@empline/preflight 1.1.11 → 1.1.13

package/dist/checks/consolidated/runtime.d.ts

@@ -0,0 +1,53 @@
+#!/usr/bin/env tsx
+/**
+ * Consolidated Runtime Preflight
+ *
+ * Combines runtime environment and compatibility checks:
+ * - client-process-env-usage (process.env in client code)
+ * - client-runtime-errors (runtime error patterns)
+ * - dev-error-monitoring-system (error monitoring setup)
+ * - gtm-installation (Google Tag Manager)
+ * - json-parse-safety (JSON.parse error handling)
+ * - missing-public-env-import (NEXT_PUBLIC_ env vars)
+ * - node-deprecations (deprecated Node.js APIs)
+ * - node25-compatibility (Node.js 25 compatibility)
+ * - process-stdio-usage (process.stdout/stderr)
+ * - server-client-decimal (Decimal serialization)
+ * - tailwind-runtime-check (Tailwind CSS runtime)
+ *
+ * Usage:
+ *   pnpm preflight:runtime           # All checks
+ *   pnpm preflight:runtime --verbose # Detailed output
+ */
+interface CheckResult {
+    name: string;
+    passed: boolean;
+    duration: number;
+    errors: string[];
+    warnings: string[];
+}
+interface ModuleResult {
+    module: string;
+    passed: boolean;
+    totalDuration: number;
+    checks: CheckResult[];
+    summary: {
+        total: number;
+        passed: number;
+        failed: number;
+        warnings: number;
+    };
+}
+declare class RuntimePreflightModule {
+    private verbose;
+    private parallel;
+    constructor(options?: {
+        verbose?: boolean;
+        parallel?: boolean;
+    });
+    private runCheck;
+    runAll(): Promise<ModuleResult>;
+    private printResults;
+}
+export { RuntimePreflightModule };
+//# sourceMappingURL=runtime.d.ts.map

package/dist/checks/consolidated/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/checks/consolidated/runtime.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAID,cAAM,sBAAsB;IAC1B,OAAO,CAAC,OAAO,CAAkB;IAEjC,OAAO,CAAC,QAAQ,CAAkB;gBACtB,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO;YAKrD,QAAQ;IA2ChB,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAqErC,OAAO,CAAC,YAAY;CAoBrB;AAcD,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/checks/consolidated/runtime.js

@@ -0,0 +1,160 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Consolidated Runtime Preflight
+ *
+ * Combines runtime environment and compatibility checks:
+ * - client-process-env-usage (process.env in client code)
+ * - client-runtime-errors (runtime error patterns)
+ * - dev-error-monitoring-system (error monitoring setup)
+ * - gtm-installation (Google Tag Manager)
+ * - json-parse-safety (JSON.parse error handling)
+ * - missing-public-env-import (NEXT_PUBLIC_ env vars)
+ * - node-deprecations (deprecated Node.js APIs)
+ * - node25-compatibility (Node.js 25 compatibility)
+ * - process-stdio-usage (process.stdout/stderr)
+ * - server-client-decimal (Decimal serialization)
+ * - tailwind-runtime-check (Tailwind CSS runtime)
+ *
+ * Usage:
+ *   pnpm preflight:runtime           # All checks
+ *   pnpm preflight:runtime --verbose # Detailed output
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RuntimePreflightModule = void 0;
+const child_process_1 = require("child_process");
+const console_chars_1 = require("../../utils/console-chars");
+const concurrency_config_1 = require("../../shared/concurrency-config");
+// Get concurrency from shared config (respects PREFLIGHT_CONCURRENCY env var)
+const concurrencyConfig = (0, concurrency_config_1.getConcurrencyConfig)();
+class RuntimePreflightModule {
+    verbose = false;
+    parallel = false;
+    constructor(options = {}) {
+        this.verbose = options.verbose || false;
+        this.parallel = options.parallel || concurrencyConfig.parallel;
+    }
+    async runCheck(name, scriptPath, args = []) {
+        const startTime = Date.now();
+        const errors = [];
+        const warnings = [];
+        let passed = true;
+        try {
+            const command = scriptPath.endsWith(".ts")
+                ? `pnpm -s tsx ${scriptPath} ${args.join(" ")}`
+                : `node ${scriptPath} ${args.join(" ")}`;
+            if (this.verbose) {
+                console.log(`\n${console_chars_1.emoji.search} Running: ${name}`);
+            }
+            const output = (0, child_process_1.execSync)(command, {
+                encoding: "utf-8",
+                stdio: this.verbose ? "inherit" : "pipe",
+                cwd: process.cwd(),
+                timeout: 60000,
+            });
+            if (output && typeof output === "string") {
+                const lines = output.split("\n");
+                lines.forEach((line) => {
+                    if (line.includes("WARNING") || line.includes("⚠")) {
+                        warnings.push(line.trim());
+                    }
+                });
+            }
+        }
+        catch (error) {
+            passed = false;
+            const errorOutput = error.stdout?.toString() || error.stderr?.toString() || error.message;
+            errors.push(errorOutput);
+        }
+        return { name, passed, duration: Date.now() - startTime, errors, warnings };
+    }
+    async runAll() {
+        const startTime = Date.now();
+        console.log(`\n${console_chars_1.emoji.gear}  CONSOLIDATED RUNTIME PREFLIGHT`);
+        console.log((0, console_chars_1.createDivider)(80, "heavy"));
+        const checks = [];
+        // Run all runtime checks
+        const runtimeChecks = [
+            {
+                name: "Client Process Env Usage",
+                script: "scripts/active/preflights/runtime/client-process-env-usage.ts",
+            },
+            {
+                name: "Client Runtime Errors",
+                script: "scripts/active/preflights/runtime/client-runtime-errors.ts",
+            },
+            {
+                name: "Dev Error Monitoring",
+                script: "scripts/active/preflights/runtime/dev-error-monitoring-system.ts",
+            },
+            { name: "GTM Installation", script: "scripts/active/preflights/runtime/gtm-installation.ts" },
+            {
+                name: "JSON Parse Safety",
+                script: "scripts/active/preflights/runtime/json-parse-safety.ts",
+            },
+            {
+                name: "Missing Public Env Import",
+                script: "scripts/active/preflights/runtime/missing-public-env-import.ts",
+            },
+            {
+                name: "Node Deprecations",
+                script: "scripts/active/preflights/runtime/node-deprecations.ts",
+            },
+            {
+                name: "Node 25 Compatibility",
+                script: "scripts/active/preflights/runtime/node25-compatibility.ts",
+            },
+            {
+                name: "Process Stdio Usage",
+                script: "scripts/active/preflights/runtime/process-stdio-usage.ts",
+            },
+            {
+                name: "Server Client Decimal",
+                script: "scripts/active/preflights/runtime/server-client-decimal.ts",
+            },
+            {
+                name: "Tailwind Runtime Check",
+                script: "scripts/active/preflights/runtime/tailwind-runtime-check.ts",
+            },
+        ];
+        for (const check of runtimeChecks) {
+            checks.push(await this.runCheck(check.name, check.script));
+        }
+        const totalDuration = Date.now() - startTime;
+        const passed = checks.every((c) => c.passed);
+        const summary = {
+            total: checks.length,
+            passed: checks.filter((c) => c.passed).length,
+            failed: checks.filter((c) => !c.passed).length,
+            warnings: checks.reduce((sum, c) => sum + c.warnings.length, 0),
+        };
+        this.printResults(checks, totalDuration, summary);
+        return { module: "runtime", passed, totalDuration, checks, summary };
+    }
+    printResults(checks, totalDuration, summary) {
+        console.log("\n" + (0, console_chars_1.createDivider)(80, "heavy"));
+        console.log(`${console_chars_1.emoji.chart} RUNTIME PREFLIGHT RESULTS`);
+        console.log((0, console_chars_1.createDivider)(80, "heavy"));
+        checks.forEach((check) => {
+            const icon = check.passed ? `${console_chars_1.emoji.success}` : `${console_chars_1.emoji.error}`;
+            console.log(`${icon} ${check.name.padEnd(35)} ${(check.duration / 1000).toFixed(1)}s`);
+        });
+        console.log((0, console_chars_1.createDivider)(80, "heavy"));
+        console.log(`Passed: ${summary.passed}/${summary.total} | Time: ${(totalDuration / 1000).toFixed(1)}s`);
+        console.log(summary.failed === 0
+            ? `\n${console_chars_1.emoji.success} RUNTIME PREFLIGHT PASSED`
+            : `\n${console_chars_1.emoji.error} RUNTIME PREFLIGHT FAILED`);
+    }
+}
+exports.RuntimePreflightModule = RuntimePreflightModule;
+async function main() {
+    const verbose = process.argv.includes("--verbose") || process.argv.includes("-v");
+    const parallel = process.argv.includes("--parallel") || process.argv.includes("-p");
+    const module = new RuntimePreflightModule({ verbose, parallel });
+    const result = await module.runAll();
+    process.exit(result.passed ? 0 : 1);
+}
+if (require.main === module) {
+    main();
+}
+//# sourceMappingURL=runtime.js.map

package/dist/checks/consolidated/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/checks/consolidated/runtime.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAEH,iDAAyC;AACzC,6DAAiE;AAEjE,wEAAuE;AAsBvE,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,IAAA,yCAAoB,GAAE,CAAC;AACjD,MAAM,sBAAsB;IAClB,OAAO,GAAY,KAAK,CAAC;IAEzB,QAAQ,GAAY,KAAK,CAAC;IAClC,YAAY,UAAqD,EAAE;QACjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,IAAY,EACZ,UAAkB,EAClB,OAAiB,EAAE;QAEnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAG,IAAI,CAAC;QAElB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACxC,CAAC,CAAC,eAAe,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC/C,CAAC,CAAC,QAAQ,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAE3C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,MAAM,aAAa,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,OAAO,EAAE;gBAC/B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;gBACxC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBACnD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,GAAG,KAAK,CAAC;YACf,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,qBAAK,CAAC,IAAI,kCAAkC,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAExC,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,yBAAyB;QACzB,MAAM,aAAa,GAAG;YACpB;gBACE,IAAI,EAAE,0BAA0B;gBAChC,MAAM,EAAE,+DAA+D;aACxE;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,4DAA4D;aACrE;YACD;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EAAE,kEAAkE;aAC3E;YACD,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,uDAAuD,EAAE;YAC7F;gBACE,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,wDAAwD;aACjE;YACD;gBACE,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,gEAAgE;aACzE;YACD;gBACE,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,wDAAwD;aACjE;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,2DAA2D;aACpE;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,0DAA0D;aACnE;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,4DAA4D;aACrE;YACD;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,6DAA6D;aACtE;SACF,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;YAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;YAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;SAChE,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvE,CAAC;IAEO,YAAY,CAAC,MAAqB,EAAE,aAAqB,EAAE,OAAY;QAC7E,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,KAAK,4BAA4B,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QAExC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,qBAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,qBAAK,CAAC,KAAK,EAAE,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,IAAA,6BAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,WAAW,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,YAAY,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAC3F,CAAC;QACF,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,KAAK,qBAAK,CAAC,OAAO,2BAA2B;YAC/C,CAAC,CAAC,KAAK,qBAAK,CAAC,KAAK,2BAA2B,CAChD,CAAC;IACJ,CAAC;CACF;AAcQ,wDAAsB;AAZ/B,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/checks/consolidated/script-performance.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env tsx
+/**
+ * Script Performance (NON-BLOCKING)
+ *
+ * Goal: prevent performance regressions in repo maintenance scripts by ensuring
+ * "heavy" scripts expose a parallelism/concurrency knob (e.g. --workers=N)
+ * and don't default to an obviously suboptimal single-thread config.
+ *
+ * Runs as part of `pnpm preflight:all` (and therefore on every build).
+ *
+ * Notes:
+ * - This is intentionally a warning-only preflight (exit code 1 ${chars.arrow} warning in workflow).
+ * - Heuristic-based: focuses on scripts that import ts-morph (commonly CPU heavy).
+ * - Opt-out: add `PERF_SINGLE_THREADED_OK` comment in a script if single-thread is intentional.
+ */
+export {};
+//# sourceMappingURL=script-performance.d.ts.map

package/dist/checks/consolidated/script-performance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-performance.d.ts","sourceRoot":"","sources":["../../../src/checks/consolidated/script-performance.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG"}

package/dist/checks/consolidated/script-performance.js

@@ -0,0 +1,137 @@
+#!/usr/bin/env tsx
+"use strict";
+/**
+ * Script Performance (NON-BLOCKING)
+ *
+ * Goal: prevent performance regressions in repo maintenance scripts by ensuring
+ * "heavy" scripts expose a parallelism/concurrency knob (e.g. --workers=N)
+ * and don't default to an obviously suboptimal single-thread config.
+ *
+ * Runs as part of `pnpm preflight:all` (and therefore on every build).
+ *
+ * Notes:
+ * - This is intentionally a warning-only preflight (exit code 1 ${chars.arrow} warning in workflow).
+ * - Heuristic-based: focuses on scripts that import ts-morph (commonly CPU heavy).
+ * - Opt-out: add `PERF_SINGLE_THREADED_OK` comment in a script if single-thread is intentional.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const file_cache_1 = require("../../shared/file-cache");
+const path = __importStar(require("path"));
+const console_chars_1 = require("../../utils/console-chars");
+const glob_patterns_1 = require("../../shared/glob-patterns");
+const universal_progress_reporter_1 = require("../system/universal-progress-reporter");
+const EXCLUDED = (0, glob_patterns_1.extendExcludes)(glob_patterns_1.STANDARD_EXCLUDES, ["**/build/**", "**/test-results/**"]);
+const HEAVY_SIGNAL_RE = /from\s+["']ts-morph["']|require\(["']ts-morph["']\)/;
+const OPT_OUT_RE = /\bPERF_SINGLE_THREADED_OK\b/;
+const HAS_WORKERS_KNOB_RE = /--workers=|\bworker_threads\b|from\s+["']node:worker_threads["']/;
+const WORKERS_DEFAULT_LITERAL_RE = /\bworkers\s*:\s*(\d+)\b/;
+const WORKERS_DEFAULT_DYNAMIC_RE = /\bworkers\s*:\s*.*\b(os\.cpus\(|Math\.min\(|Math\.max\(|\bdefaultWorkers\s*\()|\bcpus\(\)\b/;
+const RECOMMENDED_WORKERS = 8;
+function rel(file) {
+    return path.relative(process.cwd(), file).replace(/\\/g, "/");
+}
+async function main() {
+    const reporter = (0, universal_progress_reporter_1.createUniversalProgressReporter)(path.basename(__filename, ".ts"));
+    const start = Date.now();
+    const issues = [];
+    const files = await file_cache_1.fileCache.getFiles("scripts/active/**/*.{ts,tsx}", {
+        ignore: EXCLUDED,
+    });
+    for (const file of files) {
+        const content = fs.readFileSync(file, "utf8");
+        if (!HEAVY_SIGNAL_RE.test(content))
+            continue;
+        if (OPT_OUT_RE.test(content))
+            continue;
+        if (!HAS_WORKERS_KNOB_RE.test(content)) {
+            issues.push({
+                file,
+                severity: "warning",
+                message: "Heavy script (ts-morph) has no parallelism knob. Add `--workers=N` (worker_threads) or an explicit concurrency option.",
+                suggestion: `Add --workers support and default to ~${RECOMMENDED_WORKERS} (or min(os.cpus().length, ${RECOMMENDED_WORKERS})). Opt out with PERF_SINGLE_THREADED_OK if intentional.`,
+            });
+            continue;
+        }
+        const m = content.match(WORKERS_DEFAULT_LITERAL_RE);
+        if (m) {
+            const n = Number(m[1]);
+            if (Number.isFinite(n) && n > 0 && n < RECOMMENDED_WORKERS) {
+                issues.push({
+                    file,
+                    severity: "warning",
+                    message: `Script defaults to workers=${n}. Recommended default is ~${RECOMMENDED_WORKERS} on modern machines.`,
+                    suggestion: `Set default workers to min(os.cpus().length, ${RECOMMENDED_WORKERS}) and allow overrides via --workers=1 for serial runs.`,
+                });
+            }
+            continue;
+        }
+        // If we can't find a literal default, accept dynamic defaults that use CPU count / min/max.
+        if (!WORKERS_DEFAULT_DYNAMIC_RE.test(content)) {
+            issues.push({
+                file,
+                severity: "warning",
+                message: "Script appears to support workers, but default worker count is unclear. Ensure it defaults to CPU-aware concurrency.",
+                suggestion: `Initialize options.workers with Math.max(1, Math.min(os.cpus().length, ${RECOMMENDED_WORKERS})) (or similar).`,
+            });
+        }
+    }
+    const durationMs = Date.now() - start;
+    const duration = `${(durationMs / 1000).toFixed(1)}s`;
+    if (issues.length === 0) {
+        console.log(`${console_chars_1.emoji.success} Script Performance: OK (${files.length} scripts scanned) ${console_chars_1.chars.bullet} ${duration}`);
+        return 0;
+    }
+    console.log(`${console_chars_1.emoji.warning}  Script Performance: warnings found`);
+    console.log(`   Scripts scanned: ${files.length}`);
+    console.log(`   Warnings: ${issues.length} ${console_chars_1.chars.bullet} ${duration}`);
+    console.log("");
+    for (const issue of issues) {
+        console.log(` - ${rel(issue.file)}`);
+        console.log(`   ${issue.message}`);
+        if (issue.suggestion)
+            console.log(`   Suggestion: ${issue.suggestion}`);
+    }
+    // Exit 1 so `preflight:all` reports it as a warning.
+    process.exitCode = 1;
+    return 1;
+}
+main().catch((err) => {
+    // eslint-disable-next-line no-console
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=script-performance.js.map

package/dist/checks/consolidated/script-performance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-performance.js","sourceRoot":"","sources":["../../../src/checks/consolidated/script-performance.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,wDAAoD;AACpD,2CAA6B;AAC7B,6DAAyD;AACzD,8DAA+E;AAC/E,uFAAwF;AASxF,MAAM,QAAQ,GAAG,IAAA,8BAAc,EAAC,iCAAiB,EAAE,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAE1F,MAAM,eAAe,GAAG,qDAAqD,CAAC;AAC9E,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,MAAM,mBAAmB,GAAG,kEAAkE,CAAC;AAC/F,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAC7D,MAAM,0BAA0B,GAC9B,6FAA6F,CAAC;AAEhG,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,IAAA,6DAA+B,EAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,MAAM,KAAK,GAAG,MAAM,sBAAS,CAAC,QAAQ,CAAC,8BAA8B,EAAE;QACrE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE9C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAC7C,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAEvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,QAAQ,EAAE,SAAS;gBACnB,OAAO,EACL,wHAAwH;gBAC1H,UAAU,EAAE,yCAAyC,mBAAmB,8BAA8B,mBAAmB,0DAA0D;aACpL,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,mBAAmB,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,8BAA8B,CAAC,6BAA6B,mBAAmB,sBAAsB;oBAC9G,UAAU,EAAE,gDAAgD,mBAAmB,wDAAwD;iBACxI,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,4FAA4F;QAC5F,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,QAAQ,EAAE,SAAS;gBACnB,OAAO,EACL,sHAAsH;gBACxH,UAAU,EAAE,0EAA0E,mBAAmB,kBAAkB;aAC5H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAEtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,GAAG,qBAAK,CAAC,OAAO,4BAA4B,KAAK,CAAC,MAAM,qBAAqB,qBAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CACxG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,qBAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,MAAM,IAAI,qBAAK,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,qDAAqD;IACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACrB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/checks/consolidated/security.d.ts

@@ -0,0 +1,78 @@
+#!/usr/bin/env tsx
+/**
+ * Consolidated Security Preflight
+ *
+ * Combines 3 security checks into one module:
+ * - api-route-validation (API security)
+ * - external-link-security (external links)
+ * - xss-prevention-validation (XSS prevention)
+ *
+ * Usage:
+ *   pnpm preflight:security-checks           # All checks
+ *   pnpm preflight:security-checks api       # API routes only
+ *   pnpm preflight:security-checks links     # External links only
+ *   pnpm preflight:security-checks xss       # XSS prevention only
+ */
+interface Issue {
+    file: string;
+    line?: number;
+    type: string;
+    severity: "error" | "warning" | "info";
+    message: string;
+    suggestion?: string;
+}
+interface CheckResult {
+    name: string;
+    passed: boolean;
+    blocking: boolean;
+    issues: Issue[];
+    duration: number;
+}
+interface ModuleResult {
+    module: string;
+    passed: boolean;
+    totalDuration: number;
+    checks: CheckResult[];
+    summary: {
+        total: number;
+        passed: number;
+        failed: number;
+        errors: number;
+        warnings: number;
+    };
+}
+declare class SecurityPreflightModule {
+    private verbose;
+    private parallel;
+    constructor(options?: {
+        verbose?: boolean;
+        parallel?: boolean;
+    });
+    /**
+     * API Route Security Check
+     *
+     * NOTE: Most API routes use Prisma ORM which prevents SQL injection.
+     * Missing auth/rate-limit warnings are informational - many public routes
+     * (search, product listings) intentionally don't require auth.
+     */
+    checkApiRoutes(): Promise<CheckResult>;
+    /**
+     * External Link Security Check
+     *
+     * NOTE: Next.js Link components automatically add rel="noopener" for target="_blank".
+     * Manual <a> tags with target="_blank" need explicit rel attributes.
+     */
+    checkExternalLinks(): Promise<CheckResult>;
+    /**
+     * XSS Prevention Check
+     *
+     * NOTE: dangerouslySetInnerHTML for JSON-LD structured data is safe when:
+     * - Content is server-generated (not user input)
+     * - Used for SEO schema markup (script type="application/ld+json")
+     */
+    checkXssPrevention(): Promise<CheckResult>;
+    runAll(): Promise<ModuleResult>;
+    private printResults;
+}
+export { SecurityPreflightModule };
+//# sourceMappingURL=security.d.ts.map

package/dist/checks/consolidated/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/checks/consolidated/security.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG;AAWH,UAAU,KAAK;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9F;AAiBD,cAAM,uBAAuB;IAC3B,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,QAAQ,CAAU;gBAEd,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO;IAKnE;;;;;;OAMG;IACG,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IA6F5C;;;;;OAKG;IACG,kBAAkB,IAAI,OAAO,CAAC,WAAW,CAAC;IA+ChD;;;;;;OAMG;IACG,kBAAkB,IAAI,OAAO,CAAC,WAAW,CAAC;IAsF1C,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAqCrC,OAAO,CAAC,YAAY;CAiCrB;AA2DD,OAAO,EAAE,uBAAuB,EAAE,CAAC"}