@proappstore/compliance 0.1.0

package/dist/checks/manifest.d.ts

@@ -0,0 +1,9 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * Verifies the PWA manifest exists at the expected location and parses
+ * to JSON. Apps without a manifest can't be "Add to Home Screen"-d on
+ * mobile; required by the platform.
+ */
+export declare function checkManifest(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/checks/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/checks/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAoC5E"}

package/dist/checks/manifest.js

@@ -0,0 +1,43 @@
+const MANIFEST_PATH = 'web/public/manifest.json';
+/**
+ * Verifies the PWA manifest exists at the expected location and parses
+ * to JSON. Apps without a manifest can't be "Add to Home Screen"-d on
+ * mobile; required by the platform.
+ */
+export async function checkManifest(source) {
+    const raw = await source.read(MANIFEST_PATH);
+    if (raw === null) {
+        return {
+            name: 'PWA manifest',
+            status: 'fail',
+            detail: `${MANIFEST_PATH} missing`,
+            suggestions: [
+                'Add a manifest.json with at least name, short_name, start_url, display, icons.',
+                'See template-standalone for a working example.',
+            ],
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return {
+            name: 'PWA manifest',
+            status: 'fail',
+            detail: `${MANIFEST_PATH} is not valid JSON`,
+        };
+    }
+    const required = ['name', 'short_name', 'start_url', 'display'];
+    const missing = required.filter((k) => typeof parsed[k] !== 'string' || parsed[k] === '');
+    if (missing.length > 0) {
+        return {
+            name: 'PWA manifest',
+            status: 'warn',
+            detail: `missing fields: ${missing.join(', ')}`,
+            suggestions: [`Add the ${missing.join(', ')} field(s) to manifest.json so installs work.`],
+        };
+    }
+    return { name: 'PWA manifest', status: 'pass', detail: MANIFEST_PATH };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/checks/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/checks/manifest.ts"],"names":[],"mappings":"AAGA,MAAM,aAAa,GAAG,0BAA0B,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB;IACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,aAAa,UAAU;YAClC,WAAW,EAAE;gBACX,gFAAgF;gBAChF,gDAAgD;aACjD;SACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAwF,CAAC;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,aAAa,oBAAoB;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,CAAU,CAAC;IACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC/C,WAAW,EAAE,CAAC,WAAW,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C,CAAC;SAC3F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACzE,CAAC"}

package/dist/checks/no-brand-overrides.d.ts

@@ -0,0 +1,25 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * Apps and games on the platform must look consistent with the storefront
+ * and with each other — brand colors, fonts, and layout rhythm come from
+ * the template, not the app. This check fails on the most common forms of
+ * brand-override drift:
+ *
+ *   1. Custom CSS variable overrides for the platform-defined tokens
+ *      (--paper, --ink, --accent, --line, --panel, --muted). These are
+ *      defined by the template; an app redefining them changes the brand.
+ *   2. Custom font-family declarations beyond the brand stack
+ *      (Manrope, Fraunces) and the system / monospace fallbacks.
+ *
+ * What's allowed:
+ *   - Using the variables (color: var(--accent)) — that's the whole point.
+ *   - Hardcoded colors for non-brand purposes (highlight states, error
+ *     red, etc.). We don't try to gate every hex literal — too noisy and
+ *     too many false positives.
+ */
+export declare function checkNoBrandOverrides(source: FileSource): Promise<CheckResult>;
+export declare function scanContent(filename: string, content: string, opts?: {
+    skipVarRedefs?: boolean;
+}): string[];
+//# sourceMappingURL=no-brand-overrides.d.ts.map

package/dist/checks/no-brand-overrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-brand-overrides.d.ts","sourceRoot":"","sources":["../../src/checks/no-brand-overrides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAgDpF;AA2DD,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,MAAM,EAAE,CAmDV"}

package/dist/checks/no-brand-overrides.js

@@ -0,0 +1,228 @@
+import { stripCommentsOnly, stripCssComments } from '../lib/strip.js';
+/**
+ * Apps and games on the platform must look consistent with the storefront
+ * and with each other — brand colors, fonts, and layout rhythm come from
+ * the template, not the app. This check fails on the most common forms of
+ * brand-override drift:
+ *
+ *   1. Custom CSS variable overrides for the platform-defined tokens
+ *      (--paper, --ink, --accent, --line, --panel, --muted). These are
+ *      defined by the template; an app redefining them changes the brand.
+ *   2. Custom font-family declarations beyond the brand stack
+ *      (Manrope, Fraunces) and the system / monospace fallbacks.
+ *
+ * What's allowed:
+ *   - Using the variables (color: var(--accent)) — that's the whole point.
+ *   - Hardcoded colors for non-brand purposes (highlight states, error
+ *     red, etc.). We don't try to gate every hex literal — too noisy and
+ *     too many false positives.
+ */
+export async function checkNoBrandOverrides(source) {
+    const issues = [];
+    for await (const path of source.list()) {
+        const ext = extOf(path);
+        if (!SCANNED_EXTS.has(ext))
+            continue;
+        const raw = await source.read(path);
+        if (!raw)
+            continue;
+        // Strip comment bodies so a `// font-family: "Comic Sans"` note
+        // doesn't fire. Preserve string-literal contents — the JSX value
+        // `fontFamily: "Comic Sans"` IS a string literal and is the thing
+        // we're auditing. For .css/.scss use the css-only stripper (no `//`
+        // syntax at the language level).
+        const content = ext === '.css' || ext === '.scss'
+            ? stripCssComments(raw)
+            : stripCommentsOnly(raw);
+        // Canonical theme file: the platform's CSS variables ARE defined here.
+        // Apps own this file post-scaffold (they can technically modify token
+        // values, and we accept the imperfection — the loud places where a
+        // brand override actually causes inconsistency are inline styles +
+        // per-component CSS, which this check still covers).
+        const isThemeFile = path === 'web/src/index.css' || path === 'web/src/main.css';
+        const fileIssues = scanContent(path, content, { skipVarRedefs: isThemeFile });
+        issues.push(...fileIssues);
+        // Cap at 10 — beyond that the user has bigger problems and we don't
+        // want a 200-line failure report.
+        if (issues.length >= 10)
+            break;
+    }
+    if (issues.length === 0) {
+        return {
+            name: 'No brand overrides',
+            status: 'pass',
+            detail: 'apps inherit colors + fonts from the template',
+        };
+    }
+    return {
+        name: 'No brand overrides',
+        status: 'fail',
+        detail: `${issues.length} apparent override${issues.length === 1 ? '' : 's'}`,
+        suggestions: [
+            ...issues.slice(0, 5),
+            ...(issues.length > 5 ? [`...and ${issues.length - 5} more`] : []),
+            'Use the template tokens (var(--accent), var(--ink), etc.) instead of redefining them.',
+            'Brand fonts are Manrope (body) + Fraunces (display). Stick to those + system / monospace.',
+        ],
+    };
+}
+const SCANNED_EXTS = new Set(['.css', '.scss', '.tsx', '.ts', '.jsx', '.js', '.html']);
+const PROTECTED_VARS = new Set([
+    '--paper',
+    '--ink',
+    '--muted',
+    '--accent',
+    '--line',
+    '--line-strong',
+    '--panel',
+]);
+/**
+ * Whitelist of font-family declarations we accept. Anything outside this
+ * set — for ANY font name not in the brand stack and not a generic /
+ * system fallback — flags. The check is case-insensitive.
+ */
+const ALLOWED_FONT_TOKENS = new Set([
+    // Brand stack
+    'manrope',
+    'fraunces',
+    // Generic/system fallbacks (CSS keywords)
+    'serif',
+    'sans-serif',
+    'monospace',
+    'system-ui',
+    'ui-monospace',
+    'ui-serif',
+    'ui-sans-serif',
+    'inherit',
+    'initial',
+    'unset',
+    'revert',
+    // Common system stack names — these are aliases, not custom fonts.
+    '-apple-system',
+    'blinkmacsystemfont',
+    'segoe ui',
+    'roboto',
+    'helvetica',
+    'helvetica neue',
+    'arial',
+    'sf mono',
+    'sf pro',
+    'menlo',
+    'monaco',
+    'consolas',
+    'liberation mono',
+    'courier',
+    'courier new',
+    'georgia',
+    'noto sans',
+    'noto color emoji',
+    'apple color emoji',
+    'segoe ui emoji',
+    'segoe ui symbol',
+]);
+export function scanContent(filename, content, opts = {}) {
+    const out = [];
+    // 1. CSS variable overrides for protected tokens.
+    if (!opts.skipVarRedefs) {
+        const varDeclRe = /(?:^|[\s;{,])(--[a-z-]+)\s*:/gim;
+        let m;
+        while ((m = varDeclRe.exec(content)) !== null) {
+            const name = m[1];
+            if (PROTECTED_VARS.has(name)) {
+                const line = lineNumberAt(content, m.index);
+                out.push(`${filename}:${line} redefines ${name} (template owns this token)`);
+            }
+        }
+    }
+    // 2. font-family overrides.
+    // Capture the value of every font-family / fontFamily declaration, then
+    // extract candidate font names. JSX values can be ternaries
+    // (`fontFamily: isFoo ? "Fraunces" : "Manrope"`), so we pull out every
+    // quoted string in the value and check each one separately. If there are
+    // no quoted strings, the value is treated as a CSS-style comma list
+    // (`font-family: Comic Sans, serif`).
+    const fontHeadRe = /(font-family|fontFamily)\s*[:=]/g;
+    const quotedRe = /(['"`])([^'"`\n]+)\1/g;
+    let m;
+    while ((m = fontHeadRe.exec(content)) !== null) {
+        const isJsx = m[1] === 'fontFamily';
+        const start = m.index + m[0].length;
+        const value = sliceFontValue(content, start, isJsx);
+        const quotedStrings = [...value.matchAll(quotedRe)].map((x) => x[2]);
+        const candidates = quotedStrings.length > 0 ? quotedStrings : [value];
+        let flagged = false;
+        for (const cand of candidates) {
+            const tokens = cand
+                .split(',')
+                .map((t) => t.trim().replace(/^["']|["']$/g, '').toLowerCase())
+                .filter(Boolean);
+            for (const t of tokens) {
+                if (!ALLOWED_FONT_TOKENS.has(t)) {
+                    const line = lineNumberAt(content, m.index);
+                    out.push(`${filename}:${line} non-brand font "${t}"`);
+                    flagged = true;
+                    break;
+                }
+            }
+            if (flagged)
+                break;
+        }
+    }
+    return out;
+}
+/**
+ * Walk forward from `start` until we hit the end of the font-family value.
+ *
+ * CSS values end at `;` or `}` or newline.
+ * JSX values end at `}` or at a `,` followed by another identifier+colon
+ * (the next style property). Commas inside quoted strings or before
+ * non-identifiers (e.g. font fallbacks) are part of the value.
+ */
+function sliceFontValue(content, start, isJsx) {
+    let i = start;
+    let quote = null;
+    while (i < content.length) {
+        const c = content[i];
+        if (quote) {
+            if (c === '\\') {
+                i += 2;
+                continue;
+            }
+            if (c === quote)
+                quote = null;
+            i++;
+            continue;
+        }
+        if (c === '"' || c === "'" || c === '`') {
+            quote = c;
+            i++;
+            continue;
+        }
+        if (c === '\n' || c === ';' || c === '}')
+            break;
+        if (isJsx && c === ',') {
+            // Lookahead: is this `,` followed by `identifier:`? If yes, end of value.
+            let j = i + 1;
+            while (j < content.length && (content[j] === ' ' || content[j] === '\t'))
+                j++;
+            const rest = content.slice(j, j + 64);
+            if (/^[A-Za-z_$][\w$]*\s*:/.test(rest))
+                break;
+        }
+        i++;
+    }
+    return content.slice(start, i);
+}
+function extOf(path) {
+    const dot = path.lastIndexOf('.');
+    const slash = path.lastIndexOf('/');
+    return dot > slash ? path.slice(dot).toLowerCase() : '';
+}
+function lineNumberAt(content, index) {
+    let n = 1;
+    for (let i = 0; i < index; i++)
+        if (content.charCodeAt(i) === 10)
+            n++;
+    return n;
+}
+//# sourceMappingURL=no-brand-overrides.js.map

package/dist/checks/no-brand-overrides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-brand-overrides.js","sourceRoot":"","sources":["../../src/checks/no-brand-overrides.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGtE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAkB;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,oEAAoE;QACpE,iCAAiC;QACjC,MAAM,OAAO,GACX,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO;YAC/B,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC;YACvB,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC7B,uEAAuE;QACvE,sEAAsE;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,qDAAqD;QACrD,MAAM,WAAW,GAAG,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,kBAAkB,CAAC;QAChF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;QAC3B,oEAAoE;QACpE,kCAAkC;QAClC,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;YAAE,MAAM;IACjC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,+CAA+C;SACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,qBAAqB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QAC7E,WAAW,EAAE;YACX,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,uFAAuF;YACvF,2FAA2F;SAC5F;KACF,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,SAAS;IACT,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;IACR,eAAe;IACf,SAAS;CACV,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,cAAc;IACd,SAAS;IACT,UAAU;IACV,0CAA0C;IAC1C,OAAO;IACP,YAAY;IACZ,WAAW;IACX,WAAW;IACX,cAAc;IACd,UAAU;IACV,eAAe;IACf,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;IACR,mEAAmE;IACnE,eAAe;IACf,oBAAoB;IACpB,UAAU;IACV,QAAQ;IACR,WAAW;IACX,gBAAgB;IAChB,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,iBAAiB;IACjB,SAAS;IACT,aAAa;IACb,SAAS;IACT,WAAW;IACX,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,OAAe,EACf,OAAoC,EAAE;IAEtC,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,kDAAkD;IAClD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,iCAAiC,CAAC;QACpD,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,IAAI,cAAc,IAAI,6BAA6B,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,wEAAwE;IACxE,4DAA4D;IAC5D,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,sCAAsC;IACtC,MAAM,UAAU,GAAG,kCAAkC,CAAC;IACtD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;IACzC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;QACpC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI;iBAChB,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC9D,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC5C,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBACtD,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,OAAO;gBAAE,MAAM;QACrB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa,EAAE,KAAc;IACpE,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;YAC9B,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACxC,KAAK,GAAG,CAAC,CAAC;YACV,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,MAAM;QAChD,IAAI,KAAK,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACvB,0EAA0E;YAC1E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YACtC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM;QAChD,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/checks/no-env-production.d.ts

@@ -0,0 +1,16 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * `.env.production` is a frequent accidental commit — Vite reads it at
+ * build time, and it's the file most likely to contain real API keys
+ * for the production deploy. The platform's templates instruct creators
+ * to use Cloudflare Pages env vars or Wrangler secrets instead. This
+ * check is a safety net: even if the creator's gitignore misses it, we
+ * fail compliance before publish.
+ *
+ * Scope: any `.env.production` file anywhere in the repo. We don't try
+ * to differentiate "this one's empty" from "this one has secrets" —
+ * the file shouldn't exist at all.
+ */
+export declare function checkNoEnvProduction(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=no-env-production.d.ts.map

package/dist/checks/no-env-production.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-env-production.d.ts","sourceRoot":"","sources":["../../src/checks/no-env-production.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAsBnF"}

package/dist/checks/no-env-production.js

@@ -0,0 +1,37 @@
+/**
+ * `.env.production` is a frequent accidental commit — Vite reads it at
+ * build time, and it's the file most likely to contain real API keys
+ * for the production deploy. The platform's templates instruct creators
+ * to use Cloudflare Pages env vars or Wrangler secrets instead. This
+ * check is a safety net: even if the creator's gitignore misses it, we
+ * fail compliance before publish.
+ *
+ * Scope: any `.env.production` file anywhere in the repo. We don't try
+ * to differentiate "this one's empty" from "this one has secrets" —
+ * the file shouldn't exist at all.
+ */
+export async function checkNoEnvProduction(source) {
+    const offenders = [];
+    for await (const path of source.list()) {
+        const base = path.split('/').pop() ?? '';
+        if (base === '.env.production')
+            offenders.push(path);
+    }
+    if (offenders.length === 0) {
+        return {
+            name: 'No .env.production',
+            status: 'pass',
+            detail: 'no production env files committed',
+        };
+    }
+    return {
+        name: 'No .env.production',
+        status: 'fail',
+        detail: `${offenders.length} .env.production file(s): ${offenders.join(', ')}`,
+        suggestions: [
+            'Delete the file and add `.env.production` to .gitignore.',
+            'Use Cloudflare Pages → Settings → Environment Variables for production secrets instead.',
+        ],
+    };
+}
+//# sourceMappingURL=no-env-production.js.map

package/dist/checks/no-env-production.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-env-production.js","sourceRoot":"","sources":["../../src/checks/no-env-production.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAkB;IAC3D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,IAAI,KAAK,iBAAiB;YAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,6BAA6B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC9E,WAAW,EAAE;YACX,0DAA0D;YAC1D,yFAAyF;SAC1F;KACF,CAAC;AACJ,CAAC"}

package/dist/checks/no-placeholders.d.ts

@@ -0,0 +1,10 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * Catches the case where APPNAME placeholders from the template were
+ * never substituted. The CLI's `fas init` substitutes correctly today
+ * but if someone clones the template manually and forgets the find/
+ * replace step, every page renders with `<title>APPNAME — …</title>`.
+ */
+export declare function checkNoPlaceholders(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=no-placeholders.d.ts.map

package/dist/checks/no-placeholders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-placeholders.d.ts","sourceRoot":"","sources":["../../src/checks/no-placeholders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAoB/C;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAsBlF"}

package/dist/checks/no-placeholders.js

@@ -0,0 +1,54 @@
+const TEXT_EXTS = new Set([
+    '.md',
+    '.txt',
+    '.json',
+    '.ts',
+    '.tsx',
+    '.js',
+    '.jsx',
+    '.html',
+    '.htm',
+    '.css',
+    '.scss',
+    '.yaml',
+    '.yml',
+    '.toml',
+    '.svg',
+]);
+/**
+ * Catches the case where APPNAME placeholders from the template were
+ * never substituted. The CLI's `fas init` substitutes correctly today
+ * but if someone clones the template manually and forgets the find/
+ * replace step, every page renders with `<title>APPNAME — …</title>`.
+ */
+export async function checkNoPlaceholders(source) {
+    const offenders = [];
+    for await (const path of source.list()) {
+        if (!TEXT_EXTS.has(extOf(path)))
+            continue;
+        const content = await source.read(path);
+        if (content?.includes('APPNAME')) {
+            offenders.push(path);
+            if (offenders.length >= 5)
+                break; // don't spam, summarize
+        }
+    }
+    if (offenders.length === 0) {
+        return { name: 'No template placeholders', status: 'pass', detail: 'all APPNAME substituted' };
+    }
+    return {
+        name: 'No template placeholders',
+        status: 'fail',
+        detail: `${offenders.length === 5 ? '5+' : offenders.length} file(s) still contain APPNAME: ${offenders.join(', ')}`,
+        suggestions: [
+            'Run `fas init <id>` instead of cloning the template manually — it does the substitution.',
+            'Or do a project-wide find/replace: APPNAME → your app id (lowercase, hyphenated).',
+        ],
+    };
+}
+function extOf(path) {
+    const dot = path.lastIndexOf('.');
+    const slash = path.lastIndexOf('/');
+    return dot > slash ? path.slice(dot).toLowerCase() : '';
+}
+//# sourceMappingURL=no-placeholders.js.map

package/dist/checks/no-placeholders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-placeholders.js","sourceRoot":"","sources":["../../src/checks/no-placeholders.ts"],"names":[],"mappings":"AAGA,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAkB;IAC1D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM,CAAC,wBAAwB;QAC5D,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACjG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,mCAAmC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpH,WAAW,EAAE;YACX,0FAA0F;YAC1F,mFAAmF;SACpF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/checks/no-scroll.d.ts

@@ -0,0 +1,25 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+/**
+ * Games on ProAppStore must fit the viewport — no horizontal or
+ * vertical scroll at the document level. Static analysis catches the
+ * common CSS / inline-style anti-patterns:
+ *
+ *   - `overflow: scroll` or `overflow: auto` on `html` or `body`.
+ *   - `min-height: 100vh` on `html` / `body` (creates page that's at
+ *     least viewport-tall, but content + topbar = > 100vh = scroll).
+ *   - Missing the `100svh` / `100vh` height constraint on the layout
+ *     wrapper (loose check — "at least one root element should hard-cap
+ *     to viewport height").
+ *
+ * Runtime guarantees (real DOM measurement) live in the e2e Playwright
+ * suite; this check exists as a fast pre-publish gate so creators
+ * don't ship trivially-scrolling games.
+ *
+ * Apps (ProAppStore) are not subject to this check — the apps Shell
+ * wraps them in a sidebar+main layout that legitimately scrolls. We
+ * detect "is this a game project" by looking for the @proappstore/games
+ * dep, the canonical signal that the app uses GameShell.
+ */
+export declare function checkNoScroll(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=no-scroll.d.ts.map

package/dist/checks/no-scroll.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-scroll.d.ts","sourceRoot":"","sources":["../../src/checks/no-scroll.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAuE5E"}

package/dist/checks/no-scroll.js

@@ -0,0 +1,109 @@
+import { isGameProject } from '../lib/project-type.js';
+/**
+ * Games on ProAppStore must fit the viewport — no horizontal or
+ * vertical scroll at the document level. Static analysis catches the
+ * common CSS / inline-style anti-patterns:
+ *
+ *   - `overflow: scroll` or `overflow: auto` on `html` or `body`.
+ *   - `min-height: 100vh` on `html` / `body` (creates page that's at
+ *     least viewport-tall, but content + topbar = > 100vh = scroll).
+ *   - Missing the `100svh` / `100vh` height constraint on the layout
+ *     wrapper (loose check — "at least one root element should hard-cap
+ *     to viewport height").
+ *
+ * Runtime guarantees (real DOM measurement) live in the e2e Playwright
+ * suite; this check exists as a fast pre-publish gate so creators
+ * don't ship trivially-scrolling games.
+ *
+ * Apps (ProAppStore) are not subject to this check — the apps Shell
+ * wraps them in a sidebar+main layout that legitimately scrolls. We
+ * detect "is this a game project" by looking for the @proappstore/games
+ * dep, the canonical signal that the app uses GameShell.
+ */
+export async function checkNoScroll(source) {
+    // Skip apps — only games are subject to no-scroll.
+    if (!(await isGameProject(source))) {
+        return {
+            name: 'No scroll (games only)',
+            status: 'pass',
+            detail: 'not a game project — check skipped',
+        };
+    }
+    const issues = [];
+    let sawViewportLock = false;
+    for await (const path of source.list()) {
+        const ext = extOf(path);
+        if (!SCAN_EXTS.has(ext))
+            continue;
+        const content = await source.read(path);
+        if (!content)
+            continue;
+        for (const re of FORBIDDEN_OVERFLOW) {
+            const m = re.exec(content);
+            if (m) {
+                const line = lineNumberAt(content, m.index);
+                issues.push(`${path}:${line} ${m[0]} — root scrolling not allowed in games`);
+            }
+        }
+        for (const re of FORBIDDEN_MIN_HEIGHT) {
+            const m = re.exec(content);
+            if (m) {
+                const line = lineNumberAt(content, m.index);
+                issues.push(`${path}:${line} ${m[0]} — use exact viewport height (100svh) instead`);
+            }
+        }
+        if (VIEWPORT_LOCK.test(content))
+            sawViewportLock = true;
+        if (issues.length >= 8)
+            break;
+    }
+    if (issues.length > 0) {
+        return {
+            name: 'No scroll (games only)',
+            status: 'fail',
+            detail: `${issues.length} scroll-enabling pattern${issues.length === 1 ? '' : 's'}`,
+            suggestions: [
+                ...issues.slice(0, 5),
+                ...(issues.length > 5 ? [`...and ${issues.length - 5} more`] : []),
+                'Use <GameShell> from @proappstore/games — it locks layout to 100svh.',
+                'Inside the play area, use overflow: hidden instead of overflow: auto.',
+            ],
+        };
+    }
+    if (!sawViewportLock) {
+        return {
+            name: 'No scroll (games only)',
+            status: 'warn',
+            detail: 'no 100svh/100vh viewport lock detected — game may scroll on small viewports',
+            suggestions: [
+                'Wrap your game in <GameShell> from @proappstore/games, or',
+                'Add `height: 100svh` to your root container.',
+            ],
+        };
+    }
+    return {
+        name: 'No scroll (games only)',
+        status: 'pass',
+        detail: 'viewport-locked layout detected',
+    };
+}
+const SCAN_EXTS = new Set(['.css', '.scss', '.tsx', '.ts', '.jsx', '.js', '.html']);
+const FORBIDDEN_OVERFLOW = [
+    /(?:^|[\s,{])(?:html|body)\s*\{[^}]*overflow\s*:\s*(?:scroll|auto)/im,
+    /(?:^|[\s,{])(?:html|body)\s*\{[^}]*overflow-(?:x|y)\s*:\s*(?:scroll|auto)/im,
+];
+const FORBIDDEN_MIN_HEIGHT = [/(?:^|[\s,{])(?:html|body)\s*\{[^}]*min-height\s*:\s*100vh/im];
+const VIEWPORT_LOCK = /(?:height|max-height)\s*:\s*100(?:s?vh)|GameShell|@proappstore\/games/i;
+function extOf(path) {
+    const dot = path.lastIndexOf('.');
+    const slash = path.lastIndexOf('/');
+    return dot > slash ? path.slice(dot).toLowerCase() : '';
+}
+function lineNumberAt(content, index) {
+    let n = 1;
+    for (let i = 0; i < index; i++)
+        if (content.charCodeAt(i) === 10)
+            n++;
+    return n;
+}
+//# sourceMappingURL=no-scroll.js.map

package/dist/checks/no-scroll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-scroll.js","sourceRoot":"","sources":["../../src/checks/no-scroll.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAkB;IACpD,mDAAmD;IACnD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,EAAE,CAAC;gBACN,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,eAAe,GAAG,IAAI,CAAC;QAExD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,2BAA2B,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YACnF,WAAW,EAAE;gBACX,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,sEAAsE;gBACtE,uEAAuE;aACxE;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6EAA6E;YACrF,WAAW,EAAE;gBACX,2DAA2D;gBAC3D,8CAA8C;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpF,MAAM,kBAAkB,GAAG;IACzB,qEAAqE;IACrE,6EAA6E;CAC9E,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,wEAAwE,CAAC;AAE/F,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/checks/no-tracking.d.ts

@@ -0,0 +1,4 @@
+import type { FileSource } from '../lib/file-source.js';
+import type { CheckResult } from '../types.js';
+export declare function checkNoTracking(source: FileSource): Promise<CheckResult>;
+//# sourceMappingURL=no-tracking.d.ts.map

package/dist/checks/no-tracking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-tracking.d.ts","sourceRoot":"","sources":["../../src/checks/no-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAuE/C,wBAAsB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CA6C9E"}