@freegamestore/compliance 0.7.0 → 0.8.0

package/dist/checks/no-external-fetch.js

@@ -0,0 +1,102 @@
+import { stripCommentsOnly } from '../lib/strip.js';
+/**
+ * Flags fetch() and XMLHttpRequest calls to external domains in game
+ * source files. Games on the free tier must be self-contained — external
+ * API calls violate both the privacy mandate (data leaves the platform)
+ * and the offline/PWA mandate (game breaks without network).
+ *
+ * Allowed origins:
+ *   - Relative URLs (`fetch('/api/...')`)
+ *   - freegamestore.online (and subdomains)
+ *   - freeappstore.online (and subdomains)
+ *   - localhost / 127.0.0.1 (dev)
+ *
+ * Scans .ts and .tsx files under web/src/. Strips comments before
+ * scanning so commented-out fetches don't trigger false positives.
+ * String contents are preserved — the URLs we're looking for live
+ * inside string literals.
+ *
+ * ERROR level — external fetches are a hard compliance gate.
+ */
+const SCAN_EXTS = new Set(['.ts', '.tsx']);
+const ALLOWED_DOMAINS = [
+    'freegamestore.online',
+    'freeappstore.online',
+    'localhost',
+    '127.0.0.1',
+];
+/** Check if a URL string points to an allowed domain. */
+function isAllowedUrl(url) {
+    let hostname;
+    try {
+        hostname = new URL(url).hostname.toLowerCase();
+    }
+    catch {
+        return true; // can't parse — not a real URL, skip
+    }
+    for (const allowed of ALLOWED_DOMAINS) {
+        if (hostname === allowed || hostname.endsWith(`.${allowed}`))
+            return true;
+    }
+    return false;
+}
+function extOf(path) {
+    const dot = path.lastIndexOf('.');
+    const slash = path.lastIndexOf('/');
+    return dot > slash ? path.slice(dot).toLowerCase() : '';
+}
+export async function checkNoExternalFetch(source) {
+    const hits = [];
+    // Match fetch('https://...'), fetch("https://..."), fetch(`https://...`)
+    const fetchRe = /\bfetch\s*\(\s*['"`](https?:\/\/[^'"`\s)]+)/g;
+    // Match XMLHttpRequest .open() with external URLs
+    const xhrOpenRe = /\.open\s*\(\s*['"][A-Z]+['"]\s*,\s*['"`](https?:\/\/[^'"`\s)]+)/g;
+    // Match new XMLHttpRequest (just flag the presence together with open)
+    const xhrNewRe = /\bnew\s+XMLHttpRequest\b/;
+    for await (const path of source.list()) {
+        if (!path.startsWith('web/src/'))
+            continue;
+        if (!SCAN_EXTS.has(extOf(path)))
+            continue;
+        const raw = await source.read(path);
+        if (!raw)
+            continue;
+        // Strip comments but keep strings — URLs live in strings.
+        const content = stripCommentsOnly(raw);
+        for (const match of content.matchAll(fetchRe)) {
+            const url = match[1];
+            if (!isAllowedUrl(url)) {
+                hits.push({ file: path, url: url.length > 60 ? `${url.slice(0, 57)}...` : url });
+            }
+        }
+        // Only check XHR .open() calls if the file also creates an XMLHttpRequest.
+        if (xhrNewRe.test(content)) {
+            for (const match of content.matchAll(xhrOpenRe)) {
+                const url = match[1];
+                if (!isAllowedUrl(url)) {
+                    hits.push({ file: path, url: url.length > 60 ? `${url.slice(0, 57)}...` : url });
+                }
+            }
+        }
+    }
+    if (hits.length === 0) {
+        return {
+            name: 'No external fetch',
+            status: 'pass',
+            detail: 'no fetch() or XMLHttpRequest calls to external domains in web/src/',
+        };
+    }
+    return {
+        name: 'No external fetch',
+        status: 'fail',
+        detail: `${hits.length} external fetch(es): ${hits
+            .slice(0, 3)
+            .map((h) => `${h.file} → ${h.url}`)
+            .join('; ')}${hits.length > 3 ? '...' : ''}`,
+        suggestions: [
+            'Remove external API calls. Games must be self-contained and work offline.',
+            'If the game needs server data, route it through the platform API (api.freegamestore.online).',
+        ],
+    };
+}
+//# sourceMappingURL=no-external-fetch.js.map

package/dist/checks/no-external-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-external-fetch.js","sourceRoot":"","sources":["../../src/checks/no-external-fetch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3C,MAAM,eAAe,GAAG;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,WAAW;IACX,WAAW;CACZ,CAAC;AAEF,yDAAyD;AACzD,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,qCAAqC;IACpD,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAkB;IAC3D,MAAM,IAAI,GAAoC,EAAE,CAAC;IAEjD,yEAAyE;IACzE,MAAM,OAAO,GAAG,8CAA8C,CAAC;IAE/D,kDAAkD;IAClD,MAAM,SAAS,GAAG,kEAAkE,CAAC;IAErF,uEAAuE;IACvE,MAAM,QAAQ,GAAG,0BAA0B,CAAC;IAE5C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAE1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,0DAA0D;QAC1D,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACtB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACtB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oEAAoE;SAC7E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,wBAAwB,IAAI;aAC/C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;aAClC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,WAAW,EAAE;YACX,2EAA2E;YAC3E,8FAA8F;SAC/F;KACF,CAAC;AACJ,CAAC"}

package/dist/checks/no-external-scripts.d.ts

@@ -0,0 +1,16 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * External scripts introduce supply-chain risk and can exfiltrate player
+ * data. Only platform-approved domains are allowed in `<script src>` tags
+ * inside `web/index.html`.
+ *
+ * Allowed: fonts.googleapis.com, fonts.gstatic.com,
+ * static.cloudflareinsights.com, freegamestore.online.
+ * Everything else fails.
+ *
+ * HTML comments are stripped first so `<!-- <script src="..."> -->` blocks
+ * don't trigger false positives.
+ */
+export declare function checkNoExternalScripts(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=no-external-scripts.d.ts.map

package/dist/checks/no-external-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-external-scripts.d.ts","sourceRoot":"","sources":["../../src/checks/no-external-scripts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa/C;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAqDrF"}

package/dist/checks/no-external-scripts.js

@@ -0,0 +1,91 @@
+import { stripHtmlComments } from '../lib/strip.js';
+const INDEX_HTML = 'web/index.html';
+// Domains allowed in <script src="..."> tags. These are platform-owned
+// or universally trusted CDNs that the storefront relies on.
+const ALLOWED_DOMAINS = new Set([
+    'fonts.googleapis.com',
+    'fonts.gstatic.com',
+    'static.cloudflareinsights.com',
+    'freegamestore.online',
+]);
+/**
+ * External scripts introduce supply-chain risk and can exfiltrate player
+ * data. Only platform-approved domains are allowed in `<script src>` tags
+ * inside `web/index.html`.
+ *
+ * Allowed: fonts.googleapis.com, fonts.gstatic.com,
+ * static.cloudflareinsights.com, freegamestore.online.
+ * Everything else fails.
+ *
+ * HTML comments are stripped first so `<!-- <script src="..."> -->` blocks
+ * don't trigger false positives.
+ */
+export async function checkNoExternalScripts(source) {
+    const raw = await source.read(INDEX_HTML);
+    if (raw === null) {
+        return {
+            name: 'No external scripts',
+            status: 'pass',
+            detail: 'no web/index.html (not a web project)',
+        };
+    }
+    const html = stripHtmlComments(raw);
+    // Match <script ... src="..." ...> tags. The src value can use single
+    // or double quotes.
+    const scriptSrcRe = /<script\b[^>]*\bsrc\s*=\s*["']([^"']+)["'][^>]*>/gi;
+    const violations = [];
+    for (const match of html.matchAll(scriptSrcRe)) {
+        const src = match[1] ?? '';
+        // Relative or protocol-relative paths that don't point to an external
+        // domain are fine (local bundles, Vite-injected scripts, etc.).
+        if (!src.startsWith('http://') && !src.startsWith('https://') && !src.startsWith('//')) {
+            continue;
+        }
+        // Extract the hostname from the URL.
+        const hostname = extractHostname(src);
+        if (hostname === null)
+            continue;
+        // Check if the hostname (or any parent domain) is in the allow list.
+        if (isAllowed(hostname))
+            continue;
+        violations.push(src.length > 80 ? `${src.slice(0, 77)}...` : src);
+    }
+    if (violations.length === 0) {
+        return {
+            name: 'No external scripts',
+            status: 'pass',
+            detail: 'no disallowed external script sources in index.html',
+        };
+    }
+    return {
+        name: 'No external scripts',
+        status: 'fail',
+        detail: `${violations.length} external script(s) from disallowed domains: ${violations.slice(0, 3).join(', ')}${violations.length > 3 ? '...' : ''}`,
+        suggestions: [
+            'Remove external <script src="..."> tags or self-host the scripts under web/public/.',
+            `Allowed domains: ${[...ALLOWED_DOMAINS].join(', ')}.`,
+        ],
+    };
+}
+function extractHostname(url) {
+    // Handle protocol-relative URLs (//example.com/...).
+    const cleaned = url.startsWith('//') ? `https:${url}` : url;
+    try {
+        return new URL(cleaned).hostname.toLowerCase();
+    }
+    catch {
+        return null;
+    }
+}
+/** Check if hostname or any parent domain matches the allow list. */
+function isAllowed(hostname) {
+    if (ALLOWED_DOMAINS.has(hostname))
+        return true;
+    // Allow subdomains of allowed domains (e.g. api.freegamestore.online).
+    for (const allowed of ALLOWED_DOMAINS) {
+        if (hostname.endsWith(`.${allowed}`))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=no-external-scripts.js.map

package/dist/checks/no-external-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-external-scripts.js","sourceRoot":"","sources":["../../src/checks/no-external-scripts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,uEAAuE;AACvE,6DAA6D;AAC7D,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,sBAAsB;IACtB,mBAAmB;IACnB,+BAA+B;IAC/B,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAkB;IAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,uCAAuC;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAEpC,sEAAsE;IACtE,oBAAoB;IACpB,MAAM,WAAW,GAAG,oDAAoD,CAAC;IACzE,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE3B,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvF,SAAS;QACX,CAAC;QAED,qCAAqC;QACrC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAEhC,qEAAqE;QACrE,IAAI,SAAS,CAAC,QAAQ,CAAC;YAAE,SAAS;QAElC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qDAAqD;SAC9D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,gDAAgD,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACpJ,WAAW,EAAE;YACX,qFAAqF;YACrF,oBAAoB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACvD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,qDAAqD;IACrD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,uEAAuE;IACvE,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/checks/no-hardcoded-colors.d.ts

@@ -0,0 +1,4 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+export declare function checkNoHardcodedColors(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=no-hardcoded-colors.d.ts.map

package/dist/checks/no-hardcoded-colors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-colors.d.ts","sourceRoot":"","sources":["../../src/checks/no-hardcoded-colors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAqC/C,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAgDrF"}

package/dist/checks/no-hardcoded-colors.js

@@ -0,0 +1,79 @@
+import { stripCommentsOnly } from '../lib/strip.js';
+/**
+ * Flags hardcoded hex color values in TSX files (React components).
+ * Games should use CSS custom properties (`var(--accent)`, `var(--ink)`,
+ * etc.) for UI chrome so the storefront can theme consistently and dark
+ * mode works out of the box.
+ *
+ * Only scans .tsx files — plain .ts files are likely canvas/game-engine
+ * logic where hardcoded colors for sprites, particles, and effects are
+ * expected and correct.
+ *
+ * Threshold: warn if total hex colors across all TSX files > 10.
+ *
+ * Strips comments and strings that are CSS variable definitions
+ * (like `--accent: #10b981`) before counting. The remaining hex values
+ * are likely inline styles or className-adjacent color specs that should
+ * use design tokens.
+ *
+ * WARN level — not a hard gate, but a strong signal the game isn't
+ * leveraging the design system.
+ */
+const THRESHOLD = 10;
+/** Match 6-digit or 3-digit hex colors: #rrggbb or #rgb. */
+const HEX_COLOR_RE = /#(?:[0-9a-fA-F]{6}|[0-9a-fA-F]{3})\b/g;
+/** Lines that define CSS custom properties — these are fine. */
+const CSS_VAR_DEF_RE = /--[\w-]+\s*:\s*#/;
+function extOf(path) {
+    const dot = path.lastIndexOf('.');
+    const slash = path.lastIndexOf('/');
+    return dot > slash ? path.slice(dot).toLowerCase() : '';
+}
+export async function checkNoHardcodedColors(source) {
+    let totalCount = 0;
+    const hitFiles = [];
+    for await (const path of source.list()) {
+        if (!path.startsWith('web/src/'))
+            continue;
+        if (extOf(path) !== '.tsx')
+            continue;
+        const raw = await source.read(path);
+        if (!raw)
+            continue;
+        // Strip comments but keep strings — hex colors in inline styles
+        // like style={{ color: '#ff0000' }} are the thing we're checking.
+        const stripped = stripCommentsOnly(raw);
+        // Count hex colors line by line, skipping CSS variable definitions.
+        let fileCount = 0;
+        for (const line of stripped.split('\n')) {
+            if (CSS_VAR_DEF_RE.test(line))
+                continue;
+            const matches = line.match(HEX_COLOR_RE);
+            if (matches)
+                fileCount += matches.length;
+        }
+        if (fileCount > 0) {
+            totalCount += fileCount;
+            hitFiles.push(path);
+        }
+    }
+    if (totalCount <= THRESHOLD) {
+        return {
+            name: 'No hardcoded colors',
+            status: 'pass',
+            detail: `${totalCount} hex color(s) in TSX files (threshold: ${THRESHOLD})`,
+        };
+    }
+    return {
+        name: 'No hardcoded colors',
+        status: 'warn',
+        detail: `${totalCount} hex color(s) across ${hitFiles.length} TSX file(s): ${hitFiles
+            .slice(0, 5)
+            .join(', ')}${hitFiles.length > 5 ? '...' : ''}`,
+        suggestions: [
+            'Replace hardcoded hex colors with CSS custom properties: var(--accent), var(--ink), var(--surface), etc.',
+            'Canvas drawing code belongs in .ts files (not .tsx) where hardcoded colors are expected.',
+        ],
+    };
+}
+//# sourceMappingURL=no-hardcoded-colors.js.map

package/dist/checks/no-hardcoded-colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-hardcoded-colors.js","sourceRoot":"","sources":["../../src/checks/no-hardcoded-colors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGpD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,4DAA4D;AAC5D,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAE7D,gEAAgE;AAChE,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAkB;IAC7D,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM;YAAE,SAAS;QAErC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,gEAAgE;QAChE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAExC,oEAAoE;QACpE,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzC,IAAI,OAAO;gBAAE,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;QAC3C,CAAC;QAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,UAAU,IAAI,SAAS,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,UAAU,0CAA0C,SAAS,GAAG;SAC5E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,UAAU,wBAAwB,QAAQ,CAAC,MAAM,iBAAiB,QAAQ;aAClF,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAClD,WAAW,EAAE;YACX,0GAA0G;YAC1G,0FAA0F;SAC3F;KACF,CAAC;AACJ,CAAC"}

package/dist/checks/no-payment-sdk.d.ts

@@ -0,0 +1,13 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * Games on freegamestore.online must be free forever — no payment SDKs
+ * allowed. Scans source files for imports/usage of Stripe, PayPal,
+ * Braintree, Square, Paddle, LemonSqueezy, and RevenueCat.
+ *
+ * Uses comment-stripping (preserving string contents) so that real
+ * `import from "stripe"` is caught but a `// TODO: evaluate stripe`
+ * comment isn't.
+ */
+export declare function checkNoPaymentSdk(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=no-payment-sdk.d.ts.map

package/dist/checks/no-payment-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-payment-sdk.d.ts","sourceRoot":"","sources":["../../src/checks/no-payment-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA+E/C;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAqChF"}

package/dist/checks/no-payment-sdk.js

@@ -0,0 +1,118 @@
+import { stripCommentsForExt } from '../lib/strip.js';
+const PAYMENT_SDKS = [
+    {
+        name: 'stripe',
+        patterns: [
+            /@stripe\//i,
+            /stripe\.com/i,
+            /from\s+['"]stripe['"]/i,
+            /require\(['"]stripe['"]\)/i,
+            /\bStripe\s*\(/i,
+            /\bloadStripe\b/i,
+        ],
+    },
+    {
+        name: 'paypal',
+        patterns: [
+            /@paypal\//i,
+            /paypal\.com\/sdk/i,
+            /paypalobjects\.com/i,
+            /from\s+['"]@paypal\//i,
+        ],
+    },
+    {
+        name: 'braintree',
+        patterns: [
+            /braintree-web/i,
+            /braintreegateway/i,
+            /from\s+['"]braintree/i,
+            /require\(['"]braintree/i,
+        ],
+    },
+    {
+        name: 'square',
+        patterns: [
+            /@square\//i,
+            /squareup\.com/i,
+            /from\s+['"]square['"]/i,
+            /require\(['"]square['"]\)/i,
+        ],
+    },
+    {
+        name: 'paddle',
+        patterns: [
+            /@paddle\//i,
+            /paddle\.com/i,
+            /from\s+['"]@paddle\//i,
+            /\bPaddle\s*\.\s*(?:Setup|Checkout|Environment)\b/i,
+        ],
+    },
+    {
+        name: 'lemonsqueezy',
+        patterns: [
+            /@lemonsqueezy\//i,
+            /lemonsqueezy\.com/i,
+            /from\s+['"]@lemonsqueezy\//i,
+        ],
+    },
+    {
+        name: 'revenuecat',
+        patterns: [
+            /@revenuecat\//i,
+            /revenuecat\.com/i,
+            /from\s+['"]@revenuecat\//i,
+            /\bPurchases\s*\.\s*configure\b/i,
+        ],
+    },
+];
+const SCAN_EXTS = new Set(['.ts', '.tsx', '.js', '.jsx', '.html', '.json']);
+/**
+ * Games on freegamestore.online must be free forever — no payment SDKs
+ * allowed. Scans source files for imports/usage of Stripe, PayPal,
+ * Braintree, Square, Paddle, LemonSqueezy, and RevenueCat.
+ *
+ * Uses comment-stripping (preserving string contents) so that real
+ * `import from "stripe"` is caught but a `// TODO: evaluate stripe`
+ * comment isn't.
+ */
+export async function checkNoPaymentSdk(source) {
+    const hits = [];
+    for await (const path of source.list()) {
+        const ext = extOf(path);
+        if (!SCAN_EXTS.has(ext))
+            continue;
+        const raw = await source.read(path);
+        if (!raw)
+            continue;
+        const content = stripCommentsForExt(raw, ext);
+        const matches = PAYMENT_SDKS.filter((s) => s.patterns.some((re) => re.test(content))).map((s) => s.name);
+        if (matches.length > 0) {
+            hits.push({ file: path, matches });
+        }
+    }
+    if (hits.length === 0) {
+        return {
+            name: 'No payment SDKs',
+            status: 'pass',
+            detail: 'no payment SDK imports found — game is free forever',
+        };
+    }
+    return {
+        name: 'No payment SDKs',
+        status: 'fail',
+        detail: `${hits.length} file(s) reference payment SDKs: ${hits
+            .slice(0, 3)
+            .map((h) => `${h.file} (${h.matches.join(', ')})`)
+            .join('; ')}${hits.length > 3 ? '...' : ''}`,
+        suggestions: [
+            'Remove all payment SDK dependencies. Games on FreeGameStore must be 100% free — no in-app purchases, subscriptions, or payment flows.',
+            'If you need monetisation, publish on ProGameStore (progamestore.online) instead.',
+        ],
+    };
+}
+function extOf(path) {
+    const dot = path.lastIndexOf('.');
+    const slash = path.lastIndexOf('/');
+    return dot > slash ? path.slice(dot).toLowerCase() : '';
+}
+//# sourceMappingURL=no-payment-sdk.js.map

package/dist/checks/no-payment-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-payment-sdk.js","sourceRoot":"","sources":["../../src/checks/no-payment-sdk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAWtD,MAAM,YAAY,GAAkB;IAClC;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,YAAY;YACZ,cAAc;YACd,wBAAwB;YACxB,4BAA4B;YAC5B,gBAAgB;YAChB,iBAAiB;SAClB;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,YAAY;YACZ,mBAAmB;YACnB,qBAAqB;YACrB,uBAAuB;SACxB;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE;YACR,gBAAgB;YAChB,mBAAmB;YACnB,uBAAuB;YACvB,yBAAyB;SAC1B;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,YAAY;YACZ,gBAAgB;YAChB,wBAAwB;YACxB,4BAA4B;SAC7B;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,YAAY;YACZ,cAAc;YACd,uBAAuB;YACvB,mDAAmD;SACpD;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE;YACR,kBAAkB;YAClB,oBAAoB;YACpB,6BAA6B;SAC9B;KACF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE;YACR,gBAAgB;YAChB,kBAAkB;YAClB,2BAA2B;YAC3B,iCAAiC;SAClC;KACF;CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAkB;IACxD,MAAM,IAAI,GAA0C,EAAE,CAAC;IAEvD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CACvF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACd,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qDAAqD;SAC9D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,oCAAoC,IAAI;aAC3D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,WAAW,EAAE;YACX,uIAAuI;YACvI,kFAAkF;SACnF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/checks/no-scroll.js

@@ -93,7 +93,7 @@ const FORBIDDEN_OVERFLOW = [
     /(?:^|[\s,{])(?:html|body)\s*\{[^}]*overflow-(?:x|y)\s*:\s*(?:scroll|auto)/im,
 ];
 const FORBIDDEN_MIN_HEIGHT = [/(?:^|[\s,{])(?:html|body)\s*\{[^}]*min-height\s*:\s*100vh/im];
-const VIEWPORT_LOCK = /(?:height|max-height)\s*:\s*100(?:s?vh)|GameShell|@freeappstore\/games/i;
+const VIEWPORT_LOCK = /(?:height|max-height)\s*:\s*100(?:s?vh)|GameShell|@freegamestore\/games/i;
 function extOf(path) {
     const dot = path.lastIndexOf('.');
     const slash = path.lastIndexOf('/');

package/dist/checks/no-scroll.js.map

@@ -1 +1 @@
-{"version":3,"file":"no-scroll.js","sourceRoot":"","sources":["../../src/checks/no-scroll.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB;IACpD,mDAAmD;IACnD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,eAAe,GAAG,IAAI,CAAC;QAExD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,2BAA2B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YACnF,WAAW,EAAE;gBACX,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,wEAAwE;gBACxE,uEAAuE;aACxE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6EAA6E;YACrF,WAAW,EAAE;gBACX,6DAA6D;gBAC7D,8CAA8C;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,MAAM,kBAAkB,GAAG;IACzB,qEAAqE;IACrE,6EAA6E;CAC9E,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,yEAAyE,CAAC;AAEhG,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"no-scroll.js","sourceRoot":"","sources":["../../src/checks/no-scroll.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB;IACpD,mDAAmD;IACnD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,eAAe,GAAG,IAAI,CAAC;QAExD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,2BAA2B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YACnF,WAAW,EAAE;gBACX,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,wEAAwE;gBACxE,uEAAuE;aACxE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6EAA6E;YACrF,WAAW,EAAE;gBACX,6DAA6D;gBAC7D,8CAA8C;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,MAAM,kBAAkB,GAAG;IACzB,qEAAqE;IACrE,6EAA6E;CAC9E,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,0EAA0E,CAAC;AAEjG,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/checks/no-tracking.js

@@ -78,21 +78,21 @@ export async function checkNoTracking(source) {
     }
     if (hits.length === 0) {
         return {
-            name: 'No tracking SDKs',
+            name: 'Analytics routed through platform loader',
             status: 'pass',
-            detail: `scanned for ${TRACKERS.length} known trackers`,
+            detail: `no direct tracker SDKs found; analytics, if any, must flow through the platform loader (api.freegamestore.online/v1/analytics.js?app=<id>)`,
         };
     }
     return {
-        name: 'No tracking SDKs',
+        name: 'Analytics routed through platform loader',
         status: 'fail',
-        detail: `${hits.length} file(s) reference trackers: ${hits
+        detail: `${hits.length} file(s) install trackers directly: ${hits
             .slice(0, 3)
             .map((h) => `${h.file} (${h.matches.join(', ')})`)
             .join('; ')}${hits.length > 3 ? '…' : ''}`,
         suggestions: [
-            'FreeAppStore apps must be tracking-free. Remove the SDK + any analytics calls.',
-            'For private-by-design metrics, CF edge analytics already counts requests anonymously.',
+            'Remove the direct SDK and reference the platform loader instead: <script src="https://api.freegamestore.online/v1/analytics.js?app=<id>" defer></script>.',
+            'Configure providers (GA4, Plausible, custom <head>) via PUT /v1/apps/<id>/analytics — the loader emits the right tags so policy can evolve without redeploying every app.',
         ],
     };
 }

package/dist/checks/no-tracking.js.map

@@ -1 +1 @@
-{"version":3,"file":"no-tracking.js","sourceRoot":"","sources":["../../src/checks/no-tracking.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AActD,SAAS,EAAE,CAAC,IAAY;IACtB,6EAA6E;IAC7E,oFAAoF;IACpF,OAAO,IAAI,MAAM,CAAC,sBAAsB,eAAe,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,QAAQ,GAAkB;IAC9B,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,EAAE;IACvF,8EAA8E;IAC9E,wEAAwE;IACxE,sEAAsE;IACtE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE;IACnF,6EAA6E;IAC7E,6EAA6E;IAC7E,WAAW;IACX;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE;YACR,eAAe;YACf,iBAAiB;YACjB,qEAAqE;YACrE,yBAAyB;YACzB,uBAAuB;SACxB;KACF;IACD,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE;IAChD,6EAA6E;IAC7E,8EAA8E;IAC9E,WAAW;IACX;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,aAAa;YACb,cAAc;YACd,0BAA0B;YAC1B,oBAAoB;YACpB,2DAA2D;YAC3D,6BAA6B;SAC9B;KACF;IACD,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE;IAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE;IAClD,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE;CAC/C,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,uEAAuE;AACvE,iEAAiE;AACjE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,IAAI,GAA0C,EAAE,CAAC;IAEvD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,IAAI,uBAAuB,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,kEAAkE;QAClE,uDAAuD;QACvD,6DAA6D;QAC7D,iEAAiE;QACjE,mEAAmE;QACnE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CACnF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACd,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,eAAe,QAAQ,CAAC,MAAM,iBAAiB;SACxD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,gCAAgC,IAAI;aACvD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5C,WAAW,EAAE;YACX,gFAAgF;YAChF,uFAAuF;SACxF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"no-tracking.js","sourceRoot":"","sources":["../../src/checks/no-tracking.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AActD,SAAS,EAAE,CAAC,IAAY;IACtB,6EAA6E;IAC7E,oFAAoF;IACpF,OAAO,IAAI,MAAM,CAAC,sBAAsB,eAAe,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,QAAQ,GAAkB;IAC9B,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,EAAE;IACvF,8EAA8E;IAC9E,wEAAwE;IACxE,sEAAsE;IACtE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,qBAAqB,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE;IACnF,6EAA6E;IAC7E,6EAA6E;IAC7E,WAAW;IACX;QACE,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE;YACR,eAAe;YACf,iBAAiB;YACjB,qEAAqE;YACrE,yBAAyB;YACzB,uBAAuB;SACxB;KACF;IACD,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE;IAChD,6EAA6E;IAC7E,8EAA8E;IAC9E,WAAW;IACX;QACE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE;YACR,aAAa;YACb,cAAc;YACd,0BAA0B;YAC1B,oBAAoB;YACpB,2DAA2D;YAC3D,6BAA6B;SAC9B;KACF;IACD,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE;IAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE;IAClD,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE;CAC/C,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,uEAAuE;AACvE,iEAAiE;AACjE,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,IAAI,GAA0C,EAAE,CAAC;IAEvD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,IAAI,uBAAuB,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,kEAAkE;QAClE,uDAAuD;QACvD,6DAA6D;QAC7D,iEAAiE;QACjE,mEAAmE;QACnE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CACnF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACd,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,0CAA0C;YAChD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,4IAA4I;SACrJ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,0CAA0C;QAChD,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,uCAAuC,IAAI;aAC9D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aACjD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5C,WAAW,EAAE;YACX,2JAA2J;YAC3J,2KAA2K;SAC5K;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/checks/pwa-icons.d.ts

@@ -0,0 +1,15 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * PWA installability requires a 192x192 and a 512x512 icon. The
+ * platform manifest template references `icon-192.png` and
+ * `icon-512.png` in `web/public/`. Both must exist for the game to be
+ * installable on all devices.
+ *
+ * This check verifies file existence only — it doesn't validate
+ * dimensions (that would require image decoding). The naming convention
+ * makes the intent clear enough that a mis-sized file is caught by
+ * Lighthouse at deploy time.
+ */
+export declare function checkPwaIcons(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=pwa-icons.d.ts.map

package/dist/checks/pwa-icons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pwa-icons.d.ts","sourceRoot":"","sources":["../../src/checks/pwa-icons.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CA2B5E"}

package/dist/checks/pwa-icons.js

@@ -0,0 +1,38 @@
+const REQUIRED_ICONS = ['web/public/icon-192.png', 'web/public/icon-512.png'];
+/**
+ * PWA installability requires a 192x192 and a 512x512 icon. The
+ * platform manifest template references `icon-192.png` and
+ * `icon-512.png` in `web/public/`. Both must exist for the game to be
+ * installable on all devices.
+ *
+ * This check verifies file existence only — it doesn't validate
+ * dimensions (that would require image decoding). The naming convention
+ * makes the intent clear enough that a mis-sized file is caught by
+ * Lighthouse at deploy time.
+ */
+export async function checkPwaIcons(source) {
+    const missing = [];
+    for (const iconPath of REQUIRED_ICONS) {
+        const content = await source.read(iconPath);
+        if (content === null) {
+            missing.push(iconPath);
+        }
+    }
+    if (missing.length === 0) {
+        return {
+            name: 'PWA icons',
+            status: 'pass',
+            detail: 'icon-192.png and icon-512.png present in web/public/',
+        };
+    }
+    return {
+        name: 'PWA icons',
+        status: 'fail',
+        detail: `missing PWA icon(s): ${missing.join(', ')}`,
+        suggestions: [
+            'Add the missing icon file(s) to web/public/. Both icon-192.png (192x192) and icon-512.png (512x512) are required for PWA installability.',
+            'Use a square PNG with your game logo on a solid background. Tools like https://realfavicongenerator.net/ can generate both sizes.',
+        ],
+    };
+}
+//# sourceMappingURL=pwa-icons.js.map

package/dist/checks/pwa-icons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pwa-icons.js","sourceRoot":"","sources":["../../src/checks/pwa-icons.ts"],"names":[],"mappings":"AAGA,MAAM,cAAc,GAAG,CAAC,yBAAyB,EAAE,yBAAyB,CAAU,CAAC;AAEvF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sDAAsD;SAC/D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpD,WAAW,EAAE;YACX,0IAA0I;YAC1I,mIAAmI;SACpI;KACF,CAAC;AACJ,CAAC"}

package/dist/checks/react-strict-mode.d.ts

@@ -0,0 +1,4 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+export declare function checkReactStrictMode(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=react-strict-mode.d.ts.map

package/dist/checks/react-strict-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-strict-mode.d.ts","sourceRoot":"","sources":["../../src/checks/react-strict-mode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAkB/C,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CA8BnF"}