@biffo/cli 0.248.2 → 0.249.1

package/_skeletons/sibling-template/apps/frontend/package.json

@@ -13,6 +13,7 @@
     "e2e": "playwright test"
   },
   "dependencies": {
+    "@biffo/design-tokens": "^0.248.2",
     "amazon-cognito-identity-js": "^6.3.12",
     "next": "^15.5.22",
     "react": "^19.0.0",

package/_skeletons/sibling-template/apps/frontend/pnpm-lock.yaml

@@ -14,6 +14,9 @@ importers:
 
   .:
     dependencies:
+      '@biffo/design-tokens':
+        specifier: ^0.248.2
+        version: 0.248.2
       amazon-cognito-identity-js:
         specifier: ^6.3.12
         version: 6.3.18
@@ -189,6 +192,9 @@ packages:
     resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
     engines: {node: '>=6.9.0'}
 
+  '@biffo/design-tokens@0.248.2':
+    resolution: {integrity: sha512-tIj3qlIcf75pAnVI5JjVVCzrO2fqSzELrKSMPE8+/jTPYytcaMDYa0ZLMJu6HOVQG7+BkkBt/giugCKT4A/ucg==}
+
   '@bramus/specificity@2.4.2':
     resolution: {integrity: sha512-ctxtJ/eA+t+6q2++vj5j7FYX3nRu311q1wfYH3xjlLOsczhlhxAg2FWNUXhpGvAw3BWo1xBcvOV6/YLc2r5FJw==}
     hasBin: true
@@ -2771,6 +2777,8 @@ snapshots:
       '@babel/helper-string-parser': 7.29.7
       '@babel/helper-validator-identifier': 7.29.7
 
+  '@biffo/design-tokens@0.248.2': {}
+
   '@bramus/specificity@2.4.2':
     dependencies:
       css-tree: 3.2.1
@@ -3966,8 +3974,8 @@ snapshots:
       '@typescript-eslint/parser': 8.62.1(eslint@9.39.4)(typescript@5.9.3)
       eslint: 9.39.4
       eslint-import-resolver-node: 0.3.10
-      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.4)
-      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4)
+      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4)
+      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4)
       eslint-plugin-jsx-a11y: 6.10.2(eslint@9.39.4)
       eslint-plugin-react: 7.37.5(eslint@9.39.4)
       eslint-plugin-react-hooks: 5.2.0(eslint@9.39.4)
@@ -3986,7 +3994,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.4):
+  eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4):
     dependencies:
       '@nolyfill/is-core-module': 1.0.39
       debug: 4.4.3
@@ -3997,22 +4005,22 @@ snapshots:
       tinyglobby: 0.2.17
       unrs-resolver: 1.12.2
     optionalDependencies:
-      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4)
+      eslint-plugin-import: 2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4)
     transitivePeerDependencies:
       - supports-color
 
-  eslint-module-utils@2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4):
+  eslint-module-utils@2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4):
     dependencies:
       debug: 3.2.7
     optionalDependencies:
       '@typescript-eslint/parser': 8.62.1(eslint@9.39.4)(typescript@5.9.3)
       eslint: 9.39.4
       eslint-import-resolver-node: 0.3.10
-      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0)(eslint@9.39.4)
+      eslint-import-resolver-typescript: 3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4)
     transitivePeerDependencies:
       - supports-color
 
-  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4):
+  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4):
     dependencies:
       '@rtsao/scc': 1.1.0
       array-includes: 3.1.9
@@ -4023,7 +4031,7 @@ snapshots:
       doctrine: 2.1.0
       eslint: 9.39.4
       eslint-import-resolver-node: 0.3.10
-      eslint-module-utils: 2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1)(eslint@9.39.4)
+      eslint-module-utils: 2.14.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint-import-resolver-node@0.3.10)(eslint-import-resolver-typescript@3.10.1(eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.62.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4))(eslint@9.39.4))(eslint@9.39.4)
       hasown: 2.0.4
       is-core-module: 2.16.2
       is-glob: 4.0.3

package/_skeletons/sibling-template/apps/frontend/src/app/globals.css

@@ -1,12 +1,19 @@
-:root {
-  color-scheme: light;
-}
+/* This sibling's visual language comes from `@biffo/design-tokens`, the
+ * single definition shared by the portal, other siblings and plugin
+ * frontends (see packages/design-tokens/tokens.css in biffo-template for the
+ * full rationale). Do NOT redeclare `--bg`, `--brand` etc. locally here — a
+ * local copy is exactly how three different brand blues shipped across
+ * surfaces a founder sees in one page. Add product-specific styles below the
+ * import, expressed in terms of these variables, so re-skinning the product
+ * is a one-line change upstream rather than a hunt through every consumer.
+ */
+@import '@biffo/design-tokens/tokens.css';
 
 body {
   margin: 0;
   font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-  background: #f9fafb;
-  color: #111827;
+  background: var(--bg-subtle);
+  color: var(--text);
 }
 
 .center-screen {
@@ -22,8 +29,8 @@ body {
   width: 2rem;
   height: 2rem;
   border-radius: 9999px;
-  border: 4px solid #d1d5db;
-  border-top-color: #2563eb;
+  border: 4px solid var(--border-strong);
+  border-top-color: var(--brand);
   animation: spin 0.8s linear infinite;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biffo/cli",
-  "version": "0.248.2",
+  "version": "0.249.1",
   "description": "Biffo project scaffolding CLI",
   "license": "MIT",
   "type": "module",

package/scripts/verify.sh

@@ -411,8 +411,27 @@ else
   NO_CI=1
 fi
 
-if [ -n "$CI_YML_UNREADABLE" ]; then
-  printf '\n\033[31mverify: CANNOT TELL - .github/workflows/ci.yml exists but could not be read\033[0m\n'
+# release-guards.yml (#1319): the "Release Guards" job's own trigger needed
+# `edited` added to it (so a PR title/body correction re-evaluates
+# automatically), and giving that trigger to the WHOLE build matrix in
+# ci.yml would re-run every heavy job on every description tweak -- so the
+# job moved to this second file instead (see that file's own header). Its
+# absence does NOT mean "no CI to mirror" -- ci.yml alone is still a real CI
+# and NO_CI must not fire just because a repo has not adopted the split (a
+# sibling never will; an instance not yet upgraded past #1319 has not yet).
+# But if it EXISTS and cannot be READ, that is the identical #1218 shape as
+# ci.yml itself, and ci_has() must search it too or "practices-monotonic"
+# (moved into it) would silently stop being locally mirrored the moment it
+# left ci.yml -- covered less than verify.sh claims, with nothing saying so.
+RELEASE_GUARDS_YML_UNREADABLE=""
+if [ -f .github/workflows/release-guards.yml ] && [ ! -r .github/workflows/release-guards.yml ]; then
+  RELEASE_GUARDS_YML_UNREADABLE=1
+fi
+
+if [ -n "$CI_YML_UNREADABLE" ] || [ -n "$RELEASE_GUARDS_YML_UNREADABLE" ]; then
+  printf '\n\033[31mverify: CANNOT TELL - a core workflow file exists but could not be read\033[0m\n'
+  [ -n "$CI_YML_UNREADABLE" ] && printf '  .github/workflows/ci.yml\n'
+  [ -n "$RELEASE_GUARDS_YML_UNREADABLE" ] && printf '  .github/workflows/release-guards.yml\n'
   printf 'Permissions, a partial checkout, or a filesystem error -- not "no CI to\n'
   printf 'mirror" (that is a missing ci.yml, handled separately, and does not\n'
   printf 'block). Every check gated on ci_has() would silently be skipped and the\n'
@@ -424,7 +443,8 @@ fi
 
 ci_has() {
   [ -n "${NO_CI:-}" ] && return 0
-  grep -qE "$1" .github/workflows/ci.yml
+  grep -qE "$1" .github/workflows/ci.yml && return 0
+  [ -f .github/workflows/release-guards.yml ] && grep -qE "$1" .github/workflows/release-guards.yml
 }
 
 have_script() {