@empline/preflight 1.0.20

package/dist/bin/install-hooks.js

@@ -0,0 +1,204 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Install Git Hooks for Preflight Drift Detection
+ *
+ * Installs git hooks that automatically check for preflight drift:
+ * - pre-commit: Warns about drift before committing
+ * - post-checkout: Checks drift when switching branches
+ *
+ * Usage:
+ *   npx preflight-install-hooks         # Install hooks
+ *   npx preflight-install-hooks --remove # Remove hooks
+ *
+ * The hooks will:
+ * 1. Check if .preflight-manifest.json exists
+ * 2. If yes, run drift detection
+ * 3. Show warning if drift detected (doesn't block commit by default)
+ * 4. Use --strict in hook to block commits with drift
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const HOOK_MARKER = "# PREFLIGHT_DRIFT_HOOK";
+const PRE_COMMIT_HOOK = `#!/bin/sh
+${HOOK_MARKER}
+# Preflight Drift Detection - Pre-commit Hook
+# Blocks commits when preflight files have been modified without review
+
+# Skip if no manifest exists
+if [ ! -f ".preflight-manifest.json" ]; then
+  exit 0
+fi
+
+# Check for drift (quiet mode just returns exit code)
+npx preflight-drift --quiet
+
+if [ $? -ne 0 ]; then
+  echo ""
+  echo "============================================================"
+  echo "❌ COMMIT BLOCKED - Preflight drift detected"
+  echo "============================================================"
+  echo ""
+  echo "Preflight files have been modified since the last manifest update."
+  echo ""
+  echo "Run 'npx preflight-drift' to see which files changed."
+  echo ""
+  echo "🤖 If an AI made these changes:"
+  echo "   npx preflight-submit-drift"
+  echo ""
+  echo "👤 If a human made these changes intentionally:"
+  echo "   npx preflight-drift --update"
+  echo "   git add .preflight-manifest.json"
+  echo ""
+  exit 1
+fi
+
+exit 0
+`;
+const POST_MERGE_HOOK = `#!/bin/sh
+${HOOK_MARKER}
+# Preflight Drift Detection - Post-merge Hook
+# Reminds to check drift after pulling changes
+
+if [ -f ".preflight-manifest.json" ]; then
+  echo ""
+  echo "💡 Tip: Run 'npx preflight-drift' to check for preflight changes"
+fi
+`;
+function getGitHooksDir() {
+    const gitDir = path.join(process.cwd(), ".git");
+    if (!fs.existsSync(gitDir)) {
+        return null;
+    }
+    const hooksDir = path.join(gitDir, "hooks");
+    if (!fs.existsSync(hooksDir)) {
+        fs.mkdirSync(hooksDir, { recursive: true });
+    }
+    return hooksDir;
+}
+function installHook(hooksDir, hookName, content) {
+    const hookPath = path.join(hooksDir, hookName);
+    // Check if hook already exists
+    if (fs.existsSync(hookPath)) {
+        const existing = fs.readFileSync(hookPath, "utf-8");
+        // If our hook is already there, skip
+        if (existing.includes(HOOK_MARKER)) {
+            console.log(`  ✓ ${hookName} (already installed)`);
+            return;
+        }
+        // Append to existing hook
+        const updated = existing + "\n\n" + content;
+        fs.writeFileSync(hookPath, updated);
+        fs.chmodSync(hookPath, "755");
+        console.log(`  ✓ ${hookName} (appended to existing)`);
+    }
+    else {
+        // Create new hook
+        fs.writeFileSync(hookPath, content);
+        fs.chmodSync(hookPath, "755");
+        console.log(`  ✓ ${hookName} (created)`);
+    }
+}
+function removeHook(hooksDir, hookName) {
+    const hookPath = path.join(hooksDir, hookName);
+    if (!fs.existsSync(hookPath)) {
+        console.log(`  - ${hookName} (not found)`);
+        return;
+    }
+    const content = fs.readFileSync(hookPath, "utf-8");
+    if (!content.includes(HOOK_MARKER)) {
+        console.log(`  - ${hookName} (no preflight hook found)`);
+        return;
+    }
+    // Remove our hook section
+    const lines = content.split("\n");
+    const filtered = [];
+    let inOurHook = false;
+    for (const line of lines) {
+        if (line.includes(HOOK_MARKER)) {
+            inOurHook = true;
+            continue;
+        }
+        // End of our hook section (next shebang or empty after our content)
+        if (inOurHook && (line.startsWith("#!/") || (line === "" && filtered.length > 0 && filtered[filtered.length - 1] === ""))) {
+            inOurHook = false;
+        }
+        if (!inOurHook) {
+            filtered.push(line);
+        }
+    }
+    const remaining = filtered.join("\n").trim();
+    if (remaining === "" || remaining === "#!/bin/sh") {
+        fs.unlinkSync(hookPath);
+        console.log(`  ✓ ${hookName} (removed)`);
+    }
+    else {
+        fs.writeFileSync(hookPath, remaining + "\n");
+        console.log(`  ✓ ${hookName} (preflight section removed)`);
+    }
+}
+function main() {
+    const args = process.argv.slice(2);
+    const remove = args.includes("--remove") || args.includes("-r");
+    console.log("");
+    console.log(remove ? "🗑️  Removing Preflight Git Hooks" : "📦 Installing Preflight Git Hooks");
+    console.log("");
+    const hooksDir = getGitHooksDir();
+    if (!hooksDir) {
+        console.log("❌ Not a git repository. Run this command from your project root.");
+        process.exit(1);
+    }
+    if (remove) {
+        removeHook(hooksDir, "pre-commit");
+        removeHook(hooksDir, "post-merge");
+        console.log("");
+        console.log("✅ Preflight hooks removed");
+    }
+    else {
+        installHook(hooksDir, "pre-commit", PRE_COMMIT_HOOK);
+        installHook(hooksDir, "post-merge", POST_MERGE_HOOK);
+        console.log("");
+        console.log("✅ Preflight hooks installed");
+        console.log("");
+        console.log("The pre-commit hook will warn about drift before commits.");
+        console.log("To BLOCK commits with drift, edit .git/hooks/pre-commit");
+        console.log("and uncomment the 'exit 1' line.");
+    }
+    console.log("");
+}
+main();
+//# sourceMappingURL=install-hooks.js.map

package/dist/bin/install-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-hooks.js","sourceRoot":"","sources":["../../src/bin/install-hooks.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,4CAA8B;AAC9B,gDAAkC;AAElC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C,MAAM,eAAe,GAAG;EACtB,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCZ,CAAC;AAEF,MAAM,eAAe,GAAG;EACtB,WAAW;;;;;;;;CAQZ,CAAC;AAEF,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAe;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/C,+BAA+B;IAC/B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEpD,qCAAqC;QACrC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,sBAAsB,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,yBAAyB,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,kBAAkB;QAClB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,YAAY,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,QAAgB;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,cAAc,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,4BAA4B,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QAED,oEAAoE;QACpE,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YAC1H,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAE7C,IAAI,SAAS,KAAK,EAAE,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAClD,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,YAAY,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,8BAA8B,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEhE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAElC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QACrD,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/bin/preflight.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+/**
+ * Preflight CLI Entry Point
+ *
+ * Usage:
+ *   npx preflight                     # Run all checks
+ *   npx preflight security            # Run security category
+ *   npx preflight security database   # Run multiple categories
+ *   npx preflight --quick             # Quick mode (critical only)
+ *   npx preflight --parallel          # Run in parallel
+ *   npx preflight --verbose           # Show detailed output
+ *   npx preflight --help              # Show help
+ *
+ * Promotion Commands:
+ *   npx preflight submit              # Submit flagged checks for review
+ *   npx preflight review              # List pending checks
+ *   npx preflight approve <id>        # Approve a check
+ *   npx preflight reject <id>         # Reject a check
+ */
+export {};
+//# sourceMappingURL=preflight.d.ts.map

package/dist/bin/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/bin/preflight.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/bin/preflight.js

@@ -0,0 +1,218 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Preflight CLI Entry Point
+ *
+ * Usage:
+ *   npx preflight                     # Run all checks
+ *   npx preflight security            # Run security category
+ *   npx preflight security database   # Run multiple categories
+ *   npx preflight --quick             # Quick mode (critical only)
+ *   npx preflight --parallel          # Run in parallel
+ *   npx preflight --verbose           # Show detailed output
+ *   npx preflight --help              # Show help
+ *
+ * Promotion Commands:
+ *   npx preflight submit              # Submit flagged checks for review
+ *   npx preflight review              # List pending checks
+ *   npx preflight approve <id>        # Approve a check
+ *   npx preflight reject <id>         # Reject a check
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const crypto = __importStar(require("node:crypto"));
+const glob_1 = require("glob");
+const runner_1 = require("../runner");
+const args = process.argv.slice(2);
+const command = args[0];
+// ANSI colors
+const c = {
+    red: "\x1b[31m",
+    yellow: "\x1b[33m",
+    cyan: "\x1b[36m",
+    reset: "\x1b[0m",
+    bold: "\x1b[1m",
+};
+function computeHash(filePath) {
+    const content = fs.readFileSync(filePath);
+    return crypto.createHash("sha256").update(content).digest("hex").slice(0, 16);
+}
+async function checkDrift() {
+    const manifestPath = path.join(process.cwd(), ".preflight-manifest.json");
+    if (!fs.existsSync(manifestPath)) {
+        return { hasDrift: false, added: 0, modified: 0, deleted: 0 };
+    }
+    try {
+        const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+        const fullDir = path.join(process.cwd(), manifest.pluginDir);
+        if (!fs.existsSync(fullDir)) {
+            return { hasDrift: false, added: 0, modified: 0, deleted: 0 };
+        }
+        const currentFiles = await (0, glob_1.glob)("**/*.{ts,js}", {
+            cwd: fullDir,
+            ignore: ["**/node_modules/**", "**/*.test.ts", "**/*.spec.ts", "**/*.d.ts"],
+            nodir: true,
+        });
+        const manifestMap = new Map(manifest.files.map((f) => [f.path, f.hash]));
+        const currentMap = new Map();
+        let added = 0;
+        let modified = 0;
+        for (const file of currentFiles) {
+            const relativePath = path.join(manifest.pluginDir, file).replace(/\\/g, "/");
+            const hash = computeHash(path.join(fullDir, file));
+            currentMap.set(relativePath, hash);
+            const prevHash = manifestMap.get(relativePath);
+            if (!prevHash) {
+                added++;
+            }
+            else if (prevHash !== hash) {
+                modified++;
+            }
+        }
+        let deleted = 0;
+        for (const prev of manifest.files) {
+            if (!currentMap.has(prev.path)) {
+                deleted++;
+            }
+        }
+        return {
+            hasDrift: added > 0 || modified > 0 || deleted > 0,
+            added,
+            modified,
+            deleted,
+        };
+    }
+    catch {
+        return { hasDrift: false, added: 0, modified: 0, deleted: 0 };
+    }
+}
+async function run() {
+    // Handle subcommands
+    switch (command) {
+        case "submit": {
+            const { submit } = await Promise.resolve().then(() => __importStar(require("./submit")));
+            const options = {
+                dryRun: args.includes("--dry-run"),
+                checkName: args.find((a) => a.startsWith("--check="))?.split("=")[1],
+                preflightManagerPath: args.find((a) => a.startsWith("--pm-path="))?.split("=")[1],
+            };
+            await submit(options);
+            break;
+        }
+        case "review": {
+            const { review } = await Promise.resolve().then(() => __importStar(require("./review")));
+            const options = {
+                app: args.find((a) => a.startsWith("--app="))?.split("=")[1],
+                status: args.find((a) => a.startsWith("--status="))?.split("=")[1],
+                verbose: args.includes("--verbose") || args.includes("-v"),
+            };
+            await review(options);
+            break;
+        }
+        case "approve": {
+            const { approve } = await Promise.resolve().then(() => __importStar(require("./approve")));
+            const checkId = args[1];
+            if (!checkId || checkId.startsWith("--")) {
+                console.log("Usage: preflight approve <check-id> [--category=<cat>] [--publish]");
+                process.exit(1);
+            }
+            const options = {
+                checkId,
+                category: args.find((a) => a.startsWith("--category="))?.split("=")[1],
+                publish: args.includes("--publish"),
+                reject: false,
+                notes: args.find((a) => a.startsWith("--notes="))?.split("=")[1],
+            };
+            await approve(options);
+            break;
+        }
+        case "reject": {
+            const { approve } = await Promise.resolve().then(() => __importStar(require("./approve")));
+            const checkId = args[1];
+            if (!checkId || checkId.startsWith("--")) {
+                console.log("Usage: preflight reject <check-id> [--notes=<text>]");
+                process.exit(1);
+            }
+            const options = {
+                checkId,
+                reject: true,
+                notes: args.find((a) => a.startsWith("--notes="))?.split("=")[1],
+            };
+            await approve(options);
+            break;
+        }
+        default: {
+            const skipDrift = args.includes("--skip-drift") || args.includes("--no-drift");
+            // Check for drift before running preflights
+            const drift = await checkDrift();
+            if (drift.hasDrift) {
+                console.log("");
+                console.log(`${c.red}${c.bold}╔═══════════════════════════════════════════════════════════╗${c.reset}`);
+                console.log(`${c.red}${c.bold}║              PREFLIGHT DRIFT DETECTED                     ║${c.reset}`);
+                console.log(`${c.red}${c.bold}╠═══════════════════════════════════════════════════════════╣${c.reset}`);
+                console.log(`${c.red}${c.bold}║${c.reset}  Added: ${drift.added}  |  Modified: ${drift.modified}  |  Deleted: ${drift.deleted}`.padEnd(60) + `${c.red}${c.bold}║${c.reset}`);
+                console.log(`${c.red}${c.bold}╚═══════════════════════════════════════════════════════════╝${c.reset}`);
+                console.log("");
+                console.log(`${c.yellow}App-specific preflights have been modified.${c.reset}`);
+                console.log("");
+                console.log(`${c.cyan}${c.bold}If YOU (an AI) made these changes:${c.reset}`);
+                console.log(`  npx preflight-submit-drift`);
+                console.log("");
+                console.log(`${c.cyan}${c.bold}If a HUMAN made these changes intentionally:${c.reset}`);
+                console.log(`  npx preflight-drift --update`);
+                console.log("");
+                if (!skipDrift) {
+                    console.log(`${c.red}${c.bold}BLOCKED${c.reset} - Resolve drift before running preflights.`);
+                    console.log(`Use ${c.cyan}--skip-drift${c.reset} to bypass (not recommended).`);
+                    console.log("");
+                    process.exit(1);
+                }
+                else {
+                    console.log(`${c.yellow}${c.bold}WARNING${c.reset}: Skipping drift check (--skip-drift).`);
+                    console.log("");
+                }
+            }
+            // Run the main preflight runner
+            await (0, runner_1.main)();
+        }
+    }
+}
+run().catch((error) => {
+    console.error("Fatal error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=preflight.js.map

package/dist/bin/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/bin/preflight.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,4CAA8B;AAC9B,gDAAkC;AAClC,oDAAsC;AACtC,+BAA4B;AAC5B,sCAAiC;AAEjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAExB,cAAc;AACd,MAAM,CAAC,GAAG;IACR,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;CAChB,CAAC;AAgBF,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAE1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAa,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAE7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAA,WAAI,EAAC,cAAc,EAAE;YAC9C,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,CAAC;YAC3E,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE7C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACnD,UAAU,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAEnC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,KAAK,EAAE,CAAC;YACV,CAAC;iBAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC7B,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,KAAK,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC;YAClD,KAAK;YACL,QAAQ;YACR,OAAO;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG;IAChB,qBAAqB;IACrB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;YAC5C,MAAM,OAAO,GAAG;gBACd,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAClC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACpE,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAClF,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM;QACR,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,MAAM,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;YAC5C,MAAM,OAAO,GAAG;gBACd,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC5D,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAKpD;gBACb,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aAC3D,CAAC;YACF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM;QACR,CAAC;QAED,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,WAAW,GAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;gBAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,OAAO,GAAG;gBACd,OAAO;gBACP,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACnC,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACjE,CAAC;YACF,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,WAAW,GAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,OAAO,GAAG;gBACd,OAAO;gBACP,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACjE,CAAC;YACF,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM;QACR,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAE/E,4CAA4C;YAC5C,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,gEAAgE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,gEAAgE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,gEAAgE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,kBAAkB,KAAK,CAAC,QAAQ,iBAAiB,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7K,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,gEAAgE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,8CAA8C,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9E,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,+CAA+C,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxF,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAEhB,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,6CAA6C,CAAC,CAAC;oBAC7F,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,KAAK,+BAA+B,CAAC,CAAC;oBAChF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,wCAAwC,CAAC,CAAC;oBAC3F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,MAAM,IAAA,aAAI,GAAE,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACpB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/bin/preinstall.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+/**
+ * Preinstall Hook for @empline/preflight
+ *
+ * Runs before package installation/update to check for preflight drift.
+ * If drift is detected, blocks the update until drift is resolved.
+ *
+ * This ensures that unreviewed AI modifications to preflights don't get
+ * lost during package updates.
+ *
+ * To bypass (if drift is intentional):
+ *   PREFLIGHT_SKIP_DRIFT_CHECK=1 pnpm install @empline/preflight
+ */
+export {};
+//# sourceMappingURL=preinstall.d.ts.map

package/dist/bin/preinstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preinstall.d.ts","sourceRoot":"","sources":["../../src/bin/preinstall.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG"}