@empline/preflight 1.0.20

package/dist/checks/api/pagination-validation.js

@@ -0,0 +1,270 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Pagination Boundary Validation Preflight
+ *
+ * Ensures API routes properly validate pagination parameters to prevent:
+ * - Negative page numbers
+ * - Page size exceeding maximum
+ * - Offset overflow on large datasets
+ * - Missing pagination on list endpoints
+ *
+ * Usage:
+ *   pnpm preflight:pagination
+ *   pnpm preflight:pagination --verbose
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("fs"));
+const glob_1 = require("glob");
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+const universal_progress_reporter_1 = require("../system/universal-progress-reporter");
+// Check metadata
+exports.id = "api/pagination-validation";
+exports.name = "Pagination Validation";
+exports.category = "api";
+exports.blocking = true;
+exports.description = "Pagination Boundary Validation Preflight";
+exports.tags = ["api", "validation"];
+// Patterns indicating pagination usage
+const PAGINATION_PATTERNS = [
+    /\b(?:page|pageNumber|currentPage)\b\s*[=:]/i,
+    /\b(?:limit|pageSize|perPage)\b\s*[=:]/i,
+    /\boffset\b\s*[=:]/i,
+    /searchParams\.get\s*\(\s*['"](?:page|limit|offset)/i,
+    /query\.(?:page|limit|offset)/i,
+    /\bparsePagination\s*\(/,
+];
+// Patterns indicating proper validation
+const VALIDATION_PATTERNS = [
+    /Math\.max\s*\(\s*(?:1|0)/,
+    /Math\.min\s*\(/,
+    /parseInt.*\|\|\s*\d+/,
+    /Number.*\|\|\s*\d+/,
+    /isNaN\s*\(/,
+    /Number\.isInteger/,
+    /Number\.isFinite/,
+    /\.clamp\s*\(/,
+    /z\.number\(\)\.(?:min|max|int)/,
+    /Zod.*(?:min|max|int)/i,
+    /PAGINATION_DEFAULTS/,
+    /MAX_PAGE_SIZE/,
+    /DEFAULT_PAGE_SIZE/,
+    /\bparsePagination\s*\(/,
+];
+// Patterns indicating list endpoints that should have pagination
+const LIST_ENDPOINT_PATTERNS = [/findMany\s*\(/, /\.map\s*\(/, /\.filter\s*\(/, /SELECT.*FROM/i];
+// Max values that should be enforced
+const RECOMMENDED_LIMITS = {
+    maxPageSize: 100,
+    defaultPageSize: 20,
+    maxOffset: 10000,
+};
+async function findApiRoutes() {
+    const patterns = ["app/api/**/*.ts", "pages/api/**/*.ts"];
+    const files = [];
+    for (const pattern of patterns) {
+        const matches = await (0, glob_1.glob)(pattern, {
+            ignore: ["**/node_modules/**", "**/*.test.ts", "**/*.spec.ts"],
+        });
+        files.push(...matches);
+    }
+    return files;
+}
+function checkFile(filePath, content) {
+    const issues = [];
+    const lines = content.split("\n");
+    // Check if this is a GET endpoint (list operations)
+    const isGetEndpoint = /export\s+async\s+function\s+GET/i.test(content);
+    const hasListOperation = LIST_ENDPOINT_PATTERNS.some((p) => p.test(content));
+    const usesPagination = PAGINATION_PATTERNS.some((p) => p.test(content));
+    const hasValidation = VALIDATION_PATTERNS.some((p) => p.test(content));
+    // Check for pagination without validation
+    if (usesPagination && !hasValidation) {
+        // Find where pagination params are used
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            if (PAGINATION_PATTERNS.some((p) => p.test(line))) {
+                issues.push({
+                    file: filePath,
+                    line: i + 1,
+                    severity: "error",
+                    message: "Pagination parameter used without validation",
+                    suggestion: "Add Math.max(1, page), Math.min(limit, MAX_PAGE_SIZE), or use Zod validation",
+                });
+                break;
+            }
+        }
+    }
+    // Check for list endpoints without pagination
+    if (isGetEndpoint && hasListOperation && !usesPagination) {
+        // Check if it's returning a potentially large dataset
+        const returnsList = /return.*(?:json|Response).*\[/i.test(content) ||
+            /findMany\s*\(\s*\{?\s*\}?\s*\)/i.test(content);
+        if (returnsList) {
+            issues.push({
+                file: filePath,
+                line: 1,
+                severity: "warning",
+                message: "List endpoint without pagination - may return unbounded results",
+                suggestion: "Add take/skip or page/limit parameters with defaults",
+            });
+        }
+    }
+    // Check for hardcoded large limits
+    const largeLimitMatch = content.match(/(?:take|limit|pageSize)\s*[=:]\s*(\d+)/i);
+    if (largeLimitMatch) {
+        const limit = parseInt(largeLimitMatch[1], 10);
+        if (limit > RECOMMENDED_LIMITS.maxPageSize) {
+            const lineIndex = lines.findIndex((l) => l.includes(largeLimitMatch[0]));
+            issues.push({
+                file: filePath,
+                line: lineIndex + 1,
+                severity: "warning",
+                message: `Large page size (${limit}) may cause performance issues`,
+                suggestion: `Consider limiting to ${RECOMMENDED_LIMITS.maxPageSize} or less`,
+            });
+        }
+    }
+    // Check for offset without limit (dangerous for large datasets)
+    if (/(?:offset|skip)\s*[=:]/i.test(content) && !/(?:take|limit)\s*[=:]/i.test(content)) {
+        issues.push({
+            file: filePath,
+            line: 1,
+            severity: "warning",
+            message: "Offset/skip used without limit/take - may fetch entire dataset",
+            suggestion: "Always pair offset with a limit",
+        });
+    }
+    // Check for parseInt without fallback
+    const parseIntMatches = content.matchAll(/parseInt\s*\(\s*(?:req\.|searchParams|query)[^)]+\)/gi);
+    for (const match of parseIntMatches) {
+        const context = content.slice(Math.max(0, match.index - 50), match.index + match[0].length + 50);
+        if (!/\|\|/.test(context) && !/\?\?/.test(context) && !/isNaN/.test(context)) {
+            const lineIndex = lines.findIndex((l) => l.includes(match[0]));
+            issues.push({
+                file: filePath,
+                line: lineIndex + 1,
+                severity: "warning",
+                message: "parseInt without fallback - may result in NaN",
+                suggestion: "Use parseInt(value, 10) || defaultValue or Number(value) || defaultValue",
+            });
+        }
+    }
+    // Check for direct user input in skip/take
+    if (/(?:skip|take)\s*:\s*(?:req\.|searchParams|query|params)/i.test(content)) {
+        if (!hasValidation) {
+            const lineIndex = lines.findIndex((l) => /(?:skip|take)\s*:\s*(?:req\.|searchParams|query|params)/i.test(l));
+            issues.push({
+                file: filePath,
+                line: lineIndex + 1,
+                severity: "error",
+                message: "User input directly used in skip/take without validation",
+                suggestion: "Validate and clamp values: Math.max(0, skip), Math.min(take, MAX_PAGE_SIZE)",
+            });
+        }
+    }
+    return issues;
+}
+async function main() {
+    const reporter = (0, universal_progress_reporter_1.createUniversalProgressReporter)(path.basename(__filename, ".ts"));
+    const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
+    const warningOnly = process.argv.includes("--warning") || process.argv.includes("--warn");
+    console.log(`${console_chars_1.emoji.file} Pagination Boundary Validation Preflight`);
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    const files = await findApiRoutes();
+    console.log(`Scanning ${files.length} API routes...\n`);
+    const allIssues = [];
+    for (const file of files) {
+        try {
+            const content = fs.readFileSync(file, "utf-8");
+            const issues = checkFile(file, content);
+            allIssues.push(...issues);
+        }
+        catch (error) {
+            // Skip files that can't be read
+        }
+    }
+    // Group by severity
+    const errors = allIssues.filter((i) => i.severity === "error");
+    const warnings = allIssues.filter((i) => i.severity === "warning");
+    const info = allIssues.filter((i) => i.severity === "info");
+    if (errors.length > 0) {
+        console.log(warningOnly
+            ? `${console_chars_1.emoji.warning}  ISSUES (warning mode):`
+            : `${console_chars_1.emoji.error} ERRORS (blocking):`);
+        console.log((0, console_chars_1.createDivider)(60, "light"));
+        for (const issue of errors) {
+            console.log(`  ${issue.file}:${issue.line}`);
+            console.log(`    ${issue.message}`);
+            console.log(`    ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            console.log("");
+        }
+    }
+    if (warnings.length > 0) {
+        console.log(`${console_chars_1.emoji.warning}  WARNINGS:`);
+        console.log((0, console_chars_1.createDivider)(60, "light"));
+        for (const issue of warnings) {
+            console.log(`  ${issue.file}:${issue.line}`);
+            console.log(`    ${issue.message}`);
+            if (verbose) {
+                console.log(`    ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            }
+            console.log("");
+        }
+    }
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`Routes scanned: ${files.length}`);
+    console.log(`Errors: ${errors.length}`);
+    console.log(`Warnings: ${warnings.length}`);
+    if (errors.length === 0 && warnings.length === 0) {
+        console.log(`\n${console_chars_1.emoji.success} Pagination validation looks good`);
+    }
+    console.log(`\n${console_chars_1.emoji.docs} Recommended patterns:`);
+    console.log(`   ${console_chars_1.chars.bullet} Default page size: ${RECOMMENDED_LIMITS.defaultPageSize}`);
+    console.log(`   ${console_chars_1.chars.bullet} Max page size: ${RECOMMENDED_LIMITS.maxPageSize}`);
+    console.log(`   ${console_chars_1.chars.bullet} Max offset: ${RECOMMENDED_LIMITS.maxOffset}`);
+    console.log("");
+    console.log('   const page = Math.max(1, parseInt(searchParams.get("page") || "1", 10));');
+    console.log('   const limit = Math.min(MAX_PAGE_SIZE, parseInt(searchParams.get("limit") || "20", 10));');
+    console.log("   const skip = (page - 1) * limit;");
+    if (errors.length > 0 && !warningOnly) {
+        process.exit(1);
+    }
+}
+main().catch(console.error);
+//# sourceMappingURL=pagination-validation.js.map

package/dist/checks/api/pagination-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination-validation.js","sourceRoot":"","sources":["../../../src/checks/api/pagination-validation.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;GAYG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,+BAA4B;AAC5B,2CAA6B;AAC7B,6DAAwE;AACxE,uFAAwF;AAGxF,iBAAiB;AACJ,QAAA,EAAE,GAAG,2BAA2B,CAAC;AACjC,QAAA,IAAI,GAAG,uBAAuB,CAAC;AAC/B,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,0CAA0C,CAAC;AACzD,QAAA,IAAI,GAAG,CAAC,KAAK,EAAC,YAAY,CAAC,CAAC;AAUzC,uCAAuC;AACvC,MAAM,mBAAmB,GAAG;IAC1B,6CAA6C;IAC7C,wCAAwC;IACxC,oBAAoB;IACpB,qDAAqD;IACrD,+BAA+B;IAC/B,wBAAwB;CACzB,CAAC;AAEF,wCAAwC;AACxC,MAAM,mBAAmB,GAAG;IAC1B,0BAA0B;IAC1B,gBAAgB;IAChB,sBAAsB;IACtB,oBAAoB;IACpB,YAAY;IACZ,mBAAmB;IACnB,kBAAkB;IAClB,cAAc;IACd,gCAAgC;IAChC,uBAAuB;IACvB,qBAAqB;IACrB,eAAe;IACf,mBAAmB;IACnB,wBAAwB;CACzB,CAAC;AAEF,iEAAiE;AACjE,MAAM,sBAAsB,GAAG,CAAC,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;AAEjG,qCAAqC;AACrC,MAAM,kBAAkB,GAAG;IACzB,WAAW,EAAE,GAAG;IAChB,eAAe,EAAE,EAAE;IACnB,SAAS,EAAE,KAAK;CACjB,CAAC;AAEF,KAAK,UAAU,aAAa;IAC1B,MAAM,QAAQ,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAA,WAAI,EAAC,OAAO,EAAE;YAClC,MAAM,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,cAAc,CAAC;SAC/D,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,OAAe;IAClD,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,oDAAoD;IACpD,MAAM,aAAa,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvE,0CAA0C;IAC1C,IAAI,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,wCAAwC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,8CAA8C;oBACvD,UAAU,EACR,8EAA8E;iBACjF,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,IAAI,aAAa,IAAI,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC;QACzD,sDAAsD;QACtD,MAAM,WAAW,GACf,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9C,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,iEAAiE;gBAC1E,UAAU,EAAE,sDAAsD;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACjF,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,KAAK,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,SAAS,GAAG,CAAC;gBACnB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,oBAAoB,KAAK,gCAAgC;gBAClE,UAAU,EAAE,wBAAwB,kBAAkB,CAAC,WAAW,UAAU;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,gEAAgE;YACzE,UAAU,EAAE,iCAAiC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,sCAAsC;IACtC,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC;IAClG,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAC3B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAM,GAAG,EAAE,CAAC,EAC9B,KAAK,CAAC,KAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,SAAS,GAAG,CAAC;gBACnB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,+CAA+C;gBACxD,UAAU,EAAE,0EAA0E;aACvF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,0DAA0D,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,CACnE,CAAC;YACF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,SAAS,GAAG,CAAC;gBACnB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,0DAA0D;gBACnE,UAAU,EAAE,6EAA6E;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,IAAA,6DAA+B,EAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1F,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,IAAI,2CAA2C,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAExD,MAAM,SAAS,GAAY,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,WAAW;YACT,CAAC,CAAC,GAAG,qBAAK,CAAC,OAAO,0BAA0B;YAC5C,CAAC,CAAC,GAAG,qBAAK,CAAC,KAAK,qBAAqB,CACxC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,OAAO,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,aAAa,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,OAAO,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,wBAAwB,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,MAAM,qBAAK,CAAC,MAAM,uBAAuB,kBAAkB,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CAAC,MAAM,qBAAK,CAAC,MAAM,mBAAmB,kBAAkB,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,MAAM,qBAAK,CAAC,MAAM,gBAAgB,kBAAkB,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;IAC3F,OAAO,CAAC,GAAG,CACT,4FAA4F,CAC7F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAEnD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist/checks/api/response-consistency.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env tsx
+/**
+ * API Response Consistency Preflight (BLOCKING)
+ *
+ * Ensures all API routes follow consistent response patterns:
+ * - Success responses have consistent structure
+ * - Error responses include proper status codes and messages
+ * - Pagination follows standard format
+ * - No mixing of response patterns
+ *
+ * Usage:
+ *   pnpm preflight:api-response
+ *   pnpm preflight:api-response:verbose
+ */
+export declare const id = "api/response-consistency";
+export declare const name = "Response Consistency";
+export declare const category = "api";
+export declare const blocking = true;
+export declare const description = "API Response Consistency Preflight (BLOCKING)";
+export declare const tags: string[];
+//# sourceMappingURL=response-consistency.d.ts.map

package/dist/checks/api/response-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-consistency.d.ts","sourceRoot":"","sources":["../../../src/checks/api/response-consistency.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AAWH,eAAO,MAAM,EAAE,6BAA6B,CAAC;AAC7C,eAAO,MAAM,IAAI,yBAAyB,CAAC;AAC3C,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,kDAAkD,CAAC;AAC3E,eAAO,MAAM,IAAI,UAAU,CAAC"}

package/dist/checks/api/response-consistency.js

@@ -0,0 +1,238 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * API Response Consistency Preflight (BLOCKING)
+ *
+ * Ensures all API routes follow consistent response patterns:
+ * - Success responses have consistent structure
+ * - Error responses include proper status codes and messages
+ * - Pagination follows standard format
+ * - No mixing of response patterns
+ *
+ * Usage:
+ *   pnpm preflight:api-response
+ *   pnpm preflight:api-response:verbose
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+const file_cache_1 = require("../../shared/file-cache");
+const glob_patterns_1 = require("../../shared/glob-patterns");
+const universal_progress_reporter_1 = require("../system/universal-progress-reporter");
+// Check metadata
+exports.id = "api/response-consistency";
+exports.name = "Response Consistency";
+exports.category = "api";
+exports.blocking = true;
+exports.description = "API Response Consistency Preflight (BLOCKING)";
+exports.tags = ["api"];
+const issues = [];
+// Standard response patterns we expect
+const EXPECTED_PATTERNS = {
+    success: ["data", "success", "result", "items", "message"],
+    error: ["error", "message", "code", "details"],
+    pagination: ["items", "data", "total", "page", "pageSize", "totalPages", "hasMore"],
+};
+// Inconsistent patterns to detect
+const INCONSISTENT_PATTERNS = [
+    {
+        // Returning raw array without wrapper
+        regex: /NextResponse\.json\s*\(\s*\[\s*[^\]]/g,
+        message: "Returning raw array - wrap in { data: [...] } for consistency",
+        severity: "warning",
+    },
+    {
+        // Inconsistent error format
+        regex: /NextResponse\.json\s*\(\s*\{\s*(?:err|errorMessage|msg)\s*:/g,
+        message: 'Non-standard error field - use { error: "message" } or { error: { message, code } }',
+        severity: "warning",
+    },
+    {
+        // Missing status code on error
+        regex: /NextResponse\.json\s*\(\s*\{\s*error\s*:[^}]+\}\s*\)(?!\s*,)/g,
+        message: "Error response without status code - add { status: 4xx/5xx }",
+        severity: "error",
+    },
+    {
+        // Returning string directly
+        regex: /NextResponse\.json\s*\(\s*["'`][^"'`]+["'`]\s*\)/g,
+        message: 'Returning string directly - wrap in object { message: "..." }',
+        severity: "error",
+    },
+    {
+        // Inconsistent success indicator
+        regex: /NextResponse\.json\s*\(\s*\{\s*(?:ok|isSuccess|succeeded)\s*:/g,
+        message: "Non-standard success field - use { success: true } if needed",
+        severity: "warning",
+    },
+    {
+        // Status in body instead of response options
+        regex: /NextResponse\.json\s*\(\s*\{[^}]*status\s*:\s*\d{3}[^}]*\}\s*\)/g,
+        message: "Status code in body - use NextResponse.json(data, { status: xxx })",
+        severity: "warning",
+    },
+];
+// Check for pagination consistency
+const PAGINATION_CHECKS = [
+    {
+        // Mixed pagination field names
+        hasTotal: /["']total["']\s*:/,
+        hasCount: /["']count["']\s*:/,
+        message: 'Mixed pagination fields (total vs count) - standardize on "total"',
+    },
+    {
+        // Mixed page vs offset
+        hasPage: /["']page["']\s*:/,
+        hasOffset: /["']offset["']\s*:/,
+        message: 'Mixed pagination style (page vs offset) - standardize on "page"',
+    },
+];
+// Files/routes to skip
+const SKIP_PATTERNS = (0, glob_patterns_1.extendExcludes)(glob_patterns_1.STANDARD_EXCLUDES, [
+    "/api/e2e/",
+    "/api/auth/test",
+    "/api/debug-",
+    "/api/dev/",
+]);
+function shouldSkipRoute(filePath) {
+    const normalized = filePath.replace(/\\/g, "/");
+    return SKIP_PATTERNS.some((pattern) => normalized.includes(pattern));
+}
+// CACHED FILE LISTS - Scan once, use everywhere
+let _cachedApiRouteFiles = null;
+async function getApiRouteFiles() {
+    if (!_cachedApiRouteFiles) {
+        _cachedApiRouteFiles = await file_cache_1.fileCache.getAPIRouteFiles();
+    }
+    return _cachedApiRouteFiles;
+}
+async function scanApiRoute(filePath) {
+    // Skip test/debug routes
+    if (shouldSkipRoute(filePath))
+        return;
+    const content = fs.readFileSync(filePath, "utf-8");
+    const lines = content.split("\n");
+    // Check for inconsistent patterns
+    for (const pattern of INCONSISTENT_PATTERNS) {
+        let match;
+        const regex = new RegExp(pattern.regex.source, pattern.regex.flags);
+        while ((match = regex.exec(content)) !== null) {
+            const beforeMatch = content.slice(0, match.index);
+            const lineNumber = beforeMatch.split("\n").length;
+            const line = lines[lineNumber - 1] || "";
+            if (line.trim().startsWith("//"))
+                continue;
+            issues.push({
+                file: filePath,
+                line: lineNumber,
+                severity: pattern.severity,
+                message: pattern.message,
+            });
+        }
+    }
+    // Check pagination consistency within file
+    for (const check of PAGINATION_CHECKS) {
+        const hasFirst = check.hasTotal ? check.hasTotal.test(content) : false;
+        const hasSecond = check.hasCount ? check.hasCount.test(content) : false;
+        if (hasFirst && hasSecond) {
+            issues.push({
+                file: filePath,
+                line: 1,
+                severity: "warning",
+                message: check.message,
+            });
+        }
+    }
+    // Check for proper error handling structure
+    const hasErrorResponse = /NextResponse\.json\s*\(\s*\{[^}]*error/g.test(content);
+    const hasTryCatch = /try\s*\{[\s\S]*catch/g.test(content);
+    if (hasErrorResponse && !hasTryCatch) {
+        issues.push({
+            file: filePath,
+            line: 1,
+            severity: "warning",
+            message: "Error response without try-catch - ensure errors are properly caught",
+        });
+    }
+}
+async function main() {
+    const reporter = (0, universal_progress_reporter_1.createUniversalProgressReporter)(path.basename(__filename, ".ts"));
+    const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
+    console.log("📡 API Response Consistency Preflight");
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    const apiRoutes = await getApiRouteFiles();
+    for (const file of apiRoutes) {
+        await scanApiRoute(file);
+    }
+    const errors = issues.filter((i) => i.severity === "error");
+    const warnings = issues.filter((i) => i.severity === "warning");
+    if (verbose || issues.length > 0) {
+        if (errors.length > 0) {
+            console.log(`\n${console_chars_1.emoji.error} ERRORS (blocking):`);
+            errors.forEach((issue) => {
+                console.log(`   ${issue.file}:${issue.line}`);
+                console.log(`      ${issue.message}`);
+            });
+        }
+        if (warnings.length > 0) {
+            console.log(`\n${console_chars_1.emoji.warning}  WARNINGS:`);
+            warnings.slice(0, 20).forEach((issue) => {
+                console.log(`   ${issue.file}:${issue.line}`);
+                console.log(`      ${issue.message}`);
+            });
+            if (warnings.length > 20) {
+                console.log(`   ... and ${warnings.length - 20} more warnings`);
+            }
+        }
+    }
+    console.log("\n" + (0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`API routes scanned: ${apiRoutes.length}`);
+    console.log(`Errors: ${errors.length}`);
+    console.log(`Warnings: ${warnings.length}`);
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} API Response Consistency FAILED`);
+        console.log("\nStandard patterns:");
+        console.log("  Success: { data: {...} } or { items: [...], total, page }");
+        console.log('  Error:   NextResponse.json({ error: "message" }, { status: 400 })');
+        console.log("  List:    { items: [...], total, page, pageSize, hasMore }");
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.success} API Response Consistency PASSED`);
+}
+main().catch(console.error);
+//# sourceMappingURL=response-consistency.js.map

package/dist/checks/api/response-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-consistency.js","sourceRoot":"","sources":["../../../src/checks/api/response-consistency.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;GAYG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,6DAAiE;AACjE,wDAAoD;AACpD,8DAA+E;AAC/E,uFAAwF;AAGxF,iBAAiB;AACJ,QAAA,EAAE,GAAG,0BAA0B,CAAC;AAChC,QAAA,IAAI,GAAG,sBAAsB,CAAC;AAC9B,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,+CAA+C,CAAC;AAC9D,QAAA,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;AAS5B,MAAM,MAAM,GAAY,EAAE,CAAC;AAE3B,uCAAuC;AACvC,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;IAC1D,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC;IAC9C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC;CACpF,CAAC;AAEF,kCAAkC;AAClC,MAAM,qBAAqB,GAAG;IAC5B;QACE,sCAAsC;QACtC,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,SAAkB;KAC7B;IACD;QACE,4BAA4B;QAC5B,KAAK,EAAE,8DAA8D;QACrE,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,SAAkB;KAC7B;IACD;QACE,+BAA+B;QAC/B,KAAK,EAAE,+DAA+D;QACtE,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,OAAgB;KAC3B;IACD;QACE,4BAA4B;QAC5B,KAAK,EAAE,mDAAmD;QAC1D,OAAO,EAAE,+DAA+D;QACxE,QAAQ,EAAE,OAAgB;KAC3B;IACD;QACE,iCAAiC;QACjC,KAAK,EAAE,gEAAgE;QACvE,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,SAAkB;KAC7B;IACD;QACE,6CAA6C;QAC7C,KAAK,EAAE,kEAAkE;QACzE,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,SAAkB;KAC7B;CACF,CAAC;AAEF,mCAAmC;AACnC,MAAM,iBAAiB,GAAG;IACxB;QACE,+BAA+B;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,mEAAmE;KAC7E;IACD;QACE,uBAAuB;QACvB,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,oBAAoB;QAC/B,OAAO,EAAE,iEAAiE;KAC3E;CACF,CAAC;AAEF,uBAAuB;AACvB,MAAM,aAAa,GAAG,IAAA,8BAAc,EAAC,iCAAiB,EAAE;IACtD,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,gDAAgD;AAEhD,IAAI,oBAAoB,GAAoB,IAAI,CAAC;AACjD,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,MAAM,sBAAS,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,yBAAyB;IACzB,IAAI,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO;IAEtC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,kCAAkC;IAClC,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC;QACV,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEpE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAElD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAE3C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACvE,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAExE,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,gBAAgB,GAAG,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE1D,IAAI,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,sEAAsE;SAChF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,IAAA,6DAA+B,EAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAElF,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAEhE,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,qBAAqB,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvB,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,aAAa,CAAC,CAAC;YAC7C,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtC,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,uBAAuB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,kCAAkC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AACpE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist/checks/api/response-schema-validation.d.ts

@@ -0,0 +1,25 @@
+#!/usr/bin/env tsx
+/**
+ * API Response Schema Validation Preflight (BLOCKING)
+ *
+ * Ensures API routes return consistent, typed responses that clients can rely on.
+ * Inconsistent response shapes cause client confusion and runtime errors.
+ *
+ * Patterns detected:
+ * - Missing error response structure
+ * - Inconsistent success/error field names
+ * - Returning raw primitives instead of objects
+ * - Missing pagination metadata on list endpoints
+ * - Inconsistent null vs undefined handling
+ *
+ * Usage:
+ *   pnpm preflight:api-response-schema
+ *   pnpm preflight:api-response-schema --verbose
+ */
+export declare const id = "api/response-schema-validation";
+export declare const name = "Response Schema Validation";
+export declare const category = "api";
+export declare const blocking = true;
+export declare const description = "API Response Schema Validation Preflight (BLOCKING)";
+export declare const tags: string[];
+//# sourceMappingURL=response-schema-validation.d.ts.map

package/dist/checks/api/response-schema-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-schema-validation.d.ts","sourceRoot":"","sources":["../../../src/checks/api/response-schema-validation.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAWH,eAAO,MAAM,EAAE,mCAAmC,CAAC;AACnD,eAAO,MAAM,IAAI,+BAA+B,CAAC;AACjD,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,wDAAwD,CAAC;AACjF,eAAO,MAAM,IAAI,UAAuB,CAAC"}