[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_189":190,"_191":192},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_144":-5,"_20":145,"_22":146,"_147":148,"_149":150,"_26":151,"_24":152,"_153":-5,"_154":-5,"_155":52,"_156":157,"_158":43,"_159":-5,"_160":-5,"_161":162},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","iamgodmatters","name","god-matters-commerce-qa","branchName","main","version","path","main.ts","project",{"_33":89,"_13":14,"_44":90,"_91":-5,"_92":52,"_93":94,"_95":94,"_96":97,"_98":-5,"_99":100,"_101":36,"_102":43,"_103":-5,"_104":-5,"_105":46,"_106":107,"_108":-5,"_109":-5,"_110":-5,"_111":-5,"_112":113,"_114":113,"_115":116,"_117":116,"_118":116,"_119":113,"_120":113,"_121":122,"_123":124,"_125":126,"_127":52},"tree",[55,56,57,58],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":14,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","1eb41fe5-7756-498e-a163-a7c828105278","fileId","e7dd1c3a-adbb-11f1-800c-1607ee4eb77e","parentId","branchId","40ce0313-f829-4280-ae74-425c06cd49f5","branchVersion",1,"latest",true,"createdAt",["D",1789115798556],0,"fileType","http","content","import { runShopifyQA } from './qa.ts';\n\nexport default async function(request: Request): Promise {\n const report = await runShopifyQA();\n const url = new URL(request.url);\n if (url.pathname === '/json') return Response.json(report, {headers:{'Cache-Control':'no-store','X-Content-Type-Options':'nosniff'}});\n const rows = report.checks.map((c:any)=>`${escapeHtml(c.name)}${c.ok?'PASS':'FAIL'}${escapeHtml(c.detail)}`).join('');\n return new Response(`God Matters Commerce QA

God Matters Commerce Manager QA

${report.ok?'PASS':'FAIL'} · ${report.passed}/${report.total} checks passed · ${escapeHtml(report.finishedAt)}

Target: ${escapeHtml(report.target)}. This monitor uses non-destructive production checks only.

${rows}

Check	Result	Detail

JSON report

`,{status:report.ok?200:503,headers:{'Content-Type':'text/html; charset=utf-8','Cache-Control':'no-store','X-Content-Type-Options':'nosniff'}});\n}\nfunction escapeHtml(v:unknown){return String(v??'').replace(/&/g,'&').replace(//g,'>').replace(/\"/g,'"').replace(/'/g,''');}\n","deleted",false,"label",[19],{"_33":81,"_13":82,"_35":83,"_37":-5,"_38":39,"_40":84,"_42":43,"_44":85,"_17":46,"_47":24,"_49":86,"_51":52,"_53":-5,"_66":87,"_18":88},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":78,"_17":46,"_47":48,"_49":50,"_51":52,"_53":14,"_66":79,"_18":80},{"_33":69,"_13":70,"_35":71,"_37":-5,"_38":39,"_40":72,"_42":43,"_44":73,"_17":46,"_47":74,"_49":75,"_51":52,"_53":-5,"_66":76,"_18":77},{"_33":59,"_13":60,"_35":61,"_37":-5,"_38":39,"_40":62,"_42":43,"_44":63,"_17":46,"_47":64,"_49":65,"_51":52,"_53":-5,"_66":67,"_18":68},"bfd30328-f89d-4351-a17b-806c23ab9ba4","qa.ts","fd28f898-adbb-11f1-8e04-1607ee4eb77e",2,["D",1789115834282],"script","const TARGET='https://god-matters-commerce.val.run';\n\ntype Check={name:string;ok:boolean;detail:string;ms:number};\ntype Report={ok:boolean;target:string;startedAt:string;finishedAt:string;passed:number;failed:number;total:number;checks:Check[]};\n\nasync function timed(name:string,fn:()=>Promise):Promise{\n const start=Date.now();\n try{return {name,ok:true,detail:await fn(),ms:Date.now()-start};}\n catch(e){return {name,ok:false,detail:e instanceof Error?e.message:String(e),ms:Date.now()-start};}\n}\nfunction must(condition:unknown,message:string){if(!condition)throw new Error(message);}\nasync function req(path:string,init:RequestInit={}){\n const r=await fetch(TARGET+path,{redirect:'manual',...init});\n const text=await r.text();\n return {r,text,json:()=>{try{return JSON.parse(text)}catch{return null}}};\n}\nfunction expectStatus(actual:number,allowed:number[],context:string){must(allowed.includes(actual),`${context}: expected ${allowed.join('/')}, got ${actual}`);}\nfunction hasNoSecrets(text:string){\n const lowered=text.toLowerCase();\n const suspicious=['client_secret','access_token\":\"','refresh_token\":\"','stripe_webhook_secret','api_key\":\"','authorization\":\"bearer'];\n for(const x of suspicious)must(!lowered.includes(x),`response appears to expose ${x}`);\n}\n\nexport async function runShopifyQA():Promise{\n const startedAt=new Date().toISOString();\n const checks:Promise[]=[];\n checks.push(timed('Health endpoint',async()=>{const {r,text,json}=await req('/health');expectStatus(r.status,[200],'health');const j=json();must(j?.ok===true,'health ok flag missing');must(j?.name==='God Matters Commerce Manager','unexpected app name');must(typeof j?.version==='string','version missing');must(j?.provisioningMode==='multi-tenant','multi-tenant mode missing');must(j?.billingProvider==='Shopify','Shopify billing provider missing');must(j?.features?.includes('stripe-launch-reservation'),'$19 reservation feature missing');must(j?.features?.includes('first-sale-shopify-registration-funding-trigger'),'first-sale funding trigger missing');must(j?.features?.includes('shopify-write-provisioning'),'write provisioning feature missing');must(j?.features?.includes('cj-us-supplier-connection'),'CJ feature missing');hasNoSecrets(text);return `HTTP 200 · version ${j.version} · ${j.features.length} declared features`; }));\n checks.push(timed('Public capabilities contract',async()=>{const {r,text,json}=await req('/api/capabilities');expectStatus(r.status,[200],'capabilities');const j=json();must(j?.name==='God Matters Commerce Manager','name mismatch');must(Array.isArray(j?.features)&&j.features.length>=5,'features incomplete');must(Array.isArray(j?.limitations)&&j.limitations.length>=3,'limitations incomplete');hasNoSecrets(text);return `${j.features.length} features · ${j.limitations.length} limitations`; }));\n checks.push(timed('Store package catalog',async()=>{const {r,json}=await req('/api/store-packages');expectStatus(r.status,[200],'packages');const j=json();const list=j?.packages;must(Array.isArray(list),'packages missing');const s=JSON.stringify(list);for(const key of ['launch20','grow50','business100','scale200','plusGrowth'])must(s.includes(key),`missing package ${key}`);for(const price of [79,149,249,399,999])must(s.includes(String(price)),`missing price ${price}`);return '20/50/100/200 + Plus package definitions present'; }));\n checks.push(timed('AI subscription plan contract',async()=>{const {r,json}=await req('/api/plans');expectStatus(r.status,[200],'plans');const j=json();must(j?.billingProvider==='Shopify','billing provider mismatch');must(j?.trialDays===14,'trial length mismatch');must(j?.plans?.starter?.price===4.99,'Starter price mismatch');must(j?.plans?.growth?.price===9.99,'Growth price mismatch');must(j?.plans?.pro?.price===19.99,'Pro price mismatch');return 'Starter/Growth/Pro prices and 14-day trial match'; }));\n checks.push(timed('$19 launch entry page',async()=>{const {r,text}=await req('/start');expectStatus(r.status,[200],'start');must(text.includes('$19'),'$19 text missing');must(text.includes('buy.stripe.com'),'Stripe checkout link missing');must(text.toLowerCase().includes('credited'),'credit disclosure missing');return 'Reservation CTA, Stripe link and credit disclosure present'; }));\n checks.push(timed('Embedded Shopify app shell',async()=>{const {r,text}=await req('/shopify/app');expectStatus(r.status,[200],'embedded app');for(const token of ['data-store-package=\"launch20\"','data-store-package=\"grow50\"','data-store-package=\"business100\"','data-store-package=\"scale200\"','data-store-package=\"plusGrowth\"','id=\"approve-scopes\"','id=\"build-core\"','id=\"connect-cj\"','id=\"start-auto-build\"'])must(text.includes(token),`missing UI control ${token}`);must(text.includes('app-bridge.js'),'Shopify App Bridge missing');return 'Package, permissions, core-build, CJ and catalog controls present'; }));\n checks.push(timed('Policy/support pages',async()=>{for(const p of ['/privacy','/terms','/support']){const {r,text}=await req(p);expectStatus(r.status,[200],p);must(text.length>500,`${p} unexpectedly short`);}return 'Privacy, terms and support are available'; }));\n checks.push(timed('Static assets',async()=>{for(const p of ['/assets/app.css','/assets/app.js','/assets/embedded.js']){const {r,text}=await req(p);expectStatus(r.status,[200],p);must(text.length>100,`${p} unexpectedly short`);must((r.headers.get('x-content-type-options')||'').toLowerCase()==='nosniff',`${p} nosniff missing`);}return 'CSS, standalone JS and embedded JS load with nosniff'; }));\n checks.push(timed('Security headers',async()=>{const {r}=await req('/shopify/app');const csp=r.headers.get('content-security-policy')||'';must(csp.includes('frame-ancestors https://admin.shopify.com https://*.myshopify.com'),'embedded frame policy mismatch');must((r.headers.get('x-content-type-options')||'').toLowerCase()==='nosniff','nosniff missing');must((r.headers.get('cache-control')||'').includes('no-store'),'no-store missing');return 'CSP, frame-ancestors, no-store and nosniff present'; }));\n checks.push(timed('Pricing calculation',async()=>{const {r,json}=await req('/api/price',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({productCost:100,supplierShipping:20,customerShipping:10,feePercent:5,targetMarginPercent:20,currency:'USD'})});expectStatus(r.status,[200],'price');const j=json();must(j?.itemPrice===150,'unexpected item price');must(j?.totalCustomerPayment===160,'unexpected customer payment');must(j?.estimatedProfit>0,'profit estimate missing');return 'Known pricing fixture returns $150 item / $160 total'; }));\n checks.push(timed('Pricing validation rejects unsafe input',async()=>{const {r}=await req('/api/price',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({productCost:-1})});expectStatus(r.status,[400],'negative price');return 'Negative product cost rejected with HTTP 400'; }));\n checks.push(timed('Catalog draft remains unpublished',async()=>{const body={items:[{title:'QA Test Product',description:'QA only',vendor:'QA',productType:'test',sku:'QA-001',tags:['qa'],pricing:{productCost:10,currency:'USD'}}],includeShopifyCsv:true};const {r,text,json}=await req('/api/catalog',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(body)});expectStatus(r.status,[200],'catalog');const j=json();must(typeof j?.shopifyCsv==='string','CSV missing');must(j.shopifyCsv.toLowerCase().includes('draft'),'CSV is not draft');must(j.shopifyCsv.includes('0'),'zero-inventory marker missing');must(!text.toLowerCase().includes('