@empline/preflight 1.0.20

package/dist/checks/business/idempotency-key-validation.js

@@ -0,0 +1,275 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Idempotency Key Validation Preflight (BLOCKING)
+ *
+ * Ensures critical operations (payments, orders, refunds) implement
+ * idempotency keys to prevent duplicate operations.
+ *
+ * Idempotency keys allow safe retries of operations without creating
+ * duplicates (e.g., charging a customer twice).
+ *
+ * Checks for:
+ * - Payment capture routes without idempotency handling
+ * - Order creation without duplicate prevention
+ * - Refund operations without idempotency
+ * - Webhook handlers without replay protection
+ *
+ * Usage:
+ *   pnpm preflight:idempotency
+ *   pnpm preflight:idempotency --verbose
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("fs"));
+const glob_1 = require("glob");
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+const universal_progress_reporter_1 = require("../system/universal-progress-reporter");
+// Check metadata
+exports.id = "business/idempotency-key-validation";
+exports.name = "Idempotency Key Validation";
+exports.category = "business";
+exports.blocking = true;
+exports.description = "Idempotency Key Validation Preflight (BLOCKING)";
+exports.tags = ["business", "validation"];
+// Critical routes that MUST have idempotency
+const CRITICAL_ROUTES = [
+    { pattern: /api\/orders\/capture/i, name: "Payment Capture" },
+    { pattern: /api\/orders\/create/i, name: "Order Creation" },
+    { pattern: /api\/refunds/i, name: "Refund Processing" },
+    { pattern: /api\/payouts/i, name: "Payout Processing" },
+    { pattern: /api\/subscriptions.*create/i, name: "Subscription Creation" },
+    { pattern: /api\/webhooks\/paypal/i, name: "PayPal Webhook" },
+    { pattern: /api\/webhooks\/stripe/i, name: "Stripe Webhook" },
+];
+// Patterns indicating idempotency implementation
+const IDEMPOTENCY_PATTERNS = [
+    /idempotency[_-]?key/i,
+    /idempotent/i,
+    /request[_-]?id/i,
+    /x-idempotency-key/i,
+    /Idempotency-Key/,
+];
+// Patterns indicating duplicate prevention
+const DUPLICATE_PREVENTION_PATTERNS = [
+    /findFirst.*where.*AND/i,
+    /upsert/i,
+    /createMany.*skipDuplicates/i,
+    /ON\s+CONFLICT/i,
+    /INSERT.*ON\s+DUPLICATE/i,
+    /unique.*constraint/i,
+    /duplicate.*check/i,
+    /already.*exists/i,
+    /existing.*order/i,
+    /existing.*payment/i,
+];
+// Patterns indicating webhook replay protection
+const REPLAY_PROTECTION_PATTERNS = [
+    /webhook[_-]?id/i,
+    /event[_-]?id/i,
+    /processed[_-]?events/i,
+    /already.*processed/i,
+    /duplicate.*webhook/i,
+    /replay.*attack/i,
+    /timestamp.*validation/i,
+    /signature.*verif/i,
+];
+async function findCriticalRoutes() {
+    const patterns = ["app/api/**/*.ts", "pages/api/**/*.ts"];
+    const files = [];
+    for (const pattern of patterns) {
+        const matches = await (0, glob_1.glob)(pattern, {
+            ignore: ["**/node_modules/**", "**/*.test.ts", "**/*.spec.ts"],
+        });
+        files.push(...matches);
+    }
+    return files;
+}
+function checkFile(filePath, content) {
+    const issues = [];
+    const lines = content.split("\n");
+    // Check if this is a critical route
+    const isCriticalRoute = CRITICAL_ROUTES.some((route) => route.pattern.test(filePath));
+    const routeName = CRITICAL_ROUTES.find((route) => route.pattern.test(filePath))?.name || "Unknown";
+    // Check for idempotency patterns
+    const hasIdempotencyKey = IDEMPOTENCY_PATTERNS.some((pattern) => pattern.test(content));
+    const hasDuplicateCheck = DUPLICATE_PREVENTION_PATTERNS.some((pattern) => pattern.test(content));
+    const hasReplayProtection = REPLAY_PROTECTION_PATTERNS.some((pattern) => pattern.test(content));
+    // Check for POST/PUT handlers
+    const hasPostHandler = /export\s+async\s+function\s+POST/i.test(content);
+    const hasPutHandler = /export\s+async\s+function\s+PUT/i.test(content);
+    if (isCriticalRoute) {
+        // Critical routes MUST have idempotency
+        if (!hasIdempotencyKey && !hasDuplicateCheck) {
+            // Find the POST/PUT function line
+            let lineNumber = 1;
+            for (let i = 0; i < lines.length; i++) {
+                if (/export\s+async\s+function\s+(POST|PUT)/i.test(lines[i])) {
+                    lineNumber = i + 1;
+                    break;
+                }
+            }
+            issues.push({
+                file: filePath,
+                line: lineNumber,
+                severity: "error",
+                message: `${routeName} route missing idempotency protection`,
+                suggestion: "Add idempotency key header check or database duplicate prevention",
+            });
+        }
+        // Webhook routes need replay protection
+        if (filePath.includes("webhook") && !hasReplayProtection) {
+            issues.push({
+                file: filePath,
+                line: 1,
+                severity: "error",
+                message: "Webhook handler missing replay protection",
+                suggestion: "Store processed event IDs and check before processing",
+            });
+        }
+    }
+    else if ((hasPostHandler || hasPutHandler) && filePath.includes("api")) {
+        // Non-critical routes should still consider idempotency for mutations
+        const createsData = /prisma\.[a-z]+\.create\s*\(/i.test(content);
+        const updatesData = /prisma\.[a-z]+\.update\s*\(/i.test(content);
+        if (createsData && !hasIdempotencyKey && !hasDuplicateCheck) {
+            issues.push({
+                file: filePath,
+                line: 1,
+                severity: "info",
+                message: "API route creates data without idempotency protection",
+                suggestion: "Consider adding idempotency for safe retries",
+            });
+        }
+    }
+    return {
+        file: filePath,
+        hasIdempotencyKey,
+        hasReplayProtection,
+        hasDuplicateCheck,
+        issues,
+    };
+}
+async function main() {
+    const reporter = (0, universal_progress_reporter_1.createUniversalProgressReporter)(path.basename(__filename, ".ts"));
+    const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
+    console.log(`${console_chars_1.emoji.key} Idempotency Key Validation Preflight`);
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    const files = await findCriticalRoutes();
+    console.log(`Scanning ${files.length} API routes...\n`);
+    const results = [];
+    const allIssues = [];
+    for (const file of files) {
+        try {
+            const content = fs.readFileSync(file, "utf-8");
+            const result = checkFile(file, content);
+            results.push(result);
+            allIssues.push(...result.issues);
+        }
+        catch (error) {
+            // Skip files that can't be read
+        }
+    }
+    // Group by severity
+    const errors = allIssues.filter((i) => i.severity === "error");
+    const warnings = allIssues.filter((i) => i.severity === "warning");
+    const info = allIssues.filter((i) => i.severity === "info");
+    // Report critical routes status
+    console.log(`${console_chars_1.emoji.clipboard} Critical Routes Status:`);
+    console.log((0, console_chars_1.createDivider)(60, "light"));
+    for (const route of CRITICAL_ROUTES) {
+        const matchingFiles = results.filter((r) => route.pattern.test(r.file));
+        if (matchingFiles.length === 0) {
+            console.log(`  ${console_chars_1.emoji.info} ${route.name}: Not found`);
+        }
+        else {
+            const hasProtection = matchingFiles.some((f) => f.hasIdempotencyKey || f.hasDuplicateCheck);
+            const icon = hasProtection ? `${console_chars_1.emoji.success}` : `${console_chars_1.emoji.error}`;
+            console.log(`  ${icon} ${route.name}: ${hasProtection ? "Protected" : "UNPROTECTED"}`);
+        }
+    }
+    console.log("");
+    if (errors.length > 0) {
+        console.log(`${console_chars_1.emoji.error} ERRORS (blocking):`);
+        console.log((0, console_chars_1.createDivider)(60, "light"));
+        for (const issue of errors) {
+            console.log(`  ${issue.file}:${issue.line}`);
+            console.log(`    ${issue.message}`);
+            console.log(`    ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            console.log("");
+        }
+    }
+    if (warnings.length > 0) {
+        console.log(`${console_chars_1.emoji.warning}  WARNINGS:`);
+        console.log((0, console_chars_1.createDivider)(60, "light"));
+        for (const issue of warnings) {
+            console.log(`  ${issue.file}:${issue.line}`);
+            console.log(`    ${issue.message}`);
+            if (verbose) {
+                console.log(`    ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            }
+            console.log("");
+        }
+    }
+    if (verbose && info.length > 0) {
+        console.log(`${console_chars_1.emoji.info}  INFO:`);
+        console.log((0, console_chars_1.createDivider)(60, "light"));
+        for (const issue of info) {
+            console.log(`  ${issue.file}`);
+            console.log(`    ${issue.message}`);
+            console.log("");
+        }
+    }
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`Routes scanned: ${files.length}`);
+    console.log(`Errors: ${errors.length}`);
+    console.log(`Warnings: ${warnings.length}`);
+    console.log(`Info: ${info.length}`);
+    if (errors.length === 0) {
+        console.log(`\n${console_chars_1.emoji.success} All critical routes have idempotency protection`);
+    }
+    console.log(`\n${console_chars_1.emoji.docs} Implementation patterns:`);
+    console.log(`   ${console_chars_1.chars.bullet} Header: X-Idempotency-Key or Idempotency-Key`);
+    console.log(`   ${console_chars_1.chars.bullet} Database: Unique constraint on (userId, requestId)`);
+    console.log(`   ${console_chars_1.chars.bullet} Webhook: Store event_id, check before processing`);
+    console.log(`   ${console_chars_1.chars.bullet} PayPal: Use PayPal-Request-Id header`);
+    if (errors.length > 0) {
+        process.exit(1);
+    }
+}
+main().catch(console.error);
+//# sourceMappingURL=idempotency-key-validation.js.map

package/dist/checks/business/idempotency-key-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency-key-validation.js","sourceRoot":"","sources":["../../../src/checks/business/idempotency-key-validation.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;;GAkBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,+BAA4B;AAC5B,2CAA6B;AAC7B,6DAAwE;AACxE,uFAAwF;AAGxF,iBAAiB;AACJ,QAAA,EAAE,GAAG,qCAAqC,CAAC;AAC3C,QAAA,IAAI,GAAG,4BAA4B,CAAC;AACpC,QAAA,QAAQ,GAAG,UAAU,CAAC;AACtB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,iDAAiD,CAAC;AAChE,QAAA,IAAI,GAAG,CAAC,UAAU,EAAC,YAAY,CAAC,CAAC;AAkB9C,6CAA6C;AAC7C,MAAM,eAAe,GAAG;IACtB,EAAE,OAAO,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC7D,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC3D,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACvD,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACvD,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACzE,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC7D,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,gBAAgB,EAAE;CAC9D,CAAC;AAEF,iDAAiD;AACjD,MAAM,oBAAoB,GAAG;IAC3B,sBAAsB;IACtB,aAAa;IACb,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;CAClB,CAAC;AAEF,2CAA2C;AAC3C,MAAM,6BAA6B,GAAG;IACpC,wBAAwB;IACxB,SAAS;IACT,6BAA6B;IAC7B,gBAAgB;IAChB,yBAAyB;IACzB,qBAAqB;IACrB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;CACrB,CAAC;AAEF,gDAAgD;AAChD,MAAM,0BAA0B,GAAG;IACjC,iBAAiB;IACjB,eAAe;IACf,uBAAuB;IACvB,qBAAqB;IACrB,qBAAqB;IACrB,iBAAiB;IACjB,wBAAwB;IACxB,mBAAmB;CACpB,CAAC;AAEF,KAAK,UAAU,kBAAkB;IAC/B,MAAM,QAAQ,GAAG,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAE1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAA,WAAI,EAAC,OAAO,EAAE;YAClC,MAAM,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,cAAc,CAAC;SAC/D,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,OAAe;IAClD,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,oCAAoC;IACpC,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtF,MAAM,SAAS,GACb,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC;IAEnF,iCAAiC;IACjC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACjG,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhG,8BAA8B;IAC9B,MAAM,cAAc,GAAG,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEvE,IAAI,eAAe,EAAE,CAAC;QACpB,wCAAwC;QACxC,IAAI,CAAC,iBAAiB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC7C,kCAAkC;YAClC,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,IAAI,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,GAAG,SAAS,uCAAuC;gBAC5D,UAAU,EAAE,mEAAmE;aAChF,CAAC,CAAC;QACL,CAAC;QAED,wCAAwC;QACxC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,2CAA2C;gBACpD,UAAU,EAAE,uDAAuD;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,cAAc,IAAI,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,sEAAsE;QACtE,MAAM,WAAW,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEjE,IAAI,WAAW,IAAI,CAAC,iBAAiB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,uDAAuD;gBAChE,UAAU,EAAE,8CAA8C;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,iBAAiB;QACjB,mBAAmB;QACnB,iBAAiB;QACjB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,IAAA,6DAA+B,EAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAElF,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,GAAG,uCAAuC,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAExD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,SAAS,GAAY,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IAE5D,gCAAgC;IAChC,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,SAAS,0BAA0B,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,aAAa,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC5F,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,qBAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,qBAAK,CAAC,KAAK,EAAE,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,qBAAqB,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,OAAO,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,aAAa,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,OAAO,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,IAAI,SAAS,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,kDAAkD,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,2BAA2B,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,MAAM,qBAAK,CAAC,MAAM,+CAA+C,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,MAAM,qBAAK,CAAC,MAAM,qDAAqD,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,MAAM,qBAAK,CAAC,MAAM,mDAAmD,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,MAAM,qBAAK,CAAC,MAAM,uCAAuC,CAAC,CAAC;IAEvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/dist/checks/business/image-metadata-injection.d.ts

@@ -0,0 +1,19 @@
+#!/usr/bin/env tsx
+/**
+ * Image Metadata Injection Preflight
+ *
+ * Validates that IPTC/XMP metadata injection is properly integrated:
+ * 1. Metadata injection module exists with required functions
+ * 2. Approval flow calls metadata injection
+ * 3. SEO metadata fields are generated (alt text, title, description, keywords)
+ * 4. Card data (brand, player, year, series) is included in metadata
+ *
+ * This ensures Google Images can read embedded metadata for SEO.
+ */
+export declare const id = "business/image-metadata-injection";
+export declare const name = "Image Metadata Injection";
+export declare const category = "business";
+export declare const blocking = true;
+export declare const description = "Image Metadata Injection Preflight";
+export declare const tags: string[];
+//# sourceMappingURL=image-metadata-injection.d.ts.map

package/dist/checks/business/image-metadata-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-metadata-injection.d.ts","sourceRoot":"","sources":["../../../src/checks/business/image-metadata-injection.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAOH,eAAO,MAAM,EAAE,sCAAsC,CAAC;AACtD,eAAO,MAAM,IAAI,6BAA6B,CAAC;AAC/C,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,uCAAuC,CAAC;AAChE,eAAO,MAAM,IAAI,UAAe,CAAC"}