preflight-kit 0.2.0__tar.gz

preflight_kit-0.2.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,45 @@
+name: Bug report
+description: Something in csv-preflight behaved incorrectly (wrong finding, crash, bad auto-fix).
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting. Please do **not** attach a real store export that
+        contains customer or order data — this tool refuses those files by design,
+        and we don't want that data in a public issue either. A small, redacted
+        sample that reproduces the problem is ideal.
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: Output of `csv-preflight --version` (or the commit you ran from).
+      placeholder: "0.1.0"
+    validations:
+      required: true
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened
+      description: What did the tool do, and what did you expect instead?
+      placeholder: |
+        I ran `preflight check products.csv` and it reported a duplicate handle,
+        but the handles are actually different (they differ only in case).
+    validations:
+      required: true
+  - type: textarea
+    id: repro
+    attributes:
+      label: Minimal reproduction
+      description: The smallest CSV snippet (a few rows) and the exact command that reproduces it.
+      render: text
+    validations:
+      required: true
+  - type: input
+    id: env
+    attributes:
+      label: Environment
+      description: OS and Python version (`python --version`).
+      placeholder: "macOS 14 / Python 3.12"
+    validations:
+      required: false

preflight_kit-0.2.0/.github/ISSUE_TEMPLATE/csv_import_story.yml

@@ -0,0 +1,42 @@
+name: A CSV import that went wrong
+description: Share a Shopify product-CSV import that broke, so a future check can catch it.
+labels: [import-story]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        This tool exists because Shopify product-CSV imports fail in quiet, specific
+        ways. If one of those bit you, describe it here — it helps decide which check
+        to build next. **Redact anything private**: no customer or order data, no
+        access tokens. A description of *what broke* is enough; you don't have to
+        attach the file.
+
+        You can also check a CSV yourself in the browser first (no upload, no login):
+        https://preflight-kit.pages.dev/
+  - type: textarea
+    id: what-broke
+    attributes:
+      label: What went wrong with the import
+      description: What did you upload, and how did Shopify (or your store) misbehave afterward?
+      placeholder: |
+        I edited product prices in Excel, re-uploaded, and half my products lost
+        their images. The import dialog said it succeeded.
+    validations:
+      required: true
+  - type: textarea
+    id: how-found
+    attributes:
+      label: How did you find out
+      description: Did a customer report it? A spot check? How long after the upload?
+    validations:
+      required: false
+  - type: dropdown
+    id: would-check-help
+    attributes:
+      label: Would a pre-upload check have saved you?
+      options:
+        - "Yes — I'd have caught it before uploading"
+        - "Maybe — depends how it's flagged"
+        - "No — the problem was live-store behavior a file check can't see"
+    validations:
+      required: false

preflight_kit-0.2.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,30 @@
+name: Feature request
+description: Suggest a focused improvement to Shopify product-CSV preflight validation.
+labels: [enhancement]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thank you for suggesting an improvement. Please do not include customer or
+        order data, credentials, access tokens, or an unredacted store export.
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem to solve
+      description: What import risk or pre-upload workflow problem is not covered today?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed behavior
+      description: Describe the expected finding or safe behavior. Include a small redacted CSV example if useful.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: What current workflow or workaround have you tried?
+    validations:
+      required: false

preflight_kit-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,22 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - name: Install uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          enable-cache: true
+      - name: Install dependencies
+        run: uv sync --locked --extra dev
+      - name: Run tests
+        run: uv run --frozen pytest

preflight_kit-0.2.0/.gitignore

@@ -0,0 +1,42 @@
+# Secrets / env
+.env
+.env.*
+!.env.example
+
+# Node / TypeScript (Shopify app, UI)
+node_modules/
+.next/
+dist/
+build/
+coverage/
+*.tsbuildinfo
+
+# Python (import/report beta, ETL)
+.venv/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+__pycache__/
+*.pyc
+
+# Local data (do not commit merchant/channel exports)
+data/private/
+data/raw/
+*.sqlite
+*.sqlite3
+*.db
+
+# Logs / temp
+tmp/
+*.log
+
+# OS / IDE
+.DS_Store
+Thumbs.db
+.idea/
+
+# Generated test fixtures (regenerated by tests/conftest.py)
+tests/fixtures/over_15mb/
+
+# CLI output dir (sample reports are saved under examples/reports/ instead)
+/out/

preflight_kit-0.2.0/CHANGELOG.md

@@ -0,0 +1,30 @@
+# Changelog
+
+All notable user-facing changes to this project are recorded here.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versions correspond to repository tags and PyPI releases where available.
+
+## [0.2.0] - 2026-07-19
+
+Package and brand rename. No functional rule changes.
+
+### Changed
+
+- Package name: `csv-preflight` → `preflight-kit`; import package: `csv_preflight` → `preflight_kit`.
+- CLI command: `csv-preflight` → `preflight`.
+- Repository moved to `q00tar00/preflight-kit`; web checker moved to `preflight-kit.pages.dev`.
+- The old PyPI name `csv-preflight` stays published but will not receive new releases.
+
+## [0.1.0] - 2026-06-23
+
+Initial public release of the Shopify product-CSV preflight CLI.
+
+### Added
+
+- Local validation for Shopify product CSV structure, headers, file limits, and common import-risk conditions.
+- Reports in Markdown and CSV, plus a fixed CSV for proven mechanical corrections only.
+- English and Japanese report output.
+- Product-CSV privacy guard that refuses apparent order or customer exports.
+
+[0.2.0]: https://github.com/q00tar00/preflight-kit/releases/tag/v0.2.0
+[0.1.0]: https://github.com/q00tar00/preflight-kit/releases/tag/v0.1.0

preflight_kit-0.2.0/CONTRIBUTING.md

@@ -0,0 +1,41 @@
+# Contributing to Shopify Product CSV Preflight
+
+Thanks for helping improve `preflight-kit`. This project validates Shopify product CSV files before import; changes should preserve its local-only, non-destructive design.
+
+## Before opening an issue
+
+- Use [GitHub Issues](https://github.com/q00tar00/preflight-kit/issues) for bugs, feature requests, questions, and product-CSV import stories.
+- Do not attach real customer or order exports, access tokens, or other sensitive data. Provide a minimal, redacted CSV reproduction instead.
+- Check the [rule reference](docs/shopify-product-csv-rules.md) before reporting an expected rule outcome.
+
+## Development setup
+
+Requirements: Python 3.11+ and [uv](https://docs.astral.sh/uv/).
+
+```bash
+git clone https://github.com/q00tar00/preflight-kit.git
+cd preflight-kit
+uv sync --extra dev
+uv run pytest
+```
+
+Run the CLI against a sample file with:
+
+```bash
+uv run preflight check examples/inputs/shopify-product-import-sample.csv --out-dir ./out --lang en --intent new
+```
+
+The generated `out/` directory is local output and should not be committed.
+
+## Pull requests
+
+- Keep pull requests focused and explain the user-visible validation or documentation change.
+- Add or update tests for changes to validation, report, or auto-fix behavior.
+- Preserve the distinction between proven auto-fixes and findings that need user judgment.
+- Keep documentation in English and update the rule reference when a rule’s behavior changes.
+- Do not add store access, API calls, or data-upload behavior without an explicit design discussion first.
+- Confirm `uv run pytest` passes before requesting review.
+
+## Scope and review
+
+The maintainer, [q00tar00](https://github.com/q00tar00), reviews contributions on a best-effort basis. Issues and pull requests should be respectful, reproducible, and limited to Shopify product-CSV preflight validation or its documentation and tooling.

preflight_kit-0.2.0/LICENSE

@@ -0,0 +1,33 @@
+Shopify Product CSV Preflight Validator — Source-Available License
+Copyright (c) 2026 q00tar00
+
+This software is source-available, not open source. The source code is published
+so that you can read it, audit it, and evaluate the tool. It is NOT placed in the
+public domain and no broad license is granted beyond the terms below.
+
+1. Permitted use (no charge)
+   You may download, build, run, and evaluate this software for your own personal
+   or internal business use — for example, to validate your own Shopify product CSV
+   files. You may modify your own copy for that purpose.
+
+2. Reservation of rights
+   All rights not expressly granted above are reserved by the copyright holder.
+
+3. Restrictions (require prior written permission)
+   Without the copyright holder's prior written permission you may NOT:
+   (a) redistribute, resell, sublicense, or publish this software or a derivative
+       of it, in source or binary form, whether or not for a fee;
+   (b) offer this software (or a derivative) as a hosted or managed service; or
+   (c) remove or alter this license or the copyright notice in redistributed copies.
+
+4. No warranty
+   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+   IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+   FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. A clean report does NOT guarantee
+   a successful Shopify import; the tool reads a file and cannot verify live-store
+   behavior. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+   CLAIM, DAMAGES, OR OTHER LIABILITY ARISING FROM, OUT OF, OR IN CONNECTION WITH
+   THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+For permissions beyond this license, contact the copyright holder via the project's
+GitHub repository: https://github.com/q00tar00/shopify

preflight_kit-0.2.0/PKG-INFO

@@ -0,0 +1,124 @@
+Metadata-Version: 2.4
+Name: preflight-kit
+Version: 0.2.0
+Summary: Preflight Kit — preflight validator for Shopify product CSV, catches import-breaking mistakes before you upload (formerly csv-preflight)
+Project-URL: Homepage, https://preflight-kit.pages.dev/
+Project-URL: Repository, https://github.com/q00tar00/preflight-kit
+Project-URL: Issues, https://github.com/q00tar00/preflight-kit/issues
+Project-URL: Changelog, https://github.com/q00tar00/preflight-kit/blob/main/CHANGELOG.md
+Author: q00tar00
+License: LicenseRef-Source-Available
+License-File: LICENSE
+Keywords: csv,ecommerce,preflight,product-import,shopify,validator
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Utilities
+Requires-Python: >=3.11
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# Preflight Kit — product CSV preflight validator for Shopify
+
+[![PyPI version](https://img.shields.io/pypi/v/preflight-kit.svg)](https://pypi.org/project/preflight-kit/)
+[![Source-available license](https://img.shields.io/badge/license-source--available-blue.svg)](LICENSE)
+[![CI](https://github.com/q00tar00/preflight-kit/actions/workflows/ci.yml/badge.svg)](https://github.com/q00tar00/preflight-kit/actions/workflows/ci.yml)
+
+Validate a Shopify **product** CSV before uploading it. `preflight-kit` runs locally, never connects to a Shopify store, and needs no API key. It reports import-risk findings and produces reviewable output files without changing the input CSV.
+
+> **Status:** Beta CLI, version 0.2.0 (formerly published as `csv-preflight`). This is a local, file-processing tool for product CSVs only. It has no Admin API integration, store-write capability, or user account system.
+
+## Project links
+
+- Web checker: [preflight-kit.pages.dev](https://preflight-kit.pages.dev/) (no upload or login)
+- Package: [PyPI — preflight-kit](https://pypi.org/project/preflight-kit/)
+- Source and issue tracker: [q00tar00/preflight-kit](https://github.com/q00tar00/preflight-kit)
+- Change history: [CHANGELOG.md](CHANGELOG.md)
+
+## What it checks
+
+The validator checks Shopify product-CSV structure and row-level risks, including:
+
+- UTF-8 encoding, BOMs, control characters, headers, file size, and column alignment.
+- Missing or duplicate product handles, required-column gaps, and variant parent linkage.
+- Duplicate option combinations and option dependency or position problems.
+- SKU gaps, reused SKUs, and Excel-style scientific notation.
+- Inventory, fulfillment, price, image URL, and image-alt-text consistency.
+- Product CSVs that appear to be order or customer exports: these are refused before row-level processing to avoid handling buyer PII.
+
+It supports current Shopify product-CSV headers and documented legacy aliases. The complete, versioned rule reference is [docs/shopify-product-csv-rules.md](docs/shopify-product-csv-rules.md).
+
+## Install
+
+Requires Python 3.11 or later.
+
+With [uv](https://docs.astral.sh/uv/):
+
+```bash
+uv tool install preflight-kit
+```
+
+With pip:
+
+```bash
+python -m pip install preflight-kit
+```
+
+## Usage
+
+```bash
+preflight check products.csv --out-dir ./out --lang en --intent new
+```
+
+Each run writes the following to `--out-dir`:
+
+- `fixed_products.csv` — a copy with only unambiguous mechanical fixes applied (currently UTF-8 BOM removal and case-only header normalization).
+- `errors.csv` — machine-readable findings with row, rule, severity, and suggested-fix fields.
+- `report.md` — a human-readable summary.
+
+Useful options:
+
+- `--out-dir DIR` — output directory (default: `./out`).
+- `--lang en|ja` — report language (default: `ja`).
+- `--no-fix` — report findings without writing `fixed_products.csv`.
+- `--intent new|update|mixed` — choose the import context used for handle and title severity.
+
+The command exits with status `1` when it finds a critical issue; otherwise it exits with `0`. A zero exit status means no critical finding was detected within the implemented checks, not that Shopify will necessarily accept or apply the import as intended.
+
+For a reproducible example, see the [deliberately messy sample report](examples/reports/preflight-kit-messy-report.md) and its [input CSV](examples/inputs/messy-product-import-sample.csv).
+
+## Boundaries and privacy
+
+The CLI reads a local file and does not upload it or access a Shopify store. It does not verify live-store behavior. In particular, it cannot check image URL reachability, conflicts with existing store handles, metafield product-reference resolution, or option-position consistency with existing products; every report identifies these limits.
+
+Auto-fixes are deliberately limited to proven, unambiguous transformations. Findings that require a business decision are reported but not silently rewritten.
+
+## Documentation
+
+- [Inspection rules](docs/shopify-product-csv-rules.md)
+- [Change history](CHANGELOG.md)
+- [Contributing guide](CONTRIBUTING.md)
+- [Security policy](SECURITY.md)
+
+## Maintenance and support
+
+This project is maintained by the GitHub user [q00tar00](https://github.com/q00tar00). The public GitHub repository and its issue tracker are the project’s canonical communication channels.
+
+For questions, bug reports, feature requests, or examples of a product-CSV import that went wrong, use [GitHub Issues](https://github.com/q00tar00/preflight-kit/issues). Please use a small redacted reproduction and never post customer, order, access-token, or other sensitive data. Support is provided on a best-effort basis; no response-time commitment is made.
+
+## Contributing
+
+Contributions are welcome. Read [CONTRIBUTING.md](CONTRIBUTING.md) for the supported scope, local setup, test command, and pull-request expectations.
+
+## Security
+
+Please follow [SECURITY.md](SECURITY.md) for vulnerability reporting. Do not disclose exploitable security details or sensitive CSV data in a public issue.
+
+## License
+
+This project is source-available, not open source. See [LICENSE](LICENSE) for permitted use and redistribution terms.

preflight_kit-0.2.0/README.md

@@ -0,0 +1,99 @@
+# Preflight Kit — product CSV preflight validator for Shopify
+
+[![PyPI version](https://img.shields.io/pypi/v/preflight-kit.svg)](https://pypi.org/project/preflight-kit/)
+[![Source-available license](https://img.shields.io/badge/license-source--available-blue.svg)](LICENSE)
+[![CI](https://github.com/q00tar00/preflight-kit/actions/workflows/ci.yml/badge.svg)](https://github.com/q00tar00/preflight-kit/actions/workflows/ci.yml)
+
+Validate a Shopify **product** CSV before uploading it. `preflight-kit` runs locally, never connects to a Shopify store, and needs no API key. It reports import-risk findings and produces reviewable output files without changing the input CSV.
+
+> **Status:** Beta CLI, version 0.2.0 (formerly published as `csv-preflight`). This is a local, file-processing tool for product CSVs only. It has no Admin API integration, store-write capability, or user account system.
+
+## Project links
+
+- Web checker: [preflight-kit.pages.dev](https://preflight-kit.pages.dev/) (no upload or login)
+- Package: [PyPI — preflight-kit](https://pypi.org/project/preflight-kit/)
+- Source and issue tracker: [q00tar00/preflight-kit](https://github.com/q00tar00/preflight-kit)
+- Change history: [CHANGELOG.md](CHANGELOG.md)
+
+## What it checks
+
+The validator checks Shopify product-CSV structure and row-level risks, including:
+
+- UTF-8 encoding, BOMs, control characters, headers, file size, and column alignment.
+- Missing or duplicate product handles, required-column gaps, and variant parent linkage.
+- Duplicate option combinations and option dependency or position problems.
+- SKU gaps, reused SKUs, and Excel-style scientific notation.
+- Inventory, fulfillment, price, image URL, and image-alt-text consistency.
+- Product CSVs that appear to be order or customer exports: these are refused before row-level processing to avoid handling buyer PII.
+
+It supports current Shopify product-CSV headers and documented legacy aliases. The complete, versioned rule reference is [docs/shopify-product-csv-rules.md](docs/shopify-product-csv-rules.md).
+
+## Install
+
+Requires Python 3.11 or later.
+
+With [uv](https://docs.astral.sh/uv/):
+
+```bash
+uv tool install preflight-kit
+```
+
+With pip:
+
+```bash
+python -m pip install preflight-kit
+```
+
+## Usage
+
+```bash
+preflight check products.csv --out-dir ./out --lang en --intent new
+```
+
+Each run writes the following to `--out-dir`:
+
+- `fixed_products.csv` — a copy with only unambiguous mechanical fixes applied (currently UTF-8 BOM removal and case-only header normalization).
+- `errors.csv` — machine-readable findings with row, rule, severity, and suggested-fix fields.
+- `report.md` — a human-readable summary.
+
+Useful options:
+
+- `--out-dir DIR` — output directory (default: `./out`).
+- `--lang en|ja` — report language (default: `ja`).
+- `--no-fix` — report findings without writing `fixed_products.csv`.
+- `--intent new|update|mixed` — choose the import context used for handle and title severity.
+
+The command exits with status `1` when it finds a critical issue; otherwise it exits with `0`. A zero exit status means no critical finding was detected within the implemented checks, not that Shopify will necessarily accept or apply the import as intended.
+
+For a reproducible example, see the [deliberately messy sample report](examples/reports/preflight-kit-messy-report.md) and its [input CSV](examples/inputs/messy-product-import-sample.csv).
+
+## Boundaries and privacy
+
+The CLI reads a local file and does not upload it or access a Shopify store. It does not verify live-store behavior. In particular, it cannot check image URL reachability, conflicts with existing store handles, metafield product-reference resolution, or option-position consistency with existing products; every report identifies these limits.
+
+Auto-fixes are deliberately limited to proven, unambiguous transformations. Findings that require a business decision are reported but not silently rewritten.
+
+## Documentation
+
+- [Inspection rules](docs/shopify-product-csv-rules.md)
+- [Change history](CHANGELOG.md)
+- [Contributing guide](CONTRIBUTING.md)
+- [Security policy](SECURITY.md)
+
+## Maintenance and support
+
+This project is maintained by the GitHub user [q00tar00](https://github.com/q00tar00). The public GitHub repository and its issue tracker are the project’s canonical communication channels.
+
+For questions, bug reports, feature requests, or examples of a product-CSV import that went wrong, use [GitHub Issues](https://github.com/q00tar00/preflight-kit/issues). Please use a small redacted reproduction and never post customer, order, access-token, or other sensitive data. Support is provided on a best-effort basis; no response-time commitment is made.
+
+## Contributing
+
+Contributions are welcome. Read [CONTRIBUTING.md](CONTRIBUTING.md) for the supported scope, local setup, test command, and pull-request expectations.
+
+## Security
+
+Please follow [SECURITY.md](SECURITY.md) for vulnerability reporting. Do not disclose exploitable security details or sensitive CSV data in a public issue.
+
+## License
+
+This project is source-available, not open source. See [LICENSE](LICENSE) for permitted use and redistribution terms.

preflight_kit-0.2.0/SECURITY.md

@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported version
+
+Security fixes are considered for the current released version of `preflight-kit` (currently 0.2.0) and the default branch.
+
+## Reporting a vulnerability
+
+Please report vulnerabilities privately through [GitHub Security Advisories](https://github.com/q00tar00/preflight-kit/security/advisories/new). Include the affected version, a minimal reproduction, impact, and any proposed mitigation.
+
+Do not include customer data, order exports, credentials, access tokens, or a full exploitable proof of concept in a public GitHub Issue.
+
+If private reporting is not available in the repository interface, open a public issue requesting private coordination without disclosing the vulnerability details. The maintainer is the GitHub user [q00tar00](https://github.com/q00tar00); GitHub is the only published contact channel for this project.
+
+## Scope
+
+This policy covers the `preflight-kit` package, its command-line interface, and the source repository. It does not cover Shopify, a merchant’s store configuration, or third-party URLs contained in a CSV.