@readystack/gpsr-listing-lint 1.0.0

package/LICENSE.txt

@@ -0,0 +1,16 @@
+GPSR Listing Lint — EU Product Feed Audit — Licence
+
+Free scope
+  Scan the open product feed and see every listing row that is missing a GPSR Article 19 field, with the line number and the exact article it fails. is free for any use, personal or commercial, for as long as you keep the
+  extension installed, and the online check at the product page is free without registration.
+
+Paid scope
+  Export a dated evidence pack for the whole workspace catalogue — every feed file, every failing row, per-rule counts — as CSV and Markdown you can hand to a marketplace, importer or auditor. is the paid part. It asks for a licence key issued at purchase (one seat, one key;
+  7-day full refund, no questions). The key is checked against the payment provider and
+  cached locally for 30 days so it keeps working offline.
+
+Redistribution
+  You may not resell, re-host or bundle this extension or its rule set. The rule set and the
+  engine are provided as-is; check results are advisory and do not constitute legal advice.
+
+(c) ReadyStack — https://getreadystack.com

package/README.md

@@ -0,0 +1,54 @@
+# GPSR Listing Lint
+
+![GPSR Listing Lint](https://getreadystack.com/img/promo/sku57790_result_card.jpg)
+
+Audits a product feed row by row against Article 19 of the EU General Product Safety Regulation
+
+## Install
+
+```
+npx @readystack/gpsr-listing-lint file
+```
+
+Node 18+. The same 12 rules as the VS Code extension, from a terminal or CI.
+
+## Free
+
+- Open any product feed file and see every listing row that is missing a GPSR Article 19 field, with its line number and the exact article it fails — no key, nothing uploaded.
+- `--rules` lists every rule
+
+## With a licence ($29 once)
+
+- Export a dated evidence pack for the whole workspace catalogue — every feed file, every failing row, per-rule counts — as CSV and Markdown you can hand to a marketplace, importer or auditor.
+
+```
+@readystack/gpsr-listing-lint --dir ./templates --report html --out report.html
+```
+
+An EU Responsible Person / authorised-representative service is sold as a monthly subscription, per brand; hand-checking a feed at ten seconds a row is about fourteen hours for five thousand rows. This is $29 once.
+
+## Use from an AI agent (MCP)
+
+Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
+
+```json
+{ "mcpServers": { "gpsr-listing-lint": { "command": "npx", "args": ["-y", "@readystack/gpsr-listing-lint", "--mcp"] } } }
+```
+
+Tools: `check_text` and `check_file` (free) · `check_dir` (licence; the full sweep is free for 7 days). The agent gets every finding with the line number.
+
+## Use in CI
+
+```yaml
+- name: GPSR Listing Lint
+  run: npx -y @readystack/gpsr-listing-lint --dir . --ci
+```
+
+(container: `docker run --rm -v "$PWD:/work" getreadystack/gpsr-listing-lint --dir /work --ci`)
+
+Try the full run free for 7 days — no key needed. Then one licence, 7-day refund, no questions. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
+
+[Get a licence](https://buy.polar.sh/polar_cl_MeEOXqXAf3FoF5aXVJjeeyaoJJNIODsmsm5CK0skgvG)
+
+
+<!-- gpsr listing lint -->

package/cli.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+// cli.js — the same rules as the VS Code extension, run from a terminal or a container. Generated by adapters.py.
+'use strict';
+const fs = require('fs'), path = require('path');
+const RULES = require('./rules.json');
+const S = require('./strings.json');
+const lic = require('./license.js');
+const ENGINE = require('./engine.js');   // s144 — scaffold products: the same engine the VS Code extension runs
+const RULE_LIST = Array.isArray(ENGINE.RULES) ? ENGINE.RULES : (Array.isArray(RULES) ? RULES : []);
+const RULE_N = ENGINE.RULE_COUNT || RULE_LIST.length;
+function scan(text, file) {
+  const r = ENGINE.engine.check(String(text), { today: new Date().toISOString().slice(0, 10), path: file || '' });
+  return (r && r.findings || []).map((f) => ({ line: parseInt(f.line, 10) || 1, msg: String(f.msg || f.message || f.check || ''), fix: f.fix || null, sev: (String(f.sev || 'error').toLowerCase().startsWith('err') ? 'error' : 'warn') }));
+}
+function isText(p) { try { const b = fs.readFileSync(p); if (b.length > 2 * 1024 * 1024) return false; const s = b.subarray(0, 4096); for (const x of s) if (x === 0) return false; return true; } catch (e) { return false; } }
+function walk(dir, exts, out) {
+  let ents = []; try { ents = fs.readdirSync(dir, { withFileTypes: true }); } catch (e) { return out; }
+  for (const e of ents) {
+    if (e.name === 'node_modules' || e.name === '.git' || e.name.startsWith('.')) continue;
+    const p = path.join(dir, e.name);
+    if (e.isDirectory()) walk(p, exts, out);
+    else if ((!exts.length || exts.includes(path.extname(e.name).toLowerCase())) && isText(p)) out.push(p);
+  }
+  return out;
+}
+function esc(s) { return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;'); }
+function csvq(s) { return '"' + String(s == null ? '' : s).replace(/"/g, '""') + '"'; }
+function render(rows, fmt) {
+  if (fmt === 'json') return JSON.stringify({ tool: S.name, rules: RULE_N, files: rows }, null, 1);
+  if (fmt === 'csv') { const o = ['file,line,severity,message,fix']; for (const r of rows) for (const h of r.hits) o.push([csvq(r.file), h.line, h.sev, csvq(h.msg), csvq(h.fix)].join(',')); return o.join('\n') + '\n'; }
+  if (fmt === 'html') {
+    const n = rows.reduce((a, r) => a + r.hits.length, 0);
+    let o = '<!doctype html><meta charset="utf-8"><title>' + esc(S.name) + ' report</title><style>body{font:14px system-ui;margin:24px}table{border-collapse:collapse}td,th{border:1px solid #ddd;padding:4px 8px;font-size:13px}code{font-family:ui-monospace,monospace}</style>';
+    o += '<h1>' + esc(S.name) + '</h1><p>' + rows.length + ' files · ' + n + ' findings · ' + RULE_N + ' rules</p><table><tr><th>file</th><th>line</th><th>sev</th><th>message</th><th>fix</th></tr>';
+    for (const r of rows) for (const h of r.hits) o += '<tr><td><code>' + esc(r.file) + '</code></td><td>' + h.line + '</td><td>' + esc(h.sev) + '</td><td>' + esc(h.msg) + '</td><td>' + esc(h.fix || '') + '</td></tr>';
+    return o + '</table>';
+  }
+  let o = ''; for (const r of rows) { o += r.file + '\n'; for (const h of r.hits) o += '  ' + String(h.line).padStart(5) + '  ' + h.sev.padEnd(5) + ' ' + h.msg + (h.fix ? '\n         -> ' + h.fix : '') + '\n'; if (!r.hits.length) o += '  (no findings)\n'; }
+  return o;
+}
+function trialState() {
+  if (process.env.READYSTACK_NO_TRIAL) return { active: false };
+  try {
+    const p = path.join(path.dirname(lic.storePath()), S.bin + '.trial.json');
+    let t = null; try { t = JSON.parse(fs.readFileSync(p, 'utf8')); } catch (e) {}
+    if (!t || !t.until) { t = { until: new Date(Date.now() + 7 * 24 * 3600 * 1000).toISOString().slice(0, 10) }; fs.mkdirSync(path.dirname(p), { recursive: true }); fs.writeFileSync(p, JSON.stringify(t)); }
+    return { active: new Date(t.until + 'T23:59:59Z').getTime() > Date.now(), until: t.until };
+  } catch (e) { return { active: false }; }
+}
+function mcpServe() {
+  // s144 — MCP server over stdio (newline-delimited JSON-RPC · no dependencies). Free: check_text · check_file. Licence (7-day trial): check_dir.
+  const rl = require('readline').createInterface({ input: process.stdin });
+  const send = (o) => process.stdout.write(JSON.stringify(o) + '\n');
+  const tools = [
+    { name: 'check_text', description: S.name + ' - run all ' + RULE_N + ' checks on a text (free)', inputSchema: { type: 'object', properties: { text: { type: 'string', description: 'file contents' }, path: { type: 'string', description: 'optional file name for context' } }, required: ['text'] } },
+    { name: 'check_file', description: S.name + ' - run all checks on one file by path (free)', inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] } },
+    { name: 'check_dir', description: S.name + ' - sweep a folder and return every finding (licence; the full run is free for 7 days)', inputSchema: { type: 'object', properties: { dir: { type: 'string' }, ext: { type: 'string', description: 'optional extension filter, e.g. .html' } }, required: ['dir'] } }
+  ];
+  const result = (id, rows) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text: render(rows, 'text') }], structuredContent: { tool: S.name, rules: RULE_N, files: rows } } });
+  const fail = (id, text) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text }], isError: true } });
+  rl.on('line', async (line) => {
+    let m; try { m = JSON.parse(line); } catch (e) { return; }
+    const id = m.id, method = m.method;
+    if (method === 'initialize') return send({ jsonrpc: '2.0', id, result: { protocolVersion: '2025-06-18', capabilities: { tools: {} }, serverInfo: { name: '@readystack/' + S.bin, version: '1.0.0' } } });
+    if (method === 'notifications/initialized' || method === 'ping') { if (id !== undefined) send({ jsonrpc: '2.0', id, result: {} }); return; }
+    if (method === 'tools/list') return send({ jsonrpc: '2.0', id, result: { tools } });
+    if (method === 'tools/call') {
+      const name = (m.params || {}).name, args = (m.params || {}).arguments || {};
+      try {
+        if (name === 'check_text') return result(id, [{ file: args.path || '(text)', hits: scan(String(args.text || ''), args.path || '') }]);
+        if (name === 'check_file') return result(id, [{ file: args.path, hits: scan(fs.readFileSync(args.path, 'utf8'), args.path) }]);
+        if (name === 'check_dir') {
+          const r = await lic.ensure();
+          if (!r.ok && !trialState().active) return fail(id, S.need_key + ' Get a licence ($' + S.price + ', once, 7-day refund): ' + lic.BUY_URL);
+          const files = walk(args.dir, args.ext ? [args.ext] : (S.exts || []), []);
+          return result(id, files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t, f) }; }));
+        }
+        return send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'unknown tool ' + name } });
+      } catch (e) { return fail(id, String(e && e.message || e)); }
+    }
+    if (id !== undefined) send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'method not found: ' + method } });
+  });
+}
+function help() {
+  return [S.name + ' - ' + S.subtitle, '', 'Usage: ' + S.bin + ' <file> [more files]           check the files you name (free, every rule)',
+    '       ' + S.bin + ' --dir <folder> [--ext .html]  scan a whole folder            (licence)',
+    '       ' + S.bin + ' ... --report csv|json|html [--out file]   export a report   (licence)',
+    '       ' + S.bin + ' ... --ci                      exit 1 when an error-level finding exists (licence)',
+    '       ' + S.bin + ' --license <key>               store your licence key (or set READYSTACK_LICENSE)',
+    '       ' + S.bin + ' --rules                       list the ' + RULE_N + ' rules',
+    '       ' + S.bin + ' --mcp                         run as an MCP server (stdio) for Claude Code / Cursor / Windsurf - free checks, folder sweep needs a licence', '',
+    'Free: ' + S.free, 'Licence ($' + S.price + ', once, 7-day refund): ' + S.paid, 'Get a licence: ' + lic.BUY_URL, ''].join('\n');
+}
+(async function main() {
+  try { const _feed = await lic.pullFeed(); if (_feed && Array.isArray(_feed.rules)) { if (Array.isArray(ENGINE.RULES)) for (const r of _feed.rules) ENGINE.RULES.push(r); } } catch (e) {}   // ★s134 구독 피드 병합 (키 있는 손님만)
+  const a = process.argv.slice(2);
+  const get = (k) => { const i = a.indexOf(k); return i >= 0 ? a[i + 1] : null; };
+  if (a.includes('--mcp')) { mcpServe(); return; }
+  if (!a.length || a.includes('--help') || a.includes('-h')) { process.stdout.write(help()); return; }
+  if (a.includes('--rules')) { process.stdout.write((RULE_LIST.length ? RULE_LIST.map((r, i) => String(i + 1).padStart(3) + '  [' + (r.sev || 'warn') + '] ' + (r.message || r.msg || r.id || '')) : Array.from({ length: RULE_N }, (_, i) => String(i + 1).padStart(3) + '  [engine] check ' + (i + 1))).join('\n') + '\n'); return; }
+  if (a.includes('--license')) { const r = await lic.ensure(get('--license')); process.stdout.write(r.ok ? 'Licence stored: ' + lic.storePath() + '\n' : 'Licence not accepted (' + r.why + '). Get one: ' + lic.BUY_URL + '\n'); process.exit(r.ok ? 0 : 2); }
+  const dir = get('--dir'), fmt = get('--report'), out = get('--out'), ci = a.includes('--ci');
+  const exts = a.includes('--ext') ? [get('--ext')] : (S.exts || []);
+  const paid = !!(dir || fmt || ci);
+  if (paid) {
+    const r = await lic.ensure();
+    if (!r.ok) {
+      const t = trialState();   // s144 reverse trial: the full run is free for 7 days from the first paid use, then the key
+      if (t.active) process.stderr.write('Trial: the full run is free until ' + t.until + ' — after that $' + S.price + ' once (7-day refund). Get a licence: ' + lic.BUY_URL + '\n');
+      else { process.stderr.write(S.need_key + '\n  set READYSTACK_LICENSE=<key>  or  ' + S.bin + ' --license <key>\n  Get a licence ($' + S.price + ', once): ' + lic.BUY_URL + '\n'); process.exit(2); }
+    }
+  }
+  const files = dir ? walk(dir, exts, []) : a.filter((x, i) => !x.startsWith('--') && !['--dir', '--report', '--out', '--ext', '--license'].includes(a[i - 1]));
+  if (!files.length) { process.stderr.write('No files. ' + S.bin + ' --help\n'); process.exit(2); }
+  const rows = files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t) }; });
+  const text = render(rows, fmt || 'text');
+  if (out) fs.writeFileSync(out, text); else process.stdout.write(text.endsWith('\n') ? text : text + '\n');
+  const errors = rows.reduce((n, r) => n + r.hits.filter((h) => h.sev === 'error').length, 0);
+  if (ci && errors) process.exit(1);
+})().catch((e) => { process.stderr.write(String(e && e.stack || e) + '\n'); process.exit(3); });

package/engine.js

@@ -0,0 +1,231 @@
+// GPSR Listing Lint — engine. Same file runs in Node (extension) and in the browser (free web page).
+var RULES = (typeof module !== 'undefined') ? require('./rules.json') : window.GPSR_RULES;
+
+var RULE_BY_ID = {};
+RULES.forEach(function (r) { RULE_BY_ID[r.id] = r; });
+
+// ---- column vocabulary -------------------------------------------------
+var COLS = {
+  mfr_name: ['manufacturer', 'manufacturername', 'manufacturerinfo', 'manufacturerinfoname', 'brand', 'productbrand', 'hersteller', 'fabricant', 'marque', 'fabricante'],
+  mfr_post: ['manufactureraddress', 'manufacturerpostaladdress', 'manufacturerinfoaddress', 'manufacturerpostal', 'brandaddress', 'herstelleradresse', 'adressefabricant'],
+  mfr_elec: ['manufactureremail', 'manufacturercontact', 'manufacturercontacturl', 'manufacturerurl', 'manufacturerinfoemail', 'herstelleremail', 'contactemail', 'emailfabricant'],
+  rp_name: ['responsibleperson', 'responsiblepersonname', 'euresponsibleperson', 'rpname', 'authorisedrepresentative', 'authorizedrepresentative', 'eurepresentative', 'bevollmaechtigter', 'importer', 'importerinfo', 'importername', 'personneresponsable'],
+  rp_post: ['responsiblepersonaddress', 'rpaddress', 'euresponsiblepersonaddress', 'importeraddress', 'importerinfoaddress', 'representativeaddress'],
+  rp_elec: ['responsiblepersonemail', 'rpemail', 'importeremail', 'representativeemail', 'responsiblepersoncontact'],
+  origin: ['countryoforigin', 'manufacturercountry', 'origin', 'madein', 'productioncountry', 'herkunftsland'],
+  pic: ['imagelink', 'image', 'imageurl', 'images', 'imagelink1', 'mainimage', 'picture', 'pictureurl', 'bild'],
+  ident: ['gtin', 'ean', 'upc', 'mpn', 'model', 'modelnumber', 'type', 'sku', 'productid', 'partnumber', 'itemnumber', 'artikelnummer'],
+  warn: ['warning', 'warnings', 'warningtext', 'safetyinformation', 'safetyinfo', 'safetywarning', 'warnhinweise', 'agewarning', 'hazardwarning'],
+  market: ['targetcountry', 'contentlanguage', 'language', 'market', 'locale', 'shippingcountry', 'sellingcountry', 'country'],
+  title: ['title', 'name', 'productname', 'producttitle', 'itemtitle', 'description'],
+  category: ['producttype', 'googleproductcategory', 'category', 'kategorie', 'categorie']
+};
+
+var EU = ('AT BE BG HR CY CZ DK EE FI FR DE GR EL HU IE IT LV LT LU MT NL PL PT RO SK SI ES SE IS LI NO ' +
+  'AUSTRIA BELGIUM BULGARIA CROATIA CYPRUS CZECHIA CZECHREPUBLIC DENMARK ESTONIA FINLAND FRANCE GERMANY DEUTSCHLAND GREECE HUNGARY IRELAND ITALY ITALIA LATVIA LITHUANIA LUXEMBOURG MALTA NETHERLANDS POLAND POLSKA PORTUGAL ROMANIA SLOVAKIA SLOVENIA SPAIN ESPANA SWEDEN ICELAND LIECHTENSTEIN NORWAY EU EEA').split(/\s+/);
+
+var PLACEHOLDER = /^(n\/?a|na|tbd|tba|none|null|nil|-+|\.+|0|unknown|see packaging|on packaging|see box|see label|as above|same as above|refer to packaging|contact seller|not applicable|xxx+|todo)$/i;
+
+var WARN_SIGNAL = /(\b\d\s*\+\s*(years|yrs)?|not suitable for children|choking|small parts|lithium|li-ion|battery|batteries|rechargeable|ce mark|ce-mark|\b(110|120|220|230|240)\s*v\b|mains|charger|power adapter|flammable|corrosive|toxic|irritant|aerosol|bleach|solvent|laser|toy\b|toys\b|plush|ride-on|scooter|helmet|cosmetic|candle)/i;
+
+var LANG_OF = { DE: 'de', AT: 'de', CH: 'de', FR: 'fr', BE: 'fr', LU: 'fr', ES: 'es', IT: 'it', PL: 'pl', NL: 'nl', PT: 'pt', SE: 'sv', DK: 'da', FI: 'fi', CZ: 'cs', RO: 'ro', HU: 'hu', GR: 'el', EL: 'el' };
+var LANG_MARK = {
+  de: /(achtung|warnung|warnhinweis|vorsicht|nicht geeignet|erstickungsgefahr)/i,
+  fr: /(attention|avertissement|ne convient pas|danger d|risque)/i,
+  es: /(advertencia|atenci|no apto|peligro)/i,
+  it: /(avvertenz|attenzione|non adatto|pericolo)/i,
+  pl: /(ostrze|uwaga|nie nadaje)/i,
+  nl: /(waarschuwing|let op|niet geschikt)/i,
+  pt: /(aviso|aten|n.o adequado|perigo)/i,
+  sv: /(varning|observera|ej l.mplig)/i,
+  da: /(advarsel|bem.rk|ikke egnet)/i,
+  fi: /(varoitus|huomio|ei sovellu)/i,
+  cs: /(varov.n|upozorn|nen. vhodn)/i,
+  ro: /(avertisment|aten|nu este potrivit)/i,
+  hu: /(figyelmeztet|vigy.zat|nem alkalmas)/i,
+  el: /(προσοχ|προειδοπο)/i
+};
+var EN_MARK = /(warning|caution|not suitable|choking hazard|keep away from)/i;
+
+var NOREPLY = /^(no-?reply|donotreply|do-not-reply|noreply)@/i;
+
+// ---- parsing -----------------------------------------------------------
+function norm(s) { return String(s || '').toLowerCase().replace(/[^a-z0-9]/g, ''); }
+function blank(v) { var s = String(v == null ? '' : v).trim(); return s === '' || PLACEHOLDER.test(s); }
+
+function splitRow(line, d) {
+  var out = [], cur = '', q = false;
+  for (var i = 0; i < line.length; i++) {
+    var c = line[i];
+    if (q) {
+      if (c === '"' && line[i + 1] === '"') { cur += '"'; i++; }
+      else if (c === '"') q = false;
+      else cur += c;
+    } else if (c === '"') q = true;
+    else if (c === d) { out.push(cur); cur = ''; }
+    else cur += c;
+  }
+  out.push(cur);
+  return out.map(function (s) { return s.trim(); });
+}
+
+function delimOf(head) {
+  var best = ',', n = -1;
+  [',', ';', '\t', '|'].forEach(function (d) {
+    var c = splitRow(head, d).length;
+    if (c > n) { n = c; best = d; }
+  });
+  return best;
+}
+
+function parseCSV(text) {
+  var lines = text.replace(/\r/g, '').split('\n');
+  var hi = 0;
+  while (hi < lines.length && lines[hi].trim() === '') hi++;
+  if (hi >= lines.length) return null;
+  var d = delimOf(lines[hi]);
+  var header = splitRow(lines[hi], d).map(norm);
+  var rows = [];
+  for (var i = hi + 1; i < lines.length; i++) {
+    if (lines[i].trim() === '') continue;
+    var cells = splitRow(lines[i], d), rec = {};
+    for (var j = 0; j < header.length; j++) rec[header[j]] = cells[j] === undefined ? '' : cells[j];
+    rows.push({ line: i + 1, rec: rec });
+  }
+  return { header: header, rows: rows, headerLine: hi + 1 };
+}
+
+function parseXML(text) {
+  var lines = text.replace(/\r/g, '').split('\n');
+  var rows = [], header = {}, cur = null, start = 0;
+  for (var i = 0; i < lines.length; i++) {
+    var L = lines[i];
+    if (/<(item|entry|product)[\s>]/i.test(L)) { cur = {}; start = i + 1; continue; }
+    if (/<\/(item|entry|product)>/i.test(L)) { if (cur) rows.push({ line: start, rec: cur }); cur = null; continue; }
+    if (cur) {
+      var m = L.match(/<([A-Za-z0-9_:-]+)[^>]*>([\s\S]*?)<\/\1>/);
+      if (m) {
+        var k = norm(m[1].replace(/^.*:/, ''));
+        var v = m[2].replace(/<!\[CDATA\[([\s\S]*?)\]\]>/, '$1').trim();
+        cur[k] = v; header[k] = 1;
+      }
+    }
+  }
+  return { header: Object.keys(header), rows: rows, headerLine: 1 };
+}
+
+// ---- helpers -----------------------------------------------------------
+function colFor(header, group) {
+  for (var i = 0; i < COLS[group].length; i++) if (header.indexOf(COLS[group][i]) >= 0) return COLS[group][i];
+  return null;
+}
+function val(rec, header, group) {
+  var syn = COLS[group], first = null;
+  for (var i = 0; i < syn.length; i++) {
+    if (header.indexOf(syn[i]) >= 0) {
+      var v = String(rec[syn[i]] == null ? '' : rec[syn[i]]);
+      if (first === null) first = v;
+      if (!blank(v)) return v;   // any filled synonym column satisfies the field
+    }
+  }
+  return first === null ? '' : first;
+}
+function anyVal(rec, header, groups) {
+  for (var i = 0; i < groups.length; i++) { var v = val(rec, header, groups[i]); if (!blank(v)) return v; }
+  return '';
+}
+function isEU(s) {
+  var t = String(s || '').toUpperCase().replace(/[^A-Z]/g, '');
+  if (!t) return null;
+  if (EU.indexOf(t) >= 0) return true;
+  for (var i = 0; i < EU.length; i++) if (EU[i].length > 2 && t.indexOf(EU[i]) >= 0) return true;
+  var codes = String(s).toUpperCase().match(/\b[A-Z]{2}\b/g) || [];
+  for (var j = 0; j < codes.length; j++) if (EU.indexOf(codes[j]) >= 0) return true;
+  return false;
+}
+function label(rec, header) {
+  var t = val(rec, header, 'title') || anyVal(rec, header, ['ident']);
+  t = t.replace(/\s+/g, ' ').trim();
+  return t ? ' — "' + (t.length > 46 ? t.slice(0, 46) + '…' : t) + '"' : '';
+}
+
+// ---- check -------------------------------------------------------------
+function check(text, opts) {
+  opts = opts || {};
+  var findings = [];
+  var src = String(text || '');
+  var doc = /^\s*</.test(src) ? parseXML(src) : parseCSV(src);
+  if (!doc || !doc.rows.length) return { findings: findings };
+  var H = doc.header, rows = doc.rows, HL = doc.headerLine;
+
+  function add(id, line, extra) {
+    var r = RULE_BY_ID[id];
+    findings.push({ check: id, sev: r.sev, msg: r.msg + (extra || ''), line: line });
+  }
+
+  // file-level: a required column is not in the feed at all
+  [['mfr_name', 'A19a-NAME'], ['mfr_post', 'A19a-POST'], ['mfr_elec', 'A19a-ELEC'],
+   ['pic', 'A19c-PIC'], ['ident', 'A19c-ID']].forEach(function (p) {
+    if (!colFor(H, p[0])) add(p[1], HL, ' No such column in this feed — all ' + rows.length + ' rows fail.');
+  });
+
+  var nonEU = rows.filter(function (r) { return isEU(val(r.rec, H, 'origin')) === false; });
+  var rpCol = colFor(H, 'rp_name');
+  if (nonEU.length && !rpCol) add('A19b-RP', HL, ' No Responsible Person column in this feed — ' + nonEU.length + ' non-EU row(s) fail.');
+
+  var warnCol = colFor(H, 'warn');
+  var warnRows = rows.filter(function (r) {
+    var hay = val(r.rec, H, 'title') + ' ' + val(r.rec, H, 'category');
+    return WARN_SIGNAL.test(hay);
+  });
+  if (warnRows.length && !warnCol) add('A19d-WARN', HL, ' No warning/safety column in this feed — ' + warnRows.length + ' warning-bearing row(s) fail.');
+
+  rows.forEach(function (row) {
+    var rec = row.rec, ln = row.line, tag = label(rec, H);
+
+    if (colFor(H, 'mfr_name')) {
+      var mn = val(rec, H, 'mfr_name');
+      if (blank(mn)) add('A19a-NAME', ln, tag);
+      else if (/^(generic|unbranded|no ?brand|oem|noname|no name|assorted|various|own brand)$/i.test(mn.trim())) add('A19a-NOBRAND', ln, ' Found "' + mn.trim() + '".' + tag);
+    }
+    if (colFor(H, 'mfr_post') && blank(val(rec, H, 'mfr_post'))) add('A19a-POST', ln, tag);
+    if (colFor(H, 'mfr_elec')) {
+      var me = val(rec, H, 'mfr_elec');
+      if (blank(me)) add('A19a-ELEC', ln, tag);
+      else if (NOREPLY.test(me.trim())) add('A19a-NOREPLY', ln, ' Found "' + me.trim() + '".' + tag);
+    }
+    if (colFor(H, 'pic') && blank(val(rec, H, 'pic'))) add('A19c-PIC', ln, tag);
+    if (colFor(H, 'ident') && blank(anyVal(rec, H, ['ident']))) add('A19c-ID', ln, tag);
+
+    var eu = isEU(val(rec, H, 'origin'));
+    if (eu === false) {
+      var rp = rpCol ? val(rec, H, 'rp_name') : '';
+      if (blank(rp)) { if (rpCol) add('A19b-RP', ln, ' Origin "' + val(rec, H, 'origin') + '".' + tag); }
+      else {
+        var rpAddr = val(rec, H, 'rp_post');
+        if (!blank(rpAddr) && isEU(rpAddr) === false) add('A19b-RP-EU', ln, ' Responsible Person address "' + rpAddr + '".' + tag);
+        if (colFor(H, 'rp_elec') && blank(val(rec, H, 'rp_elec'))) add('A19b-RP-ELEC', ln, tag);
+      }
+    }
+
+    var hay = val(rec, H, 'title') + ' ' + val(rec, H, 'category');
+    if (WARN_SIGNAL.test(hay) && warnCol) {
+      var w = val(rec, H, 'warn');
+      if (blank(w)) add('A19d-WARN', ln, tag);
+      else {
+        var mk = val(rec, H, 'market').toUpperCase().replace(/[^A-Z]/g, '').slice(0, 2);
+        var want = LANG_OF[mk];
+        if (want && LANG_MARK[want] && !LANG_MARK[want].test(w) && EN_MARK.test(w)) {
+          add('A19d-LANG', ln, ' Market ' + mk + ' expects ' + want + ', warning reads English.' + tag);
+        }
+      }
+    }
+  });
+
+  findings.sort(function (a, b) { return a.line - b.line; });
+  return { findings: findings };
+}
+
+var API = { engine: { check: check }, RULES: RULES, RULE_COUNT: RULES.length };
+if (typeof module !== 'undefined') module.exports = API;
+if (typeof window !== 'undefined') window.GPSRENGINE = API;

package/license.js

@@ -0,0 +1,64 @@
+// license.js — Polar licence check for the CLI / container. Generated by adapters.py; do not edit by hand.
+'use strict';
+const https = require('https'), fs = require('fs'), path = require('path'), os = require('os');
+const ORG_ID = 'a5cdf664-d8e7-4f87-8895-056717aaba17';
+const BENEFIT_ID = '595fc7ee-c75e-4bb5-bc27-2237f5521698';   // s142 — this product's Polar benefit (s140 law: ask with benefit_id, or one key opens every product)
+const BUY_URL = 'https://buy.polar.sh/polar_cl_MeEOXqXAf3FoF5aXVJjeeyaoJJNIODsmsm5CK0skgvG';
+const SLUG = 'gpsr-listing-lint';
+const GRACE_MS = 30 * 24 * 3600 * 1000;   // after a successful check, 30 days work offline
+const RECHECK_MS = 7 * 24 * 3600 * 1000;  // re-ask Polar every 7 days (refunds / cancellations)
+function storePath() { return path.join(process.env.READYSTACK_HOME || path.join(os.homedir(), '.config', 'readystack'), SLUG + '.json'); }
+function load() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')); } catch (e) { return {}; } }
+function save(o) { try { fs.mkdirSync(path.dirname(storePath()), { recursive: true }); fs.writeFileSync(storePath(), JSON.stringify(o)); } catch (e) { /* read-only home: still works for this run */ } }
+function validate(key) {
+  return new Promise(function (resolve) {
+    if (!ORG_ID) return resolve({ ok: false, offline: false });
+    const body = JSON.stringify(/^[0-9a-f-]{36}$/.test(BENEFIT_ID) ? { key: key, organization_id: ORG_ID, benefit_id: BENEFIT_ID } : { key: key, organization_id: ORG_ID });
+    const req = https.request({ hostname: 'api.polar.sh', path: '/v1/customer-portal/license-keys/validate', method: 'POST', timeout: 8000,
+      headers: { 'content-type': 'application/json', 'polar-version': '2026-04', 'content-length': Buffer.byteLength(body) } }, function (res) {
+      let buf = ''; res.on('data', function (d) { buf += d; });
+      res.on('end', function () {
+        if (res.statusCode !== 200) return resolve({ ok: false, offline: false });
+        try { const j = JSON.parse(buf); resolve({ ok: j && (j.status === 'granted' || j.valid === true || !!j.id), offline: false }); }
+        catch (e) { resolve({ ok: false, offline: false }); }
+      });
+    });
+    req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
+    req.on('error', function () { resolve({ ok: false, offline: true }); });
+    req.write(body); req.end();
+  });
+}
+async function ensure(explicitKey) {
+  const st = load();
+  const key = explicitKey || process.env.READYSTACK_LICENSE || st.key;
+  if (!key) return { ok: false, why: 'no_key' };
+  const age = Date.now() - (st.okAt || 0);
+  if (!explicitKey && st.key === key && age < RECHECK_MS) return { ok: true, cached: true };
+  const r = await validate(String(key).trim());
+  if (r.ok) { save({ key: String(key).trim(), okAt: Date.now() }); return { ok: true }; }
+  if (r.offline && st.key === key && age < GRACE_MS) return { ok: true, offline: true };
+  return { ok: false, why: r.offline ? 'offline' : 'invalid' };
+}
+// ★s134 — 구독 규칙 피드(층3 "바뀌면 업데이트"): 키 있는 손님만 · 7일마다 · 오프라인은 캐시. 워커 GET /api/rules/<slug>?key=
+const FEED_URL = 'https://getreadystack.com/api/rules/';
+function pullFeed() {
+  const st = load(); const key = process.env.READYSTACK_LICENSE || st.key; const cached = st.feed || null;
+  if (!key) return Promise.resolve(cached);
+  if (cached && (Date.now() - (st.feedAt || 0)) < RECHECK_MS) return Promise.resolve(cached);
+  return new Promise(function (resolve) {
+    let req;
+    try {
+      req = https.get(FEED_URL + encodeURIComponent(SLUG) + '?key=' + encodeURIComponent(key), { timeout: 8000, headers: { 'user-agent': 'readystack-cli' } }, function (res) {
+        let buf = ''; res.on('data', function (d) { buf += d; });
+        res.on('end', function () {
+          if (res.statusCode !== 200) return resolve(cached);
+          try { const j = JSON.parse(buf); if (!j || !Array.isArray(j.rules)) return resolve(cached); save(Object.assign(load(), { feed: j, feedAt: Date.now() })); resolve(j); }
+          catch (e) { resolve(cached); }
+        });
+      });
+    } catch (e) { return resolve(cached); }
+    req.on('timeout', function () { req.destroy(); resolve(cached); });
+    req.on('error', function () { resolve(cached); });
+  });
+}
+module.exports = { ensure, BUY_URL, storePath, pullFeed };

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@readystack/gpsr-listing-lint",
+  "version": "1.0.0",
+  "description": "Audits a product feed row by row against Article 19 of the EU General Product Safety Regulation",
+  "license": "SEE LICENSE IN LICENSE.txt",
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "gpsr",
+    "product feed",
+    "ecommerce",
+    "compliance",
+    "csv",
+    "eu",
+    "marketplace"
+  ],
+  "homepage": "https://getreadystack.com",
+  "funding": "https://buy.polar.sh/polar_cl_MeEOXqXAf3FoF5aXVJjeeyaoJJNIODsmsm5CK0skgvG",
+  "bin": {
+    "gpsr-listing-lint": "cli.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "mcpName": "io.github.jmshinhwa/gpsr-listing-lint",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jmshinhwa/readystack-themes.git",
+    "directory": "gpsr-listing-lint"
+  },
+  "files": [
+    "cli.js",
+    "license.js",
+    "rules.json",
+    "strings.json",
+    "README.md",
+    "LICENSE.txt",
+    "engine.js"
+  ]
+}

package/rules.json

@@ -0,0 +1,74 @@
+[
+ {
+  "id": "A19a-NAME",
+  "sev": "error",
+  "article": "GPSR Art. 19(a)",
+  "msg": "No manufacturer name in the offer. Art. 19(a) wants the name, registered trade name or trade mark of the manufacturer on the listing itself."
+ },
+ {
+  "id": "A19a-POST",
+  "sev": "error",
+  "article": "GPSR Art. 19(a)",
+  "msg": "No manufacturer postal address. Art. 19(a) wants a postal address at which the manufacturer can be contacted, shown in the offer."
+ },
+ {
+  "id": "A19a-ELEC",
+  "sev": "error",
+  "article": "GPSR Art. 19(a)",
+  "msg": "No manufacturer electronic address. Art. 19(a) wants an e-mail address or contact URL next to the postal one."
+ },
+ {
+  "id": "A19a-NOREPLY",
+  "sev": "warn",
+  "article": "GPSR Art. 19(a)",
+  "msg": "Electronic address is an unmonitored mailbox. Art. 19(a) asks for an address at which the manufacturer can be contacted, not one that bounces."
+ },
+ {
+  "id": "A19a-NOBRAND",
+  "sev": "warn",
+  "article": "GPSR Art. 19(a)",
+  "msg": "Manufacturer field holds a placeholder brand (generic / unbranded / OEM / the shop's own name). That is not a manufacturer identity."
+ },
+ {
+  "id": "A19b-RP",
+  "sev": "error",
+  "article": "GPSR Art. 19(b)",
+  "msg": "Manufacturer is established outside the EU/EEA and no Responsible Person is named. Art. 19(b) requires the name, postal and electronic address of the responsible person under Art. 16(1) GPSR or Art. 4(1) of Reg. (EU) 2019/1020."
+ },
+ {
+  "id": "A19b-RP-EU",
+  "sev": "error",
+  "article": "GPSR Art. 19(b)",
+  "msg": "Responsible Person is named but their address is outside the EU/EEA. The responsible person must be established in the Union."
+ },
+ {
+  "id": "A19b-RP-ELEC",
+  "sev": "error",
+  "article": "GPSR Art. 19(b)",
+  "msg": "Responsible Person has no electronic address. Art. 19(b) asks for name, postal AND electronic address."
+ },
+ {
+  "id": "A19c-PIC",
+  "sev": "error",
+  "article": "GPSR Art. 19(c)",
+  "msg": "No picture of the product. Art. 19(c) names the picture as part of the information allowing identification of the product."
+ },
+ {
+  "id": "A19c-ID",
+  "sev": "error",
+  "article": "GPSR Art. 19(c)",
+  "msg": "No product identifier. Art. 19(c) wants the type and any other product identifier (model, MPN, GTIN) in the offer."
+ },
+ {
+  "id": "A19d-WARN",
+  "sev": "error",
+  "article": "GPSR Art. 19(d)",
+  "msg": "Product carries warning-bearing signals (age limit, battery, CE, chemical, electrical) but the offer shows no warning or safety information. Art. 19(d) requires it in the offer, not only on the box."
+ },
+ {
+  "id": "A19d-LANG",
+  "sev": "warn",
+  "article": "GPSR Art. 19(d)",
+  "msg": "Warning text is not in the language of the target market. Art. 19(d) requires a language easily understood by consumers in the Member State where the product is made available."
+ }
+]

package/strings.json

@@ -0,0 +1,10 @@
+{
+ "name": "GPSR Listing Lint",
+ "subtitle": "Audits a product feed row by row against Article 19 of the EU General Product Safety Regulation",
+ "bin": "gpsr-listing-lint",
+ "price": 29,
+ "free": "Open any product feed file and see every listing row that is missing a GPSR Article 19 field, with its line number and the exact article it fails — no key, nothing uploaded.",
+ "paid": "Export a dated evidence pack for the whole workspace catalogue — every feed file, every failing row, per-rule counts — as CSV and Markdown you can hand to a marketplace, importer or auditor.",
+ "need_key": "This option needs a licence (GPSR Listing Lint).",
+ "exts": []
+}