@empline/preflight 1.0.20

package/dist/checks/api/response-schema-validation.js

@@ -0,0 +1,288 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * API Response Schema Validation Preflight (BLOCKING)
+ *
+ * Ensures API routes return consistent, typed responses that clients can rely on.
+ * Inconsistent response shapes cause client confusion and runtime errors.
+ *
+ * Patterns detected:
+ * - Missing error response structure
+ * - Inconsistent success/error field names
+ * - Returning raw primitives instead of objects
+ * - Missing pagination metadata on list endpoints
+ * - Inconsistent null vs undefined handling
+ *
+ * Usage:
+ *   pnpm preflight:api-response-schema
+ *   pnpm preflight:api-response-schema --verbose
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+const file_cache_1 = require("../../shared/file-cache");
+const glob_patterns_1 = require("../../shared/glob-patterns");
+const universal_progress_reporter_1 = require("../system/universal-progress-reporter");
+// Check metadata
+exports.id = "api/response-schema-validation";
+exports.name = "Response Schema Validation";
+exports.category = "api";
+exports.blocking = true;
+exports.description = "API Response Schema Validation Preflight (BLOCKING)";
+exports.tags = ["api", "validation"];
+const issues = [];
+// Standard response patterns
+const RESPONSE_CHECKS = [
+    {
+        // Returning raw primitive (string, number, boolean)
+        regex: /NextResponse\.json\s*\(\s*(?:true|false|\d+|['"`][^'"`]+['"`])\s*(?:,|\))/g,
+        code: "RAW_PRIMITIVE",
+        message: "Returning raw primitive - wrap in object { success: true } or { data: value }",
+        severity: "error",
+    },
+    {
+        // Returning raw array without wrapper
+        regex: /NextResponse\.json\s*\(\s*\[\s*(?!\s*\])/g,
+        code: "RAW_ARRAY",
+        message: "Returning raw array - wrap in { data: [...] } or { items: [...] }",
+        severity: "error",
+    },
+    {
+        // Error without status code
+        regex: /NextResponse\.json\s*\(\s*\{\s*error\s*:[^}]+\}\s*\)(?!\s*,\s*\{)/g,
+        code: "ERROR_NO_STATUS",
+        message: "Error response without status code - add { status: 4xx }",
+        severity: "error",
+    },
+    {
+        // Non-standard error field names
+        regex: /NextResponse\.json\s*\(\s*\{\s*(?:err|errorMsg|errorMessage|msg|errMsg)\s*:/g,
+        code: "NONSTANDARD_ERROR",
+        message: 'Non-standard error field - use { error: "message" } or { error: { message, code } }',
+        severity: "warning",
+    },
+    {
+        // Non-standard success field names
+        regex: /NextResponse\.json\s*\(\s*\{\s*(?:ok|isSuccess|succeeded|isOk)\s*:/g,
+        code: "NONSTANDARD_SUCCESS",
+        message: "Non-standard success field - use { success: true/false }",
+        severity: "warning",
+    },
+    {
+        // Status code in body instead of options
+        regex: /NextResponse\.json\s*\(\s*\{[^}]*["']?status["']?\s*:\s*[45]\d{2}[^}]*\}\s*\)/g,
+        code: "STATUS_IN_BODY",
+        message: "HTTP status in response body - use NextResponse.json(data, { status: xxx })",
+        severity: "warning",
+    },
+    {
+        // Inconsistent null handling (returning null directly)
+        regex: /NextResponse\.json\s*\(\s*null\s*\)/g,
+        code: "NULL_RESPONSE",
+        message: "Returning null - use { data: null } or appropriate error response",
+        severity: "error",
+    },
+    {
+        // Undefined in response (will be stripped by JSON.stringify)
+        regex: /NextResponse\.json\s*\(\s*\{[^}]*:\s*undefined[^}]*\}/g,
+        code: "UNDEFINED_VALUE",
+        message: "undefined in response will be stripped - use null explicitly",
+        severity: "warning",
+    },
+];
+// List endpoint checks (for pagination)
+const LIST_ENDPOINT_CHECKS = [
+    {
+        // List endpoint without pagination metadata
+        hasItems: /["'](?:items|data)["']\s*:\s*\[/,
+        missingTotal: true,
+        code: "MISSING_PAGINATION",
+        message: "List response missing pagination - add total, page, pageSize, or hasMore",
+    },
+];
+// Files to skip
+const SKIP_PATTERNS = (0, glob_patterns_1.extendExcludes)(glob_patterns_1.STANDARD_EXCLUDES, [
+    "/api/e2e/",
+    "/api/dev/",
+    "/api/debug",
+    "/api/auth/test",
+    "/api/health",
+    "/api/cron/",
+]);
+function shouldSkip(filePath) {
+    const normalized = filePath.replace(/\\/g, "/");
+    return SKIP_PATTERNS.some((pattern) => normalized.includes(pattern));
+}
+function isListEndpoint(filePath, content) {
+    // Heuristics for list endpoints
+    const listIndicators = [
+        /findMany/,
+        /\.map\s*\(/,
+        /items\s*:/,
+        /\[\s*\.\.\./,
+        /list/i.test(filePath),
+        /search/i.test(filePath),
+        /all/i.test(filePath),
+    ];
+    return listIndicators.some((indicator) => typeof indicator === "boolean" ? indicator : indicator.test(content));
+}
+async function scanApiRoute(filePath) {
+    if (shouldSkip(filePath))
+        return;
+    const content = fs.readFileSync(filePath, "utf-8");
+    const lines = content.split("\n");
+    // Skip if no NextResponse.json
+    if (!content.includes("NextResponse.json"))
+        return;
+    // Check standard response patterns
+    for (const check of RESPONSE_CHECKS) {
+        let match;
+        const regex = new RegExp(check.regex.source, check.regex.flags);
+        while ((match = regex.exec(content)) !== null) {
+            const beforeMatch = content.slice(0, match.index);
+            const lineNumber = beforeMatch.split("\n").length;
+            // Skip comments
+            const line = lines[lineNumber - 1] || "";
+            if (line.trim().startsWith("//") || line.trim().startsWith("*")) {
+                continue;
+            }
+            issues.push({
+                file: filePath,
+                line: lineNumber,
+                severity: check.severity,
+                code: check.code,
+                message: check.message,
+            });
+        }
+    }
+    // Check list endpoints for pagination
+    if (isListEndpoint(filePath, content)) {
+        for (const check of LIST_ENDPOINT_CHECKS) {
+            if (check.hasItems.test(content)) {
+                // Check if pagination fields exist
+                const hasPagination = /["'](?:total|totalCount|page|pageSize|hasMore|nextCursor)["']\s*:/.test(content);
+                if (!hasPagination) {
+                    issues.push({
+                        file: filePath,
+                        line: 1,
+                        severity: "warning",
+                        code: check.code,
+                        message: check.message,
+                    });
+                }
+            }
+        }
+    }
+    // Check for mixed response patterns in same file
+    const hasDataField = /["']data["']\s*:/.test(content);
+    const hasItemsField = /["']items["']\s*:/.test(content);
+    const hasResultField = /["']result["']\s*:/.test(content);
+    const fieldCount = [hasDataField, hasItemsField, hasResultField].filter(Boolean).length;
+    if (fieldCount > 1) {
+        issues.push({
+            file: filePath,
+            line: 1,
+            severity: "warning",
+            code: "MIXED_RESPONSE_FIELDS",
+            message: "Mixed response field names (data/items/result) - standardize on one pattern",
+        });
+    }
+}
+async function main() {
+    const reporter = (0, universal_progress_reporter_1.createUniversalProgressReporter)(path.basename(__filename, ".ts"));
+    const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
+    console.log(`\n${console_chars_1.emoji.clipboard} API Response Schema Validation`);
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    const apiRoutes = await file_cache_1.fileCache.getAPIRouteFiles();
+    for (const file of apiRoutes) {
+        await scanApiRoute(file);
+    }
+    // Deduplicate
+    const seen = new Set();
+    const uniqueIssues = issues.filter((i) => {
+        const key = `${i.file}:${i.line}:${i.code}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+    const errors = uniqueIssues.filter((i) => i.severity === "error");
+    const warnings = uniqueIssues.filter((i) => i.severity === "warning");
+    if (verbose || uniqueIssues.length > 0) {
+        if (errors.length > 0) {
+            console.log(`\n${console_chars_1.emoji.error} ERRORS (blocking):`);
+            errors.slice(0, 15).forEach((issue) => {
+                console.log(`   ${issue.file}:${issue.line} [${issue.code}]`);
+                console.log(`      ${issue.message}`);
+            });
+            if (errors.length > 15) {
+                console.log(`   ... and ${errors.length - 15} more errors`);
+            }
+        }
+        if (warnings.length > 0) {
+            console.log(`\n${console_chars_1.emoji.warning}  WARNINGS:`);
+            warnings.slice(0, 10).forEach((issue) => {
+                console.log(`   ${issue.file}:${issue.line} [${issue.code}]`);
+                console.log(`      ${issue.message}`);
+            });
+            if (warnings.length > 10) {
+                console.log(`   ... and ${warnings.length - 10} more warnings`);
+            }
+        }
+    }
+    console.log("\n" + (0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`API routes scanned: ${apiRoutes.length}`);
+    console.log(`Errors: ${errors.length}`);
+    console.log(`Warnings: ${warnings.length}`);
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} API Response Schema Validation FAILED`);
+        console.log("\n" + console_chars_1.emoji.hint + " Standard patterns:");
+        console.log("  // Success (single item)");
+        console.log("  return NextResponse.json({ data: item, success: true });");
+        console.log("");
+        console.log("  // Success (list with pagination)");
+        console.log("  return NextResponse.json({ items, total, page, pageSize, hasMore });");
+        console.log("");
+        console.log("  // Error");
+        console.log('  return NextResponse.json({ error: "Not found" }, { status: 404 });');
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.success} API Response Schema Validation PASSED`);
+}
+main().catch(console.error);
+//# sourceMappingURL=response-schema-validation.js.map

package/dist/checks/api/response-schema-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-schema-validation.js","sourceRoot":"","sources":["../../../src/checks/api/response-schema-validation.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,6DAAiE;AACjE,wDAAoD;AACpD,8DAA+E;AAC/E,uFAAwF;AAGxF,iBAAiB;AACJ,QAAA,EAAE,GAAG,gCAAgC,CAAC;AACtC,QAAA,IAAI,GAAG,4BAA4B,CAAC;AACpC,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,qDAAqD,CAAC;AACpE,QAAA,IAAI,GAAG,CAAC,KAAK,EAAC,YAAY,CAAC,CAAC;AAUzC,MAAM,MAAM,GAAY,EAAE,CAAC;AAE3B,6BAA6B;AAC7B,MAAM,eAAe,GAAG;IACtB;QACE,oDAAoD;QACpD,KAAK,EAAE,4EAA4E;QACnF,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,+EAA+E;QACxF,QAAQ,EAAE,OAAgB;KAC3B;IACD;QACE,sCAAsC;QACtC,KAAK,EAAE,2CAA2C;QAClD,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,OAAgB;KAC3B;IACD;QACE,4BAA4B;QAC5B,KAAK,EAAE,oEAAoE;QAC3E,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,0DAA0D;QACnE,QAAQ,EAAE,OAAgB;KAC3B;IACD;QACE,iCAAiC;QACjC,KAAK,EAAE,8EAA8E;QACrF,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,SAAkB;KAC7B;IACD;QACE,mCAAmC;QACnC,KAAK,EAAE,qEAAqE;QAC5E,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,0DAA0D;QACnE,QAAQ,EAAE,SAAkB;KAC7B;IACD;QACE,yCAAyC;QACzC,KAAK,EAAE,gFAAgF;QACvF,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,6EAA6E;QACtF,QAAQ,EAAE,SAAkB;KAC7B;IACD;QACE,uDAAuD;QACvD,KAAK,EAAE,sCAAsC;QAC7C,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,OAAgB;KAC3B;IACD;QACE,6DAA6D;QAC7D,KAAK,EAAE,wDAAwD;QAC/D,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,SAAkB;KAC7B;CACF,CAAC;AAEF,wCAAwC;AACxC,MAAM,oBAAoB,GAAG;IAC3B;QACE,4CAA4C;QAC5C,QAAQ,EAAE,iCAAiC;QAC3C,YAAY,EAAE,IAAI;QAClB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,0EAA0E;KACpF;CACF,CAAC;AAEF,gBAAgB;AAChB,MAAM,aAAa,GAAG,IAAA,8BAAc,EAAC,iCAAiB,EAAE;IACtD,WAAW;IACX,WAAW;IACX,YAAY;IACZ,gBAAgB;IAChB,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,QAAgB;IAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,OAAe;IACvD,gCAAgC;IAChC,MAAM,cAAc,GAAG;QACrB,UAAU;QACV,YAAY;QACZ,WAAW;QACX,aAAa;QACb,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;KACtB,CAAC;IACF,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACvC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IAEjC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,+BAA+B;IAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO;IAEnD,mCAAmC;IACnC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC;QACV,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAElD,gBAAgB;YAChB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,mCAAmC;gBACnC,MAAM,aAAa,GACjB,mEAAmE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAEpF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC;wBACP,QAAQ,EAAE,SAAS;wBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE1D,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACxF,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,6EAA6E;SACvF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,IAAA,6DAA+B,EAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAElF,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,SAAS,iCAAiC,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,MAAM,sBAAS,CAAC,gBAAgB,EAAE,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,cAAc;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAEtE,IAAI,OAAO,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,qBAAqB,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpC,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,GAAG,EAAE,cAAc,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,aAAa,CAAC,CAAC;YAC7C,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtC,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,uBAAuB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,wCAAwC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,qBAAK,CAAC,IAAI,GAAG,qBAAqB,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,wCAAwC,CAAC,CAAC;AAC1E,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist/checks/api/response-time-budget.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env tsx
+/**
+ * API Response Time Budget Preflight
+ *
+ * Detects API routes that may have performance issues:
+ * - Missing caching headers
+ * - N+1 query patterns
+ * - Large response payloads without pagination
+ * - Missing timeout handling
+ */
+export declare const id = "api/response-time-budget";
+export declare const name = "Response Time Budget";
+export declare const category = "api";
+export declare const blocking = true;
+export declare const description = "API Response Time Budget Preflight";
+export declare const tags: string[];
+//# sourceMappingURL=response-time-budget.d.ts.map

package/dist/checks/api/response-time-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time-budget.d.ts","sourceRoot":"","sources":["../../../src/checks/api/response-time-budget.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAQH,eAAO,MAAM,EAAE,6BAA6B,CAAC;AAC7C,eAAO,MAAM,IAAI,yBAAyB,CAAC;AAC3C,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,uCAAuC,CAAC;AAChE,eAAO,MAAM,IAAI,UAAU,CAAC"}

package/dist/checks/api/response-time-budget.js

@@ -0,0 +1,294 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * API Response Time Budget Preflight
+ *
+ * Detects API routes that may have performance issues:
+ * - Missing caching headers
+ * - N+1 query patterns
+ * - Large response payloads without pagination
+ * - Missing timeout handling
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+// Check metadata
+exports.id = "api/response-time-budget";
+exports.name = "Response Time Budget";
+exports.category = "api";
+exports.blocking = true;
+exports.description = "API Response Time Budget Preflight";
+exports.tags = ["api"];
+const findings = [];
+function scanApiRoute(filePath) {
+    const content = fs.readFileSync(filePath, "utf-8");
+    const lines = content.split("\n");
+    const relativePath = path.relative(process.cwd(), filePath);
+    // Check for missing cache headers on GET routes
+    const hasGetHandler = /export\s+(async\s+)?function\s+GET/.test(content);
+    const hasCacheHeader = /Cache-Control|s-maxage|stale-while-revalidate|revalidate/.test(content);
+    if (hasGetHandler && !hasCacheHeader) {
+        findings.push({
+            file: relativePath,
+            line: 1,
+            message: "GET route missing cache headers. Consider adding Cache-Control or Next.js revalidate.",
+            severity: "warning",
+            code: "API_NO_CACHE",
+        });
+    }
+    lines.forEach((line, idx) => {
+        const lineNum = idx + 1;
+        // Check for findMany without take/limit (potential large response)
+        if (/\.findMany\s*\(/.test(line)) {
+            const queryBlock = lines.slice(idx, Math.min(idx + 15, lines.length)).join("\n");
+            if (!/take\s*:/.test(queryBlock) && !/limit/.test(queryBlock)) {
+                findings.push({
+                    file: relativePath,
+                    line: lineNum,
+                    message: "findMany without take/limit may return unbounded results. Add pagination.",
+                    severity: "warning",
+                    code: "API_UNBOUNDED_QUERY",
+                });
+            }
+        }
+        // Check for loops with database calls (N+1 pattern)
+        // Only flag if there's an AWAITED database call INSIDE the loop body
+        if (/for\s*\(/.test(line) && /\)\s*{?\s*$/.test(line.trim())) {
+            // Check for preflight-ignore on the line before the loop
+            const prevLine = idx > 0 ? lines[idx - 1] : "";
+            if (/preflight-ignore/.test(prevLine)) {
+                return; // Skip this loop
+            }
+            // Find the loop body by tracking braces
+            let braceCount = line.includes("{") ? 1 : 0;
+            let loopBodyLines = [line];
+            for (let i = idx + 1; i < Math.min(idx + 30, lines.length); i++) {
+                const l = lines[i];
+                loopBodyLines.push(l);
+                // Count braces
+                const opens = (l.match(/{/g) || []).length;
+                const closes = (l.match(/}/g) || []).length;
+                braceCount += opens - closes;
+                // If we started without a brace, look for the first one
+                if (braceCount === 0 && !line.includes("{") && l.includes("{")) {
+                    braceCount = 1;
+                }
+                // Loop body ends when braces are balanced
+                if (braceCount <= 0 && loopBodyLines.length > 1) {
+                    break;
+                }
+            }
+            const loopBlock = loopBodyLines.join("\n");
+            // Check if this is collecting promises for later execution
+            const isCollectingPromises = /\.push\s*\(\s*\n?\s*prisma\./.test(loopBlock) ||
+                /Promises\.push|promises\.push/.test(loopBlock);
+            // Must have await directly before prisma call in the loop (not tx. which is transaction)
+            const hasDatabaseCall = /await\s+prisma\.\w+\.(findUnique|findFirst|create|update|delete|upsert)\s*\(/.test(loopBlock);
+            // tx. calls inside transactions are fine - they're batched by the transaction
+            const isTransactionContext = /await\s+tx\./.test(loopBlock);
+            const isBatchOperation = /createMany|updateMany|deleteMany|\$transaction\s*\(/.test(loopBlock);
+            const isParallelExecution = /Promise\.all\s*\(/.test(lines.slice(Math.max(0, idx - 3), idx + 1).join("\n"));
+            const hasIgnore = /preflight-ignore/.test(loopBlock);
+            if (hasDatabaseCall &&
+                !isBatchOperation &&
+                !isParallelExecution &&
+                !isCollectingPromises &&
+                !isTransactionContext &&
+                !hasIgnore) {
+                findings.push({
+                    file: relativePath,
+                    line: lineNum,
+                    message: "Database query inside loop detected (N+1 pattern). Use include/select or batch queries.",
+                    severity: "error",
+                    code: "API_N_PLUS_ONE",
+                });
+            }
+        }
+        // For forEach/map, only flag if the callback contains await prisma
+        if (/\.forEach\s*\(\s*(async\s*)?\(/.test(line) || /\.map\s*\(\s*async\s*\(/.test(line)) {
+            // Check for preflight-ignore on the line before
+            const prevLine = idx > 0 ? lines[idx - 1] : "";
+            if (/preflight-ignore/.test(prevLine)) {
+                return; // Skip this loop
+            }
+            const loopBlock = lines.slice(idx, Math.min(idx + 10, lines.length)).join("\n");
+            // Only flag async callbacks with database calls (not tx. which is transaction)
+            const hasDatabaseCall = /await\s+prisma\.\w+\.(findUnique|findFirst|create|update|delete|upsert)\s*\(/.test(loopBlock);
+            const isTransactionContext = /await\s+tx\./.test(loopBlock);
+            const isBatchOperation = /createMany|updateMany|deleteMany|\$transaction\s*\(/.test(loopBlock);
+            const isParallelExecution = /Promise\.all\s*\(/.test(lines.slice(Math.max(0, idx - 3), idx + 1).join("\n"));
+            const hasIgnore = /preflight-ignore/.test(loopBlock);
+            if (hasDatabaseCall &&
+                !isBatchOperation &&
+                !isParallelExecution &&
+                !isTransactionContext &&
+                !hasIgnore) {
+                findings.push({
+                    file: relativePath,
+                    line: lineNum,
+                    message: "Database query inside loop detected (N+1 pattern). Use include/select or batch queries.",
+                    severity: "error",
+                    code: "API_N_PLUS_ONE",
+                });
+            }
+        }
+        // Check for missing error handling in async operations
+        if (/await\s+prisma\./.test(line)) {
+            const surroundingBlock = lines
+                .slice(Math.max(0, idx - 5), Math.min(idx + 5, lines.length))
+                .join("\n");
+            if (!/try\s*{|\.catch\(|catch\s*\(/.test(surroundingBlock)) {
+                findings.push({
+                    file: relativePath,
+                    line: lineNum,
+                    message: "Database operation without try/catch. Unhandled errors cause 500s.",
+                    severity: "warning",
+                    code: "API_NO_ERROR_HANDLING",
+                });
+            }
+        }
+        // Check for JSON.stringify on large objects without streaming
+        if (/JSON\.stringify\(/.test(line) && /findMany|getAll|list/.test(content)) {
+            findings.push({
+                file: relativePath,
+                line: lineNum,
+                message: "JSON.stringify on potentially large dataset. Consider streaming for large responses.",
+                severity: "warning",
+                code: "API_LARGE_JSON",
+            });
+        }
+        // Check for missing timeout on external API calls
+        if (/fetch\(/.test(line) && !/AbortController|timeout|signal/.test(content)) {
+            findings.push({
+                file: relativePath,
+                line: lineNum,
+                message: "External fetch without timeout. Add AbortController with timeout.",
+                severity: "warning",
+                code: "API_NO_TIMEOUT",
+            });
+        }
+        // Check for synchronous heavy operations
+        if (/JSON\.parse\(.*readFileSync|fs\.readFileSync/.test(line)) {
+            findings.push({
+                file: relativePath,
+                line: lineNum,
+                message: "Synchronous file read in API route blocks event loop. Use async/await.",
+                severity: "error",
+                code: "API_SYNC_IO",
+            });
+        }
+    });
+    // Check for missing rate limiting indicators
+    const hasRateLimiting = /rateLimit|rateLimiter|Ratelimit|x-ratelimit/.test(content);
+    const isMutationRoute = /POST|PUT|PATCH|DELETE/.test(content);
+    if (isMutationRoute && !hasRateLimiting) {
+        findings.push({
+            file: relativePath,
+            line: 1,
+            message: "Mutation route without rate limiting. Consider adding rate limits.",
+            severity: "warning",
+            code: "API_NO_RATE_LIMIT",
+        });
+    }
+}
+function getApiRoutes() {
+    const files = [];
+    const scanDir = (dir) => {
+        if (!fs.existsSync(dir))
+            return;
+        const entries = fs.readdirSync(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                scanDir(fullPath);
+            }
+            else if (entry.name === "route.ts" || entry.name === "route.js") {
+                files.push(fullPath);
+            }
+        }
+    };
+    scanDir("app/api");
+    return files;
+}
+async function main() {
+    console.log(`${console_chars_1.emoji.search} Checking API response time budgets...\n`);
+    const apiRoutes = getApiRoutes();
+    for (const route of apiRoutes) {
+        scanApiRoute(route);
+    }
+    // Deduplicate
+    const uniqueFindings = findings.filter((f, i, arr) => arr.findIndex((x) => x.file === f.file && x.line === f.line && x.code === f.code) === i);
+    const errors = uniqueFindings.filter((f) => f.severity === "error");
+    const warnings = uniqueFindings.filter((f) => f.severity === "warning");
+    if (errors.length > 0) {
+        console.log(`${console_chars_1.emoji.error} Performance Errors (blocking):`);
+        for (const f of errors) {
+            console.log(`  ${f.file}:${f.line} [${f.code}]`);
+            console.log(`    ${f.message}`);
+        }
+        console.log("");
+    }
+    if (warnings.length > 0) {
+        console.log(`${console_chars_1.emoji.warning}  Performance Warnings:`);
+        for (const f of warnings.slice(0, 15)) {
+            console.log(`  ${f.file}:${f.line} [${f.code}]`);
+        }
+        if (warnings.length > 15) {
+            console.log(`  ... and ${warnings.length - 15} more warnings`);
+        }
+        console.log("");
+    }
+    // Write findings
+    const findingsPath = process.env.PREFLIGHT_FINDINGS_PATH;
+    if (findingsPath) {
+        fs.writeFileSync(findingsPath, JSON.stringify(uniqueFindings, null, 2));
+    }
+    console.log(`${console_chars_1.emoji.chart} Scanned ${apiRoutes.length} API routes`);
+    console.log(`   Errors: ${errors.length}`);
+    console.log(`   Warnings: ${warnings.length}`);
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} API performance check failed`);
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.success} API performance check passed`);
+}
+main().catch((err) => {
+    console.error("Preflight error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=response-time-budget.js.map

package/dist/checks/api/response-time-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-time-budget.js","sourceRoot":"","sources":["../../../src/checks/api/response-time-budget.ts"],"names":[],"mappings":";;AACA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,6DAAkD;AAGlD,iBAAiB;AACJ,QAAA,EAAE,GAAG,0BAA0B,CAAC;AAChC,QAAA,IAAI,GAAG,sBAAsB,CAAC;AAC9B,QAAA,QAAQ,GAAG,KAAK,CAAC;AACjB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,oCAAoC,CAAC;AACnD,QAAA,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;AAU5B,MAAM,QAAQ,GAAc,EAAE,CAAC;AAE/B,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE5D,gDAAgD;IAChD,MAAM,aAAa,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,0DAA0D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEhG,IAAI,aAAa,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,CAAC;YACP,OAAO,EACL,uFAAuF;YACzF,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC;QAExB,mEAAmE;QACnE,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,2EAA2E;oBACpF,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,qBAAqB;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,qEAAqE;QACrE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,yDAAyD;YACzD,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,iBAAiB;YAC3B,CAAC;YAED,wCAAwC;YACxC,IAAI,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,aAAa,GAAG,CAAC,IAAI,CAAC,CAAC;YAE3B,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAChE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnB,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAEtB,eAAe;gBACf,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC5C,UAAU,IAAI,KAAK,GAAG,MAAM,CAAC;gBAE7B,wDAAwD;gBACxD,IAAI,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/D,UAAU,GAAG,CAAC,CAAC;gBACjB,CAAC;gBAED,0CAA0C;gBAC1C,IAAI,UAAU,IAAI,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChD,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE3C,2DAA2D;YAC3D,MAAM,oBAAoB,GACxB,8BAA8B,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC9C,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAElD,yFAAyF;YACzF,MAAM,eAAe,GACnB,8EAA8E,CAAC,IAAI,CACjF,SAAS,CACV,CAAC;YACJ,8EAA8E;YAC9E,MAAM,oBAAoB,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,gBAAgB,GAAG,qDAAqD,CAAC,IAAI,CACjF,SAAS,CACV,CAAC;YACF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,IAAI,CAClD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACtD,CAAC;YACF,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAErD,IACE,eAAe;gBACf,CAAC,gBAAgB;gBACjB,CAAC,mBAAmB;gBACpB,CAAC,oBAAoB;gBACrB,CAAC,oBAAoB;gBACrB,CAAC,SAAS,EACV,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EACL,yFAAyF;oBAC3F,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,gBAAgB;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxF,gDAAgD;YAChD,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,iBAAiB;YAC3B,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEhF,+EAA+E;YAC/E,MAAM,eAAe,GACnB,8EAA8E,CAAC,IAAI,CACjF,SAAS,CACV,CAAC;YACJ,MAAM,oBAAoB,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,gBAAgB,GAAG,qDAAqD,CAAC,IAAI,CACjF,SAAS,CACV,CAAC;YACF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,IAAI,CAClD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACtD,CAAC;YACF,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAErD,IACE,eAAe;gBACf,CAAC,gBAAgB;gBACjB,CAAC,mBAAmB;gBACpB,CAAC,oBAAoB;gBACrB,CAAC,SAAS,EACV,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EACL,yFAAyF;oBAC3F,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,gBAAgB;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,gBAAgB,GAAG,KAAK;iBAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC3D,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,oEAAoE;oBAC7E,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,uBAAuB;iBAC9B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO;gBACb,OAAO,EACL,sFAAsF;gBACxF,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,CAAC;QAED,kDAAkD;QAClD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,mEAAmE;gBAC5E,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,CAAC;QAED,yCAAyC;QACzC,IAAI,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,wEAAwE;gBACjF,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,aAAa;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,MAAM,eAAe,GAAG,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,eAAe,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE9D,IAAI,eAAe,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,oEAAoE;YAC7E,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,mBAAmB;SAC1B,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,EAAE;QAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAEhC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAClE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,MAAM,0CAA0C,CAAC,CAAC;IAEvE,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,cAAc;IACd,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAC1F,CAAC;IAEF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAExE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,iCAAiC,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACzD,IAAI,YAAY,EAAE,CAAC;QACjB,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,YAAY,SAAS,CAAC,MAAM,aAAa,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAE/C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,+BAA+B,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACjE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/checks/api/variant-switching-integrity.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Preflight: Variant Switching Integrity Validation
+ *
+ * RULE: The variant switching feature must maintain its core components:
+ * 1. API must return variants array with required fields
+ * 2. ListingShowcaseCard must accept variants and activeFilters props
+ * 3. ListingsGrid must pass filterState to cards
+ * 4. Types must include ListingVariant interface
+ *
+ * This ensures product cards can display different variants (graders/conditions)
+ * based on filter selection.
+ *
+ * @blocking true
+ * @category api
+ */
+export declare const id = "api/variant-switching-integrity";
+export declare const name = "Variant Switching Integrity";
+export declare const category = "api";
+export declare const blocking = true;
+export declare const description = "Preflight: Variant Switching Integrity Validation";
+export declare const tags: string[];
+//# sourceMappingURL=variant-switching-integrity.d.ts.map

package/dist/checks/api/variant-switching-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"variant-switching-integrity.d.ts","sourceRoot":"","sources":["../../../src/checks/api/variant-switching-integrity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,eAAO,MAAM,EAAE,oCAAoC,CAAC;AACpD,eAAO,MAAM,IAAI,gCAAgC,CAAC;AAClD,eAAO,MAAM,QAAQ,QAAQ,CAAC;AAC9B,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,sDAAsD,CAAC;AAC/E,eAAO,MAAM,IAAI,UAAU,CAAC"}