init project

scripts/validate-prohibited-content.mjs

@@ -0,0 +1,28 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { fail, pass, repositoryRoot, walk } from './lib.mjs';
+
+const sourceFiles = await walk(path.join(repositoryRoot, 'src'), (file) =>
+  /\.(?:ts|tsx|js|jsx|css)$/.test(file),
+);
+const errors = [];
+const prohibited = [
+  { label: 'placeholder domain', pattern: /example\.(?:com|org|net)|placeholder\.(?:com|test)/i },
+  { label: 'simulated submission', pattern: /simulate(?:d|Submission)|fakeSubmit/i },
+  { label: 'research-only state backdoor', pattern: /[?&](?:state|scenario|fixture)=/i },
+  { label: 'prototype research logger', pattern: /researchLog|prototypeLog/i },
+];
+for (const file of sourceFiles) {
+  const text = await readFile(file, 'utf8');
+  for (const rule of prohibited) {
+    if (rule.pattern.test(text))
+      errors.push(`${path.relative(repositoryRoot, file)} contains ${rule.label}.`);
+  }
+}
+
+if (errors.length > 0) fail(errors);
+else
+  pass(
+    'Runtime source contains no placeholder destination, simulated submission, ' +
+      'or research-only backdoor.',
+  );