readystack-play-declaration-gap-lint 1.0.4__py3-none-any.whl

readystack_play_declaration_gap_lint/__init__.py

@@ -0,0 +1 @@
+__version__ = '1.0.4'

readystack_play_declaration_gap_lint/__main__.py

@@ -0,0 +1,12 @@
+import os, sys
+
+
+def main():
+    # Runs the same checker as the npm package on the Node.js runtime installed with this package (nodejs-wheel-binaries).
+    from nodejs_wheel import node
+    here = os.path.dirname(os.path.abspath(__file__))
+    return node([os.path.join(here, "js", "cli.js")] + sys.argv[1:])
+
+
+if __name__ == "__main__":
+    sys.exit(main())

readystack_play_declaration_gap_lint/js/cli.js

@@ -0,0 +1,161 @@
+#!/usr/bin/env node
+// cli.js — the same rules as the VS Code extension, run from a terminal or a container. Generated by adapters.py.
+'use strict';
+const fs = require('fs'), path = require('path');
+const RULES = require('./rules.json');
+const S = require('./strings.json');
+const lic = require('./license.js');
+const ENGINE = require('./engine.js');   // s144 — scaffold products: the same engine the VS Code extension runs
+const RULE_LIST = Array.isArray(ENGINE.RULES) ? ENGINE.RULES : (Array.isArray(RULES) ? RULES : []);
+const RULE_N = ENGINE.RULE_COUNT || RULE_LIST.length;
+function scan(text, file) {
+  const r = ENGINE.engine.check(String(text), { today: new Date().toISOString().slice(0, 10), path: file || '' });
+  return (r && r.findings || []).map((f) => ({ line: parseInt(f.line, 10) || 1, msg: String(f.msg || f.message || f.check || ''), fix: f.fix || null, sev: (String(f.sev || 'error').toLowerCase().startsWith('err') ? 'error' : 'warn') }));
+}
+function isText(p) { try { const b = fs.readFileSync(p); if (b.length > 2 * 1024 * 1024) return false; const s = b.subarray(0, 4096); for (const x of s) if (x === 0) return false; return true; } catch (e) { return false; } }
+function walk(dir, exts, out) {
+  let ents = []; try { ents = fs.readdirSync(dir, { withFileTypes: true }); } catch (e) { return out; }
+  for (const e of ents) {
+    if (['node_modules', '.git', '.hg', '.svn', '.venv', 'venv', '.tox', '.cache', '.next', '.nuxt', '.terraform', '__pycache__'].includes(e.name)) continue;   // s158 — .github · .gitlab-ci.yml · .env · .well-known 은 본다 (옛 줄은 점으로 시작하는 것을 전부 건너뛰어 워크플로 검사기가 .github/workflows 를 못 봤다)
+    const p = path.join(dir, e.name);
+    if (e.isDirectory()) walk(p, exts, out);
+    else if ((!exts.length || exts.includes(path.extname(e.name).toLowerCase())) && isText(p)) out.push(p);
+  }
+  return out;
+}
+function esc(s) { return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;'); }
+function csvq(s) { return '"' + String(s == null ? '' : s).replace(/"/g, '""') + '"'; }
+function render(rows, fmt) {
+  if (fmt === 'json') return JSON.stringify({ tool: S.name, rules: RULE_N, files: rows }, null, 1);
+  if (fmt === 'csv') { const o = ['file,line,severity,message,fix']; for (const r of rows) for (const h of r.hits) o.push([csvq(r.file), h.line, h.sev, csvq(h.msg), csvq(h.fix)].join(',')); return o.join('\n') + '\n'; }
+  if (fmt === 'html') {
+    const n = rows.reduce((a, r) => a + r.hits.length, 0);
+    let o = '<!doctype html><meta charset="utf-8"><title>' + esc(S.name) + ' report</title><style>body{font:14px system-ui;margin:24px}table{border-collapse:collapse}td,th{border:1px solid #ddd;padding:4px 8px;font-size:13px}code{font-family:ui-monospace,monospace}</style>';
+    o += '<h1>' + esc(S.name) + '</h1><p>' + rows.length + ' files · ' + n + ' findings · ' + RULE_N + ' rules</p><table><tr><th>file</th><th>line</th><th>sev</th><th>message</th><th>fix</th></tr>';
+    for (const r of rows) for (const h of r.hits) o += '<tr><td><code>' + esc(r.file) + '</code></td><td>' + h.line + '</td><td>' + esc(h.sev) + '</td><td>' + esc(h.msg) + '</td><td>' + esc(h.fix || '') + '</td></tr>';
+    return o + '</table>';
+  }
+  let o = ''; for (const r of rows) { o += r.file + '\n'; for (const h of r.hits) o += '  ' + String(h.line).padStart(5) + '  ' + h.sev.padEnd(5) + ' ' + h.msg + (h.fix ? '\n         -> ' + h.fix : '') + '\n'; if (!r.hits.length) o += '  (no findings)\n'; }
+  return o;
+}
+function trialState() {
+  // s158 — ⚑7일 무료 없음: 새 체험은 ⛔열지 않는다 · 이미 시작된 체험(trial.json)만 끝까지 지킨다 (읽기 전용)
+  if (process.env.READYSTACK_NO_TRIAL) return { active: false };
+  try {
+    const p = path.join(path.dirname(lic.storePath()), S.bin + '.trial.json');
+    const t = JSON.parse(fs.readFileSync(p, 'utf8'));
+    return { active: !!(t && t.until) && new Date(t.until + 'T23:59:59Z').getTime() > Date.now(), until: t && t.until };
+  } catch (e) { return { active: false }; }
+}
+// ★s158 2026-09-23 — the free run SPEAKS about the rest of the folder (vsix: auto.js · crx: welcome tab).
+//   The answer for the named files is complete and free; the next step is shown with the user's OWN numbers:
+//   "this folder has N more matching files - M issues in K of them" + the one command that sweeps them.
+//   Never blocks, never starts a trial (s158: no free trial - the free answer on the named files is the "try it"), human seat only, 400 files / 1.5 s cap.
+function folderHint(done) {
+  if (!process.stderr.isTTY || process.env.CI || process.env.READYSTACK_NO_HINT || !done.length) return;
+  const base = path.dirname(path.resolve(done[0]));
+  const seen = new Set(done.map((f) => path.resolve(f)));
+  const all = walk(base, S.exts || [], []).filter((f) => !seen.has(path.resolve(f)));
+  if (!all.length) return;
+  const t0 = Date.now(); let issues = 0, hitFiles = 0, scanned = 0;
+  for (const f of all.slice(0, 400)) { if (Date.now() - t0 > 1500) break; let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { continue; } scanned++; const h = scan(t, f); if (h.length) { issues += h.length; hitFiles++; } }
+  const rel = path.relative(process.cwd(), base) || '.';
+  const tail = trialState().active ? 'free during your trial' : '$' + S.price + ' once';
+  const more = all.length + ' more matching file' + (all.length > 1 ? 's' : '');
+  const found = issues ? ' - ' + (scanned < all.length ? 'at least ' : '') + issues + ' issue' + (issues > 1 ? 's' : '') + ' in ' + hitFiles + ' of them' : ' - no issues found in them';
+  process.stderr.write('\n' + (rel === '.' ? 'This folder' : rel) + ' has ' + more + found + '.\n' + (issues ? 'Sweep them all: ' + S.bin + ' --dir ' + (/\s/.test(rel) ? JSON.stringify(rel) : rel) + '   (' + tail + ')\n' : ''));
+}
+let _usePinged = false;
+function pingUse() {
+  try {
+    if (_usePinged) return; _usePinged = true;
+    if (process.env.DO_NOT_TRACK === '1' || process.env.READYSTACK_NO_TELEMETRY || process.env.CI) return;
+    if (!(process.stdout.isTTY || process.stdin.isTTY)) return;   // human seat only (s152)
+    const https = require('https');
+    const body = JSON.stringify({ t: 'use', slug: S.bin, src: 'cli', why: 'free' });
+    const req = https.request({ hostname: 'getreadystack.com', path: '/api/ev', method: 'POST', timeout: 3000,
+      headers: { 'content-type': 'application/json', 'content-length': Buffer.byteLength(body), 'user-agent': 'readystack-cli/' + S.bin } }, function (res) { res.resume(); });
+    req.on('timeout', function () { req.destroy(); }); req.on('error', function () {});
+    req.write(body); req.end();
+  } catch (e) {}
+}
+function mcpServe() {
+  process.env.READYSTACK_MCP = '1';   // s152 - 에이전트(Claude Code·Cursor)가 부른 세션은 사람 자리다 · 키 판 핑 src=mcp
+  // s144 — MCP server over stdio (newline-delimited JSON-RPC · no dependencies). Free: check_text · check_file. Licence (s158: no free trial): check_dir.
+  const rl = require('readline').createInterface({ input: process.stdin });
+  const send = (o) => process.stdout.write(JSON.stringify(o) + '\n');
+  const tools = [
+    { name: 'check_text', description: S.name + ' - run all ' + RULE_N + ' checks on a text (free)', inputSchema: { type: 'object', properties: { text: { type: 'string', description: 'file contents' }, path: { type: 'string', description: 'optional file name for context' } }, required: ['text'] } },
+    { name: 'check_file', description: S.name + ' - run all checks on one file by path (free)', inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] } },
+    { name: 'check_dir', description: S.name + ' - sweep a folder and return every finding (licence; $' + S.price + ' once)', inputSchema: { type: 'object', properties: { dir: { type: 'string' }, ext: { type: 'string', description: 'optional extension filter, e.g. .html' } }, required: ['dir'] } }
+  ];
+  const result = (id, rows) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text: render(rows, 'text') }], structuredContent: { tool: S.name, rules: RULE_N, files: rows } } });
+  const fail = (id, text) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text }], isError: true } });
+  rl.on('line', async (line) => {
+    let m; try { m = JSON.parse(line); } catch (e) { return; }
+    const id = m.id, method = m.method;
+    if (method === 'initialize') return send({ jsonrpc: '2.0', id, result: { protocolVersion: '2025-06-18', capabilities: { tools: {} }, serverInfo: { name: '@readystack/' + S.bin, version: '1.0.0' } } });
+    if (method === 'notifications/initialized' || method === 'ping') { if (id !== undefined) send({ jsonrpc: '2.0', id, result: {} }); return; }
+    if (method === 'tools/list') return send({ jsonrpc: '2.0', id, result: { tools } });
+    if (method === 'tools/call') {
+      const name = (m.params || {}).name, args = (m.params || {}).arguments || {};
+      try {
+        if (name === 'check_text') return result(id, [{ file: args.path || '(text)', hits: scan(String(args.text || ''), args.path || '') }]);
+        if (name === 'check_file') return result(id, [{ file: args.path, hits: scan(fs.readFileSync(args.path, 'utf8'), args.path) }]);
+        if (name === 'check_dir') {
+          const r = await lic.ensure();
+          if (!r.ok && !trialState().active) return fail(id, S.need_key + ' Get a licence ($' + S.price + ', once): ' + lic.BUY_URL);
+          const files = walk(args.dir, args.ext ? [args.ext] : (S.exts || []), []);
+          return result(id, files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t, f) }; }));
+        }
+        return send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'unknown tool ' + name } });
+      } catch (e) { return fail(id, String(e && e.message || e)); }
+    }
+    if (id !== undefined) send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'method not found: ' + method } });
+  });
+}
+function help() {
+  return [S.name + ' - ' + S.subtitle, '', 'Usage: ' + S.bin + ' <file> [more files]           check the files you name (free, every rule)',
+    '       ' + S.bin + ' --dir <folder> [--ext .html]  scan a whole folder            (licence)',
+    '       ' + S.bin + ' ... --report csv|json|html [--out file]   export a report   (licence)',
+    '       ' + S.bin + ' ... --ci                      exit 1 when an error-level finding exists (licence)',
+    '       ' + S.bin + ' --license <key>               store your licence key (or set READYSTACK_LICENSE)',
+    '       ' + S.bin + ' --rules                       list the ' + RULE_N + ' rules',
+    '       ' + S.bin + ' --mcp                         run as an MCP server (stdio) for Claude Code / Cursor / Windsurf - free checks, folder sweep needs a licence', '',
+    'Free: ' + S.free, 'Licence ($' + S.price + ', once): ' + S.paid, 'Get a licence: ' + lic.BUY_URL, ''].join('\n');
+}
+(async function main() {
+  try { const _feed = await lic.pullFeed(); if (_feed && Array.isArray(_feed.rules)) { if (Array.isArray(ENGINE.RULES)) for (const r of _feed.rules) ENGINE.RULES.push(r); } } catch (e) {}   // ★s134 구독 피드 병합 (키 있는 손님만)
+  const a = process.argv.slice(2);
+  const get = (k) => { const i = a.indexOf(k); return i >= 0 ? a[i + 1] : null; };
+  if (a.includes('--mcp')) { mcpServe(); return; }
+  if (!a.length || a.includes('--help') || a.includes('-h')) { process.stdout.write(help()); return; }
+  if (a.includes('--rules')) { process.stdout.write((RULE_LIST.length ? RULE_LIST.map((r, i) => String(i + 1).padStart(3) + '  [' + (r.sev || 'warn') + '] ' + (r.message || r.msg || r.id || '')) : Array.from({ length: RULE_N }, (_, i) => String(i + 1).padStart(3) + '  [engine] check ' + (i + 1))).join('\n') + '\n'); return; }
+  if (a.includes('--license')) { const r = await lic.ensure(get('--license')); process.stdout.write(r.ok ? 'Licence stored: ' + lic.storePath() + '\n' : 'Licence not accepted (' + r.why + '). Get one: ' + lic.BUY_URL + '\n'); process.exit(r.ok ? 0 : 2); }
+  const dir = get('--dir'), fmt = get('--report'), out = get('--out'), ci = a.includes('--ci');
+  const exts = a.includes('--ext') ? [get('--ext')] : (S.exts || []);
+  const paid = !!(dir || fmt || ci);
+  if (paid) {
+    const r = await lic.ensure();
+    if (!r.ok) {
+      const t = trialState();   // s158 — ⚑7일 무료 없음 · 이미 시작된 체험만 지킨다
+      if (t.active) process.stderr.write('Trial: the full run is free until ' + t.until + ' — after that $' + S.price + ' once. Get a licence: ' + lic.BUY_URL + '\n');
+      else {
+        // s158 — the key is asked WITH the customer's own count (endowment · open loop): how many issues this folder holds.
+        let own = '';
+        if (dir) { try { const all = walk(dir, exts, []); let n = 0, k = 0, sc = 0; const t0 = Date.now();
+          for (const f of all.slice(0, 2000)) { if (Date.now() - t0 > 4000) break; let tx = ''; try { tx = fs.readFileSync(f, 'utf8'); } catch (e) { continue; } sc++; const h = scan(tx, f); if (h.length) { n += h.length; k++; } }
+          if (n) own = dir + ': ' + (sc < all.length ? 'at least ' : '') + n + ' issue' + (n > 1 ? 's' : '') + ' in ' + k + ' of ' + all.length + ' files.\n'; } catch (e) {} }
+        process.stderr.write(own + S.need_key + '\n  set READYSTACK_LICENSE=<key>  or  ' + S.bin + ' --license <key>\n  Get a licence ($' + S.price + ' once): ' + lic.BUY_URL + '\n'); process.exit(2);
+      }
+    }
+  }
+  const files = dir ? walk(dir, exts, []) : a.filter((x, i) => !x.startsWith('--') && !['--dir', '--report', '--out', '--ext', '--license'].includes(a[i - 1]));
+  if (!files.length) { process.stderr.write('No files. ' + S.bin + ' --help\n'); process.exit(2); }
+  const rows = files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t) }; });
+  const text = render(rows, fmt || 'text');
+  if (out) fs.writeFileSync(out, text); else process.stdout.write(text.endsWith('\n') ? text : text + '\n');
+  if (!paid) { try { folderHint(files); } catch (e) {} pingUse(); }   // s158 — a free run ends with the user's own folder count + one anonymous 'used' count (human seat only)
+  const errors = rows.reduce((n, r) => n + r.hits.filter((h) => h.sev === 'error').length, 0);
+  if (ci && errors) process.exit(1);
+})().catch((e) => { process.stderr.write(String(e && e.stack || e) + '\n'); process.exit(3); });

readystack_play_declaration_gap_lint/js/engine.js

@@ -0,0 +1,120 @@
+// Play Declaration Gap Lint — the brain. Same file runs in Node (extension) and in the browser (free web check).
+'use strict';
+var RULES = (typeof module !== 'undefined' && module.exports) ? require('./rules.json') : window.PLAYDECL_RULES;
+
+// foregroundServiceType -> the FOREGROUND_SERVICE_* permission Android 14 (API 34) demands for it.
+var FGS_PERM = {
+  camera: 'FOREGROUND_SERVICE_CAMERA',
+  connectedDevice: 'FOREGROUND_SERVICE_CONNECTED_DEVICE',
+  dataSync: 'FOREGROUND_SERVICE_DATA_SYNC',
+  health: 'FOREGROUND_SERVICE_HEALTH',
+  location: 'FOREGROUND_SERVICE_LOCATION',
+  mediaPlayback: 'FOREGROUND_SERVICE_MEDIA_PLAYBACK',
+  mediaProcessing: 'FOREGROUND_SERVICE_MEDIA_PROCESSING',
+  mediaProjection: 'FOREGROUND_SERVICE_MEDIA_PROJECTION',
+  microphone: 'FOREGROUND_SERVICE_MICROPHONE',
+  phoneCall: 'FOREGROUND_SERVICE_PHONE_CALL',
+  remoteMessaging: 'FOREGROUND_SERVICE_REMOTE_MESSAGING',
+  specialUse: 'FOREGROUND_SERVICE_SPECIAL_USE',
+  systemExempted: 'FOREGROUND_SERVICE_SYSTEM_EXEMPTED'
+};
+
+function lineOf(text, idx) { return text.slice(0, idx).split('\n').length; }
+function flat(s) { return String(s == null ? '' : s).replace(/\s+/g, ' ').trim(); }       // attributes wrap over lines in real manifests
+function attr(tag, name) {
+  var m = new RegExp('android:' + name + '\\s*=\\s*"([^"]*)"').exec(tag);
+  return m ? m[1] : '';
+}
+// Commented-out permissions must not count. Keep the line count intact.
+function stripComments(text) {
+  return String(text).replace(/<!--[\s\S]*?-->/g, function (c) { return c.replace(/[^\n]/g, ' '); });
+}
+
+function permissions(text) {
+  var out = [], re = /<uses-permission(?:-sdk-\d+)?\b([^>]*)>/g, m;
+  while ((m = re.exec(text))) {
+    var a = flat(m[1]), n = attr(a, 'name');
+    if (n) out.push({ name: n, line: lineOf(text, m.index) });
+  }
+  return out;
+}
+
+function services(text) {
+  var out = [], re = /<service\b([^>]*)>/g, m;
+  while ((m = re.exec(text))) {
+    var open = flat(m[1]);
+    var body = '';
+    if (!/\/$/.test(open)) {
+      var end = text.indexOf('</service>', re.lastIndex);
+      body = flat(text.slice(re.lastIndex, end === -1 ? text.length : end));
+    }
+    out.push({
+      line: lineOf(text, m.index),
+      name: attr(open, 'name'),
+      perm: attr(open, 'permission'),
+      fgs: attr(open, 'foregroundServiceType'),
+      body: body
+    });
+  }
+  return out;
+}
+
+function check(text, opts) {
+  opts = opts || {};
+  var src = stripComments(String(text || ''));
+  var perms = permissions(src), svcs = services(src);
+  var have = {};
+  perms.forEach(function (p) { have[p.name] = p.line; });
+  var findings = [];
+  function push(rule, line, extra) {
+    findings.push({
+      check: rule.id, sev: rule.sev, line: line,
+      msg: (extra ? extra + ' ' : '') + rule.msg + ' [Play surface: ' + rule.form + ']'
+    });
+  }
+
+  (RULES || []).forEach(function (rule) {
+    if (rule.kind === 'perm') {
+      if (have[rule.perm] !== undefined) push(rule, have[rule.perm], rule.perm.split('.').pop() + ' is declared.');
+    } else if (rule.kind === 'perm_any') {
+      (rule.perms || []).forEach(function (p) {
+        if (have[p] !== undefined) push(rule, have[p], p.split('.').pop() + ' is declared.');
+      });
+    } else if (rule.kind === 'perm_prefix') {
+      var hit = perms.filter(function (p) { return p.name.indexOf(rule.prefix) === 0; });
+      if (hit.length) push(rule, hit[0].line, hit.length + ' Health Connect permission' + (hit.length === 1 ? '' : 's') + ' declared (' + hit[0].name + (hit.length > 1 ? ', ...' : '') + ').');
+    } else if (rule.kind === 'service_perm') {
+      svcs.forEach(function (s) { if (s.perm === rule.perm) push(rule, s.line, (s.name || 'a service') + ':'); });
+    } else if (rule.kind === 'fgs_any') {
+      var types = {};
+      svcs.forEach(function (s) { if (s.fgs) s.fgs.split('|').forEach(function (t) { if (t) types[t.trim()] = s.line; }); });
+      var names = Object.keys(types);
+      if (names.length) push(rule, types[names[0]], names.length + ' foreground service type' + (names.length === 1 ? '' : 's') + ' in this manifest (' + names.join(', ') + ').');
+    } else if (rule.kind === 'fgs_permission') {
+      svcs.forEach(function (s) {
+        if (!s.fgs) return;
+        s.fgs.split('|').forEach(function (t) {
+          t = t.trim(); if (!t) return;
+          var need = FGS_PERM[t];
+          if (need && have['android.permission.' + need] === undefined) {
+            push(rule, s.line, 'foregroundServiceType="' + t + '" without android.permission.' + need + '.');
+          }
+        });
+      });
+    } else if (rule.kind === 'special_use') {
+      svcs.forEach(function (s) {
+        if (s.fgs && s.fgs.split('|').map(function (t) { return t.trim(); }).indexOf('specialUse') !== -1
+            && s.body.indexOf('android.app.PROPERTY_SPECIAL_USE_FGS_SUBTYPE') === -1) {
+          push(rule, s.line, (s.name || 'this service') + ':');
+        }
+      });
+    }
+  });
+
+  findings.sort(function (a, b) { return (a.line || 0) - (b.line || 0); });
+  return { findings: findings, permissions: perms.length, services: svcs.length };
+}
+
+var API = { engine: { check: check }, RULES: RULES, RULE_COUNT: (RULES || []).length, FGS_PERM: FGS_PERM };
+if (typeof module !== 'undefined' && module.exports) module.exports = API;
+else window.PLAYDECLENGINE = API;

readystack_play_declaration_gap_lint/js/license.js

@@ -0,0 +1,103 @@
+// license.js — Polar licence check for the CLI / container. Generated by adapters.py; do not edit by hand.
+'use strict';
+const https = require('https'), fs = require('fs'), path = require('path'), os = require('os');
+const ORG_ID = 'a5cdf664-d8e7-4f87-8895-056717aaba17';
+const BENEFIT_ID = '099dfee9-9add-4848-b801-bbe8218e38b5';   // s142 — this product's Polar benefit (s140 law: ask with benefit_id, or one key opens every product)
+const BUY_URL = 'https://getreadystack.com/api/buy/cl/polar_cl_9pjxdAKOI372jyFZtBN3s5u8ajfGhvBhh1rwf3TGsGE';
+const SLUG = 'play-declaration-gap-lint';
+const GRACE_MS = 30 * 24 * 3600 * 1000;   // after a successful check, 30 days work offline
+const RECHECK_MS = 7 * 24 * 3600 * 1000;  // re-ask Polar every 7 days (refunds / cancellations)
+function storePath() { return path.join(process.env.READYSTACK_HOME || path.join(os.homedir(), '.config', 'readystack'), SLUG + '.json'); }
+function load() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')); } catch (e) { return {}; } }
+function save(o) { try { fs.mkdirSync(path.dirname(storePath()), { recursive: true }); fs.writeFileSync(storePath(), JSON.stringify(o)); } catch (e) { /* read-only home: still works for this run */ } }
+const ALL_BENEFIT_ID = '22692551-5203-4467-b1a3-e33cdba6589d';   // s149 2026-09-17 — 팀 키(전 린터 한 키 · Polar benefit) · 상품 benefit 다음에 한 번 더 묻는다
+// s170 2026-09-29 — ask OUR worker first (/api/lic): keys bought on Whop open here (a price-tier key binds to the first tool it opens · the team key opens every tool). Then the old Polar check.
+function validate(key) {
+  return validateHub(key).then(function (h) {
+    if (h.ok) return h;
+    return validate1(key, BENEFIT_ID).then(function (r) { return (r.ok || r.offline || !/^[0-9a-f-]{36}$/.test(ALL_BENEFIT_ID)) ? r : validate1(key, ALL_BENEFIT_ID); })
+      .then(function (r) { return r.ok ? r : { ok: false, offline: !!(h.offline || r.offline) }; });
+  });
+}
+function validateHub(key) {
+  return new Promise(function (resolve) {
+    const req = https.request({ hostname: 'getreadystack.com', path: '/api/lic?key=' + encodeURIComponent(key) + '&slug=' + encodeURIComponent(SLUG),
+      method: 'GET', timeout: 8000, headers: { 'accept': 'application/json', 'user-agent': 'readystack-cli/' + SLUG } }, function (res) {
+      let buf = ''; res.on('data', function (d) { buf += d; });
+      res.on('end', function () {
+        if (res.statusCode !== 200) return resolve({ ok: false, offline: res.statusCode >= 500 });
+        try { const j = JSON.parse(buf); resolve({ ok: !!(j && j.ok), offline: false }); } catch (e) { resolve({ ok: false, offline: false }); }
+      });
+    });
+    req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
+    req.on('error', function () { resolve({ ok: false, offline: true }); });
+    req.end();
+  });
+}
+function validate1(key, ben) {
+  return new Promise(function (resolve) {
+    if (!ORG_ID) return resolve({ ok: false, offline: false });
+    const body = JSON.stringify(/^[0-9a-f-]{36}$/.test(ben) ? { key: key, organization_id: ORG_ID, benefit_id: ben } : { key: key, organization_id: ORG_ID });
+    const req = https.request({ hostname: 'api.polar.sh', path: '/v1/customer-portal/license-keys/validate', method: 'POST', timeout: 8000,
+      headers: { 'content-type': 'application/json', 'polar-version': '2026-04', 'content-length': Buffer.byteLength(body) } }, function (res) {
+      let buf = ''; res.on('data', function (d) { buf += d; });
+      res.on('end', function () {
+        if (res.statusCode !== 200) return resolve({ ok: false, offline: false });
+        try { const j = JSON.parse(buf); resolve({ ok: j && (j.status === 'granted' || j.valid === true || !!j.id), offline: false }); }
+        catch (e) { resolve({ ok: false, offline: false }); }
+      });
+    });
+    req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
+    req.on('error', function () { resolve({ ok: false, offline: true }); });
+    req.write(body); req.end();
+  });
+}
+// ★s151 2026-09-19 — 키 판(키가 없거나 거절된 순간)을 익명으로 센다 (슬러그·출처·이유만) · DO_NOT_TRACK=1 · READYSTACK_NO_TELEMETRY 면 안 보낸다 · 실패는 조용히 · 프로세스당 한 번.
+let _pinged = false;
+function pingPaywall(why) {
+  try {
+    if (_pinged) return; _pinged = true;
+    if (process.env.DO_NOT_TRACK === '1' || process.env.READYSTACK_NO_TELEMETRY || process.env.CI) return;   // s151: CI(깃허브 액션 등)와 우리 빌드는 손님이 아니다
+    if (!(process.stdout.isTTY || process.stdin.isTTY || process.env.READYSTACK_MCP === '1')) return;   // s152: 사람 자리(터미널·MCP 세션)에서만 센다 - 발행 1분 뒤 남의 실행기(JP · 우리 3대는 US)가 돌린 no_key 13건은 손님이 아니다
+    const body = JSON.stringify({ t: 'paywall', slug: SLUG, src: process.env.READYSTACK_MCP === '1' ? 'mcp' : 'cli', why: why || 'no_key' });
+    const req = https.request({ hostname: 'getreadystack.com', path: '/api/ev', method: 'POST', timeout: 3000,
+      headers: { 'content-type': 'application/json', 'content-length': Buffer.byteLength(body), 'user-agent': 'readystack-cli/' + SLUG } }, function (res) { res.resume(); });
+    req.on('timeout', function () { req.destroy(); }); req.on('error', function () {});
+    req.write(body); req.end();
+  } catch (e) { /* 세는 것이 실패해도 상품은 돈다 */ }
+}
+async function ensure(explicitKey) {
+  const st = load();
+  const key = explicitKey || process.env.READYSTACK_LICENSE || st.key;
+  if (!key) { pingPaywall('no_key'); return { ok: false, why: 'no_key' }; }   // s151
+  const age = Date.now() - (st.okAt || 0);
+  if (!explicitKey && st.key === key && age < RECHECK_MS) return { ok: true, cached: true };
+  const r = await validate(String(key).trim());
+  if (r.ok) { save({ key: String(key).trim(), okAt: Date.now() }); return { ok: true }; }
+  if (r.offline && st.key === key && age < GRACE_MS) return { ok: true, offline: true };
+  if (!r.offline) pingPaywall('invalid');   // s151
+  return { ok: false, why: r.offline ? 'offline' : 'invalid' };
+}
+// ★s134 — 구독 규칙 피드(층3 "바뀌면 업데이트"): 키 있는 손님만 · 7일마다 · 오프라인은 캐시. 워커 GET /api/rules/<slug>?key=
+const FEED_URL = 'https://getreadystack.com/api/rules/';
+function pullFeed() {
+  const st = load(); const key = process.env.READYSTACK_LICENSE || st.key; const cached = st.feed || null;
+  if (!key) return Promise.resolve(cached);
+  if (cached && (Date.now() - (st.feedAt || 0)) < RECHECK_MS) return Promise.resolve(cached);
+  return new Promise(function (resolve) {
+    let req;
+    try {
+      req = https.get(FEED_URL + encodeURIComponent(SLUG) + '?key=' + encodeURIComponent(key), { timeout: 8000, headers: { 'user-agent': 'readystack-cli' } }, function (res) {
+        let buf = ''; res.on('data', function (d) { buf += d; });
+        res.on('end', function () {
+          if (res.statusCode !== 200) return resolve(cached);
+          try { const j = JSON.parse(buf); if (!j || !Array.isArray(j.rules)) return resolve(cached); save(Object.assign(load(), { feed: j, feedAt: Date.now() })); resolve(j); }
+          catch (e) { resolve(cached); }
+        });
+      });
+    } catch (e) { return resolve(cached); }
+    req.on('timeout', function () { req.destroy(); resolve(cached); });
+    req.on('error', function () { resolve(cached); });
+  });
+}
+module.exports = { ensure, BUY_URL, storePath, pullFeed };

readystack_play_declaration_gap_lint/js/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@readystack/play-declaration-gap-lint",
+  "version": "1.0.4",
+  "description": "15 checks that name every Play Console declaration your manifest opens",
+  "license": "SEE LICENSE IN LICENSE.txt",
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "androidmanifest",
+    "google play",
+    "play console",
+    "permissions",
+    "declaration",
+    "foreground service",
+    "android lint"
+  ],
+  "homepage": "https://getreadystack.com",
+  "funding": "https://getreadystack.com/api/buy/cl/polar_cl_9pjxdAKOI372jyFZtBN3s5u8ajfGhvBhh1rwf3TGsGE",
+  "bin": {
+    "play-declaration-gap-lint": "cli.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "mcpName": "io.github.jmshinhwa/play-declaration-gap-lint",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jmshinhwa/readystack-themes.git",
+    "directory": "play-declaration-gap-lint"
+  },
+  "files": [
+    "cli.js",
+    "license.js",
+    "rules.json",
+    "strings.json",
+    "README.md",
+    "LICENSE.txt",
+    "engine.js"
+  ]
+}

readystack_play_declaration_gap_lint/js/rules.json

@@ -0,0 +1,129 @@
+[
+ {
+  "id": "package_visibility",
+  "sev": "error",
+  "kind": "perm",
+  "perm": "android.permission.QUERY_ALL_PACKAGES",
+  "form": "App visibility permission declaration",
+  "msg": "QUERY_ALL_PACKAGES is a restricted permission: Play Console asks for the App visibility declaration and accepts it only for eligible use cases (browsers, launchers, security, device management). Otherwise list the packages you need under <queries> instead."
+ },
+ {
+  "id": "all_files_access",
+  "sev": "error",
+  "kind": "perm",
+  "perm": "android.permission.MANAGE_EXTERNAL_STORAGE",
+  "form": "All files access permission declaration",
+  "msg": "MANAGE_EXTERNAL_STORAGE (All files access) needs the All files access declaration in Play Console and a core-functionality justification; file pickers and scoped storage are expected instead."
+ },
+ {
+  "id": "background_location",
+  "sev": "error",
+  "kind": "perm",
+  "perm": "android.permission.ACCESS_BACKGROUND_LOCATION",
+  "form": "Location permissions declaration",
+  "msg": "ACCESS_BACKGROUND_LOCATION triggers the Location permissions declaration: Play wants the feature that needs background location, a video of it, and a prominent in-app disclosure before the request."
+ },
+ {
+  "id": "sms_call_log",
+  "sev": "error",
+  "kind": "perm_any",
+  "perms": [
+   "android.permission.READ_SMS",
+   "android.permission.RECEIVE_SMS",
+   "android.permission.SEND_SMS",
+   "android.permission.READ_CALL_LOG",
+   "android.permission.WRITE_CALL_LOG",
+   "android.permission.PROCESS_OUTGOING_CALLS"
+  ],
+  "form": "Permissions declaration (SMS and Call Log)",
+  "msg": "SMS and Call Log permissions are restricted: Play grants them mainly to the app the user has set as default handler, and every other use needs the Permissions declaration with an approved exception."
+ },
+ {
+  "id": "install_packages",
+  "sev": "error",
+  "kind": "perm",
+  "perm": "android.permission.REQUEST_INSTALL_PACKAGES",
+  "form": "Install unknown apps declaration",
+  "msg": "REQUEST_INSTALL_PACKAGES has its own Play declaration: say which files you install and why, or the update is rejected as unapproved app distribution."
+ },
+ {
+  "id": "photo_video_broad",
+  "sev": "error",
+  "kind": "perm_any",
+  "perms": [
+   "android.permission.READ_MEDIA_IMAGES",
+   "android.permission.READ_MEDIA_VIDEO"
+  ],
+  "form": "Photo and video permissions declaration",
+  "msg": "Broad photo and video access needs the Photo and video permissions declaration: Play expects the Android photo picker for one-off or infrequent access, and broad access only where it is core functionality."
+ },
+ {
+  "id": "health_data",
+  "sev": "error",
+  "kind": "perm_prefix",
+  "prefix": "android.permission.health.",
+  "form": "Health apps declaration (Health Connect)",
+  "msg": "Health Connect read or write permissions need the Health apps declaration form approved before release, plus a privacy policy that names the health data you read."
+ },
+ {
+  "id": "full_screen_intent",
+  "sev": "warn",
+  "kind": "perm",
+  "perm": "android.permission.USE_FULL_SCREEN_INTENT",
+  "form": "Full-screen intent permission declaration",
+  "msg": "From Android 14 USE_FULL_SCREEN_INTENT is granted at install only to calling and alarm apps; everything else must justify it to Play and fall back gracefully when the user has turned it off."
+ },
+ {
+  "id": "use_exact_alarm",
+  "sev": "error",
+  "kind": "perm",
+  "perm": "android.permission.USE_EXACT_ALARM",
+  "form": "Exact alarm permission declaration",
+  "msg": "USE_EXACT_ALARM is restricted to alarm clock and calendar apps; if that is not your app Play expects SCHEDULE_EXACT_ALARM with a user-facing setting, or WorkManager."
+ },
+ {
+  "id": "schedule_exact_alarm",
+  "sev": "warn",
+  "kind": "perm",
+  "perm": "android.permission.SCHEDULE_EXACT_ALARM",
+  "form": "Exact alarm use case (Play policy answer)",
+  "msg": "SCHEDULE_EXACT_ALARM is not granted by default on Android 13 and later: check canScheduleExactAlarms() and send the user to the Alarms and reminders setting, and keep the use case ready for review."
+ },
+ {
+  "id": "ad_id",
+  "sev": "warn",
+  "kind": "perm",
+  "perm": "com.google.android.gms.permission.AD_ID",
+  "form": "Data safety advertising ID disclosure",
+  "msg": "Declaring AD_ID means the Data safety form must disclose that the app collects the advertising ID and for what purpose; the two answers are cross-checked at review."
+ },
+ {
+  "id": "accessibility_service",
+  "sev": "error",
+  "kind": "service_perm",
+  "perm": "android.permission.BIND_ACCESSIBILITY_SERVICE",
+  "form": "Accessibility API prominent disclosure",
+  "msg": "An accessibility service is bound here: Play requires a prominent in-app disclosure of what the service reads and does, and rejects accessibility use that is not an accessibility feature."
+ },
+ {
+  "id": "fgs_use_case",
+  "sev": "warn",
+  "kind": "fgs_any",
+  "form": "Foreground service use case declaration",
+  "msg": "Each foregroundServiceType in the manifest needs a matching use case in the Play Console foreground service declaration, with a video showing the service running."
+ },
+ {
+  "id": "fgs_permission_missing",
+  "sev": "error",
+  "kind": "fgs_permission",
+  "form": "No form - Android 14 runtime requirement",
+  "msg": "Android 14 (API 34) throws SecurityException when a foreground service starts with a type whose FOREGROUND_SERVICE_* permission is missing from the manifest."
+ },
+ {
+  "id": "special_use_subtype",
+  "sev": "error",
+  "kind": "special_use",
+  "form": "Foreground service declaration (specialUse subtype)",
+  "msg": "foregroundServiceType=\"specialUse\" needs a <property android:name=\"android.app.PROPERTY_SPECIAL_USE_FGS_SUBTYPE\"> inside the same <service>, and Play reviews that subtype string by hand."
+ }
+]

readystack_play_declaration_gap_lint/js/strings.json

@@ -0,0 +1,10 @@
+{
+ "name": "Play Declaration Gap Lint (AndroidManifest)",
+ "subtitle": "15 checks that name every Play Console declaration your manifest opens",
+ "bin": "play-declaration-gap-lint",
+ "price": 29,
+ "free": "Check the AndroidManifest.xml open in your editor: all 15 checks, one line number each, with the Play Console surface named - no key, no limit",
+ "paid": "Sweep every manifest in the workspace, library and SDK modules included, and write a dated playDecl-report.md declaration worksheet you keep in the repository",
+ "need_key": "This option needs a licence (Play Declaration Gap Lint (AndroidManifest)).",
+ "exts": []
+}

readystack_play_declaration_gap_lint-1.0.4.dist-info/METADATA

@@ -0,0 +1,84 @@
+Metadata-Version: 2.4
+Name: readystack-play-declaration-gap-lint
+Version: 1.0.4
+Summary: 15 checks that name every Play Console declaration your manifest opens (bundled Node.js runtime)
+Author-email: ReadyStack <support@getreadystack.com>
+License: Proprietary - see LICENSE.txt
+Project-URL: Homepage, https://getreadystack.com/tools/play-declaration-gap-lint?ref=pypi
+Project-URL: Documentation, https://getreadystack.com/tools/play-declaration-gap-lint?ref=pypi
+Project-URL: Support, https://getreadystack.com/support
+Keywords: androidmanifest,google play,play console,permissions,declaration,foreground service,android lint
+Classifier: Programming Language :: Python :: 3
+Classifier: Environment :: Console
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE.txt
+Requires-Dist: nodejs-wheel-binaries>=20
+Dynamic: license-file
+
+# Play Declaration Gap Lint (AndroidManifest)
+
+> Runs the same checker as the npm package `@readystack/play-declaration-gap-lint` on a Node.js runtime that pip installs for you (`nodejs-wheel-binaries`) - no system Node.js needed. Your files are checked locally.
+
+![Play Declaration Gap Lint (AndroidManifest) — finds the line](https://getreadystack.com/img/promo/play-declaration-gap-lint_demo.gif)
+
+15 checks that name every Play Console declaration your manifest opens
+
+## Install
+
+```
+play-declaration-gap-lint file
+```
+
+Node 18+. The same 15 rules as the VS Code extension, from a terminal or CI.
+
+## Free
+
+- Check the AndroidManifest.xml open in your editor: all 15 checks, one line number each, with the Play Console surface named - no key, no limit
+- `--rules` lists every rule
+
+## With a licence ($29 once)
+
+- Sweep every manifest in the workspace, library and SDK modules included, and write a dated playDecl-report.md declaration worksheet you keep in the repository
+
+```
+@readystack/play-declaration-gap-lint --dir ./templates --report html --out report.html
+```
+
+A freelance Android release engineer bills $60-$120 an hour; reading a multi-module app's manifests against every current Play declaration is most of a working day
+
+## Use from an AI agent (MCP)
+
+Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
+
+```json
+{ "mcpServers": { "play-declaration-gap-lint": { "command": "npx", "args": ["-y", "@readystack/play-declaration-gap-lint", "--mcp"] } } }
+```
+
+Tools: `check_text` and `check_file` (free) · `check_dir` (licence). The agent gets every finding with the line number.
+
+## Use in CI
+
+```yaml
+- name: Play Declaration Gap Lint (AndroidManifest)
+  run: npx -y @readystack/play-declaration-gap-lint --dir . --ci
+```
+
+(container: `docker run --rm -v "$PWD:/work" getreadystack/play-declaration-gap-lint --dir /work --ci`)
+
+The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
+
+[Get a licence](https://getreadystack.com/api/buy/cl/polar_cl_9pjxdAKOI372jyFZtBN3s5u8ajfGhvBhh1rwf3TGsGE)
+
+
+<!-- play declaration gap lint -->
+
+
+## Install (PyPI)
+
+```
+pip install readystack-play-declaration-gap-lint
+play-declaration-gap-lint --help
+```

readystack_play_declaration_gap_lint-1.0.4.dist-info/RECORD

@@ -0,0 +1,14 @@
+readystack_play_declaration_gap_lint/__init__.py,sha256=thGZHY6pLPhJc6CwYBjUaQ6pGxLhwPMp_pjoYsiwvI4,22
+readystack_play_declaration_gap_lint/__main__.py,sha256=3DzZxi-7VBAiEeEUw4wbFJcFLoWDkdhCPmwyaTT-DkY,359
+readystack_play_declaration_gap_lint/js/cli.js,sha256=ib60vyNQbZ7meRCc-ACffzcJ04JFn1nbF-HjqGMWM_U,14665
+readystack_play_declaration_gap_lint/js/engine.js,sha256=f7H-M7gNKGNfa0xmGPcShV6Yl9bmoMkAj33FVlskdJk,5295
+readystack_play_declaration_gap_lint/js/license.js,sha256=_PA33pU_XH6hNIZd4ISNgEfb7tUVLxukYQknHstG34U,7565
+readystack_play_declaration_gap_lint/js/package.json,sha256=nYUWQPV1UZNbRHox4xTpDOvCb1eUHIbkW9HR5ehq3bk,1025
+readystack_play_declaration_gap_lint/js/rules.json,sha256=9PVRGVxupmt81q8__79_zzGeIZk19R0IND5u4ci7H3c,5734
+readystack_play_declaration_gap_lint/js/strings.json,sha256=49n-16eukAs6iIky-byBi9B4AD1NDhPCAWZ3Q4bNmZc,627
+readystack_play_declaration_gap_lint-1.0.4.dist-info/licenses/LICENSE.txt,sha256=9uIzpyW_98yr7kw-FbhU1Kv_Q03n82VE4c3cCxsJ_Xw,949
+readystack_play_declaration_gap_lint-1.0.4.dist-info/METADATA,sha256=FQkNurUuTpCgj1z8OUWtnGqeeqsSLoig8Q7Vi1q9mUc,3254
+readystack_play_declaration_gap_lint-1.0.4.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+readystack_play_declaration_gap_lint-1.0.4.dist-info/entry_points.txt,sha256=VidJkn9iyxPo1c3cCyMbgSKuiLLQA_SxFC-rcdR4X3I,97
+readystack_play_declaration_gap_lint-1.0.4.dist-info/top_level.txt,sha256=0b0dJMDZDyqdikDCmTTiJAa-VZL4J4BnWifB9NpwdOU,37
+readystack_play_declaration_gap_lint-1.0.4.dist-info/RECORD,,

readystack_play_declaration_gap_lint-1.0.4.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (84.0.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

readystack_play_declaration_gap_lint-1.0.4.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+play-declaration-gap-lint = readystack_play_declaration_gap_lint.__main__:main

readystack_play_declaration_gap_lint-1.0.4.dist-info/licenses/LICENSE.txt

@@ -0,0 +1,15 @@
+Play Declaration Gap Lint (AndroidManifest) — Licence
+
+Free scope
+  Check the AndroidManifest.xml open in your editor and name every Play Console declaration it triggers, line by line is free for any use, personal or commercial, for as long as you keep the
+  extension installed, and the online check at the product page is free without registration.
+
+Paid scope
+  Sweep every manifest in the workspace (app plus library and SDK modules) and write a dated declaration worksheet you keep and hand to review is the paid part. It asks for a licence key issued at purchase (one seat, one key). The key is checked against the payment provider and
+  cached locally for 30 days so it keeps working offline.
+
+Redistribution
+  You may not resell, re-host or bundle this extension or its rule set. The rule set and the
+  engine are provided as-is; check results are advisory and do not constitute legal advice.
+
+(c) ReadyStack — https://getreadystack.com

readystack_play_declaration_gap_lint-1.0.4.dist-info/top_level.txt

@@ -0,0 +1 @@
+readystack_play_declaration_gap_lint