@freeappstore/compliance 0.1.0 → 0.3.0

package/dist/checks/unsafe-vh.d.ts

@@ -0,0 +1,24 @@
+import type { CheckResult } from '../types.js';
+/**
+ * Flag `100vh` (and Tailwind shortcuts that compile to it) in source.
+ *
+ * Why: on iOS Safari with the URL bar visible, `100vh` resolves to the
+ * *layout* viewport (e.g. 852px on iPhone 15) but the actual visible
+ * area is the *visual* viewport (~750px). An element sized at `100vh`
+ * is then ~100px taller than the screen, forcing the page to scroll on
+ * first load. This is invisible to headless Playwright (no dynamic URL
+ * bar) and to the static audit Worker (no rendering), so this fast
+ * static rule is the cheapest place to catch it.
+ *
+ * Fix: use `100svh` (small viewport height — accounts for visible
+ * browser UI) for "as tall as the screen" intent, or `100dvh` (dynamic
+ * viewport height — recomputes as the URL bar shows/hides) for full-
+ * height containers that should grow when chrome retracts.
+ *
+ * Scope: warn-by-default, not fail. There ARE legitimate uses of
+ * `100vh` (intentionally taking layout-viewport height for hero
+ * sections that should stay constant as URL bar moves). Creators can
+ * acknowledge by leaving an `// allow-100vh` comment on the same line.
+ */
+export declare function checkUnsafeVh(repoDir: string): Promise<CheckResult>;
+//# sourceMappingURL=unsafe-vh.d.ts.map

package/dist/checks/unsafe-vh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafe-vh.d.ts","sourceRoot":"","sources":["../../src/checks/unsafe-vh.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA2CzE"}

package/dist/checks/unsafe-vh.js

@@ -0,0 +1,110 @@
+import { readFile } from 'node:fs/promises';
+import { extname, relative } from 'node:path';
+import { walk } from '../lib/walk.js';
+/**
+ * Flag `100vh` (and Tailwind shortcuts that compile to it) in source.
+ *
+ * Why: on iOS Safari with the URL bar visible, `100vh` resolves to the
+ * *layout* viewport (e.g. 852px on iPhone 15) but the actual visible
+ * area is the *visual* viewport (~750px). An element sized at `100vh`
+ * is then ~100px taller than the screen, forcing the page to scroll on
+ * first load. This is invisible to headless Playwright (no dynamic URL
+ * bar) and to the static audit Worker (no rendering), so this fast
+ * static rule is the cheapest place to catch it.
+ *
+ * Fix: use `100svh` (small viewport height — accounts for visible
+ * browser UI) for "as tall as the screen" intent, or `100dvh` (dynamic
+ * viewport height — recomputes as the URL bar shows/hides) for full-
+ * height containers that should grow when chrome retracts.
+ *
+ * Scope: warn-by-default, not fail. There ARE legitimate uses of
+ * `100vh` (intentionally taking layout-viewport height for hero
+ * sections that should stay constant as URL bar moves). Creators can
+ * acknowledge by leaving an `// allow-100vh` comment on the same line.
+ */
+export async function checkUnsafeVh(repoDir) {
+    const issues = [];
+    for await (const file of walk(repoDir)) {
+        const ext = extname(file).toLowerCase();
+        if (!SCAN_EXTS.has(ext))
+            continue;
+        const content = await readFile(file, 'utf8').catch(() => '');
+        if (!content)
+            continue;
+        const rel = relative(repoDir, file);
+        for (const { re, label } of PATTERNS) {
+            // Reset lastIndex defensively; we use `g` to find all matches.
+            re.lastIndex = 0;
+            let m;
+            while ((m = re.exec(content)) !== null) {
+                const line = lineNumberAt(content, m.index);
+                // Allow opt-out via an inline `allow-100vh` comment on the same line.
+                if (lineHasAllowComment(content, m.index))
+                    continue;
+                issues.push(`${rel}:${line} ${label} — use 100svh or 100dvh`);
+            }
+        }
+    }
+    if (issues.length === 0) {
+        return {
+            name: 'No unsafe 100vh',
+            status: 'pass',
+            detail: 'no 100vh / h-screen patterns found',
+        };
+    }
+    const head = issues.slice(0, MAX_REPORTED);
+    const tail = issues.length > MAX_REPORTED ? [`...and ${issues.length - MAX_REPORTED} more`] : [];
+    return {
+        name: 'No unsafe 100vh',
+        status: 'warn',
+        detail: `${issues.length} occurrence${issues.length === 1 ? '' : 's'} of 100vh / h-screen — breaks on iOS Safari with URL bar visible`,
+        suggestions: [
+            ...head,
+            ...tail,
+            'Replace with 100svh (preferred) or 100dvh. Add `// allow-100vh` on the line if intentional.',
+        ],
+    };
+}
+const SCAN_EXTS = new Set(['.css', '.scss', '.tsx', '.ts', '.jsx', '.js', '.html']);
+const MAX_REPORTED = 5;
+/**
+ * Patterns to flag. Each is global (`g`) so we find every occurrence.
+ *
+ * Boundary handling:
+ * - `100vh` uses `\b` since CSS values are tokenised normally.
+ * - Tailwind classes use a custom hyphen-aware boundary
+ *   `(?<![\w-])foo(?![\w-])` so `h-screen` doesn't match inside
+ *   `min-h-screen` (and we don't double-count `min-h-screen` as both
+ *   itself and its `h-screen` substring).
+ */
+const PATTERNS = [
+    { re: /\b100vh\b/g, label: '100vh' },
+    // Tailwind: h-screen → height: 100vh; same for min-/max-.
+    { re: /(?<![\w-])h-screen(?![\w-])/g, label: 'h-screen (Tailwind: → 100vh)' },
+    { re: /(?<![\w-])min-h-screen(?![\w-])/g, label: 'min-h-screen (Tailwind: → min-height: 100vh)' },
+    { re: /(?<![\w-])max-h-screen(?![\w-])/g, label: 'max-h-screen (Tailwind: → max-height: 100vh)' },
+];
+function lineNumberAt(content, index) {
+    let n = 1;
+    for (let i = 0; i < index; i++)
+        if (content.charCodeAt(i) === 10)
+            n++;
+    return n;
+}
+/**
+ * True if the rest of the line containing `index` includes the literal
+ * string "allow-100vh" (typically inside a comment). Cheap and cheerful
+ * — doesn't validate comment syntax, just trusts the marker.
+ */
+function lineHasAllowComment(content, index) {
+    // Find end of the current line.
+    let end = content.indexOf('\n', index);
+    if (end === -1)
+        end = content.length;
+    // Walk back to the start of the line for full context.
+    let start = content.lastIndexOf('\n', index);
+    if (start === -1)
+        start = 0;
+    return content.slice(start, end).includes('allow-100vh');
+}
+//# sourceMappingURL=unsafe-vh.js.map

package/dist/checks/unsafe-vh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafe-vh.js","sourceRoot":"","sources":["../../src/checks/unsafe-vh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEpC,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;YACrC,+DAA+D;YAC/D,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACjB,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,sEAAsE;gBACtE,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACpD,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,IAAI,KAAK,yBAAyB,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,kEAAkE;QACtI,WAAW,EAAE;YACX,GAAG,IAAI;YACP,GAAG,IAAI;YACP,6FAA6F;SAC9F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACpF,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB;;;;;;;;;GASG;AACH,MAAM,QAAQ,GAAyC;IACrD,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE;IACpC,0DAA0D;IAC1D,EAAE,EAAE,EAAE,8BAA8B,EAAE,KAAK,EAAE,8BAA8B,EAAE;IAC7E,EAAE,EAAE,EAAE,kCAAkC,EAAE,KAAK,EAAE,8CAA8C,EAAE;IACjG,EAAE,EAAE,EAAE,kCAAkC,EAAE,KAAK,EAAE,8CAA8C,EAAE;CAClG,CAAC;AAEF,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,OAAe,EAAE,KAAa;IACzD,gCAAgC;IAChC,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACrC,uDAAuD;IACvD,IAAI,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,KAAK,GAAG,CAAC,CAAC;IAC5B,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAC3D,CAAC"}

package/dist/checks/unsafe-vh.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=unsafe-vh.test.d.ts.map

package/dist/checks/unsafe-vh.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafe-vh.test.d.ts","sourceRoot":"","sources":["../../src/checks/unsafe-vh.test.ts"],"names":[],"mappings":""}

package/dist/checks/unsafe-vh.test.js

@@ -0,0 +1,115 @@
+import { describe, it, expect } from 'vitest';
+import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { checkUnsafeVh } from './unsafe-vh.js';
+async function fixture(files) {
+    const dir = await mkdtemp(join(tmpdir(), 'fas-unsafe-vh-'));
+    for (const [path, content] of Object.entries(files)) {
+        const full = join(dir, path);
+        await mkdir(join(full, '..'), { recursive: true });
+        await writeFile(full, content);
+    }
+    return dir;
+}
+describe('checkUnsafeVh', () => {
+    it('passes when no 100vh appears anywhere', async () => {
+        const dir = await fixture({
+            'web/src/index.css': 'body { height: 100svh; }',
+            'web/src/App.tsx': 'export default () => <div className="h-screen-not-really" />;',
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('pass');
+        expect(r.detail).toMatch(/no 100vh/);
+    });
+    it('warns on a literal 100vh in CSS', async () => {
+        const dir = await fixture({
+            'web/src/index.css': '.full { height: 100vh; }',
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('warn');
+        expect(r.detail).toMatch(/1 occurrence/);
+        expect(r.suggestions?.join('\n')).toMatch(/web\/src\/index\.css:1.*100vh/);
+        expect(r.suggestions?.join('\n')).toMatch(/100svh.*100dvh/);
+    });
+    it('warns on Tailwind h-screen / min-h-screen / max-h-screen', async () => {
+        const dir = await fixture({
+            'web/src/App.tsx': `
+        export default () => (
+          <div className="h-screen">
+            <header className="min-h-screen" />
+            <main className="max-h-screen" />
+          </div>
+        );
+      `,
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('warn');
+        expect(r.detail).toMatch(/3 occurrences/);
+        const suggestionText = r.suggestions?.join('\n') ?? '';
+        expect(suggestionText).toMatch(/h-screen/);
+        expect(suggestionText).toMatch(/min-h-screen/);
+        expect(suggestionText).toMatch(/max-h-screen/);
+    });
+    it('respects the `allow-100vh` opt-out comment on the same line', async () => {
+        const dir = await fixture({
+            'web/src/index.css': `
+        .hero { height: 100vh; /* allow-100vh — intentional, hero stays constant under URL bar */ }
+      `,
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('pass');
+    });
+    it('still flags a different line even when one line has the opt-out', async () => {
+        const dir = await fixture({
+            'web/src/index.css': `.a { height: 100vh; /* allow-100vh */ }
+.b { height: 100vh; }
+`,
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('warn');
+        expect(r.detail).toMatch(/1 occurrence/); // only the un-opt-out line
+    });
+    it('does not flag the strings "100svh" / "100dvh" (the recommended fixes)', async () => {
+        const dir = await fixture({
+            'web/src/index.css': `
+        .a { height: 100svh; }
+        .b { height: 100dvh; }
+      `,
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('pass');
+    });
+    it('does not match identifiers that contain "100vh" as a substring', async () => {
+        const dir = await fixture({
+            // `var100vh` and `--my100vhvar` aren't actual unit usage; word
+            // boundaries must keep us from flagging them.
+            'web/src/foo.ts': 'const var100vh = 1; const x = "--my100vhvar";',
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('pass');
+    });
+    it('caps reported issues at 5 and notes the rest', async () => {
+        const lines = Array.from({ length: 8 }, (_, i) => `.x${i} { height: 100vh; }`).join('\n');
+        const dir = await fixture({ 'web/src/index.css': lines });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('warn');
+        expect(r.detail).toMatch(/8 occurrences/);
+        // 5 file:line entries + 1 "...and N more" + 1 final "Replace with..." advice = 7
+        expect(r.suggestions?.length).toBe(7);
+        expect(r.suggestions?.[5]).toMatch(/and 3 more/);
+    });
+    it('scans CSS, JS, TS, JSX, TSX, HTML — but skips other extensions', async () => {
+        const dir = await fixture({
+            'web/src/index.css': '.a { height: 100vh; }',
+            'web/src/App.jsx': 'const x = "h-screen";', // string with the class — still flagged (we can't know intent)
+            'docs/notes.md': 'Use 100vh somewhere', // Markdown — should NOT be scanned
+            'web/src/foo.scss': '$h: 100vh;',
+        });
+        const r = await checkUnsafeVh(dir);
+        expect(r.status).toBe('warn');
+        // 3 hits: index.css, App.jsx, foo.scss. notes.md ignored.
+        expect(r.detail).toMatch(/3 occurrences/);
+    });
+});
+//# sourceMappingURL=unsafe-vh.test.js.map

package/dist/checks/unsafe-vh.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsafe-vh.test.js","sourceRoot":"","sources":["../../src/checks/unsafe-vh.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,KAAK,UAAU,OAAO,CAAC,KAA6B;IAClD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,mBAAmB,EAAE,0BAA0B;YAC/C,iBAAiB,EAAE,+DAA+D;SACnF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,mBAAmB,EAAE,0BAA0B;SAChD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,iBAAiB,EAAE;;;;;;;OAOlB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,mBAAmB,EAAE;;OAEpB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,mBAAmB,EAAE;;CAE1B;SACI,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,2BAA2B;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,mBAAmB,EAAE;;;OAGpB;SACF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,+DAA+D;YAC/D,8CAA8C;YAC9C,gBAAgB,EAAE,+CAA+C;SAClE,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,iFAAiF;QACjF,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,mBAAmB,EAAE,uBAAuB;YAC5C,iBAAiB,EAAE,uBAAuB,EAAE,+DAA+D;YAC3G,eAAe,EAAE,qBAAqB,EAAM,mCAAmC;YAC/E,kBAAkB,EAAE,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,0DAA0D;QAC1D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/checks/viewport-support.d.ts

@@ -0,0 +1,23 @@
+import type { CheckResult } from '../types.js';
+/**
+ * Apps and games must declare which screens and orientations they
+ * support, so the storefront can render a coverage badge ("works on
+ * 92% of devices · portrait + landscape") and visitors know what to
+ * expect before they tap.
+ *
+ * Two declarations are required, both in `web/public/manifest.json`:
+ *
+ *   "orientation":           "any" | "portrait" | "landscape" |
+ *                            "portrait-primary" | "landscape-primary"
+ *   "min_viewport_width":     320 | 360 | 414 | 600 | 768 | 1024
+ *
+ * `orientation` is a standard PWA manifest field. `min_viewport_width`
+ * is a custom platform field — the smallest screen width (in CSS px)
+ * the app renders correctly at. The storefront maps that to a global
+ * device-share percentile to render coverage.
+ *
+ * If you genuinely don't care about orientation, set `"any"`. Don't
+ * leave it off — that's the only value that returns a fail.
+ */
+export declare function checkViewportSupport(repoDir: string): Promise<CheckResult>;
+//# sourceMappingURL=viewport-support.d.ts.map

package/dist/checks/viewport-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewport-support.d.ts","sourceRoot":"","sources":["../../src/checks/viewport-support.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA+DhF"}

package/dist/checks/viewport-support.js

@@ -0,0 +1,87 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * Apps and games must declare which screens and orientations they
+ * support, so the storefront can render a coverage badge ("works on
+ * 92% of devices · portrait + landscape") and visitors know what to
+ * expect before they tap.
+ *
+ * Two declarations are required, both in `web/public/manifest.json`:
+ *
+ *   "orientation":           "any" | "portrait" | "landscape" |
+ *                            "portrait-primary" | "landscape-primary"
+ *   "min_viewport_width":     320 | 360 | 414 | 600 | 768 | 1024
+ *
+ * `orientation` is a standard PWA manifest field. `min_viewport_width`
+ * is a custom platform field — the smallest screen width (in CSS px)
+ * the app renders correctly at. The storefront maps that to a global
+ * device-share percentile to render coverage.
+ *
+ * If you genuinely don't care about orientation, set `"any"`. Don't
+ * leave it off — that's the only value that returns a fail.
+ */
+export async function checkViewportSupport(repoDir) {
+    const manifestPath = join(repoDir, 'web', 'public', 'manifest.json');
+    let manifest;
+    try {
+        const raw = await readFile(manifestPath, 'utf8');
+        manifest = JSON.parse(raw);
+    }
+    catch {
+        return {
+            name: 'Viewport support',
+            status: 'fail',
+            detail: 'web/public/manifest.json not found or unparseable',
+        };
+    }
+    const orientation = manifest['orientation'];
+    const minWidth = manifest['min_viewport_width'];
+    const issues = [];
+    const warnings = [];
+    if (typeof orientation !== 'string' || !VALID_ORIENTATIONS.has(orientation)) {
+        issues.push(`manifest.orientation is "${String(orientation)}" — must be one of: ${[...VALID_ORIENTATIONS].join(', ')}`);
+    }
+    if (typeof minWidth !== 'number') {
+        warnings.push('manifest.min_viewport_width is missing — assuming 320 (strictest). ' +
+            'Set explicitly to e.g. 360 / 414 / 600 / 768 / 1024 to declare which devices the app supports.');
+    }
+    else if (minWidth < 320) {
+        issues.push(`manifest.min_viewport_width=${minWidth} is below the 320px minimum`);
+    }
+    else if (!RECOMMENDED_WIDTHS.includes(minWidth)) {
+        warnings.push(`manifest.min_viewport_width=${minWidth} is unusual — recommended values: ${RECOMMENDED_WIDTHS.join(', ')}`);
+    }
+    if (issues.length > 0) {
+        return {
+            name: 'Viewport support',
+            status: 'fail',
+            detail: `${issues.length} viewport-declaration issue${issues.length === 1 ? '' : 's'}`,
+            suggestions: [
+                ...issues,
+                'Edit web/public/manifest.json: add "orientation": "any" (or portrait/landscape) and "min_viewport_width": 360.',
+            ],
+        };
+    }
+    if (warnings.length > 0) {
+        return {
+            name: 'Viewport support',
+            status: 'warn',
+            detail: warnings[0],
+            suggestions: warnings,
+        };
+    }
+    return {
+        name: 'Viewport support',
+        status: 'pass',
+        detail: `orientation=${orientation} · min ${minWidth}px`,
+    };
+}
+const VALID_ORIENTATIONS = new Set([
+    'any',
+    'portrait',
+    'landscape',
+    'portrait-primary',
+    'landscape-primary',
+]);
+const RECOMMENDED_WIDTHS = [320, 360, 414, 600, 768, 1024];
+//# sourceMappingURL=viewport-support.js.map

package/dist/checks/viewport-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewport-support.js","sourceRoot":"","sources":["../../src/checks/viewport-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAe;IACxD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACjD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,mDAAmD;SAC5D,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,CACT,4BAA4B,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3G,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CACX,qEAAqE;YACnE,gGAAgG,CACnG,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,+BAA+B,QAAQ,6BAA6B,CAAC,CAAC;IACpF,CAAC;SAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CACX,+BAA+B,QAAQ,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5G,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,8BAA8B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YACtF,WAAW,EAAE;gBACX,GAAG,MAAM;gBACT,gHAAgH;aACjH;SACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAE;YACpB,WAAW,EAAE,QAAQ;SACtB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,eAAe,WAAqB,UAAU,QAAQ,IAAI;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,KAAK;IACL,UAAU;IACV,WAAW;IACX,kBAAkB;IAClB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC"}

package/dist/checks/viewport-support.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=viewport-support.test.d.ts.map

package/dist/checks/viewport-support.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewport-support.test.d.ts","sourceRoot":"","sources":["../../src/checks/viewport-support.test.ts"],"names":[],"mappings":""}

package/dist/checks/viewport-support.test.js

@@ -0,0 +1,63 @@
+import { describe, it, expect } from 'vitest';
+import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { checkViewportSupport } from './viewport-support.js';
+async function fixture(manifest) {
+    const dir = await mkdtemp(join(tmpdir(), 'fas-viewport-'));
+    if (manifest !== null) {
+        await mkdir(join(dir, 'web', 'public'), { recursive: true });
+        await writeFile(join(dir, 'web', 'public', 'manifest.json'), JSON.stringify(manifest));
+    }
+    return dir;
+}
+describe('checkViewportSupport', () => {
+    it('fails when manifest.json is missing', async () => {
+        const dir = await fixture(null);
+        const r = await checkViewportSupport(dir);
+        expect(r.status).toBe('fail');
+        expect(r.detail).toMatch(/manifest\.json/);
+    });
+    it('fails when orientation is missing', async () => {
+        const dir = await fixture({ name: 'x' });
+        const r = await checkViewportSupport(dir);
+        expect(r.status).toBe('fail');
+        expect(r.suggestions?.join(' ')).toMatch(/orientation/);
+    });
+    it('fails when orientation is invalid', async () => {
+        const dir = await fixture({ name: 'x', orientation: 'rotate' });
+        const r = await checkViewportSupport(dir);
+        expect(r.status).toBe('fail');
+    });
+    it('warns when min_viewport_width is missing but orientation is valid', async () => {
+        const dir = await fixture({ name: 'x', orientation: 'any' });
+        const r = await checkViewportSupport(dir);
+        expect(r.status).toBe('warn');
+        expect(r.detail).toMatch(/min_viewport_width/);
+    });
+    it('fails when min_viewport_width is below 320', async () => {
+        const dir = await fixture({ name: 'x', orientation: 'any', min_viewport_width: 280 });
+        const r = await checkViewportSupport(dir);
+        expect(r.status).toBe('fail');
+    });
+    it('warns on unusual but accepted widths', async () => {
+        const dir = await fixture({ name: 'x', orientation: 'any', min_viewport_width: 387 });
+        const r = await checkViewportSupport(dir);
+        expect(r.status).toBe('warn');
+        expect(r.detail).toMatch(/unusual/);
+    });
+    it('passes for valid orientation + recommended width', async () => {
+        const dir = await fixture({ name: 'x', orientation: 'any', min_viewport_width: 360 });
+        const r = await checkViewportSupport(dir);
+        expect(r.status).toBe('pass');
+        expect(r.detail).toMatch(/any/);
+        expect(r.detail).toMatch(/360/);
+    });
+    it('passes for portrait-only landscape-only too', async () => {
+        const dir = await fixture({ name: 'x', orientation: 'portrait', min_viewport_width: 414 });
+        expect((await checkViewportSupport(dir)).status).toBe('pass');
+        const dir2 = await fixture({ name: 'x', orientation: 'landscape-primary', min_viewport_width: 768 });
+        expect((await checkViewportSupport(dir2)).status).toBe('pass');
+    });
+});
+//# sourceMappingURL=viewport-support.test.js.map

package/dist/checks/viewport-support.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewport-support.test.js","sourceRoot":"","sources":["../../src/checks/viewport-support.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,KAAK,UAAU,OAAO,CAAC,QAAwB;IAC7C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,11 +1,17 @@
 import { checkNoPlaceholders } from './checks/no-placeholders.js';
 import { checkNoTracking } from './checks/no-tracking.js';
 import { checkBrandFonts } from './checks/brand-fonts.js';
+import { checkNoBrandOverrides } from './checks/no-brand-overrides.js';
+import { checkNoScroll } from './checks/no-scroll.js';
+import { checkViewportSupport } from './checks/viewport-support.js';
 import { checkManifest } from './checks/manifest.js';
 import { checkBundleSize } from './checks/bundle-size.js';
+import { checkUnsafeVh } from './checks/unsafe-vh.js';
 import type { CheckResult } from './types.js';
 export type { CheckStatus, CheckResult } from './types.js';
-export { checkNoPlaceholders, checkNoTracking, checkBrandFonts, checkManifest, checkBundleSize, };
+export { checkNoPlaceholders, checkNoTracking, checkBrandFonts, checkNoBrandOverrides, checkNoScroll, checkViewportSupport, checkManifest, checkBundleSize, checkUnsafeVh, };
+export { auditLive, checkNoTrackingLive, checkBrandFontsLive, checkManifestLive, checkBundleSizeLive, checkUnsafeVhLive, } from './live/index.js';
+export type { LiveAuditInput, LiveAuditReport } from './live/index.js';
 /**
  * Runs every compliance check against `repoDir` (the root of an app, the
  * directory containing package.json + web/). Returns results in a stable

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,aAAa,EACb,eAAe,GAChB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAQvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,eAAe,EACf,aAAa,GACd,CAAC;AAKF,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvE;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAYvE"}

package/dist/index.js

@@ -1,9 +1,17 @@
 import { checkNoPlaceholders } from './checks/no-placeholders.js';
 import { checkNoTracking } from './checks/no-tracking.js';
 import { checkBrandFonts } from './checks/brand-fonts.js';
+import { checkNoBrandOverrides } from './checks/no-brand-overrides.js';
+import { checkNoScroll } from './checks/no-scroll.js';
+import { checkViewportSupport } from './checks/viewport-support.js';
 import { checkManifest } from './checks/manifest.js';
 import { checkBundleSize } from './checks/bundle-size.js';
-export { checkNoPlaceholders, checkNoTracking, checkBrandFonts, checkManifest, checkBundleSize, };
+import { checkUnsafeVh } from './checks/unsafe-vh.js';
+export { checkNoPlaceholders, checkNoTracking, checkBrandFonts, checkNoBrandOverrides, checkNoScroll, checkViewportSupport, checkManifest, checkBundleSize, checkUnsafeVh, };
+// Live-URL audit (used by the compliance audit Worker; runs in
+// browser/Workers env, no filesystem). Separate export path so callers
+// don't accidentally pull node:fs in via the file-walking checks.
+export { auditLive, checkNoTrackingLive, checkBrandFontsLive, checkManifestLive, checkBundleSizeLive, checkUnsafeVhLive, } from './live/index.js';
 /**
  * Runs every compliance check against `repoDir` (the root of an app, the
  * directory containing package.json + web/). Returns results in a stable
@@ -14,6 +22,10 @@ export async function runChecks(repoDir) {
         checkNoPlaceholders(repoDir),
         checkNoTracking(repoDir),
         checkBrandFonts(repoDir),
+        checkNoBrandOverrides(repoDir),
+        checkNoScroll(repoDir),
+        checkViewportSupport(repoDir),
+        checkUnsafeVh(repoDir),
         checkManifest(repoDir),
         checkBundleSize(repoDir),
     ]);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAI1D,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,aAAa,EACb,eAAe,GAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,GAAG,CAAC;QACjB,mBAAmB,CAAC,OAAO,CAAC;QAC5B,eAAe,CAAC,OAAO,CAAC;QACxB,eAAe,CAAC,OAAO,CAAC;QACxB,aAAa,CAAC,OAAO,CAAC;QACtB,eAAe,CAAC,OAAO,CAAC;KACzB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAItD,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,eAAe,EACf,aAAa,GACd,CAAC;AAEF,+DAA+D;AAC/D,uEAAuE;AACvE,kEAAkE;AAClE,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAGzB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,GAAG,CAAC;QACjB,mBAAmB,CAAC,OAAO,CAAC;QAC5B,eAAe,CAAC,OAAO,CAAC;QACxB,eAAe,CAAC,OAAO,CAAC;QACxB,qBAAqB,CAAC,OAAO,CAAC;QAC9B,aAAa,CAAC,OAAO,CAAC;QACtB,oBAAoB,CAAC,OAAO,CAAC;QAC7B,aAAa,CAAC,OAAO,CAAC;QACtB,aAAa,CAAC,OAAO,CAAC;QACtB,eAAe,CAAC,OAAO,CAAC;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/live/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Live-URL audit checks. Unlike the file-walking checks in ../checks/,
+ * these run inside a Cloudflare Worker (no filesystem) against published
+ * apps' live URLs to catch post-publish drift.
+ *
+ * What we can check from a live URL:
+ *   - Tracking SDK injection (script src, inline scripts, fetched JS)
+ *   - Brand fonts presence (link href to fonts.googleapis.com)
+ *   - PWA manifest reachable + valid
+ *   - Main bundle size (HEAD request)
+ *
+ * What we CAN'T check post-publish:
+ *   - APPNAME placeholders (build erases these)
+ *   - Brand-override CSS variables (sourcemaps not always shipped)
+ *
+ * The audit Worker runs these on a weekly cron and stores per-app
+ * results in D1 so creators (or platform admins) can see drift over
+ * time without leaving the storefront.
+ */
+import type { CheckResult } from '../types.js';
+export interface LiveAuditInput {
+    appId: string;
+    liveUrl: string;
+}
+export interface LiveAuditReport {
+    appId: string;
+    liveUrl: string;
+    checkedAt: number;
+    reachable: boolean;
+    results: CheckResult[];
+}
+export declare function auditLive(input: LiveAuditInput): Promise<LiveAuditReport>;
+export declare function checkNoTrackingLive(html: string): CheckResult;
+export declare function checkBrandFontsLive(html: string): CheckResult;
+export declare function checkManifestLive(html: string, liveUrl: string): Promise<CheckResult>;
+export declare function checkBundleSizeLive(html: string, liveUrl: string): Promise<CheckResult>;
+/**
+ * Live counterpart to checkUnsafeVh. Fetches the first bundled
+ * stylesheet linked from the HTML and scans it for `100vh` (the
+ * unit, not the Tailwind class — by build time those have been
+ * compiled to CSS). Catches whiteboard-class iOS Safari URL-bar
+ * scroll bugs in apps that have already shipped.
+ *
+ * Cost: one extra subrequest per app. The audit Worker runs near the
+ * free-plan subrequest cap; on cap errors we degrade to `warn`
+ * (re-run needed) rather than `fail` (app broken) — the app isn't
+ * actually broken, the audit just couldn't check.
+ */
+export declare function checkUnsafeVhLive(html: string, liveUrl: string): Promise<CheckResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/live/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/live/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAc/C,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AA2BD,wBAAsB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CA2D/E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAa7D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAe7D;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA8C3F;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAmD7F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAgD3F"}