOC) with file:line evidence.
• A prioritized remediation list (ERROR blocks, WARN should-fix, INFO advisory).
• For migrations: the concrete seven-move transformation plan (references/migration-from-reference.md).

Context requirements

• Read access to the target repository tree (composer.json, Dockerfile, compose*.yaml, ci/, config/system, config/sites, .gitlab-ci.yml, AGENTS.md).
• python3 + pyyaml to run the bundled checker. Nothing else.

Example prompts

• "Is this TYPO3 site repo gold-conformant? Score it."
• "Review our compose.yaml and Concourse pipeline against the gold standard."
• "Migrate this support/typo3-12/app repo to the gold layout."
• "Why is check.py failing on STRUCT-001 / SC-007?"

Related skills

• typo3-conformance — extension quality/TER readiness (the sibling).
• enterprise-readiness — generic supply-chain/OpenSSF hardening.
• docker-development, concourse-ci — the underlying container/CI mechanics.

Compatibility

TYPO3 v14.3 LTS (current gold target), PHP 8.4 baseline. Reference implementation (Netresearch-internal): typo3-14-gold.

Installation

Add the Netresearch marketplace and install the plugin:

/plugin marketplace add netresearch/claude-code-marketplace
/plugin install typo3-site-conformance

Contributing

Issues and PRs welcome. To change a rule, edit the catalogue in skills/typo3-site-conformance/checker/gen_rules.py and regenerate rules.json. Run bash validate-skill.sh . (from skill-repo-skill) before opening a PR.

License

Code MIT, content CC-BY-SA-4.0 — see LICENSE-MIT and LICENSE-CC-BY-SA-4.0. © Netresearch DTT GmbH.