@readystack/autorenew-signup-lint 1.0.0

package/LICENSE.txt

@@ -0,0 +1,16 @@
+Auto-Renewal Signup Lint (California ARL) — Licence
+
+Free scope
+  Check the signup or pricing page open in the editor is free for any use, personal or commercial, for as long as you keep the
+  extension installed, and the online check at the product page is free without registration.
+
+Paid scope
+  Sweep every page in the workspace and write one dated report you keep is the paid part. It asks for a licence key issued at purchase (one seat, one key;
+  7-day full refund, no questions). The key is checked against the payment provider and
+  cached locally for 30 days so it keeps working offline.
+
+Redistribution
+  You may not resell, re-host or bundle this extension or its rule set. The rule set and the
+  engine are provided as-is; check results are advisory and do not constitute legal advice.
+
+(c) ReadyStack — https://getreadystack.com

package/README.md

@@ -0,0 +1,54 @@
+# Auto-Renewal Signup Lint (California ARL)
+
+![Auto-Renewal Signup Lint (California ARL)](https://getreadystack.com/img/promo/sku48727_result_card.jpg)
+
+Sixteen statutory checks on the signup page AB 2863 rewrote, in your editor and in the browser
+
+## Install
+
+```
+npx @readystack/autorenew-signup-lint file
+```
+
+Node 18+. The same 16 rules as the VS Code extension, from a terminal or CI.
+
+## Free
+
+- Check the signup or pricing page open in the editor against all 16 rules, free and unlimited, plus the same engine free in the browser.
+- `--rules` lists every rule
+
+## With a licence ($29 once)
+
+- Sweep every matching page in the workspace and write one dated report file into the folder, yours to keep and attach to a review.
+
+```
+@readystack/autorenew-signup-lint --dir ./templates --report html --out report.html
+```
+
+An hour of US outside counsel reviewing one signup flow is commonly quoted at $300-$500.
+
+## Use from an AI agent (MCP)
+
+Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
+
+```json
+{ "mcpServers": { "autorenew-signup-lint": { "command": "npx", "args": ["-y", "@readystack/autorenew-signup-lint", "--mcp"] } } }
+```
+
+Tools: `check_text` and `check_file` (free) · `check_dir` (licence; the full sweep is free for 7 days). The agent gets every finding with the line number.
+
+## Use in CI
+
+```yaml
+- name: Auto-Renewal Signup Lint (California ARL)
+  run: npx -y @readystack/autorenew-signup-lint --dir . --ci
+```
+
+(container: `docker run --rm -v "$PWD:/work" getreadystack/autorenew-signup-lint --dir /work --ci`)
+
+Try the full run free for 7 days — no key needed. Then one licence, 7-day refund, no questions. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
+
+[Get a licence](https://buy.polar.sh/polar_cl_ysb3yWUhknvn2fWoPwchsZqFfbA3X5hijEY2x1jBBhw)
+
+
+<!-- california auto renewal signup lint -->

package/cli.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+// cli.js — the same rules as the VS Code extension, run from a terminal or a container. Generated by adapters.py.
+'use strict';
+const fs = require('fs'), path = require('path');
+const RULES = require('./rules.json');
+const S = require('./strings.json');
+const lic = require('./license.js');
+const ENGINE = require('./engine.js');   // s144 — scaffold products: the same engine the VS Code extension runs
+const RULE_LIST = Array.isArray(ENGINE.RULES) ? ENGINE.RULES : (Array.isArray(RULES) ? RULES : []);
+const RULE_N = ENGINE.RULE_COUNT || RULE_LIST.length;
+function scan(text, file) {
+  const r = ENGINE.engine.check(String(text), { today: new Date().toISOString().slice(0, 10), path: file || '' });
+  return (r && r.findings || []).map((f) => ({ line: parseInt(f.line, 10) || 1, msg: String(f.msg || f.message || f.check || ''), fix: f.fix || null, sev: (String(f.sev || 'error').toLowerCase().startsWith('err') ? 'error' : 'warn') }));
+}
+function isText(p) { try { const b = fs.readFileSync(p); if (b.length > 2 * 1024 * 1024) return false; const s = b.subarray(0, 4096); for (const x of s) if (x === 0) return false; return true; } catch (e) { return false; } }
+function walk(dir, exts, out) {
+  let ents = []; try { ents = fs.readdirSync(dir, { withFileTypes: true }); } catch (e) { return out; }
+  for (const e of ents) {
+    if (e.name === 'node_modules' || e.name === '.git' || e.name.startsWith('.')) continue;
+    const p = path.join(dir, e.name);
+    if (e.isDirectory()) walk(p, exts, out);
+    else if ((!exts.length || exts.includes(path.extname(e.name).toLowerCase())) && isText(p)) out.push(p);
+  }
+  return out;
+}
+function esc(s) { return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;'); }
+function csvq(s) { return '"' + String(s == null ? '' : s).replace(/"/g, '""') + '"'; }
+function render(rows, fmt) {
+  if (fmt === 'json') return JSON.stringify({ tool: S.name, rules: RULE_N, files: rows }, null, 1);
+  if (fmt === 'csv') { const o = ['file,line,severity,message,fix']; for (const r of rows) for (const h of r.hits) o.push([csvq(r.file), h.line, h.sev, csvq(h.msg), csvq(h.fix)].join(',')); return o.join('\n') + '\n'; }
+  if (fmt === 'html') {
+    const n = rows.reduce((a, r) => a + r.hits.length, 0);
+    let o = '<!doctype html><meta charset="utf-8"><title>' + esc(S.name) + ' report</title><style>body{font:14px system-ui;margin:24px}table{border-collapse:collapse}td,th{border:1px solid #ddd;padding:4px 8px;font-size:13px}code{font-family:ui-monospace,monospace}</style>';
+    o += '<h1>' + esc(S.name) + '</h1><p>' + rows.length + ' files · ' + n + ' findings · ' + RULE_N + ' rules</p><table><tr><th>file</th><th>line</th><th>sev</th><th>message</th><th>fix</th></tr>';
+    for (const r of rows) for (const h of r.hits) o += '<tr><td><code>' + esc(r.file) + '</code></td><td>' + h.line + '</td><td>' + esc(h.sev) + '</td><td>' + esc(h.msg) + '</td><td>' + esc(h.fix || '') + '</td></tr>';
+    return o + '</table>';
+  }
+  let o = ''; for (const r of rows) { o += r.file + '\n'; for (const h of r.hits) o += '  ' + String(h.line).padStart(5) + '  ' + h.sev.padEnd(5) + ' ' + h.msg + (h.fix ? '\n         -> ' + h.fix : '') + '\n'; if (!r.hits.length) o += '  (no findings)\n'; }
+  return o;
+}
+function trialState() {
+  if (process.env.READYSTACK_NO_TRIAL) return { active: false };
+  try {
+    const p = path.join(path.dirname(lic.storePath()), S.bin + '.trial.json');
+    let t = null; try { t = JSON.parse(fs.readFileSync(p, 'utf8')); } catch (e) {}
+    if (!t || !t.until) { t = { until: new Date(Date.now() + 7 * 24 * 3600 * 1000).toISOString().slice(0, 10) }; fs.mkdirSync(path.dirname(p), { recursive: true }); fs.writeFileSync(p, JSON.stringify(t)); }
+    return { active: new Date(t.until + 'T23:59:59Z').getTime() > Date.now(), until: t.until };
+  } catch (e) { return { active: false }; }
+}
+function mcpServe() {
+  // s144 — MCP server over stdio (newline-delimited JSON-RPC · no dependencies). Free: check_text · check_file. Licence (7-day trial): check_dir.
+  const rl = require('readline').createInterface({ input: process.stdin });
+  const send = (o) => process.stdout.write(JSON.stringify(o) + '\n');
+  const tools = [
+    { name: 'check_text', description: S.name + ' - run all ' + RULE_N + ' checks on a text (free)', inputSchema: { type: 'object', properties: { text: { type: 'string', description: 'file contents' }, path: { type: 'string', description: 'optional file name for context' } }, required: ['text'] } },
+    { name: 'check_file', description: S.name + ' - run all checks on one file by path (free)', inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] } },
+    { name: 'check_dir', description: S.name + ' - sweep a folder and return every finding (licence; the full run is free for 7 days)', inputSchema: { type: 'object', properties: { dir: { type: 'string' }, ext: { type: 'string', description: 'optional extension filter, e.g. .html' } }, required: ['dir'] } }
+  ];
+  const result = (id, rows) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text: render(rows, 'text') }], structuredContent: { tool: S.name, rules: RULE_N, files: rows } } });
+  const fail = (id, text) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text }], isError: true } });
+  rl.on('line', async (line) => {
+    let m; try { m = JSON.parse(line); } catch (e) { return; }
+    const id = m.id, method = m.method;
+    if (method === 'initialize') return send({ jsonrpc: '2.0', id, result: { protocolVersion: '2025-06-18', capabilities: { tools: {} }, serverInfo: { name: '@readystack/' + S.bin, version: '1.0.0' } } });
+    if (method === 'notifications/initialized' || method === 'ping') { if (id !== undefined) send({ jsonrpc: '2.0', id, result: {} }); return; }
+    if (method === 'tools/list') return send({ jsonrpc: '2.0', id, result: { tools } });
+    if (method === 'tools/call') {
+      const name = (m.params || {}).name, args = (m.params || {}).arguments || {};
+      try {
+        if (name === 'check_text') return result(id, [{ file: args.path || '(text)', hits: scan(String(args.text || ''), args.path || '') }]);
+        if (name === 'check_file') return result(id, [{ file: args.path, hits: scan(fs.readFileSync(args.path, 'utf8'), args.path) }]);
+        if (name === 'check_dir') {
+          const r = await lic.ensure();
+          if (!r.ok && !trialState().active) return fail(id, S.need_key + ' Get a licence ($' + S.price + ', once, 7-day refund): ' + lic.BUY_URL);
+          const files = walk(args.dir, args.ext ? [args.ext] : (S.exts || []), []);
+          return result(id, files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t, f) }; }));
+        }
+        return send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'unknown tool ' + name } });
+      } catch (e) { return fail(id, String(e && e.message || e)); }
+    }
+    if (id !== undefined) send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'method not found: ' + method } });
+  });
+}
+function help() {
+  return [S.name + ' - ' + S.subtitle, '', 'Usage: ' + S.bin + ' <file> [more files]           check the files you name (free, every rule)',
+    '       ' + S.bin + ' --dir <folder> [--ext .html]  scan a whole folder            (licence)',
+    '       ' + S.bin + ' ... --report csv|json|html [--out file]   export a report   (licence)',
+    '       ' + S.bin + ' ... --ci                      exit 1 when an error-level finding exists (licence)',
+    '       ' + S.bin + ' --license <key>               store your licence key (or set READYSTACK_LICENSE)',
+    '       ' + S.bin + ' --rules                       list the ' + RULE_N + ' rules',
+    '       ' + S.bin + ' --mcp                         run as an MCP server (stdio) for Claude Code / Cursor / Windsurf - free checks, folder sweep needs a licence', '',
+    'Free: ' + S.free, 'Licence ($' + S.price + ', once, 7-day refund): ' + S.paid, 'Get a licence: ' + lic.BUY_URL, ''].join('\n');
+}
+(async function main() {
+  try { const _feed = await lic.pullFeed(); if (_feed && Array.isArray(_feed.rules)) { if (Array.isArray(ENGINE.RULES)) for (const r of _feed.rules) ENGINE.RULES.push(r); } } catch (e) {}   // ★s134 구독 피드 병합 (키 있는 손님만)
+  const a = process.argv.slice(2);
+  const get = (k) => { const i = a.indexOf(k); return i >= 0 ? a[i + 1] : null; };
+  if (a.includes('--mcp')) { mcpServe(); return; }
+  if (!a.length || a.includes('--help') || a.includes('-h')) { process.stdout.write(help()); return; }
+  if (a.includes('--rules')) { process.stdout.write((RULE_LIST.length ? RULE_LIST.map((r, i) => String(i + 1).padStart(3) + '  [' + (r.sev || 'warn') + '] ' + (r.message || r.msg || r.id || '')) : Array.from({ length: RULE_N }, (_, i) => String(i + 1).padStart(3) + '  [engine] check ' + (i + 1))).join('\n') + '\n'); return; }
+  if (a.includes('--license')) { const r = await lic.ensure(get('--license')); process.stdout.write(r.ok ? 'Licence stored: ' + lic.storePath() + '\n' : 'Licence not accepted (' + r.why + '). Get one: ' + lic.BUY_URL + '\n'); process.exit(r.ok ? 0 : 2); }
+  const dir = get('--dir'), fmt = get('--report'), out = get('--out'), ci = a.includes('--ci');
+  const exts = a.includes('--ext') ? [get('--ext')] : (S.exts || []);
+  const paid = !!(dir || fmt || ci);
+  if (paid) {
+    const r = await lic.ensure();
+    if (!r.ok) {
+      const t = trialState();   // s144 reverse trial: the full run is free for 7 days from the first paid use, then the key
+      if (t.active) process.stderr.write('Trial: the full run is free until ' + t.until + ' — after that $' + S.price + ' once (7-day refund). Get a licence: ' + lic.BUY_URL + '\n');
+      else { process.stderr.write(S.need_key + '\n  set READYSTACK_LICENSE=<key>  or  ' + S.bin + ' --license <key>\n  Get a licence ($' + S.price + ', once): ' + lic.BUY_URL + '\n'); process.exit(2); }
+    }
+  }
+  const files = dir ? walk(dir, exts, []) : a.filter((x, i) => !x.startsWith('--') && !['--dir', '--report', '--out', '--ext', '--license'].includes(a[i - 1]));
+  if (!files.length) { process.stderr.write('No files. ' + S.bin + ' --help\n'); process.exit(2); }
+  const rows = files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t) }; });
+  const text = render(rows, fmt || 'text');
+  if (out) fs.writeFileSync(out, text); else process.stdout.write(text.endsWith('\n') ? text : text + '\n');
+  const errors = rows.reduce((n, r) => n + r.hits.filter((h) => h.sev === 'error').length, 0);
+  if (ci && errors) process.exit(1);
+})().catch((e) => { process.stderr.write(String(e && e.stack || e) + '\n'); process.exit(3); });

package/engine.js

@@ -0,0 +1,67 @@
+// Auto-Renewal Checkout Lint — the brain. Same file runs in Node (VS Code) and in the browser (free web page).
+// Rules live in rules.json; this file decides how each rule reads the page.
+'use strict';
+var RULES = (typeof module !== 'undefined' && module.exports) ? require('./rules.json') : window.ARL_RULES;
+
+function rx(p) { return new RegExp(p, 'i'); }
+function anyMatch(pats, s) { for (var i = 0; i < (pats || []).length; i++) { if (rx(pats[i]).test(s)) return true; } return false; }
+function allMatch(pats, s) { for (var i = 0; i < (pats || []).length; i++) { if (!rx(pats[i]).test(s)) return false; } return true; }
+function firstLine(pats, lines) { for (var i = 0; i < lines.length; i++) { if (anyMatch(pats, lines[i])) return i + 1; } return 0; }
+function days(a, b) { return Math.round((Date.parse(a) - Date.parse(b)) / 86400000); }
+
+function check(text, opts) {
+  text = String(text == null ? '' : text);
+  opts = opts || {};
+  var today = /^\d{4}-\d{2}-\d{2}$/.test(String(opts.today || '')) ? String(opts.today) : new Date().toISOString().slice(0, 10);
+  var lines = text.split(/\r?\n/);
+  var findings = [];
+  var add = function (r, line, msg) { findings.push({ check: r.check, sev: r.sev || 'error', msg: msg || r.msg, line: line || 1 }); };
+
+  for (var i = 0; i < RULES.length; i++) {
+    var r = RULES[i];
+    var mode = r.mode || 'doc';
+
+    if (mode === 'doc') {
+      var t = firstLine(r.trigger, lines);
+      if (!t) continue;
+      if (anyMatch(r.required, text)) continue;
+      add(r, t);
+
+    } else if (mode === 'line') {
+      var hits = 0;
+      for (var j = 0; j < lines.length && hits < 5; j++) {
+        var ln = lines[j];
+        if (r.any && !anyMatch(r.any, ln)) continue;
+        if (r.all && !allMatch(r.all, ln)) continue;
+        if (r.unless && anyMatch(r.unless, ln)) continue;
+        add(r, j + 1); hits++;
+      }
+
+    } else if (mode === 'near') {
+      var win = r.window || 12, shown = 0;
+      for (var k = 0; k < lines.length && shown < 3; k++) {
+        if (!anyMatch(r.trigger, lines[k])) continue;
+        var near = false;
+        for (var m = Math.max(0, k - win); m <= Math.min(lines.length - 1, k + win); m++) {
+          if (anyMatch(r.near, lines[m])) { near = true; break; }
+        }
+        if (!near) { add(r, k + 1); shown++; }
+      }
+
+    } else if (mode === 'deadline') {
+      var d = firstLine(r.trigger, lines);
+      if (!d) continue;
+      var gap = days(today, r.date);
+      var when = gap >= 0
+        ? ('has been in force since ' + r.date + ' — ' + gap + ' day' + (gap === 1 ? '' : 's') + ', so every point above is already enforceable')
+        : ('takes effect ' + r.date + ' — ' + (-gap) + ' day' + (gap === -1 ? '' : 's') + ' left to ship the fixes');
+      add(r, d, r.msg.replace('{when}', when));
+    }
+  }
+
+  findings.sort(function (a, b) { return (a.line - b.line) || a.check.localeCompare(b.check); });
+  return { findings: findings, checked: RULES.length, today: today };
+}
+
+var API = { engine: { check: check }, RULES: RULES, RULE_COUNT: RULES.length };
+if (typeof module !== 'undefined' && module.exports) module.exports = API; else window.ARLENGINE = API;

package/license.js

@@ -0,0 +1,64 @@
+// license.js — Polar licence check for the CLI / container. Generated by adapters.py; do not edit by hand.
+'use strict';
+const https = require('https'), fs = require('fs'), path = require('path'), os = require('os');
+const ORG_ID = 'a5cdf664-d8e7-4f87-8895-056717aaba17';
+const BENEFIT_ID = '947cdd9a-6fd6-4f5e-b30e-4dd8e633f60c';   // s142 — this product's Polar benefit (s140 law: ask with benefit_id, or one key opens every product)
+const BUY_URL = 'https://buy.polar.sh/polar_cl_ysb3yWUhknvn2fWoPwchsZqFfbA3X5hijEY2x1jBBhw';
+const SLUG = 'autorenew-signup-lint';
+const GRACE_MS = 30 * 24 * 3600 * 1000;   // after a successful check, 30 days work offline
+const RECHECK_MS = 7 * 24 * 3600 * 1000;  // re-ask Polar every 7 days (refunds / cancellations)
+function storePath() { return path.join(process.env.READYSTACK_HOME || path.join(os.homedir(), '.config', 'readystack'), SLUG + '.json'); }
+function load() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')); } catch (e) { return {}; } }
+function save(o) { try { fs.mkdirSync(path.dirname(storePath()), { recursive: true }); fs.writeFileSync(storePath(), JSON.stringify(o)); } catch (e) { /* read-only home: still works for this run */ } }
+function validate(key) {
+  return new Promise(function (resolve) {
+    if (!ORG_ID) return resolve({ ok: false, offline: false });
+    const body = JSON.stringify(/^[0-9a-f-]{36}$/.test(BENEFIT_ID) ? { key: key, organization_id: ORG_ID, benefit_id: BENEFIT_ID } : { key: key, organization_id: ORG_ID });
+    const req = https.request({ hostname: 'api.polar.sh', path: '/v1/customer-portal/license-keys/validate', method: 'POST', timeout: 8000,
+      headers: { 'content-type': 'application/json', 'polar-version': '2026-04', 'content-length': Buffer.byteLength(body) } }, function (res) {
+      let buf = ''; res.on('data', function (d) { buf += d; });
+      res.on('end', function () {
+        if (res.statusCode !== 200) return resolve({ ok: false, offline: false });
+        try { const j = JSON.parse(buf); resolve({ ok: j && (j.status === 'granted' || j.valid === true || !!j.id), offline: false }); }
+        catch (e) { resolve({ ok: false, offline: false }); }
+      });
+    });
+    req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
+    req.on('error', function () { resolve({ ok: false, offline: true }); });
+    req.write(body); req.end();
+  });
+}
+async function ensure(explicitKey) {
+  const st = load();
+  const key = explicitKey || process.env.READYSTACK_LICENSE || st.key;
+  if (!key) return { ok: false, why: 'no_key' };
+  const age = Date.now() - (st.okAt || 0);
+  if (!explicitKey && st.key === key && age < RECHECK_MS) return { ok: true, cached: true };
+  const r = await validate(String(key).trim());
+  if (r.ok) { save({ key: String(key).trim(), okAt: Date.now() }); return { ok: true }; }
+  if (r.offline && st.key === key && age < GRACE_MS) return { ok: true, offline: true };
+  return { ok: false, why: r.offline ? 'offline' : 'invalid' };
+}
+// ★s134 — 구독 규칙 피드(층3 "바뀌면 업데이트"): 키 있는 손님만 · 7일마다 · 오프라인은 캐시. 워커 GET /api/rules/<slug>?key=
+const FEED_URL = 'https://getreadystack.com/api/rules/';
+function pullFeed() {
+  const st = load(); const key = process.env.READYSTACK_LICENSE || st.key; const cached = st.feed || null;
+  if (!key) return Promise.resolve(cached);
+  if (cached && (Date.now() - (st.feedAt || 0)) < RECHECK_MS) return Promise.resolve(cached);
+  return new Promise(function (resolve) {
+    let req;
+    try {
+      req = https.get(FEED_URL + encodeURIComponent(SLUG) + '?key=' + encodeURIComponent(key), { timeout: 8000, headers: { 'user-agent': 'readystack-cli' } }, function (res) {
+        let buf = ''; res.on('data', function (d) { buf += d; });
+        res.on('end', function () {
+          if (res.statusCode !== 200) return resolve(cached);
+          try { const j = JSON.parse(buf); if (!j || !Array.isArray(j.rules)) return resolve(cached); save(Object.assign(load(), { feed: j, feedAt: Date.now() })); resolve(j); }
+          catch (e) { resolve(cached); }
+        });
+      });
+    } catch (e) { return resolve(cached); }
+    req.on('timeout', function () { req.destroy(); resolve(cached); });
+    req.on('error', function () { resolve(cached); });
+  });
+}
+module.exports = { ensure, BUY_URL, storePath, pullFeed };

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@readystack/autorenew-signup-lint",
+  "version": "1.0.0",
+  "description": "Sixteen statutory checks on the signup page AB 2863 rewrote, in your editor and in the browser",
+  "license": "SEE LICENSE IN LICENSE.txt",
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "auto-renewal",
+    "subscription",
+    "checkout",
+    "california-arl",
+    "ab-2863",
+    "click-to-cancel",
+    "negative-option",
+    "compliance",
+    "dark-patterns"
+  ],
+  "homepage": "https://getreadystack.com",
+  "funding": "https://buy.polar.sh/polar_cl_ysb3yWUhknvn2fWoPwchsZqFfbA3X5hijEY2x1jBBhw",
+  "bin": {
+    "autorenew-signup-lint": "cli.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "mcpName": "io.github.jmshinhwa/autorenew-signup-lint",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jmshinhwa/readystack-themes.git",
+    "directory": "autorenew-signup-lint"
+  },
+  "files": [
+    "cli.js",
+    "license.js",
+    "rules.json",
+    "strings.json",
+    "README.md",
+    "LICENSE.txt",
+    "engine.js"
+  ]
+}

package/rules.json

@@ -0,0 +1,273 @@
+[
+ {
+  "check": "arl_renewal_term_missing",
+  "sev": "error",
+  "mode": "doc",
+  "trigger": [
+   "auto[- ]?renew",
+   "renews automatically",
+   "billed (monthly|annually|yearly|every)",
+   "recurring (charge|payment|billing)",
+   "\\$\\s?\\d[\\d.,]*\\s*(/|per\\s+)?\\s*(mo\\b|month|yr\\b|year)",
+   "free trial",
+   "start (my |your )?(free )?trial",
+   "subscribe",
+   "subscription"
+  ],
+  "required": [
+   "until (you )?cancel",
+   "continues? until cancell?ed",
+   "renews? (each|every) (month|year)",
+   "until cancell?ed"
+  ],
+  "msg": "Auto-renewal is offered but the page never says the plan keeps renewing until the customer cancels. That term is part of the automatic renewal offer under Cal. Bus. & Prof. Code 17601(b) and must be shown before consent."
+ },
+ {
+  "check": "arl_recurring_price_missing",
+  "sev": "error",
+  "mode": "doc",
+  "trigger": [
+   "auto[- ]?renew",
+   "renews automatically",
+   "billed (monthly|annually|yearly|every)",
+   "recurring (charge|payment|billing)",
+   "\\$\\s?\\d[\\d.,]*\\s*(/|per\\s+)?\\s*(mo\\b|month|yr\\b|year)",
+   "free trial",
+   "start (my |your )?(free )?trial",
+   "subscribe",
+   "subscription"
+  ],
+  "required": [
+   "\\$\\s?\\d[\\d.,]*\\s*(/|per\\s+)?\\s*(mo\\b|month|yr\\b|year)",
+   "\\$\\s?\\d[\\d.,]*\\s+(a|per|every)\\s+(month|year)",
+   "\\d+\\s*(USD|dollars)\\s*(a|per)\\s*(month|year)"
+  ],
+  "msg": "No recurring amount with its frequency anywhere on the page. The charge and how often it repeats must be clear and conspicuous in the offer, not only on the receipt."
+ },
+ {
+  "check": "arl_prechecked_consent",
+  "sev": "error",
+  "mode": "line",
+  "any": [
+   "<input[^>]*checkbox[^>]*\\bchecked(?![\\w=-])",
+   "<input[^>]*\\bchecked(?![\\w=-])[^>]*checkbox",
+   "checkbox[^>]*\\bdefaultChecked(?!\\s*=\\s*\\{?false)",
+   "\\bdefaultChecked[^>]*checkbox",
+   "\\bchecked\\s*[:=]\\s*\\{?true"
+  ],
+  "msg": "This consent box arrives pre-ticked. A pre-checked box is not the affirmative consent AB 2863 requires; the customer has to act to accept the renewal terms."
+ },
+ {
+  "check": "arl_consent_bundled",
+  "sev": "error",
+  "mode": "line",
+  "all": [
+   "type=[\\\"']?checkbox|<label|role=[\\\"']checkbox|defaultChecked",
+   "terms of (service|use)|terms and conditions|privacy policy",
+   "auto[- ]?renew|recurring|renews|subscription"
+  ],
+  "msg": "One control accepts the terms of service and the auto-renewal offer together. AB 2863 requires consent to the automatic renewal terms to be collected separately from every other term."
+ },
+ {
+  "check": "arl_no_consent_control",
+  "sev": "warn",
+  "mode": "doc",
+  "trigger": [
+   "auto[- ]?renew",
+   "renews automatically",
+   "billed (monthly|annually|yearly|every)",
+   "recurring (charge|payment|billing)",
+   "\\$\\s?\\d[\\d.,]*\\s*(/|per\\s+)?\\s*(mo\\b|month|yr\\b|year)",
+   "free trial",
+   "start (my |your )?(free )?trial",
+   "subscribe",
+   "subscription"
+  ],
+  "required": [
+   "type=[\\\"']?checkbox",
+   "role=[\\\"']checkbox",
+   "<input[^>]*checkbox"
+  ],
+  "msg": "No separate consent control appears on the page. The renewal terms have to be accepted, not merely displayed next to a Pay button."
+ },
+ {
+  "check": "arl_cancel_path_missing",
+  "sev": "error",
+  "mode": "doc",
+  "trigger": [
+   "auto[- ]?renew",
+   "renews automatically",
+   "billed (monthly|annually|yearly|every)",
+   "recurring (charge|payment|billing)",
+   "\\$\\s?\\d[\\d.,]*\\s*(/|per\\s+)?\\s*(mo\\b|month|yr\\b|year)",
+   "free trial",
+   "start (my |your )?(free )?trial",
+   "subscribe",
+   "subscription"
+  ],
+  "required": [
+   "cancel (any ?time|online|whenever|at will)",
+   "cancel (your |the )?(subscription|plan|membership)",
+   "href=[\\\"'][^\\\"']*cancel",
+   "/cancel",
+   "cancellation policy"
+  ],
+  "msg": "Nothing tells the customer how to cancel. An offer accepted online must be cancellable online, and the cancellation policy is one of the terms that has to be disclosed up front."
+ },
+ {
+  "check": "arl_cancel_requires_human",
+  "sev": "error",
+  "mode": "line",
+  "any": [
+   "(call|phone|speak (to|with)|contact (us|support|customer service)|live (agent|chat)|email us|chat with)[^.<\\n]{0,60}cancel",
+   "cancel[^.<\\n]{0,60}(call us|call our|by phone|contact (us|support)|speak (to|with)|live agent|send us an email)"
+  ],
+  "msg": "Cancellation is routed through a person. Someone who subscribed online must be able to cancel online, at will, without being made to talk to anyone first."
+ },
+ {
+  "check": "arl_trial_price_after_missing",
+  "sev": "error",
+  "mode": "doc",
+  "trigger": [
+   "free trial",
+   "trial period",
+   "\\d+[- ]day trial",
+   "try (it )?free"
+  ],
+  "required": [
+   "(then|after (the|your) trial|when (the|your) trial ends|at the end of (the|your) trial|once the trial ends)[^.<\\n]{0,80}\\$\\s?\\d",
+   "\\$\\s?\\d[^.<\\n]{0,80}(after (the|your) trial|when (the|your) trial ends|once the trial ends)"
+  ],
+  "msg": "A free trial converts here with no price named for what comes after it. The post-trial charge and the day it starts belong to the offer terms the customer consents to."
+ },
+ {
+  "check": "arl_trial_reminder_missing",
+  "sev": "warn",
+  "mode": "doc",
+  "trigger": [
+   "free trial",
+   "trial period",
+   "\\d+[- ]day trial",
+   "try (it )?free"
+  ],
+  "required": [
+   "remind(er|s)?\\b",
+   "we(’|')?ll (email|notify|let you know)",
+   "we will (email|notify)",
+   "notice before",
+   "3[-–]21 days"
+  ],
+  "msg": "For a free or discounted trial longer than 31 days, AB 2863 wants a notice 3 to 21 days before it converts to a paid term. Nothing on this page promises one."
+ },
+ {
+  "check": "arl_intro_price_no_regular",
+  "sev": "warn",
+  "mode": "doc",
+  "trigger": [
+   "first (month|year|\\d+ months?)",
+   "intro(ductory)? (price|offer|rate)",
+   "for the first \\d+",
+   "\\d+% off"
+  ],
+  "required": [
+   "(then|after that|thereafter|regular price|renews at|standard price|full price)[^.<\\n]{0,60}\\$\\s?\\d",
+   "\\$\\s?\\d[^.<\\n]{0,40}(thereafter|after the (first|intro)|regular price)"
+  ],
+  "msg": "An introductory price is advertised without the regular price that follows it or the date it starts. A promotional rate does not change what has to be disclosed about the renewal."
+ },
+ {
+  "check": "arl_annual_reminder_missing",
+  "sev": "warn",
+  "mode": "doc",
+  "trigger": [
+   "billed (annually|yearly)",
+   "per year",
+   "/\\s?(yr|year)\\b",
+   "annual (plan|subscription|billing)",
+   "12[- ]month"
+  ],
+  "required": [
+   "(annual|yearly|once a year) reminder",
+   "remind you (each|every) year",
+   "15[-–]45 days",
+   "reminder[^.<\\n]{0,40}before (each|every|your)",
+   "before (each|your) (annual )?renewal"
+  ],
+  "msg": "A term of a year or longer with no annual reminder anywhere. AB 2863 requires notice at least once a year, 15 to 45 days before the renewal date."
+ },
+ {
+  "check": "arl_consent_record_missing",
+  "sev": "info",
+  "mode": "doc",
+  "trigger": [
+   "type=[\\\"']?checkbox",
+   "role=[\\\"']checkbox"
+  ],
+  "required": [
+   "consent(ed)?[_-]?(at|date|timestamp)",
+   "data-arl",
+   "agreed_?At",
+   "accepted_?At",
+   "consentTimestamp",
+   "name=[\\\"']consent"
+  ],
+  "msg": "Nothing on the page captures what was shown and when it was accepted. The business has to keep proof of the customer's consent for three years, and a screenshot of the design is not it."
+ },
+ {
+  "check": "arl_vacated_ftc_rule",
+  "sev": "error",
+  "mode": "line",
+  "any": [
+   "click[- ]to[- ]cancel rule",
+   "FTC[^.<\\n]{0,40}negative[- ]option rule",
+   "negative[- ]option rule[^.<\\n]{0,40}(takes effect|effective|requires|compliant)"
+  ],
+  "msg": "This page leans on the FTC click-to-cancel (Negative Option) Rule. The Eighth Circuit vacated that rule on 2025-07-08, so it binds nobody; California's ARL is what still governs this checkout."
+ },
+ {
+  "check": "arl_disclosure_not_adjacent",
+  "sev": "warn",
+  "mode": "near",
+  "window": 12,
+  "trigger": [
+   "<button[^>]*type=[\\\"']?submit",
+   "type=[\\\"']?submit",
+   "<button[^>]*>\\s*(subscribe|start|continue|pay|place order|sign up|upgrade)"
+  ],
+  "near": [
+   "until (you )?cancel",
+   "renews? (each|every|automatically)",
+   "\\$\\s?\\d[\\d.,]*\\s*(/|per\\s+)?\\s*(mo\\b|month|yr\\b|year)",
+   "cancel any ?time"
+  ],
+  "msg": "The submit control sits more than 12 lines away from any statement of the renewal terms. The law asks for those terms in visual proximity to the request for consent, not further down the page."
+ },
+ {
+  "check": "arl_retention_maze",
+  "sev": "warn",
+  "mode": "line",
+  "all": [
+   "cancel",
+   "are you sure|before you go|wait[!,]|keep (my|your) (plan|subscription|benefits)|don'?t (go|leave)|stay with us"
+  ],
+  "msg": "A save offer stands between the customer and cancelling. A retention step is allowed only if a plain cancel control stays visible on the same screen and works immediately."
+ },
+ {
+  "check": "arl_in_force",
+  "sev": "info",
+  "mode": "deadline",
+  "date": "2026-01-01",
+  "trigger": [
+   "auto[- ]?renew",
+   "renews automatically",
+   "billed (monthly|annually|yearly|every)",
+   "recurring (charge|payment|billing)",
+   "\\$\\s?\\d[\\d.,]*\\s*(/|per\\s+)?\\s*(mo\\b|month|yr\\b|year)",
+   "free trial",
+   "start (my |your )?(free )?trial",
+   "subscribe",
+   "subscription"
+  ],
+  "msg": "Auto-renewal offer detected. California's Automatic Renewal Law as amended by AB 2863 {when}. Goods or services billed in violation are an unconditional gift to the customer under Cal. Bus. & Prof. Code 17603."
+ }
+]

package/strings.json

@@ -0,0 +1,10 @@
+{
+ "name": "Auto-Renewal Signup Lint (California ARL)",
+ "subtitle": "Sixteen statutory checks on the signup page AB 2863 rewrote, in your editor and in the browser",
+ "bin": "autorenew-signup-lint",
+ "price": 29,
+ "free": "Check the signup or pricing page open in the editor against all 16 rules, free and unlimited, plus the same engine free in the browser.",
+ "paid": "Sweep every matching page in the workspace and write one dated report file into the folder, yours to keep and attach to a review.",
+ "need_key": "This option needs a licence (Auto-Renewal Signup Lint (California ARL)).",
+ "exts": []
+}