rulestamp-cms-0057-api-gate 1.0.7__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. rulestamp_cms_0057_api_gate-1.0.7/LICENSE.txt +15 -0
  2. rulestamp_cms_0057_api_gate-1.0.7/PKG-INFO +83 -0
  3. rulestamp_cms_0057_api_gate-1.0.7/README.md +63 -0
  4. rulestamp_cms_0057_api_gate-1.0.7/pyproject.toml +29 -0
  5. rulestamp_cms_0057_api_gate-1.0.7/setup.cfg +4 -0
  6. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/__init__.py +1 -0
  7. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/__main__.py +12 -0
  8. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/js/cli.js +161 -0
  9. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/js/engine.js +84 -0
  10. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/js/license.js +103 -0
  11. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/js/package.json +42 -0
  12. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/js/rules.json +143 -0
  13. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate/js/strings.json +10 -0
  14. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate.egg-info/PKG-INFO +83 -0
  15. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate.egg-info/SOURCES.txt +17 -0
  16. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate.egg-info/dependency_links.txt +1 -0
  17. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate.egg-info/entry_points.txt +2 -0
  18. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate.egg-info/requires.txt +1 -0
  19. rulestamp_cms_0057_api_gate-1.0.7/src/rulestamp_cms_0057_api_gate.egg-info/top_level.txt +1 -0
@@ -0,0 +1,15 @@
1
+ CMS-0057 API Gate - FHIR CapabilityStatement — Licence
2
+
3
+ Free scope
4
+ Audit any FHIR CapabilityStatement in the editor and see every CMS-0057-F gap with its citation and the days left to 1 January 2027. is free for any use, personal or commercial, for as long as you keep the
5
+ extension installed, and the online check at the product page is free without registration.
6
+
7
+ Paid scope
8
+ Export the same audit as a dated Markdown + CSV gap report, one row per gap with its citation, for the compliance file an auditor asks for. is the paid part. It asks for a licence key issued at purchase (one seat, one key). The key is checked against the payment provider and
9
+ cached locally for 30 days so it keeps working offline.
10
+
11
+ Redistribution
12
+ You may not resell, re-host or bundle this extension or its rule set. The rule set and the
13
+ engine are provided as-is; check results are advisory and do not constitute legal advice.
14
+
15
+ (c) ReadyStack — https://getreadystack.com
@@ -0,0 +1,83 @@
1
+ Metadata-Version: 2.4
2
+ Name: rulestamp-cms-0057-api-gate
3
+ Version: 1.0.7
4
+ Summary: 14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027. (bundled Node.js runtime)
5
+ Author-email: Rulestamp <support@getreadystack.com>
6
+ License: Proprietary - see LICENSE.txt
7
+ Project-URL: Homepage, https://getreadystack.com/tools/cms-0057-api-gate?ref=pypi
8
+ Project-URL: Documentation, https://getreadystack.com/tools/cms-0057-api-gate?ref=pypi
9
+ Project-URL: Support, https://getreadystack.com/support
10
+ Keywords: fhir,cms-0057,prior authorization,capabilitystatement,interoperability,payer,hl7,us core
11
+ Classifier: Programming Language :: Python :: 3
12
+ Classifier: Environment :: Console
13
+ Classifier: Topic :: Software Development :: Quality Assurance
14
+ Classifier: Operating System :: OS Independent
15
+ Requires-Python: >=3.9
16
+ Description-Content-Type: text/markdown
17
+ License-File: LICENSE.txt
18
+ Requires-Dist: nodejs-wheel-binaries>=20
19
+ Dynamic: license-file
20
+
21
+ # CMS-0057 API Gate
22
+
23
+ > Runs the same checker as our npm package on a Node.js runtime that pip installs for you (`nodejs-wheel-binaries`) - no system Node.js needed. Your files are checked locally.
24
+
25
+ ![FHIR API Gate - CMS-0057 prior authorization (Da Vinci) — finds the line](https://getreadystack.com/img/promo/cms-0057-api-gate_demo.gif)
26
+
27
+ 14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027.
28
+
29
+ ## Install
30
+
31
+ ```
32
+ cms-0057-api-gate file
33
+ ```
34
+
35
+ Node 18+. The same 14 rules as the VS Code extension, from a terminal or CI.
36
+
37
+ ## Free
38
+
39
+ - Open any FHIR CapabilityStatement and see every CMS-0057-F gap in the editor: all 14 rules, each with its API name and the days left to 1 January 2027. The sample 2021 payer statement returns 10 findings, 6 of them blocking gaps.
40
+ - `--rules` lists every rule
41
+
42
+ ## With a licence ($29 once)
43
+
44
+ - Export the same audit as a dated Markdown and CSV gap report, one row per gap with its CMS-0057-F citation, so the evidence leaves the editor and goes into the compliance file an auditor asks for.
45
+
46
+ ```
47
+ cms-0057-api-gate --dir ./templates --report html --out report.html
48
+ ```
49
+
50
+ A payer interoperability readiness review from an interop consultancy is commonly quoted as a five-figure engagement.
51
+
52
+ ## Use from an AI agent (MCP)
53
+
54
+ Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
55
+
56
+ ```json
57
+ { "mcpServers": { "cms-0057-api-gate": { "command": "cms-0057-api-gate", "args": ["--mcp"] } } }
58
+ ```
59
+
60
+ Tools: `check_text` and `check_file` (free) · `check_dir` (licence). The agent gets every finding with the line number.
61
+
62
+ ## Use in CI
63
+
64
+ ```yaml
65
+ - name: CMS-0057 API Gate
66
+ run: pip install rulestamp-cms-0057-api-gate && cms-0057-api-gate --dir . --ci
67
+ ```
68
+
69
+
70
+ The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
71
+
72
+ [Get a licence](https://getreadystack.com/api/buy/cl/polar_cl_RqXjvqSVkQXgBWNS56pWMaOQRkjbpSGQuPGL50WDgb6)
73
+
74
+
75
+ <!-- cms 0057 api gate -->
76
+
77
+
78
+ ## Install (PyPI)
79
+
80
+ ```
81
+ pip install rulestamp-cms-0057-api-gate
82
+ cms-0057-api-gate --help
83
+ ```
@@ -0,0 +1,63 @@
1
+ # CMS-0057 API Gate
2
+
3
+ > Runs the same checker as our npm package on a Node.js runtime that pip installs for you (`nodejs-wheel-binaries`) - no system Node.js needed. Your files are checked locally.
4
+
5
+ ![FHIR API Gate - CMS-0057 prior authorization (Da Vinci) — finds the line](https://getreadystack.com/img/promo/cms-0057-api-gate_demo.gif)
6
+
7
+ 14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027.
8
+
9
+ ## Install
10
+
11
+ ```
12
+ cms-0057-api-gate file
13
+ ```
14
+
15
+ Node 18+. The same 14 rules as the VS Code extension, from a terminal or CI.
16
+
17
+ ## Free
18
+
19
+ - Open any FHIR CapabilityStatement and see every CMS-0057-F gap in the editor: all 14 rules, each with its API name and the days left to 1 January 2027. The sample 2021 payer statement returns 10 findings, 6 of them blocking gaps.
20
+ - `--rules` lists every rule
21
+
22
+ ## With a licence ($29 once)
23
+
24
+ - Export the same audit as a dated Markdown and CSV gap report, one row per gap with its CMS-0057-F citation, so the evidence leaves the editor and goes into the compliance file an auditor asks for.
25
+
26
+ ```
27
+ cms-0057-api-gate --dir ./templates --report html --out report.html
28
+ ```
29
+
30
+ A payer interoperability readiness review from an interop consultancy is commonly quoted as a five-figure engagement.
31
+
32
+ ## Use from an AI agent (MCP)
33
+
34
+ Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
35
+
36
+ ```json
37
+ { "mcpServers": { "cms-0057-api-gate": { "command": "cms-0057-api-gate", "args": ["--mcp"] } } }
38
+ ```
39
+
40
+ Tools: `check_text` and `check_file` (free) · `check_dir` (licence). The agent gets every finding with the line number.
41
+
42
+ ## Use in CI
43
+
44
+ ```yaml
45
+ - name: CMS-0057 API Gate
46
+ run: pip install rulestamp-cms-0057-api-gate && cms-0057-api-gate --dir . --ci
47
+ ```
48
+
49
+
50
+ The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
51
+
52
+ [Get a licence](https://getreadystack.com/api/buy/cl/polar_cl_RqXjvqSVkQXgBWNS56pWMaOQRkjbpSGQuPGL50WDgb6)
53
+
54
+
55
+ <!-- cms 0057 api gate -->
56
+
57
+
58
+ ## Install (PyPI)
59
+
60
+ ```
61
+ pip install rulestamp-cms-0057-api-gate
62
+ cms-0057-api-gate --help
63
+ ```
@@ -0,0 +1,29 @@
1
+ [build-system]
2
+ requires = ["setuptools>=68"]
3
+ build-backend = "setuptools.build_meta"
4
+
5
+ [project]
6
+ name = "rulestamp-cms-0057-api-gate"
7
+ version = "1.0.7"
8
+ description = "14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027. (bundled Node.js runtime)"
9
+ readme = "README.md"
10
+ requires-python = ">=3.9"
11
+ dependencies = ["nodejs-wheel-binaries>=20"]
12
+ license = {text = "Proprietary - see LICENSE.txt"}
13
+ keywords = ["fhir", "cms-0057", "prior authorization", "capabilitystatement", "interoperability", "payer", "hl7", "us core"]
14
+ authors = [{name = "Rulestamp", email = "support@getreadystack.com"}]
15
+ classifiers = ["Programming Language :: Python :: 3", "Environment :: Console", "Topic :: Software Development :: Quality Assurance", "Operating System :: OS Independent"]
16
+
17
+ [project.urls]
18
+ Homepage = "https://getreadystack.com/tools/cms-0057-api-gate?ref=pypi"
19
+ Documentation = "https://getreadystack.com/tools/cms-0057-api-gate?ref=pypi"
20
+ Support = "https://getreadystack.com/support"
21
+
22
+ [project.scripts]
23
+ "cms-0057-api-gate" = "rulestamp_cms_0057_api_gate.__main__:main"
24
+
25
+ [tool.setuptools.packages.find]
26
+ where = ["src"]
27
+
28
+ [tool.setuptools.package-data]
29
+ "rulestamp_cms_0057_api_gate" = ["js/*"]
@@ -0,0 +1,4 @@
1
+ [egg_info]
2
+ tag_build =
3
+ tag_date = 0
4
+
@@ -0,0 +1,12 @@
1
+ import os, sys
2
+
3
+
4
+ def main():
5
+ # Runs the same checker as the npm package on the Node.js runtime installed with this package (nodejs-wheel-binaries).
6
+ from nodejs_wheel import node
7
+ here = os.path.dirname(os.path.abspath(__file__))
8
+ return node([os.path.join(here, "js", "cli.js")] + sys.argv[1:])
9
+
10
+
11
+ if __name__ == "__main__":
12
+ sys.exit(main())
@@ -0,0 +1,161 @@
1
+ #!/usr/bin/env node
2
+ // cli.js — the same rules as the VS Code extension, run from a terminal or a container. Generated by adapters.py.
3
+ 'use strict';
4
+ const fs = require('fs'), path = require('path');
5
+ const RULES = require('./rules.json');
6
+ const S = require('./strings.json');
7
+ const lic = require('./license.js');
8
+ const ENGINE = require('./engine.js'); // s144 — scaffold products: the same engine the VS Code extension runs
9
+ const RULE_LIST = Array.isArray(ENGINE.RULES) ? ENGINE.RULES : (Array.isArray(RULES) ? RULES : []);
10
+ const RULE_N = ENGINE.RULE_COUNT || RULE_LIST.length;
11
+ function scan(text, file) {
12
+ const r = ENGINE.engine.check(String(text), { today: new Date().toISOString().slice(0, 10), path: file || '' });
13
+ return (r && r.findings || []).map((f) => ({ line: parseInt(f.line, 10) || 1, msg: String(f.msg || f.message || f.check || ''), fix: f.fix || null, sev: (String(f.sev || 'error').toLowerCase().startsWith('err') ? 'error' : 'warn') }));
14
+ }
15
+ function isText(p) { try { const b = fs.readFileSync(p); if (b.length > 2 * 1024 * 1024) return false; const s = b.subarray(0, 4096); for (const x of s) if (x === 0) return false; return true; } catch (e) { return false; } }
16
+ function walk(dir, exts, out) {
17
+ let ents = []; try { ents = fs.readdirSync(dir, { withFileTypes: true }); } catch (e) { return out; }
18
+ for (const e of ents) {
19
+ if (['node_modules', '.git', '.hg', '.svn', '.venv', 'venv', '.tox', '.cache', '.next', '.nuxt', '.terraform', '__pycache__'].includes(e.name)) continue; // s158 — .github · .gitlab-ci.yml · .env · .well-known 은 본다 (옛 줄은 점으로 시작하는 것을 전부 건너뛰어 워크플로 검사기가 .github/workflows 를 못 봤다)
20
+ const p = path.join(dir, e.name);
21
+ if (e.isDirectory()) walk(p, exts, out);
22
+ else if ((!exts.length || exts.includes(path.extname(e.name).toLowerCase())) && isText(p)) out.push(p);
23
+ }
24
+ return out;
25
+ }
26
+ function esc(s) { return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;'); }
27
+ function csvq(s) { return '"' + String(s == null ? '' : s).replace(/"/g, '""') + '"'; }
28
+ function render(rows, fmt) {
29
+ if (fmt === 'json') return JSON.stringify({ tool: S.name, rules: RULE_N, files: rows }, null, 1);
30
+ if (fmt === 'csv') { const o = ['file,line,severity,message,fix']; for (const r of rows) for (const h of r.hits) o.push([csvq(r.file), h.line, h.sev, csvq(h.msg), csvq(h.fix)].join(',')); return o.join('\n') + '\n'; }
31
+ if (fmt === 'html') {
32
+ const n = rows.reduce((a, r) => a + r.hits.length, 0);
33
+ let o = '<!doctype html><meta charset="utf-8"><title>' + esc(S.name) + ' report</title><style>body{font:14px system-ui;margin:24px}table{border-collapse:collapse}td,th{border:1px solid #ddd;padding:4px 8px;font-size:13px}code{font-family:ui-monospace,monospace}</style>';
34
+ o += '<h1>' + esc(S.name) + '</h1><p>' + rows.length + ' files · ' + n + ' findings · ' + RULE_N + ' rules</p><table><tr><th>file</th><th>line</th><th>sev</th><th>message</th><th>fix</th></tr>';
35
+ for (const r of rows) for (const h of r.hits) o += '<tr><td><code>' + esc(r.file) + '</code></td><td>' + h.line + '</td><td>' + esc(h.sev) + '</td><td>' + esc(h.msg) + '</td><td>' + esc(h.fix || '') + '</td></tr>';
36
+ return o + '</table>';
37
+ }
38
+ let o = ''; for (const r of rows) { o += r.file + '\n'; for (const h of r.hits) o += ' ' + String(h.line).padStart(5) + ' ' + h.sev.padEnd(5) + ' ' + h.msg + (h.fix ? '\n -> ' + h.fix : '') + '\n'; if (!r.hits.length) o += ' (no findings)\n'; }
39
+ return o;
40
+ }
41
+ function trialState() {
42
+ // s158 — ⚑7일 무료 없음: 새 체험은 ⛔열지 않는다 · 이미 시작된 체험(trial.json)만 끝까지 지킨다 (읽기 전용)
43
+ if (process.env.READYSTACK_NO_TRIAL) return { active: false };
44
+ try {
45
+ const p = path.join(path.dirname(lic.storePath()), S.bin + '.trial.json');
46
+ const t = JSON.parse(fs.readFileSync(p, 'utf8'));
47
+ return { active: !!(t && t.until) && new Date(t.until + 'T23:59:59Z').getTime() > Date.now(), until: t && t.until };
48
+ } catch (e) { return { active: false }; }
49
+ }
50
+ // ★s158 2026-09-23 — the free run SPEAKS about the rest of the folder (vsix: auto.js · crx: welcome tab).
51
+ // The answer for the named files is complete and free; the next step is shown with the user's OWN numbers:
52
+ // "this folder has N more matching files - M issues in K of them" + the one command that sweeps them.
53
+ // Never blocks, never starts a trial (s158: no free trial - the free answer on the named files is the "try it"), human seat only, 400 files / 1.5 s cap.
54
+ function folderHint(done) {
55
+ if (!process.stderr.isTTY || process.env.CI || process.env.READYSTACK_NO_HINT || !done.length) return;
56
+ const base = path.dirname(path.resolve(done[0]));
57
+ const seen = new Set(done.map((f) => path.resolve(f)));
58
+ const all = walk(base, S.exts || [], []).filter((f) => !seen.has(path.resolve(f)));
59
+ if (!all.length) return;
60
+ const t0 = Date.now(); let issues = 0, hitFiles = 0, scanned = 0;
61
+ for (const f of all.slice(0, 400)) { if (Date.now() - t0 > 1500) break; let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { continue; } scanned++; const h = scan(t, f); if (h.length) { issues += h.length; hitFiles++; } }
62
+ const rel = path.relative(process.cwd(), base) || '.';
63
+ const tail = trialState().active ? 'free during your trial' : '$' + S.price + ' once';
64
+ const more = all.length + ' more matching file' + (all.length > 1 ? 's' : '');
65
+ const found = issues ? ' - ' + (scanned < all.length ? 'at least ' : '') + issues + ' issue' + (issues > 1 ? 's' : '') + ' in ' + hitFiles + ' of them' : ' - no issues found in them';
66
+ process.stderr.write('\n' + (rel === '.' ? 'This folder' : rel) + ' has ' + more + found + '.\n' + (issues ? 'Sweep them all: ' + S.bin + ' --dir ' + (/\s/.test(rel) ? JSON.stringify(rel) : rel) + ' (' + tail + ')\n' : ''));
67
+ }
68
+ let _usePinged = false;
69
+ function pingUse() {
70
+ try {
71
+ if (_usePinged) return; _usePinged = true;
72
+ if (process.env.DO_NOT_TRACK === '1' || process.env.READYSTACK_NO_TELEMETRY || process.env.CI) return;
73
+ if (!(process.stdout.isTTY || process.stdin.isTTY)) return; // human seat only (s152)
74
+ const https = require('https');
75
+ const body = JSON.stringify({ t: 'use', slug: S.bin, src: 'cli', why: 'free' });
76
+ const req = https.request({ hostname: 'getreadystack.com', path: '/api/ev', method: 'POST', timeout: 3000,
77
+ headers: { 'content-type': 'application/json', 'content-length': Buffer.byteLength(body), 'user-agent': 'readystack-cli/' + S.bin } }, function (res) { res.resume(); });
78
+ req.on('timeout', function () { req.destroy(); }); req.on('error', function () {});
79
+ req.write(body); req.end();
80
+ } catch (e) {}
81
+ }
82
+ function mcpServe() {
83
+ process.env.READYSTACK_MCP = '1'; // s152 - 에이전트(Claude Code·Cursor)가 부른 세션은 사람 자리다 · 키 판 핑 src=mcp
84
+ // s144 — MCP server over stdio (newline-delimited JSON-RPC · no dependencies). Free: check_text · check_file. Licence (s158: no free trial): check_dir.
85
+ const rl = require('readline').createInterface({ input: process.stdin });
86
+ const send = (o) => process.stdout.write(JSON.stringify(o) + '\n');
87
+ const tools = [
88
+ { name: 'check_text', description: S.name + ' - run all ' + RULE_N + ' checks on a text (free)', inputSchema: { type: 'object', properties: { text: { type: 'string', description: 'file contents' }, path: { type: 'string', description: 'optional file name for context' } }, required: ['text'] } },
89
+ { name: 'check_file', description: S.name + ' - run all checks on one file by path (free)', inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] } },
90
+ { name: 'check_dir', description: S.name + ' - sweep a folder and return every finding (licence; $' + S.price + ' once)', inputSchema: { type: 'object', properties: { dir: { type: 'string' }, ext: { type: 'string', description: 'optional extension filter, e.g. .html' } }, required: ['dir'] } }
91
+ ];
92
+ const result = (id, rows) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text: render(rows, 'text') }], structuredContent: { tool: S.name, rules: RULE_N, files: rows } } });
93
+ const fail = (id, text) => send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text }], isError: true } });
94
+ rl.on('line', async (line) => {
95
+ let m; try { m = JSON.parse(line); } catch (e) { return; }
96
+ const id = m.id, method = m.method;
97
+ if (method === 'initialize') return send({ jsonrpc: '2.0', id, result: { protocolVersion: '2025-06-18', capabilities: { tools: {} }, serverInfo: { name: '@readystack/' + S.bin, version: '1.0.0' } } });
98
+ if (method === 'notifications/initialized' || method === 'ping') { if (id !== undefined) send({ jsonrpc: '2.0', id, result: {} }); return; }
99
+ if (method === 'tools/list') return send({ jsonrpc: '2.0', id, result: { tools } });
100
+ if (method === 'tools/call') {
101
+ const name = (m.params || {}).name, args = (m.params || {}).arguments || {};
102
+ try {
103
+ if (name === 'check_text') return result(id, [{ file: args.path || '(text)', hits: scan(String(args.text || ''), args.path || '') }]);
104
+ if (name === 'check_file') return result(id, [{ file: args.path, hits: scan(fs.readFileSync(args.path, 'utf8'), args.path) }]);
105
+ if (name === 'check_dir') {
106
+ const r = await lic.ensure();
107
+ if (!r.ok && !trialState().active) return fail(id, S.need_key + ' Get a licence ($' + S.price + ', once): ' + lic.BUY_URL);
108
+ const files = walk(args.dir, args.ext ? [args.ext] : (S.exts || []), []);
109
+ return result(id, files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t, f) }; }));
110
+ }
111
+ return send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'unknown tool ' + name } });
112
+ } catch (e) { return fail(id, String(e && e.message || e)); }
113
+ }
114
+ if (id !== undefined) send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'method not found: ' + method } });
115
+ });
116
+ }
117
+ function help() {
118
+ return [S.name + ' - ' + S.subtitle, '', 'Usage: ' + S.bin + ' <file> [more files] check the files you name (free, every rule)',
119
+ ' ' + S.bin + ' --dir <folder> [--ext .html] scan a whole folder (licence)',
120
+ ' ' + S.bin + ' ... --report csv|json|html [--out file] export a report (licence)',
121
+ ' ' + S.bin + ' ... --ci exit 1 when an error-level finding exists (licence)',
122
+ ' ' + S.bin + ' --license <key> store your licence key (or set READYSTACK_LICENSE)',
123
+ ' ' + S.bin + ' --rules list the ' + RULE_N + ' rules',
124
+ ' ' + S.bin + ' --mcp run as an MCP server (stdio) for Claude Code / Cursor / Windsurf - free checks, folder sweep needs a licence', '',
125
+ 'Free: ' + S.free, 'Licence ($' + S.price + ', once): ' + S.paid, 'Get a licence: ' + lic.BUY_URL, ''].join('\n');
126
+ }
127
+ (async function main() {
128
+ try { const _feed = await lic.pullFeed(); if (_feed && Array.isArray(_feed.rules)) { if (Array.isArray(ENGINE.RULES)) for (const r of _feed.rules) ENGINE.RULES.push(r); } } catch (e) {} // ★s134 구독 피드 병합 (키 있는 손님만)
129
+ const a = process.argv.slice(2);
130
+ const get = (k) => { const i = a.indexOf(k); return i >= 0 ? a[i + 1] : null; };
131
+ if (a.includes('--mcp')) { mcpServe(); return; }
132
+ if (!a.length || a.includes('--help') || a.includes('-h')) { process.stdout.write(help()); return; }
133
+ if (a.includes('--rules')) { process.stdout.write((RULE_LIST.length ? RULE_LIST.map((r, i) => String(i + 1).padStart(3) + ' [' + (r.sev || 'warn') + '] ' + (r.message || r.msg || r.id || '')) : Array.from({ length: RULE_N }, (_, i) => String(i + 1).padStart(3) + ' [engine] check ' + (i + 1))).join('\n') + '\n'); return; }
134
+ if (a.includes('--license')) { const r = await lic.ensure(get('--license')); process.stdout.write(r.ok ? 'Licence stored: ' + lic.storePath() + '\n' : 'Licence not accepted (' + r.why + '). Get one: ' + lic.BUY_URL + '\n'); process.exit(r.ok ? 0 : 2); }
135
+ const dir = get('--dir'), fmt = get('--report'), out = get('--out'), ci = a.includes('--ci');
136
+ const exts = a.includes('--ext') ? [get('--ext')] : (S.exts || []);
137
+ const paid = !!(dir || fmt || ci);
138
+ if (paid) {
139
+ const r = await lic.ensure();
140
+ if (!r.ok) {
141
+ const t = trialState(); // s158 — ⚑7일 무료 없음 · 이미 시작된 체험만 지킨다
142
+ if (t.active) process.stderr.write('Trial: the full run is free until ' + t.until + ' — after that $' + S.price + ' once. Get a licence: ' + lic.BUY_URL + '\n');
143
+ else {
144
+ // s158 — the key is asked WITH the customer's own count (endowment · open loop): how many issues this folder holds.
145
+ let own = '';
146
+ if (dir) { try { const all = walk(dir, exts, []); let n = 0, k = 0, sc = 0; const t0 = Date.now();
147
+ for (const f of all.slice(0, 2000)) { if (Date.now() - t0 > 4000) break; let tx = ''; try { tx = fs.readFileSync(f, 'utf8'); } catch (e) { continue; } sc++; const h = scan(tx, f); if (h.length) { n += h.length; k++; } }
148
+ if (n) own = dir + ': ' + (sc < all.length ? 'at least ' : '') + n + ' issue' + (n > 1 ? 's' : '') + ' in ' + k + ' of ' + all.length + ' files.\n'; } catch (e) {} }
149
+ process.stderr.write(own + S.need_key + '\n set READYSTACK_LICENSE=<key> or ' + S.bin + ' --license <key>\n Get a licence ($' + S.price + ' once): ' + lic.BUY_URL + '\n'); process.exit(2);
150
+ }
151
+ }
152
+ }
153
+ const files = dir ? walk(dir, exts, []) : a.filter((x, i) => !x.startsWith('--') && !['--dir', '--report', '--out', '--ext', '--license'].includes(a[i - 1]));
154
+ if (!files.length) { process.stderr.write('No files. ' + S.bin + ' --help\n'); process.exit(2); }
155
+ const rows = files.map((f) => { let t = ''; try { t = fs.readFileSync(f, 'utf8'); } catch (e) { return { file: f, hits: [], error: String(e.message) }; } return { file: f, hits: scan(t) }; });
156
+ const text = render(rows, fmt || 'text');
157
+ if (out) fs.writeFileSync(out, text); else process.stdout.write(text.endsWith('\n') ? text : text + '\n');
158
+ if (!paid) { try { folderHint(files); } catch (e) {} pingUse(); } // s158 — a free run ends with the user's own folder count + one anonymous 'used' count (human seat only)
159
+ const errors = rows.reduce((n, r) => n + r.hits.filter((h) => h.sev === 'error').length, 0);
160
+ if (ci && errors) process.exit(1);
161
+ })().catch((e) => { process.stderr.write(String(e && e.stack || e) + '\n'); process.exit(3); });
@@ -0,0 +1,84 @@
1
+ /* CMS-0057 API Gate - engine
2
+ * Reads a FHIR CapabilityStatement (JSON text) and reports the gaps that stop it
3
+ * from standing as evidence for the four CMS-0057-F APIs due 1 January 2027.
4
+ * Same file runs in Node (extension) and in the browser (free web page).
5
+ */
6
+ const RULES = (typeof module !== 'undefined') ? require('./rules.json') : window.CMS57_RULES;
7
+
8
+ const DEADLINE = '2027-01-01';
9
+ const STALE_DAYS = 365;
10
+ const DAY = 86400000;
11
+
12
+ function daysBetween(a, b) {
13
+ return Math.round((Date.parse(b + 'T00:00:00Z') - Date.parse(a + 'T00:00:00Z')) / DAY);
14
+ }
15
+
16
+ function lineOf(lines, src) {
17
+ if (!src) return 1;
18
+ let re;
19
+ try { re = new RegExp(src); } catch (e) { return 1; }
20
+ for (let i = 0; i < lines.length; i++) if (re.test(lines[i])) return i + 1;
21
+ return 1;
22
+ }
23
+
24
+ function fill(msg, vals) {
25
+ return String(msg).replace(/\{(\w+)\}/g, function (m, k) {
26
+ return Object.prototype.hasOwnProperty.call(vals, k) ? String(vals[k]) : m;
27
+ });
28
+ }
29
+
30
+ function check(text, opts) {
31
+ opts = opts || {};
32
+ const today = /^\d{4}-\d{2}-\d{2}$/.test(opts.today || '') ? opts.today : '2026-09-16';
33
+ const src = String(text == null ? '' : text);
34
+ const lines = src.split(/\r?\n/);
35
+ const findings = [];
36
+ const push = function (rule, msg, line) {
37
+ findings.push({ check: rule.id, sev: rule.sev, msg: String(msg).replace(/\b1 days\b/g, '1 day'), line: line || 1 });
38
+ };
39
+
40
+ RULES.forEach(function (rule) {
41
+ if (rule.kind === 'version') {
42
+ const m = src.match(/"fhirVersion"\s*:\s*"([^"]+)"/);
43
+ const line = lineOf(lines, rule.anchor);
44
+ if (!m) push(rule, rule.msg, lineOf(lines, '"resourceType"'));
45
+ else if (!/^4\.0/.test(m[1])) push(rule, fill(rule.msg_bad, { v: m[1] }), line);
46
+ return;
47
+ }
48
+ if (rule.kind === 'require_any') {
49
+ const hit = (rule.patterns || []).some(function (p) { return new RegExp(p).test(src); });
50
+ if (!hit) push(rule, rule.msg, lineOf(lines, rule.anchor));
51
+ return;
52
+ }
53
+ if (rule.kind === 'forbid') {
54
+ (rule.patterns || []).forEach(function (p) {
55
+ const re = new RegExp(p);
56
+ for (let i = 0; i < lines.length; i++) {
57
+ if (re.test(lines[i])) { push(rule, rule.msg, i + 1); return; }
58
+ }
59
+ });
60
+ return;
61
+ }
62
+ if (rule.kind === 'stale_date') {
63
+ const m = src.match(/"date"\s*:\s*"(\d{4}-\d{2}-\d{2})/);
64
+ if (!m) return;
65
+ const age = daysBetween(m[1], today);
66
+ if (age > STALE_DAYS) push(rule, fill(rule.msg, { d: m[1], n: age }), lineOf(lines, '"date"'));
67
+ return;
68
+ }
69
+ if (rule.kind === 'clock') {
70
+ const errs = findings.filter(function (f) { return f.sev === 'error'; }).length;
71
+ if (!errs) return;
72
+ const left = daysBetween(today, DEADLINE);
73
+ const line = lineOf(lines, rule.anchor);
74
+ if (left >= 0) push(rule, fill(rule.msg, { n: left, e: errs }), line);
75
+ else push(rule, fill(rule.msg_past, { n: -left, e: errs }), line);
76
+ }
77
+ });
78
+
79
+ return { findings: findings };
80
+ }
81
+
82
+ const API = { engine: { check: check }, RULES: RULES, RULE_COUNT: RULES.length };
83
+ if (typeof module !== 'undefined') module.exports = API;
84
+ if (typeof window !== 'undefined') window.CMS57ENGINE = API;
@@ -0,0 +1,103 @@
1
+ // license.js — Polar licence check for the CLI / container. Generated by adapters.py; do not edit by hand.
2
+ 'use strict';
3
+ const https = require('https'), fs = require('fs'), path = require('path'), os = require('os');
4
+ const ORG_ID = 'a5cdf664-d8e7-4f87-8895-056717aaba17';
5
+ const BENEFIT_ID = '68e6c7f1-8923-49d0-b498-47c76b4ad71d'; // s142 — this product's Polar benefit (s140 law: ask with benefit_id, or one key opens every product)
6
+ const BUY_URL = 'https://getreadystack.com/api/buy/cl/polar_cl_RqXjvqSVkQXgBWNS56pWMaOQRkjbpSGQuPGL50WDgb6';
7
+ const SLUG = 'cms-0057-api-gate';
8
+ const GRACE_MS = 30 * 24 * 3600 * 1000; // after a successful check, 30 days work offline
9
+ const RECHECK_MS = 7 * 24 * 3600 * 1000; // re-ask Polar every 7 days (refunds / cancellations)
10
+ function storePath() { return path.join(process.env.READYSTACK_HOME || path.join(os.homedir(), '.config', 'readystack'), SLUG + '.json'); }
11
+ function load() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')); } catch (e) { return {}; } }
12
+ function save(o) { try { fs.mkdirSync(path.dirname(storePath()), { recursive: true }); fs.writeFileSync(storePath(), JSON.stringify(o)); } catch (e) { /* read-only home: still works for this run */ } }
13
+ const ALL_BENEFIT_ID = '22692551-5203-4467-b1a3-e33cdba6589d'; // s149 2026-09-17 — 팀 키(전 린터 한 키 · Polar benefit) · 상품 benefit 다음에 한 번 더 묻는다
14
+ // s170 2026-09-29 — ask OUR worker first (/api/lic): keys bought on Whop open here (a price-tier key binds to the first tool it opens · the team key opens every tool). Then the old Polar check.
15
+ function validate(key) {
16
+ return validateHub(key).then(function (h) {
17
+ if (h.ok) return h;
18
+ return validate1(key, BENEFIT_ID).then(function (r) { return (r.ok || r.offline || !/^[0-9a-f-]{36}$/.test(ALL_BENEFIT_ID)) ? r : validate1(key, ALL_BENEFIT_ID); })
19
+ .then(function (r) { return r.ok ? r : { ok: false, offline: !!(h.offline || r.offline) }; });
20
+ });
21
+ }
22
+ function validateHub(key) {
23
+ return new Promise(function (resolve) {
24
+ const req = https.request({ hostname: 'getreadystack.com', path: '/api/lic?key=' + encodeURIComponent(key) + '&slug=' + encodeURIComponent(SLUG),
25
+ method: 'GET', timeout: 8000, headers: { 'accept': 'application/json', 'user-agent': 'readystack-cli/' + SLUG } }, function (res) {
26
+ let buf = ''; res.on('data', function (d) { buf += d; });
27
+ res.on('end', function () {
28
+ if (res.statusCode !== 200) return resolve({ ok: false, offline: res.statusCode >= 500 });
29
+ try { const j = JSON.parse(buf); resolve({ ok: !!(j && j.ok), offline: false }); } catch (e) { resolve({ ok: false, offline: false }); }
30
+ });
31
+ });
32
+ req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
33
+ req.on('error', function () { resolve({ ok: false, offline: true }); });
34
+ req.end();
35
+ });
36
+ }
37
+ function validate1(key, ben) {
38
+ return new Promise(function (resolve) {
39
+ if (!ORG_ID) return resolve({ ok: false, offline: false });
40
+ const body = JSON.stringify(/^[0-9a-f-]{36}$/.test(ben) ? { key: key, organization_id: ORG_ID, benefit_id: ben } : { key: key, organization_id: ORG_ID });
41
+ const req = https.request({ hostname: 'api.polar.sh', path: '/v1/customer-portal/license-keys/validate', method: 'POST', timeout: 8000,
42
+ headers: { 'content-type': 'application/json', 'polar-version': '2026-04', 'content-length': Buffer.byteLength(body) } }, function (res) {
43
+ let buf = ''; res.on('data', function (d) { buf += d; });
44
+ res.on('end', function () {
45
+ if (res.statusCode !== 200) return resolve({ ok: false, offline: false });
46
+ try { const j = JSON.parse(buf); resolve({ ok: j && (j.status === 'granted' || j.valid === true || !!j.id), offline: false }); }
47
+ catch (e) { resolve({ ok: false, offline: false }); }
48
+ });
49
+ });
50
+ req.on('timeout', function () { req.destroy(); resolve({ ok: false, offline: true }); });
51
+ req.on('error', function () { resolve({ ok: false, offline: true }); });
52
+ req.write(body); req.end();
53
+ });
54
+ }
55
+ // ★s151 2026-09-19 — 키 판(키가 없거나 거절된 순간)을 익명으로 센다 (슬러그·출처·이유만) · DO_NOT_TRACK=1 · READYSTACK_NO_TELEMETRY 면 안 보낸다 · 실패는 조용히 · 프로세스당 한 번.
56
+ let _pinged = false;
57
+ function pingPaywall(why) {
58
+ try {
59
+ if (_pinged) return; _pinged = true;
60
+ if (process.env.DO_NOT_TRACK === '1' || process.env.READYSTACK_NO_TELEMETRY || process.env.CI) return; // s151: CI(깃허브 액션 등)와 우리 빌드는 손님이 아니다
61
+ if (!(process.stdout.isTTY || process.stdin.isTTY || process.env.READYSTACK_MCP === '1')) return; // s152: 사람 자리(터미널·MCP 세션)에서만 센다 - 발행 1분 뒤 남의 실행기(JP · 우리 3대는 US)가 돌린 no_key 13건은 손님이 아니다
62
+ const body = JSON.stringify({ t: 'paywall', slug: SLUG, src: process.env.READYSTACK_MCP === '1' ? 'mcp' : 'cli', why: why || 'no_key' });
63
+ const req = https.request({ hostname: 'getreadystack.com', path: '/api/ev', method: 'POST', timeout: 3000,
64
+ headers: { 'content-type': 'application/json', 'content-length': Buffer.byteLength(body), 'user-agent': 'readystack-cli/' + SLUG } }, function (res) { res.resume(); });
65
+ req.on('timeout', function () { req.destroy(); }); req.on('error', function () {});
66
+ req.write(body); req.end();
67
+ } catch (e) { /* 세는 것이 실패해도 상품은 돈다 */ }
68
+ }
69
+ async function ensure(explicitKey) {
70
+ const st = load();
71
+ const key = explicitKey || process.env.READYSTACK_LICENSE || st.key;
72
+ if (!key) { pingPaywall('no_key'); return { ok: false, why: 'no_key' }; } // s151
73
+ const age = Date.now() - (st.okAt || 0);
74
+ if (!explicitKey && st.key === key && age < RECHECK_MS) return { ok: true, cached: true };
75
+ const r = await validate(String(key).trim());
76
+ if (r.ok) { save({ key: String(key).trim(), okAt: Date.now() }); return { ok: true }; }
77
+ if (r.offline && st.key === key && age < GRACE_MS) return { ok: true, offline: true };
78
+ if (!r.offline) pingPaywall('invalid'); // s151
79
+ return { ok: false, why: r.offline ? 'offline' : 'invalid' };
80
+ }
81
+ // ★s134 — 구독 규칙 피드(층3 "바뀌면 업데이트"): 키 있는 손님만 · 7일마다 · 오프라인은 캐시. 워커 GET /api/rules/<slug>?key=
82
+ const FEED_URL = 'https://getreadystack.com/api/rules/';
83
+ function pullFeed() {
84
+ const st = load(); const key = process.env.READYSTACK_LICENSE || st.key; const cached = st.feed || null;
85
+ if (!key) return Promise.resolve(cached);
86
+ if (cached && (Date.now() - (st.feedAt || 0)) < RECHECK_MS) return Promise.resolve(cached);
87
+ return new Promise(function (resolve) {
88
+ let req;
89
+ try {
90
+ req = https.get(FEED_URL + encodeURIComponent(SLUG) + '?key=' + encodeURIComponent(key), { timeout: 8000, headers: { 'user-agent': 'readystack-cli' } }, function (res) {
91
+ let buf = ''; res.on('data', function (d) { buf += d; });
92
+ res.on('end', function () {
93
+ if (res.statusCode !== 200) return resolve(cached);
94
+ try { const j = JSON.parse(buf); if (!j || !Array.isArray(j.rules)) return resolve(cached); save(Object.assign(load(), { feed: j, feedAt: Date.now() })); resolve(j); }
95
+ catch (e) { resolve(cached); }
96
+ });
97
+ });
98
+ } catch (e) { return resolve(cached); }
99
+ req.on('timeout', function () { req.destroy(); resolve(cached); });
100
+ req.on('error', function () { resolve(cached); });
101
+ });
102
+ }
103
+ module.exports = { ensure, BUY_URL, storePath, pullFeed };
@@ -0,0 +1,42 @@
1
+ {
2
+ "name": "@readystack/cms-0057-api-gate",
3
+ "version": "1.0.7",
4
+ "description": "14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027.",
5
+ "license": "SEE LICENSE IN LICENSE.txt",
6
+ "publishConfig": {
7
+ "access": "public"
8
+ },
9
+ "keywords": [
10
+ "fhir",
11
+ "cms-0057",
12
+ "prior authorization",
13
+ "capabilitystatement",
14
+ "interoperability",
15
+ "payer",
16
+ "hl7",
17
+ "us core"
18
+ ],
19
+ "homepage": "https://getreadystack.com",
20
+ "funding": "https://getreadystack.com/api/buy/cl/polar_cl_RqXjvqSVkQXgBWNS56pWMaOQRkjbpSGQuPGL50WDgb6",
21
+ "bin": {
22
+ "cms-0057-api-gate": "cli.js"
23
+ },
24
+ "engines": {
25
+ "node": ">=18"
26
+ },
27
+ "mcpName": "io.github.jmshinhwa/cms-0057-api-gate",
28
+ "repository": {
29
+ "type": "git",
30
+ "url": "https://github.com/jmshinhwa/readystack-themes.git",
31
+ "directory": "cms-0057-api-gate"
32
+ },
33
+ "files": [
34
+ "cli.js",
35
+ "license.js",
36
+ "rules.json",
37
+ "strings.json",
38
+ "README.md",
39
+ "LICENSE.txt",
40
+ "engine.js"
41
+ ]
42
+ }
@@ -0,0 +1,143 @@
1
+ [
2
+ {
3
+ "id": "fhir_r4",
4
+ "sev": "error",
5
+ "kind": "version",
6
+ "anchor": "\"fhirVersion\"",
7
+ "msg": "No fhirVersion is declared. The CMS-0057-F APIs must be conformant to HL7 FHIR Release 4.0.1 (R4).",
8
+ "msg_bad": "fhirVersion is {v}. The CMS-0057-F APIs must be conformant to HL7 FHIR Release 4.0.1 (R4); an STU3 or R5 server does not satisfy the rule."
9
+ },
10
+ {
11
+ "id": "us_core_profiles",
12
+ "sev": "error",
13
+ "kind": "require_any",
14
+ "anchor": "\"rest\"",
15
+ "patterns": [
16
+ "hl7\\.org/fhir/us/core"
17
+ ],
18
+ "msg": "No US Core profile is referenced anywhere in the statement. The CMS-0057-F APIs must return the USCDI clinical data set through US Core R4 profiles."
19
+ },
20
+ {
21
+ "id": "smart_oauth",
22
+ "sev": "error",
23
+ "kind": "require_any",
24
+ "anchor": "\"rest\"",
25
+ "patterns": [
26
+ "SMART-on-FHIR",
27
+ "smart-app-launch",
28
+ "oauth-uris"
29
+ ],
30
+ "msg": "No SMART App Launch / OAuth 2.0 security service is declared. The Patient Access API must let a member authorise a third-party app without contacting the payer."
31
+ },
32
+ {
33
+ "id": "tls_endpoints",
34
+ "sev": "error",
35
+ "kind": "forbid",
36
+ "patterns": [
37
+ "\"(address|authorize|token|manage|revoke|endpoint)\"\\s*:\\s*\"http://",
38
+ "\"valueUri\"\\s*:\\s*\"http://"
39
+ ],
40
+ "msg": "A plaintext http:// endpoint is declared. Every CMS-0057-F API endpoint, including the OAuth 2.0 authorize and token URLs, must be TLS-protected."
41
+ },
42
+ {
43
+ "id": "patient_access_eob",
44
+ "sev": "error",
45
+ "kind": "require_any",
46
+ "anchor": "\"rest\"",
47
+ "patterns": [
48
+ "\"type\"\\s*:\\s*\"ExplanationOfBenefit\""
49
+ ],
50
+ "msg": "Patient Access API: no ExplanationOfBenefit resource is declared, so adjudicated claims and encounter data cannot be returned to the member."
51
+ },
52
+ {
53
+ "id": "patient_access_prior_auth",
54
+ "sev": "error",
55
+ "kind": "require_any",
56
+ "anchor": "\"rest\"",
57
+ "patterns": [
58
+ "\"type\"\\s*:\\s*\"ClaimResponse\""
59
+ ],
60
+ "msg": "Patient Access API: no ClaimResponse resource is declared. CMS-0057-F adds prior authorization requests and decisions (drugs excluded) to the Patient Access API from 1 January 2027."
61
+ },
62
+ {
63
+ "id": "prior_auth_submit",
64
+ "sev": "error",
65
+ "kind": "require_any",
66
+ "anchor": "\"rest\"",
67
+ "patterns": [
68
+ "\\$submit",
69
+ "\"name\"\\s*:\\s*\"submit\"",
70
+ "OperationDefinition/Claim-submit"
71
+ ],
72
+ "msg": "Prior Authorization API: no Claim $submit operation is declared, so a provider cannot send a prior authorization request to this server."
73
+ },
74
+ {
75
+ "id": "prior_auth_inquire",
76
+ "sev": "warn",
77
+ "kind": "require_any",
78
+ "anchor": "\"rest\"",
79
+ "patterns": [
80
+ "\\$inquire",
81
+ "\"name\"\\s*:\\s*\"inquire\""
82
+ ],
83
+ "msg": "Prior Authorization API: no $inquire operation is declared. Without it a provider cannot check the status of a pending prior authorization."
84
+ },
85
+ {
86
+ "id": "dtr_questionnaire",
87
+ "sev": "warn",
88
+ "kind": "require_any",
89
+ "anchor": "\"rest\"",
90
+ "patterns": [
91
+ "\\$questionnaire-package",
92
+ "\"name\"\\s*:\\s*\"questionnaire-package\""
93
+ ],
94
+ "msg": "Documentation requirements: no $questionnaire-package operation is declared, so the payer's documentation rules are not machine-readable to the provider's EHR."
95
+ },
96
+ {
97
+ "id": "provider_access_export",
98
+ "sev": "error",
99
+ "kind": "require_any",
100
+ "anchor": "\"rest\"",
101
+ "patterns": [
102
+ "\\$export",
103
+ "\"name\"\\s*:\\s*\"export\""
104
+ ],
105
+ "msg": "Provider Access API: no bulk $export operation is declared. CMS-0057-F requires payers to share member data with in-network providers from 1 January 2027."
106
+ },
107
+ {
108
+ "id": "payer_to_payer_match",
109
+ "sev": "error",
110
+ "kind": "require_any",
111
+ "anchor": "\"rest\"",
112
+ "patterns": [
113
+ "\\$member-match",
114
+ "\"name\"\\s*:\\s*\"member-match\""
115
+ ],
116
+ "msg": "Payer-to-Payer API: no $member-match operation is declared, so a previous payer cannot identify this member and hand over their data at enrolment."
117
+ },
118
+ {
119
+ "id": "server_mode",
120
+ "sev": "error",
121
+ "kind": "require_any",
122
+ "anchor": "\"rest\"",
123
+ "patterns": [
124
+ "\"mode\"\\s*:\\s*\"server\""
125
+ ],
126
+ "msg": "No REST server mode is declared. A CapabilityStatement offered as evidence for a CMS-0057-F API must describe a server, not a client."
127
+ },
128
+ {
129
+ "id": "statement_stale",
130
+ "sev": "warn",
131
+ "kind": "stale_date",
132
+ "anchor": "\"date\"",
133
+ "msg": "The statement is dated {d} and is {n} days old. Auditors read the date first: refresh it as the APIs are built out."
134
+ },
135
+ {
136
+ "id": "deadline_clock",
137
+ "sev": "info",
138
+ "kind": "clock",
139
+ "anchor": "\"resourceType\"",
140
+ "msg": "{n} days left until the CMS-0057-F compliance date of 1 January 2027, with {e} blocking gaps still open in this statement.",
141
+ "msg_past": "The CMS-0057-F compliance date of 1 January 2027 passed {n} days ago and {e} blocking gaps are still open in this statement."
142
+ }
143
+ ]
@@ -0,0 +1,10 @@
1
+ {
2
+ "name": "CMS-0057 API Gate",
3
+ "subtitle": "14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027.",
4
+ "bin": "cms-0057-api-gate",
5
+ "price": 29,
6
+ "free": "Open any FHIR CapabilityStatement and see every CMS-0057-F gap in the editor: all 14 rules, each with its API name and the days left to 1 January 2027. The sample 2021 payer statement returns 10 findings, 6 of them blocking gaps.",
7
+ "paid": "Export the same audit as a dated Markdown and CSV gap report, one row per gap with its CMS-0057-F citation, so the evidence leaves the editor and goes into the compliance file an auditor asks for.",
8
+ "need_key": "This option needs a licence (CMS-0057 API Gate).",
9
+ "exts": []
10
+ }
@@ -0,0 +1,83 @@
1
+ Metadata-Version: 2.4
2
+ Name: rulestamp-cms-0057-api-gate
3
+ Version: 1.0.7
4
+ Summary: 14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027. (bundled Node.js runtime)
5
+ Author-email: Rulestamp <support@getreadystack.com>
6
+ License: Proprietary - see LICENSE.txt
7
+ Project-URL: Homepage, https://getreadystack.com/tools/cms-0057-api-gate?ref=pypi
8
+ Project-URL: Documentation, https://getreadystack.com/tools/cms-0057-api-gate?ref=pypi
9
+ Project-URL: Support, https://getreadystack.com/support
10
+ Keywords: fhir,cms-0057,prior authorization,capabilitystatement,interoperability,payer,hl7,us core
11
+ Classifier: Programming Language :: Python :: 3
12
+ Classifier: Environment :: Console
13
+ Classifier: Topic :: Software Development :: Quality Assurance
14
+ Classifier: Operating System :: OS Independent
15
+ Requires-Python: >=3.9
16
+ Description-Content-Type: text/markdown
17
+ License-File: LICENSE.txt
18
+ Requires-Dist: nodejs-wheel-binaries>=20
19
+ Dynamic: license-file
20
+
21
+ # CMS-0057 API Gate
22
+
23
+ > Runs the same checker as our npm package on a Node.js runtime that pip installs for you (`nodejs-wheel-binaries`) - no system Node.js needed. Your files are checked locally.
24
+
25
+ ![FHIR API Gate - CMS-0057 prior authorization (Da Vinci) — finds the line](https://getreadystack.com/img/promo/cms-0057-api-gate_demo.gif)
26
+
27
+ 14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1 January 2027.
28
+
29
+ ## Install
30
+
31
+ ```
32
+ cms-0057-api-gate file
33
+ ```
34
+
35
+ Node 18+. The same 14 rules as the VS Code extension, from a terminal or CI.
36
+
37
+ ## Free
38
+
39
+ - Open any FHIR CapabilityStatement and see every CMS-0057-F gap in the editor: all 14 rules, each with its API name and the days left to 1 January 2027. The sample 2021 payer statement returns 10 findings, 6 of them blocking gaps.
40
+ - `--rules` lists every rule
41
+
42
+ ## With a licence ($29 once)
43
+
44
+ - Export the same audit as a dated Markdown and CSV gap report, one row per gap with its CMS-0057-F citation, so the evidence leaves the editor and goes into the compliance file an auditor asks for.
45
+
46
+ ```
47
+ cms-0057-api-gate --dir ./templates --report html --out report.html
48
+ ```
49
+
50
+ A payer interoperability readiness review from an interop consultancy is commonly quoted as a five-figure engagement.
51
+
52
+ ## Use from an AI agent (MCP)
53
+
54
+ Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:
55
+
56
+ ```json
57
+ { "mcpServers": { "cms-0057-api-gate": { "command": "cms-0057-api-gate", "args": ["--mcp"] } } }
58
+ ```
59
+
60
+ Tools: `check_text` and `check_file` (free) · `check_dir` (licence). The agent gets every finding with the line number.
61
+
62
+ ## Use in CI
63
+
64
+ ```yaml
65
+ - name: CMS-0057 API Gate
66
+ run: pip install rulestamp-cms-0057-api-gate && cms-0057-api-gate --dir . --ci
67
+ ```
68
+
69
+
70
+ The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.
71
+
72
+ [Get a licence](https://getreadystack.com/api/buy/cl/polar_cl_RqXjvqSVkQXgBWNS56pWMaOQRkjbpSGQuPGL50WDgb6)
73
+
74
+
75
+ <!-- cms 0057 api gate -->
76
+
77
+
78
+ ## Install (PyPI)
79
+
80
+ ```
81
+ pip install rulestamp-cms-0057-api-gate
82
+ cms-0057-api-gate --help
83
+ ```
@@ -0,0 +1,17 @@
1
+ LICENSE.txt
2
+ README.md
3
+ pyproject.toml
4
+ src/rulestamp_cms_0057_api_gate/__init__.py
5
+ src/rulestamp_cms_0057_api_gate/__main__.py
6
+ src/rulestamp_cms_0057_api_gate.egg-info/PKG-INFO
7
+ src/rulestamp_cms_0057_api_gate.egg-info/SOURCES.txt
8
+ src/rulestamp_cms_0057_api_gate.egg-info/dependency_links.txt
9
+ src/rulestamp_cms_0057_api_gate.egg-info/entry_points.txt
10
+ src/rulestamp_cms_0057_api_gate.egg-info/requires.txt
11
+ src/rulestamp_cms_0057_api_gate.egg-info/top_level.txt
12
+ src/rulestamp_cms_0057_api_gate/js/cli.js
13
+ src/rulestamp_cms_0057_api_gate/js/engine.js
14
+ src/rulestamp_cms_0057_api_gate/js/license.js
15
+ src/rulestamp_cms_0057_api_gate/js/package.json
16
+ src/rulestamp_cms_0057_api_gate/js/rules.json
17
+ src/rulestamp_cms_0057_api_gate/js/strings.json
@@ -0,0 +1,2 @@
1
+ [console_scripts]
2
+ cms-0057-api-gate = rulestamp_cms_0057_api_gate.__main__:main