@agentsfleet/orly 0.10.0 → 0.10.1

package/audits/design-tokens.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
-# design-tokens.sh — enforce design-system token discipline across
-# ui/packages/{app,website}/**/*.tsx.
+# design-tokens.sh — enforce design-system token discipline and flat fills
+# across the app, website, and shared design system.
 #
 # Dispatch façade: dispatch/write_ts_adhere_bun.md (Design Tokens / DESIGN TOKEN GATE)
 # Fires in: CONFORM (via `make harness-verify` in `agentsfleet`).
@@ -62,6 +62,23 @@ PATTERNS=(
   '(text|bg|border)-(red|blue|green|yellow|purple|indigo|violet|pink|orange|gray|slate|zinc|neutral)-[0-9]:::use semantic tokens (text-destructive, text-error, text-success, …)'
 )
 
+readonly GRADIENT_REGEX='(repeating-)?(linear|radial|conic)-gradient[[:space:]]*\('
+
+# Consumers may select a font role, but only the design system defines it.
+check_font_ownership() {
+  local f="$1"
+  case "$f" in ui/packages/design-system/*) return ;; esac
+  awk '
+    {
+      source = $0
+      gsub(/font-family[[:space:]]*:[[:space:]]*var\(--ff-(sans|mono|display)\)/, "")
+      invalid = /font-family[[:space:]]*:|fontFamily[[:space:]]*:[[:space:]]*["\047]|--(ff|font)-(sans|mono|display)[[:space:]]*:|font-\[/
+      if (FILENAME ~ /^ui\/packages\/app\// && /font-display|DisplayXL|DisplayLG/) invalid = 1
+      if (invalid) printf "%s:%d:%s\n", FILENAME, FNR, source
+    }
+  ' "$f"
+}
+
 # ── File scope ───────────────────────────────────────────────────────────
 in_scope() {
   local f="$1"
@@ -70,8 +87,17 @@ in_scope() {
     *tests/e2e/*) return 1 ;;
     ui/packages/app/*.tsx|ui/packages/app/*.jsx) return 0 ;;
     ui/packages/website/*.tsx|ui/packages/website/*.jsx) return 0 ;;
-    ui/packages/app/**/*.tsx|ui/packages/app/**/*.jsx) return 0 ;;
-    ui/packages/website/**/*.tsx|ui/packages/website/**/*.jsx) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+in_gradient_scope() {
+  local f="$1"
+  case "$f" in
+    *.test.*|*.spec.*|*/tests/*|*/coverage/*|*/dist/*|*/.next/*|*/node_modules/*) return 1 ;;
+    ui/packages/app/*.css|ui/packages/app/*.js|ui/packages/app/*.jsx|ui/packages/app/*.mjs|ui/packages/app/*.ts|ui/packages/app/*.tsx) return 0 ;;
+    ui/packages/website/*.css|ui/packages/website/*.js|ui/packages/website/*.jsx|ui/packages/website/*.mjs|ui/packages/website/*.ts|ui/packages/website/*.tsx) return 0 ;;
+    ui/packages/design-system/*.css|ui/packages/design-system/*.js|ui/packages/design-system/*.jsx|ui/packages/design-system/*.mjs|ui/packages/design-system/*.ts|ui/packages/design-system/*.tsx) return 0 ;;
     *) return 1 ;;
   esac
 }
@@ -79,12 +105,14 @@ in_scope() {
 case "$MODE" in
   --staged|staged)
     FILES=$(git diff --cached --name-only --diff-filter=ACMRT 2>/dev/null || true)
+    GRADIENT_CANDIDATES="$FILES"
     ;;
   --all|all)
     # `git ls-files` reports the index, which includes staged content —
     # so pre-commit-style invocations see staged-but-not-committed files
     # without needing a `--staged` flag.
     FILES=$(git ls-files -- 'ui/packages/app/*.tsx' 'ui/packages/app/*.jsx' 'ui/packages/website/*.tsx' 'ui/packages/website/*.jsx' 2>/dev/null || true)
+    GRADIENT_CANDIDATES=$(git ls-files -- ui/packages/app ui/packages/website ui/packages/design-system 2>/dev/null || true)
     ;;
   *)
     echo "usage: $0 [--all|--staged]" >&2
@@ -127,10 +155,34 @@ if [ "${#SCOPED_FILES[@]}" -gt 0 ]; then
   done
 fi
 
+GRADIENT_FILES=()
+while IFS= read -r f; do
+  [ -z "$f" ] && continue
+  [ ! -f "$f" ] && continue
+  in_gradient_scope "$f" || continue
+  GRADIENT_FILES+=("$f")
+  while IFS= read -r match; do
+    [ -z "$match" ] && continue
+    printf '%s\n  -> define fonts in design-system tokens.css; use sans for app UI and mono for technical values\n' "$match"
+    SEEN_FILES_LIST="${SEEN_FILES_LIST}${f}"$'\n'
+    FAIL=1
+  done < <(check_font_ownership "$f")
+done <<< "$GRADIENT_CANDIDATES"
+
+if [ "${#GRADIENT_FILES[@]}" -gt 0 ]; then
+  while IFS= read -r match; do
+    [ -z "$match" ] && continue
+    f="${match%%:*}"
+    printf '%s\n  -> use a solid design-system color token; gradients are forbidden\n' "$match"
+    SEEN_FILES_LIST="${SEEN_FILES_LIST}${f}"$'\n'
+    FAIL=1
+  done < <(grep -nHE "$GRADIENT_REGEX" "${GRADIENT_FILES[@]}" 2>/dev/null || true)
+fi
+
 FILES_WITH_VIOLATIONS=$(printf '%s' "$SEEN_FILES_LIST" | sort -u | grep -c . || true)
 
 if [ "$FAIL" = "0" ]; then
-  echo "OK: design-token discipline — no arbitraries that have a token equivalent (mode=$MODE)"
+  echo "OK: design-token discipline — named utilities and flat fills verified (mode=$MODE)"
   exit 0
 fi
 

package/dispatch/write_changelog.md

@@ -40,8 +40,10 @@ a gate skip.
   names, money amounts stay verbatim.
 - **Internal cleanup** gets aggressive trimming, not a paragraph.
 - **History is archived, not rewritten** — past entries are an immutable record.
-- **Rate constants** stay pinned across the three files (`tenant_billing.zig`,
-  `rates.ts`, `rates.mdx`) — a changelog money/rate claim must match all three.
+- **Rate constants** are pinned by `cross_runtime_rates.rs`, which reads the
+  app and Command-Line Interface (CLI) mirrors against the Rust constant. A
+  changelog money or rate claim must match those, and `rates.mdx` in the docs
+  repository, which no test can reach.
 
 ## Required output (self-audit line before committing the changelog)
 

package/docs/CHANGELOG_VOICE.md

@@ -14,5 +14,5 @@ Editing `~/Projects/docs/changelog.mdx` or any other Mintlify `<Update>` block.
 - **Internal cleanup / refactor entries get the most aggressive trimming.** One lead paragraph + one bullet list. Skip "Test coverage" sections unless the test count is the headline. Indy's exact direction: *"Keep internal code cleanup, refactor to a minimal."*
 - **Never drop load-bearing facts.** Error codes (`UZ-AUTH-003`), endpoint paths + method + body shape + status code, env var names + defaults, schema column / table names, CLI subcommand + flag names, migration steps, money amounts. Tighten prose, not meaning.
 - **Historical entries are archives.** Brevity-pass them; never rewrite the past. A typo correction (e.g. `$0.001` → `$0.01` when it was never true) is allowed and must be called out in the commit message.
-- **Rate constants flow through three pinned files only:** `rustd/crates/afd_billing/src/nanos.rs`, `ui/packages/website/src/lib/rates.ts`, `~/Projects/docs/snippets/rates.mdx`. Bumping a rate requires a paired Pull Request (PR) across the docs repo — there is no automated guard. In `*.mdx`, use `import { STARTER_CREDIT, EVENT_RATE, STAGE_RATE } from "/snippets/rates.mdx"` instead of hand-typing `$5`.
+- **Rate constants stay pinned across the runtime surfaces, and a test says so.** `rustd/crates/afd_billing/tests/cross_runtime_rates.rs` reads `ui/packages/app/lib/types.ts` and `cli/src/constants/billing.ts` and fails when either drifts from `rustd/crates/afd_billing/src/nanos.rs` — a test beside the constant it defends, not a gate nothing invokes. Public docs are the one surface it cannot reach: when a rate changes, update `~/Projects/docs/snippets/rates.mdx` in a paired Pull Request (PR). In `*.mdx`, import its named values rather than hand-typing money amounts.
 - **The Mintlify reference Indy pasted (May 1 / May 8 entries) is canonical voice.** Mirror its rhythm, not its product nouns.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsfleet/orly",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Repository-scoped engineering harness: renders agent rules, materialises the gates that enforce them, and proves the PR boundary \u2014 for any coding agent.",
   "license": "MIT",
   "type": "module",