@readystack/resilience-plan-lint 1.0.1 → 1.0.2

package/README.md

@@ -1,10 +1,10 @@
 # Resilience Plan Lint (CER Directive)
 
-![Resilience Plan Lint (CER Directive) — finds the line](https://getreadystack.com/img/promo/resilience-plan-lint_demo.gif)
-
 ![Resilience Plan Lint (CER Directive)](https://getreadystack.com/img/promo/sku335211_result_card.jpg)
 
-Critical infrastructure risk assessment and resilience plan checks against EU CER Directive 2022/2557 Art. 12-15: initial incident notice within 24 hours, detailed report within one month, first assessment within nine months of designation, review at least every four years.
+![Resilience Plan Lint (CER Directive) — finds the line](https://getreadystack.com/img/promo/resilience-plan-lint_demo.gif)
+
+Checks EU critical entity risk assessment and resilience plans against CER Directive 2022/2557 Art. 12-15: 24-hour notice, one-month report, nine-month first assessment, four-year review, all hazards and all six Art. 13(1) measure areas including drought and climate adaptation.
 
 ## Install
 
@@ -50,7 +50,7 @@ Tools: `check_text` and `check_file` (free) · `check_dir` (licence). The agent
 
 The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
 
-[Get a licence](https://buy.polar.sh/polar_cl_roT2BUBnJjC4ZxUPjFykawCuTQbNsbn1GgRWi03ruw0)
+[Get a licence](https://getreadystack.com/api/buy/cl/polar_cl_roT2BUBnJjC4ZxUPjFykawCuTQbNsbn1GgRWi03ruw0)
 
 
 <!-- resilience plan lint -->

package/license.js

@@ -3,7 +3,7 @@
 const https = require('https'), fs = require('fs'), path = require('path'), os = require('os');
 const ORG_ID = 'a5cdf664-d8e7-4f87-8895-056717aaba17';
 const BENEFIT_ID = 'd935d626-7877-404c-ab90-7455cc38dee8';   // s142 — this product's Polar benefit (s140 law: ask with benefit_id, or one key opens every product)
-const BUY_URL = 'https://buy.polar.sh/polar_cl_roT2BUBnJjC4ZxUPjFykawCuTQbNsbn1GgRWi03ruw0';
+const BUY_URL = 'https://getreadystack.com/api/buy/cl/polar_cl_roT2BUBnJjC4ZxUPjFykawCuTQbNsbn1GgRWi03ruw0';
 const SLUG = 'resilience-plan-lint';
 const GRACE_MS = 30 * 24 * 3600 * 1000;   // after a successful check, 30 days work offline
 const RECHECK_MS = 7 * 24 * 3600 * 1000;  // re-ask Polar every 7 days (refunds / cancellations)
@@ -11,8 +11,28 @@ function storePath() { return path.join(process.env.READYSTACK_HOME || path.join
 function load() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')); } catch (e) { return {}; } }
 function save(o) { try { fs.mkdirSync(path.dirname(storePath()), { recursive: true }); fs.writeFileSync(storePath(), JSON.stringify(o)); } catch (e) { /* read-only home: still works for this run */ } }
 const ALL_BENEFIT_ID = '22692551-5203-4467-b1a3-e33cdba6589d';   // s149 2026-09-17 — 팀 키(전 린터 한 키 · Polar benefit) · 상품 benefit 다음에 한 번 더 묻는다
+// s170 2026-09-29 — ask OUR worker first (/api/lic): keys bought on Whop open here (a price-tier key binds to the first tool it opens · the team key opens every tool). Then the old Polar check.
 function validate(key) {
-  return validate1(key, BENEFIT_ID).then(function (r) { return (r.ok || r.offline || !/^[0-9a-f-]{36}$/.test(ALL_BENEFIT_ID)) ? r : validate1(key, ALL_BENEFIT_ID); });
+  return validateHub(key).then(function (h) {
+    if (h.ok) return h;
+    return validate1(key, BENEFIT_ID).then(function (r) { return (r.ok || r.offline || !/^[0-9a-f-]{36}$/.test(ALL_BENEFIT_ID)) ? r : validate1(key, ALL_BENEFIT_ID); })
+      .then(function (r) { return r.ok ? r : { ok: false, offline: !!(h.offline || r.offline) }; });
+  });
+}
+function validateHub(key) {
+  return new Promise(function (resolve) {
+    const req = https.request({ hostname: 'getreadystack.com', path: '/api/lic?key=' + encodeURIComponent(key) + '&slug=' + encodeURIComponent(SLUG),
+      method: 'GET', timeout: 8000, headers: { 'accept': 'application/json', 'user-agent': 'readystack-cli/' + SLUG } }, function (res) {
+      let buf = ''; res.on('data', function (d) { buf += d; });
+      res.on('end', function () {
+        if (res.statusCode !== 200) return resolve({ ok: false, offline: res.statusCode >= 500 });
+        try { const j = JSON.parse(buf); resolve({ ok: !!(j && j.ok), offline: false }); } catch (e) { resolve({ ok: false, offline: false }); }
+      });
+    });
+    req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
+    req.on('error', function () { resolve({ ok: false, offline: true }); });
+    req.end();
+  });
 }
 function validate1(key, ben) {
   return new Promise(function (resolve) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@readystack/resilience-plan-lint",
-  "version": "1.0.1",
-  "description": "Critical infrastructure risk assessment and resilience plan checks against EU CER Directive 2022/2557 Art. 12-15: initial incident notice within 24 hours, detailed report within one month, first asses",
+  "version": "1.0.2",
+  "description": "Checks EU critical entity risk assessment and resilience plans against CER Directive 2022/2557 Art. 12-15: 24-hour notice, one-month report, nine-month first assessment, four-year review, all hazards ",
   "license": "SEE LICENSE IN LICENSE.txt",
   "publishConfig": {
     "access": "public"
@@ -17,7 +17,7 @@
     "markdown lint"
   ],
   "homepage": "https://getreadystack.com",
-  "funding": "https://buy.polar.sh/polar_cl_roT2BUBnJjC4ZxUPjFykawCuTQbNsbn1GgRWi03ruw0",
+  "funding": "https://getreadystack.com/api/buy/cl/polar_cl_roT2BUBnJjC4ZxUPjFykawCuTQbNsbn1GgRWi03ruw0",
   "bin": {
     "resilience-plan-lint": "cli.js"
   },

package/rules.json

@@ -41,13 +41,13 @@
  {
   "id": "CER-12-HAZARDS",
   "sev": "warning",
-  "art": "Art. 12(1)",
+  "art": "Art. 12(1) (Directive (EU) 2022/2557, OJ L 333, 27.12.2022)",
   "title": "Hazard category missing from the all-hazards assessment",
   "fix": "Assess natural, accidental, public health and antagonistic risks",
   "categories": [
    [
     "natural hazards",
-    "natural (hazard|disaster)|flood|storm|earthquake|wildfire|heatwave|drought|climate"
+    "natural (hazard|disaster)|flood|storm|earthquake|wildfire|heatwave|drought|water scarcity|climate"
    ],
    [
     "accidents",
@@ -82,24 +82,32 @@
  {
   "id": "CER-13-MEASURES",
   "sev": "warning",
-  "art": "Art. 13(1)",
+  "art": "Art. 13(1)(a)-(f) (Directive (EU) 2022/2557, OJ L 333, 27.12.2022)",
   "title": "Resilience measure area missing from the plan",
-  "fix": "Cover all Art. 13(1) measure areas in the resilience plan",
+  "fix": "Cover all six Art. 13(1) measure areas in the resilience plan; a drought or flood hazard needs a matching prevention and climate adaptation measure under point (a)",
   "categories": [
    [
-    "physical protection",
+    "prevention with disaster risk reduction and climate adaptation measures (point a)",
+    "climate (change )?adaptation|disaster risk reduction|drought (contingency|management|response) plan|water scarcity (plan|measure)|prevent(ion|ive)? (measure|incident)|prevent incidents"
+   ],
+   [
+    "physical protection (point b)",
     "physical protection|fenc|perimeter|access control|barrier"
    ],
    [
-    "recovery and business continuity",
+    "crisis management procedures and alert routines (point c)",
+    "crisis management|crisis response|alert routine|emergency response|incident response|escalation procedure"
+   ],
+   [
+    "recovery and business continuity (point d)",
     "business continuity|recover|alternative supply"
    ],
    [
-    "personnel security and background checks",
+    "personnel security and background checks (point e)",
     "background check|personnel security|vetting|access rights"
    ],
    [
-    "staff training and exercises",
+    "staff training and exercises (point f)",
     "training|exercise|drill|awareness"
    ]
   ]

package/strings.json

@@ -1,6 +1,6 @@
 {
  "name": "Resilience Plan Lint (CER Directive)",
- "subtitle": "Critical infrastructure risk assessment and resilience plan checks against EU CER Directive 2022/2557 Art. 12-15: initial incident notice within 24 hours, detailed report within one month, first assessment within nine months of designation, review at least every four years.",
+ "subtitle": "Checks EU critical entity risk assessment and resilience plans against CER Directive 2022/2557 Art. 12-15: 24-hour notice, one-month report, nine-month first assessment, four-year review, all hazards and all six Art. 13(1) measure areas including drought and climate adaptation.",
  "bin": "resilience-plan-lint",
  "price": 29,
  "free": "Check one risk assessment or resilience plan file against CER Art. 12-15 and see every finding with its line number.",