@empline/preflight 1.0.20

package/dist/checks/api/api-completeness-check.js

@@ -0,0 +1,311 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * API Completeness Check Preflight (BLOCKING)
+ *
+ * Detects incomplete API implementations that will cause runtime failures:
+ * - TODO comments indicating unfinished work
+ * - Stub implementations (empty handlers, placeholder responses)
+ * - Missing email/notification sends
+ * - Commented-out functionality
+ *
+ * BLOCKS:
+ * - "// TODO:" comments in API routes
+ * - "// FIXME:" comments in API routes
+ * - Empty function bodies in handlers
+ * - Placeholder responses like "Not implemented"
+ *
+ * Usage:
+ *   pnpm preflight:api:completeness
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("fs"));
+const console_chars_1 = require("../../utils/console-chars");
+const file_cache_1 = require("../../shared/file-cache");
+// Check metadata
+exports.id = "api/api-completeness-check";
+exports.name = "Api Completeness Check";
+exports.category = "api";
+exports.blocking = true;
+exports.description = "API Completeness Check Preflight (BLOCKING)";
+exports.tags = ["api"];
+// Patterns that indicate incomplete implementation
+const INCOMPLETE_PATTERNS = [
+    {
+        pattern: /\/\/\s*TODO:?\s*(.+)/gi,
+        rule: "todo-in-api",
+        message: "TODO comment found - incomplete implementation",
+        type: "error",
+        extractMatch: true,
+    },
+    {
+        pattern: /\/\/\s*FIXME:?\s*(.+)/gi,
+        rule: "fixme-in-api",
+        message: "FIXME comment found - known issue not resolved",
+        type: "error",
+        extractMatch: true,
+    },
+    {
+        pattern: /\/\/\s*HACK:?\s*(.+)/gi,
+        rule: "hack-in-api",
+        message: "HACK comment found - temporary workaround in production code",
+        type: "warning",
+        extractMatch: true,
+    },
+    // XXX comments are informational - often used for documentation/examples
+    // {
+    //   pattern: /\/\/\s*XXX:?\s*(.+)/gi,
+    //   rule: "xxx-in-api",
+    //   message: "XXX comment found - needs attention",
+    //   type: "warning" as const,
+    //   extractMatch: true,
+    // },
+    {
+        pattern: /throw\s+new\s+Error\s*\(\s*["'`]Not\s+implemented/gi,
+        rule: "not-implemented-error",
+        message: "Throws 'Not implemented' error - stub implementation",
+        type: "error",
+    },
+    {
+        pattern: /return\s+.*["'`]Not\s+implemented/gi,
+        rule: "not-implemented-response",
+        message: "Returns 'Not implemented' - stub response",
+        type: "error",
+    },
+    {
+        pattern: /\/\/\s*await\s+send.*Email/gi,
+        rule: "commented-email-send",
+        message: "Email send is commented out - notifications won't be sent",
+        type: "error",
+    },
+    {
+        pattern: /\/\/\s*await\s+notify/gi,
+        rule: "commented-notification",
+        message: "Notification is commented out - users won't be notified",
+        type: "error",
+    },
+    {
+        pattern: /console\.log\s*\(\s*["'`]TODO/gi,
+        rule: "todo-console-log",
+        message: "TODO in console.log - incomplete implementation",
+        type: "error",
+    },
+    {
+        pattern: /return\s+NextResponse\.json\s*\(\s*\{\s*\}\s*\)/g,
+        rule: "empty-response",
+        message: "Returns empty object - likely incomplete implementation",
+        type: "warning",
+    },
+    {
+        pattern: /\/\*\s*TODO[\s\S]*?\*\//gi,
+        rule: "todo-block-comment",
+        message: "TODO block comment found - incomplete implementation",
+        type: "error",
+    },
+];
+// Patterns for missing functionality based on route type
+// Note: These check for POST/PUT handlers that should send notifications
+// GET endpoints and token verification endpoints are excluded
+const ROUTE_EXPECTATIONS = [
+    {
+        routePattern: /\/api\/.*\/invite/,
+        expectPattern: /send.*Email|sendLatestTemplateEmail|sendTemplateEmail/,
+        rule: "invite-missing-email",
+        message: "Invite endpoint should send email notification",
+        type: "error",
+        // Only check if it has a POST handler that creates invites
+        requiresPattern: /export\s+async\s+function\s+POST/,
+    },
+    {
+        routePattern: /\/api\/store\/orders\/\[orderId\]/,
+        expectPattern: /send.*Email|sendLatestTemplateEmail|ORDER_/,
+        rule: "order-action-missing-email",
+        message: "Order action endpoint should send email notification",
+        type: "warning",
+        // Only check POST/PUT handlers that modify orders
+        requiresPattern: /export\s+async\s+function\s+(POST|PUT|PATCH)/,
+    },
+    {
+        routePattern: /\/api\/.*\/password.*reset/i,
+        expectPattern: /send.*Email|sendLatestTemplateEmail|PASSWORD_RESET/,
+        rule: "password-reset-missing-email",
+        message: "Password reset endpoint should send email",
+        type: "error",
+        requiresPattern: /export\s+async\s+function\s+POST/,
+    },
+    // Note: /verify endpoints typically RECEIVE verification tokens, not send them
+    // The email is sent by the initiation endpoint (e.g., /register, /forgot-password)
+];
+// CACHED FILE LISTS
+let _cachedApiRouteFiles = null;
+async function getApiRouteFiles() {
+    if (!_cachedApiRouteFiles) {
+        _cachedApiRouteFiles = await file_cache_1.fileCache.getAPIRouteFiles();
+    }
+    return _cachedApiRouteFiles;
+}
+async function checkApiCompleteness() {
+    console.log(`\n${console_chars_1.emoji.search} API Completeness Check (BLOCKING)\n`);
+    console.log("Ensures API routes are fully implemented without TODOs or stubs.");
+    console.log("Rules:");
+    console.log(`  ${console_chars_1.emoji.error} TODO/FIXME comments in API routes are PROHIBITED`);
+    console.log(`  ${console_chars_1.emoji.error} Commented-out email sends are PROHIBITED`);
+    console.log(`  ${console_chars_1.emoji.error} Stub implementations ("Not implemented") are PROHIBITED`);
+    console.log(`  ${console_chars_1.emoji.success} Fully implemented handlers with proper notifications are OK\n`);
+    const apiFiles = await getApiRouteFiles();
+    const issues = [];
+    for (const file of apiFiles) {
+        const normalizedFile = file.replace(/\\/g, "/");
+        const content = fs.readFileSync(file, "utf8");
+        const lines = content.split("\n");
+        // Check for incomplete patterns
+        for (const check of INCOMPLETE_PATTERNS) {
+            let match;
+            const regex = new RegExp(check.pattern.source, check.pattern.flags);
+            while ((match = regex.exec(content)) !== null) {
+                // Find line number
+                const beforeMatch = content.slice(0, match.index);
+                const lineNum = (beforeMatch.match(/\n/g) || []).length + 1;
+                const line = lines[lineNum - 1] || "";
+                // Skip if line has preflight-ignore
+                if (line.includes("preflight-ignore"))
+                    continue;
+                const snippet = line.trim().slice(0, 100);
+                const matchedText = check.extractMatch && match[1] ? `: ${match[1].trim()}` : "";
+                issues.push({
+                    file: normalizedFile,
+                    line: lineNum,
+                    type: check.type,
+                    rule: check.rule,
+                    message: check.message + matchedText,
+                    snippet,
+                });
+            }
+        }
+        // Check route-specific expectations
+        for (const expectation of ROUTE_EXPECTATIONS) {
+            if (expectation.routePattern.test(normalizedFile)) {
+                // Skip if the route doesn't have the required handler type
+                if (expectation.requiresPattern && !expectation.requiresPattern.test(content)) {
+                    continue;
+                }
+                if (!expectation.expectPattern.test(content)) {
+                    // Check if there's a TODO about it (already caught above)
+                    const hasTodoForIt = /\/\/\s*TODO.*email|\/\/\s*TODO.*send|\/\/\s*TODO.*notify/i.test(content);
+                    if (!hasTodoForIt) {
+                        issues.push({
+                            file: normalizedFile,
+                            line: 1,
+                            type: expectation.type,
+                            rule: expectation.rule,
+                            message: expectation.message,
+                            snippet: `Route: ${normalizedFile}`,
+                            suggestion: "Import and call sendLatestTemplateEmail() with appropriate template",
+                        });
+                    }
+                }
+            }
+        }
+    }
+    // Deduplicate issues (same file + rule)
+    const uniqueIssues = deduplicateIssues(issues);
+    // Report results
+    const errors = uniqueIssues.filter((i) => i.type === "error");
+    const warnings = uniqueIssues.filter((i) => i.type === "warning");
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} BLOCKING ERRORS (${errors.length}):\n`);
+        errors.forEach((issue) => {
+            console.log(`  ${issue.file}:${issue.line}`);
+            console.log(`    Rule: ${issue.rule}`);
+            console.log(`    ${issue.message}`);
+            if (issue.snippet && !issue.snippet.startsWith("Route:")) {
+                console.log(`    Code: ${issue.snippet}`);
+            }
+            if (issue.suggestion) {
+                console.log(`    ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            }
+            console.log("");
+        });
+    }
+    if (warnings.length > 0) {
+        console.log(`\n${console_chars_1.emoji.warning}  WARNINGS (${warnings.length}):\n`);
+        warnings.slice(0, 15).forEach((issue) => {
+            console.log(`  ${issue.file}:${issue.line}`);
+            console.log(`    ${issue.message}`);
+            if (issue.suggestion) {
+                console.log(`    ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            }
+        });
+        if (warnings.length > 15) {
+            console.log(`  ... and ${warnings.length - 15} more warnings`);
+        }
+    }
+    // Summary
+    console.log("\n" + (0, console_chars_1.createDivider)(60, "light"));
+    console.log(`${console_chars_1.emoji.chart} Summary: ${errors.length} errors, ${warnings.length} warnings`);
+    console.log(`         Scanned ${apiFiles.length} API route files`);
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} PREFLIGHT FAILED - Incomplete API implementations detected`);
+        console.log("\nTo fix:");
+        console.log("  1. Remove TODO comments by implementing the functionality");
+        console.log("  2. Uncomment and implement email sends");
+        console.log("  3. Replace stub implementations with real code");
+        console.log("  4. Use sendLatestTemplateEmail() for notifications");
+        console.log("\nExample:");
+        console.log('  import { sendLatestTemplateEmail } from "@/lib/sendgrid-service";');
+        console.log('  await sendLatestTemplateEmail("TEMPLATE_TYPE", email, { ...data });');
+        process.exit(1);
+    }
+    else {
+        console.log(`\n${console_chars_1.emoji.success} API completeness check passed!`);
+    }
+}
+function deduplicateIssues(issues) {
+    const seen = new Set();
+    return issues.filter((issue) => {
+        const key = `${issue.file}:${issue.line}:${issue.rule}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+}
+checkApiCompleteness().catch((err) => {
+    console.error("Preflight error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=api-completeness-check.js.map

package/dist/checks/api/api-completeness-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-completeness-check.js","sourceRoot":"","sources":["../../../src/checks/api/api-completeness-check.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,6DAAiE;AACjE,wDAAoD;AAGpD,iBAAiB;AACJ,QAAA,EAAE,GAAG,4BAA4B,CAAC;AAClC,QAAA,IAAI,GAAG,wBAAwB,CAAC;AAChC,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,6CAA6C,CAAC;AAC5D,QAAA,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;AAY5B,mDAAmD;AACnD,MAAM,mBAAmB,GAAG;IAC1B;QACE,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,gDAAgD;QACzD,IAAI,EAAE,OAAgB;QACtB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,gDAAgD;QACzD,IAAI,EAAE,OAAgB;QACtB,YAAY,EAAE,IAAI;KACnB;IACD;QACE,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,8DAA8D;QACvE,IAAI,EAAE,SAAkB;QACxB,YAAY,EAAE,IAAI;KACnB;IACD,yEAAyE;IACzE,IAAI;IACJ,sCAAsC;IACtC,wBAAwB;IACxB,oDAAoD;IACpD,8BAA8B;IAC9B,wBAAwB;IACxB,KAAK;IACL;QACE,OAAO,EAAE,qDAAqD;QAC9D,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,sDAAsD;QAC/D,IAAI,EAAE,OAAgB;KACvB;IACD;QACE,OAAO,EAAE,qCAAqC;QAC9C,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,2CAA2C;QACpD,IAAI,EAAE,OAAgB;KACvB;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,2DAA2D;QACpE,IAAI,EAAE,OAAgB;KACvB;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,yDAAyD;QAClE,IAAI,EAAE,OAAgB;KACvB;IACD;QACE,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,iDAAiD;QAC1D,IAAI,EAAE,OAAgB;KACvB;IACD;QACE,OAAO,EAAE,kDAAkD;QAC3D,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,yDAAyD;QAClE,IAAI,EAAE,SAAkB;KACzB;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,sDAAsD;QAC/D,IAAI,EAAE,OAAgB;KACvB;CACF,CAAC;AAEF,yDAAyD;AACzD,yEAAyE;AACzE,8DAA8D;AAC9D,MAAM,kBAAkB,GAAG;IACzB;QACE,YAAY,EAAE,mBAAmB;QACjC,aAAa,EAAE,uDAAuD;QACtE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,gDAAgD;QACzD,IAAI,EAAE,OAAgB;QACtB,2DAA2D;QAC3D,eAAe,EAAE,kCAAkC;KACpD;IACD;QACE,YAAY,EAAE,mCAAmC;QACjD,aAAa,EAAE,4CAA4C;QAC3D,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,sDAAsD;QAC/D,IAAI,EAAE,SAAkB;QACxB,kDAAkD;QAClD,eAAe,EAAE,8CAA8C;KAChE;IACD;QACE,YAAY,EAAE,6BAA6B;QAC3C,aAAa,EAAE,oDAAoD;QACnE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,2CAA2C;QACpD,IAAI,EAAE,OAAgB;QACtB,eAAe,EAAE,kCAAkC;KACpD;IACD,+EAA+E;IAC/E,mFAAmF;CACpF,CAAC;AAEF,oBAAoB;AAEpB,IAAI,oBAAoB,GAAoB,IAAI,CAAC;AACjD,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,MAAM,sBAAS,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,MAAM,sCAAsC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,mDAAmD,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,2CAA2C,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,0DAA0D,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,gEAAgE,CAAC,CAAC;IAEhG,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,gCAAgC;QAChC,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC;YACV,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAEpE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,mBAAmB;gBACnB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClD,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBAEtC,oCAAoC;gBACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;oBAAE,SAAS;gBAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAEjF,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,WAAW;oBACpC,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,KAAK,MAAM,WAAW,IAAI,kBAAkB,EAAE,CAAC;YAC7C,IAAI,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClD,2DAA2D;gBAC3D,IAAI,WAAW,CAAC,eAAe,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9E,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7C,0DAA0D;oBAC1D,MAAM,YAAY,GAAG,2DAA2D,CAAC,IAAI,CACnF,OAAO,CACR,CAAC;oBAEF,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,cAAc;4BACpB,IAAI,EAAE,CAAC;4BACP,IAAI,EAAE,WAAW,CAAC,IAAI;4BACtB,IAAI,EAAE,WAAW,CAAC,IAAI;4BACtB,OAAO,EAAE,WAAW,CAAC,OAAO;4BAC5B,OAAO,EAAE,UAAU,cAAc,EAAE;4BACnC,UAAU,EAAE,qEAAqE;yBAClF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE/C,iBAAiB;IACjB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAElE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,qBAAqB,MAAM,CAAC,MAAM,MAAM,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,OAAO,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,eAAe,QAAQ,CAAC,MAAM,MAAM,CAAC,CAAC;QACpE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,OAAO,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,UAAU;IACV,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,aAAa,MAAM,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,WAAW,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAEnE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,6DAA6D,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oBAAoB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/checks/api/api-contract-validation.d.ts

@@ -0,0 +1,24 @@
+#!/usr/bin/env tsx
+/**
+ * API Contract Validation Preflight
+ *
+ * Validates that API routes follow consistent patterns and have proper
+ * request/response handling. Checks for:
+ *
+ * - Consistent error response format
+ * - Proper HTTP status codes
+ * - Request body validation (Zod schemas)
+ * - Response type consistency
+ * - Authentication checks where required
+ *
+ * Usage:
+ *   pnpm preflight:api-contract
+ *   pnpm preflight:api-contract --verbose
+ */
+export declare const id = "api/api-contract-validation";
+export declare const name = "Api Contract Validation";
+export declare const category = "api";
+export declare const blocking = false;
+export declare const description = "API Contract Validation Preflight";
+export declare const tags: string[];
+//# sourceMappingURL=api-contract-validation.d.ts.map

package/dist/checks/api/api-contract-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-contract-validation.d.ts","sourceRoot":"","sources":["../../../src/checks/api/api-contract-validation.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;GAeG;AAUH,eAAO,MAAM,EAAE,gCAAgC,CAAC;AAChD,eAAO,MAAM,IAAI,4BAA4B,CAAC;AAC9C,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,WAAW,sCAAsC,CAAC;AAC/D,eAAO,MAAM,IAAI,UAAuB,CAAC"}

package/dist/checks/api/api-contract-validation.js

@@ -0,0 +1,219 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * API Contract Validation Preflight
+ *
+ * Validates that API routes follow consistent patterns and have proper
+ * request/response handling. Checks for:
+ *
+ * - Consistent error response format
+ * - Proper HTTP status codes
+ * - Request body validation (Zod schemas)
+ * - Response type consistency
+ * - Authentication checks where required
+ *
+ * Usage:
+ *   pnpm preflight:api-contract
+ *   pnpm preflight:api-contract --verbose
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+const file_cache_1 = require("../../shared/file-cache");
+const universal_progress_reporter_1 = require("../system/universal-progress-reporter");
+// Check metadata
+exports.id = "api/api-contract-validation";
+exports.name = "Api Contract Validation";
+exports.category = "api";
+exports.blocking = false;
+exports.description = "API Contract Validation Preflight";
+exports.tags = ["api", "validation"];
+const isVerbose = process.argv.includes("--verbose");
+console.log("📡 API Contract Validation Preflight");
+console.log((0, console_chars_1.createDivider)(60, "heavy"));
+const issues = [];
+// Patterns to check
+const CHECKS = {
+    // Error response should use consistent format
+    inconsistentErrorFormat: {
+        pattern: /return\s+(?:new\s+)?(?:Response|NextResponse)\.json\(\s*\{\s*(?!error:|message:)/g,
+        message: "Error response should use { error: string } or { message: string } format",
+        type: "warning",
+    },
+    // Should validate request body with Zod
+    missingValidation: {
+        pattern: /const\s+(?:body|data)\s*=\s*await\s+(?:req|request)\.json\(\)/g,
+        followUp: /\.parse\(|\.safeParse\(|validate/,
+        message: "Request body should be validated with Zod schema",
+        type: "warning",
+    },
+    // Auth routes should check session
+    missingAuthCheck: {
+        routePattern: /\/api\/(admin|seller|account|store)\//,
+        checkPattern: /getServerSession|auth\(\)|getSession|requireAuth/,
+        message: "Protected route should check authentication",
+        type: "error",
+    },
+    // Should return proper status codes
+    wrongStatusCode: {
+        patterns: [
+            {
+                pattern: /catch\s*\([^)]*\)\s*\{[^}]*return.*\.json\([^,]+,\s*\{\s*status:\s*200/gs,
+                message: "Error handler returning 200 status",
+            },
+            {
+                pattern: /return.*\.json\(\s*\{\s*error:[^}]+\},\s*\{\s*status:\s*200/g,
+                message: "Error response with 200 status",
+            },
+        ],
+        type: "error",
+    },
+    // Should handle errors
+    missingTryCatch: {
+        pattern: /export\s+async\s+function\s+(GET|POST|PUT|PATCH|DELETE)/,
+        checkPattern: /try\s*\{/,
+        message: "API handler should have try-catch error handling",
+        type: "warning",
+    },
+};
+// CACHED FILE LISTS - Scan once, use everywhere
+let _cachedApiRouteFiles = null;
+async function getApiRouteFiles() {
+    if (!_cachedApiRouteFiles) {
+        _cachedApiRouteFiles = await file_cache_1.fileCache.getAPIRouteFiles();
+    }
+    return _cachedApiRouteFiles;
+}
+async function main() {
+    const reporter = (0, universal_progress_reporter_1.createUniversalProgressReporter)(path.basename(__filename, ".ts"));
+    // Find all API route files
+    const apiFiles = await getApiRouteFiles();
+    console.log(`\n${console_chars_1.emoji.search} Checking ${apiFiles.length} API routes...\n`);
+    for (const file of apiFiles) {
+        const content = fs.readFileSync(file, "utf-8");
+        const lines = content.split("\n");
+        const relativePath = path.relative(process.cwd(), file);
+        if (isVerbose) {
+            console.log(`${console_chars_1.emoji.file} ${relativePath}`);
+        }
+        // Check for missing auth on protected routes
+        if (CHECKS.missingAuthCheck.routePattern.test(file)) {
+            if (!CHECKS.missingAuthCheck.checkPattern.test(content)) {
+                issues.push({
+                    file: relativePath,
+                    line: 1,
+                    type: CHECKS.missingAuthCheck.type,
+                    message: CHECKS.missingAuthCheck.message,
+                });
+            }
+        }
+        // Check for missing try-catch
+        const hasHandler = CHECKS.missingTryCatch.pattern.test(content);
+        const hasTryCatch = CHECKS.missingTryCatch.checkPattern.test(content);
+        if (hasHandler && !hasTryCatch) {
+            issues.push({
+                file: relativePath,
+                line: 1,
+                type: CHECKS.missingTryCatch.type,
+                message: CHECKS.missingTryCatch.message,
+            });
+        }
+        // Check for wrong status codes
+        for (const check of CHECKS.wrongStatusCode.patterns) {
+            if (check.pattern.test(content)) {
+                const match = content.match(check.pattern);
+                if (match) {
+                    const lineNum = content.substring(0, content.indexOf(match[0])).split("\n").length;
+                    issues.push({
+                        file: relativePath,
+                        line: lineNum,
+                        type: CHECKS.wrongStatusCode.type,
+                        message: check.message,
+                    });
+                }
+            }
+        }
+        // Check for request body validation
+        const bodyMatch = content.match(CHECKS.missingValidation.pattern);
+        if (bodyMatch) {
+            // Check if validation follows within 10 lines
+            const matchIndex = content.indexOf(bodyMatch[0]);
+            const afterMatch = content.substring(matchIndex, matchIndex + 500);
+            if (!CHECKS.missingValidation.followUp.test(afterMatch)) {
+                const lineNum = content.substring(0, matchIndex).split("\n").length;
+                issues.push({
+                    file: relativePath,
+                    line: lineNum,
+                    type: CHECKS.missingValidation.type,
+                    message: CHECKS.missingValidation.message,
+                });
+            }
+        }
+    }
+    // Report results
+    const errors = issues.filter((i) => i.type === "error");
+    const warnings = issues.filter((i) => i.type === "warning");
+    if (issues.length === 0) {
+        console.log(`${console_chars_1.emoji.success} All API routes follow contract standards`);
+        process.exit(0);
+    }
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`${console_chars_1.emoji.clipboard} API Contract Issues:`);
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    for (const issue of issues) {
+        const icon = issue.type === "error" ? `${console_chars_1.emoji.error}` : `${console_chars_1.emoji.warning}`;
+        console.log(`${icon} ${issue.file}:${issue.line}`);
+        console.log(`   ${issue.message}`);
+    }
+    console.log("\n" + (0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`${console_chars_1.emoji.chart} Summary:`);
+    console.log(`   Errors:   ${errors.length}`);
+    console.log(`   Warnings: ${warnings.length}`);
+    console.log(`   Total:    ${issues.length}`);
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} FAILED: API contract violations found`);
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.warning}  PASSED with warnings`);
+    process.exit(0);
+}
+main().catch((error) => {
+    console.error("Error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=api-contract-validation.js.map

package/dist/checks/api/api-contract-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-contract-validation.js","sourceRoot":"","sources":["../../../src/checks/api/api-contract-validation.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,6DAAiE;AACjE,wDAAoD;AACpD,uFAAwF;AAGxF,iBAAiB;AACJ,QAAA,EAAE,GAAG,6BAA6B,CAAC;AACnC,QAAA,IAAI,GAAG,yBAAyB,CAAC;AACjC,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,WAAW,GAAG,mCAAmC,CAAC;AAClD,QAAA,IAAI,GAAG,CAAC,KAAK,EAAC,YAAY,CAAC,CAAC;AASzC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAErD,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AACpD,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;AAExC,MAAM,MAAM,GAAY,EAAE,CAAC;AAE3B,oBAAoB;AACpB,MAAM,MAAM,GAAG;IACb,8CAA8C;IAC9C,uBAAuB,EAAE;QACvB,OAAO,EAAE,mFAAmF;QAC5F,OAAO,EAAE,2EAA2E;QACpF,IAAI,EAAE,SAAkB;KACzB;IACD,wCAAwC;IACxC,iBAAiB,EAAE;QACjB,OAAO,EAAE,gEAAgE;QACzE,QAAQ,EAAE,kCAAkC;QAC5C,OAAO,EAAE,kDAAkD;QAC3D,IAAI,EAAE,SAAkB;KACzB;IACD,mCAAmC;IACnC,gBAAgB,EAAE;QAChB,YAAY,EAAE,uCAAuC;QACrD,YAAY,EAAE,kDAAkD;QAChE,OAAO,EAAE,6CAA6C;QACtD,IAAI,EAAE,OAAgB;KACvB;IACD,oCAAoC;IACpC,eAAe,EAAE;QACf,QAAQ,EAAE;YACR;gBACE,OAAO,EAAE,0EAA0E;gBACnF,OAAO,EAAE,oCAAoC;aAC9C;YACD;gBACE,OAAO,EAAE,8DAA8D;gBACvE,OAAO,EAAE,gCAAgC;aAC1C;SACF;QACD,IAAI,EAAE,OAAgB;KACvB;IACD,uBAAuB;IACvB,eAAe,EAAE;QACf,OAAO,EAAE,yDAAyD;QAClE,YAAY,EAAE,UAAU;QACxB,OAAO,EAAE,kDAAkD;QAC3D,IAAI,EAAE,SAAkB;KACzB;CACF,CAAC;AAEF,gDAAgD;AAEhD,IAAI,oBAAoB,GAAoB,IAAI,CAAC;AACjD,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,MAAM,sBAAS,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,IAAA,6DAA+B,EAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,MAAM,aAAa,QAAQ,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAE7E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAExD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,6CAA6C;QAC7C,IAAI,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI;oBAClC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO;iBACzC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI;gBACjC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,OAAO;aACxC,CAAC,CAAC;QACL,CAAC;QAED,+BAA+B;QAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBACnF,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI;wBACjC,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,SAAS,EAAE,CAAC;YACd,8CAA8C;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI;oBACnC,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,OAAO;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,SAAS,uBAAuB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,qBAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,qBAAK,CAAC,OAAO,EAAE,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,WAAW,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,wCAAwC,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/checks/api/pagination-validation.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env tsx
+/**
+ * Pagination Boundary Validation Preflight
+ *
+ * Ensures API routes properly validate pagination parameters to prevent:
+ * - Negative page numbers
+ * - Page size exceeding maximum
+ * - Offset overflow on large datasets
+ * - Missing pagination on list endpoints
+ *
+ * Usage:
+ *   pnpm preflight:pagination
+ *   pnpm preflight:pagination --verbose
+ */
+export declare const id = "api/pagination-validation";
+export declare const name = "Pagination Validation";
+export declare const category = "api";
+export declare const blocking = true;
+export declare const description = "Pagination Boundary Validation Preflight";
+export declare const tags: string[];
+//# sourceMappingURL=pagination-validation.d.ts.map

package/dist/checks/api/pagination-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination-validation.d.ts","sourceRoot":"","sources":["../../../src/checks/api/pagination-validation.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AAUH,eAAO,MAAM,EAAE,8BAA8B,CAAC;AAC9C,eAAO,MAAM,IAAI,0BAA0B,CAAC;AAC5C,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,6CAA6C,CAAC;AACtE,eAAO,MAAM,IAAI,UAAuB,CAAC"}