@empline/preflight 1.0.20

package/dist/checks/business/price-display-validation.js

@@ -0,0 +1,152 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Price Display Validation Preflight (BLOCKING)
+ *
+ * Prevent financial display bugs by enforcing canonical formatting helpers
+ * rather than inline `$${amount.toFixed(2)}` patterns in UI.
+ *
+ * Scope:
+ * - app/ (all TSX UI files)
+ * - components/ (all TSX UI files)
+ *
+ * Rule (blocking):
+ * - Do not render currency via `$${x.toFixed(2)}` or `"$" + x.toFixed(2)`.
+ * - Use `formatCurrency(x)` from '@/lib/utils/format' and append suffixes like '/mo'.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const console_chars_1 = require("../../utils/console-chars");
+const file_cache_1 = require("../../shared/file-cache");
+const glob_patterns_1 = require("../../shared/glob-patterns");
+const universal_progress_reporter_1 = require("../system/universal-progress-reporter");
+const findings_writer_1 = require("../../utils/findings-writer");
+// Check metadata
+exports.id = "business/price-display-validation";
+exports.name = "Price Display Validation";
+exports.category = "business";
+exports.blocking = true;
+exports.description = "Price Display Validation Preflight (BLOCKING)";
+exports.tags = ["business", "validation"];
+const EXCLUDED = (0, glob_patterns_1.extendExcludes)(glob_patterns_1.STANDARD_EXCLUDES_WITH_TESTS, [
+    "**/scripts/**",
+    "**/test-results/**",
+]);
+function normalizeRel(p) {
+    return p.replace(/\\/g, "/");
+}
+function snippetFrom(text, idx) {
+    const start = Math.max(0, idx - 60);
+    const end = Math.min(text.length, idx + 120);
+    return text.slice(start, end).replace(/\s+/g, " ").trim();
+}
+const UNSAFE_PATTERNS = [
+    {
+        code: "currency_toFixed_template",
+        regex: /\$\$\{[^}]*?\.toFixed\s*\(\s*2\s*\)[^}]*?\}/g,
+        message: "Inline currency formatting via toFixed(2) in template string",
+    },
+    {
+        code: "currency_toFixed_concat",
+        regex: /['\"]\$['\"]\s*\+\s*[^;\n]*?\.toFixed\s*\(\s*2\s*\)/g,
+        message: "Inline currency formatting via '$' + x.toFixed(2)",
+    },
+];
+async function main() {
+    console.log(`\n${console_chars_1.emoji.chart} PRICE DISPLAY VALIDATION (BLOCKING)`);
+    console.log((0, console_chars_1.createDivider)(80, "heavy"));
+    const reporter = (0, universal_progress_reporter_1.createUniversalProgressReporter)("Price Display Validation");
+    const appFiles = await file_cache_1.fileCache.getFiles("app/**/*.tsx", { ignore: EXCLUDED });
+    const componentFiles = await file_cache_1.fileCache.getFiles("components/**/*.tsx", { ignore: EXCLUDED });
+    const files = Array.from(new Set([...appFiles, ...componentFiles]));
+    const issues = [];
+    await reporter.processFiles(files, async (file) => {
+        const rel = normalizeRel(path.relative(process.cwd(), file));
+        const content = fs.readFileSync(file, "utf8");
+        // Allow tests to use mocks freely
+        if (rel.includes("/tests/") || rel.includes(".test.") || rel.includes(".spec."))
+            return;
+        for (const p of UNSAFE_PATTERNS) {
+            let m;
+            while ((m = p.regex.exec(content)) !== null) {
+                // If already using formatCurrency inside the template, skip.
+                if (/formatCurrency\s*\(/.test(m[0]))
+                    continue;
+                const lc = (0, findings_writer_1.indexToLineCol)(content, m.index);
+                issues.push({
+                    file: rel,
+                    line: lc.line,
+                    col: lc.col,
+                    message: p.message,
+                    suggestion: "Use formatCurrency(amount) from '@/lib/utils/format' (or formatMoneyFixed for custom decimals).",
+                    snippet: snippetFrom(content, m.index),
+                });
+            }
+        }
+    });
+    const findings = issues.map((i) => ({
+        severity: "error",
+        code: "price_display_inline_formatting",
+        message: `${i.message}. ${i.suggestion}`,
+        file: i.file,
+        range: { startLine: i.line, startColumn: i.col },
+    }));
+    (0, findings_writer_1.writeFindings)(findings);
+    if (issues.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} BLOCKING: ${issues.length} price display issue(s) found`);
+        console.log((0, console_chars_1.createDivider)(80, "heavy"));
+        for (const i of issues.slice(0, 25)) {
+            console.log(`${console_chars_1.emoji.error} ${i.file}:${i.line}:${i.col}`);
+            console.log(`  ${i.message}`);
+            console.log(`  Suggestion: ${i.suggestion}`);
+            console.log(`  Snippet: ${i.snippet}`);
+            console.log();
+        }
+        if (issues.length > 25) {
+            console.log(`... and ${issues.length - 25} more`);
+        }
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.success} Price display formatting looks consistent`);
+    process.exit(0);
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=price-display-validation.js.map

package/dist/checks/business/price-display-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"price-display-validation.js","sourceRoot":"","sources":["../../../src/checks/business/price-display-validation.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,4CAA8B;AAC9B,gDAAkC;AAClC,6DAAiE;AACjE,wDAAoD;AACpD,8DAA0F;AAC1F,uFAAwF;AACxF,iEAAmG;AAGnG,iBAAiB;AACJ,QAAA,EAAE,GAAG,mCAAmC,CAAC;AACzC,QAAA,IAAI,GAAG,0BAA0B,CAAC;AAClC,QAAA,QAAQ,GAAG,UAAU,CAAC;AACtB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,+CAA+C,CAAC;AAC9D,QAAA,IAAI,GAAG,CAAC,UAAU,EAAC,YAAY,CAAC,CAAC;AAW9C,MAAM,QAAQ,GAAG,IAAA,8BAAc,EAAC,4CAA4B,EAAE;IAC5D,eAAe;IACf,oBAAoB;CACrB,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,eAAe,GAA4D;IAC/E;QACE,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,8CAA8C;QACrD,OAAO,EAAE,8DAA8D;KACxE;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,sDAAsD;QAC7D,OAAO,EAAE,mDAAmD;KAC7D;CACF,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,sCAAsC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,IAAA,6DAA+B,EAAC,0BAA0B,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG,MAAM,sBAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,MAAM,sBAAS,CAAC,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,MAAM,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE9C,kCAAkC;QAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO;QAExF,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,6DAA6D;gBAC7D,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAE/C,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,GAAG;oBACT,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,GAAG,EAAE,EAAE,CAAC,GAAG;oBACX,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,UAAU,EACR,iGAAiG;oBACnG,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAuB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtD,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,UAAU,EAAE;QACxC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE;KACjD,CAAC,CAAC,CAAC;IACJ,IAAA,+BAAa,EAAC,QAAQ,CAAC,CAAC;IAExB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,cAAc,MAAM,CAAC,MAAM,+BAA+B,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/checks/business/resilient-recognition-validation.d.ts

@@ -0,0 +1,26 @@
+#!/usr/bin/env tsx
+/**
+ * Resilient Recognition Preflight
+ *
+ * Validates that card recognition follows the iron-clad resilient pattern:
+ * - Must use useResilientRecognition hook (not direct API calls)
+ * - Must persist batch state to localStorage before processing
+ * - Must use batch API endpoints (/api/cards/batch-submit, /api/cards/batch-status)
+ * - Must NOT call recognition APIs directly without persistence
+ *
+ * WHY: Recognition that doesn't survive page refresh causes:
+ * - Lost work for users (bad UX)
+ * - Wasted AI API costs (cards processed but results lost)
+ * - Support tickets and user frustration
+ *
+ * PATTERN:
+ * ✅ useResilientRecognition() -> persists to localStorage -> batch API -> polls for results
+ * ❌ Direct fetch to /api/cards/recognize without persistence
+ */
+export declare const id = "business/resilient-recognition-validation";
+export declare const name = "Resilient Recognition Validation";
+export declare const category = "business";
+export declare const blocking = true;
+export declare const description = "Resilient Recognition Preflight";
+export declare const tags: string[];
+//# sourceMappingURL=resilient-recognition-validation.d.ts.map

package/dist/checks/business/resilient-recognition-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resilient-recognition-validation.d.ts","sourceRoot":"","sources":["../../../src/checks/business/resilient-recognition-validation.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG;AAQH,eAAO,MAAM,EAAE,8CAA8C,CAAC;AAC9D,eAAO,MAAM,IAAI,qCAAqC,CAAC;AACvD,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,oCAAoC,CAAC;AAC7D,eAAO,MAAM,IAAI,UAA4B,CAAC"}

package/dist/checks/business/resilient-recognition-validation.js

@@ -0,0 +1,230 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Resilient Recognition Preflight
+ *
+ * Validates that card recognition follows the iron-clad resilient pattern:
+ * - Must use useResilientRecognition hook (not direct API calls)
+ * - Must persist batch state to localStorage before processing
+ * - Must use batch API endpoints (/api/cards/batch-submit, /api/cards/batch-status)
+ * - Must NOT call recognition APIs directly without persistence
+ *
+ * WHY: Recognition that doesn't survive page refresh causes:
+ * - Lost work for users (bad UX)
+ * - Wasted AI API costs (cards processed but results lost)
+ * - Support tickets and user frustration
+ *
+ * PATTERN:
+ * ✅ useResilientRecognition() -> persists to localStorage -> batch API -> polls for results
+ * ❌ Direct fetch to /api/cards/recognize without persistence
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("node:fs"));
+const console_chars_1 = require("../../utils/console-chars");
+const file_cache_1 = require("../../shared/file-cache");
+// Check metadata
+exports.id = "business/resilient-recognition-validation";
+exports.name = "Resilient Recognition Validation";
+exports.category = "business";
+exports.blocking = true;
+exports.description = "Resilient Recognition Preflight";
+exports.tags = ["business", "validation"];
+// Files that are allowed to call recognition APIs directly (the hook itself, API routes, server libs)
+const ALLOWED_DIRECT_CALLS = [
+    "useResilientRecognition.ts", // The hook itself
+    "useCardRecognition.ts", // Legacy hook (should migrate)
+    "/api/cards/", // API routes
+    "/api/recognition/", // Recognition API routes
+    "batch-submit", // Batch API
+    "batch-status", // Batch status API
+    ".test.", // Test files
+    ".spec.", // Spec files
+    "__tests__", // Test directories
+    "__mocks__", // Mock directories
+    // Server-side libraries (not client components)
+    "lib/enhanced-recognition-system.ts", // Server-side recognition engine
+    "lib/batch-recognition.ts", // Server-side batch processing
+    "lib/vision-service", // Vision service implementation
+    "lib/vision/", // Vision utilities
+    "lib/recognition", // Recognition utilities
+    "lib/card-recognition", // Card recognition utilities
+    "lib/metadata-cache", // Cache implementation
+    "lib/analytics/", // Analytics (server-side)
+    "services/", // Service layer
+];
+// Patterns that indicate direct recognition API calls (anti-patterns)
+const DIRECT_RECOGNITION_PATTERNS = [
+    {
+        pattern: /fetch\s*\(\s*["'`][^"'`]*\/api\/cards\/recognize/g,
+        message: "Direct fetch to /api/cards/recognize without resilient wrapper",
+        suggestion: "Use useResilientRecognition hook instead of direct API calls",
+    },
+    {
+        pattern: /fetch\s*\(\s*["'`][^"'`]*\/api\/recognition\/identify/g,
+        message: "Direct fetch to recognition API without resilient wrapper",
+        suggestion: "Use useResilientRecognition hook for all recognition calls",
+    },
+    {
+        pattern: /visionService\.recognizeCard\s*\(/g,
+        message: "Direct visionService call in client code",
+        suggestion: "Use useResilientRecognition hook - it handles caching and persistence",
+    },
+];
+// Patterns that indicate proper resilient recognition usage
+const RESILIENT_PATTERNS = [
+    /useResilientRecognition\s*\(/,
+    /submitForRecognition\s*\(/,
+    /localStorage\.setItem\s*\(\s*["'`]recognition_/,
+];
+// CACHED FILE LISTS
+let _cachedFiles = null;
+async function getRelevantFiles() {
+    if (!_cachedFiles) {
+        _cachedFiles = await file_cache_1.fileCache.getAppComponentsHooksLibAllFiles();
+    }
+    return _cachedFiles;
+}
+function isAllowedFile(filePath) {
+    return ALLOWED_DIRECT_CALLS.some((allowed) => filePath.includes(allowed));
+}
+function hasResilientPattern(content) {
+    return RESILIENT_PATTERNS.some((pattern) => pattern.test(content));
+}
+async function main() {
+    console.log(`\n${console_chars_1.emoji.lock} RESILIENT RECOGNITION PREFLIGHT`);
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`${console_chars_1.emoji.hint} Ensuring recognition survives page refresh\n`);
+    const issues = [];
+    const files = await getRelevantFiles();
+    // Track files that use recognition
+    const recognitionFiles = [];
+    for (const file of files) {
+        // Skip allowed files
+        if (isAllowedFile(file))
+            continue;
+        const content = fs.readFileSync(file, "utf-8");
+        // Check for direct recognition API calls (anti-patterns)
+        for (const { pattern, message, suggestion } of DIRECT_RECOGNITION_PATTERNS) {
+            // Reset regex
+            pattern.lastIndex = 0;
+            let match;
+            while ((match = pattern.exec(content)) !== null) {
+                const lineNumber = content.substring(0, match.index).split("\n").length;
+                // Check if this file also has resilient patterns (might be transitioning)
+                const hasResilient = hasResilientPattern(content);
+                issues.push({
+                    file,
+                    line: lineNumber,
+                    type: "direct-recognition-call",
+                    severity: hasResilient ? "warning" : "error",
+                    message,
+                    suggestion,
+                });
+                recognitionFiles.push(file);
+            }
+        }
+        // Check for recognition-related code that doesn't use the resilient hook
+        // Only flag files that actually INITIATE recognition (have fetch calls to recognition APIs)
+        const initiatesRecognition = /fetch\s*\([^)]*\/api\/cards\/recogni/i.test(content) ||
+            /fetch\s*\([^)]*\/api\/recognition/i.test(content) ||
+            /submitForRecognition|startRecognition|recognizeCard/i.test(content);
+        if (initiatesRecognition && !hasResilientPattern(content) && !isAllowedFile(file)) {
+            const lineNumber = 1; // General file-level issue
+            issues.push({
+                file,
+                line: lineNumber,
+                type: "missing-resilient-pattern",
+                severity: "warning",
+                message: "File initiates card recognition but may not use resilient pattern",
+                suggestion: "Import and use useResilientRecognition hook for page-refresh-safe recognition",
+            });
+        }
+    }
+    // Print results
+    if (issues.length === 0) {
+        console.log(`${console_chars_1.emoji.success} All recognition code follows resilient pattern`);
+        console.log((0, console_chars_1.createDivider)(60, "heavy"));
+        console.log(`\n${console_chars_1.emoji.hint} Resilient recognition ensures:`);
+        console.log(`   • Recognition survives page refresh`);
+        console.log(`   • Batch state persisted to localStorage`);
+        console.log(`   • Results auto-merge when polling completes`);
+        console.log(`   • No lost work or wasted API costs`);
+        process.exit(0);
+    }
+    const errors = issues.filter((i) => i.severity === "error");
+    const warnings = issues.filter((i) => i.severity === "warning");
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} ERRORS (blocking):`);
+        for (const issue of errors) {
+            console.log(`   ${issue.file}:${issue.line}`);
+            console.log(`      ${issue.message}`);
+            if (issue.suggestion) {
+                console.log(`      ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            }
+        }
+    }
+    if (warnings.length > 0) {
+        console.log(`\n${console_chars_1.emoji.warning} WARNINGS:`);
+        for (const issue of warnings.slice(0, 10)) {
+            console.log(`   ${issue.file}:${issue.line}`);
+            console.log(`      ${issue.message}`);
+            if (issue.suggestion) {
+                console.log(`      ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+            }
+        }
+        if (warnings.length > 10) {
+            console.log(`   ... and ${warnings.length - 10} more warnings`);
+        }
+    }
+    console.log("\n" + (0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`Errors: ${errors.length} | Warnings: ${warnings.length}`);
+    console.log(`\n${console_chars_1.emoji.hint} CORRECT PATTERN:`);
+    console.log(`   import { useResilientRecognition } from "@/hooks/useResilientRecognition";`);
+    console.log(`   const { submitForRecognition } = useResilientRecognition({ cardPairs, setCardPairs });`);
+    console.log(`   await submitForRecognition(); // Persists state, survives refresh`);
+    if (errors.length > 0) {
+        console.log(`\n${console_chars_1.emoji.error} RESILIENT RECOGNITION PREFLIGHT FAILED`);
+        process.exit(1);
+    }
+    console.log(`\n${console_chars_1.emoji.success} RESILIENT RECOGNITION PREFLIGHT PASSED (with warnings)`);
+    process.exit(0);
+}
+main().catch((err) => {
+    console.error(`${console_chars_1.emoji.error} Preflight failed:`, err);
+    process.exit(1);
+});
+//# sourceMappingURL=resilient-recognition-validation.js.map

package/dist/checks/business/resilient-recognition-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resilient-recognition-validation.js","sourceRoot":"","sources":["../../../src/checks/business/resilient-recognition-validation.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,4CAA8B;AAC9B,6DAAiE;AACjE,wDAAoD;AAGpD,iBAAiB;AACJ,QAAA,EAAE,GAAG,2CAA2C,CAAC;AACjD,QAAA,IAAI,GAAG,kCAAkC,CAAC;AAC1C,QAAA,QAAQ,GAAG,UAAU,CAAC;AACtB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,iCAAiC,CAAC;AAChD,QAAA,IAAI,GAAG,CAAC,UAAU,EAAC,YAAY,CAAC,CAAC;AAW9C,sGAAsG;AACtG,MAAM,oBAAoB,GAAG;IAC3B,4BAA4B,EAAE,kBAAkB;IAChD,uBAAuB,EAAE,+BAA+B;IACxD,aAAa,EAAE,aAAa;IAC5B,mBAAmB,EAAE,yBAAyB;IAC9C,cAAc,EAAE,YAAY;IAC5B,cAAc,EAAE,mBAAmB;IACnC,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,aAAa;IACvB,WAAW,EAAE,mBAAmB;IAChC,WAAW,EAAE,mBAAmB;IAChC,gDAAgD;IAChD,oCAAoC,EAAE,iCAAiC;IACvE,0BAA0B,EAAE,+BAA+B;IAC3D,oBAAoB,EAAE,gCAAgC;IACtD,aAAa,EAAE,mBAAmB;IAClC,iBAAiB,EAAE,wBAAwB;IAC3C,sBAAsB,EAAE,6BAA6B;IACrD,oBAAoB,EAAE,uBAAuB;IAC7C,gBAAgB,EAAE,0BAA0B;IAC5C,WAAW,EAAE,gBAAgB;CAC9B,CAAC;AAEF,sEAAsE;AACtE,MAAM,2BAA2B,GAAG;IAClC;QACE,OAAO,EAAE,mDAAmD;QAC5D,OAAO,EAAE,gEAAgE;QACzE,UAAU,EAAE,8DAA8D;KAC3E;IACD;QACE,OAAO,EAAE,wDAAwD;QACjE,OAAO,EAAE,2DAA2D;QACpE,UAAU,EAAE,4DAA4D;KACzE;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EAAE,0CAA0C;QACnD,UAAU,EAAE,uEAAuE;KACpF;CACF,CAAC;AAEF,4DAA4D;AAC5D,MAAM,kBAAkB,GAAG;IACzB,8BAA8B;IAC9B,2BAA2B;IAC3B,gDAAgD;CACjD,CAAC;AAEF,oBAAoB;AACpB,IAAI,YAAY,GAAoB,IAAI,CAAC;AACzC,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,YAAY,GAAG,MAAM,sBAAS,CAAC,gCAAgC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,kCAAkC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,IAAI,+CAA+C,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAEvC,mCAAmC;IACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,qBAAqB;QACrB,IAAI,aAAa,CAAC,IAAI,CAAC;YAAE,SAAS;QAElC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE/C,yDAAyD;QACzD,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,2BAA2B,EAAE,CAAC;YAC3E,cAAc;YACd,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAEtB,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBAExE,0EAA0E;gBAC1E,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBAElD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,yBAAyB;oBAC/B,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;oBAC5C,OAAO;oBACP,UAAU;iBACX,CAAC,CAAC;gBAEH,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,4FAA4F;QAC5F,MAAM,oBAAoB,GACxB,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC;YACrD,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC;YAClD,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEvE,IAAI,oBAAoB,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAClF,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,2BAA2B;YACjD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,mEAAmE;gBAC5E,UAAU,EAAE,+EAA+E;aAC5F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,iDAAiD,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,iCAAiC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAEhE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,qBAAqB,CAAC,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,SAAS,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,YAAY,CAAC,CAAC;QAC5C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,SAAS,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvE,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CACT,2FAA2F,CAC5F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;IAEpF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,yCAAyC,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,OAAO,yDAAyD,CAAC,CAAC;IACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,qBAAK,CAAC,KAAK,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/checks/business/store-approval-listing-filter.d.ts

@@ -0,0 +1,19 @@
+#!/usr/bin/env tsx
+/**
+ * Store Approval Listing Filter Preflight
+ *
+ * Validates that public-facing listing queries filter by store approval status.
+ * Listings from unapproved stores (PENDING, REJECTED, SUSPENDED) should NOT
+ * be visible to regular users on category pages, search results, etc.
+ *
+ * Rule #30: Store Approval Required Before Listings Visible
+ *
+ * BLOCKING: Yes - unapproved store listings visible to public is a critical bug
+ */
+export declare const id = "business/store-approval-listing-filter";
+export declare const name = "Store Approval Listing Filter";
+export declare const category = "business";
+export declare const blocking = true;
+export declare const description = "Store Approval Listing Filter Preflight";
+export declare const tags: string[];
+//# sourceMappingURL=store-approval-listing-filter.d.ts.map

package/dist/checks/business/store-approval-listing-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-approval-listing-filter.d.ts","sourceRoot":"","sources":["../../../src/checks/business/store-approval-listing-filter.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAQH,eAAO,MAAM,EAAE,2CAA2C,CAAC;AAC3D,eAAO,MAAM,IAAI,kCAAkC,CAAC;AACpD,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,QAAQ,OAAO,CAAC;AAC7B,eAAO,MAAM,WAAW,4CAA4C,CAAC;AACrE,eAAO,MAAM,IAAI,UAAe,CAAC"}

package/dist/checks/business/store-approval-listing-filter.js

@@ -0,0 +1,176 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Store Approval Listing Filter Preflight
+ *
+ * Validates that public-facing listing queries filter by store approval status.
+ * Listings from unapproved stores (PENDING, REJECTED, SUSPENDED) should NOT
+ * be visible to regular users on category pages, search results, etc.
+ *
+ * Rule #30: Store Approval Required Before Listings Visible
+ *
+ * BLOCKING: Yes - unapproved store listings visible to public is a critical bug
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tags = exports.description = exports.blocking = exports.category = exports.name = exports.id = void 0;
+const fs = __importStar(require("node:fs"));
+const console_chars_1 = require("../../utils/console-chars");
+const file_cache_1 = require("../../shared/file-cache");
+// Check metadata
+exports.id = "business/store-approval-listing-filter";
+exports.name = "Store Approval Listing Filter";
+exports.category = "business";
+exports.blocking = true;
+exports.description = "Store Approval Listing Filter Preflight";
+exports.tags = ["business"];
+// Files that legitimately don't need store approval filtering
+const ALLOWED_EXCEPTIONS = [
+    // Admin routes can see all listings
+    "/admin/",
+    "/api/admin/",
+    // Store owner's own dashboard
+    "/api/store/listings",
+    "/api/seller/",
+    // Internal tools and analytics (not public-facing)
+    "/scripts/",
+    "seller-analytics",
+    "image-integrity",
+    // Order processing (already validated at cart stage)
+    "/api/orders/",
+    // Inventory utils (internal)
+    "inventory-utils",
+    // Shipping calculator (internal)
+    "shipping-calculator",
+    // Market data (internal analytics)
+    "market-data",
+    // Price tracking (internal)
+    "price-tracking",
+    // Cron jobs (internal)
+    "/api/cron/",
+    // Test files
+    ".test.",
+    ".spec.",
+    "__tests__",
+    "__mocks__",
+];
+// Patterns that indicate a public listing query
+const PUBLIC_LISTING_QUERY_PATTERNS = [
+    // Direct Prisma queries for active listings
+    /coreListings\.findMany\s*\(\s*\{[\s\S]*?listingStatus:\s*["']ACTIVE["']/,
+    /coreListings\.findMany\s*\(\s*\{[\s\S]*?where:\s*\{[\s\S]*?listingStatus:\s*["']ACTIVE["']/,
+    // Status filter in where clause
+    /where:\s*\{[\s\S]*?listingStatus:\s*ListingStatus\.ACTIVE/,
+];
+// Pattern that indicates store approval is being checked
+const STORE_APPROVAL_PATTERNS = [
+    /authStores:\s*\{[\s\S]*?approvalStatus:\s*["']APPROVED["']/,
+    /authStores\.approvalStatus\s*===?\s*["']APPROVED["']/,
+    /approvalStatus:\s*["']APPROVED["']/,
+    /StoreApprovalStatus\.APPROVED/,
+];
+async function main() {
+    console.log(`\n${console_chars_1.emoji.lock} STORE APPROVAL LISTING FILTER PREFLIGHT`);
+    console.log((0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`${console_chars_1.emoji.info} Checking that public listing queries filter by store approval status`);
+    const issues = [];
+    // Get API route files and lib files that might query listings
+    const apiFiles = await file_cache_1.fileCache.getAppApiFiles();
+    const libFiles = await file_cache_1.fileCache.getLibFiles();
+    const allFiles = [...apiFiles, ...libFiles];
+    for (const file of allFiles) {
+        // Skip allowed exceptions
+        if (ALLOWED_EXCEPTIONS.some((exc) => file.includes(exc))) {
+            continue;
+        }
+        const content = fs.readFileSync(file, "utf-8");
+        const lines = content.split("\n");
+        // Check if this file has public listing queries
+        for (const pattern of PUBLIC_LISTING_QUERY_PATTERNS) {
+            const match = pattern.exec(content);
+            if (match) {
+                // Found a public listing query - check if it filters by store approval
+                const hasApprovalFilter = STORE_APPROVAL_PATTERNS.some((ap) => ap.test(content));
+                if (!hasApprovalFilter) {
+                    // Find the line number
+                    const lineNumber = content.substring(0, match.index).split("\n").length;
+                    const contextStart = Math.max(0, lineNumber - 3);
+                    const contextEnd = Math.min(lines.length, lineNumber + 5);
+                    const context = lines.slice(contextStart, contextEnd).join("\n");
+                    issues.push({
+                        file,
+                        line: lineNumber,
+                        type: "missing-store-approval-filter",
+                        severity: "error",
+                        message: "Public listing query missing store approval filter - unapproved store listings may be visible",
+                        suggestion: 'Add authStores: { approvalStatus: "APPROVED" } to the where clause',
+                        context,
+                    });
+                }
+            }
+        }
+    }
+    // Print results
+    if (issues.length === 0) {
+        console.log(`\n${console_chars_1.emoji.success} All public listing queries properly filter by store approval status`);
+        console.log((0, console_chars_1.createDivider)(60, "heavy"));
+        process.exit(0);
+    }
+    console.log(`\n${console_chars_1.emoji.error} ISSUES FOUND:`);
+    for (const issue of issues) {
+        console.log(`\n   ${console_chars_1.emoji.file} ${issue.file}:${issue.line}`);
+        console.log(`      ${console_chars_1.emoji.error} ${issue.message}`);
+        if (issue.suggestion) {
+            console.log(`      ${console_chars_1.emoji.hint} ${issue.suggestion}`);
+        }
+        if (issue.context) {
+            console.log(`\n      Context:`);
+            console.log(issue.context
+                .split("\n")
+                .map((l) => `         ${l}`)
+                .join("\n"));
+        }
+    }
+    console.log("\n" + (0, console_chars_1.createDivider)(60, "heavy"));
+    console.log(`${console_chars_1.emoji.error} Found ${issues.length} issue(s)`);
+    console.log(`\n${console_chars_1.emoji.error} STORE APPROVAL LISTING FILTER PREFLIGHT FAILED`);
+    console.log(`\n${console_chars_1.emoji.info} Fix: Ensure all public listing queries include authStores: { approvalStatus: "APPROVED" }`);
+    process.exit(1);
+}
+main().catch((err) => {
+    console.error(`${console_chars_1.emoji.error} Preflight failed:`, err);
+    process.exit(1);
+});
+//# sourceMappingURL=store-approval-listing-filter.js.map

package/dist/checks/business/store-approval-listing-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-approval-listing-filter.js","sourceRoot":"","sources":["../../../src/checks/business/store-approval-listing-filter.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,4CAA8B;AAC9B,6DAAiE;AACjE,wDAAoD;AAGpD,iBAAiB;AACJ,QAAA,EAAE,GAAG,wCAAwC,CAAC;AAC9C,QAAA,IAAI,GAAG,+BAA+B,CAAC;AACvC,QAAA,QAAQ,GAAG,UAAU,CAAC;AACtB,QAAA,QAAQ,GAAG,IAAI,CAAC;AAChB,QAAA,WAAW,GAAG,yCAAyC,CAAC;AACxD,QAAA,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;AAYjC,8DAA8D;AAC9D,MAAM,kBAAkB,GAAG;IACzB,oCAAoC;IACpC,SAAS;IACT,aAAa;IACb,8BAA8B;IAC9B,qBAAqB;IACrB,cAAc;IACd,mDAAmD;IACnD,WAAW;IACX,kBAAkB;IAClB,iBAAiB;IACjB,qDAAqD;IACrD,cAAc;IACd,6BAA6B;IAC7B,iBAAiB;IACjB,iCAAiC;IACjC,qBAAqB;IACrB,mCAAmC;IACnC,aAAa;IACb,4BAA4B;IAC5B,gBAAgB;IAChB,uBAAuB;IACvB,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,WAAW;CACZ,CAAC;AAEF,gDAAgD;AAChD,MAAM,6BAA6B,GAAG;IACpC,4CAA4C;IAC5C,yEAAyE;IACzE,4FAA4F;IAC5F,gCAAgC;IAChC,2DAA2D;CAC5D,CAAC;AAEF,yDAAyD;AACzD,MAAM,uBAAuB,GAAG;IAC9B,4DAA4D;IAC5D,sDAAsD;IACtD,oCAAoC;IACpC,+BAA+B;CAChC,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,0CAA0C,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,IAAI,uEAAuE,CAAC,CAAC;IAElG,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,MAAM,sBAAS,CAAC,cAAc,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,sBAAS,CAAC,WAAW,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC;IAE5C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,0BAA0B;QAC1B,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElC,gDAAgD;QAChD,KAAK,MAAM,OAAO,IAAI,6BAA6B,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,KAAK,EAAE,CAAC;gBACV,uEAAuE;gBACvE,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAEjF,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,uBAAuB;oBACvB,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;oBACxE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;oBACjD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;oBAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEjE,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI;wBACJ,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,+BAA+B;wBACrC,QAAQ,EAAE,OAAO;wBACjB,OAAO,EACL,+FAA+F;wBACjG,UAAU,EAAE,oEAAoE;wBAChF,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,qBAAK,CAAC,OAAO,sEAAsE,CACzF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,gBAAgB,CAAC,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,qBAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,SAAS,qBAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,OAAO;iBACV,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;iBAC3B,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,UAAU,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,KAAK,iDAAiD,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CACT,KAAK,qBAAK,CAAC,IAAI,4FAA4F,CAC5G,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,qBAAK,CAAC,KAAK,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}