@freeappstore/compliance 0.5.0 → 0.6.1

package/dist/checks/no-scroll.js.map

@@ -1 +1 @@
-{"version":3,"file":"no-scroll.js","sourceRoot":"","sources":["../../src/checks/no-scroll.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB;IACpD,mDAAmD;IACnD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,eAAe,GAAG,IAAI,CAAC;QAExD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,2BAA2B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YACnF,WAAW,EAAE;gBACX,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,uEAAuE;gBACvE,uEAAuE;aACxE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6EAA6E;YACrF,WAAW,EAAE;gBACX,4DAA4D;gBAC5D,8CAA8C;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,MAAM,kBAAkB,GAAG;IACzB,qEAAqE;IACrE,6EAA6E;CAC9E,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,6DAA6D;CAC9D,CAAC;AAEF,MAAM,aAAa,GAAG,yEAAyE,CAAC;AAEhG,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"no-scroll.js","sourceRoot":"","sources":["../../src/checks/no-scroll.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB;IACpD,mDAAmD;IACnD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,eAAe,GAAG,IAAI,CAAC;QAExD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,2BAA2B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YACnF,WAAW,EAAE;gBACX,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,uEAAuE;gBACvE,uEAAuE;aACxE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6EAA6E;YACrF,WAAW,EAAE;gBACX,4DAA4D;gBAC5D,8CAA8C;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,MAAM,kBAAkB,GAAG;IACzB,qEAAqE;IACrE,6EAA6E;CAC9E,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,yEAAyE,CAAC;AAEhG,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/checks/no-tracking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"no-tracking.d.ts","sourceRoot":"","sources":["../../src/checks/no-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAiB/C,wBAAsB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAiC9E"}
+{"version":3,"file":"no-tracking.d.ts","sourceRoot":"","sources":["../../src/checks/no-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuE/C,wBAAsB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CA6C9E"}

package/dist/checks/no-tracking.js

@@ -1,25 +1,77 @@
-// Same forbidden list the template's compliance.yml enforces — kept in
-// sync because both are downstream consumers of this package long-term.
-const FORBIDDEN = [
-    'google-analytics',
-    'gtag',
-    'amplitude',
-    'mixpanel',
-    'segment',
-    'hotjar',
-    'plausible',
-    'posthog',
+import { stripCommentsForExt } from '../lib/strip.js';
+function wb(name) {
+    // word-boundary, case-insensitive: only matches the literal token surrounded
+    // by non-word chars (or string start/end). Avoids `segmentation`, `collideSegment`.
+    return new RegExp(`(?:^|[^a-zA-Z0-9_])${escapeForRegExp(name)}(?:$|[^a-zA-Z0-9_])`, 'i');
+}
+const TRACKERS = [
+    { name: 'google-analytics', patterns: [/google-analytics/i, /googletagmanager\.com/i] },
+    // `gtag` as a bare token would catch nothing real, but the GA install snippet
+    // always calls it like `gtag('config', ...)` or `gtag('event', ...)` or
+    // declares `window.gtag = ...`. Match those, not the bare identifier.
+    { name: 'gtag', patterns: [/\bgtag\s*\(\s*['"]/i, /window\.gtag\b/i, /gtag\.js/i] },
+    // Amplitude SDK shows up as @amplitude/* scoped package, amplitude.com host,
+    // or amplitude.init/track/getInstance call. Bare `amplitude` (the math term)
+    // is fine.
+    {
+        name: 'amplitude',
+        patterns: [
+            /@amplitude\//i,
+            /amplitude\.com/i,
+            /\bamplitude\s*\.\s*(?:init|track|getInstance|setUserId|logEvent)\b/i,
+            /require\(['"]amplitude/i,
+            /from\s+['"]amplitude/i,
+        ],
+    },
+    { name: 'mixpanel', patterns: [wb('mixpanel')] },
+    // Segment SDK: scoped package, hostname, or window.analytics.track/identify.
+    // Bare `segment` (geometry term — ball-line-segment, drop-target row segment)
+    // is fine.
+    {
+        name: 'segment',
+        patterns: [
+            /@segment\//i,
+            /segment\.io/i,
+            /segment\.com\/analytics/i,
+            /cdn\.segment\.com/i,
+            /window\.analytics\s*\.\s*(?:track|identify|page|group)\b/i,
+            /\bAnalyticsBrowser\.load\b/i,
+        ],
+    },
+    { name: 'hotjar', patterns: [wb('hotjar')] },
+    { name: 'plausible', patterns: [wb('plausible')] },
+    { name: 'posthog', patterns: [wb('posthog')] },
 ];
 const SCAN_EXTS = new Set(['.ts', '.tsx', '.js', '.jsx', '.html', '.json']);
+function escapeForRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+// Per-game compliance tests legitimately mention these tracker names as
+// the banned list they assert NOT to find. Treating those as positives
+// is the classic "check finds its own assertion" false positive.
+function isSelfReferenceTestFile(path) {
+    return /(?:^|\/)(?:test|tests|__tests__)\//.test(path) && /compliance\.test\.[jt]sx?$/.test(path);
+}
 export async function checkNoTracking(source) {
     const hits = [];
     for await (const path of source.list()) {
-        if (!SCAN_EXTS.has(extOf(path)))
+        const ext = extOf(path);
+        if (!SCAN_EXTS.has(ext))
+            continue;
+        if (isSelfReferenceTestFile(path))
             continue;
-        const content = await source.read(path);
-        if (!content)
+        const raw = await source.read(path);
+        if (!raw)
             continue;
-        const matches = FORBIDDEN.filter((sdk) => content.includes(sdk));
+        // Strip comments only — NOT string literals. Real tracker imports
+        // live inside strings (`import from "@amplitude/..."`,
+        // `<script src="https://www.google-analytics.com/...">`), so
+        // erasing string contents would erase the very evidence we need.
+        // A rare false positive remains if someone mentions a tracker name
+        // inside a non-import string literal; comment-stripping handles the
+        // common case (documentation comments).
+        const content = stripCommentsForExt(raw, ext);
+        const matches = TRACKERS.filter((t) => t.patterns.some((re) => re.test(content))).map((t) => t.name);
         if (matches.length > 0) {
             hits.push({ file: path, matches });
         }
@@ -28,7 +80,7 @@ export async function checkNoTracking(source) {
         return {
             name: 'No tracking SDKs',
             status: 'pass',
-            detail: `scanned for ${FORBIDDEN.length} known trackers`,
+            detail: `scanned for ${TRACKERS.length} known trackers`,
         };
     }
     return {

package/dist/checks/no-tracking.js.map

@@ -1 +1 @@
-{"version":3,"file":"no-tracking.js","sourceRoot":"","sources":["../../src/checks/no-tracking.ts"],"names":[],"mappings":"AAGA,uEAAuE;AACvE,wEAAwE;AACxE,MAAM,SAAS,GAAG;IAChB,kBAAkB;IAClB,MAAM;IACN,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;IACR,WAAW;IACX,SAAS;CACV,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,IAAI,GAA0C,EAAE,CAAC;IAEvD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,eAAe,SAAS,CAAC,MAAM,iBAAiB;SACzD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,gCAAgC,IAAI;aACvD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5C,WAAW,EAAE;YACX,gFAAgF;YAChF,uFAAuF;SACxF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"no-tracking.js","sourceRoot":"","sources":["../../src/checks/no-tracking.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AActD,SAAS,EAAE,CAAC,IAAY;IACtB,6EAA6E;IAC7E,oFAAoF;IACpF,OAAO,IAAI,MAAM,CAAC,sBAAsB,eAAe,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,QAAQ,GAAkB;IAC9B,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,EAAE;IACvF,8EAA8E;IAC9E,wEAAwE;IACxE,sEAAsE;IACtE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE;IACnF,6EAA6E;IAC7E,6EAA6E;IAC7E,WAAW;IACX;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE;YACR,eAAe;YACf,iBAAiB;YACjB,qEAAqE;YACrE,yBAAyB;YACzB,uBAAuB;SACxB;KACF;IACD,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE;IAChD,6EAA6E;IAC7E,8EAA8E;IAC9E,WAAW;IACX;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,aAAa;YACb,cAAc;YACd,0BAA0B;YAC1B,oBAAoB;YACpB,2DAA2D;YAC3D,6BAA6B;SAC9B;KACF;IACD,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE;IAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE;IAClD,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE;CAC/C,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,uEAAuE;AACvE,iEAAiE;AACjE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,IAAI,GAA0C,EAAE,CAAC;IAEvD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,IAAI,uBAAuB,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,kEAAkE;QAClE,uDAAuD;QACvD,6DAA6D;QAC7D,iEAAiE;QACjE,mEAAmE;QACnE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CACnF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACd,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,eAAe,QAAQ,CAAC,MAAM,iBAAiB;SACxD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,gCAAgC,IAAI;aACvD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5C,WAAW,EAAE;YACX,gFAAgF;YAChF,uFAAuF;SACxF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/checks/pwa-meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pwa-meta.d.ts","sourceRoot":"","sources":["../../src/checks/pwa-meta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAoB3E"}
+{"version":3,"file":"pwa-meta.d.ts","sourceRoot":"","sources":["../../src/checks/pwa-meta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAuB3E"}

package/dist/checks/pwa-meta.js

@@ -1,3 +1,4 @@
+import { stripHtmlComments } from '../lib/strip.js';
 const HTML_PATH = 'web/index.html';
 /**
  * For an "Add to Home Screen" install on iOS Safari to launch the app
@@ -15,14 +16,17 @@ const HTML_PATH = 'web/index.html';
  * is specifically the iOS install hint that lives in the HTML head.
  */
 export async function checkPwaMeta(source) {
-    const html = await source.read(HTML_PATH);
-    if (html === null) {
+    const rawHtml = await source.read(HTML_PATH);
+    if (rawHtml === null) {
         return {
             name: 'PWA meta tags',
             status: 'fail',
             detail: `${HTML_PATH} not found`,
         };
     }
+    // Strip HTML comments — `<!-- <meta name="apple-mobile-web-app-capable"> -->`
+    // doesn't tell iOS anything.
+    const html = stripHtmlComments(rawHtml);
     if (/<meta[^>]*\bname\s*=\s*["'](?:apple-)?mobile-web-app-capable["']/i.test(html)) {
         return { name: 'PWA meta tags', status: 'pass', detail: 'iOS install hint present' };
     }

package/dist/checks/pwa-meta.js.map

@@ -1 +1 @@
-{"version":3,"file":"pwa-meta.js","sourceRoot":"","sources":["../../src/checks/pwa-meta.ts"],"names":[],"mappings":"AAGA,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAkB;IACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,SAAS,YAAY;SACjC,CAAC;IACJ,CAAC;IACD,IAAI,mEAAmE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACvF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,+DAA+D;QACvE,WAAW,EAAE;YACX,+GAA+G;SAChH;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"pwa-meta.js","sourceRoot":"","sources":["../../src/checks/pwa-meta.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAkB;IACnD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,SAAS,YAAY;SACjC,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,6BAA6B;IAC7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,mEAAmE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACvF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,+DAA+D;QACvE,WAAW,EAAE;YACX,+GAA+G;SAChH;KACF,CAAC;AACJ,CAAC"}

package/dist/checks/pwa-offline.d.ts

@@ -0,0 +1,40 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * Two things this check enforces:
+ *
+ *   1. Platform mandate — every app on freeappstore.online MUST be an
+ *      installable PWA (service worker registered). Triggered whenever
+ *      a project has a `web/index.html` (the universal signal of a
+ *      Vite app destined for the storefront). Hand-rolled
+ *      `serviceWorker.register` counts; vite-plugin-pwa counts. Anything
+ *      else fails. Non-app repos that don't ship a web entry are
+ *      naturally exempt — they're not subject to compliance anyway.
+ *
+ *   2. Offline-correctness quality — among PWAs that ARE configured,
+ *      the workbox setup actually has to work from the home screen
+ *      while offline. Apps that ship a manifest but mis-configure the
+ *      service worker install fine, then show a blank screen offline.
+ *
+ * Three quality failure modes this catches, all observed in the wild:
+ *
+ *  1. `maximumFileSizeToCacheInBytes` left at the workbox default (2 MB).
+ *     Any bundle chunk above 2 MB is silently dropped from the precache.
+ *     The SW serves index.html from cache, then the JS chunk 404s offline.
+ *
+ *  2. Google Fonts loaded via render-blocking <link> in index.html with
+ *     no `runtimeCaching` rule. Browser HTTP cache works most of the
+ *     time, but standalone-mode launches on iOS bypass it inconsistently
+ *     — fonts fall back to system, and on cold first offline launch the
+ *     <link> can stall paint for hundreds of ms.
+ *
+ *  3. Assets in extensions not covered by `globPatterns`. The default
+ *     list is js/css/html/png/svg/ico/woff2. Any wasm, json, audio, etc.
+ *     shipped under web/public/ isn't precached → offline 404.
+ *
+ * Also catches the inverse: index.html links a manifest but the config
+ * has no service worker at all → "installable" PWA that always needs
+ * network.
+ */
+export declare function checkPwaOffline(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=pwa-offline.d.ts.map

package/dist/checks/pwa-offline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pwa-offline.d.ts","sourceRoot":"","sources":["../../src/checks/pwa-offline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAM/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAwM9E"}

package/dist/checks/pwa-offline.js

@@ -0,0 +1,388 @@
+import { stripCommentsAndStrings, stripHtmlComments } from '../lib/strip.js';
+const VITE_CONFIG = 'web/vite.config.ts';
+const INDEX_HTML = 'web/index.html';
+const PUBLIC_DIR = 'web/public';
+/**
+ * Two things this check enforces:
+ *
+ *   1. Platform mandate — every app on freeappstore.online MUST be an
+ *      installable PWA (service worker registered). Triggered whenever
+ *      a project has a `web/index.html` (the universal signal of a
+ *      Vite app destined for the storefront). Hand-rolled
+ *      `serviceWorker.register` counts; vite-plugin-pwa counts. Anything
+ *      else fails. Non-app repos that don't ship a web entry are
+ *      naturally exempt — they're not subject to compliance anyway.
+ *
+ *   2. Offline-correctness quality — among PWAs that ARE configured,
+ *      the workbox setup actually has to work from the home screen
+ *      while offline. Apps that ship a manifest but mis-configure the
+ *      service worker install fine, then show a blank screen offline.
+ *
+ * Three quality failure modes this catches, all observed in the wild:
+ *
+ *  1. `maximumFileSizeToCacheInBytes` left at the workbox default (2 MB).
+ *     Any bundle chunk above 2 MB is silently dropped from the precache.
+ *     The SW serves index.html from cache, then the JS chunk 404s offline.
+ *
+ *  2. Google Fonts loaded via render-blocking <link> in index.html with
+ *     no `runtimeCaching` rule. Browser HTTP cache works most of the
+ *     time, but standalone-mode launches on iOS bypass it inconsistently
+ *     — fonts fall back to system, and on cold first offline launch the
+ *     <link> can stall paint for hundreds of ms.
+ *
+ *  3. Assets in extensions not covered by `globPatterns`. The default
+ *     list is js/css/html/png/svg/ico/woff2. Any wasm, json, audio, etc.
+ *     shipped under web/public/ isn't precached → offline 404.
+ *
+ * Also catches the inverse: index.html links a manifest but the config
+ * has no service worker at all → "installable" PWA that always needs
+ * network.
+ */
+export async function checkPwaOffline(source) {
+    const config = await source.read(VITE_CONFIG);
+    const html = await source.read(INDEX_HTML);
+    // Strip HTML comments before matching — `<!-- <link rel="manifest"> -->`
+    // is not a live install claim, and a commented-out fonts <link> is
+    // not loading anything.
+    const htmlCode = html === null ? null : stripHtmlComments(html);
+    const linksManifest = htmlCode !== null && /<link[^>]+rel\s*=\s*["']manifest["']/i.test(htmlCode);
+    const linksGoogleFonts = htmlCode !== null && /fonts\.(googleapis|gstatic)\.com/i.test(htmlCode);
+    // Strip comments and string-literal contents before any regex matching
+    // against the config text — otherwise `VitePWA(` in a comment or
+    // `"workbox: {"` in a string is treated as real code (false positive).
+    const configCode = config === null ? null : stripCommentsAndStrings(config);
+    const hasVitePwa = configCode !== null && /\bVitePWA\s*\(/.test(configCode);
+    // `injectManifest` strategy means the developer writes their own SW
+    // file (typically web/src/sw.ts). The `workbox` field doesn't apply
+    // — `injectManifest` config does — so the rest of our checks are
+    // inapplicable. Trust the dev's manual SW. (Matched against `config`
+    // — not `configCode` — because the string-stripping would erase
+    // `"injectManifest"` from the latter.)
+    const usesInjectManifest = config !== null && /strategies\s*:\s*["']injectManifest["']/.test(config);
+    // Hand-rolled SW registration (e.g. an inline <script> calling
+    // navigator.serviceWorker.register) is a legitimate alternative to
+    // vite-plugin-pwa. If it exists, we trust the dev to manage their own
+    // precache and limit ourselves to the install-claim check.
+    const hasManualSw = (html !== null && /serviceWorker\.register/.test(html)) ||
+        (await sourceHasSwRegistration(source));
+    const hasServiceWorker = hasVitePwa || hasManualSw;
+    // Platform mandate (freeappstore.online): every app must be an
+    // installable PWA. "Installable" at the static-check level means a
+    // service worker registers — VitePWA (which also injects the
+    // manifest link), an injectManifest setup, or hand-rolled register.
+    // Triggered by the presence of `web/index.html` (the universal signal
+    // of a Vite-built app). Repos that don't ship a web entry — admin
+    // tools, backends, agents — are naturally exempt; compliance isn't
+    // run against them anyway.
+    if (html !== null && !hasServiceWorker) {
+        return {
+            name: 'PWA offline correctness',
+            status: 'fail',
+            detail: 'platform mandate: every app on freeappstore.online must be an installable PWA, but no service worker is registered',
+            suggestions: [
+                'Add `vite-plugin-pwa` to web/devDependencies, then wire `VitePWA({...})` into vite.config.ts plugins. Mirror the canonical config used in the canonical scaffolds, etc.',
+                'Or, if you prefer to manage your own SW, register it from web/src/main.tsx with `navigator.serviceWorker.register("/sw.js")` and ship the SW yourself.',
+            ],
+        };
+    }
+    // "Installable" claim with no service worker — the worst failure mode.
+    // The PWA installs from the manifest but launches into a network fetch
+    // for `/` that 404s offline → blank screen on home screen.
+    if (linksManifest && !hasServiceWorker) {
+        return {
+            name: 'PWA offline correctness',
+            status: 'fail',
+            detail: 'index.html links a manifest but no service worker is registered → installable PWA that cannot load offline from home screen',
+            suggestions: [
+                'Install vite-plugin-pwa and add VitePWA({...}) to vite.config.ts plugins.',
+                'Or register a service worker manually (`navigator.serviceWorker.register("/sw.js")`).',
+                'Or drop the <link rel="manifest"> from index.html if this is not meant to be installable.',
+            ],
+        };
+    }
+    // No vite.config.ts at all — can't analyze further. Either not a Vite
+    // project, or PWA wiring lives elsewhere; either way, nothing for us
+    // to assert about workbox.
+    if (config === null) {
+        return {
+            name: 'PWA offline correctness',
+            status: 'pass',
+            detail: hasManualSw
+                ? 'no vite.config.ts; hand-rolled service worker present'
+                : 'no web/vite.config.ts (not a Vite project)',
+        };
+    }
+    if (!hasVitePwa) {
+        return {
+            name: 'PWA offline correctness',
+            status: 'pass',
+            detail: hasManualSw
+                ? 'hand-rolled service worker; no install claim to verify'
+                : 'not a PWA (no VitePWA, no manifest link)',
+        };
+    }
+    // injectManifest: developer hand-writes the SW. Their `workbox` config
+    // (if any) is irrelevant; the analyzable surface lives in their SW
+    // source which we don't parse.
+    if (usesInjectManifest) {
+        return {
+            name: 'PWA offline correctness',
+            status: 'pass',
+            detail: 'VitePWA with injectManifest strategy — SW managed in src',
+        };
+    }
+    // Extract the workbox block. Match `workbox: { ... }` allowing nested
+    // braces. We pass `configCode` (comments/strings stripped) so the
+    // matcher can't false-positive on `"workbox: {"` inside a string, but
+    // we slice out of `config` so the returned substring still has its
+    // real string contents — otherwise downstream `globPatterns:
+    // ["..."]` regex would fail.
+    const workbox = extractBalancedBlock(config, configCode, /workbox\s*:\s*\{/);
+    if (workbox === null) {
+        return {
+            name: 'PWA offline correctness',
+            status: 'warn',
+            detail: 'VitePWA present but no workbox block parsed — defaults may leave assets unprecached',
+            suggestions: [
+                'Add a `workbox: { ... }` block with globPatterns, maximumFileSizeToCacheInBytes, and runtimeCaching.',
+            ],
+        };
+    }
+    const issues = [];
+    const suggestions = [];
+    // Issue 1: bundle-size cap. Default is 2 MiB; many real bundles exceed it.
+    // Also catch the inverse footgun: a value *lower* than the default
+    // (e.g. someone copy-pasted `1024` thinking it was MB), which silently
+    // makes precache worse.
+    const capValue = parseBundleCap(workbox);
+    const DEFAULT_CAP = 2 * 1024 * 1024;
+    if (capValue === null) {
+        issues.push('no maximumFileSizeToCacheInBytes (defaults to 2 MB — bigger chunks silently skipped from precache)');
+        suggestions.push('Set `maximumFileSizeToCacheInBytes: 10 * 1024 * 1024` so the main bundle is precached.');
+    }
+    else if (capValue < DEFAULT_CAP) {
+        issues.push(`maximumFileSizeToCacheInBytes is ${capValue} bytes — smaller than the workbox default (2 MB); any chunk above this is dropped from precache`);
+        suggestions.push('Raise to at least `10 * 1024 * 1024` (10 MB) so real bundles fit.');
+    }
+    // `VitePWA({ disable: true })` literal turns the plugin off in all
+    // environments, so the manifest link is broken. Only flag the
+    // unconditional literal — `disable: process.env.NODE_ENV !==
+    // "production"` is a common, correct dev-only pattern that we can't
+    // evaluate statically.
+    if (configCode && /\bdisable\s*:\s*true\b/.test(configCode)) {
+        issues.push('VitePWA({ disable: true }) literal — service worker will never register');
+        suggestions.push('Drop `disable: true`, or gate it behind a non-production check.');
+    }
+    // Issue 2: Google Fonts with no runtime caching.
+    if (linksGoogleFonts) {
+        const hasGoogleApisRule = /fonts\\?\.googleapis\\?\.com/.test(workbox);
+        const hasGstaticRule = /fonts\\?\.gstatic\\?\.com/.test(workbox);
+        // Workbox also lets you target by `request.destination` — a rule
+        // like `({request}) => request.destination === "font"` catches
+        // every font request including Google Fonts. Accept that as
+        // covering both endpoints rather than emitting a false warn.
+        const hasDestinationFontRule = /\bdestination\b/.test(workbox) && /["']font["']/.test(workbox);
+        const fontsCovered = (hasGoogleApisRule && hasGstaticRule) || hasDestinationFontRule;
+        if (!fontsCovered) {
+            issues.push('index.html loads Google Fonts but workbox has no runtimeCaching for fonts.googleapis.com / fonts.gstatic.com');
+            suggestions.push('Add runtimeCaching CacheFirst rules for /^https:\\/\\/fonts\\.googleapis\\.com/ and /^https:\\/\\/fonts\\.gstatic\\.com/.');
+        }
+    }
+    // Issue 3: assets in public/ in extensions not covered by globPatterns.
+    // Workbox supports multiple patterns in the array; we union the
+    // extensions across all of them, otherwise a config like
+    // `globPatterns: ["**/*.{js,css}", "**/*.wasm"]` would look like it
+    // omits wasm.
+    const covered = extractCoveredExtensions(workbox);
+    if (covered !== null && source.listDir) {
+        const uncovered = await findUncoveredAssets(source, PUBLIC_DIR, covered);
+        if (uncovered.length > 0) {
+            const sample = uncovered.slice(0, 3).join(', ');
+            issues.push(`web/public/ has files in extensions not in globPatterns: ${sample}${uncovered.length > 3 ? ` (+${uncovered.length - 3} more)` : ''}`);
+            const newExts = [...new Set([...covered, ...uncovered.map(extOf)])].filter(Boolean).join(',');
+            suggestions.push(`Extend globPatterns to cover them, e.g. \`**/*.{${newExts}}\`.`);
+        }
+    }
+    if (issues.length === 0) {
+        return {
+            name: 'PWA offline correctness',
+            status: 'pass',
+            detail: 'workbox precaches everything, fonts cached, bundle cap raised',
+        };
+    }
+    return {
+        name: 'PWA offline correctness',
+        status: 'warn',
+        detail: issues.join('; '),
+        suggestions,
+    };
+}
+/**
+ * Parse the numeric value assigned to `maximumFileSizeToCacheInBytes`.
+ * Handles simple integer literals (`10485760`), underscore separators
+ * (`10_485_760`), and `A * B * C` arithmetic chains that workbox docs
+ * recommend (`10 * 1024 * 1024`). Returns null if the key isn't present
+ * or the value isn't a recognisable arithmetic literal.
+ */
+function parseBundleCap(workbox) {
+    const m = workbox.match(/maximumFileSizeToCacheInBytes\s*:\s*([^,\n}]+)/);
+    if (!m)
+        return null;
+    const expr = (m[1] ?? '').trim().replace(/_/g, '');
+    // Strict: only digits, *, whitespace. Anything else (variable
+    // reference, function call) → can't evaluate, treat as unknown.
+    if (!/^[\d*\s]+$/.test(expr))
+        return null;
+    const parts = expr.split('*').map((s) => Number(s.trim()));
+    if (parts.some((n) => !Number.isFinite(n) || n < 0))
+        return null;
+    return parts.reduce((a, b) => a * b, 1);
+}
+/**
+ * Extracts the `{ ... }` body that follows the first match of `opener`,
+ * walking the source character-by-character to balance braces.
+ *
+ * Two source views are required:
+ *   - `src` — the real source, used for the returned substring.
+ *   - `code` — the stripped view (comments/strings blanked) with the
+ *     same character offsets as `src`. Used for matching the opener and
+ *     counting braces, so that `}` in a string doesn't close the block.
+ *
+ * Regex alone can't handle this because workbox blocks contain nested
+ * objects (`options: { expiration: {...} }`) and regex doesn't balance.
+ */
+function extractBalancedBlock(src, code, opener) {
+    const m = code.match(opener);
+    if (!m || m.index === undefined)
+        return null;
+    let i = m.index + m[0].length; // start just after the `{`
+    let depth = 1;
+    const start = i;
+    while (i < code.length) {
+        const c = code[i];
+        if (c === '{')
+            depth++;
+        else if (c === '}') {
+            depth--;
+            if (depth === 0)
+                return src.slice(start, i);
+        }
+        i++;
+    }
+    return null;
+}
+/**
+ * Parses every string literal in the workbox block, finds those that
+ * look like glob patterns with a brace-expansion (e.g.
+ * `**\/*.{js,css,wasm}`), and unions their extensions. Returns null if
+ * no `globPatterns:` key is present at all.
+ *
+ * Bracket-balances the array body on a string-stripped view so that
+ * glob bracket expressions like `**\/[abc]/*` don't truncate the array
+ * — that `]` lives inside a string literal and isn't the array's close.
+ */
+function extractCoveredExtensions(workbox) {
+    const workboxCode = stripCommentsAndStrings(workbox);
+    const keyMatch = workboxCode.match(/globPatterns\s*:\s*\[/);
+    if (!keyMatch || keyMatch.index === undefined)
+        return null;
+    // Walk the stripped view to find the matching `]` for this `[`.
+    let i = keyMatch.index + keyMatch[0].length;
+    const start = i;
+    let depth = 1;
+    while (i < workboxCode.length && depth > 0) {
+        const c = workboxCode[i];
+        if (c === '[')
+            depth++;
+        else if (c === ']')
+            depth--;
+        if (depth === 0)
+            break;
+        i++;
+    }
+    if (depth !== 0)
+        return null;
+    // Pull the real (un-stripped) array body so we still see the
+    // quoted patterns.
+    const arrayBody = workbox.slice(start, i);
+    const covered = new Set();
+    for (const m of arrayBody.matchAll(/["']([^"']+)["']/g)) {
+        const pattern = m[1] ?? '';
+        const brace = pattern.match(/\{([^}]+)\}/);
+        if (brace) {
+            for (const ext of brace[1].split(',')) {
+                covered.add(ext.trim().toLowerCase());
+            }
+        }
+        else {
+            // Bare pattern like "**/*.wasm" — extract the extension after the
+            // last `.` (or the entire pattern if it's literally `**/*.wasm`).
+            const ext = pattern.match(/\.([a-zA-Z0-9]+)$/);
+            if (ext)
+                covered.add(ext[1].toLowerCase());
+        }
+    }
+    return covered;
+}
+function extOf(filename) {
+    const dot = filename.lastIndexOf('.');
+    return dot === -1 ? '' : filename.slice(dot + 1).toLowerCase();
+}
+/**
+ * Walks web/public/ (one level deep is enough — workbox precache
+ * resolves the pattern recursively, but most public assets sit at the
+ * top level or one level down), returns extensions not in `covered`.
+ * Ignores the manifest icons and favicons we already know are listed.
+ */
+async function findUncoveredAssets(source, dir, covered) {
+    if (!source.listDir)
+        return [];
+    const seen = new Set();
+    await walkPublic(source, dir, seen, covered, 0);
+    return [...seen].sort();
+}
+/**
+ * Best-effort scan of web/src/ entry points for a manual
+ * `serviceWorker.register` call. Doesn't recurse into the whole src
+ * tree — we only care about top-level entry files (main, index,
+ * registerSW) where this conventionally lives.
+ */
+async function sourceHasSwRegistration(source) {
+    const candidates = [
+        'web/src/main.tsx',
+        'web/src/main.ts',
+        'web/src/index.tsx',
+        'web/src/index.ts',
+        'web/src/registerSW.ts',
+        'web/src/registerSW.js',
+    ];
+    for (const p of candidates) {
+        const text = await source.read(p);
+        if (text !== null && /serviceWorker\.register/.test(text))
+            return true;
+    }
+    return false;
+}
+async function walkPublic(source, dir, seen, covered, depth) {
+    if (depth > 3)
+        return;
+    if (!source.listDir)
+        return;
+    const entries = await source.listDir(dir);
+    if (entries === null)
+        return;
+    for (const name of entries) {
+        const full = `${dir}/${name}`;
+        if (name.includes('.')) {
+            const ext = extOf(name);
+            if (!ext || covered.has(ext))
+                continue;
+            seen.add(name);
+        }
+        else {
+            // Probably a subdirectory — recurse. listDir returns null if it's actually a file.
+            await walkPublic(source, full, seen, covered, depth + 1);
+        }
+    }
+}
+//# sourceMappingURL=pwa-offline.js.map

package/dist/checks/pwa-offline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pwa-offline.js","sourceRoot":"","sources":["../../src/checks/pwa-offline.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAG7E,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE3C,yEAAyE;IACzE,mEAAmE;IACnE,wBAAwB;IACxB,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,aAAa,GACjB,QAAQ,KAAK,IAAI,IAAI,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9E,MAAM,gBAAgB,GACpB,QAAQ,KAAK,IAAI,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE1E,uEAAuE;IACvE,iEAAiE;IACjE,uEAAuE;IACvE,MAAM,UAAU,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,UAAU,KAAK,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5E,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,qEAAqE;IACrE,gEAAgE;IAChE,uCAAuC;IACvC,MAAM,kBAAkB,GACtB,MAAM,KAAK,IAAI,IAAI,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5E,+DAA+D;IAC/D,mEAAmE;IACnE,sEAAsE;IACtE,2DAA2D;IAC3D,MAAM,WAAW,GACf,CAAC,IAAI,KAAK,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GAAG,UAAU,IAAI,WAAW,CAAC;IAEnD,+DAA+D;IAC/D,mEAAmE;IACnE,6DAA6D;IAC7D,oEAAoE;IACpE,sEAAsE;IACtE,kEAAkE;IAClE,mEAAmE;IACnE,2BAA2B;IAC3B,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oHAAoH;YAC5H,WAAW,EAAE;gBACX,yKAAyK;gBACzK,wJAAwJ;aACzJ;SACF,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,aAAa,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6HAA6H;YACrI,WAAW,EAAE;gBACX,2EAA2E;gBAC3E,uFAAuF;gBACvF,2FAA2F;aAC5F;SACF,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,qEAAqE;IACrE,2BAA2B;IAC3B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW;gBACjB,CAAC,CAAC,uDAAuD;gBACzD,CAAC,CAAC,4CAA4C;SACjD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW;gBACjB,CAAC,CAAC,wDAAwD;gBAC1D,CAAC,CAAC,0CAA0C;SAC/C,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,mEAAmE;IACnE,+BAA+B;IAC/B,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,0DAA0D;SACnE,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,kEAAkE;IAClE,sEAAsE;IACtE,mEAAmE;IACnE,6DAA6D;IAC7D,6BAA6B;IAC7B,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qFAAqF;YAC7F,WAAW,EAAE;gBACX,sGAAsG;aACvG;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAuE;IACvE,wBAAwB;IACxB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACpC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;QAClH,WAAW,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;IAC7G,CAAC;SAAM,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,oCAAoC,QAAQ,iGAAiG,CAAC,CAAC;QAC3J,WAAW,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACxF,CAAC;IAED,mEAAmE;IACnE,8DAA8D;IAC9D,6DAA6D;IAC7D,oEAAoE;IACpE,uBAAuB;IACvB,IAAI,UAAU,IAAI,wBAAwB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACvF,WAAW,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IACtF,CAAC;IAED,iDAAiD;IACjD,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,iEAAiE;QACjE,+DAA+D;QAC/D,4DAA4D;QAC5D,6DAA6D;QAC7D,MAAM,sBAAsB,GAC1B,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,YAAY,GAChB,CAAC,iBAAiB,IAAI,cAAc,CAAC,IAAI,sBAAsB,CAAC;QAClE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,8GAA8G,CAAC,CAAC;YAC5H,WAAW,CAAC,IAAI,CACd,2HAA2H,CAC5H,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,gEAAgE;IAChE,yDAAyD;IACzD,oEAAoE;IACpE,cAAc;IACd,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,4DAA4D,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnJ,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9F,WAAW,CAAC,IAAI,CAAC,mDAAmD,OAAO,MAAM,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,+DAA+D;SACxE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1E,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnD,8DAA8D;IAC9D,gEAAgE;IAChE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAC3B,GAAW,EACX,IAAY,EACZ,MAAc;IAEd,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,2BAA2B;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3D,gEAAgE;IAChE,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aAClB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,CAAC;YAAE,MAAM;QACvB,CAAC,EAAE,CAAC;IACN,CAAC;IACD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,6DAA6D;IAC7D,mBAAmB;IACnB,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC/C,IAAI,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,QAAgB;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,MAAkB,EAClB,GAAW,EACX,OAAoB;IAEpB,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,uBAAuB,CAAC,MAAkB;IACvD,MAAM,UAAU,GAAG;QACjB,kBAAkB;QAClB,iBAAiB;QACjB,mBAAmB;QACnB,kBAAkB;QAClB,uBAAuB;QACvB,uBAAuB;KACxB,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAkB,EAClB,GAAW,EACX,IAAiB,EACjB,OAAoB,EACpB,KAAa;IAEb,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO;IACtB,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO;IAC5B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACvC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,mFAAmF;YACnF,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/checks/store-link.js

@@ -19,7 +19,7 @@ export async function checkStoreLink(source) {
         if (!path.startsWith('web/src/'))
             continue;
         const content = await source.read(path);
-        if (content && content.includes(domain)) {
+        if (content?.includes(domain)) {
             return { name: 'Store link', status: 'pass', detail: `${domain} referenced in ${path}` };
         }
     }