@readystack/gitlab-ci-break-lint 1.0.0

package/LICENSE.txt

@@ -0,0 +1,16 @@
+GitLab CI Break Lint — Licence
+
+Free scope
+  Lint the .gitlab-ci.yml you have open and name every retired keyword, invalid job wiring and GitHub Actions leftover, with the replacement line for each. is free for any use, personal or commercial, for as long as you keep the
+  extension installed, and the online check at the product page is free without registration.
+
+Paid scope
+  Scan every pipeline file in the repository in one pass and export a dated Markdown upgrade report you can attach to the change ticket. is the paid part. It asks for a licence key issued at purchase (one seat, one key;
+  7-day full refund, no questions). The key is checked against the payment provider and
+  cached locally for 30 days so it keeps working offline.
+
+Redistribution
+  You may not resell, re-host or bundle this extension or its rule set. The rule set and the
+  engine are provided as-is; check results are advisory and do not constitute legal advice.
+
+(c) ReadyStack — https://getreadystack.com

package/README.md

@@ -0,0 +1,54 @@
+# GitLab CI Break Lint
+
+![GitLab CI Break Lint](https://getreadystack.com/img/promo/sku139792_result_card.jpg)
+
+Names the .gitlab-ci.yml lines your runner will reject after the next GitLab major upgrade
+
+## Install
+
+```
+npx @readystack/gitlab-ci-break-lint file
+```
+
+Node 18+. The same 16 rules as the VS Code extension, from a terminal or CI.
+
+## Free
+
+- Lint the pipeline file you have open and get every retired keyword, GitHub Actions leftover and invalid job wiring with its line number and its replacement line.
+- `--rules` lists every rule
+
+## With a licence ($29 once)
+
+- Scan every pipeline file in the repository in one pass and export a dated Markdown upgrade report (file, line, keyword, replacement) to attach to the change ticket.
+
+```
+@readystack/gitlab-ci-break-lint --dir ./templates --report html --out report.html
+```
+
+A freelance DevOps engineer's hour runs about $100, and reading a repository's pipelines by hand against a removals list is most of a morning.
+
+## Use from an AI agent (MCP)
+
+Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
+
+```json
+{ "mcpServers": { "gitlab-ci-break-lint": { "command": "npx", "args": ["-y", "@readystack/gitlab-ci-break-lint", "--mcp"] } } }
+```
+
+Tools: `check_text` and `check_file` (free) · `check_dir` (licence; the full sweep is free for 7 days). The agent gets every finding with the line number.
+
+## Use in CI
+
+```yaml
+- name: GitLab CI Break Lint
+  run: npx -y @readystack/gitlab-ci-break-lint --dir . --ci
+```
+
+(container: `docker run --rm -v "$PWD:/work" getreadystack/gitlab-ci-break-lint --dir /work --ci`)
+
+Try the full run free for 7 days — no key needed. Then one licence, 7-day refund, no questions. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
+
+[Get a licence](https://buy.polar.sh/polar_cl_d7bGnhvRyjV580fnsaQ89C7TIU15QgC3kcWpO0NZLGc)
+
+
+<!-- gitlab ci break lint -->

package/cli.js

@@ -0,0 +1,121 @@
+#!/usr/bin/env node
+// cli.js — the same rules as the VS Code extension, run from a terminal or a container. Generated by adapters.py.
+'use strict';
+const fs = require('fs'), path = require('path');
+const RULES = require('./rules.json');
+const S = require('./strings.json');
+const lic = require('./license.js');
+const ENGINE = require('./engine.js');   // s144 — scaffold products: the same engine the VS Code extension runs
+const RULE_LIST = Array.isArray(ENGINE.RULES) ? ENGINE.RULES : (Array.isArray(RULES) ? RULES : []);
+const RULE_N = ENGINE.RULE_COUNT || RULE_LIST.length;
+function scan(text, file) {
+  const r = ENGINE.engine.check(String(text), { today: new Date().toISOString().slice(0, 10), path: file || '' });
+  return (r && r.findings || []).map((f) => ({ line: parseInt(f.line, 10) || 1, msg: String(f.msg || f.message || f.check || ''), fix: f.fix || null, sev: (String(f.sev || 'error').toLowerCase().startsWith('err') ? 'error' : 'warn') }));
+}
+function isText(p) { try { const b = fs.readFileSync(p); if (b.length > 2 * 1024 * 1024) return false; const s = b.subarray(0, 4096); for (const x of s) if (x === 0) return false; return true; } catch (e) { return false; } }
+function walk(dir, exts, out) {
+  let ents = []; try { ents = fs.readdirSync(dir, { withFileTypes: true }); } catch (e) { return out; }
+  for (const e of ents) {
+    if (e.name === 'node_modules' || e.name === '.git' || e.name.startsWith('.')) continue;
+    const p = path.join(dir, e.name);
+    if (e.isDirectory()) walk(p, exts, out);
+    else if ((!exts.length || exts.includes(path.extname(e.name).toLowerCase())) && isText(p)) out.push(p);
+  }
+  return out;
+}
+function esc(s) { return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;'); }
+function csvq(s) { return '"' + String(s == null ? '' : s).replace(/"/g, '""') + '"'; }
+function render(rows, fmt) {
+  if (fmt === 'json') return JSON.stringify({ tool: S.name, rules: RULE_N, files: rows }, null, 1);
+  if (fmt === 'csv') { const o = ['file,line,severity,message,fix']; for (const r of rows) for (const h of r.hits) o.push([csvq(r.file), h.line, h.sev, csvq(h.msg), csvq(h.fix)].join(',')); return o.join('\n') + '\n'; }
+  if (fmt === 'html') {
+    const n = rows.reduce((a, r) => a + r.hits.length, 0);
+    let o = '<!doctype html><meta charset="utf-8"><title>' + esc(S.name) + ' report</title><style>body{font:14px system-ui;margin:24px}table{border-collapse:collapse}td,th{border:1px solid #ddd;padding:4px 8px;font-size:13px}code{font-family:ui-monospace,monospace}</style>';
+    o += '<h1>' + esc(S.name) + '</h1><p>' + rows.length + ' files · ' + n + ' findings · ' + RULE_N + ' rules</p><table><tr><th>file</th><th>line</th><th>sev</th><th>message</th><th>fix</th></tr>';
+    for (const r of rows) for (const h of r.hits) o += '<tr><td><code>' + esc(r.file) + '</code></td><td>' + h.line + '</td><td>' + esc(h.sev) + '</td><td>' + esc(h.msg) + '</td><td>' + esc(h.fix || '') + '</td></tr>';
+    return o + '</table>';
+  }
+  let o = ''; for (const r of rows) { o += r.file + '\n'; for (const h of r.hits) o += '  ' + String(h.line).padStart(5) + '  ' + h.sev.padEnd(5) + ' ' + h.msg + (h.fix ? '\n         -> ' + h.fix : '') + '\n'; if (!r.hits.length) o += '  (no findings)\n'; }
+  return o;
+}
+function trialState() {
+  if (process.env.READYSTACK_NO_TRIAL) return { active: false };
+  try {
+    const p = path.join(path.dirname(lic.storePath()), S.bin + '.trial.json');
+    let t = null; try { t = JSON.parse(fs.readFileSync(p, 'utf8')); } catch (e) {}
+    if (!t || !t.until) { t = { until: new Date(Date.now() + 7 * 24 * 3600 * 1000).toISOString().slice(0, 10) }; fs.mkdirSync(path.dirname(p), { recursive: true }); fs.writeFileSync(p, JSON.stringify(t)); }
+    return { active: new Date(t.until + 'T23:59:59Z').getTime() > Date.now(), until: t.until };
+  } catch (e) { return { active: false }; }
+}
+function mcpServe() {
+  process.env.READYSTACK_MCP = '1';   // s152 - 에이전트(Claude Code·Cursor)가 부른 세션은 사람 자리다 · 키 판 핑 src=mcp
+  // s144 — MCP server over stdio (newline-delimited JSON-RPC · no dependencies). Free: check_text · check_file. Licence (7-day trial): check_dir.
+  const rl = require('readline').createInterface({ input: process.stdin });
+  const send = (o) => process.stdout.write(JSON.stringify(o) + '\n');
+  const tools = [
+    { name: 'check_text', description: S.name + ' - run all ' + RULE_N + ' checks on a text (free)', inputSchema: { type: 'object', properties: { text: { type: 'string', description: 'file contents' }, path: { type: 'string', description: 'optional file name for context' } }, required: ['text'] } },
+    { name: 'check_file', description: S.name + ' - run all checks on one file by path (free)', inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] } },
+    { name: 'check_dir', description: S.name + ' - sweep a folder and return every finding (licence; the full run is free for 7 days)', inputSchema: { type: 'object', properties: { dir: { type: 'string' }, ext: { type: 'string', description: 'optional extension filter, e.g. .html' } }, required: ['dir'] } }
+  ];
+  const result = (id, rows) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text: render(rows, 'text') }], structuredContent: { tool: S.name, rules: RULE_N, files: rows } } });
+  const fail = (id, text) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text }], isError: true } });
+  rl.on('line', async (line) => {
+    let m; try { m = JSON.parse(line); } catch (e) { return; }
+    const id = m.id, method = m.method;
+    if (method === 'initialize') return send({ jsonrpc: '2.0', id, result: { protocolVersion: '2025-06-18', capabilities: { tools: {} }, serverInfo: { name: '@readystack/' + S.bin, version: '1.0.0' } } });
+    if (method === 'notifications/initialized' || method === 'ping') { if (id !== undefined) send({ jsonrpc: '2.0', id, result: {} }); return; }
+    if (method === 'tools/list') return send({ jsonrpc: '2.0', id, result: { tools } });
+    if (method === 'tools/call') {
+      const name = (m.params || {}).name, args = (m.params || {}).arguments || {};
+      try {
+        if (name === 'check_text') return result(id, [{ file: args.path || '(text)', hits: scan(String(args.text || ''), args.path || '') }]);
+        if (name === 'check_file') return result(id, [{ file: args.path, hits: scan(fs.readFileSync(args.path, 'utf8'), args.path) }]);
+        if (name === 'check_dir') {
+          const r = await lic.ensure();
+          if (!r.ok && !trialState().active) return fail(id, S.need_key + ' Get a licence ($' + S.price + ', once, 7-day refund): ' + lic.BUY_URL);
+          const files = walk(args.dir, args.ext ? [args.ext] : (S.exts || []), []);
+          return result(id, files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t, f) }; }));
+        }
+        return send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'unknown tool ' + name } });
+      } catch (e) { return fail(id, String(e && e.message || e)); }
+    }
+    if (id !== undefined) send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'method not found: ' + method } });
+  });
+}
+function help() {
+  return [S.name + ' - ' + S.subtitle, '', 'Usage: ' + S.bin + ' <file> [more files]           check the files you name (free, every rule)',
+    '       ' + S.bin + ' --dir <folder> [--ext .html]  scan a whole folder            (licence)',
+    '       ' + S.bin + ' ... --report csv|json|html [--out file]   export a report   (licence)',
+    '       ' + S.bin + ' ... --ci                      exit 1 when an error-level finding exists (licence)',
+    '       ' + S.bin + ' --license <key>               store your licence key (or set READYSTACK_LICENSE)',
+    '       ' + S.bin + ' --rules                       list the ' + RULE_N + ' rules',
+    '       ' + S.bin + ' --mcp                         run as an MCP server (stdio) for Claude Code / Cursor / Windsurf - free checks, folder sweep needs a licence', '',
+    'Free: ' + S.free, 'Licence ($' + S.price + ', once, 7-day refund): ' + S.paid, 'Get a licence: ' + lic.BUY_URL, ''].join('\n');
+}
+(async function main() {
+  try { const _feed = await lic.pullFeed(); if (_feed && Array.isArray(_feed.rules)) { if (Array.isArray(ENGINE.RULES)) for (const r of _feed.rules) ENGINE.RULES.push(r); } } catch (e) {}   // ★s134 구독 피드 병합 (키 있는 손님만)
+  const a = process.argv.slice(2);
+  const get = (k) => { const i = a.indexOf(k); return i >= 0 ? a[i + 1] : null; };
+  if (a.includes('--mcp')) { mcpServe(); return; }
+  if (!a.length || a.includes('--help') || a.includes('-h')) { process.stdout.write(help()); return; }
+  if (a.includes('--rules')) { process.stdout.write((RULE_LIST.length ? RULE_LIST.map((r, i) => String(i + 1).padStart(3) + '  [' + (r.sev || 'warn') + '] ' + (r.message || r.msg || r.id || '')) : Array.from({ length: RULE_N }, (_, i) => String(i + 1).padStart(3) + '  [engine] check ' + (i + 1))).join('\n') + '\n'); return; }
+  if (a.includes('--license')) { const r = await lic.ensure(get('--license')); process.stdout.write(r.ok ? 'Licence stored: ' + lic.storePath() + '\n' : 'Licence not accepted (' + r.why + '). Get one: ' + lic.BUY_URL + '\n'); process.exit(r.ok ? 0 : 2); }
+  const dir = get('--dir'), fmt = get('--report'), out = get('--out'), ci = a.includes('--ci');
+  const exts = a.includes('--ext') ? [get('--ext')] : (S.exts || []);
+  const paid = !!(dir || fmt || ci);
+  if (paid) {
+    const r = await lic.ensure();
+    if (!r.ok) {
+      const t = trialState();   // s144 reverse trial: the full run is free for 7 days from the first paid use, then the key
+      if (t.active) process.stderr.write('Trial: the full run is free until ' + t.until + ' — after that $' + S.price + ' once (7-day refund). Get a licence: ' + lic.BUY_URL + '\n');
+      else { process.stderr.write(S.need_key + '\n  set READYSTACK_LICENSE=<key>  or  ' + S.bin + ' --license <key>\n  Get a licence ($' + S.price + ', once): ' + lic.BUY_URL + '\n'); process.exit(2); }
+    }
+  }
+  const files = dir ? walk(dir, exts, []) : a.filter((x, i) => !x.startsWith('--') && !['--dir', '--report', '--out', '--ext', '--license'].includes(a[i - 1]));
+  if (!files.length) { process.stderr.write('No files. ' + S.bin + ' --help\n'); process.exit(2); }
+  const rows = files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t) }; });
+  const text = render(rows, fmt || 'text');
+  if (out) fs.writeFileSync(out, text); else process.stdout.write(text.endsWith('\n') ? text : text + '\n');
+  const errors = rows.reduce((n, r) => n + r.hits.filter((h) => h.sev === 'error').length, 0);
+  if (ci && errors) process.exit(1);
+})().catch((e) => { process.stderr.write(String(e && e.stack || e) + '\n'); process.exit(3); });

package/engine.js

@@ -0,0 +1,193 @@
+/* GitLab CI Break Lint - engine. Same file runs in Node (extension) and in the browser (web page). */
+(function () {
+  'use strict';
+
+  var RULES = (typeof module !== 'undefined' && module.exports)
+    ? require('./rules.json')
+    : window.GLCI_RULES;
+
+  var BY_ID = {};
+  for (var r = 0; r < RULES.length; r++) BY_ID[RULES[r].id] = RULES[r];
+
+  var RESERVED = {
+    stages: 1, types: 1, variables: 1, include: 1, default: 1, workflow: 1,
+    image: 1, services: 1, before_script: 1, after_script: 1, script: 1,
+    cache: 1, on: 1, jobs: 1, run: 1, name: 1
+  };
+
+  function strip(line) {
+    var m = /^(\s*)([\s\S]*)$/.exec(line);
+    var body = m[2].replace(/(^|\s)#.*$/, '$1');
+    return m[1] + body.replace(/\s+$/, '');
+  }
+
+  function indentOf(line) { return /^(\s*)/.exec(line)[1].length; }
+
+  function unquote(v) {
+    return String(v).trim().replace(/^['"]|['"]$/g, '').trim();
+  }
+
+  function parse(text) {
+    var lines = String(text == null ? '' : text).split(/\r?\n/).map(strip);
+    var tops = [];
+    for (var i = 0; i < lines.length; i++) {
+      var l = lines[i];
+      if (!l.trim() || indentOf(l) !== 0) continue;
+      var m = /^([A-Za-z_.][A-Za-z0-9_.\-]*):(\s[\s\S]*)?$/.exec(l);
+      if (m) tops.push({ name: m[1], inline: (m[2] || '').trim(), start: i });
+    }
+    for (var j = 0; j < tops.length; j++) {
+      tops[j].end = (j + 1 < tops.length) ? tops[j + 1].start : lines.length;
+    }
+    return { lines: lines, tops: tops };
+  }
+
+  function listUnder(lines, start, end, baseIndent) {
+    var out = [];
+    for (var i = start; i < end; i++) {
+      if (!lines[i].trim()) continue;
+      if (indentOf(lines[i]) <= baseIndent) break;
+      var m = /^\s*-\s*(.+)$/.exec(lines[i]);
+      if (!m) break;
+      out.push({ value: unquote(m[1]), line: i });
+    }
+    return out;
+  }
+
+  function inlineList(raw) {
+    var m = /^\[([\s\S]*)\]$/.exec(raw.trim());
+    if (!m) return null;
+    return m[1].split(',').map(unquote).filter(function (s) { return s; });
+  }
+
+  function check(text, opts) {
+    opts = opts || {};
+    var p = parse(text);
+    var lines = p.lines, tops = p.tops;
+    var findings = [];
+    var seen = {};
+
+    function add(id, line, extra) {
+      var rule = BY_ID[id] || { sev: 'error', title: id, fix: '' };
+      var key = id + '@' + line;
+      if (seen[key]) return;
+      seen[key] = 1;
+      findings.push({
+        check: id,
+        sev: rule.sev,
+        msg: rule.title + (extra ? ' (' + extra + ')' : '') + ' - ' + rule.fix,
+        line: line + 1
+      });
+    }
+
+    /* ---- stages declared at the top of the file ---- */
+    var stages = [];
+    var definedKeys = {};
+    for (var t = 0; t < tops.length; t++) {
+      definedKeys[tops[t].name] = 1;
+      if (tops[t].name === 'stages') {
+        var inl = inlineList(tops[t].inline);
+        if (inl) { for (var q = 0; q < inl.length; q++) stages.push(inl[q]); }
+        else {
+          var items = listUnder(lines, tops[t].start + 1, tops[t].end, 0);
+          for (var s = 0; s < items.length; s++) stages.push(items[s].value);
+        }
+      }
+      if (tops[t].name === 'on' || tops[t].name === 'jobs') {
+        add('github_top_level_key', tops[t].start, tops[t].name + ':');
+      }
+    }
+
+    /* ---- line scans ---- */
+    for (var i = 0; i < lines.length; i++) {
+      var l = lines[i];
+      if (!l.trim()) continue;
+      var mv = /\bCI_BUILD_[A-Z0-9_]+/.exec(l);
+      if (mv) add('removed_ci_build_vars', i, mv[0]);
+      var mj = /\bCI_JOB_JWT(_V[12])?\b/.exec(l);
+      if (mj) add('removed_ci_job_jwt', i, mj[0]);
+      if (/\$\{\{/.test(l)) add('github_expression', i, null);
+      if (/^\s*runs-on\s*:/.test(l)) add('github_runs_on', i, null);
+      if (/^\s*(steps\s*:|-\s*uses\s*:|uses\s*:)/.test(l)) add('github_uses_steps', i, null);
+      if (/^\s*cobertura\s*:/.test(l)) add('removed_cobertura_report', i, null);
+      if (indentOf(l) === 0 && /^types\s*:/.test(l)) add('removed_type_keyword', i, 'types:');
+      if (indentOf(l) > 0 && /^\s+type\s*:\s*\S/.test(l)) add('removed_type_keyword', i, 'type:');
+      if (indentOf(l) > 0 && /^\s+(only|except)\s*:/.test(l)) add('retired_only_except', i, null);
+    }
+
+    /* ---- per job ---- */
+    for (var k = 0; k < tops.length; k++) {
+      var job = tops[k];
+      if (RESERVED[job.name] || job.inline) continue;
+      var hidden = job.name.charAt(0) === '.';
+      var hasScript = false, hasOnly = false, hasRules = false;
+      var startIn = -1, whenDelayed = false;
+
+      for (var n = job.start + 1; n < job.end; n++) {
+        var jl = lines[n];
+        if (!jl.trim()) continue;
+
+        if (/^\s+(script|trigger|extends|run)\s*:/.test(jl)) hasScript = true;
+        if (/^\s+(only|except)\s*:/.test(jl)) hasOnly = true;
+        if (/^\s+rules\s*:/.test(jl)) hasRules = true;
+        if (/^\s+start_in\s*:/.test(jl)) startIn = n;
+        if (/^\s+when\s*:\s*delayed\b/.test(jl)) whenDelayed = true;
+
+        var ms = /^\s+stage\s*:\s*(\S.*)$/.exec(jl);
+        if (ms && stages.length) {
+          var st = unquote(ms[1]);
+          if (st !== '.pre' && st !== '.post' && stages.indexOf(st) < 0) {
+            add('stage_not_declared', n, st);
+          }
+        }
+
+        var mp = /^\s+parallel\s*:\s*(\d+)\s*$/.exec(jl);
+        if (mp) {
+          var num = parseInt(mp[1], 10);
+          if (num < 2 || num > 200) add('parallel_out_of_range', n, String(num));
+        }
+
+        var me = /^\s+extends\s*:\s*(\S.*)$/.exec(jl);
+        if (me) {
+          var ex = inlineList(me[1]) || [unquote(me[1])];
+          for (var e = 0; e < ex.length; e++) {
+            if (ex[e] && !definedKeys[ex[e]]) add('extends_undefined_key', n, ex[e]);
+          }
+        } else if (/^\s+extends\s*:\s*$/.test(jl)) {
+          var exl = listUnder(lines, n + 1, job.end, indentOf(jl));
+          for (var e2 = 0; e2 < exl.length; e2++) {
+            if (!definedKeys[exl[e2].value]) add('extends_undefined_key', exl[e2].line, exl[e2].value);
+          }
+        }
+
+        var mn = /^\s+needs\s*:\s*(\S.*)?$/.exec(jl);
+        if (mn) {
+          var needs = [];
+          if (mn[1]) {
+            var il = inlineList(mn[1]);
+            if (il) { for (var y = 0; y < il.length; y++) needs.push({ value: il[y], line: n }); }
+          } else {
+            needs = listUnder(lines, n + 1, job.end, indentOf(jl));
+          }
+          for (var d = 0; d < needs.length; d++) {
+            var nm = needs[d].value.replace(/^job\s*:\s*/, '');
+            nm = unquote(nm.split(/\s*,\s*/)[0]);
+            if (!nm || /[:{]/.test(nm)) continue;
+            if (!definedKeys[nm]) add('needs_undefined_job', needs[d].line, nm);
+          }
+        }
+      }
+
+      if (hasOnly && hasRules) add('only_and_rules_conflict', job.start, job.name);
+      if (startIn >= 0 && !whenDelayed) add('start_in_without_delayed', startIn, job.name);
+      if (!hidden && !hasScript) add('job_without_script', job.start, job.name);
+    }
+
+    findings.sort(function (a, b) { return a.line - b.line; });
+    return { findings: findings, today: opts.today || '' };
+  }
+
+  var api = { engine: { check: check }, RULES: RULES, RULE_COUNT: RULES.length };
+  if (typeof module !== 'undefined' && module.exports) module.exports = api;
+  if (typeof window !== 'undefined') window.GLCIENGINE = api;
+})();

package/license.js

@@ -0,0 +1,83 @@
+// license.js — Polar licence check for the CLI / container. Generated by adapters.py; do not edit by hand.
+'use strict';
+const https = require('https'), fs = require('fs'), path = require('path'), os = require('os');
+const ORG_ID = 'a5cdf664-d8e7-4f87-8895-056717aaba17';
+const BENEFIT_ID = '32c30dc9-ac08-4afd-b581-b3d482cadf27';   // s142 — this product's Polar benefit (s140 law: ask with benefit_id, or one key opens every product)
+const BUY_URL = 'https://buy.polar.sh/polar_cl_d7bGnhvRyjV580fnsaQ89C7TIU15QgC3kcWpO0NZLGc';
+const SLUG = 'gitlab-ci-break-lint';
+const GRACE_MS = 30 * 24 * 3600 * 1000;   // after a successful check, 30 days work offline
+const RECHECK_MS = 7 * 24 * 3600 * 1000;  // re-ask Polar every 7 days (refunds / cancellations)
+function storePath() { return path.join(process.env.READYSTACK_HOME || path.join(os.homedir(), '.config', 'readystack'), SLUG + '.json'); }
+function load() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')); } catch (e) { return {}; } }
+function save(o) { try { fs.mkdirSync(path.dirname(storePath()), { recursive: true }); fs.writeFileSync(storePath(), JSON.stringify(o)); } catch (e) { /* read-only home: still works for this run */ } }
+const ALL_BENEFIT_ID = '22692551-5203-4467-b1a3-e33cdba6589d';   // s149 2026-09-17 — 팀 키(전 린터 한 키 · Polar benefit) · 상품 benefit 다음에 한 번 더 묻는다
+function validate(key) {
+  return validate1(key, BENEFIT_ID).then(function (r) { return (r.ok || r.offline || !/^[0-9a-f-]{36}$/.test(ALL_BENEFIT_ID)) ? r : validate1(key, ALL_BENEFIT_ID); });
+}
+function validate1(key, ben) {
+  return new Promise(function (resolve) {
+    if (!ORG_ID) return resolve({ ok: false, offline: false });
+    const body = JSON.stringify(/^[0-9a-f-]{36}$/.test(ben) ? { key: key, organization_id: ORG_ID, benefit_id: ben } : { key: key, organization_id: ORG_ID });
+    const req = https.request({ hostname: 'api.polar.sh', path: '/v1/customer-portal/license-keys/validate', method: 'POST', timeout: 8000,
+      headers: { 'content-type': 'application/json', 'polar-version': '2026-04', 'content-length': Buffer.byteLength(body) } }, function (res) {
+      let buf = ''; res.on('data', function (d) { buf += d; });
+      res.on('end', function () {
+        if (res.statusCode !== 200) return resolve({ ok: false, offline: false });
+        try { const j = JSON.parse(buf); resolve({ ok: j && (j.status === 'granted' || j.valid === true || !!j.id), offline: false }); }
+        catch (e) { resolve({ ok: false, offline: false }); }
+      });
+    });
+    req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
+    req.on('error', function () { resolve({ ok: false, offline: true }); });
+    req.write(body); req.end();
+  });
+}
+// ★s151 2026-09-19 — 키 판(키가 없거나 거절된 순간)을 익명으로 센다 (슬러그·출처·이유만) · DO_NOT_TRACK=1 · READYSTACK_NO_TELEMETRY 면 안 보낸다 · 실패는 조용히 · 프로세스당 한 번.
+let _pinged = false;
+function pingPaywall(why) {
+  try {
+    if (_pinged) return; _pinged = true;
+    if (process.env.DO_NOT_TRACK === '1' || process.env.READYSTACK_NO_TELEMETRY || process.env.CI) return;   // s151: CI(깃허브 액션 등)와 우리 빌드는 손님이 아니다
+    if (!(process.stdout.isTTY || process.stdin.isTTY || process.env.READYSTACK_MCP === '1')) return;   // s152: 사람 자리(터미널·MCP 세션)에서만 센다 - 발행 1분 뒤 남의 실행기(JP · 우리 3대는 US)가 돌린 no_key 13건은 손님이 아니다
+    const body = JSON.stringify({ t: 'paywall', slug: SLUG, src: process.env.READYSTACK_MCP === '1' ? 'mcp' : 'cli', why: why || 'no_key' });
+    const req = https.request({ hostname: 'getreadystack.com', path: '/api/ev', method: 'POST', timeout: 3000,
+      headers: { 'content-type': 'application/json', 'content-length': Buffer.byteLength(body), 'user-agent': 'readystack-cli/' + SLUG } }, function (res) { res.resume(); });
+    req.on('timeout', function () { req.destroy(); }); req.on('error', function () {});
+    req.write(body); req.end();
+  } catch (e) { /* 세는 것이 실패해도 상품은 돈다 */ }
+}
+async function ensure(explicitKey) {
+  const st = load();
+  const key = explicitKey || process.env.READYSTACK_LICENSE || st.key;
+  if (!key) { pingPaywall('no_key'); return { ok: false, why: 'no_key' }; }   // s151
+  const age = Date.now() - (st.okAt || 0);
+  if (!explicitKey && st.key === key && age < RECHECK_MS) return { ok: true, cached: true };
+  const r = await validate(String(key).trim());
+  if (r.ok) { save({ key: String(key).trim(), okAt: Date.now() }); return { ok: true }; }
+  if (r.offline && st.key === key && age < GRACE_MS) return { ok: true, offline: true };
+  if (!r.offline) pingPaywall('invalid');   // s151
+  return { ok: false, why: r.offline ? 'offline' : 'invalid' };
+}
+// ★s134 — 구독 규칙 피드(층3 "바뀌면 업데이트"): 키 있는 손님만 · 7일마다 · 오프라인은 캐시. 워커 GET /api/rules/<slug>?key=
+const FEED_URL = 'https://getreadystack.com/api/rules/';
+function pullFeed() {
+  const st = load(); const key = process.env.READYSTACK_LICENSE || st.key; const cached = st.feed || null;
+  if (!key) return Promise.resolve(cached);
+  if (cached && (Date.now() - (st.feedAt || 0)) < RECHECK_MS) return Promise.resolve(cached);
+  return new Promise(function (resolve) {
+    let req;
+    try {
+      req = https.get(FEED_URL + encodeURIComponent(SLUG) + '?key=' + encodeURIComponent(key), { timeout: 8000, headers: { 'user-agent': 'readystack-cli' } }, function (res) {
+        let buf = ''; res.on('data', function (d) { buf += d; });
+        res.on('end', function () {
+          if (res.statusCode !== 200) return resolve(cached);
+          try { const j = JSON.parse(buf); if (!j || !Array.isArray(j.rules)) return resolve(cached); save(Object.assign(load(), { feed: j, feedAt: Date.now() })); resolve(j); }
+          catch (e) { resolve(cached); }
+        });
+      });
+    } catch (e) { return resolve(cached); }
+    req.on('timeout', function () { req.destroy(); resolve(cached); });
+    req.on('error', function () { resolve(cached); });
+  });
+}
+module.exports = { ensure, BUY_URL, storePath, pullFeed };

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@readystack/gitlab-ci-break-lint",
+  "version": "1.0.0",
+  "description": "Names the .gitlab-ci.yml lines your runner will reject after the next GitLab major upgrade",
+  "license": "SEE LICENSE IN LICENSE.txt",
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "gitlab",
+    "gitlab-ci",
+    "pipeline",
+    "yaml",
+    "lint",
+    "devops",
+    "ci-cd"
+  ],
+  "homepage": "https://getreadystack.com",
+  "funding": "https://buy.polar.sh/polar_cl_d7bGnhvRyjV580fnsaQ89C7TIU15QgC3kcWpO0NZLGc",
+  "bin": {
+    "gitlab-ci-break-lint": "cli.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "mcpName": "io.github.jmshinhwa/gitlab-ci-break-lint",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jmshinhwa/readystack-themes.git",
+    "directory": "gitlab-ci-break-lint"
+  },
+  "files": [
+    "cli.js",
+    "license.js",
+    "rules.json",
+    "strings.json",
+    "README.md",
+    "LICENSE.txt",
+    "engine.js"
+  ]
+}

package/rules.json

@@ -0,0 +1,98 @@
+[
+ {
+  "id": "removed_ci_build_vars",
+  "sev": "error",
+  "title": "CI_BUILD_* variable",
+  "fix": "Rename to the CI_JOB_* / CI_COMMIT_* equivalent (CI_BUILD_REF is CI_COMMIT_SHA, CI_BUILD_ID is CI_JOB_ID)."
+ },
+ {
+  "id": "removed_type_keyword",
+  "sev": "error",
+  "title": "type: / types: keyword",
+  "fix": "Use stage: on a job and stages: at the top of the file."
+ },
+ {
+  "id": "removed_cobertura_report",
+  "sev": "error",
+  "title": "artifacts:reports:cobertura",
+  "fix": "Use artifacts:reports:coverage_report with coverage_format: cobertura and path:."
+ },
+ {
+  "id": "removed_ci_job_jwt",
+  "sev": "error",
+  "title": "CI_JOB_JWT token",
+  "fix": "Declare an id_tokens: block on the job and read that token instead."
+ },
+ {
+  "id": "retired_only_except",
+  "sev": "warn",
+  "title": "only: / except: job filter",
+  "fix": "Move the condition into rules: with if:, changes: or exists:."
+ },
+ {
+  "id": "only_and_rules_conflict",
+  "sev": "error",
+  "title": "rules: together with only:/except:",
+  "fix": "Keep rules: and delete only:/except: from the same job."
+ },
+ {
+  "id": "github_runs_on",
+  "sev": "error",
+  "title": "runs-on: from GitHub Actions",
+  "fix": "GitLab picks runners by tags:. Replace runs-on: with tags: or drop it."
+ },
+ {
+  "id": "github_uses_steps",
+  "sev": "error",
+  "title": "steps: / uses: from GitHub Actions",
+  "fix": "GitLab jobs run shell lines under script:. There is no uses: action."
+ },
+ {
+  "id": "github_expression",
+  "sev": "error",
+  "title": "${{ }} expression from GitHub Actions",
+  "fix": "GitLab expands plain $VARIABLE. Rewrite the expression as a variable or a rules: if:."
+ },
+ {
+  "id": "github_top_level_key",
+  "sev": "error",
+  "title": "top-level on: / jobs: from GitHub Actions",
+  "fix": "GitLab has no on: or jobs: mapping. Declare jobs at the top level and gate them with workflow:rules or rules:."
+ },
+ {
+  "id": "stage_not_declared",
+  "sev": "error",
+  "title": "stage: missing from stages:",
+  "fix": "Add the stage name to the stages: list, or point the job at a declared stage."
+ },
+ {
+  "id": "needs_undefined_job",
+  "sev": "error",
+  "title": "needs: points at an undefined job",
+  "fix": "Reference a job that exists in this file, or remove the needs: entry."
+ },
+ {
+  "id": "extends_undefined_key",
+  "sev": "error",
+  "title": "extends: points at an undefined key",
+  "fix": "Define the hidden job (.name:) in this file or include the template that defines it."
+ },
+ {
+  "id": "start_in_without_delayed",
+  "sev": "error",
+  "title": "start_in: without when: delayed",
+  "fix": "Add when: delayed to the same job, otherwise start_in: is rejected."
+ },
+ {
+  "id": "parallel_out_of_range",
+  "sev": "error",
+  "title": "parallel: outside 2-200",
+  "fix": "Use a value between 2 and 200, or delete parallel: for a single job."
+ },
+ {
+  "id": "job_without_script",
+  "sev": "error",
+  "title": "job with no script:",
+  "fix": "Give the job a script:, a trigger:, or an extends: that supplies one."
+ }
+]

package/strings.json

@@ -0,0 +1,10 @@
+{
+ "name": "GitLab CI Break Lint",
+ "subtitle": "Names the .gitlab-ci.yml lines your runner will reject after the next GitLab major upgrade",
+ "bin": "gitlab-ci-break-lint",
+ "price": 29,
+ "free": "Lint the pipeline file you have open and get every retired keyword, GitHub Actions leftover and invalid job wiring with its line number and its replacement line.",
+ "paid": "Scan every pipeline file in the repository in one pass and export a dated Markdown upgrade report (file, line, keyword, replacement) to attach to the change ticket.",
+ "need_key": "This option needs a licence (GitLab CI Break Lint).",
+ "exts": []
+}